@crowdedkingdoms/crowdyjs 7.1.1 → 8.0.1

package/dist/domains/organizations.d.ts

@@ -101,13 +101,13 @@ export declare class OrganizationsAPI {
      * Mint a new org API token (for server-side studio backends). Requires the
      * `manage_tokens` org permission. The plaintext secret is returned **once**.
      *
-     * @param input - {@link CreateOrgTokenInput}: `orgId`, `name`, optional
-     *   `permissions` and `expiresAt`.
+     * @param input - {@link CreateOrgTokenInput}: `orgId`, optional `label` and
+     *   `expiresAt`.
      * @returns The created token including its one-time plaintext secret.
      */
     createToken(input: CreateOrgTokenInput): Promise<CreateOrgTokenMutation['createOrgToken']>;
     /**
-     * Update an org token's metadata (name / permissions / expiry). Requires the
+     * Update an org token's metadata (label / active flag / expiry). Requires the
      * `manage_tokens` org permission.
      *
      * @param orgTokenId - Numeric token id.

package/dist/domains/organizations.js

@@ -142,8 +142,8 @@ export class OrganizationsAPI {
      * Mint a new org API token (for server-side studio backends). Requires the
      * `manage_tokens` org permission. The plaintext secret is returned **once**.
      *
-     * @param input - {@link CreateOrgTokenInput}: `orgId`, `name`, optional
-     *   `permissions` and `expiresAt`.
+     * @param input - {@link CreateOrgTokenInput}: `orgId`, optional `label` and
+     *   `expiresAt`.
      * @returns The created token including its one-time plaintext secret.
      */
     async createToken(input) {
@@ -153,7 +153,7 @@ export class OrganizationsAPI {
         return data.createOrgToken;
     }
     /**
-     * Update an org token's metadata (name / permissions / expiry). Requires the
+     * Update an org token's metadata (label / active flag / expiry). Requires the
      * `manage_tokens` org permission.
      *
      * @param orgTokenId - Numeric token id.

package/dist/domains/portal.d.ts

@@ -60,6 +60,30 @@ export declare class BrowserSessionPkceStore implements PkceStore {
     set(state: string, verifier: string): void;
     remove(state: string): void;
 }
+export interface PortalConsentState {
+    appId: string;
+    appName: string | null;
+    /** True for first-party/trusted apps (consent always skipped). */
+    trusted: boolean;
+    alreadyGranted: boolean;
+    /** True if the Overworld must show a consent screen before minting a code. */
+    consentRequired: boolean;
+}
+export interface AppAuthorizationGrant {
+    grantId: string;
+    appId: string;
+    appName: string | null;
+    scopes: string[];
+    status: string;
+    grantedAt: string;
+    revokedAt: string | null;
+}
+/** Thrown by {@link PortalAPI.handleAuthorizeRequest} when the user must consent. */
+export declare class PortalConsentRequiredError extends Error {
+    readonly appId: string;
+    readonly appName: string | null;
+    constructor(appId: string, appName: string | null);
+}
 export interface BeginEntryParams {
     /** Target app id (decimal string). */
     appId: string;
@@ -105,6 +129,21 @@ export declare class PortalAPI {
      * through the Overworld. Requires the current app token on this session.
      */
     refresh(): Promise<AppTokenResponse>;
+    /** Whether portaling into an app needs a consent prompt (Overworld side). */
+    getConsent(appId: string): Promise<PortalConsentState>;
+    /** Record the user's consent for an app (call from the consent screen). */
+    authorizeApp(appId: string, scopes?: string[]): Promise<AppAuthorizationGrant>;
+    /** Revoke a prior authorization; also revokes the user's live tokens for it. */
+    revokeAppAuthorization(appId: string): Promise<boolean>;
+    /** The user's active app authorizations ("connected apps"). */
+    myAuthorizedApps(): Promise<AppAuthorizationGrant[]>;
+    /** Register/update an app's portal client settings (requires manage_apps). */
+    setAppClientSettings(input: {
+        appId: string;
+        redirectUris?: string[];
+        clientType?: string;
+        launchUrl?: string;
+    }): Promise<PortalConsentState>;
     /**
      * Destination-game side, step 1: generate a PKCE pair, persist the verifier,
      * and return the Overworld authorize URL to navigate to. The caller does
@@ -116,7 +155,10 @@ export declare class PortalAPI {
      * game's params from the URL, mints a code with the session token, and returns
      * the URL to redirect the player back to (carrying `code` + `state`).
      */
-    handleAuthorizeRequest(search?: string): Promise<string>;
+    handleAuthorizeRequest(search?: string, options?: {
+        grantConsent?: boolean;
+        scopes?: string[];
+    }): Promise<string>;
     /**
      * Destination-game side, step 3: read `code` + `state` from the callback URL,
      * load the stored verifier, exchange for an app token, and store it. Returns

package/dist/domains/portal.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"portal.d.ts","sourceRoot":"","sources":["../../src/domains/portal.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAIH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAGlD,MAAM,WAAW,gBAAgB;IAC/B,gFAAgF;IAChF,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,0DAA0D;IAC1D,KAAK,EAAE,MAAM,CAAC;IACd,wEAAwE;IACxE,SAAS,EAAE,MAAM,CAAC;IAClB,0EAA0E;IAC1E,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,sDAAsD;IACtD,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,sDAAsD;IACtD,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,8EAA8E;AAC9E,MAAM,WAAW,SAAS;IACxB,GAAG,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC3D,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3D,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7C;AAED,iFAAiF;AACjF,qBAAa,uBAAwB,YAAW,SAAS;IAC3C,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,SAAmB;IACtD,OAAO,CAAC,EAAE;IAGV,GAAG,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAGjC,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI;IAG1C,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;CAG5B;AAqCD,MAAM,WAAW,gBAAgB;IAC/B,sCAAsC;IACtC,KAAK,EAAE,MAAM,CAAC;IACd,sGAAsG;IACtG,YAAY,EAAE,MAAM,CAAC;IACrB,8EAA8E;IAC9E,WAAW,EAAE,MAAM,CAAC;IACpB,oEAAoE;IACpE,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,qBAAa,SAAS;IAElB,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,SAAS;gBAFT,UAAU,EAAE,aAAa,EACzB,OAAO,EAAE,YAAY,EACrB,SAAS,GAAE,SAAyC;IAGvE;;;;;OAKG;IACG,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAO5D;;;;OAIG;IACG,uBAAuB,CAAC,MAAM,EAAE;QACpC,KAAK,EAAE,MAAM,CAAC;QACd,aAAa,EAAE,MAAM,CAAC;QACtB,mBAAmB,CAAC,EAAE,MAAM,CAAC;QAC7B,WAAW,EAAE,MAAM,CAAC;KACrB,GAAG,OAAO,CAAC,uBAAuB,CAAC;IAQpC;;;;OAIG;IACG,YAAY,CAChB,IAAI,EAAE,MAAM,EACZ,YAAY,CAAC,EAAE,MAAM,GACpB,OAAO,CAAC,gBAAgB,CAAC;IAQ5B;;;;OAIG;IACG,OAAO,IAAI,OAAO,CAAC,gBAAgB,CAAC;IAQ1C;;;;OAIG;IACG,UAAU,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,MAAM,CAAC;IAa3D;;;;OAIG;IACG,sBAAsB,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAyB9D;;;;;OAKG;IACG,aAAa,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;CAUvE"}
+{"version":3,"file":"portal.d.ts","sourceRoot":"","sources":["../../src/domains/portal.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAIH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAGlD,MAAM,WAAW,gBAAgB;IAC/B,gFAAgF;IAChF,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,0DAA0D;IAC1D,KAAK,EAAE,MAAM,CAAC;IACd,wEAAwE;IACxE,SAAS,EAAE,MAAM,CAAC;IAClB,0EAA0E;IAC1E,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,sDAAsD;IACtD,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,sDAAsD;IACtD,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,8EAA8E;AAC9E,MAAM,WAAW,SAAS;IACxB,GAAG,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC3D,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3D,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7C;AAED,iFAAiF;AACjF,qBAAa,uBAAwB,YAAW,SAAS;IAC3C,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,SAAmB;IACtD,OAAO,CAAC,EAAE;IAGV,GAAG,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAGjC,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI;IAG1C,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;CAG5B;AAqCD,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,kEAAkE;IAClE,OAAO,EAAE,OAAO,CAAC;IACjB,cAAc,EAAE,OAAO,CAAC;IACxB,8EAA8E;IAC9E,eAAe,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,qFAAqF;AACrF,qBAAa,0BAA2B,SAAQ,KAAK;aAEjC,KAAK,EAAE,MAAM;aACb,OAAO,EAAE,MAAM,GAAG,IAAI;gBADtB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,GAAG,IAAI;CAKzC;AA4CD,MAAM,WAAW,gBAAgB;IAC/B,sCAAsC;IACtC,KAAK,EAAE,MAAM,CAAC;IACd,sGAAsG;IACtG,YAAY,EAAE,MAAM,CAAC;IACrB,8EAA8E;IAC9E,WAAW,EAAE,MAAM,CAAC;IACpB,oEAAoE;IACpE,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,qBAAa,SAAS;IAElB,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,SAAS;gBAFT,UAAU,EAAE,aAAa,EACzB,OAAO,EAAE,YAAY,EACrB,SAAS,GAAE,SAAyC;IAGvE;;;;;OAKG;IACG,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAO5D;;;;OAIG;IACG,uBAAuB,CAAC,MAAM,EAAE;QACpC,KAAK,EAAE,MAAM,CAAC;QACd,aAAa,EAAE,MAAM,CAAC;QACtB,mBAAmB,CAAC,EAAE,MAAM,CAAC;QAC7B,WAAW,EAAE,MAAM,CAAC;KACrB,GAAG,OAAO,CAAC,uBAAuB,CAAC;IAQpC;;;;OAIG;IACG,YAAY,CAChB,IAAI,EAAE,MAAM,EACZ,YAAY,CAAC,EAAE,MAAM,GACpB,OAAO,CAAC,gBAAgB,CAAC;IAQ5B;;;;OAIG;IACG,OAAO,IAAI,OAAO,CAAC,gBAAgB,CAAC;IAQ1C,6EAA6E;IACvE,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAK5D,2EAA2E;IACrE,YAAY,CAChB,KAAK,EAAE,MAAM,EACb,MAAM,CAAC,EAAE,MAAM,EAAE,GAChB,OAAO,CAAC,qBAAqB,CAAC;IAOjC,gFAAgF;IAC1E,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAO7D,+DAA+D;IACzD,gBAAgB,IAAI,OAAO,CAAC,qBAAqB,EAAE,CAAC;IAK1D,8EAA8E;IACxE,oBAAoB,CAAC,KAAK,EAAE;QAChC,KAAK,EAAE,MAAM,CAAC;QACd,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;QACxB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAS/B;;;;OAIG;IACG,UAAU,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,MAAM,CAAC;IAa3D;;;;OAIG;IACG,sBAAsB,CAC1B,MAAM,CAAC,EAAE,MAAM,EACf,OAAO,CAAC,EAAE;QAAE,YAAY,CAAC,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,GACtD,OAAO,CAAC,MAAM,CAAC;IAoClB;;;;;OAKG;IACG,aAAa,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;CAUvE"}

package/dist/domains/portal.js

@@ -48,6 +48,20 @@ const MintAppTokenDocument = parse(`mutation MintAppToken($input: MintAppTokenIn
 const CreatePortalAuthorizationCodeDocument = parse(`mutation CreatePortalAuthorizationCode($input: CreatePortalAuthorizationCodeInput!) { createPortalAuthorizationCode(input: $input) { code redirectUri expiresAt } }`);
 const ExchangePortalCodeDocument = parse(`mutation ExchangePortalCode($input: ExchangePortalCodeInput!) { exchangePortalCode(input: $input) { ${APP_TOKEN_FIELDS} } }`);
 const RefreshAppTokenDocument = parse(`mutation RefreshAppToken { refreshAppToken { ${APP_TOKEN_FIELDS} } }`);
+/** Thrown by {@link PortalAPI.handleAuthorizeRequest} when the user must consent. */
+export class PortalConsentRequiredError extends Error {
+    constructor(appId, appName) {
+        super(`Consent required for app ${appId}`);
+        this.appId = appId;
+        this.appName = appName;
+        this.name = 'PortalConsentRequiredError';
+    }
+}
+const PortalConsentDocument = parse(`query PortalConsent($appId: BigInt!) { portalConsent(appId: $appId) { appId appName trusted alreadyGranted consentRequired } }`);
+const AuthorizeAppDocument = parse(`mutation AuthorizeApp($input: AuthorizeAppInput!) { authorizeApp(input: $input) { grantId appId status scopes } }`);
+const RevokeAppAuthorizationDocument = parse(`mutation RevokeAppAuthorization($appId: BigInt!) { revokeAppAuthorization(appId: $appId) }`);
+const MyAuthorizedAppsDocument = parse(`query MyAuthorizedApps { myAuthorizedApps { grantId appId appName scopes status grantedAt revokedAt } }`);
+const SetAppClientSettingsDocument = parse(`mutation SetAppClientSettings($input: SetAppClientSettingsInput!) { setAppClientSettings(input: $input) { appId appName trusted consentRequired } }`);
 export class PortalAPI {
     constructor(management, session, pkceStore = new BrowserSessionPkceStore()) {
         this.management = management;
@@ -97,6 +111,38 @@ export class PortalAPI {
         this.session.setToken(data.refreshAppToken.token);
         return data.refreshAppToken;
     }
+    // ----- Consent + connected apps ------------------------------------------
+    /** Whether portaling into an app needs a consent prompt (Overworld side). */
+    async getConsent(appId) {
+        const data = await this.management.request(PortalConsentDocument, { appId });
+        return data.portalConsent;
+    }
+    /** Record the user's consent for an app (call from the consent screen). */
+    async authorizeApp(appId, scopes) {
+        const data = await this.management.request(AuthorizeAppDocument, {
+            input: { appId, scopes },
+        });
+        return data.authorizeApp;
+    }
+    /** Revoke a prior authorization; also revokes the user's live tokens for it. */
+    async revokeAppAuthorization(appId) {
+        const data = await this.management.request(RevokeAppAuthorizationDocument, {
+            appId,
+        });
+        return data.revokeAppAuthorization;
+    }
+    /** The user's active app authorizations ("connected apps"). */
+    async myAuthorizedApps() {
+        const data = await this.management.request(MyAuthorizedAppsDocument);
+        return data.myAuthorizedApps;
+    }
+    /** Register/update an app's portal client settings (requires manage_apps). */
+    async setAppClientSettings(input) {
+        const data = await this.management.request(SetAppClientSettingsDocument, {
+            input,
+        });
+        return data.setAppClientSettings;
+    }
     // ----- Browser PKCE redirect helpers -------------------------------------
     /**
      * Destination-game side, step 1: generate a PKCE pair, persist the verifier,
@@ -120,7 +166,7 @@ export class PortalAPI {
      * game's params from the URL, mints a code with the session token, and returns
      * the URL to redirect the player back to (carrying `code` + `state`).
      */
-    async handleAuthorizeRequest(search) {
+    async handleAuthorizeRequest(search, options) {
         const params = new URLSearchParams(search ?? defaultSearch());
         const appId = params.get('app_id');
         const codeChallenge = params.get('code_challenge');
@@ -130,6 +176,18 @@ export class PortalAPI {
         if (!appId || !codeChallenge || !redirectUri) {
             throw new Error('authorize request missing app_id, code_challenge, or redirect_uri');
         }
+        // Consent gate: trusted apps + already-granted apps proceed silently. For an
+        // untrusted, not-yet-granted app, either record consent (when the user
+        // approved on the consent screen) or signal the caller to show one.
+        const consent = await this.getConsent(appId);
+        if (consent.consentRequired) {
+            if (options?.grantConsent) {
+                await this.authorizeApp(appId, options.scopes);
+            }
+            else {
+                throw new PortalConsentRequiredError(appId, consent.appName);
+            }
+        }
         const result = await this.createAuthorizationCode({
             appId,
             codeChallenge,

package/dist/domains/quotas.d.ts

@@ -47,7 +47,7 @@ export declare class QuotasAPI {
      * Create or update a quota at an org or app scope. Requires `manage_quotas`
      * (super-admin for platform-global quotas).
      *
-     * @param input - {@link SetQuotaInput}: scope ids, `metric`, and `limit`.
+     * @param input - {@link SetQuotaInput}: scope ids, `metric`, and `limitValue`.
      * @returns The created/updated quota.
      */
     set(input: SetQuotaInput): Promise<SetQuotaMutation['setQuota']>;

package/dist/domains/quotas.js

@@ -57,7 +57,7 @@ export class QuotasAPI {
      * Create or update a quota at an org or app scope. Requires `manage_quotas`
      * (super-admin for platform-global quotas).
      *
-     * @param input - {@link SetQuotaInput}: scope ids, `metric`, and `limit`.
+     * @param input - {@link SetQuotaInput}: scope ids, `metric`, and `limitValue`.
      * @returns The created/updated quota.
      */
     async set(input) {

package/dist/domains/udp.d.ts

@@ -77,10 +77,13 @@ export declare class UdpAPI {
     /**
      * Send an actor (player/NPC) state update for spatial replication to nearby
      * chunks. Fire-and-forget; opens a UDP proxy session automatically if none
-     * exists. The applied echo (`ActorUpdateResponse`) and any failure
-     * (`GenericErrorResponse`) arrive asynchronously on {@link subscribe},
-     * correlated by `sequenceNumber`; use {@link sendActorUpdateAndWait} to await
-     * that echo inline.
+     * exists. There is no separate per-request response: the server fans the
+     * update out to every client in the target chunk **including the sender**, so
+     * your own applied update comes back as an `ActorUpdateNotification` carrying
+     * the same `sequenceNumber` (the legacy `ActorUpdateResponse` type is never
+     * emitted). Failures arrive as a `GenericErrorResponse`; both are delivered
+     * asynchronously on {@link subscribe} and correlated by `sequenceNumber`. Use
+     * {@link sendActorUpdateAndWait} to await that self-notification inline.
      *
      * @param input - {@link ActorUpdateRequestInput}:
      *   - `appId` — owning app id (`BigInt` as a decimal string).
@@ -106,17 +109,19 @@ export declare class UdpAPI {
     /**
      * Send an actor update and wait for the server's applied echo. Allocates a
      * `sequenceNumber` when `input.sequenceNumber` is omitted, registers the wait
-     * *before* sending, then resolves with the matching `ActorUpdateResponse`.
-     * Requires an active {@link subscribe} so the echo can be delivered over the
-     * shared WebSocket.
+     * *before* sending, then resolves with the matching notification. Because the
+     * server includes the sender in the chunk fan-out, the echo is your own
+     * `ActorUpdateNotification` with the same `sequenceNumber` (there is no
+     * `ActorUpdateResponse` on the wire). Requires an active {@link subscribe} so
+     * the self-notification can be delivered over the shared WebSocket.
      *
      * @param input - {@link ActorUpdateRequestInput} (see {@link sendActorUpdate}
      *   for field units/encoding). Omit `sequenceNumber` to let the SDK allocate
      *   one.
      * @param options - `timeoutMs`: how long to wait for the echo, in
      *   milliseconds; defaults to the client's realtime `waitTimeoutMs` (5000).
-     * @returns The correlated {@link SpatialNotification} (the `ActorUpdateResponse`
-     *   echo).
+     * @returns The correlated {@link SpatialNotification} (your own
+     *   `ActorUpdateNotification` self-echo).
      * @throws {CrowdyGraphQLError} if the underlying send is rejected.
      * @throws {CrowdyTimeoutError} if the HTTP send leg exceeds the client's
      *   request timeout.
@@ -141,10 +146,13 @@ export declare class UdpAPI {
     }): Promise<SpatialNotification>;
     /**
      * Send a single voxel (block) update for spatial replication to nearby
-     * chunks. Fire-and-forget; opens a UDP proxy session automatically. The
-     * applied echo (`VoxelUpdateResponse`) and failures (`GenericErrorResponse`)
-     * arrive asynchronously on {@link subscribe}; use
-     * {@link sendVoxelUpdateAndWait} to await the echo inline.
+     * chunks. Fire-and-forget; opens a UDP proxy session automatically. There is
+     * no separate per-request response: the change fans out to nearby clients
+     * **including the sender** as a `VoxelUpdateNotification` carrying the same
+     * `sequenceNumber` (the legacy `VoxelUpdateResponse` type is never emitted).
+     * Failures arrive as a `GenericErrorResponse`; both are delivered
+     * asynchronously on {@link subscribe}. Use {@link sendVoxelUpdateAndWait} to
+     * await the self-notification inline.
      *
      * @param input - {@link VoxelUpdateRequestInput}:
      *   - `appId` — owning app id (`BigInt` as a decimal string).
@@ -166,15 +174,18 @@ export declare class UdpAPI {
      */
     sendVoxelUpdate(input: SendVoxelUpdateMutationVariables['input']): Promise<boolean>;
     /**
-     * Send a voxel update and wait for the server's applied `VoxelUpdateResponse`
-     * echo. Allocates a `sequenceNumber` when omitted and requires an active
-     * {@link subscribe}.
+     * Send a voxel update and wait for the server's applied echo. Allocates a
+     * `sequenceNumber` when omitted and requires an active {@link subscribe}.
+     * Because the server includes the sender in the chunk fan-out, the echo is
+     * your own `VoxelUpdateNotification` with the same `sequenceNumber` (there is
+     * no `VoxelUpdateResponse` on the wire).
      *
      * @param input - {@link VoxelUpdateRequestInput} (see {@link sendVoxelUpdate}
      *   for field units/encoding).
      * @param options - `timeoutMs`: echo wait in milliseconds; defaults to the
      *   client's realtime `waitTimeoutMs` (5000).
-     * @returns The correlated {@link SpatialNotification} (`VoxelUpdateResponse`).
+     * @returns The correlated {@link SpatialNotification} (your own
+     *   `VoxelUpdateNotification` self-echo).
      * @throws {CrowdyGraphQLError} if the underlying send is rejected.
      * @throws {CrowdyTimeoutError} if the HTTP send leg times out.
      * @throws {CrowdyRealtimeError} on echo timeout

package/dist/domains/udp.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"udp.d.ts","sourceRoot":"","sources":["../../src/domains/udp.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,KAAK,EACV,mBAAmB,EACnB,uBAAuB,EACxB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAEL,KAAK,uBAAuB,EAG5B,KAAK,6BAA6B,EAElC,KAAK,gCAAgC,EAErC,KAAK,gCAAgC,EAErC,KAAK,gCAAgC,EAErC,KAAK,+BAA+B,EAEpC,KAAK,gCAAgC,EAErC,KAAK,uCAAuC,EAE5C,KAAK,mCAAmC,EACzC,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAG1D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,qBAAa,MAAM;IAIf,OAAO,CAAC,GAAG;IACX,OAAO,CAAC,IAAI;IAJd,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA2B;gBAG3C,GAAG,EAAE,aAAa,EAClB,IAAI,EAAE,mBAAmB;IAGnC;;;;;;;;;;;;;OAaG;IACG,OAAO,IAAI,OAAO,CAAC,uBAAuB,CAAC,iBAAiB,CAAC,CAAC;IAKpE;;;;;;;;OAQG;IACG,UAAU,IAAI,OAAO,CAAC,OAAO,CAAC;IAKpC;;;;;;;OAOG;IACG,gBAAgB,IAAI,OAAO,CAC/B,6BAA6B,CAAC,0BAA0B,CAAC,CAC1D;IAQD;;;;;;;;;;;;;;;;;;;;;;;;;;;OA2BG;IACG,eAAe,CACnB,KAAK,EAAE,gCAAgC,CAAC,OAAO,CAAC,GAC/C,OAAO,CAAC,OAAO,CAAC;IAKnB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAgCG;IACG,sBAAsB,CAC1B,KAAK,EAAE,gCAAgC,CAAC,OAAO,CAAC,EAChD,OAAO,GAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAA;KAAO,GACnC,OAAO,CAAC,mBAAmB,CAAC;IAO/B;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACG,eAAe,CACnB,KAAK,EAAE,gCAAgC,CAAC,OAAO,CAAC,GAC/C,OAAO,CAAC,OAAO,CAAC;IAKnB;;;;;;;;;;;;;;;OAeG;IACG,sBAAsB,CAC1B,KAAK,EAAE,gCAAgC,CAAC,OAAO,CAAC,EAChD,OAAO,GAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAA;KAAO,GACnC,OAAO,CAAC,mBAAmB,CAAC;IAO/B;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACG,eAAe,CACnB,KAAK,EAAE,gCAAgC,CAAC,OAAO,CAAC,GAC/C,OAAO,CAAC,OAAO,CAAC;IAKnB;;;;;;;;;;;;;;;;;OAiBG;IACG,sBAAsB,CAC1B,KAAK,EAAE,gCAAgC,CAAC,OAAO,CAAC,EAChD,OAAO,GAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAA;KAAO,GACnC,OAAO,CAAC,mBAAmB,CAAC;IAO/B;;;;;;;;;;;;;;;;;;;OAmBG;IACG,cAAc,CAClB,KAAK,EAAE,+BAA+B,CAAC,OAAO,CAAC,GAC9C,OAAO,CAAC,OAAO,CAAC;IAKnB;;;;;;;;;;;;;;;;;OAiBG;IACG,qBAAqB,CACzB,KAAK,EAAE,+BAA+B,CAAC,OAAO,CAAC,EAC/C,OAAO,GAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAA;KAAO,GACnC,OAAO,CAAC,mBAAmB,CAAC;IAO/B;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACG,eAAe,CACnB,KAAK,EAAE,gCAAgC,CAAC,OAAO,CAAC,GAC/C,OAAO,CAAC,OAAO,CAAC;IAKnB;;;;;;;;;;;;;;;;;;OAkBG;IACG,sBAAsB,CAC1B,KAAK,EAAE,gCAAgC,CAAC,OAAO,CAAC,EAChD,OAAO,GAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAA;KAAO,GACnC,OAAO,CAAC,mBAAmB,CAAC;IAO/B;;;;;;;;;;;;;;;;;;;;OAoBG;IACG,sBAAsB,CAC1B,KAAK,EAAE,uCAAuC,CAAC,OAAO,CAAC,GACtD,OAAO,CAAC,OAAO,CAAC;IAOnB;;;;;;;;;;;;;;;;;;;OAmBG;IACG,kBAAkB,CACtB,KAAK,EAAE,mCAAmC,CAAC,OAAO,CAAC,GAClD,OAAO,CAAC,OAAO,CAAC;IAKnB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAqCG;IACH,SAAS,CAAC,QAAQ,EAAE,uBAAuB,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,IAAI;IAIvE,OAAO,CAAC,YAAY;CAQrB"}
+{"version":3,"file":"udp.d.ts","sourceRoot":"","sources":["../../src/domains/udp.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,KAAK,EACV,mBAAmB,EACnB,uBAAuB,EACxB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAEL,KAAK,uBAAuB,EAG5B,KAAK,6BAA6B,EAElC,KAAK,gCAAgC,EAErC,KAAK,gCAAgC,EAErC,KAAK,gCAAgC,EAErC,KAAK,+BAA+B,EAEpC,KAAK,gCAAgC,EAErC,KAAK,uCAAuC,EAE5C,KAAK,mCAAmC,EACzC,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAG1D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,qBAAa,MAAM;IAIf,OAAO,CAAC,GAAG;IACX,OAAO,CAAC,IAAI;IAJd,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA2B;gBAG3C,GAAG,EAAE,aAAa,EAClB,IAAI,EAAE,mBAAmB;IAGnC;;;;;;;;;;;;;OAaG;IACG,OAAO,IAAI,OAAO,CAAC,uBAAuB,CAAC,iBAAiB,CAAC,CAAC;IAKpE;;;;;;;;OAQG;IACG,UAAU,IAAI,OAAO,CAAC,OAAO,CAAC;IAKpC;;;;;;;OAOG;IACG,gBAAgB,IAAI,OAAO,CAC/B,6BAA6B,CAAC,0BAA0B,CAAC,CAC1D;IAQD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA8BG;IACG,eAAe,CACnB,KAAK,EAAE,gCAAgC,CAAC,OAAO,CAAC,GAC/C,OAAO,CAAC,OAAO,CAAC;IAKnB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAkCG;IACG,sBAAsB,CAC1B,KAAK,EAAE,gCAAgC,CAAC,OAAO,CAAC,EAChD,OAAO,GAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAA;KAAO,GACnC,OAAO,CAAC,mBAAmB,CAAC;IAO/B;;;;;;;;;;;;;;;;;;;;;;;;;;;OA2BG;IACG,eAAe,CACnB,KAAK,EAAE,gCAAgC,CAAC,OAAO,CAAC,GAC/C,OAAO,CAAC,OAAO,CAAC;IAKnB;;;;;;;;;;;;;;;;;;OAkBG;IACG,sBAAsB,CAC1B,KAAK,EAAE,gCAAgC,CAAC,OAAO,CAAC,EAChD,OAAO,GAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAA;KAAO,GACnC,OAAO,CAAC,mBAAmB,CAAC;IAO/B;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACG,eAAe,CACnB,KAAK,EAAE,gCAAgC,CAAC,OAAO,CAAC,GAC/C,OAAO,CAAC,OAAO,CAAC;IAKnB;;;;;;;;;;;;;;;;;OAiBG;IACG,sBAAsB,CAC1B,KAAK,EAAE,gCAAgC,CAAC,OAAO,CAAC,EAChD,OAAO,GAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAA;KAAO,GACnC,OAAO,CAAC,mBAAmB,CAAC;IAO/B;;;;;;;;;;;;;;;;;;;OAmBG;IACG,cAAc,CAClB,KAAK,EAAE,+BAA+B,CAAC,OAAO,CAAC,GAC9C,OAAO,CAAC,OAAO,CAAC;IAKnB;;;;;;;;;;;;;;;;;OAiBG;IACG,qBAAqB,CACzB,KAAK,EAAE,+BAA+B,CAAC,OAAO,CAAC,EAC/C,OAAO,GAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAA;KAAO,GACnC,OAAO,CAAC,mBAAmB,CAAC;IAO/B;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACG,eAAe,CACnB,KAAK,EAAE,gCAAgC,CAAC,OAAO,CAAC,GAC/C,OAAO,CAAC,OAAO,CAAC;IAKnB;;;;;;;;;;;;;;;;;;OAkBG;IACG,sBAAsB,CAC1B,KAAK,EAAE,gCAAgC,CAAC,OAAO,CAAC,EAChD,OAAO,GAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAA;KAAO,GACnC,OAAO,CAAC,mBAAmB,CAAC;IAO/B;;;;;;;;;;;;;;;;;;;;OAoBG;IACG,sBAAsB,CAC1B,KAAK,EAAE,uCAAuC,CAAC,OAAO,CAAC,GACtD,OAAO,CAAC,OAAO,CAAC;IAOnB;;;;;;;;;;;;;;;;;;;OAmBG;IACG,kBAAkB,CACtB,KAAK,EAAE,mCAAmC,CAAC,OAAO,CAAC,GAClD,OAAO,CAAC,OAAO,CAAC;IAKnB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAqCG;IACH,SAAS,CAAC,QAAQ,EAAE,uBAAuB,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,IAAI;IAIvE,OAAO,CAAC,YAAY;CAQrB"}

package/dist/domains/udp.js

@@ -85,10 +85,13 @@ export class UdpAPI {
     /**
      * Send an actor (player/NPC) state update for spatial replication to nearby
      * chunks. Fire-and-forget; opens a UDP proxy session automatically if none
-     * exists. The applied echo (`ActorUpdateResponse`) and any failure
-     * (`GenericErrorResponse`) arrive asynchronously on {@link subscribe},
-     * correlated by `sequenceNumber`; use {@link sendActorUpdateAndWait} to await
-     * that echo inline.
+     * exists. There is no separate per-request response: the server fans the
+     * update out to every client in the target chunk **including the sender**, so
+     * your own applied update comes back as an `ActorUpdateNotification` carrying
+     * the same `sequenceNumber` (the legacy `ActorUpdateResponse` type is never
+     * emitted). Failures arrive as a `GenericErrorResponse`; both are delivered
+     * asynchronously on {@link subscribe} and correlated by `sequenceNumber`. Use
+     * {@link sendActorUpdateAndWait} to await that self-notification inline.
      *
      * @param input - {@link ActorUpdateRequestInput}:
      *   - `appId` — owning app id (`BigInt` as a decimal string).
@@ -117,17 +120,19 @@ export class UdpAPI {
     /**
      * Send an actor update and wait for the server's applied echo. Allocates a
      * `sequenceNumber` when `input.sequenceNumber` is omitted, registers the wait
-     * *before* sending, then resolves with the matching `ActorUpdateResponse`.
-     * Requires an active {@link subscribe} so the echo can be delivered over the
-     * shared WebSocket.
+     * *before* sending, then resolves with the matching notification. Because the
+     * server includes the sender in the chunk fan-out, the echo is your own
+     * `ActorUpdateNotification` with the same `sequenceNumber` (there is no
+     * `ActorUpdateResponse` on the wire). Requires an active {@link subscribe} so
+     * the self-notification can be delivered over the shared WebSocket.
      *
      * @param input - {@link ActorUpdateRequestInput} (see {@link sendActorUpdate}
      *   for field units/encoding). Omit `sequenceNumber` to let the SDK allocate
      *   one.
      * @param options - `timeoutMs`: how long to wait for the echo, in
      *   milliseconds; defaults to the client's realtime `waitTimeoutMs` (5000).
-     * @returns The correlated {@link SpatialNotification} (the `ActorUpdateResponse`
-     *   echo).
+     * @returns The correlated {@link SpatialNotification} (your own
+     *   `ActorUpdateNotification` self-echo).
      * @throws {CrowdyGraphQLError} if the underlying send is rejected.
      * @throws {CrowdyTimeoutError} if the HTTP send leg exceeds the client's
      *   request timeout.
@@ -155,10 +160,13 @@ export class UdpAPI {
     }
     /**
      * Send a single voxel (block) update for spatial replication to nearby
-     * chunks. Fire-and-forget; opens a UDP proxy session automatically. The
-     * applied echo (`VoxelUpdateResponse`) and failures (`GenericErrorResponse`)
-     * arrive asynchronously on {@link subscribe}; use
-     * {@link sendVoxelUpdateAndWait} to await the echo inline.
+     * chunks. Fire-and-forget; opens a UDP proxy session automatically. There is
+     * no separate per-request response: the change fans out to nearby clients
+     * **including the sender** as a `VoxelUpdateNotification` carrying the same
+     * `sequenceNumber` (the legacy `VoxelUpdateResponse` type is never emitted).
+     * Failures arrive as a `GenericErrorResponse`; both are delivered
+     * asynchronously on {@link subscribe}. Use {@link sendVoxelUpdateAndWait} to
+     * await the self-notification inline.
      *
      * @param input - {@link VoxelUpdateRequestInput}:
      *   - `appId` — owning app id (`BigInt` as a decimal string).
@@ -183,15 +191,18 @@ export class UdpAPI {
         return data.sendVoxelUpdate;
     }
     /**
-     * Send a voxel update and wait for the server's applied `VoxelUpdateResponse`
-     * echo. Allocates a `sequenceNumber` when omitted and requires an active
-     * {@link subscribe}.
+     * Send a voxel update and wait for the server's applied echo. Allocates a
+     * `sequenceNumber` when omitted and requires an active {@link subscribe}.
+     * Because the server includes the sender in the chunk fan-out, the echo is
+     * your own `VoxelUpdateNotification` with the same `sequenceNumber` (there is
+     * no `VoxelUpdateResponse` on the wire).
      *
      * @param input - {@link VoxelUpdateRequestInput} (see {@link sendVoxelUpdate}
      *   for field units/encoding).
      * @param options - `timeoutMs`: echo wait in milliseconds; defaults to the
      *   client's realtime `waitTimeoutMs` (5000).
-     * @returns The correlated {@link SpatialNotification} (`VoxelUpdateResponse`).
+     * @returns The correlated {@link SpatialNotification} (your own
+     *   `VoxelUpdateNotification` self-echo).
      * @throws {CrowdyGraphQLError} if the underlying send is rejected.
      * @throws {CrowdyTimeoutError} if the HTTP send leg times out.
      * @throws {CrowdyRealtimeError} on echo timeout