@crowdedkingdoms/crowdyjs 8.0.0 → 8.0.1

package/dist/generated/graphql.d.ts

@@ -211,6 +211,8 @@ export type App = {
     orgId: Scalars['BigInt']['output'];
     /** OAuth-style redirect-URI allow-list for the portal handoff. A portal authorization code’s redirect_uri must match one of these by origin; empty disallows browser portal entry to this app. */
     redirectUris: Array<Scalars['String']['output']>;
+    /** Reserved sustained egress in bytes/s for shared apps. 0 = free tier; >0 bypasses the ~1 MB/s rate limit and incurs a monthly reservation fee. */
+    reservedEgressBytesPerSec: Scalars['BigInt']['output'];
     /** When runtimeStatus is not "active", why the runtime is gated: "free_allowance", "insufficient_funds", "spend_cap", or "subscription_lapsed". Null when active. */
     runtimeDenialReason: Maybe<Scalars['String']['output']>;
     /** Shared-environment runtime gate, mirrored to the game DB and enforced by game-api + Buddy: "active", "grace", "denied", or "suspended". */
@@ -409,7 +411,7 @@ export type AppSharedSubscription = {
 export declare enum AppStatus {
     /** Soft-deleted via archiveApp: retained but read-only and excluded from the marketplace. Reversible by setting status back to DRAFT or LIVE. */
     Archived = "ARCHIVED",
-    /** Work-in-progress: invisible to non-members and never listed in the marketplace. Default for newly created apps. */
+    /** Work-in-progress: invisible to non-members and never listed in the marketplace. Selectable manually via updateApp; new apps default to LIVE. */
     Draft = "DRAFT",
     /** Published and purchasable/playable; eligible for the public marketplace when visibility=PUBLIC. */
     Live = "LIVE"
@@ -432,6 +434,26 @@ export type AppTokenResponse = {
     /** Opaque app-scoped gameplay token. Send to the target app's Game API as `Authorization: Bearer <token>` (and in the realtime `connectionParams`). Do NOT send it to the Management API for anything other than `me`/`refreshAppToken`. */
     token: Scalars['String']['output'];
 };
+/** End-of-month egress projection for one shared app from linear extrapolation of calendar-month usage so far. */
+export type AppUsageProjection = {
+    __typename?: 'AppUsageProjection';
+    /** App id (as a string). */
+    appId: Scalars['String']['output'];
+    /** Egress bytes recorded so far this calendar month (from app_monthly_egress). */
+    currentEgressBytes: Scalars['String']['output'];
+    /** Fractional UTC days elapsed since the calendar month started. */
+    daysElapsed: Scalars['Float']['output'];
+    /** Per-app free monthly egress allowance in bytes (5 decimal GB). */
+    freeAllowanceBytes: Scalars['String']['output'];
+    /** True when projected egress exceeds the free allowance, or null when insufficient data. */
+    onTrackToExceed: Maybe<Scalars['Boolean']['output']>;
+    /** Projected end-of-month egress bytes (linear extrapolation), or null when insufficient data. */
+    projectedBytes: Maybe<Scalars['String']['output']>;
+    /** Projected usage as a percentage of the free allowance, or null when insufficient data. */
+    projectedPctOfFree: Maybe<Scalars['Float']['output']>;
+    /** True when at least 3 days have elapsed in the month (projection is meaningful). */
+    sufficientData: Scalars['Boolean']['output'];
+};
 /** Aggregate byte totals for one app over the requested window. All *Bytes fields are string counters (may exceed Int range). */
 export type AppUsageRollupRow = {
     __typename?: 'AppUsageRollupRow';
@@ -560,6 +582,12 @@ export type AssignGroupToGridInput = {
     /** Runtime permission key strings to grant to the group/role. Each must be a known key in runtime_permissions, unique, and at most 64 chars. */
     permissionKeys: Array<Scalars['String']['input']>;
 };
+/** Whether the account has a password set. Does not reveal whether the email is registered. */
+export type AuthMethodResult = {
+    __typename?: 'AuthMethodResult';
+    /** True when the account exists and has a password hash; false otherwise (including unknown emails). */
+    hasPassword: Scalars['Boolean']['output'];
+};
 /** Result of a successful login or registration: a session token plus the authenticated user. */
 export type AuthResponse = {
     __typename?: 'AuthResponse';
@@ -671,6 +699,11 @@ export type ChannelMessageNotification = {
     /** The sending actor's UUID. */
     uuid: Scalars['String']['output'];
 };
+/** Check whether an account has password sign-in enabled (email-first adaptive login). */
+export type CheckAuthMethodInput = {
+    /** Email address to check. */
+    email: Scalars['String']['input'];
+};
 export type Checkout = {
     __typename?: 'Checkout';
     /** Charge amount in minor currency units (cents) of `currency`, as a BigInt decimal string; null when the purpose carries no amount. */
@@ -965,6 +998,8 @@ export type CksEnvironment = {
     graphqlBillingTier: Maybe<Scalars['Int']['output']>;
     /** Opaque environment UUID (cks_environments.id). */
     id: Scalars['String']['output'];
+    /** True for the single platform-owned shared environment (slug 'shared') that hosts the shared game-api serving apps with deploymentTarget='shared'. Customer environments are always false. */
+    isShared: Scalars['Boolean']['output'];
     loadBalancerCount: Scalars['Int']['output'];
     /** Release version actually observed running. Lags desiredEnvironmentVersion while a deploy is in progress. */
     observedEnvironmentVersion: Maybe<Scalars['String']['output']>;
@@ -1620,7 +1655,7 @@ export type CreateAppInput = {
     orgId: Scalars['BigInt']['input'];
     /** URL-safe slug (1-128 chars, lowercase letters, numbers and dashes only). Must be unique within the org. */
     slug: Scalars['String']['input'];
-    /** Optional initial lifecycle status. Defaults to DRAFT when omitted. */
+    /** Optional initial lifecycle status. Defaults to LIVE when omitted. */
     status?: InputMaybe<AppStatus>;
     /** Optional initial visibility. Defaults to PUBLIC when omitted. */
     visibility?: InputMaybe<AppVisibility>;
@@ -1711,6 +1746,8 @@ export type CreateEnvironmentInput = {
     gameApiMinServers?: InputMaybe<Scalars['Int']['input']>;
     /** GraphQL billing tier level from graphqlBillingTiers. Defaults to tier 1 for dedicated environments. */
     graphqlBillingTier?: InputMaybe<Scalars['Int']['input']>;
+    /** Super-admin only: designate this as the single platform-owned shared environment (slug 'shared') that hosts the shared game-api for apps with deploymentTarget='shared'. Must be a dedicated environment. Customers cannot set this; the management API rejects it for non-super-admins. */
+    isShared?: InputMaybe<Scalars['Boolean']['input']>;
     /** Number of Caddy load-balancer VMs in front of the game-api fleet (min 1). Required for dedicated; ignored for dev_single. */
     loadBalancerCount?: InputMaybe<Scalars['Int']['input']>;
     /** Organization id (BigInt) that will own and be billed for the environment. */
@@ -1926,6 +1963,8 @@ export type ExchangePortalCodeInput = {
 /** An org's free shared app slot quota usage. */
 export type FreeAppQuota = {
     __typename?: 'FreeAppQuota';
+    /** Shared apps with free-slot / reserved / paid credit status. */
+    apps: Array<FreeAppQuotaApp>;
     /** Organization id (BigInt). */
     orgId: Scalars['BigInt']['output'];
     /** Apps on a paid subscription (do not consume free slots). */
@@ -1934,9 +1973,29 @@ export type FreeAppQuota = {
     quota: Scalars['Int']['output'];
     /** Free slots still available (quota − usedFree). */
     remainingFree: Scalars['Int']['output'];
+    /** Apps with reserved throughput (premium; do not consume free slots). */
+    reservedApps: Scalars['Int']['output'];
     /** Free slots currently in use. */
     usedFree: Scalars['Int']['output'];
 };
+/** A shared app row in the org free-slot portfolio (free / reserved / paid credit). */
+export type FreeAppQuotaApp = {
+    __typename?: 'FreeAppQuotaApp';
+    /** App id (BigInt). */
+    appId: Scalars['BigInt']['output'];
+    /** True when the app consumes a free org slot (shared, not archived, no active subscription, no reserved throughput). */
+    consumesFreeSlot: Scalars['Boolean']['output'];
+    /** How this app is credited: 'free_slot', 'reserved', or 'paid_subscription'. */
+    creditKind: Scalars['String']['output'];
+    /** True when the app has an active legacy shared subscription. */
+    hasActiveSubscription: Scalars['Boolean']['output'];
+    /** App display name. */
+    name: Scalars['String']['output'];
+    /** Reserved egress throughput in bytes/sec (0 when none). */
+    reservedEgressBytesPerSec: Scalars['BigInt']['output'];
+    /** URL slug for the app. */
+    slug: Scalars['String']['output'];
+};
 /** Status of the recurring free-play window during which gameplay is open without entitlement. */
 export type FreePlayWindowInfo = {
     __typename?: 'FreePlayWindowInfo';
@@ -2935,6 +2994,12 @@ export type LodDataInput = {
     /** LOD level (>= 0; 0 is the finest / highest detail). */
     level: Scalars['Int']['input'];
 };
+export type LoginUserInput = {
+    /** Account email address. */
+    email: Scalars['String']['input'];
+    /** Account password (min 8 characters). */
+    password: Scalars['String']['input'];
+};
 /** Input for mintAppToken: directly mint an app-scoped gameplay token for the calling user (native/direct path, no browser redirect). */
 export type MintAppTokenInput = {
     /** Numeric id of the app to mint a confined gameplay token for. Free/open apps are auto-granted access; paid apps require an existing entitlement (else FORBIDDEN). */
@@ -2960,10 +3025,14 @@ export type Mutation = {
     cancelSharedSubscription: AppSharedSubscription;
     /** Captures an approved PayPal order after the hosted checkout redirects back, completes the checkout (wallet credit / access grant), and returns the updated Checkout. PayPal webhooks remain a backup for idempotent reconciliation if they arrive later. Requires an authenticated user who owns the checkout. */
     capturePaypalCheckout: Checkout;
+    /** Changes the authenticated user's password after verifying the current password. Requires a valid session token. Returns true on success; throws if the current password is wrong. Existing sessions are not revoked. */
+    changePassword: Scalars['Boolean']['output'];
     /** Self-service: the authenticated caller claims access to an app via its free, open-by-default tier. Requires authentication only (no org membership needed). ENTITLEMENT CHANGE: grants the free default tier as a 'system' grant and notifies the game API. Idempotent: returns the existing row if already granted, and never overrides a prior revoke. Errors if the app has no free default tier or is archived. */
     claimFreeAppAccess: AppUserAccess;
     /** Complete a magic-link sign-in with the emailed token; returns a session AuthResponse. Public (the token authorizes the call); throws if invalid/expired/used. */
     completeLoginLink: AuthResponse;
+    /** Confirms a user email address using the token from the confirmation email (also enables password sign-in for the account). Returns true on success, false if the token is invalid or expired. Public (the token authorizes the call). */
+    confirmEmail: Scalars['Boolean']['output'];
     /** Open the UDP proxy session for this game token (idempotent: returns the existing status if one is already open). Binds a socket and selects the game server with the fewest clients on first open. Optional: send mutations and udpNotifications also create a session lazily when none exists. To force a fresh socket, call disconnectUdpProxy first. */
     connectUdpProxy: UdpProxyConnectionStatus;
     /** Create a new access tier (a free/paid bundle of runtime permissions) for an app. Requires the 'manage_access_tiers' permission on the app (input.appId); super admins bypass. SIDE EFFECTS: validates the tier's permission keys against runtimePermissions and notifies the game API so Buddy sees the new tier. Does NOT grant the tier to any user. */
@@ -3042,8 +3111,16 @@ export type Mutation = {
     gameModelDeleteAutomation: Scalars['Boolean']['output'];
     /** Delete an automation event trigger by id. Requires app-admin ('manage_apps'). Returns true if one was deleted. */
     gameModelDeleteAutomationTrigger: Scalars['Boolean']['output'];
+    /** Delete a container instance. Cascades its instance properties and any edges connected to it. Allowed for an app admin or the container owner. Requires a valid token. DESTRUCTIVE. Returns true if a container was deleted. */
+    gameModelDeleteContainer: Scalars['Boolean']['output'];
+    /** Delete a container type. Also deletes its property definitions. Refuses if live containers of that type exist, or if functions are bound to it — delete those first. Requires app-admin ('manage_apps'). DESTRUCTIVE. Returns true if a type was deleted. */
+    gameModelDeleteContainerType: Scalars['Boolean']['output'];
+    /** Delete a directed relationship edge between two containers. Allowed for an app admin or the owner of the source (from) container. Requires a valid token. DESTRUCTIVE. Returns true if an edge was deleted. */
+    gameModelDeleteEdge: Scalars['Boolean']['output'];
     /** Delete a studio-defined function by name. Requires app-admin ('manage_apps'). DESTRUCTIVE. Returns true if a function was deleted. */
     gameModelDeleteFunction: Scalars['Boolean']['output'];
+    /** Delete a property definition from a container type. Does not remove instance property values already stored on containers. Requires app-admin ('manage_apps'). DESTRUCTIVE. Returns true if a definition was deleted. */
+    gameModelDeletePropertyDef: Scalars['Boolean']['output'];
     /** Grant a feature key to an access tier, so users on that tier satisfy tier_feature authority checks for it. Requires app-admin ('manage_apps'). */
     gameModelGrantTierFeature: GmTierFeature;
     /** Invoke a studio-defined function against a 'self' container with JSON params. The server enforces the function's invoke policy (authority rule tree: owner_of_self / is_host / is_current_turn / is_participant / tier_feature / group_permission / grid_permission / condition), evaluates its expressions, atomically applies its declared property mutations, logs an event, and returns the result (return value + mutations applied, or success=false with an error message). This is the primary, safe way for players to mutate game state. Requires a valid token; only player-scope functions are invocable here. */
@@ -3098,6 +3175,8 @@ export type Mutation = {
     linkAppToEnvironment: App;
     /** Link an additional federated identity (from a socialLoginStart callback) to the signed-in account. Requires a session token; throws if the identity is already linked to another account. */
     linkIdentity: UserIdentity;
+    /** Authenticates with email + password and starts a new session. Returns an AuthResponse whose `token` must be sent on subsequent requests as `Authorization: Bearer <token>`. Public (no auth required); throws on invalid credentials. If the account also has another verified sign-in method, the password must first be email-confirmed. */
+    login: AuthResponse;
     /** Single-device logout: revokes the game token that authenticated this request by deleting its game_tokens row. Returns true if a token was revoked, false if the request had no game token. Other devices/tokens are unaffected (use the Management API to revoke all devices). After this, the bearer token is rejected and any open UDP proxy session will no longer authorize new traffic. */
     logout: Scalars['Boolean']['output'];
     /** Ends every active session for the authenticated user (deletes all their game_tokens and records revocations). Requires a valid session token. */
@@ -3118,6 +3197,8 @@ export type Mutation = {
     redeployEnvironment: CksEnvironmentChangeOrder;
     /** Rotate the calling app token for a fresh one (same app, extended TTL) and revoke the old. Call before the current token expires to keep playing without bouncing back through the Overworld. Allowed for app-scoped tokens; re-checks entitlement. */
     refreshAppToken: AppTokenResponse;
+    /** Registers a new email + password account: creates the (initially unconfirmed) account, emails a confirmation link, and returns an AuthResponse with a session `token` for immediate use (send as `Authorization: Bearer <token>`). If an account already exists for the email (e.g. created via magic link/social), the password is attached pending email confirmation and no session is returned (throws CONFLICT). Public. */
+    register: AuthResponse;
     /** Remove a member from a channel. Requires the 'manage_members' channel permission, except that any member may remove themselves. Notifies Buddy to stop routing to the removed member. Returns true if a membership was removed. */
     removeChannelMember: Scalars['Boolean']['output'];
     /** Removes a user from an organization. Requires the 'manage_members' permission on the org (super admins bypass). DESTRUCTIVE: revokes the user's membership and role assignments in that org. Returns false if the user was not a member. */
@@ -3128,10 +3209,16 @@ export type Mutation = {
     removeTeamMember: Scalars['Boolean']['output'];
     /** Passwordless: email a one-time magic sign-in link to the address (creates the account on first sign-in). Always reports sent=true (no account enumeration). Public. */
     requestLoginLink: RequestLoginLinkResult;
+    /** Starts the password-reset flow by emailing a reset link to the address. Always returns true regardless of whether the email exists (prevents account enumeration). The reset link is also the ownership-proven way an existing passwordless account adds a password. Public. */
+    requestPasswordReset: Scalars['Boolean']['output'];
     /** Request to join a request-only channel (creates a pending membership a manager can approve via addChannelMember). Behaves identically to joinChannel; named for request-policy UIs. */
     requestToJoinChannel: GroupMember;
     /** Request to join a request-only team (creates a pending membership a manager can approve via addTeamMember). Behaves identically to joinTeam; named for request-policy UIs. */
     requestToJoinTeam: GroupMember;
+    /** Re-sends the email-confirmation link. Always returns true regardless of whether the account exists or is already confirmed (prevents enumeration); the email is only sent for existing unconfirmed accounts. Public. */
+    resendConfirmationEmail: Scalars['Boolean']['output'];
+    /** Completes a password reset using the reset token and a new password. Returns true on success; throws if the token is invalid or expired. Public (the token authorizes the call). Existing sessions are not revoked. */
+    resetPassword: Scalars['Boolean']['output'];
     /** SSH-restarts the Buddy systemd service on the active UDP runtime VM. Symptom relief when server_status heartbeat is stale (see CksBuddyHealth.isStale); does not replace cks-udp-api pool fixes. Requires the 'manage_environments' org permission. */
     restartEnvironmentServices: CksEnvironmentChangeOrder;
     /** Resumes a payment-suspended environment, queuing a change order and moving billingStatus to 'resume_queued' (and restarting runtime once it settles). Only valid when billingStatus is grace, suspension_queued, suspended, or resume_failed; otherwise fails. Resumes billable hourly charges. Requires the 'manage_environments' org permission. */
@@ -3148,7 +3235,7 @@ export type Mutation = {
     revokeOrgToken: Scalars['Boolean']['output'];
     /** Reverts every voxel edit made by `userId` in `appId` between `from` and `to`, returning one RollbackVoxelEventResult per affected voxel (`applied` tells you whether each was actually changed). DEFAULTS to dryRun=true, which only PREVIEWS the planned reversions without writing; pass dryRun=false to actually apply them (DESTRUCTIVE — mutates world state). Requires a valid bearer token AND the `manage_apps` permission on the org that owns `appId` (super admins bypass). */
     rollbackVoxelUpdates: Array<RollbackVoxelEventResult>;
-    /** Send an actor (player/NPC) state update for spatial replication to nearby chunks. Requires a bearer game token; opens a UDP proxy session automatically if none exists. Returns Boolean! that is true only when the datagram was ACCEPTED FOR SENDING to the game server — it does NOT confirm the world applied the update. The applied echo (ActorUpdateResponse) and any failure (GenericErrorResponse) arrive ASYNCHRONOUSLY on the udpNotifications subscription, correlated by the request sequenceNumber (correlation only — not an idempotency key; the server does not dedupe replays). Subscribe to udpNotifications before sending so the reply is not missed. */
+    /** Send an actor (player/NPC) state update for spatial replication to nearby chunks. Requires a bearer game token; opens a UDP proxy session automatically if none exists. Returns Boolean! that is true only when the datagram was ACCEPTED FOR SENDING to the game server — it does NOT confirm the world applied the update. There is NO separate per-request success response: the game server fans the update out to every client in the target chunk INCLUDING the sender, so you observe your own applied update as an ActorUpdateNotification carrying the same sequenceNumber (ActorUpdateResponse is legacy and is never emitted). Failures arrive ASYNCHRONOUSLY as a GenericErrorResponse; both are correlated by the request sequenceNumber (correlation only — not an idempotency key; the server does not dedupe replays). Subscribe to udpNotifications before sending so the self-notification/error is not missed. */
     sendActorUpdate: Scalars['Boolean']['output'];
     /** Send a spatial voice/audio packet, fanned out to nearby actors as a ClientAudioNotification. Requires a bearer game token; voice may additionally be gated by a runtime/grid permission for the region — if the caller lacks it the game server responds asynchronously with a GenericErrorResponse (errorCode UNAUTHORIZED). Opens a UDP proxy session automatically if none exists. Returns Boolean! that is true only when the datagram was ACCEPTED FOR SENDING — NOT that it was delivered; the sender receives no echo, only errors (GenericErrorResponse, correlated by sequenceNumber) on udpNotifications. sequenceNumber is correlation only, not an idempotency key. */
     sendAudioPacket: Scalars['Boolean']['output'];
@@ -3160,12 +3247,14 @@ export type Mutation = {
     sendSingleActorMessage: Scalars['Boolean']['output'];
     /** Send a spatial text/chat packet, fanned out to nearby actors as a ClientTextNotification. Requires a bearer game token; opens a UDP proxy session automatically if none exists. Returns Boolean! that is true only when the datagram was ACCEPTED FOR SENDING to the game server — NOT confirmation of delivery. The sender receives no echo; failures arrive ASYNCHRONOUSLY as GenericErrorResponse on udpNotifications, correlated by the request sequenceNumber (correlation only — not an idempotency key; the server does not dedupe replays). */
     sendTextPacket: Scalars['Boolean']['output'];
-    /** Send a single voxel (block) update for spatial replication to nearby chunks. Requires a bearer game token; opens a UDP proxy session automatically if none exists. Returns Boolean! that is true only when the datagram was ACCEPTED FOR SENDING to the game server — NOT confirmation that the world applied the change. The applied echo (VoxelUpdateResponse) and any failure (GenericErrorResponse) arrive ASYNCHRONOUSLY on udpNotifications, correlated by the request sequenceNumber (correlation only — not an idempotency key; the server does not dedupe replays). */
+    /** Send a single voxel (block) update for spatial replication to nearby chunks. Requires a bearer game token; opens a UDP proxy session automatically if none exists. Returns Boolean! that is true only when the datagram was ACCEPTED FOR SENDING to the game server — NOT confirmation that the world applied the change. There is NO separate per-request success response: the change fans out to nearby clients (the sender included) as a VoxelUpdateNotification carrying the same sequenceNumber (VoxelUpdateResponse is legacy and is never emitted). Failures arrive ASYNCHRONOUSLY as a GenericErrorResponse; both are correlated by the request sequenceNumber (correlation only — not an idempotency key; the server does not dedupe replays). */
     sendVoxelUpdate: Scalars['Boolean']['output'];
     /** Creates or updates an app's monthly spend cap (idempotent upsert keyed by org + app) and returns the resulting budget. This only records the cap used to monitor/limit overspend; it does not move money, charge a card, or alter the wallet balance. Requires the 'manage_billing' app permission. */
     setAppBudget: AppBudget;
     /** Register/update an app's portal client settings (redirect_uris, client_type, launch_url). Requires manage_apps on the app and a SESSION token. */
     setAppClientSettings: PortalConsentState;
+    /** Reserve sustained egress throughput for a shared app (bypasses the ~1 MB/s free-tier rate limit). Billed at $3/MB/s/month from the org wallet; upgrades are prorated for the current month. Requires 'manage_billing' on the app's org. */
+    setAppReservedThroughput: SetAppReservedThroughputResult;
     /** Sets per-app hourly/daily spend caps (in cents) and returns the re-evaluated runtime state. Pass null for a limit to clear that cap. Exceeding a cap denies the app's runtime (runtimeDenialReason = spend_cap). Requires the 'manage_billing' permission on the app's org. */
     setAppSpendCaps: AppRuntimeState;
     /** Super admin only (also requires the management API to be enabled for this deployment). Overrides an app visibility platform-wide, e.g. to take down (PRIVATE/UNLISTED) or relist (PUBLIC) an app. Throws ForbiddenException for non-super-admins or when management APIs are disabled. Throws if the app id does not exist. */
@@ -3288,12 +3377,19 @@ export type MutationCapturePaypalCheckoutArgs = {
     idempotencyKey?: InputMaybe<Scalars['String']['input']>;
     orderId: Scalars['String']['input'];
 };
+export type MutationChangePasswordArgs = {
+    currentPassword: Scalars['String']['input'];
+    newPassword: Scalars['String']['input'];
+};
 export type MutationClaimFreeAppAccessArgs = {
     appId: Scalars['BigInt']['input'];
 };
 export type MutationCompleteLoginLinkArgs = {
     input: CompleteLoginLinkInput;
 };
+export type MutationConfirmEmailArgs = {
+    token: Scalars['String']['input'];
+};
 export type MutationCreateAccessTierArgs = {
     input: CreateAccessTierInput;
 };
@@ -3410,10 +3506,27 @@ export type MutationGameModelDeleteAutomationTriggerArgs = {
     appId: Scalars['BigInt']['input'];
     triggerId: Scalars['String']['input'];
 };
+export type MutationGameModelDeleteContainerArgs = {
+    appId: Scalars['BigInt']['input'];
+    containerId: Scalars['String']['input'];
+};
+export type MutationGameModelDeleteContainerTypeArgs = {
+    appId: Scalars['BigInt']['input'];
+    typeName: Scalars['String']['input'];
+};
+export type MutationGameModelDeleteEdgeArgs = {
+    appId: Scalars['BigInt']['input'];
+    edgeId: Scalars['String']['input'];
+};
 export type MutationGameModelDeleteFunctionArgs = {
     appId: Scalars['BigInt']['input'];
     name: Scalars['String']['input'];
 };
+export type MutationGameModelDeletePropertyDefArgs = {
+    appId: Scalars['BigInt']['input'];
+    containerTypeName: Scalars['String']['input'];
+    key: Scalars['String']['input'];
+};
 export type MutationGameModelGrantTierFeatureArgs = {
     input: GrantTierFeatureInput;
 };
@@ -3499,6 +3612,9 @@ export type MutationLinkAppToEnvironmentArgs = {
 export type MutationLinkIdentityArgs = {
     input: LinkIdentityInput;
 };
+export type MutationLoginArgs = {
+    loginUserInput: LoginUserInput;
+};
 export type MutationMintAppTokenArgs = {
     input: MintAppTokenInput;
 };
@@ -3531,6 +3647,9 @@ export type MutationPutCpSecretArgs = {
 export type MutationRedeployEnvironmentArgs = {
     input: RedeployEnvironmentInput;
 };
+export type MutationRegisterArgs = {
+    registerUserInput: RegisterUserInput;
+};
 export type MutationRemoveChannelMemberArgs = {
     groupId: Scalars['BigInt']['input'];
     userId: Scalars['BigInt']['input'];
@@ -3552,12 +3671,21 @@ export type MutationRemoveTeamMemberArgs = {
 export type MutationRequestLoginLinkArgs = {
     input: RequestLoginLinkInput;
 };
+export type MutationRequestPasswordResetArgs = {
+    email: Scalars['String']['input'];
+};
 export type MutationRequestToJoinChannelArgs = {
     groupId: Scalars['BigInt']['input'];
 };
 export type MutationRequestToJoinTeamArgs = {
     groupId: Scalars['BigInt']['input'];
 };
+export type MutationResendConfirmationEmailArgs = {
+    email: Scalars['String']['input'];
+};
+export type MutationResetPasswordArgs = {
+    resetPasswordInput: ResetPasswordInput;
+};
 export type MutationRestartEnvironmentServicesArgs = {
     input: RestartEnvironmentServicesInput;
 };
@@ -3615,6 +3743,10 @@ export type MutationSetAppBudgetArgs = {
 export type MutationSetAppClientSettingsArgs = {
     input: SetAppClientSettingsInput;
 };
+export type MutationSetAppReservedThroughputArgs = {
+    idempotencyKey?: InputMaybe<Scalars['String']['input']>;
+    input: SetAppReservedThroughputInput;
+};
 export type MutationSetAppSpendCapsArgs = {
     appId: Scalars['BigInt']['input'];
     dailyLimitCents?: InputMaybe<Scalars['BigInt']['input']>;
@@ -3806,6 +3938,20 @@ export type NotificationArgInput = {
     /** Argument name (kind-specific: chunk_x, channel_id, payload, target_uuid, ...). */
     name: Scalars['String']['input'];
 };
+/** Per-app projection row within an org rollup. */
+export type OrgAppUsageProjectionRow = {
+    __typename?: 'OrgAppUsageProjectionRow';
+    /** App id (as a string). */
+    appId: Scalars['String']['output'];
+    /** App display name. */
+    appName: Scalars['String']['output'];
+    /** Egress bytes so far this calendar month. */
+    currentEgressBytes: Scalars['String']['output'];
+    /** True when this app is on track to exceed its free allowance, or null when insufficient data. */
+    onTrackToExceed: Maybe<Scalars['Boolean']['output']>;
+    /** Projected end-of-month egress bytes, or null when insufficient data. */
+    projectedBytes: Maybe<Scalars['String']['output']>;
+};
 /** Org off-session auto-billing configuration. */
 export type OrgAutoBilling = {
     __typename?: 'OrgAutoBilling';
@@ -3924,6 +4070,40 @@ export type OrgTokenWithSecret = {
     /** The plaintext token. Save it now; it is not stored. */
     token: Scalars['String']['output'];
 };
+/** Org-level rollup of per-app monthly egress projections for all shared apps. */
+export type OrgUsageProjection = {
+    __typename?: 'OrgUsageProjection';
+    /** Per-app projection breakdown. */
+    apps: Array<OrgAppUsageProjectionRow>;
+    /** Fractional UTC days elapsed since the calendar month started. */
+    daysElapsed: Scalars['Float']['output'];
+    /** True when any shared app is on track to exceed its free allowance. */
+    onTrackToExceedAny: Scalars['Boolean']['output'];
+    /** True when at least 3 days have elapsed in the month (projection is meaningful). */
+    sufficientData: Scalars['Boolean']['output'];
+    /** True when org total projected egress exceeds the combined free tier — suggest reserved throughput. */
+    suggestReservedThroughput: Scalars['Boolean']['output'];
+    /** Total free monthly egress allowance across all shared apps in the org (apps × 5 GB). */
+    totalFreeAllowanceBytes: Scalars['String']['output'];
+    /** Sum of projected end-of-month egress across shared apps, or null when insufficient data. */
+    totalProjectedBytes: Maybe<Scalars['String']['output']>;
+};
+/** Org-level rollup of replication/GraphQL byte totals and GraphQL op counts across all apps in the organization for the time window. */
+export type OrgUsageSummary = {
+    __typename?: 'OrgUsageSummary';
+    /** Total GraphQL bytes received across all org apps (string counter). */
+    graphqlRecvBytes: Scalars['String']['output'];
+    /** Total GraphQL bytes sent across all org apps (string counter). */
+    graphqlSendBytes: Scalars['String']['output'];
+    /** Organization id (as a string). */
+    orgId: Scalars['String']['output'];
+    /** Total replication bytes received across all org apps (string counter). */
+    replicationRecvBytes: Scalars['String']['output'];
+    /** Total replication bytes sent across all org apps (string counter). */
+    replicationSendBytes: Scalars['String']['output'];
+    /** Total GraphQL operations (send + recv) across all org apps (string counter). */
+    totalOps: Scalars['String']['output'];
+};
 export type OrgWallet = {
     __typename?: 'OrgWallet';
     /** Current wallet balance in minor currency units (cents) of `currency`, as a BigInt decimal string. May be negative if usage was charged against an empty wallet. */
@@ -4127,6 +4307,8 @@ export type Query = {
     actors: Array<Actor>;
     /** Relay-style cursor-paginated version of `actors`: lists actors owned by the authenticated user, optionally narrowed by `filter` (appId, avatarId, uuid, chunk). Page forward with `first` (default 50, max 200) and `after` (an opaque cursor from a previous page’s `pageInfo.endCursor`); `totalCount` is the full number of matching actors. Requires a valid game token; only the caller’s own actors are returned (full state included). */
     actorsConnection: ActorsConnection;
+    /** Convenience for UI: returns true when the authenticated caller is the currently elected host for the given app (same election as gameHost), otherwise false (including when no host is elected). Not authoritative for server-side mutations — use gameModelInvoke's is_host policy for that. Requires a valid bearer game token (same auth as gameHost). */
+    amIGameHost: Scalars['Boolean']['output'];
     /** Fetch a single app by its numeric id. Requires authentication (any signed-in user); does NOT enforce org/app permissions, so it can read apps the caller does not own, of any visibility/status. Returns null if the id does not exist. Prefer appBySlug for slug-based marketplace lookups. */
     app: Maybe<App>;
     /** Public listing of an app's access tiers (the free/paid bundles of runtime permissions), ordered by tierOrder ascending. PUBLIC: no authentication required. Powers the marketplace app detail / pricing page. Includes tiers of all statuses; inspect AppAccessTier.status to skip archived tiers. */
@@ -4145,6 +4327,8 @@ export type Query = {
     appRuntimeState: AppRuntimeState;
     /** An app's paid shared-environment subscription, or null when it has none (e.g. unpublished or on the free quota). Caller must be a member of the app's org. */
     appSharedSubscription: Maybe<AppSharedSubscription>;
+    /** Linear end-of-month egress projection for one shared app from calendar-month usage so far. Requires at least 3 elapsed days in the month before returning projected values. Requires the 'view_usage' org permission. */
+    appUsageProjection: AppUsageProjection;
     /** Replication and GraphQL byte totals plus the top GraphQL operations for one app over the time range. Read-only reporting; the app must be linked to an environment in the org. Requires the 'view_usage' org permission. */
     appUsageSummary: AppUsageSummary;
     /** Admin view of the user access records for an app (who has been granted/revoked access and on which tier). Requires the 'manage_access_tiers' permission on the app; super admins bypass. Ordered by most recently updated. Paginated via limit/offset. */
@@ -4179,6 +4363,8 @@ export type Query = {
     channelRoles: Array<GroupRole>;
     /** List all active channels in an app (not just the caller's). */
     channels: Array<Group>;
+    /** Email-first adaptive login: check whether the account has password sign-in enabled. Public; does not reveal whether the email is registered. */
+    checkAuthMethod: AuthMethodResult;
     /** Cross-tenant payments audit across all users, orgs, and apps (newest first), with optional filtering. Restricted to super admins; requests from non-super-admins are rejected. For a caller's own history use `myCheckouts` instead. */
     checkouts: CheckoutsPage;
     /** Cross-tenant payments audit across all users, orgs, and apps (newest first), with optional filtering. Restricted to super admins; requests from non-super-admins are rejected. For a caller's own history use `myCheckoutsConnection` instead. Relay cursor connection; prefer this over the offset-based checkouts. */
@@ -4353,6 +4539,10 @@ export type Query = {
     orgTokens: Array<OrgToken>;
     /** Aggregate replication/GraphQL byte totals per environment across the org for the time window. Read-only reporting. Requires the 'view_usage' org permission. */
     orgUsageByEnvironment: Array<EnvironmentUsageRollupRow>;
+    /** Org rollup of per-app monthly egress projections for all shared apps, with upgrade prompts when on track to exceed free tier. Requires the 'view_usage' org permission. */
+    orgUsageProjection: OrgUsageProjection;
+    /** Org-level rollup of replication/GraphQL byte totals and GraphQL op counts across all apps in the organization for the time window. Read-only reporting. Requires the 'view_usage' org permission. */
+    orgUsageSummary: OrgUsageSummary;
     /** Fetches an organization by id (BigInt as string). Requires a valid session token. Returns null if no such organization exists. */
     organization: Maybe<Organization>;
     /** Fetches an organization by its unique URL slug. Requires a valid session token. Returns null if not found. Use this when you only have the slug; otherwise prefer organization(id). */
@@ -4361,7 +4551,7 @@ export type Query = {
     paymentEvents: PaymentEventsPage;
     /** Audit log of inbound payment-provider webhook events (used for idempotent reconciliation of checkouts), newest first. Restricted to super admins; requests from non-super-admins are rejected. Relay cursor connection; prefer this over the offset-based paymentEvents. */
     paymentEventsConnection: PaymentEventsConnection;
-    /** Public platform discovery. Returns the shared game-api URL clients use for shared-environment apps. No auth required. */
+    /** Public platform discovery. Returns the shared game-api URL clients use for shared-environment apps (served by the platform shared environment). No auth required. */
     platformConfig: PlatformConfig;
     /** Live concurrent players for the org vs its all-time peak, a percentile comparison against other studios, and the site-wide total. Requires the 'view_usage' org permission. */
     playerPulse: PlayerPulse;
@@ -4427,6 +4617,9 @@ export type QueryActorsConnectionArgs = {
     filter?: InputMaybe<ActorFilterInput>;
     first?: InputMaybe<Scalars['Int']['input']>;
 };
+export type QueryAmIGameHostArgs = {
+    appId: Scalars['BigInt']['input'];
+};
 export type QueryAppArgs = {
     appId: Scalars['BigInt']['input'];
 };
@@ -4459,6 +4652,10 @@ export type QueryAppRuntimeStateArgs = {
 export type QueryAppSharedSubscriptionArgs = {
     appId: Scalars['BigInt']['input'];
 };
+export type QueryAppUsageProjectionArgs = {
+    appId: Scalars['BigInt']['input'];
+    orgId: Scalars['BigInt']['input'];
+};
 export type QueryAppUsageSummaryArgs = {
     appId: Scalars['BigInt']['input'];
     operationLimit?: InputMaybe<Scalars['Int']['input']>;
@@ -4519,6 +4716,9 @@ export type QueryChannelRolesArgs = {
 export type QueryChannelsArgs = {
     appId: Scalars['BigInt']['input'];
 };
+export type QueryCheckAuthMethodArgs = {
+    input: CheckAuthMethodInput;
+};
 export type QueryCheckoutsArgs = {
     filter?: InputMaybe<CheckoutFilterInput>;
     limit?: InputMaybe<Scalars['Int']['input']>;
@@ -4779,6 +4979,13 @@ export type QueryOrgUsageByEnvironmentArgs = {
     orgId: Scalars['BigInt']['input'];
     since: Scalars['DateTime']['input'];
 };
+export type QueryOrgUsageProjectionArgs = {
+    orgId: Scalars['BigInt']['input'];
+};
+export type QueryOrgUsageSummaryArgs = {
+    orgId: Scalars['BigInt']['input'];
+    since?: InputMaybe<Scalars['DateTime']['input']>;
+};
 export type QueryOrganizationArgs = {
     id: Scalars['BigInt']['input'];
 };
@@ -4897,6 +5104,14 @@ export type RedeployEnvironmentInput = {
     /** Target environment version. When omitted, redeploys to the latest available version for the class. Must be available, deployable by this class, and not older than the current version (forward-only — no rollback). */
     version?: InputMaybe<Scalars['String']['input']>;
 };
+export type RegisterUserInput = {
+    /** Email for the new account; the confirmation email is sent here. */
+    email: Scalars['String']['input'];
+    /** Optional initial public gamertag (min 3 characters). Can be set later via updateGamertag. */
+    gamertag?: InputMaybe<Scalars['String']['input']>;
+    /** Password for the new account (min 8 characters). */
+    password: Scalars['String']['input'];
+};
 /** Request an emailed magic-link to sign in (passwordless). */
 export type RequestLoginLinkInput = {
     /** Email address to send the one-time sign-in link to. */
@@ -4912,6 +5127,12 @@ export type RequestLoginLinkResult = {
     /** Always true (does not reveal whether the email exists). */
     sent: Scalars['Boolean']['output'];
 };
+export type ResetPasswordInput = {
+    /** New password to set (min 8 characters). */
+    newPassword: Scalars['String']['input'];
+    /** Password-reset token from the emailed reset link. */
+    token: Scalars['String']['input'];
+};
 export type RestartEnvironmentServicesInput = {
     /** Organization id (BigInt) that owns the environment. */
     orgId: Scalars['BigInt']['input'];
@@ -5238,6 +5459,23 @@ export type SetAppClientSettingsInput = {
     /** Allow-listed redirect URIs for the portal authorization code (origin-matched). Replaces the current list. */
     redirectUris?: InputMaybe<Array<Scalars['String']['input']>>;
 };
+/** Set or change an app's reserved sustained throughput on the shared environment. */
+export type SetAppReservedThroughputInput = {
+    /** App to configure reserved throughput for. */
+    appId: Scalars['BigInt']['input'];
+    /** Organization that owns the app. */
+    orgId: Scalars['BigInt']['input'];
+    /** Reserved sustained egress in bytes/s (decimal MB/s: 1_000_000 = 1 MB/s). 0 clears the reservation (free tier). */
+    reservedBytesPerSec: Scalars['BigInt']['input'];
+};
+/** Result of setAppReservedThroughput: updated app + reservation fee debited (0 when downgrading or unchanged). */
+export type SetAppReservedThroughputResult = {
+    __typename?: 'SetAppReservedThroughputResult';
+    /** App after the reservation change. */
+    app: App;
+    /** Cents debited from the org wallet for this change (prorated upgrade). 0 when clearing or lowering reservation. */
+    chargedCents: Scalars['BigInt']['output'];
+};
 /** Set the per-app automation policy (guardrails / platform ceilings). */
 export type SetAutomationPolicyInput = {
     /** The app (tenant). */
@@ -6196,7 +6434,7 @@ export type WalletTransaction = {
     referenceId: Maybe<Scalars['String']['output']>;
     /** Unique transaction id (BigInt as a decimal string). */
     transactionId: Scalars['BigInt']['output'];
-    /** What produced this transaction. Known values: "topup" (wallet credit from a checkout/top-up), "usage" (per-app usage charge, negative), "shared_usage" (shared-environment usage charge, negative), "environment_usage" (hourly environment cost, negative), "auto_recharge" (automatic wallet recharge). Other caller-supplied deposit types are possible. */
+    /** What produced this transaction. Known values: "topup" (wallet credit from a checkout/top-up), "usage" (per-app usage charge, negative), "shared_usage" (shared-environment usage charge, negative), "reserved_throughput" (monthly/prorated reserved egress capacity, negative), "environment_usage" (hourly environment cost, negative), "auto_recharge" (automatic wallet recharge). Other caller-supplied deposit types are possible. */
     transactionType: Scalars['String']['output'];
     /** Wallet this transaction belongs to (BigInt as a decimal string). */
     walletId: Scalars['BigInt']['output'];
@@ -9198,6 +9436,14 @@ export type GameModelCreateContainerMutation = {
         metadataJson: string;
     };
 };
+export type GameModelDeleteContainerMutationVariables = Exact<{
+    appId: Scalars['BigInt']['input'];
+    containerId: Scalars['String']['input'];
+}>;
+export type GameModelDeleteContainerMutation = {
+    __typename?: 'Mutation';
+    gameModelDeleteContainer: boolean;
+};
 export type GameModelSetPropertyMutationVariables = Exact<{
     input: SetContainerPropertyInput;
 }>;
@@ -9229,6 +9475,14 @@ export type GameModelAddEdgeMutation = {
         weight: number | null;
     };
 };
+export type GameModelDeleteEdgeMutationVariables = Exact<{
+    appId: Scalars['BigInt']['input'];
+    edgeId: Scalars['String']['input'];
+}>;
+export type GameModelDeleteEdgeMutation = {
+    __typename?: 'Mutation';
+    gameModelDeleteEdge: boolean;
+};
 export type GameModelInvokeMutationVariables = Exact<{
     input: InvokeFunctionInput;
 }>;
@@ -9541,6 +9795,23 @@ export type GameModelUpsertPropertyDefMutation = {
         description: string | null;
     };
 };
+export type GameModelDeletePropertyDefMutationVariables = Exact<{
+    appId: Scalars['BigInt']['input'];
+    containerTypeName: Scalars['String']['input'];
+    key: Scalars['String']['input'];
+}>;
+export type GameModelDeletePropertyDefMutation = {
+    __typename?: 'Mutation';
+    gameModelDeletePropertyDef: boolean;
+};
+export type GameModelDeleteContainerTypeMutationVariables = Exact<{
+    appId: Scalars['BigInt']['input'];
+    typeName: Scalars['String']['input'];
+}>;
+export type GameModelDeleteContainerTypeMutation = {
+    __typename?: 'Mutation';
+    gameModelDeleteContainerType: boolean;
+};
 export type GameModelUpsertFunctionMutationVariables = Exact<{
     input: UpsertFunctionInput;
 }>;
@@ -9873,6 +10144,13 @@ export type GameHostQuery = {
         earliestActorJoinedAt: string;
     } | null;
 };
+export type AmIGameHostQueryVariables = Exact<{
+    appId: Scalars['BigInt']['input'];
+}>;
+export type AmIGameHostQuery = {
+    __typename?: 'Query';
+    amIGameHost: boolean;
+};
 export type ActorHeartbeatMutationVariables = Exact<{
     appId: Scalars['BigInt']['input'];
 }>;
@@ -12164,8 +12442,10 @@ export declare const GameModelCreateSessionDocument: DocumentNode<GameModelCreat
 export declare const GameModelJoinSessionDocument: DocumentNode<GameModelJoinSessionMutation, GameModelJoinSessionMutationVariables>;
 export declare const GameModelSetSessionTurnDocument: DocumentNode<GameModelSetSessionTurnMutation, GameModelSetSessionTurnMutationVariables>;
 export declare const GameModelCreateContainerDocument: DocumentNode<GameModelCreateContainerMutation, GameModelCreateContainerMutationVariables>;
+export declare const GameModelDeleteContainerDocument: DocumentNode<GameModelDeleteContainerMutation, GameModelDeleteContainerMutationVariables>;
 export declare const GameModelSetPropertyDocument: DocumentNode<GameModelSetPropertyMutation, GameModelSetPropertyMutationVariables>;
 export declare const GameModelAddEdgeDocument: DocumentNode<GameModelAddEdgeMutation, GameModelAddEdgeMutationVariables>;
+export declare const GameModelDeleteEdgeDocument: DocumentNode<GameModelDeleteEdgeMutation, GameModelDeleteEdgeMutationVariables>;
 export declare const GameModelInvokeDocument: DocumentNode<GameModelInvokeMutation, GameModelInvokeMutationVariables>;
 export declare const GameModelContainerDocument: DocumentNode<GameModelContainerQuery, GameModelContainerQueryVariables>;
 export declare const GameModelContainersDocument: DocumentNode<GameModelContainersQuery, GameModelContainersQueryVariables>;
@@ -12178,6 +12458,8 @@ export declare const GameModelEventsConnectionDocument: DocumentNode<GameModelEv
 export declare const GameModelSeedDocument: DocumentNode<GameModelSeedMutation, GameModelSeedMutationVariables>;
 export declare const GameModelUpsertContainerTypeDocument: DocumentNode<GameModelUpsertContainerTypeMutation, GameModelUpsertContainerTypeMutationVariables>;
 export declare const GameModelUpsertPropertyDefDocument: DocumentNode<GameModelUpsertPropertyDefMutation, GameModelUpsertPropertyDefMutationVariables>;
+export declare const GameModelDeletePropertyDefDocument: DocumentNode<GameModelDeletePropertyDefMutation, GameModelDeletePropertyDefMutationVariables>;
+export declare const GameModelDeleteContainerTypeDocument: DocumentNode<GameModelDeleteContainerTypeMutation, GameModelDeleteContainerTypeMutationVariables>;
 export declare const GameModelUpsertFunctionDocument: DocumentNode<GameModelUpsertFunctionMutation, GameModelUpsertFunctionMutationVariables>;
 export declare const GameModelDeleteFunctionDocument: DocumentNode<GameModelDeleteFunctionMutation, GameModelDeleteFunctionMutationVariables>;
 export declare const GameModelDefineFeatureDocument: DocumentNode<GameModelDefineFeatureMutation, GameModelDefineFeatureMutationVariables>;
@@ -12193,6 +12475,7 @@ export declare const GameModelTierFeaturesDocument: DocumentNode<GameModelTierFe
 export declare const GameModelPolicyDocument: DocumentNode<GameModelPolicyQuery, GameModelPolicyQueryVariables>;
 export declare const GameModelRevokeTierFeatureDocument: DocumentNode<GameModelRevokeTierFeatureMutation, GameModelRevokeTierFeatureMutationVariables>;
 export declare const GameHostDocument: DocumentNode<GameHostQuery, GameHostQueryVariables>;
+export declare const AmIGameHostDocument: DocumentNode<AmIGameHostQuery, AmIGameHostQueryVariables>;
 export declare const ActorHeartbeatDocument: DocumentNode<ActorHeartbeatMutation, ActorHeartbeatMutationVariables>;
 export declare const CreateOrgRoleDocument: DocumentNode<CreateOrgRoleMutation, CreateOrgRoleMutationVariables>;
 export declare const CreateOrgTokenDocument: DocumentNode<CreateOrgTokenMutation, CreateOrgTokenMutationVariables>;