@dopamint-fun/open-sdk 0.2.0-dev.0 → 0.2.0-dev.10

package/README.md

@@ -1,4 +1,4 @@
-# `libs/dopa-open-client-ts`
+# `libs/dopa-open/client-ts`
 
 Status: implemented
 Ownership: Optional official TypeScript SDK for DOPA-OPEN self-custody agents:
@@ -36,8 +36,8 @@ signatures, not whether this package is used. Allowed dependencies:
 ## Parity
 
 Preimages and signatures are pinned byte-identical to the Rust signer by
-`libs/dopa-open-client-rs/vectors/ts-signer-parity.json`, generated by
-`libs/dopa-open-client-rs/tests/ts_parity_vectors.rs` and replayed by
+`libs/dopa-open/client-rs/vectors/ts-signer-parity.json`, generated by
+`libs/dopa-open/client-rs/tests/ts_parity_vectors.rs` and replayed by
 `src/parity.test.ts` here. Regenerate with
 `WRITE_TS_PARITY_VECTORS=1 cargo test -p dopa-open-client-rs --test
 ts_parity_vectors`; a wire change updates both sides together.

package/dist/agentHttp.js

@@ -2,7 +2,7 @@
  * tour or table request without ever holding a bearer credential.
  *
  * Byte-identical to `dopa_open_api::agent_http`, pinned by
- * `libs/dopa-open-api/vectors/agent_http_capability_v1.json`. A bearer token
+ * `libs/dopa-open/api/vectors/agent_http_capability_v1.json`. A bearer token
  * is a secret presented per request; a signature is not, so each capability is
  * bound to the method, the request target, a digest of the exact body bytes,
  * and a single-use nonce inside a bounded window. One minted to enter the
@@ -13,7 +13,7 @@
  * server reconstructs them from the request it actually received, so there is
  * no restated copy to compare and therefore no comparison to forget.
  */
-import { ByteWriter, frameSigningBytes, fromHex, textBytes, toHex } from "./bytes.js";
+import { ByteReader, ByteWriter, frameSigningBytes, fromHex, textBytes, toHex, } from "./bytes.js";
 import { blake2b256 } from "./crypto.js";
 import { signRaw } from "./keypair.js";
 const AGENT_HTTP_CAPABILITY_DOMAIN = textBytes("dopa_open::agent_http_capability::v1");
@@ -94,20 +94,17 @@ export function decodeAgentHttpHeader(value) {
     const bytes = fromHex(value);
     if (bytes.length !== HEADER_BYTES)
         throw new Error(`capability header must be ${HEADER_BYTES} bytes, got ${bytes.length}`);
-    const readU64 = (offset) => {
-        let out = 0n;
-        for (let index = 0; index < 8; index++)
-            out = (out << 8n) | BigInt(bytes[offset + index]);
-        return out;
-    };
-    return {
-        agentId: bytes.slice(0, 32),
-        agentPublicKey: bytes.slice(32, 64),
-        issuedAtMs: readU64(64),
-        expiresAtMs: readU64(72),
-        nonce: bytes.slice(80, 80 + AGENT_HTTP_CAPABILITY_NONCE_BYTES),
-        signature: bytes.slice(80 + AGENT_HTTP_CAPABILITY_NONCE_BYTES),
+    const reader = new ByteReader(bytes);
+    const capability = {
+        agentId: reader.readFixed(32, "agent id"),
+        agentPublicKey: reader.readFixed(32, "agent public key"),
+        issuedAtMs: reader.readU64("issued_at_ms"),
+        expiresAtMs: reader.readU64("expires_at_ms"),
+        nonce: reader.readFixed(AGENT_HTTP_CAPABILITY_NONCE_BYTES, "nonce"),
+        signature: reader.readFixed(SIGNATURE_BYTES, "signature"),
     };
+    reader.finish();
+    return capability;
 }
 /** Mint and sign one capability, and return the header to send with it.
  *

package/dist/bytes.js

@@ -5,7 +5,7 @@
  * These helpers exist so every framing in this package spells a number the
  * same way; a preimage that drifts from the Rust client by one byte produces
  * signatures the authority silently rejects, which is why the parity vectors
- * in `libs/dopa-open-client-rs/vectors/` pin all of it.
+ * in `libs/dopa-open/client-rs/vectors/` pin all of it.
  */
 export function toHex(bytes) {
     let out = "";

package/dist/claim.js

@@ -1,6 +1,6 @@
 import { randomBytes } from "node:crypto";
 import { signRaw } from "./keypair.js";
-import { concatBytes, equalBytes, frameSigningBytes, fromHex, textBytes, toHex0x, } from "./bytes.js";
+import { ByteReader, ByteWriter, equalBytes, frameSigningBytes, fromHex, textBytes, toHex0x, } from "./bytes.js";
 /* The agent's half of a claim: an invitation its own key signs.
  *
  * A wallet claims an agent by signing for it in the arena's UI. That proves
@@ -22,16 +22,6 @@ export const AGENT_CLAIM_INVITE_MAX_WINDOW_MS = 7 * 24 * 60 * 60 * 1000;
  *  nonce || signature`, every field fixed-width. */
 export const AGENT_CLAIM_INVITE_TOKEN_BYTES = 32 + 32 + 32 + 8 + 8 + 16 + 64;
 const ZERO_OWNER = new Uint8Array(32);
-function u64be(value) {
-    const out = new Uint8Array(8);
-    new DataView(out.buffer).setBigUint64(0, value, false);
-    return out;
-}
-function fixed(bytes, length, what) {
-    if (bytes.length !== length)
-        throw new Error(`${what} must be ${length} bytes, got ${bytes.length}`);
-    return bytes;
-}
 /** `AgentClaimInvite::canonical_payload` -- the framed fields. */
 export function claimInviteCanonicalPayload(invite) {
     if (invite.expiresAtMs <= invite.issuedAtMs)
@@ -41,7 +31,18 @@ export function claimInviteCanonicalPayload(invite) {
         throw new Error("an invitation may stay open for at most a week");
     if (invite.nonce.every((byte) => byte === 0))
         throw new Error("the invitation's nonce must not be all zero");
-    return concatBytes(AGENT_CLAIM_INVITE_DOMAIN, Uint8Array.of(0, CANONICAL_WIRE_VERSION, INVITE_OPERATION), fixed(invite.agentId, 32, "agent id"), invite.owner ? fixed(invite.owner, 32, "owner") : ZERO_OWNER, fixed(invite.agentPublicKey, 32, "agent public key"), u64be(invite.issuedAtMs), u64be(invite.expiresAtMs), fixed(invite.nonce, AGENT_CLAIM_INVITE_NONCE_BYTES, "nonce"));
+    return new ByteWriter()
+        .pushBytes(AGENT_CLAIM_INVITE_DOMAIN)
+        .pushByte(0)
+        .pushByte(CANONICAL_WIRE_VERSION)
+        .pushByte(INVITE_OPERATION)
+        .pushFixed(invite.agentId, 32, "agent id")
+        .pushFixed(invite.owner ?? ZERO_OWNER, 32, "owner")
+        .pushFixed(invite.agentPublicKey, 32, "agent public key")
+        .pushU64(invite.issuedAtMs)
+        .pushU64(invite.expiresAtMs)
+        .pushFixed(invite.nonce, AGENT_CLAIM_INVITE_NONCE_BYTES, "nonce")
+        .bytes();
 }
 /** The bytes the agent's key signs, raw ed25519. */
 export function claimInviteSigningBytes(invite) {
@@ -66,7 +67,15 @@ export async function mintClaimInvite(agent, agentId, options = {}) {
 function claimInviteBytes(invite) {
     if (invite.signature.length !== 64)
         throw new Error("an invitation is encoded only once it is signed");
-    return concatBytes(fixed(invite.agentId, 32, "agent id"), invite.owner ?? ZERO_OWNER, fixed(invite.agentPublicKey, 32, "agent public key"), u64be(invite.issuedAtMs), u64be(invite.expiresAtMs), fixed(invite.nonce, 16, "nonce"), invite.signature);
+    return new ByteWriter()
+        .pushFixed(invite.agentId, 32, "agent id")
+        .pushFixed(invite.owner ?? ZERO_OWNER, 32, "owner")
+        .pushFixed(invite.agentPublicKey, 32, "agent public key")
+        .pushU64(invite.issuedAtMs)
+        .pushU64(invite.expiresAtMs)
+        .pushFixed(invite.nonce, AGENT_CLAIM_INVITE_NONCE_BYTES, "nonce")
+        .pushBytes(invite.signature)
+        .bytes();
 }
 /** The token the link carries and the claim body posts back: 0x-hex.
  *
@@ -115,20 +124,27 @@ export function decodeClaimInvite(token) {
     const bytes = claimInviteTokenBytes(token.trim());
     if (bytes.length !== AGENT_CLAIM_INVITE_TOKEN_BYTES)
         throw new Error(`an invitation token is ${AGENT_CLAIM_INVITE_TOKEN_BYTES} bytes, got ${bytes.length}`);
-    const view = new DataView(bytes.buffer, bytes.byteOffset);
-    const owner = bytes.slice(32, 64);
+    const reader = new ByteReader(bytes);
+    const agentId = reader.readFixed(32, "agent id");
+    const owner = reader.readFixed(32, "owner");
+    const agentPublicKey = reader.readFixed(32, "agent public key");
+    const issuedAtMs = reader.readU64("issued");
+    const expiresAtMs = reader.readU64("expires");
+    const nonce = reader.readFixed(AGENT_CLAIM_INVITE_NONCE_BYTES, "nonce");
+    const signature = reader.readFixed(64, "signature");
+    reader.finish();
     return {
-        agentId: bytes.slice(0, 32),
+        agentId,
         owner: equalBytes(owner, ZERO_OWNER) ? null : owner,
-        agentPublicKey: bytes.slice(64, 96),
-        issuedAtMs: view.getBigUint64(96, false),
-        expiresAtMs: view.getBigUint64(104, false),
-        nonce: bytes.slice(112, 128),
-        signature: bytes.slice(128),
+        agentPublicKey,
+        issuedAtMs,
+        expiresAtMs,
+        nonce,
+        signature,
     };
 }
 /** Where the owner goes to accept: the agent's claim page with the token. */
 export function claimInviteLink(arenaOrigin, agentIdHex, token) {
     const id = agentIdHex.startsWith("0x") ? agentIdHex : `0x${agentIdHex}`;
-    return `${arenaOrigin.replace(/\/$/, "")}/arena/agents/${id}/claim?invite=${token}`;
+    return `${arenaOrigin.replace(/\/$/, "")}/open/agents/${id}/claim?invite=${token}`;
 }

package/dist/cli.js

@@ -23,14 +23,20 @@ import { claimInviteLink, encodeClaimInvite, encodeClaimInviteCompact, mintClaim
 import { acceptAndAwaitAdmission } from "./offer.js";
 import { playTour, queueUntilSeated } from "./tour.js";
 import { joinRoomWhenComposed, MIN_ROOM_SEATS, openRoom, roomInvitePrompt, } from "./room.js";
-import { disputeHolding, JoinRefused, joinTransaction, leaveTransaction, listTournaments, matchmakingOverLine, planJoin, presentToTournament, readAgentEntry, playsHeldBy, giveBackTransaction, readTournament, sponsorAndExecute, tournamentIdArg, } from "./openTournament.js";
-import { authorityOriginFromSessionBase, buildConsentRequest, digestForPrompt, settlementConsentPath, verifyConsentDisclosure, } from "./settlement.js";
+import { disputeHolding, JoinRefused, joinTransaction, leaveTransaction, listTournaments, matchmakingOverLine, planJoin, presentToTournament, readAgentEntry, readAgentEntrySettled, playsHeldBy, giveBackTransaction, readTournament, sponsorAndExecute, tournamentIdArg, } from "./openTournament.js";
+import { buildConsentRequest, DEFAULT_OPEN_API_BASE_URL, digestForPrompt, settlementConsentPath, verifyConsentDisclosure, } from "./settlement.js";
 import { actionSigningBytes, joinSigningBytes, requireSessionVersion, resumeSigningBytes, SESSION_VERSION, } from "./sessionWire.js";
 import { describeNext, refusalMessageFromText } from "./refusal.js";
 function fail(message) {
     console.error(`dopa-open: ${message}`);
     process.exit(1);
 }
+/** Resolves `--product-url`, falling back to `DOPA_OPEN_PRODUCT_URL` and then
+ * to the deployed default — the same precedence and env name the Rust CLI
+ * uses, so a script that sets one variable configures both binaries. */
+function resolveProductUrl(explicit) {
+    return explicit ?? process.env.DOPA_OPEN_PRODUCT_URL ?? DEFAULT_OPEN_API_BASE_URL;
+}
 const hex = (value, field) => {
     if (typeof value !== "string")
         fail(`${field} must be a hex string`);
@@ -116,9 +122,7 @@ async function commandRegister(args) {
             "dry-run": { type: "boolean", default: false },
         },
     });
-    const productUrl = values["product-url"];
-    if (!productUrl && !values["dry-run"])
-        fail("--product-url is required (or pass --dry-run to print the request)");
+    const productUrl = resolveProductUrl(values["product-url"]);
     const agent = loadKeypair(values.key);
     const versions = (raw, flag) => {
         const list = raw.split(",").map((piece) => Number.parseInt(piece, 10));
@@ -162,7 +166,7 @@ async function commandRegister(args) {
         console.log(JSON.stringify(request, null, 2));
         return;
     }
-    const response = await fetch(`${productUrl.replace(/\/$/, "")}/open/v1/agents`, {
+    const response = await fetch(`${productUrl.replace(/\/$/, "")}/v1/agents`, {
         method: "POST",
         headers: { "content-type": "application/json" },
         body: JSON.stringify(request),
@@ -225,9 +229,7 @@ async function commandName(args) {
             bio: { type: "string" },
         },
     });
-    const productUrl = values["product-url"];
-    if (!productUrl)
-        fail("--product-url is required");
+    const productUrl = resolveProductUrl(values["product-url"]);
     if (!values["agent-id"])
         fail("--agent-id is required");
     if (!values.name && !values.handle && !values.bio)
@@ -258,7 +260,7 @@ async function commandName(args) {
  * against what they believed, and the refusal for getting it wrong is a bare
  * `stale_generation` that names neither. */
 async function readKeyState(productUrl, agentId) {
-    const response = await fetch(`${productUrl}/open/v1/agents/${encodeURIComponent(agentId)}`);
+    const response = await fetch(`${productUrl}/v1/agents/${encodeURIComponent(agentId)}`);
     if (!response.ok)
         fail(`could not read agent ${agentId} (${response.status})`);
     const wire = (await response.json());
@@ -291,9 +293,7 @@ async function commandKey(args) {
             "dry-run": { type: "boolean", default: false },
         },
     });
-    const productUrl = values["product-url"]?.replace(/\/$/, "");
-    if (!productUrl)
-        fail("--product-url is required");
+    const productUrl = resolveProductUrl(values["product-url"]).replace(/\/$/, "");
     const agentId = values["agent-id"];
     if (!agentId)
         fail("--agent-id is required");
@@ -356,7 +356,7 @@ async function commandKey(args) {
         return;
     }
     const path = retire ? "revocations" : "key-rotations";
-    const response = await fetch(`${productUrl}/open/v1/agents/${encodeURIComponent(agentId)}/${path}`, {
+    const response = await fetch(`${productUrl}/v1/agents/${encodeURIComponent(agentId)}/${path}`, {
         method: "POST",
         headers: { "content-type": "application/json" },
         body: JSON.stringify(request),
@@ -486,9 +486,7 @@ async function commandPlay(args) {
             "disconnect-after-actions": { type: "string" },
         },
     });
-    const productUrl = values["product-url"];
-    if (!productUrl)
-        fail("--product-url is required");
+    const productUrl = resolveProductUrl(values["product-url"]);
     if (!values["agent-id"])
         fail("--agent-id is required");
     /* A tour seat is played over the Product API, so it needs none of the
@@ -581,7 +579,7 @@ function runRecordPath(keyFile) {
 }
 function writeRunRecord(keyFile, record) {
     const path = runRecordPath(keyFile);
-    const watchUrl = `${record.productUrl.replace(/\/$/, "")}/arena/matches/0x${record.executionId.replace(/^0x/i, "")}`;
+    const watchUrl = `${record.productUrl.replace(/\/$/, "")}/open/matches/0x${record.executionId.replace(/^0x/i, "")}`;
     writeFileSync(path, `${JSON.stringify({ ...record, watchUrl, at: new Date().toISOString() }, null, 2)}\n`, { mode: 0o600 });
     return path;
 }
@@ -642,7 +640,7 @@ async function signedGet(productUrl, target, agent, agentIdHex) {
         headers: { [AGENT_HTTP_CAPABILITY_HEADER]: header },
     });
 }
-/** `dopa-open me`: the arena's record of this agent, signed for.
+/** `dopa-open me`: Open's record of this agent, signed for.
  *
  *  Both agents that played on 2026-09-06 wrote this request by hand, against
  *  the skill's own warning that a hand-written signature drifts by a byte. */
@@ -657,13 +655,13 @@ async function signedGet(productUrl, target, agent, agentIdHex) {
 async function resolveAgentId(productUrl, ownerAddressHex, given) {
     if (given)
         return given;
-    const response = await fetch(`${productUrl.replace(/\/$/, "")}/open/v1/agents?owner=${ownerAddressHex}&limit=60`);
+    const response = await fetch(`${productUrl.replace(/\/$/, "")}/v1/agents?owner=${ownerAddressHex}&limit=60`);
     if (!response.ok)
         fail(`--agent-id was not given and the roster could not be read (${response.status})`);
     const body = (await response.json());
     const agents = body.agents ?? [];
     if (agents.length === 0)
-        fail(`no agent on this arena is claimed by ${ownerAddressHex}. The roster lists an agent under the wallet that ` +
+        fail(`no agent on this Open deployment is claimed by ${ownerAddressHex}. The roster lists an agent under the wallet that ` +
             "claimed it, so one that registered itself is not here until it is claimed; pass --agent-id (register printed it)");
     if (agents.length > 1)
         fail(`this key owns ${agents.length} agents; pass --agent-id to say which:\n  ${agents
@@ -680,16 +678,14 @@ async function commandMe(args) {
             "agent-id": { type: "string" },
         },
     });
-    const productUrl = values["product-url"];
-    if (!productUrl)
-        fail("--product-url is required");
+    const productUrl = resolveProductUrl(values["product-url"]);
     const agent = loadKeypair(values.key);
     /* Without `--agent-id`, ask the roster which agent this key owns. */
     const agentId = await resolveAgentId(productUrl, agent.ownerAddressHex, values["agent-id"]);
-    const response = await signedGet(productUrl, "/open/v1/agent/me", agent, agentId);
+    const response = await signedGet(productUrl, "/v1/agent/me", agent, agentId);
     const body = await response.text();
     if (!response.ok)
-        fail(refusalMessageFromText(`agent/me at ${productUrl}/open/v1/agent/me`, response.status, body));
+        fail(refusalMessageFromText(`agent/me at ${productUrl}/v1/agent/me`, response.status, body));
     try {
         console.log(JSON.stringify(JSON.parse(body), null, 2));
     }
@@ -760,6 +756,11 @@ async function commandTurn(args) {
         agent,
         agentId: fromHex(agentId),
         waitMs: values.wait === undefined ? 0 : Number(values.wait) * 1000,
+        /* Written before each acknowledgement, not once at the end. `turn`
+           acknowledges the viewless join and the named prepared/open notices as
+           it takes them, and an acknowledgement the file does not record is a
+           phase the next process cannot know it is in. */
+        checkpoint: (next) => saveSeatState(statePath, next),
     });
     saveSeatState(statePath, outcome.state);
     if (outcome.kind === "your-turn") {
@@ -852,14 +853,19 @@ async function commandAct(args) {
  *  this, so it is worth a caller of its own rather than a flag on the play
  *  loop. Prints what the authority recorded. */
 async function consentToTerminal(options) {
-    const offerResponse = await fetch(`${options.productUrl.replace(/\/$/, "")}/open/v1/playground/matches/${options.offerId}`);
+    const offerResponse = await fetch(`${options.productUrl.replace(/\/$/, "")}/v1/playground/matches/${options.offerId}`);
     const offerBody = await offerResponse.text();
     if (!offerResponse.ok)
         fail(`offer read failed (${offerResponse.status}): ${offerBody}`);
     const record = JSON.parse(offerBody);
     if (!record.admission)
         fail("offer is not admitted; there is no execution to settle");
-    const origin = authorityOriginFromSessionBase(record.admission.session_base_url);
+    /* The settlement verbs live on the product origin — `/v1/authority/…` is
+       the product's public route, which forwards to the shard that admitted
+       the execution. The session's own origin serves `/v1/exec/` only, so
+       deriving the consent root from `session_base_url` asks a listener that
+       does not serve this spelling. */
+    const origin = options.productUrl.replace(/\/$/, "");
     const path = settlementConsentPath(record.admission.execution_id);
     const promptResponse = await fetch(`${origin}${path}`);
     const promptText = await promptResponse.text();
@@ -1002,9 +1008,7 @@ async function commandConsent(args) {
             "agent-id": { type: "string" },
         },
     });
-    const productUrl = values["product-url"];
-    if (!productUrl)
-        fail("--product-url is required");
+    const productUrl = resolveProductUrl(values["product-url"]);
     if (!values.offer)
         fail("--offer is required");
     if (!values.seat)
@@ -1040,9 +1044,7 @@ async function commandQueue(args) {
             play: { type: "boolean", default: false },
         },
     });
-    const productUrl = values["product-url"];
-    if (!productUrl)
-        fail("--product-url is required");
+    const productUrl = resolveProductUrl(values["product-url"]);
     if (!values["agent-id"])
         fail("--agent-id is required");
     const tour = values.tour;
@@ -1086,7 +1088,7 @@ async function commandQueue(args) {
        Labelled `agent_page`, never `watch`. It was `watch` for one release, and
        an agent reading that line handed its operator a profile under the word
        WATCH; `watch` is the table, printed below once there is one. */
-    console.log(`agent_page ${client.productUrl.replace(/\/$/, "")}/arena/agents/0x${values["agent-id"].replace(/^0x/i, "")}`);
+    console.log(`agent_page ${client.productUrl.replace(/\/$/, "")}/open/agents/0x${values["agent-id"].replace(/^0x/i, "")}`);
     let lastWaitingLine = "";
     const seated = await queueUntilSeated(client, tour, {
         minAgents,
@@ -1141,7 +1143,7 @@ async function commandQueue(args) {
             executionId: admitted.executionId,
         };
         const recordPath = writeRunRecord(values.key, runRecord);
-        console.log(`watch ${client.productUrl.replace(/\/$/, "")}/arena/matches/0x${admitted.executionId.replace(/^0x/i, "")}`);
+        console.log(`watch ${client.productUrl.replace(/\/$/, "")}/open/matches/0x${admitted.executionId.replace(/^0x/i, "")}`);
         console.log(`run_record ${recordPath}`);
         console.log(`reconnect ${reconnectCommand(values.key, runRecord)}`);
         takeSeatLock(values.key, values["agent-id"]);
@@ -1233,9 +1235,7 @@ async function commandRoom(args) {
             "timeout-ms": { type: "string", default: String(30 * 60_000) },
         },
     });
-    const productUrl = values["product-url"];
-    if (!productUrl)
-        fail("--product-url is required");
+    const productUrl = resolveProductUrl(values["product-url"]);
     if (!values["agent-id"])
         fail("--agent-id is required");
     const client = {
@@ -1255,6 +1255,12 @@ async function commandRoom(args) {
         const room = await openRoom(client, seats);
         console.log(`table ${room.tableId}`);
         console.log(`seats ${room.seatCount}`);
+        /* How full it is and what fills it. A room seats nobody but the agents
+           invited to it: the chairs nobody takes stay empty, so an opener has to
+           know how many are still open to know who to send the invite to. */
+        console.log(`seated 1 of ${room.seatCount}`);
+        console.log("fill the room deals when its last seat is taken, or two minutes after " +
+            "its second agent sits, whichever comes first; untaken seats stay empty");
         console.log(`mode ${room.mode}`);
         console.log(`settlement ${room.settlement}`);
         if (room.executionId)
@@ -1263,12 +1269,12 @@ async function commandRoom(args) {
            operator forwards the whole thing rather than the table id alone: an id
            without the document is how a guest ends up asking the table routes for
            a decision. */
-        console.log(`invite ${roomInvitePrompt(client.productUrl, room.tableId)}`);
+        console.log(`invite ${roomInvitePrompt(client.productUrl, room.tableId, room.seatCount - 1)}`);
         /* The room's own page, which exists before any hand does. Not `watch`:
            that word is the match link on every door, and `room join` prints it
            once the room composes, so two different links under one label was a
            thing an agent had to be warned about. */
-        console.log(`room_page ${client.productUrl.replace(/\/$/, "")}/arena/tours/private-room/tables/${room.tableId}`);
+        console.log(`room_page ${client.productUrl.replace(/\/$/, "")}/open/tours/private-room/tables/${room.tableId}`);
         return;
     }
     const tableId = values["table-id"];
@@ -1276,10 +1282,23 @@ async function commandRoom(args) {
         fail("--table-id is required: the id the room's opener sent you");
     const joined = await joinRoomWhenComposed(client, tableId, {
         timeoutMs: Number(values["timeout-ms"]),
-        onWaiting: () => console.log(`waiting_for_guest table ${tableId} holds this agent's seat; the room composes when its guest joins`),
+        onWaiting: (found) => {
+            /* What the room is waiting for, said in its own numbers where the join
+               answered with them. An opener's own join is refused rather than
+               answered, so it has none to print. */
+            const seats = found?.seated === undefined || found.seatCount === undefined
+                ? ""
+                : ` ${found.seated} of ${found.seatCount} seated;`;
+            const deals = found?.fillAtMs === undefined
+                ? " it deals when a second agent sits"
+                : ` it deals by ${new Date(found.fillAtMs).toISOString()} or sooner if its last seat is taken`;
+            console.log(`waiting_for_room table ${tableId} holds this agent's seat;${seats}${deals}`);
+        },
     });
     console.log(`table ${joined.tableId}`);
     console.log(`joined ${joined.joined}`);
+    if (joined.seated !== undefined && joined.seatCount !== undefined)
+        console.log(`seated ${joined.seated} of ${joined.seatCount}`);
     if (joined.offerId === undefined) {
         /* A mock stack composes no offer, so there is no seat to accept and
            nothing for `--play` to drive. Said plainly rather than by an empty
@@ -1304,7 +1323,7 @@ async function commandRoom(args) {
         executionId: admitted.executionId,
     };
     const recordPath = writeRunRecord(values.key, runRecord);
-    console.log(`watch ${client.productUrl.replace(/\/$/, "")}/arena/matches/0x${admitted.executionId.replace(/^0x/i, "")}`);
+    console.log(`watch ${client.productUrl.replace(/\/$/, "")}/open/matches/0x${admitted.executionId.replace(/^0x/i, "")}`);
     console.log(`run_record ${recordPath}`);
     console.log(`reconnect ${reconnectCommand(values.key, runRecord)}`);
     takeSeatLock(values.key, values["agent-id"]);
@@ -1371,9 +1390,7 @@ async function commandTournament(args) {
             "until-out": { type: "boolean", default: false },
         },
     });
-    const productUrl = values["product-url"];
-    if (!productUrl)
-        fail("--product-url is required");
+    const productUrl = resolveProductUrl(values["product-url"]);
     const agent = loadKeypair(values.key);
     const tournamentId = await tournamentArg(productUrl, values.tournament);
     const overview = await readTournament(productUrl, tournamentId);
@@ -1384,7 +1401,7 @@ async function commandTournament(args) {
        this agent holds now is on the owner's side of the book. */
     const playTakenBackNext = () => describeNext({
         action: "read",
-        route: `/open/v1/tournaments/${tournamentId}/owners/${owner ?? "{owner}"}`,
+        route: `/v1/tournaments/${tournamentId}/owners/${owner ?? "{owner}"}`,
     });
     const held = async () => owner ? await playsHeldBy(productUrl, tournamentId, owner, chip) : [];
     let plays = await held();
@@ -1447,8 +1464,16 @@ async function commandTournament(args) {
         return;
     }
     if (verb === "leave") {
-        if (entry?.state !== "queued")
-            fail(`this agent is ${entry?.state ?? "not in the book"}; only a queued agent can leave, and a seated one plays its table out`);
+        /* An agent that queued a moment ago is on chain and not yet in the book,
+           which is read a checkpoint behind it. Refusing on the first read told an
+           agent that had just been printed `queued waiting` that it was not in the
+           book at all, and the refusal's own `next` sent it to join again — which
+           would queue an agent that is already queued. So an absent entry is
+           waited out, briefly, before it is believed. */
+        const settled = entry ??
+            (await readAgentEntrySettled(productUrl, tournamentId, chip));
+        if (settled?.state !== "queued")
+            fail(`this agent is ${settled?.state ?? "not in the book"}; only a queued agent can leave, and a seated one plays its table out`);
         const executed = await sponsorAndExecute(client, leaveTransaction(overview, chip));
         console.log(`left ${executed.digest} ${executed.status}`);
         if (executed.status !== "success")
@@ -1610,7 +1635,7 @@ async function commandTournament(args) {
         console.log(`offer ${offerId}`);
         console.log(`seat ${seated.seat}`);
         if (seated.executionId)
-            console.log(`watch ${client.productUrl.replace(/\/$/, "")}/arena/matches/${seated.executionId}`);
+            console.log(`watch ${client.productUrl.replace(/\/$/, "")}/open/matches/${seated.executionId}`);
         if (!values.play)
             return;
         const seat = seated.seat;
@@ -1652,7 +1677,7 @@ async function commandTournament(args) {
 }
 /** `dopa-open claim-invite`: the link a wallet needs to claim this agent.
  *
- *  A claim is two consents. The wallet signs on the arena's page; you, holding
+ *  A claim is two consents. The wallet signs on Open's claim page; you, holding
  *  the agent's key, sign the invitation that lets it. Name the wallet with
  *  `--owner` to make the link good for that wallet alone; leave it out and the
  *  link is good for whoever opens it, for as long as `--hours` says. */
@@ -1668,9 +1693,7 @@ async function commandClaimInvite(args) {
             hours: { type: "string", default: "24" },
         },
     });
-    const productUrl = values["product-url"]?.replace(/\/$/, "");
-    if (!productUrl)
-        fail("--product-url is required");
+    const productUrl = resolveProductUrl(values["product-url"]).replace(/\/$/, "");
     if (!values["agent-id"])
         fail("--agent-id is required");
     const hours = Number(values.hours);
@@ -1688,7 +1711,7 @@ async function commandClaimInvite(args) {
        expects the old form. Both decode to the same 192 bytes. */
     const token = encodeClaimInvite(invite);
     const linkToken = encodeClaimInviteCompact(invite);
-    /* The arena's pages and its API share an origin on a deployment; a local
+    /* Open's pages and its API share an origin on a deployment; a local
        stack serves them apart, which is what --arena-url is for. */
     const arena = (values["arena-url"] ?? productUrl).replace(/\/$/, "");
     console.log(`invite ${token}`);
@@ -1700,7 +1723,7 @@ const USAGE = `usage: dopa-open <command>
 
   keygen    generate a keypair into .dopa-keypair (Sui suiprivkey format)
   address   print the owner address and public key of an existing key file
-  me        print the arena's record of this agent, signed for (agent/me)
+  me        print Open's record of this agent, signed for (agent/me)
   claim-invite
             mint the claim link a wallet needs to claim this agent
   register  self-allocate and register the agent with a product deployment

package/dist/identity.js

@@ -7,11 +7,13 @@
  * and this key can no longer sign for it -- which is the point of a claim.
  *
  * The payload mirrors `AgentIdentityEdit::canonical_payload` in
- * `backend/dopa-open/product/src/domain/custodial/key_rotation.rs`: every
- * field is length-framed, so "ab"/"c" and "a"/"bc" cannot sign the same
- * bytes. The product parses before it verifies -- it trims each field and
- * lower-cases the handle -- so this signs the parsed form, or the signature
- * is over bytes the store never holds. */
+ * `backend/dopa-open/product/src/domain/custodial/key_rotation.rs`: the two
+ * ids are fixed 32 bytes and every named field is length-framed, so "ab"/"c"
+ * and "a"/"bc" cannot sign the same bytes, and neither can a shorter agent id
+ * borrow a byte from the owner behind it. The product parses before it
+ * verifies -- it trims each field and lower-cases the handle -- so this signs
+ * the parsed form, or the signature is over bytes the store never holds. */
+import { ByteWriter, fromHex, textBytes } from "./bytes.js";
 import { signOwnerAuthenticator } from "./keypair.js";
 import { refusalMessageFromText } from "./refusal.js";
 const IDENTITY_DOMAIN = "dopa_open::agent_identity::v1";
@@ -25,40 +27,20 @@ export function parseIdentityFields(fields) {
         bio: fields.bio?.trim() || null,
     };
 }
-function u64be(value) {
-    const out = new Uint8Array(8);
-    new DataView(out.buffer).setBigUint64(0, BigInt(value));
-    return out;
-}
-function fromHex(value) {
-    const hex = value.replace(/^0x/i, "");
-    const out = new Uint8Array(hex.length / 2);
-    for (let index = 0; index < out.length; index++)
-        out[index] = Number.parseInt(hex.slice(index * 2, index * 2 + 2), 16);
-    return out;
-}
 /** The exact bytes the owning address signs to name an agent. */
 export function canonicalIdentityPayload(edit) {
-    const encoder = new TextEncoder();
-    const domain = encoder.encode(IDENTITY_DOMAIN);
+    const domain = textBytes(IDENTITY_DOMAIN);
     const parsed = parseIdentityFields(edit.fields);
-    const parts = [parsed.name ?? "", parsed.handle ?? "", parsed.bio ?? ""].map((field) => encoder.encode(field));
-    const chunks = [
-        u64be(domain.length),
-        domain,
-        fromHex(edit.agentId),
-        fromHex(edit.owner),
-        ...parts.flatMap((field) => [u64be(field.length), field]),
-        u64be(edit.issuedAtMs),
-        u64be(edit.expiresAtMs),
-    ];
-    const out = new Uint8Array(chunks.reduce((total, chunk) => total + chunk.length, 0));
-    let offset = 0;
-    for (const chunk of chunks) {
-        out.set(chunk, offset);
-        offset += chunk.length;
+    const writer = new ByteWriter()
+        .pushU64(domain.length)
+        .pushBytes(domain)
+        .pushFixed(fromHex(edit.agentId), 32, "agent id")
+        .pushFixed(fromHex(edit.owner), 32, "owner");
+    for (const field of [parsed.name ?? "", parsed.handle ?? "", parsed.bio ?? ""]) {
+        const bytes = textBytes(field);
+        writer.pushU64(bytes.length).pushBytes(bytes);
     }
-    return out;
+    return writer.pushU64(edit.issuedAtMs).pushU64(edit.expiresAtMs).bytes();
 }
 /** Name an agent, as the address that owns it. Answers what the arena stored. */
 export async function nameAgent(args) {
@@ -73,8 +55,8 @@ export async function nameAgent(args) {
         issuedAtMs,
         expiresAtMs,
     }));
-    const agentId = `0x${args.agentId.replace(/^0x/i, "")}`;
-    const response = await fetchImpl(`${args.productUrl.replace(/\/$/, "")}/open/v1/agents/${agentId}/identity`, {
+    const agentId = `0x${args.agentId.replace(/^0x/, "")}`;
+    const response = await fetchImpl(`${args.productUrl.replace(/\/$/, "")}/v1/agents/${agentId}/identity`, {
         method: "PUT",
         headers: { "content-type": "application/json" },
         body: JSON.stringify({