crowdypy 0.15.0.dev1__tar.gz → 0.16.0.dev1__tar.gz

{crowdypy-0.15.0.dev1 → crowdypy-0.16.0.dev1}/MIGRATION.md

@@ -3,6 +3,28 @@
 CrowdyPy is pre-1.0. Within a minor line, patch releases keep source compatibility; each
 new minor may change the API. Read the section for every minor you skip.
 
+## 0.16.0
+
+CrowdyJS 18.16.0 and CrowdyCPP 0.68.0. Additive, and served on the dev tier only (every other
+tier answers `FEATURE_DISABLED`): org-managed players, an organization's own players that it
+signs in itself.
+
+- **`client.portal.adopt_app_token(response)`** holds the app token the organization's server
+  minted with its org token (`mintManagedPlayerToken`) and returns it as an
+  `AppTokenResponse`; on a game client pass that to `client.set_app_token` so native UDP signs
+  with it. It raises `ValueError` and holds nothing for a response without a token or with an
+  org token (`cko_...`). There is no org-token mint wrapper, on purpose.
+- **`client.portal.exchange_managed_player_assertion(app_id, assertion)`** trades an assertion
+  the organization's sign-in service signed; public, and each assertion works once.
+  `crowdypy.errors.assertion_rejected_of` reads the refusal's `reason`.
+- **`client.managed_players`** (also `client.admin.managed_players`): `list`, `get`,
+  `provision` (up to 500 a call), `update`, `end_sessions`, `delete`, `settings`,
+  `signing_keys`, `register_signing_key` (a JWK with private members raises `ValueError` before
+  any request; `publicJwk` may be a mapping), `revoke_signing_key`, `app_mods_enabled` and
+  `set_app_mods`.
+- `client.organizations.revoke_token(id, end_sessions=True)` also ends the sessions a token
+  signed in. `crowdypy.errors.managed_player_not_allowed_of` reads `MANAGED_PLAYER_NOT_ALLOWED`.
+
 ## 0.15.0
 
 CrowdyJS 18.15.0 and CrowdyCPP 0.67.4. Additive.

{crowdypy-0.15.0.dev1 → crowdypy-0.16.0.dev1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: crowdypy
-Version: 0.15.0.dev1
+Version: 0.16.0.dev1
 Summary: Official Python SDK for Crowded Kingdoms: typed GraphQL clients and a native UDP replication core
 Keywords: crowded-kingdoms,multiplayer,replication,graphql,sdk,udp
 Author: Crowded Kingdoms
@@ -51,6 +51,8 @@ CrowdyPy follows the [CrowdyJS](https://github.com/CrowdedKingdoms/CrowdyJS) API
 client, bound with [nanobind](https://github.com/wjakob/nanobind) and shipped inside the
 wheel. Python never touches a datagram.
 
+**v0.16.0: org-managed players (dev only).** An organization that runs its own accounts signs its players in itself: its server mints a player's app token with an org token, or its sign-in service signs an assertion. A device holds the first with `client.portal.adopt_app_token(response)` (it refuses an org token, which stays on the organization's server; there is no org-token mint wrapper) or trades the second with `client.portal.exchange_managed_player_assertion(app_id, assertion)`, and gives the result to `client.set_app_token`. `client.managed_players` is the organization's administration. CrowdyJS 18.16.0 and CrowdyCPP 0.68.0. See [MIGRATION.md](MIGRATION.md).
+
 **v0.15.0: a voxel edit that waits for the server, and opcode 140 from `client.udp`.** `chunks.set_voxel(..., optimistic=False)` changes nothing locally until the server's echo of the edit arrives; `client.udp.send_generic_spatial` sends an app-defined spatial message. CrowdyJS 18.15.0 and CrowdyCPP 0.67.4. See [MIGRATION.md](MIGRATION.md).
 
 **v0.14.2: CrowdyJS 18.14.0 and CrowdyCPP 0.67.3.** `player_wallet.charges()` is deprecated: read `transactions()`, whose `usage_debit` entries are the usage charges.

{crowdypy-0.15.0.dev1 → crowdypy-0.16.0.dev1}/README.md

@@ -11,6 +11,8 @@ CrowdyPy follows the [CrowdyJS](https://github.com/CrowdedKingdoms/CrowdyJS) API
 client, bound with [nanobind](https://github.com/wjakob/nanobind) and shipped inside the
 wheel. Python never touches a datagram.
 
+**v0.16.0: org-managed players (dev only).** An organization that runs its own accounts signs its players in itself: its server mints a player's app token with an org token, or its sign-in service signs an assertion. A device holds the first with `client.portal.adopt_app_token(response)` (it refuses an org token, which stays on the organization's server; there is no org-token mint wrapper) or trades the second with `client.portal.exchange_managed_player_assertion(app_id, assertion)`, and gives the result to `client.set_app_token`. `client.managed_players` is the organization's administration. CrowdyJS 18.16.0 and CrowdyCPP 0.68.0. See [MIGRATION.md](MIGRATION.md).
+
 **v0.15.0: a voxel edit that waits for the server, and opcode 140 from `client.udp`.** `chunks.set_voxel(..., optimistic=False)` changes nothing locally until the server's echo of the edit arrives; `client.udp.send_generic_spatial` sends an app-defined spatial message. CrowdyJS 18.15.0 and CrowdyCPP 0.67.4. See [MIGRATION.md](MIGRATION.md).
 
 **v0.14.2: CrowdyJS 18.14.0 and CrowdyCPP 0.67.3.** `player_wallet.charges()` is deprecated: read `transactions()`, whose `usage_debit` entries are the usage charges.

{crowdypy-0.15.0.dev1 → crowdypy-0.16.0.dev1}/docs/compatibility.md

@@ -5,7 +5,7 @@ are in `pyproject.toml` (`[project].version`, `[tool.crowdypy.crowdyjs]`,
 `[tool.crowdypy.crowdycpp]`); `tests/unit/test_release_versions.py` refuses this page when
 its version disagrees.
 
-- CrowdyPy `0.15.0`
+- CrowdyPy `0.16.0`
 - API surface: CrowdyJS (the pinned version and commit in `pyproject.toml`); the generated
   `docs/parity-matrix.md` lists every covered method, every native equivalent and every
   browser exclusion with its reason. The gate is strict: there are no portable gaps, and a

{crowdypy-0.15.0.dev1 → crowdypy-0.16.0.dev1}/docs/parity-matrix.md

@@ -4,17 +4,17 @@ Generated by `tools/parity/parity.py`; do not edit by hand. Classifications live
 
 ## Target
 
-- CrowdyJS: `18.15.0` at `e21b61e79a1a509b81826fc8db2282c107b2e0ea`
-- CrowdyCPP (native core): `0.67.4` at `830a700b99223555c7d687d5471825701f3dbdf8`
+- CrowdyJS: `18.16.0` at `d398e24658a50abb118f956c8c9a07d94ae5c53e`
+- CrowdyCPP (native core): `0.68.0` at `bb240e625b44b56721c0937cd4c515180860f79f`
 - schema.gql identical to CrowdyJS's: yes
 - Gate mode: strict portable parity (every portable gap is release-blocking)
 
 ## Summary
 
-- Covered: 1353
+- Covered: 1384
 - Portable gap: 0
 - Native equivalent: 46
-- Browser exclusion: 113
+- Browser exclusion: 115
 - Deprecated roots: 2
 - Unclassified: 0
 
@@ -92,6 +92,7 @@ Generated by `tools/parity/parity.py`; do not edit by hand. Classifications live
 | `mutation.deleteChannel` | covered |
 | `mutation.deleteChannelRole` | covered |
 | `mutation.deleteGrid` | covered |
+| `mutation.deleteManagedPlayer` | covered |
 | `mutation.deleteMyAccount` | covered |
 | `mutation.deleteOrgRole` | covered |
 | `mutation.deleteQuota` | covered |
@@ -99,7 +100,9 @@ Generated by `tools/parity/parity.py`; do not edit by hand. Classifications live
 | `mutation.deleteTeamRole` | covered |
 | `mutation.deleteUserAppState` | covered |
 | `mutation.disconnectUdpProxy` | native equivalent — client.udp sends and receives this over CrowdyCPP's native UDP connection; the GraphQL UDP proxy exists because a page cannot open a UDP socket |
+| `mutation.endManagedPlayerSessions` | covered |
 | `mutation.endTierAccessSessions` | browser exclusion — super-admin or operator only; the SDK wraps nothing for platform roles (tooling calls it directly) |
+| `mutation.exchangeManagedPlayerAssertion` | covered |
 | `mutation.exchangePortalCode` | covered |
 | `mutation.execActivateVersion` | covered |
 | `mutation.execBuild` | covered |
@@ -144,10 +147,13 @@ Generated by `tools/parity/parity.py`; do not edit by hand. Classifications live
 | `mutation.logoutAllDevices` | covered |
 | `mutation.mintAppToken` | covered |
 | `mutation.mintGridToken` | covered |
+| `mutation.mintManagedPlayerToken` | browser exclusion — an organization's server call with its org token; no SDK wraps it, and a device adopts the token it returns (portal.adopt_app_token) |
+| `mutation.provisionManagedPlayers` | covered |
 | `mutation.publishAppToShared` | covered |
 | `mutation.recordPlayerConsents` | covered |
 | `mutation.refreshAppToken` | covered |
 | `mutation.register` | covered |
+| `mutation.registerOrgSigningKey` | covered |
 | `mutation.reinstateOrganization` | browser exclusion — operator-only organization lifecycle; not a game-client surface |
 | `mutation.releaseClaimedGrid` | covered |
 | `mutation.removeChannelMember` | covered |
@@ -167,6 +173,7 @@ Generated by `tools/parity/parity.py`; do not edit by hand. Classifications live
 | `mutation.revokeAppCodeAdmission` | covered |
 | `mutation.revokeGridPermissions` | covered |
 | `mutation.revokeGroupFromGrid` | covered |
+| `mutation.revokeOrgSigningKey` | covered |
 | `mutation.revokeOrgToken` | covered |
 | `mutation.revokeTierAccessProvisioningToken` | browser exclusion — super-admin or operator only; the SDK wraps nothing for platform roles (tooling calls it directly) |
 | `mutation.revokeTierAccessRule` | browser exclusion — super-admin or operator only; the SDK wraps nothing for platform roles (tooling calls it directly) |
@@ -188,6 +195,7 @@ Generated by `tools/parity/parity.py`; do not edit by hand. Classifications live
 | `mutation.setAppCodeAdmissionMode` | covered |
 | `mutation.setAppComputeBudget` | covered |
 | `mutation.setAppGridClaimPolicy` | covered |
+| `mutation.setAppManagedPlayerMods` | covered |
 | `mutation.setAppReservedThroughput` | covered |
 | `mutation.setAppSpendCaps` | covered |
 | `mutation.setAppVisibility` | browser exclusion — super-admin or operator only; the SDK wraps nothing for platform roles (tooling calls it directly) |
@@ -204,6 +212,7 @@ Generated by `tools/parity/parity.py`; do not edit by hand. Classifications live
 | `mutation.setInitialPassword` | covered |
 | `mutation.setOperator` | browser exclusion — super-admin or operator only; the SDK wraps nothing for platform roles (tooling calls it directly) |
 | `mutation.setOrgBillingExempt` | browser exclusion — operator-only billing control; not a game-client surface |
+| `mutation.setOrgManagedPlayerSettings` | browser exclusion — super-admin or operator only; the SDK wraps nothing for platform roles (tooling calls it directly) |
 | `mutation.setOrgStatus` | browser exclusion — super-admin or operator only; the SDK wraps nothing for platform roles (tooling calls it directly) |
 | `mutation.setPlayerAutoBilling` | covered |
 | `mutation.setPlayerCodeListingStatus` | covered |
@@ -241,6 +250,7 @@ Generated by `tools/parity/parity.py`; do not edit by hand. Classifications live
 | `mutation.updateChunkLods` | covered |
 | `mutation.updateChunkState` | covered |
 | `mutation.updateGamertag` | covered |
+| `mutation.updateManagedPlayer` | covered |
 | `mutation.updateOrgMemberRoles` | covered |
 | `mutation.updateOrgRole` | covered |
 | `mutation.updateOrgToken` | covered |
@@ -366,6 +376,8 @@ Generated by `tools/parity/parity.py`; do not edit by hand. Classifications live
 | `query.inputLogSessions` | covered |
 | `query.listVoxelUpdatesByDistance` | covered |
 | `query.listVoxels` | covered |
+| `query.managedPlayer` | covered |
+| `query.managedPlayers` | covered |
 | `query.me` | covered |
 | `query.memberRoles` | covered |
 | `query.meteredRateCard` | browser exclusion — public price list for the pricing page and dashboard; a game client has no use for it |
@@ -387,10 +399,12 @@ Generated by `tools/parity/parity.py`; do not edit by hand. Classifications live
 | `query.nearbyGrids` | covered |
 | `query.orgAutoBilling` | covered |
 | `query.orgFreeAppQuota` | covered |
+| `query.orgManagedPlayerSettings` | covered |
 | `query.orgMembers` | covered |
 | `query.orgPaymentMethods` | covered |
 | `query.orgPermissions` | covered |
 | `query.orgRoles` | covered |
+| `query.orgSigningKeys` | covered |
 | `query.orgTokens` | covered |
 | `query.orgUsageProjection` | covered |
 | `query.orgUsageSummary` | covered |
@@ -507,6 +521,7 @@ Generated by `tools/parity/parity.py`; do not edit by hand. Classifications live
 | `LeaderboardsKit -> LeaderboardsKit` | covered |
 | `LocalActorStore -> LocalActorStore` | covered |
 | `LootKit -> LootKit` | covered |
+| `ManagedPlayersAPI -> ManagedPlayersAPI` | covered |
 | `MarketCore -> MarketCore` | covered |
 | `MarketHandle -> MarketHandle` | covered |
 | `MarketplaceAPI -> MarketplaceAPI` | covered |
@@ -1049,6 +1064,18 @@ Generated by `tools/parity/parity.py`; do not edit by hand. Classifications live
 | `LocalActorStore.status` | covered |
 | `LootKit.open` | covered |
 | `LootKit.tables` | covered |
+| `ManagedPlayersAPI.appModsEnabled` | covered |
+| `ManagedPlayersAPI.delete` | covered |
+| `ManagedPlayersAPI.endSessions` | covered |
+| `ManagedPlayersAPI.get` | covered |
+| `ManagedPlayersAPI.list` | covered |
+| `ManagedPlayersAPI.provision` | covered |
+| `ManagedPlayersAPI.registerSigningKey` | covered |
+| `ManagedPlayersAPI.revokeSigningKey` | covered |
+| `ManagedPlayersAPI.setAppMods` | covered |
+| `ManagedPlayersAPI.settings` | covered |
+| `ManagedPlayersAPI.signingKeys` | covered |
+| `ManagedPlayersAPI.update` | covered |
 | `MarketCore.change` | covered |
 | `MarketHandle.book` | covered |
 | `MarketHandle.cancel` | covered |
@@ -1148,12 +1175,14 @@ Generated by `tools/parity/parity.py`; do not edit by hand. Classifications live
 | `PlayerWalletAPI.setSpendCap` | covered |
 | `PlayerWalletAPI.spendCaps` | covered |
 | `PlayerWalletAPI.transactions` | covered |
+| `PortalAPI.adoptAppToken` | covered |
 | `PortalAPI.authorizeApp` | covered |
 | `PortalAPI.beginEntry` | covered |
 | `PortalAPI.completeEntry` | covered |
 | `PortalAPI.createAuthorizationCode` | covered |
 | `PortalAPI.embeddedHostInfo` | browser exclusion — answers whether the page runs inside the Crowdy Games shell iframe; a a Python client client never does |
 | `PortalAPI.exchangeCode` | covered |
+| `PortalAPI.exchangeManagedPlayerAssertion` | covered |
 | `PortalAPI.getConsent` | covered |
 | `PortalAPI.handleAuthorizeRequest` | browser exclusion — Studio /authorize browser-page redirect handler; a Python client uses authorization-code APIs |
 | `PortalAPI.handleSignInCallback` | browser exclusion — the browser return leg of hosted sign-in (reads location.search, rewrites history); a Python client uses exchangeCode with the code it received |
@@ -1403,6 +1432,7 @@ Generated by `tools/parity/parity.py`; do not edit by hand. Classifications live
 | `ACTOR_EXISTS_CODE` | covered |
 | `APP_PAUSED_CODE` | covered |
 | `APP_UNAVAILABLE_CODE` | covered |
+| `ASSERTION_REJECTED_CODE` | covered |
 | `AdminAPI` | covered |
 | `BUNDLE_HEADER_BYTES` | native equivalent — the same codec, CrowdyCPP's, through crowdypy.wire: crowdypy.wire.bundle() / split_datagram(), which own the bundle layout |
 | `BUNDLE_LENGTH_PREFIX_BYTES` | native equivalent — the same codec, CrowdyCPP's, through crowdypy.wire: crowdypy.wire.bundle() / split_datagram(), which own the bundle layout |
@@ -1443,6 +1473,7 @@ Generated by `tools/parity/parity.py`; do not edit by hand. Classifications live
 | `GraphQLTransport` | native equivalent — pass an httpx.AsyncClient / httpx.Client as http_client= (transport, proxies, HTTP/2, timeouts) |
 | `GridScopeError` | covered |
 | `LbCookieStore` | covered |
+| `MANAGED_PLAYER_NOT_ALLOWED_CODE` | covered |
 | `MAX_VIDEO_FRAGMENTS` | covered |
 | `MAX_VIDEO_FRAGMENT_BODY_BYTES` | covered |
 | `MAX_VOICE_FRAME_BYTES` | covered |
@@ -1485,6 +1516,7 @@ Generated by `tools/parity/parity.py`; do not edit by hand. Classifications live
 | `appPausedOf` | covered |
 | `armGlueRequest` | browser exclusion — SharedArrayBuffer + Atomics bridge between the page and the glue Web Worker |
 | `assertVoxelEdit` | covered |
+| `assertionRejectedOf` | covered |
 | `bundleSizeOf` | native equivalent — the same codec, CrowdyCPP's, through crowdypy.wire: len(crowdypy.wire.bundle(...)); the layout is CrowdyCPP's |
 | `createBootstrapRediscover` | covered |
 | `createCrowdyClient` | covered |
@@ -1520,6 +1552,7 @@ Generated by `tools/parity/parity.py`; do not edit by hand. Classifications live
 | `isNoPasswordSetError` | covered |
 | `isPasswordAlreadySetError` | covered |
 | `isPasswordUnconfirmedError` | covered |
+| `managedPlayerNotAllowedOf` | covered |
 | `moveFromError` | covered |
 | `moveFromErrors` | covered |
 | `packMessageBundle` | native equivalent — the same codec, CrowdyCPP's, through crowdypy.wire: crowdypy.wire.bundle |

crowdypy-0.16.0.dev1/operations/managedPlayers/AppManagedPlayerMods.graphql

@@ -0,0 +1,6 @@
+query AppManagedPlayerMods($appId: BigInt!) {
+  app(appId: $appId) {
+    appId
+    managedPlayerModsEnabled
+  }
+}

crowdypy-0.16.0.dev1/operations/managedPlayers/DeleteManagedPlayer.graphql

@@ -0,0 +1,3 @@
+mutation DeleteManagedPlayer($orgId: BigInt!, $externalId: String!) {
+  deleteManagedPlayer(orgId: $orgId, externalId: $externalId)
+}

crowdypy-0.16.0.dev1/operations/managedPlayers/EndManagedPlayerSessions.graphql

@@ -0,0 +1,3 @@
+mutation EndManagedPlayerSessions($orgId: BigInt!, $externalId: String!) {
+  endManagedPlayerSessions(orgId: $orgId, externalId: $externalId)
+}

crowdypy-0.16.0.dev1/operations/managedPlayers/ManagedPlayer.graphql

@@ -0,0 +1,5 @@
+query ManagedPlayer($orgId: BigInt!, $externalId: String!) {
+  managedPlayer(orgId: $orgId, externalId: $externalId) {
+    ...ManagedPlayerFields
+  }
+}

crowdypy-0.16.0.dev1/operations/managedPlayers/ManagedPlayerFields.graphql

@@ -0,0 +1,9 @@
+fragment ManagedPlayerFields on ManagedPlayer {
+  userId
+  orgId
+  externalId
+  gamertag
+  disambiguation
+  disabled
+  createdAt
+}

crowdypy-0.16.0.dev1/operations/managedPlayers/ManagedPlayers.graphql

@@ -0,0 +1,8 @@
+query ManagedPlayers($orgId: BigInt!, $search: String, $first: Int, $after: String) {
+  managedPlayers(orgId: $orgId, search: $search, first: $first, after: $after) {
+    players {
+      ...ManagedPlayerFields
+    }
+    nextCursor
+  }
+}

crowdypy-0.16.0.dev1/operations/managedPlayers/OrgManagedPlayerSettings.graphql

@@ -0,0 +1,11 @@
+query OrgManagedPlayerSettings($orgId: BigInt!) {
+  orgManagedPlayerSettings(orgId: $orgId) {
+    orgId
+    enabled
+    maxPlayers
+    playerCount
+    mintsPerMinute
+    defaultSessionTtlSeconds
+    maxSessionTtlSeconds
+  }
+}

crowdypy-0.16.0.dev1/operations/managedPlayers/OrgSigningKeyFields.graphql

@@ -0,0 +1,13 @@
+fragment OrgSigningKeyFields on OrgSigningKey {
+  keyId
+  orgId
+  kid
+  algorithm
+  publicJwk
+  issuer
+  audience
+  appIds
+  label
+  createdAt
+  revokedAt
+}

crowdypy-0.16.0.dev1/operations/managedPlayers/OrgSigningKeys.graphql

@@ -0,0 +1,5 @@
+query OrgSigningKeys($orgId: BigInt!) {
+  orgSigningKeys(orgId: $orgId) {
+    ...OrgSigningKeyFields
+  }
+}

crowdypy-0.16.0.dev1/operations/managedPlayers/ProvisionManagedPlayers.graphql

@@ -0,0 +1,9 @@
+mutation ProvisionManagedPlayers($input: ProvisionManagedPlayersInput!) {
+  provisionManagedPlayers(input: $input) {
+    created
+    existing
+    players {
+      ...ManagedPlayerFields
+    }
+  }
+}

crowdypy-0.16.0.dev1/operations/managedPlayers/RegisterOrgSigningKey.graphql

@@ -0,0 +1,5 @@
+mutation RegisterOrgSigningKey($input: RegisterOrgSigningKeyInput!) {
+  registerOrgSigningKey(input: $input) {
+    ...OrgSigningKeyFields
+  }
+}

crowdypy-0.16.0.dev1/operations/managedPlayers/RevokeOrgSigningKey.graphql

@@ -0,0 +1,3 @@
+mutation RevokeOrgSigningKey($orgId: BigInt!, $keyId: BigInt!) {
+  revokeOrgSigningKey(orgId: $orgId, keyId: $keyId)
+}

crowdypy-0.16.0.dev1/operations/managedPlayers/SetAppManagedPlayerMods.graphql

@@ -0,0 +1,3 @@
+mutation SetAppManagedPlayerMods($appId: BigInt!, $enabled: Boolean!) {
+  setAppManagedPlayerMods(appId: $appId, enabled: $enabled)
+}

crowdypy-0.16.0.dev1/operations/managedPlayers/UpdateManagedPlayer.graphql

@@ -0,0 +1,5 @@
+mutation UpdateManagedPlayer($input: UpdateManagedPlayerInput!) {
+  updateManagedPlayer(input: $input) {
+    ...ManagedPlayerFields
+  }
+}

{crowdypy-0.15.0.dev1 → crowdypy-0.16.0.dev1}/operations/organizations/CreateOrgToken.graphql

@@ -4,6 +4,8 @@ mutation CreateOrgToken($input: CreateOrgTokenInput!) {
     orgId
     token
     label
+    scopes
+    appIds
     isActive
     expiresAt
     createdAt

{crowdypy-0.15.0.dev1 → crowdypy-0.16.0.dev1}/operations/organizations/OrgTokens.graphql

@@ -3,6 +3,8 @@ query OrgTokens($orgId: BigInt!) {
     orgTokenId
     orgId
     label
+    scopes
+    appIds
     isActive
     lastUsedAt
     revokedAt

crowdypy-0.16.0.dev1/operations/organizations/RevokeOrgToken.graphql

@@ -0,0 +1,3 @@
+mutation RevokeOrgToken($orgTokenId: BigInt!, $endSessions: Boolean) {
+  revokeOrgToken(orgTokenId: $orgTokenId, endSessions: $endSessions)
+}

{crowdypy-0.15.0.dev1 → crowdypy-0.16.0.dev1}/operations/organizations/UpdateOrgToken.graphql

@@ -2,6 +2,8 @@ mutation UpdateOrgToken($orgTokenId: BigInt!, $input: UpdateOrgTokenInput!) {
   updateOrgToken(orgTokenId: $orgTokenId, input: $input) {
     orgTokenId
     label
+    scopes
+    appIds
     isActive
     expiresAt
     revokedAt

{crowdypy-0.15.0.dev1 → crowdypy-0.16.0.dev1}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "scikit_build_core.build"
 
 [project]
 name = "crowdypy"
-version = "0.15.0.dev1"
+version = "0.16.0.dev1"
 description = "Official Python SDK for Crowded Kingdoms: typed GraphQL clients and a native UDP replication core"
 readme = "README.md"
 license = "MIT AND Apache-2.0"
@@ -119,20 +119,20 @@ environment = { OPENSSL_ROOT_DIR = "C:/vcpkg/installed/x64-windows-static-md" }
 # --------------------------------------------------------------------------------------
 
 [tool.crowdypy.crowdyjs]
-version = "18.15.0"
-commit = "e21b61e79a1a509b81826fc8db2282c107b2e0ea"
+version = "18.16.0"
+commit = "d398e24658a50abb118f956c8c9a07d94ae5c53e"
 
 [tool.crowdypy.crowdycpp]
-version = "0.67.4"
-tag = "dev/v0.67.4"
-commit = "830a700b99223555c7d687d5471825701f3dbdf8"
-tree-sha256 = "8f1857cc216193cf861bce48b7df975a2e0e93563d45736c4fb2584fcd26d009"
+version = "0.68.0"
+tag = "dev/v0.68.0"
+commit = "bb240e625b44b56721c0937cd4c515180860f79f"
+tree-sha256 = "c6db73f54cba1c738d6bdad7a5c586369518a38ca4be39385957c6653d740dab"
 
 # schema.gql and operations/ are CrowdyJS's, copied from the commit pinned above by
 # scripts/schema_sync.py, which records these hashes and re-derives them in CI.
 [tool.crowdypy.graphql]
-schema-sha256 = "90d407b44d95416f23384023451b54edf73e18881dcad9ad9f06b20d8bd3fdfd"
-operations-sha256 = "37b1e06dc4e997bb42506968c50698a184934581a6d94d9471a29d2ce74ff3d3"
+schema-sha256 = "6f8f1547097b47f8cc41bf46dcb4c791d285c8192e8239155b791c7734847b6f"
+operations-sha256 = "4b415e08c48e2113ddfcfd90a111d25793d5b64ad95a339f1d0aca60b1201c56"
 
 # The SDL the docs site publishes. scripts/schema_drift.py compares the snapshot against it
 # on a schedule; nothing on the per-commit path reads the network.