crowdypy 0.16.0.dev1__tar.gz → 0.17.0.dev1__tar.gz

{crowdypy-0.16.0.dev1 → crowdypy-0.17.0.dev1}/MIGRATION.md

@@ -3,11 +3,29 @@
 CrowdyPy is pre-1.0. Within a minor line, patch releases keep source compatibility; each
 new minor may change the API. Read the section for every minor you skip.
 
+## 0.17.0
+
+CrowdyJS 18.17.0 and CrowdyCPP 0.69.0. Additive. ck-api v2.53.0 serves org-managed players on
+dev, test and prod, and refuses an organization's managed sign-ins (both ways), refreshes and
+provisioning with `ORG_LEGAL_ACCEPTANCE_REQUIRED` until an admin of the organization accepts
+the Org-Managed Players Addendum in Studio.
+
+- **`crowdypy.errors.org_legal_acceptance_required_of`** reads that refusal
+  (`ORG_LEGAL_ACCEPTANCE_REQUIRED_CODE`). Neither the player nor the organization's server can
+  fix it, so do not retry.
+- **`client.managed_players.settings(org_id)`** also returns `termsVersion`, `termsUrl`,
+  `termsAccepted`, `termsAcceptedVersion`, `termsAcceptedAt`, `termsAcceptedByUserId` and
+  `viewerMayAcceptTerms`.
+- **Fix:** `crowdypy.domains.portal.is_legal_acceptance_required_error` no longer matches the
+  organization's code by its message: a managed player has no clickwrap to show.
+- No wrapper for `acceptManagedPlayerTerms`, as in CrowdyJS and CrowdyCPP: it binds the
+  organization, so a person accepts it in Studio.
+
 ## 0.16.0
 
-CrowdyJS 18.16.0 and CrowdyCPP 0.68.0. Additive, and served on the dev tier only (every other
-tier answers `FEATURE_DISABLED`): org-managed players, an organization's own players that it
-signs in itself.
+CrowdyJS 18.16.0 and CrowdyCPP 0.68.0. Additive, and served on the dev tier only at the time
+(every other tier answered `FEATURE_DISABLED` until ck-api v2.53.0): org-managed players, an
+organization's own players that it signs in itself.
 
 - **`client.portal.adopt_app_token(response)`** holds the app token the organization's server
   minted with its org token (`mintManagedPlayerToken`) and returns it as an

{crowdypy-0.16.0.dev1 → crowdypy-0.17.0.dev1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: crowdypy
-Version: 0.16.0.dev1
+Version: 0.17.0.dev1
 Summary: Official Python SDK for Crowded Kingdoms: typed GraphQL clients and a native UDP replication core
 Keywords: crowded-kingdoms,multiplayer,replication,graphql,sdk,udp
 Author: Crowded Kingdoms
@@ -51,7 +51,9 @@ CrowdyPy follows the [CrowdyJS](https://github.com/CrowdedKingdoms/CrowdyJS) API
 client, bound with [nanobind](https://github.com/wjakob/nanobind) and shipped inside the
 wheel. Python never touches a datagram.
 
-**v0.16.0: org-managed players (dev only).** An organization that runs its own accounts signs its players in itself: its server mints a player's app token with an org token, or its sign-in service signs an assertion. A device holds the first with `client.portal.adopt_app_token(response)` (it refuses an org token, which stays on the organization's server; there is no org-token mint wrapper) or trades the second with `client.portal.exchange_managed_player_assertion(app_id, assertion)`, and gives the result to `client.set_app_token`. `client.managed_players` is the organization's administration. CrowdyJS 18.16.0 and CrowdyCPP 0.68.0. See [MIGRATION.md](MIGRATION.md).
+**v0.17.0: the Org-Managed Players Addendum.** ck-api v2.53.0 serves org-managed players on every tier, once an admin of the organization has accepted the addendum in Studio; until then its sign-ins and refreshes answer `ORG_LEGAL_ACCEPTANCE_REQUIRED`, which `crowdypy.errors.org_legal_acceptance_required_of` reads, and `client.managed_players.settings(org_id)` says where the organization stands. CrowdyJS 18.17.0 and CrowdyCPP 0.69.0. See [MIGRATION.md](MIGRATION.md).
+
+**v0.16.0: org-managed players.** An organization that runs its own accounts signs its players in itself: its server mints a player's app token with an org token, or its sign-in service signs an assertion. A device holds the first with `client.portal.adopt_app_token(response)` (it refuses an org token, which stays on the organization's server; there is no org-token mint wrapper) or trades the second with `client.portal.exchange_managed_player_assertion(app_id, assertion)`, and gives the result to `client.set_app_token`. `client.managed_players` is the organization's administration. CrowdyJS 18.16.0 and CrowdyCPP 0.68.0. See [MIGRATION.md](MIGRATION.md).
 
 **v0.15.0: a voxel edit that waits for the server, and opcode 140 from `client.udp`.** `chunks.set_voxel(..., optimistic=False)` changes nothing locally until the server's echo of the edit arrives; `client.udp.send_generic_spatial` sends an app-defined spatial message. CrowdyJS 18.15.0 and CrowdyCPP 0.67.4. See [MIGRATION.md](MIGRATION.md).
 

{crowdypy-0.16.0.dev1 → crowdypy-0.17.0.dev1}/README.md

@@ -11,7 +11,9 @@ CrowdyPy follows the [CrowdyJS](https://github.com/CrowdedKingdoms/CrowdyJS) API
 client, bound with [nanobind](https://github.com/wjakob/nanobind) and shipped inside the
 wheel. Python never touches a datagram.
 
-**v0.16.0: org-managed players (dev only).** An organization that runs its own accounts signs its players in itself: its server mints a player's app token with an org token, or its sign-in service signs an assertion. A device holds the first with `client.portal.adopt_app_token(response)` (it refuses an org token, which stays on the organization's server; there is no org-token mint wrapper) or trades the second with `client.portal.exchange_managed_player_assertion(app_id, assertion)`, and gives the result to `client.set_app_token`. `client.managed_players` is the organization's administration. CrowdyJS 18.16.0 and CrowdyCPP 0.68.0. See [MIGRATION.md](MIGRATION.md).
+**v0.17.0: the Org-Managed Players Addendum.** ck-api v2.53.0 serves org-managed players on every tier, once an admin of the organization has accepted the addendum in Studio; until then its sign-ins and refreshes answer `ORG_LEGAL_ACCEPTANCE_REQUIRED`, which `crowdypy.errors.org_legal_acceptance_required_of` reads, and `client.managed_players.settings(org_id)` says where the organization stands. CrowdyJS 18.17.0 and CrowdyCPP 0.69.0. See [MIGRATION.md](MIGRATION.md).
+
+**v0.16.0: org-managed players.** An organization that runs its own accounts signs its players in itself: its server mints a player's app token with an org token, or its sign-in service signs an assertion. A device holds the first with `client.portal.adopt_app_token(response)` (it refuses an org token, which stays on the organization's server; there is no org-token mint wrapper) or trades the second with `client.portal.exchange_managed_player_assertion(app_id, assertion)`, and gives the result to `client.set_app_token`. `client.managed_players` is the organization's administration. CrowdyJS 18.16.0 and CrowdyCPP 0.68.0. See [MIGRATION.md](MIGRATION.md).
 
 **v0.15.0: a voxel edit that waits for the server, and opcode 140 from `client.udp`.** `chunks.set_voxel(..., optimistic=False)` changes nothing locally until the server's echo of the edit arrives; `client.udp.send_generic_spatial` sends an app-defined spatial message. CrowdyJS 18.15.0 and CrowdyCPP 0.67.4. See [MIGRATION.md](MIGRATION.md).
 

{crowdypy-0.16.0.dev1 → crowdypy-0.17.0.dev1}/docs/compatibility.md

@@ -5,7 +5,7 @@ are in `pyproject.toml` (`[project].version`, `[tool.crowdypy.crowdyjs]`,
 `[tool.crowdypy.crowdycpp]`); `tests/unit/test_release_versions.py` refuses this page when
 its version disagrees.
 
-- CrowdyPy `0.16.0`
+- CrowdyPy `0.17.0`
 - API surface: CrowdyJS (the pinned version and commit in `pyproject.toml`); the generated
   `docs/parity-matrix.md` lists every covered method, every native equivalent and every
   browser exclusion with its reason. The gate is strict: there are no portable gaps, and a

{crowdypy-0.16.0.dev1 → crowdypy-0.17.0.dev1}/docs/parity-matrix.md

@@ -4,17 +4,17 @@ Generated by `tools/parity/parity.py`; do not edit by hand. Classifications live
 
 ## Target
 
-- CrowdyJS: `18.16.0` at `d398e24658a50abb118f956c8c9a07d94ae5c53e`
-- CrowdyCPP (native core): `0.68.0` at `bb240e625b44b56721c0937cd4c515180860f79f`
+- CrowdyJS: `18.17.0` at `05c2f28b72ebde4c487c7bb52e07d11466bc64cc`
+- CrowdyCPP (native core): `0.69.0` at `96c859cdf7972686f3325489c01b8a49161dd664`
 - schema.gql identical to CrowdyJS's: yes
 - Gate mode: strict portable parity (every portable gap is release-blocking)
 
 ## Summary
 
-- Covered: 1384
+- Covered: 1386
 - Portable gap: 0
 - Native equivalent: 46
-- Browser exclusion: 115
+- Browser exclusion: 116
 - Deprecated roots: 2
 - Unclassified: 0
 
@@ -23,6 +23,7 @@ Generated by `tools/parity/parity.py`; do not edit by hand. Classifications live
 | Field | Status |
 |---|---|
 | `mutation.abandonGamePublish` | browser exclusion — publishes and administers browser game bundles on the Crowdy Games web host; a Python client has no bundle to publish |
+| `mutation.acceptManagedPlayerTerms` | browser exclusion — an organization admin's acceptance of the Org-Managed Players Addendum, a clickwrap made in Studio; no SDK wraps it |
 | `mutation.actorHeartbeat` | covered |
 | `mutation.addChannelMember` | covered |
 | `mutation.addTeamMember` | covered |
@@ -1477,6 +1478,7 @@ Generated by `tools/parity/parity.py`; do not edit by hand. Classifications live
 | `MAX_VIDEO_FRAGMENTS` | covered |
 | `MAX_VIDEO_FRAGMENT_BODY_BYTES` | covered |
 | `MAX_VOICE_FRAME_BYTES` | covered |
+| `ORG_LEGAL_ACCEPTANCE_REQUIRED_CODE` | covered |
 | `PLAYER_CODE_INVOKE_MAX_BYTES` | browser exclusion — page-side broker for player WASM in the browser glue Web Worker (worker lifecycle, host-call allowlists, rate caps, watchdogs) |
 | `PLAYER_CODE_LOG_LINES_PER_SECOND` | browser exclusion — page-side broker for player WASM in the browser glue Web Worker (worker lifecycle, host-call allowlists, rate caps, watchdogs) |
 | `PLAYER_CODE_LOG_MAX_CHARS` | browser exclusion — page-side broker for player WASM in the browser glue Web Worker (worker lifecycle, host-call allowlists, rate caps, watchdogs) |
@@ -1555,6 +1557,7 @@ Generated by `tools/parity/parity.py`; do not edit by hand. Classifications live
 | `managedPlayerNotAllowedOf` | covered |
 | `moveFromError` | covered |
 | `moveFromErrors` | covered |
+| `orgLegalAcceptanceRequiredOf` | covered |
 | `packMessageBundle` | native equivalent — the same codec, CrowdyCPP's, through crowdypy.wire: crowdypy.wire.bundle |
 | `parseFuelBudget` | browser exclusion — glue that instantiates player WASM inside the browser Web Worker (CLIENT ABI imports, ck_fuel, watchdog) |
 | `parseRelayFrame` | native equivalent — the same codec, CrowdyCPP's, through crowdypy.wire: crowdypy.wire.parse_datagram (a relay frame is one datagram) |

{crowdypy-0.16.0.dev1 → crowdypy-0.17.0.dev1}/operations/managedPlayers/OrgManagedPlayerSettings.graphql

@@ -7,5 +7,12 @@ query OrgManagedPlayerSettings($orgId: BigInt!) {
     mintsPerMinute
     defaultSessionTtlSeconds
     maxSessionTtlSeconds
+    termsVersion
+    termsUrl
+    termsAccepted
+    termsAcceptedVersion
+    termsAcceptedAt
+    termsAcceptedByUserId
+    viewerMayAcceptTerms
   }
 }

{crowdypy-0.16.0.dev1 → crowdypy-0.17.0.dev1}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "scikit_build_core.build"
 
 [project]
 name = "crowdypy"
-version = "0.16.0.dev1"
+version = "0.17.0.dev1"
 description = "Official Python SDK for Crowded Kingdoms: typed GraphQL clients and a native UDP replication core"
 readme = "README.md"
 license = "MIT AND Apache-2.0"
@@ -119,20 +119,20 @@ environment = { OPENSSL_ROOT_DIR = "C:/vcpkg/installed/x64-windows-static-md" }
 # --------------------------------------------------------------------------------------
 
 [tool.crowdypy.crowdyjs]
-version = "18.16.0"
-commit = "d398e24658a50abb118f956c8c9a07d94ae5c53e"
+version = "18.17.0"
+commit = "05c2f28b72ebde4c487c7bb52e07d11466bc64cc"
 
 [tool.crowdypy.crowdycpp]
-version = "0.68.0"
-tag = "dev/v0.68.0"
-commit = "bb240e625b44b56721c0937cd4c515180860f79f"
-tree-sha256 = "c6db73f54cba1c738d6bdad7a5c586369518a38ca4be39385957c6653d740dab"
+version = "0.69.0"
+tag = "dev/v0.69.0"
+commit = "96c859cdf7972686f3325489c01b8a49161dd664"
+tree-sha256 = "b2e302e5d2e8967d7325dda2fb14a46c162fa1d69ce2b3c149f85fa8c5eeca82"
 
 # schema.gql and operations/ are CrowdyJS's, copied from the commit pinned above by
 # scripts/schema_sync.py, which records these hashes and re-derives them in CI.
 [tool.crowdypy.graphql]
-schema-sha256 = "6f8f1547097b47f8cc41bf46dcb4c791d285c8192e8239155b791c7734847b6f"
-operations-sha256 = "4b415e08c48e2113ddfcfd90a111d25793d5b64ad95a339f1d0aca60b1201c56"
+schema-sha256 = "261902653e100cc5701c32580d07b5ae401e28fa547a0712fa71429fb24df188"
+operations-sha256 = "32e2c43ac1bd00ec9c05902d524e82727cf560a88330f207704059a7a8a96189"
 
 # The SDL the docs site publishes. scripts/schema_drift.py compares the snapshot against it
 # on a schedule; nothing on the per-commit path reads the network.

{crowdypy-0.16.0.dev1 → crowdypy-0.17.0.dev1}/schema.gql

@@ -1087,7 +1087,7 @@ type OrgToken {
   """Optional human-readable label."""
   label: String
   """
-  What the token may do: 'players:mint' (sign the org's managed players in, mintManagedPlayerToken) and 'players:manage' (provision, list, rename, disable, sign out and delete them). A token with no scope can do nothing. Org tokens authenticate on dev only for now.
+  What the token may do: 'players:mint' (sign the org's managed players in, mintManagedPlayerToken) and 'players:manage' (provision, list, rename, disable, sign out and delete them). A token with no scope can do nothing.
   """
   scopes: [String!]!
   """
@@ -1349,7 +1349,7 @@ type App {
   """
   org: Organization
   """
-  Whether the organization lets its org-managed players build and run mods (and use the Studio agent) in this app, paying for their mod compute, egress, storage and model tokens itself. False by default, and false wherever org-managed players are off (they are on dev only). Set with setAppManagedPlayerMods (manage_billing). Players with a Crowded Kingdoms account are unaffected.
+  Whether the organization lets its org-managed players build and run mods (and use the Studio agent) in this app, paying for their mod compute, egress, storage and model tokens itself. False by default, and false on a tier that does not serve org-managed players. Set with setAppManagedPlayerMods (manage_billing). Players with a Crowded Kingdoms account are unaffected.
   """
   managedPlayerModsEnabled: Boolean!
 }
@@ -1600,7 +1600,7 @@ type ServerVersionInfo {
 }
 
 """
-A player an organization signs in itself (an org-managed player): a Crowded Kingdoms user with no email, password or wallet, known to the org by its own id. Dev only for now.
+A player an organization signs in itself (an org-managed player): a Crowded Kingdoms user with no email, password or wallet, known to the org by its own id.
 """
 type ManagedPlayer {
   """
@@ -1644,7 +1644,7 @@ type ProvisionManagedPlayersResult {
 }
 
 """
-An organization's org-managed player settings. Set by a Crowded Kingdoms operator; the org reads them.
+An organization's org-managed player settings, and where it stands on the Org-Managed Players Addendum. A Crowded Kingdoms operator sets the settings; an admin of the organization accepts the addendum.
 """
 type OrgManagedPlayerSettings {
   orgId: BigInt!
@@ -1664,10 +1664,32 @@ type OrgManagedPlayerSettings {
   defaultSessionTtlSeconds: Int!
   """The longest sign-in the org may ask for (seconds)."""
   maxSessionTtlSeconds: Int!
+  """
+  The current version of the Org-Managed Players Addendum, which an admin of the organization accepts (acceptManagedPlayerTerms) before its players are created or signed in.
+  """
+  termsVersion: String!
+  """Where the current addendum is published."""
+  termsUrl: String!
+  """
+  Whether the organization has accepted the current version. Until it has, its managed players are neither created nor signed in and their app tokens do not refresh (ORG_LEGAL_ACCEPTANCE_REQUIRED).
+  """
+  termsAccepted: Boolean!
+  """
+  The version the organization accepted most recently, or null if it never accepted one.
+  """
+  termsAcceptedVersion: String
+  """When it accepted that version."""
+  termsAcceptedAt: DateTime
+  """The user id of the admin who accepted that version."""
+  termsAcceptedByUserId: BigInt
+  """
+  Whether the signed-in user may accept the addendum for this organization: an admin of it, by the organization's own grant (a super admin's or an operator's access does not count).
+  """
+  viewerMayAcceptTerms: Boolean!
 }
 
 """
-The public half of a key an organization signs its players' sign-in assertions with (exchangeManagedPlayerAssertion). Only public keys are stored. Dev only for now.
+The public half of a key an organization signs its players' sign-in assertions with (exchangeManagedPlayerAssertion). Only public keys are stored.
 """
 type OrgSigningKey {
   """The key’s id here."""
@@ -7122,13 +7144,16 @@ type Query {
   """
   versionInfo: ServerVersionInfo!
   """
-  Dev only. The organization's managed players, by user id. `search` matches the start of the external id (exactly) or of the gamertag (any case). An org token with players:manage, or an org admin with manage_players.
+  The organization's managed players, by user id. `search` matches the start of the external id (exactly) or of the gamertag (any case). An org token with players:manage, or an org admin with manage_players.
   """
   managedPlayers(
     """
     The organization (BigInt as a decimal string). With an org token, the token's own.
     """
     orgId: BigInt!
+    """
+    Matches the start of an externalId (exactly) or of a gamertag (any case).
+    """
     search: String
     """Page size, 1-200 (default 50)."""
     first: Int
@@ -7136,23 +7161,30 @@ type Query {
     after: String
   ): ManagedPlayersPage!
   """
-  Dev only. One managed player by the id your organization knows it by, or null. An org token with players:manage, or an org admin with manage_players.
+  One managed player by the id your organization knows it by, or null. An org token with players:manage, or an org admin with manage_players.
   """
   managedPlayer(
     """
     The organization (BigInt as a decimal string). With an org token, the token's own.
     """
     orgId: BigInt!
+    """The id your organization knows the player by."""
     externalId: String!
   ): ManagedPlayer
   """
-  Dev only. The organization's org-managed player settings: whether it may sign its own players in, its cap, sign-in rate and sign-in lifetimes, and how many players it holds. Requires manage_players on the org (super-admins and operators bypass).
+  The organization's org-managed player settings: whether it may sign its own players in, its cap, sign-in rate and sign-in lifetimes, how many players it holds, and whether it has accepted the current Org-Managed Players Addendum. Requires manage_players on the org (super-admins and operators bypass).
   """
-  orgManagedPlayerSettings(orgId: BigInt!): OrgManagedPlayerSettings!
+  orgManagedPlayerSettings(
+    """The organization (BigInt as a decimal string)."""
+    orgId: BigInt!
+  ): OrgManagedPlayerSettings!
   """
-  Dev only. The organization's signing keys for player assertions, newest first, revoked ones included. Requires manage_players on the org.
+  The organization's signing keys for player assertions, newest first, revoked ones included. Requires manage_players on the org.
   """
-  orgSigningKeys(orgId: BigInt!): [OrgSigningKey!]!
+  orgSigningKeys(
+    """The organization (BigInt as a decimal string)."""
+    orgId: BigInt!
+  ): [OrgSigningKey!]!
   """
   A hosted third-party game by slug, or null when the slug is unclaimed. PUBLIC: the first-party shell at https://<games host>/<slug>/ calls this before sign-in to learn the contentOrigin it frames. Returns DISABLED and TAKEN_DOWN games too (with their status) so the shell can say why. Null when the tier does not host third-party games.
   """
@@ -8969,7 +9001,7 @@ type Mutation {
     input: ReinstateOrganizationInput!
   ): OrgRetirementType! @requiresPermission(scope: "operator", permission: "is_operator")
   """
-  Mints a new org token (it starts with `cko_`) and returns the plaintext exactly once - save it, since subsequent queries only show metadata. An org token is the organization's SERVER credential for its org-managed players (dev only for now): with scope 'players:mint' its server signs the org's own players in (mintManagedPlayerToken), with 'players:manage' it manages them; `appIds` limits it to some of the org's apps. Never put one in a game client or a web page: a request with an Origin header is refused. Requires the 'manage_tokens' permission on the target org (super admins bypass).
+  Mints a new org token (it starts with `cko_`) and returns the plaintext exactly once - save it, since subsequent queries only show metadata. An org token is the organization's SERVER credential for its org-managed players: with scope 'players:mint' its server signs the org's own players in (mintManagedPlayerToken), with 'players:manage' it manages them; `appIds` limits it to some of the org's apps. Never put one in a game client or a web page: a request with an Origin header is refused. Requires the 'manage_tokens' permission on the target org (super admins bypass).
   """
   createOrgToken(input: CreateOrgTokenInput!): OrgTokenWithSecret! @requiresPermission(scope: "org", permission: "manage_tokens", scopeArg: "input.orgId")
   """
@@ -9152,57 +9184,82 @@ type Mutation {
   """
   setAppClientSettings(input: SetAppClientSettingsInput!): PortalConsentState!
   """
-  ORG TOKEN ONLY, dev only. Sign one of your organization's own players in and get its app-scoped gameplay token, the same token mintAppToken returns: hand `token` (and the URLs) to the player's device, which plays with it exactly as with any app token and refreshes it with refreshAppToken. Call from your server with `Authorization: Bearer cko_...` (scope players:mint); a request with an Origin header is refused. The player is created on its first sign-in (no email, password or wallet), and each sign-in lasts `sessionTtlSeconds` (default and maximum: the org's settings): after it the device comes back to you. The app must be one of your organization's apps (and in the token's app list, if it has one). Free tiers grant access automatically; a paid tier needs grantAppAccess.
+  ORG TOKEN ONLY. Sign one of your organization's own players in and get its app-scoped gameplay token, the same token mintAppToken returns: hand `token` (and the URLs) to the player's device, which plays with it exactly as with any app token and refreshes it with refreshAppToken. Call from your server with `Authorization: Bearer cko_...` (scope players:mint); a request with an Origin header is refused. The player is created on its first sign-in (no email, password or wallet), and each sign-in lasts `sessionTtlSeconds` (default and maximum: the org's settings): after it the device comes back to you. The app must be one of your organization's apps (and in the token's app list, if it has one). Free tiers grant access automatically; a paid tier needs grantAppAccess. Refused with ORG_LEGAL_ACCEPTANCE_REQUIRED until an admin of the organization has accepted the current Org-Managed Players Addendum.
   """
   mintManagedPlayerToken(input: MintManagedPlayerTokenInput!): AppTokenResponse!
   """
-  Dev only. Create managed players ahead of their first sign-in, up to 500 a call in one write (creating a player is a cluster-wide commit, so a large import goes in batches). A player that exists is left as it is. An org token with players:manage, or an org admin with manage_players.
+  Create managed players ahead of their first sign-in, up to 500 a call in one write (creating a player is a cluster-wide commit, so a large import goes in batches). A player that exists is left as it is. Refused with ORG_LEGAL_ACCEPTANCE_REQUIRED until the organization has accepted the current Org-Managed Players Addendum. An org token with players:manage, or an org admin with manage_players.
   """
   provisionManagedPlayers(input: ProvisionManagedPlayersInput!): ProvisionManagedPlayersResult!
   """
-  Dev only. Rename a managed player, or disable or enable it. Disabling ends every session it has now (realtime and ck-exec included) and refuses its sign-ins; enabling lifts only a disable the org set. An org token with players:manage, or an org admin with manage_players.
+  Rename a managed player, or disable or enable it. Disabling ends every session it has now (realtime and ck-exec included) and refuses its sign-ins; enabling lifts only a disable the org set. An org token with players:manage, or an org admin with manage_players.
   """
   updateManagedPlayer(input: UpdateManagedPlayerInput!): ManagedPlayer!
   """
-  Dev only. Sign a managed player out everywhere: its sessions and app tokens end, and so do its realtime and ck-exec connections. It can sign in again (use updateManagedPlayer to stop that). False when it held no session. An org token with players:manage, or an org admin with manage_players.
+  Sign a managed player out everywhere: its sessions and app tokens end, and so do its realtime and ck-exec connections. It can sign in again (use updateManagedPlayer to stop that). False when it held no session. An org token with players:manage, or an org admin with manage_players.
   """
   endManagedPlayerSessions(
     """
     The organization (BigInt as a decimal string). With an org token, the token's own.
     """
     orgId: BigInt!
+    """The id your organization knows the player by."""
     externalId: String!
   ): Boolean!
   """
-  Dev only. Delete a managed player: its sessions end and its row is anonymized, as an account deletion is. Signing the same external id in again creates a new player. False when there was no such player. An org token with players:manage, or an org admin with manage_players.
+  Delete a managed player: its sessions end and its row is anonymized, as an account deletion is. Signing the same external id in again creates a new player. False when there was no such player. An org token with players:manage, or an org admin with manage_players.
   """
   deleteManagedPlayer(
     """
     The organization (BigInt as a decimal string). With an org token, the token's own.
     """
     orgId: BigInt!
+    """The id your organization knows the player by."""
     externalId: String!
   ): Boolean!
   """
-  OPERATOR ONLY, dev only. Enable or disable an organization's org-managed players and set its limits. Disabling refuses new sign-ins; sessions already running last until they lapse (end them with endManagedPlayerSessions).
+  OPERATOR ONLY. Enable or disable an organization's org-managed players and set its limits. Disabling refuses new sign-ins; sessions already running last until they lapse (end them with endManagedPlayerSessions). Enabling does not accept the addendum: an admin of the organization does that (acceptManagedPlayerTerms).
   """
   setOrgManagedPlayerSettings(input: SetOrgManagedPlayerSettingsInput!): OrgManagedPlayerSettings! @requiresPermission(scope: "operator", permission: "is_operator")
   """
-  Dev only. Register the PUBLIC half of a key your organization signs its players' sign-in assertions with (exchangeManagedPlayerAssertion): its kid, algorithm (EdDSA, ES256 or RS256), the JWK, the iss your assertions carry and, if your identity provider sets its own, their aud. The private key never leaves your systems. Requires manage_players on the org.
+  SESSION ONLY, an admin of the organization (its own admin grant: a super admin's or an operator's access does not stand in). Accept the Org-Managed Players Addendum on the organization's behalf, the version orgManagedPlayerSettings names as termsVersion (read it at termsUrl). Until the organization has accepted the current version, its managed players are neither created nor signed in (ORG_LEGAL_ACCEPTANCE_REQUIRED). A version that is not the current one is refused with CONFLICT; accepting the current one again changes nothing. Studio asks for it on the organization's Players tab.
+  """
+  acceptManagedPlayerTerms(
+    """The organization (BigInt as a decimal string)."""
+    orgId: BigInt!
+    """
+    The addendum version the admin read and accepts: termsVersion from orgManagedPlayerSettings.
+    """
+    version: String!
+  ): OrgManagedPlayerSettings! @requiresPermission(scope: "org", permission: "admin", scopeArg: "orgId")
+  """
+  Register the PUBLIC half of a key your organization signs its players' sign-in assertions with (exchangeManagedPlayerAssertion): its kid, algorithm (EdDSA, ES256 or RS256), the JWK, the iss your assertions carry and, if your identity provider sets its own, their aud. The private key never leaves your systems. Requires manage_players on the org.
   """
   registerOrgSigningKey(input: RegisterOrgSigningKeyInput!): OrgSigningKey!
   """
-  Dev only. Revoke a signing key: assertions it signed are refused from now on (sessions already signed in run until they lapse; end them with endManagedPlayerSessions). False when there was no such active key. Requires manage_players on the org.
+  Revoke a signing key: assertions it signed are refused from now on (sessions already signed in run until they lapse; end them with endManagedPlayerSessions). False when there was no such active key. Requires manage_players on the org.
   """
-  revokeOrgSigningKey(orgId: BigInt!, keyId: BigInt!): Boolean!
+  revokeOrgSigningKey(
+    """The organization (BigInt as a decimal string)."""
+    orgId: BigInt!
+    """The key to revoke (OrgSigningKey.keyId)."""
+    keyId: BigInt!
+  ): Boolean!
   """
-  Dev only. Exchange an assertion your organization signed for one of its players for that player's app-scoped gameplay token (the same token mintManagedPlayerToken returns). Public: the signature is the credential, so a game client calls it directly, from a browser on your registered origin or natively. The assertion must name a registered, active key (header kid) and carry iss and aud as registered (aud defaults to ck:app:<appId>), sub (your id for the player), iat, exp at most 300 seconds after iat, and a jti never used before for this app; optionally gamertag. The player is created on its first sign-in. Refusals are ASSERTION_REJECTED with extensions.reason.
+  Exchange an assertion your organization signed for one of its players for that player's app-scoped gameplay token (the same token mintManagedPlayerToken returns). Public: the signature is the credential, so a game client calls it directly, from a browser on your registered origin or natively. The assertion must name a registered, active key (header kid) and carry iss and aud as registered (aud defaults to ck:app:<appId>), sub (your id for the player), iat, exp at most 300 seconds after iat, and a jti never used before for this app; optionally gamertag. The player is created on its first sign-in. Refusals are ASSERTION_REJECTED with extensions.reason; a valid assertion is refused with ORG_LEGAL_ACCEPTANCE_REQUIRED until an admin of the organization has accepted the current Org-Managed Players Addendum.
   """
   exchangeManagedPlayerAssertion(input: ExchangeManagedPlayerAssertionInput!): AppTokenResponse!
   """
-  Dev only. Let the organization's org-managed players build and run mods (and use the Studio agent) in this app, or stop them. The organization pays for what they use: their mod compute and egress as its own compute, their project storage as the app's, their model tokens from the org wallet. Turning it off pauses their mods within a minute and refuses new builds. Requires manage_billing on the app's organization. Returns the new setting.
+  Let the organization's org-managed players build and run mods (and use the Studio agent) in this app, or stop them. The organization pays for what they use: their mod compute and egress as its own compute, their project storage as the app's, their model tokens from the org wallet. Turning it off pauses their mods within a minute and refuses new builds. Requires manage_billing on the app's organization. Returns the new setting.
   """
-  setAppManagedPlayerMods(appId: BigInt!, enabled: Boolean!): Boolean! @requiresPermission(scope: "app", permission: "manage_billing", scopeArg: "appId")
+  setAppManagedPlayerMods(
+    """An app of your organization (BigInt as a decimal string)."""
+    appId: BigInt!
+    """
+    True: the organization pays for its managed players' mods in this app. False: their mods are refused and switched off.
+    """
+    enabled: Boolean!
+  ): Boolean! @requiresPermission(scope: "app", permission: "manage_billing", scopeArg: "appId")
   """
   Claim the hosting slug for an app (idempotent; the same app re-claiming its slug is a no-op, a different slug MOVES the game). Registers https://<games host>/<slug>/ and https://<slug>.<content host> as the app's redirect URIs and sets launch_url to the former. Requires manage_apps on the app and a SESSION token. Refuses a slug that is not a DNS label, is reserved, or belongs to another app (HOSTED_SLUG_UNAVAILABLE), and answers CONTENT_HOSTING_DISABLED on a tier without a content CDN.
   """
@@ -10927,11 +10984,11 @@ input CreateOrgTokenInput {
   """Optional expiry timestamp; omit for a non-expiring token."""
   expiresAt: DateTime
   """
-  What the token may do: 'players:mint' and/or 'players:manage' (org-managed players, dev only). Omit for a token with no scope, which can do nothing.
+  What the token may do: 'players:mint' and/or 'players:manage' (org-managed players). Omit for a token with no scope, which can do nothing.
   """
   scopes: [String!]
   """
-  Limit the token to these apps of the organization; omit for every app (org-managed players, dev only).
+  Limit the token to these apps of the organization; omit for every app (org-managed players).
   """
   appIds: [BigInt!]
 }

{crowdypy-0.16.0.dev1 → crowdypy-0.17.0.dev1}/src/crowdypy/__init__.py

@@ -60,6 +60,7 @@ _LAZY: dict[str, str] = {
     "ASSERTION_REJECTED_CODE": "crowdypy.errors",
     "GROUP_MEMBER_BANNED_CODE": "crowdypy.errors",
     "MANAGED_PLAYER_NOT_ALLOWED_CODE": "crowdypy.errors",
+    "ORG_LEGAL_ACCEPTANCE_REQUIRED_CODE": "crowdypy.errors",
     "WRONG_DATACENTER_CODE": "crowdypy.errors",
     "CrowdyAccessRefusal": "crowdypy.errors",
     "CrowdyAccountBlocked": "crowdypy.errors",
@@ -85,6 +86,7 @@ _LAZY: dict[str, str] = {
     "app_paused_of": "crowdypy.errors",
     "group_member_banned_of": "crowdypy.errors",
     "managed_player_not_allowed_of": "crowdypy.errors",
+    "org_legal_acceptance_required_of": "crowdypy.errors",
     "is_app_paused": "crowdypy.errors",
     "player_fault_of": "crowdypy.errors",
     # sessions, tokens, routing
@@ -432,6 +434,9 @@ if TYPE_CHECKING:
     from crowdypy.errors import (
         MANAGED_PLAYER_NOT_ALLOWED_CODE as MANAGED_PLAYER_NOT_ALLOWED_CODE,
     )
+    from crowdypy.errors import (
+        ORG_LEGAL_ACCEPTANCE_REQUIRED_CODE as ORG_LEGAL_ACCEPTANCE_REQUIRED_CODE,
+    )
     from crowdypy.errors import (
         WRONG_DATACENTER_CODE as WRONG_DATACENTER_CODE,
     )
@@ -510,6 +515,9 @@ if TYPE_CHECKING:
     from crowdypy.errors import (
         managed_player_not_allowed_of as managed_player_not_allowed_of,
     )
+    from crowdypy.errors import (
+        org_legal_acceptance_required_of as org_legal_acceptance_required_of,
+    )
     from crowdypy.errors import (
         player_fault_of as player_fault_of,
     )

{crowdypy-0.16.0.dev1 → crowdypy-0.17.0.dev1}/src/crowdypy/_generated/enums.py

@@ -1,6 +1,6 @@
 """GENERATED by scripts/codegen.py from schema.gql. Do not edit.
 
-schema.gql sha256: 6f8f1547097b47f8cc41bf46dcb4c791d285c8192e8239155b791c7734847b6f
+schema.gql sha256: 261902653e100cc5701c32580d07b5ae401e28fa547a0712fa71429fb24df188
 """
 
 from enum import StrEnum

{crowdypy-0.16.0.dev1 → crowdypy-0.17.0.dev1}/src/crowdypy/_generated/inputs.py

@@ -4,7 +4,7 @@ Every GraphQL input object as a msgspec Struct. Attributes are snake_case and en
 under their GraphQL names; an attribute left at UNSET is omitted from the request,
 which is how the API tells 'not provided' from an explicit null.
 
-schema.gql sha256: 6f8f1547097b47f8cc41bf46dcb4c791d285c8192e8239155b791c7734847b6f
+schema.gql sha256: 261902653e100cc5701c32580d07b5ae401e28fa547a0712fa71429fb24df188
 """
 
 from __future__ import annotations

{crowdypy-0.16.0.dev1 → crowdypy-0.17.0.dev1}/src/crowdypy/_generated/operations.py

@@ -1,7 +1,7 @@
 """GENERATED by scripts/codegen.py from schema.gql and operations/. Do not edit.
 
-schema.gql sha256: 6f8f1547097b47f8cc41bf46dcb4c791d285c8192e8239155b791c7734847b6f
-operations/ sha256: 4b415e08c48e2113ddfcfd90a111d25793d5b64ad95a339f1d0aca60b1201c56
+schema.gql sha256: 261902653e100cc5701c32580d07b5ae401e28fa547a0712fa71429fb24df188
+operations/ sha256: 32e2c43ac1bd00ec9c05902d524e82727cf560a88330f207704059a7a8a96189
 """
 
 from crowdypy._operation import Operation
@@ -1500,7 +1500,7 @@ ORG_MANAGED_PLAYER_SETTINGS = Operation(
     name='OrgManagedPlayerSettings',
     kind='query',
     root_fields=('orgManagedPlayerSettings',),
-    document='query OrgManagedPlayerSettings($orgId: BigInt!) {\n  orgManagedPlayerSettings(orgId: $orgId) {\n    orgId\n    enabled\n    maxPlayers\n    playerCount\n    mintsPerMinute\n    defaultSessionTtlSeconds\n    maxSessionTtlSeconds\n  }\n}',
+    document='query OrgManagedPlayerSettings($orgId: BigInt!) {\n  orgManagedPlayerSettings(orgId: $orgId) {\n    orgId\n    enabled\n    maxPlayers\n    playerCount\n    mintsPerMinute\n    defaultSessionTtlSeconds\n    maxSessionTtlSeconds\n    termsVersion\n    termsUrl\n    termsAccepted\n    termsAcceptedVersion\n    termsAcceptedAt\n    termsAcceptedByUserId\n    viewerMayAcceptTerms\n  }\n}',
 )
 
 # organizations/OrgMembers.graphql

{crowdypy-0.16.0.dev1 → crowdypy-0.17.0.dev1}/src/crowdypy/_sync/domains/admin.py

@@ -30,7 +30,7 @@ class AdminAPI:
 
     #: Organizations, members, RBAC roles and org API tokens.
     organizations: OrganizationsAPI
-    #: Org-managed players (dev only): the organization's own players and signing keys.
+    #: Org-managed players: the organization's own players and signing keys.
     managed_players: ManagedPlayersAPI
     #: The app registry, routing and player-code admission policy.
     apps: AppsAPI

{crowdypy-0.16.0.dev1 → crowdypy-0.17.0.dev1}/src/crowdypy/_sync/domains/managed_players.py

@@ -1,6 +1,6 @@
 # GENERATED by scripts/unasync.py from src/crowdypy/domains/managed_players.py. Do not edit.
-"""Org-managed players (dev only): an organization's own players, signed in by the
-organization instead of with a Crowded Kingdoms password.
+"""Org-managed players: an organization's own players, signed in by the organization instead
+of with a Crowded Kingdoms password.
 
 The organization vouches for a player in one of two ways, and either ends in the player's own
 app token: its server mints it with an org token (the ``mintManagedPlayerToken`` mutation,
@@ -12,8 +12,15 @@ it stays on the organization's server.
 
 The methods here are the organization's administration: an org admin's session with
 ``manage_players`` (from the organization's server, an org token with ``players:manage`` also
-works for the six player operations). Every field answers ``FEATURE_DISABLED`` outside the dev
-tier.
+works for the six player operations).
+
+The Org-Managed Players Addendum (ck-api v2.53.0): before any of the organization's players is
+created or signed in, an admin of the organization accepts it in Studio. Until then sign-ins
+(both ways), refreshes and :meth:`ManagedPlayersAPI.provision` answer
+``ORG_LEGAL_ACCEPTANCE_REQUIRED`` (:func:`crowdypy.errors.org_legal_acceptance_required_of`);
+:meth:`ManagedPlayersAPI.settings` says where the organization stands. This SDK has no wrapper
+for the acceptance, on purpose: it binds the organization, so a person makes it, in Studio. A
+tier that does not serve org-managed players answers ``FEATURE_DISABLED`` to every field.
 """
 
 from __future__ import annotations
@@ -79,7 +86,8 @@ class ManagedPlayersAPI(Domain):
     ) -> dict[str, Any]:
         """Create players ahead of their first sign-in, up to 500 a call (much faster than first
         sign-ins one at a time: pre-provision before a launch). A player that already exists is
-        left as it is and counted in ``existing``."""
+        left as it is and counted in ``existing``. Refused with ``ORG_LEGAL_ACCEPTANCE_REQUIRED``
+        until the organization has accepted the current Org-Managed Players Addendum."""
         result: dict[str, Any] = self._request(
             ops.PROVISION_MANAGED_PLAYERS, {"input": input}
         )
@@ -114,7 +122,10 @@ class ManagedPlayersAPI(Domain):
 
     def settings(self, org_id: str | int) -> dict[str, Any]:
         """Whether an operator turned managed players on for the organization, and its limits:
-        the player cap, sign-ins per minute and the session lengths. Read-only here."""
+        the player cap, sign-ins per minute and the session lengths. Also where it stands on
+        the Org-Managed Players Addendum: ``termsVersion``, ``termsUrl``, ``termsAccepted``,
+        the latest acceptance, and ``viewerMayAcceptTerms`` (whether the signed-in user is an
+        admin of the organization who may accept it, in Studio). Read-only here."""
         result: dict[str, Any] = self._request(
             ops.ORG_MANAGED_PLAYER_SETTINGS, {"orgId": bigint(org_id)}
         )

{crowdypy-0.16.0.dev1 → crowdypy-0.17.0.dev1}/src/crowdypy/_sync/domains/organizations.py

@@ -110,8 +110,8 @@ class OrganizationsAPI(Domain):
         """Permanently deactivate an org token. Needs ``manage_tokens``.
 
         Irreversible. ``False`` when there is no such token. ``end_sessions`` also ends every
-        session the token signed org-managed players in with (dev only), so their devices stop
-        now rather than at their sessions' end.
+        session the token signed org-managed players in with, so their devices stop now rather
+        than at their sessions' end.
         """
         variables: dict[str, Any] = {"orgTokenId": bigint(org_token_id)}
         if end_sessions: