@onlyworlds/sdk 4.72.2 → 4.72.4

package/AGENTS.md

@@ -1,6 +1,6 @@
 # For AI agents using @onlyworlds/sdk
 
-**Current as of**: SDK **4.x** · schema-dist **v0.33.0-dist.59** (canonical 00.33.00).
+**Current as of**: SDK **4.x** · schema-dist **v0.33.0-dist.63** (canonical 00.33.00).
 This line is asserted by `codegen:check` in CI — if the pin moves and this file is not
 re-read against it, the check fails rather than letting this document rot quietly.
 
@@ -27,7 +27,7 @@ against live data). The v1 surface (`OnlyWorldsClient`, the `ElementType` enum)
 - Never send a `"world"` field in payloads — world identity comes from the API key (422 otherwise).
 - v2 link fields use ONE name both directions (no `_ids` suffix — that is v1 dialect only).
 - PATCH is destructive on sent fields; use `editLinks` (atomic add/remove) for relationships.
-- Offline or stale edits: pass `{ ifMatch: el.change_seq }` to `patch`/`editLinks` (since 4.9.0) and `delete` (since 4.61.0, keel #563).
+- Offline or stale edits: pass `{ ifMatch: el.change_seq }` to `patch`/`editLinks` (since 4.9.0) and `delete` (since 4.61.0).
   If the element moved, nothing is written and `OwPreconditionFailedError` (412) carries
   `current`; the server never merges, the client decides.
 - Polling: `changesHead()` (since 4.15.0) gives `{head, cursor, epoch, unchanged}` without a
@@ -44,7 +44,7 @@ against live data). The v1 surface (`OnlyWorldsClient`, the `ElementType` enum)
 - Images: `uploadImage(bytes)` returns `{ url, ... }`; set `url` as `image_url`. The bytes go
   to the edge with a single-use ticket from keel, never with the API key. `removeImage(urlOrKey)`
   takes one back (its uploader or the world's owner); it leaves `image_url` on elements as is.
-- Files on elements (keel #393): `listFiles(type, id)`, `uploadFile(type, id, bytes, { name?,
+- Files on elements: `listFiles(type, id)`, `uploadFile(type, id, bytes, { name?,
   label?, onProgress? })` (ticket from keel, bytes to the upload host; the kind from the name's
   extension), `fileDownloadLink(type, id, fileId)` (a 5-minute link: fetch it at once, never
   store it), `removeFile(type, id, fileId)`, `worldFiles()` (`used_bytes` of `cap_bytes`).
@@ -70,7 +70,7 @@ against live data). The v1 surface (`OnlyWorldsClient`, the `ElementType` enum)
   without spending: `{ token_rating, tokens_used_today, tokens_remaining, resets_at }`.
 - Who am I (since 4.22.0, a world key): `client.me()` is `{ world, scope, kind, role,
   membership, character, front_door }` (`membership` is what `created_by` holds for what you
-  create; null for the owner); `front_door` (since 4.60.0, keel #558) names who answers for your
+  create; null for the owner); `front_door` (since 4.60.0) names who answers for your
   seat (`sponsor`, `sponsor_character`), your Character, and the world's Charter with up to five
   skill Objects: an agent reads `charter` first. `client.members()` is the roster's rows. An
   account token is a TypeError.
@@ -135,13 +135,13 @@ against live data). The v1 surface (`OnlyWorldsClient`, the `ElementType` enum)
   is lower case letters, digits and hyphens, 1 to 32 characters, else a TypeError at construction.
   keel stores it as `changed_client` on the element and `deleted_client` on a `/changes` delete:
   the client's claim, never proof, and null when none was sent.
-- **Proposals** (keel #519): `propose(type, id, { fields, evidence, expires? })` suggests a change
+- **Proposals**: `propose(type, id, { fields, evidence, expires? })` suggests a change
   without making it; any member who reads the element may, a read key included. The owner or a
   co-builder decides: `acceptProposal(type, id, pid)` (the write is theirs; 409 `stale_proposal`,
   an `OwStaleProposalError` with `conflicts` and `current`, when a proposed field moved since),
   `declineProposal(type, id, pid, { reason? })`; the proposer may `withdrawProposal`. Lists:
   `listProposals(type, id)`, `worldProposals({ state?, element? })`; the world's queue (since
-  4.66.0, keel #565) also lists each new element written as proposed (`kind: 'new_element'`
+  4.66.0) also lists each new element written as proposed (`kind: 'new_element'`
   beside `kind: 'proposal'`), which a keeper settles with `reviewNewElement(type, id, { decision:
   'accept' | 'decline', reason? })` (decline deletes it; 422 `err.isNotProposed` when unmarked).
   A row's `fields` holds only what differs; `omitted` names what an upsert left empty. When the world's

package/CHANGELOG.md

@@ -5,11 +5,23 @@ earlier history lives in git log only.
 
 ## [Unreleased]
 
+## [4.72.4] - 2026-10-25
+
+### Changed
+
+- **Schema repinned to schema-dist `v0.33.0-dist.63`** (from dist.61; the same canonical 00.33.00, so `ONLYWORLDS_VERSION` stays `'00.33.00'`, no schema file moved and no generated type changed). Serials 62 and 63 change only the dist's folder checker, `walk/lint_folder.py`: it imports the schema walk only when run as a command. This package does not ship it; the repin keeps both client packages on one serial.
+
+## [4.72.3] - 2026-10-24
+
+### Changed
+
+- **Schema repinned to schema-dist `v0.33.0-dist.61`** (from dist.59; the same canonical 00.33.00, so `ONLYWORLDS_VERSION` stays `'00.33.00'`, no schema file moved and no generated type changed). Serial 60 rules eight spine readings and adds `x_spine_retires`, the profile's thirteenth key; serial 61 gives `schema.json` the advisory minimum and maximum of the 15 integer fields that have them (this package's types and `FIELD_SCHEMA` are generated from the field list, which does not carry them), rules two more spine readings with four fixture cases, and has the folder lint name the format's version. The SDK reads no spine key; the profile pages it replays (names, room, review) moved only their ruled-when lines.
+
 ## [4.72.2] - 2026-10-24
 
 ### Fixed
 
-- **`OwElementBase.hidden`'s doc comment says what a create does with it.** It said a write ignores the mark. Since keel PR 199 (live 2026-10-23), a create (a POST, a PUT of a new id, a `/bulk` item that creates) carrying `hidden: true` creates the element hidden, from the owner's keys or a co-builder's; any other key gets 403 `hidden_not_allowed` and nothing is created. Every other write still ignores it. The SDK already sent the mark as the element had it; only the words were wrong, and they reach the docs' TypeScript reference.
+- **`OwElementBase.hidden`'s doc comment says what a create does with it.** It said a write ignores the mark. Since keel PR 199 (live 2026-10-23), a create (a POST, a PUT of a new id, a `/bulk` item that creates) carrying `hidden: true` creates the element hidden, from the owner's keys or a co-builder's; any other key gets 403 `hidden_not_allowed` and nothing is created. Every other write still ignores it. The SDK already sent the mark as the element had it; only the words were wrong, in the types an editor shows (`dist/index.d.ts`). (Corrected after release: the entry first said they reach the docs' TypeScript reference, which lists the methods and not this field.)
 - Tests: `create`, `upsert` and `bulk` send `hidden` as given (it is not on the stripped list); a 403 `hidden_not_allowed` surfaces as `OwApiError.code`.
 
 ## [4.72.1] - 2026-10-24

package/README.md

@@ -368,7 +368,7 @@ A lore view (a list, a count, search, a graph, a link picker, a story's context)
 
 ### A world's own words for the types
 
-A world may carry `x_names` on the World: its own word for a type (Character shown as *Employee* in a work world), and a finer word for a supertype inside one. `typeWord(world, type, { supertype, many })` returns that word, or `null` for the standard's name. `world` is a `getWorld()` body (keel serves `x_` keys on the World from Keel #571) or a folder's `world.json`. The API, the folder, the schema and every id keep the standard's names; the word is for display only.
+A world may carry `x_names` on the World: its own word for a type (Character shown as *Employee* in a work world), and a finer word for a supertype inside one. `typeWord(world, type, { supertype, many })` returns that word, or `null` for the standard's name. `world` is a `getWorld()` body (keel serves `x_` keys on the World) or a folder's `world.json`. The API, the folder, the schema and every id keep the standard's names; the word is for display only.
 
 ```typescript
 import { typeWord } from '@onlyworlds/sdk';
@@ -404,4 +404,4 @@ Use this SDK for known operations in your own code (CRUD, sync, bulk). To let an
 
 ## Licence and contributions
 
-The code is MIT (`LICENSE`). Issues are welcome: a bug, a wrong word, a thing you could not do. Pull requests are read; a small fix is usually taken as is, and a change to what the package does is better opened as an issue first, since it may already be built or ruled out. A reply can take a few days. A vulnerability goes privately, never in an issue: `SECURITY.md`.
+The code is MIT (`LICENSE`). Issues are welcome: a bug, a wrong word, a thing you could not do. Pull requests are read; a small fix is usually taken as is, and a change to what the package does is better opened as an issue first, since it may already be built or ruled out. A reply can take a few days. A vulnerability goes privately, never in an issue: `SECURITY.md`. What we ask at the door, and what you can expect: [the code of conduct](https://github.com/OnlyWorlds/OnlyWorlds/blob/main/CODE_OF_CONDUCT.md).

package/SCHEMA.md

@@ -1,6 +1,6 @@
 # OnlyWorlds Schema Reference
 
-**Source**: https://github.com/OnlyWorlds/schema-dist @ **v0.33.0-dist.59** — canonical schema **00.33.00**, published 2026-10-24.
+**Source**: https://github.com/OnlyWorlds/schema-dist @ **v0.33.0-dist.63** — canonical schema **00.33.00**, published 2026-10-25.
 
 GENERATED from the canonical schema YAML — do not hand-edit (regenerate: `python codegen/generate_types.py`).
 Written for both humans and AI agents reading this package locally.

package/dist/index.d.ts

@@ -2163,7 +2163,7 @@ interface OwBulkItem {
  * the NUMERIC HTTP status of that slot (201/400/...), success slots echo
  * created_at/updated_at, error slots carry an OwErrorBody under `error`.
  * A contributor's write on someone else's element fails in its slot as
- * `{status: 403, error: {code: 'not_author'}}` (keel D72), never as a thrown error.
+ * `{status: 403, error: {code: 'not_author'}}`, never as a thrown error.
  * After an `atomic: true` request with `errors` true NOTHING was written, yet the slots of
  * the items that would have succeeded still say 201 (keel's "counterfactual 201s"): do not
  * record their ids as created.
@@ -2617,7 +2617,7 @@ interface OwJoinPreview {
     }>;
     [k: string]: unknown;
 }
-/** One of a world's invite links, as GET /account/worlds/{id}/links lists it (keel C1, 48c10d4). */
+/** One of a world's invite links, as GET /account/worlds/{id}/links lists it. */
 interface OwWorldLink {
     /** The link's id: revokeWorldLink takes it. */
     id: string;
@@ -2737,9 +2737,9 @@ interface OwSignedIn {
 /**
  * One world of the account, from GET /account/worlds: owned (`role: 'owner'`) or shared
  * (`'collaborator'`, with `member_role` the membership's role). Keys by name and last four only,
- * never the key; on a shared world only the member's own keys (keel H8).
+ * never the key; on a shared world only the member's own keys.
  */
-/** The draught's policy (keel PR 155, D143): what GET /character/{id}/context serves and how. */
+/** The draught's policy (keel PR 155): what GET /character/{id}/context serves and how. */
 interface OwDraughtPolicy {
     /** Sections to serve; default every one but `messages`, `room` and `proposed`, each served only when named. */
     components?: OwDraughtComponent[];
@@ -2786,7 +2786,7 @@ interface OwDraughtItem {
     /** The element's body exactly as the list route serves it to the same reader. */
     element: OwElement;
 }
-/** One Character's context in one read, GET /character/{id}/context (keel PR 155, D143; the draught). */
+/** One Character's context in one read, GET /character/{id}/context (keel PR 155; the draught). */
 /** The draught under `compact`: every section may be absent, and so may `cut` (nothing was cut). */
 type OwDraughtCompact = Omit<OwDraught, 'cut'> & {
     cut?: Record<string, number>;
@@ -2883,7 +2883,7 @@ interface OwCreateAccountWorldInput {
 /**
  * createAccountWorld's 201: the world's row as listAccountWorlds lists it, plus the full write key
  * once in `key` (never shown again). keel's document names it `AccountWorldCreated`, and
- * Assembly's verify-sdk-wire holds this type to it key for key.
+ * the maintainers' wire check holds this type to it key for key.
  */
 interface OwCreatedAccountWorld {
     id: string;
@@ -2902,8 +2902,8 @@ interface OwCreatedAccountWorld {
 }
 /**
  * A world key as minted by POST /account/worlds/{id}/keys: the row the account's key list shows,
- * plus the full key once in `key` (never shown again). A member's key carries its `member` label
- * (keel D72); an owner's row has no such field.
+ * plus the full key once in `key` (never shown again). A member's key carries its `member` label;
+ * an owner's row has no such field.
  */
 interface OwMintedKey {
     id: string;
@@ -3111,7 +3111,7 @@ interface ListParams {
     /**
      * Accepted: `name` (exact), `name__icontains`, `supertype`, `subtype`, and
      * `characters=<id>` (contains) on every type with a `characters` link (at schema
-     * 0.30.1: collective, construct, event, narrative, relation, title; keel D76d). Any other key 422s
+     * 0.30.1: collective, construct, event, narrative, relation, title). Any other key 422s
      * server-side with the list of filters in the message -- the client passes keys
      * through unchecked and lets the platform say so. (`__in`, `__gte`, `__lte` and
      * `__isnull` are designed in keel's spec but not built; `ordering` 422s too.)
@@ -3213,7 +3213,7 @@ declare class OwApiError extends Error {
     /**
      * Seconds to wait before retrying, from the `Retry-After` header (a delay in
      * seconds or an HTTP date), else null. keel sends it on 503 `server_busy`
-     * (admission control, D71) and 429 `rate_limited`. This client never retries
+     * (admission control) and 429 `rate_limited`. This client never retries
      * on its own; the value is here so callers can back off politely.
      * Readable in browsers too: keel exposes `Retry-After` over CORS and its
      * admission gate's 503 carries CORS headers (keel `4949406`, 2026-09-28).
@@ -3238,7 +3238,7 @@ declare class OwApiError extends Error {
     get isIdempotencyInFlight(): boolean;
     /**
      * The id is already taken (409 `id_conflict`): a create with an id that exists
-     * (keel D39), or a PUT whose id belongs to another world (D70). Retrying will not
+     * or a PUT whose id belongs to another world. Retrying will not
      * help; the id is the problem. `/bulk` never throws for this: it answers 200 with a
      * per-item slot `{status: 409, error: {code: 'id_conflict'}}` — check the slot.
      */
@@ -3250,7 +3250,7 @@ declare class OwApiError extends Error {
      * the stored cursor and walk again from the start. What to do with what the local copy holds
      * that the new walk does not name is `resyncReason`'s: `role`, keep it; `view`, drop it.
      * Without a reason (keel's hidden mark off), keep it: a reset never empties a copy (keel PR
-     * 104, the Captain's ruling: sharing is forward-only). Never empty the copy on your own.
+     * 104, ruled by Titus: sharing is forward-only). Never empty the copy on your own.
      */
     get isResyncRequired(): boolean;
     /**
@@ -3267,14 +3267,14 @@ declare class OwApiError extends Error {
     get isBusy(): boolean;
     /**
      * A contributor tried to change, replace, relink or delete an element someone else
-     * created (403 `not_author`, keel D72 membership phase 2). Retrying will not help; the
+     * created (403 `not_author`). Retrying will not help; the
      * element is not theirs. `/bulk` never throws for this: it answers 200 with a per-item
      * slot `{status: 403, error: {code: 'not_author'}}`. Owners and co-builders never see it.
      */
     get isNotAuthor(): boolean;
     /**
      * A member key tried what only the owner may do: `patchWorld`, even with a co-builder's
-     * key (403 `owner_only`, keel D72; sharing's publish, republish and revoke answer
+     * key (403 `owner_only`; sharing's publish, republish and revoke answer
      * contributors and guests with the same code). Retrying will not help. The owner's own
      * key never sees it.
      */
@@ -3514,7 +3514,7 @@ declare function pinExpectation(kind: OwKeyKind): 'never' | 'optional' | 'requir
 
 /**
  * Sign in with OnlyWorlds: OAuth 2.1's authorization code with PKCE (S256) for public clients
- * (keel PR 154, live 2026-10-22; the handoff sheet, Orrery `keel/signin-handoff.md` §3).
+ * (keel PR 154, live 2026-10-22).
  *
  * Two calls. `beginSignIn` mints `state` and a PKCE verifier, keeps them under the client id in a
  * storage the page shares with its callback (sessionStorage by default), and hands back the
@@ -3640,7 +3640,7 @@ declare class OwV2Client {
     /** GET /{type}/ -- one cursor page. */
     list(type: ElementType | string, params?: ListParams): Promise<OwPage>;
     /**
-     * GET /character/{id}/context -- the draught (keel PR 155, D143): what one Character knows, as the
+     * GET /character/{id}/context -- the draught (keel PR 155): what one Character knows, as the
      * recorded world holds it, in one read: her element, what she holds and sits in, her open work,
      * how she works, the Events she was in, the Narratives she knows, everything else that names
      * her, her sheet, what changed around her (`since`), and who plays whom; the world's name and
@@ -4063,7 +4063,7 @@ declare class OwV2Client {
     acceptJoin(code: string): Promise<OwJoinedMembership>;
     /**
      * POST /account/worlds/{worldId}/links -- a new invite link for a world this client's
-     * `ow_a_` token owns (keel C1): `reader` is required (`person`, accepted with acceptJoin;
+     * `ow_a_` token owns: `reader` is required (`person`, accepted with acceptJoin;
      * `agent`, redeemed at POST /join; `player`, a friend with no account, redeemed with
      * redeemJoin for a read key); `role`, when left out, is keel's default: guest for a
      * person link, contributor for an agent link (a player link is guest, and refuses any other), `days` (1, 7 or 30) to 7; `withCharacter` (agent links
@@ -4275,7 +4275,7 @@ declare class OwV2Client {
      * `navigate: false`). `redirectUri` is the registered return address as a string, `https:`
      * only, never built from `location.origin`: a tool's registration is read at
      * `GET /api/v2/auth/clients`. `resume` is small JSON handed back by `completeSignIn`. No request
-     * is sent; any client, keyless included. The handoff sheet: Orrery `keel/signin-handoff.md` §3.
+     * is sent; any client, keyless included.
      */
     signInWithOnlyWorlds(opts: OwSignInBegin): Promise<OwSignInBegun>;
     /**
@@ -4525,7 +4525,7 @@ declare function typeWord(world: object | null | undefined, type: string, opts?:
  * The world file, `.owworld` (Folder Format spec §4.7; a `.zip` by another
  * name): one archive holding one whole world as a portable copy (§4.1), and
  * the reader that opens one back. Absorbed from Atlas's
- * `src/store/world-file.ts` (Temper's, Atlas 1.17), so Atlas, Lantern and any
+ * `src/store/world-file.ts` (Atlas 1.17), so Atlas, Lantern and any
  * script read one file the same way; brought to §4.7's checks OW-1 to OW-22
  * and their fixture set.
  *
@@ -4681,8 +4681,8 @@ declare function nfc(text: string): string;
 
 /**
  * World lookup: find the elements a plain-language question is about, in a
- * world held in memory, with no model and no network. Ported from Assembly's
- * Lantern Ask trial (`dossiers/lantern-ask/lookup.mjs`, round 2), with the
+ * world held in memory, with no model and no network. Ported from the
+ * Lantern Ask trial (round 2), with the
  * same ranking, so the trial's measurements on two real worlds describe this
  * code. Pure: runs in a browser and in Node alike.
  *
@@ -4898,7 +4898,7 @@ declare function buildAskContext<T extends OwLookupElement>(items: Array<OwLooku
  * Photo preparation: make a picture from a phone's camera or files ready for
  * `uploadImage` (webp, png, jpeg or avif, at most 15 MB), in the browser,
  * before it leaves the device. Lifted from the upload page's converter
- * (upload.onlyworlds.com, Boss's): canvas, webp at quality 0.82, alpha kept.
+ * (upload.onlyworlds.com): canvas, webp at quality 0.82, alpha kept.
  *
  * Two traps it handles:
  * - A browser that cannot encode webp hands back a PNG instead (Safari has
@@ -4963,8 +4963,8 @@ declare function preparePhoto(input: Blob, opts?: OwPhotoOptions): Promise<OwPre
  * Calendar kernel — pure arithmetic, formatting, and parsing over the world's
  * integer time line.
  *
- * Contract: Forge/Notes/2026-07-14-calendar-design-final.md §5 + §5b (3-lens
- * gated 2026-07-14). The binding rules, restated where they bite:
+ * The contract is the calendar design of 2026-07-14 (its §5 and §5b). The
+ * binding rules, restated where they bite:
  *
  * - The number line is the only truth. A calendar names it; it never owns it.
  * - Absolute year index is ZERO-based: step 0 opens absolute year 0. All
@@ -5355,7 +5355,7 @@ declare enum GameTier {
  * Since then keel mounts only `status/` and `encryption-info/` under /tokens/
  * (`accounts/token_api.py`; consume, access-key and both revokes answer 404 on
  * production, 2026-10-14), and spending moved server-side: the Council spends
- * through keel's council proxy (Skeld's ruling), and
+ * through keel's council proxy (ruled 2026-10-14), and
  * `OwV2Client.allowance()` reads the token rating. The four dead methods are
  * deprecated in 4.23.0 and leave in 5.0.
  */
@@ -5419,7 +5419,7 @@ declare class TokenResource {
      * Consume tokens for service usage
      *
      * @deprecated keel serves no consume route (404 on production since 2026-10;
-     * no client decides what its act costs, Skeld's ruling): spending
+     * no client decides what its act costs, ruled 2026-10-14): spending
      * happens server-side in the route that does the work. Removed in 5.0.
      *
      * Reports token consumption to track daily usage. Allows consumption even if

package/dist/index.js

@@ -108,7 +108,7 @@ var OwApiError = class extends Error {
   }
   /**
    * The id is already taken (409 `id_conflict`): a create with an id that exists
-   * (keel D39), or a PUT whose id belongs to another world (D70). Retrying will not
+   * or a PUT whose id belongs to another world. Retrying will not
    * help; the id is the problem. `/bulk` never throws for this: it answers 200 with a
    * per-item slot `{status: 409, error: {code: 'id_conflict'}}` — check the slot.
    */
@@ -122,7 +122,7 @@ var OwApiError = class extends Error {
    * the stored cursor and walk again from the start. What to do with what the local copy holds
    * that the new walk does not name is `resyncReason`'s: `role`, keep it; `view`, drop it.
    * Without a reason (keel's hidden mark off), keep it: a reset never empties a copy (keel PR
-   * 104, the Captain's ruling: sharing is forward-only). Never empty the copy on your own.
+   * 104, ruled by Titus: sharing is forward-only). Never empty the copy on your own.
    */
   get isResyncRequired() {
     return this.status === 409 && this.code === "resync_required";
@@ -149,7 +149,7 @@ var OwApiError = class extends Error {
   }
   /**
    * A contributor tried to change, replace, relink or delete an element someone else
-   * created (403 `not_author`, keel D72 membership phase 2). Retrying will not help; the
+   * created (403 `not_author`). Retrying will not help; the
    * element is not theirs. `/bulk` never throws for this: it answers 200 with a per-item
    * slot `{status: 403, error: {code: 'not_author'}}`. Owners and co-builders never see it.
    */
@@ -158,7 +158,7 @@ var OwApiError = class extends Error {
   }
   /**
    * A member key tried what only the owner may do: `patchWorld`, even with a co-builder's
-   * key (403 `owner_only`, keel D72; sharing's publish, republish and revoke answer
+   * key (403 `owner_only`; sharing's publish, republish and revoke answer
    * contributors and guests with the same code). Retrying will not help. The owner's own
    * key never sees it.
    */
@@ -1377,7 +1377,7 @@ var OwV2Client = class {
   }
   /**
    * POST /account/worlds/{worldId}/links -- a new invite link for a world this client's
-   * `ow_a_` token owns (keel C1): `reader` is required (`person`, accepted with acceptJoin;
+   * `ow_a_` token owns: `reader` is required (`person`, accepted with acceptJoin;
    * `agent`, redeemed at POST /join; `player`, a friend with no account, redeemed with
    * redeemJoin for a read key); `role`, when left out, is keel's default: guest for a
    * person link, contributor for an agent link (a player link is guest, and refuses any other), `days` (1, 7 or 30) to 7; `withCharacter` (agent links
@@ -1722,7 +1722,7 @@ var OwV2Client = class {
    * `navigate: false`). `redirectUri` is the registered return address as a string, `https:`
    * only, never built from `location.origin`: a tool's registration is read at
    * `GET /api/v2/auth/clients`. `resume` is small JSON handed back by `completeSignIn`. No request
-   * is sent; any client, keyless included. The handoff sheet: Orrery `keel/signin-handoff.md` §3.
+   * is sent; any client, keyless included.
    */
   async signInWithOnlyWorlds(opts) {
     only("signInWithOnlyWorlds", opts, ["clientId", "redirectUri", "resume", "storage", "navigate"]);
@@ -4780,7 +4780,7 @@ var TokenResource = class {
    * Consume tokens for service usage
    *
    * @deprecated keel serves no consume route (404 on production since 2026-10;
-   * no client decides what its act costs, Skeld's ruling): spending
+   * no client decides what its act costs, ruled 2026-10-14): spending
    * happens server-side in the route that does the work. Removed in 5.0.
    *
    * Reports token consumption to track daily usage. Allows consumption even if

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@onlyworlds/sdk",
-  "version": "4.72.2",
+  "version": "4.72.4",
   "description": "TypeScript SDK for the OnlyWorlds API - build world-building applications with type safety",
   "type": "module",
   "exports": {