@dopamint-fun/open-sdk 0.2.0-dev.1 → 0.2.0-dev.11

package/README.md

@@ -1,4 +1,4 @@
-# `libs/dopa-open-client-ts`
+# `libs/dopa-open/client-ts`
 
 Status: implemented
 Ownership: Optional official TypeScript SDK for DOPA-OPEN self-custody agents:
@@ -36,8 +36,8 @@ signatures, not whether this package is used. Allowed dependencies:
 ## Parity
 
 Preimages and signatures are pinned byte-identical to the Rust signer by
-`libs/dopa-open-client-rs/vectors/ts-signer-parity.json`, generated by
-`libs/dopa-open-client-rs/tests/ts_parity_vectors.rs` and replayed by
+`libs/dopa-open/client-rs/vectors/ts-signer-parity.json`, generated by
+`libs/dopa-open/client-rs/tests/ts_parity_vectors.rs` and replayed by
 `src/parity.test.ts` here. Regenerate with
 `WRITE_TS_PARITY_VECTORS=1 cargo test -p dopa-open-client-rs --test
 ts_parity_vectors`; a wire change updates both sides together.

package/dist/agentHttp.js

@@ -2,7 +2,7 @@
  * tour or table request without ever holding a bearer credential.
  *
  * Byte-identical to `dopa_open_api::agent_http`, pinned by
- * `libs/dopa-open-api/vectors/agent_http_capability_v1.json`. A bearer token
+ * `libs/dopa-open/api/vectors/agent_http_capability_v1.json`. A bearer token
  * is a secret presented per request; a signature is not, so each capability is
  * bound to the method, the request target, a digest of the exact body bytes,
  * and a single-use nonce inside a bounded window. One minted to enter the
@@ -13,7 +13,7 @@
  * server reconstructs them from the request it actually received, so there is
  * no restated copy to compare and therefore no comparison to forget.
  */
-import { ByteWriter, frameSigningBytes, fromHex, textBytes, toHex } from "./bytes.js";
+import { ByteReader, ByteWriter, frameSigningBytes, fromHex, textBytes, toHex, } from "./bytes.js";
 import { blake2b256 } from "./crypto.js";
 import { signRaw } from "./keypair.js";
 const AGENT_HTTP_CAPABILITY_DOMAIN = textBytes("dopa_open::agent_http_capability::v1");
@@ -94,20 +94,17 @@ export function decodeAgentHttpHeader(value) {
     const bytes = fromHex(value);
     if (bytes.length !== HEADER_BYTES)
         throw new Error(`capability header must be ${HEADER_BYTES} bytes, got ${bytes.length}`);
-    const readU64 = (offset) => {
-        let out = 0n;
-        for (let index = 0; index < 8; index++)
-            out = (out << 8n) | BigInt(bytes[offset + index]);
-        return out;
-    };
-    return {
-        agentId: bytes.slice(0, 32),
-        agentPublicKey: bytes.slice(32, 64),
-        issuedAtMs: readU64(64),
-        expiresAtMs: readU64(72),
-        nonce: bytes.slice(80, 80 + AGENT_HTTP_CAPABILITY_NONCE_BYTES),
-        signature: bytes.slice(80 + AGENT_HTTP_CAPABILITY_NONCE_BYTES),
+    const reader = new ByteReader(bytes);
+    const capability = {
+        agentId: reader.readFixed(32, "agent id"),
+        agentPublicKey: reader.readFixed(32, "agent public key"),
+        issuedAtMs: reader.readU64("issued_at_ms"),
+        expiresAtMs: reader.readU64("expires_at_ms"),
+        nonce: reader.readFixed(AGENT_HTTP_CAPABILITY_NONCE_BYTES, "nonce"),
+        signature: reader.readFixed(SIGNATURE_BYTES, "signature"),
     };
+    reader.finish();
+    return capability;
 }
 /** Mint and sign one capability, and return the header to send with it.
  *

package/dist/bytes.d.ts

@@ -4,6 +4,15 @@ export declare function toHex0x(bytes: Uint8Array): string;
 /** Length-aware equality. `every()` on an empty left-hand side is vacuously
  *  true, which would accept a truncated hex decode as a matching key. */
 export declare function equalBytes(left: Uint8Array, right: Uint8Array): boolean;
+/** One `label:value` line per field, under a line naming the domain.
+ *
+ *  What an owner's wallet is asked to approve is text, not a frame: a Sui
+ *  wallet renders a personal message as characters, and a framed payload
+ *  reached a person as NUL bytes and junk they could not check. The order of
+ *  the fields is signed, and so is the absence of a trailing newline. */
+export declare function signedMessage(domain: string, fields: readonly (readonly [label: string, value: string])[]): Uint8Array;
+/** An id or address at the one width the message renders it, or a throw. */
+export declare function fixedHex0x(value: string, length: number, field: string): string;
 /** An append-only byte buffer with the wire's own vocabulary. */
 export declare class ByteWriter {
     private chunks;

package/dist/bytes.js

@@ -5,7 +5,7 @@
  * These helpers exist so every framing in this package spells a number the
  * same way; a preimage that drifts from the Rust client by one byte produces
  * signatures the authority silently rejects, which is why the parity vectors
- * in `libs/dopa-open-client-rs/vectors/` pin all of it.
+ * in `libs/dopa-open/client-rs/vectors/` pin all of it.
  */
 export function toHex(bytes) {
     let out = "";
@@ -37,6 +37,23 @@ export function equalBytes(left, right) {
         return false;
     return left.every((byte, index) => byte === right[index]);
 }
+/** One `label:value` line per field, under a line naming the domain.
+ *
+ *  What an owner's wallet is asked to approve is text, not a frame: a Sui
+ *  wallet renders a personal message as characters, and a framed payload
+ *  reached a person as NUL bytes and junk they could not check. The order of
+ *  the fields is signed, and so is the absence of a trailing newline. */
+export function signedMessage(domain, fields) {
+    const lines = fields.map(([label, value]) => `${label}:${value}`);
+    return textBytes([domain, ...lines].join("\n"));
+}
+/** An id or address at the one width the message renders it, or a throw. */
+export function fixedHex0x(value, length, field) {
+    const bytes = fromHex(value);
+    if (bytes.length !== length)
+        throw new Error(`${field} must be ${length} bytes, got ${bytes.length}`);
+    return toHex0x(bytes);
+}
 /** An append-only byte buffer with the wire's own vocabulary. */
 export class ByteWriter {
     chunks = [];

package/dist/claim.js

@@ -1,6 +1,6 @@
 import { randomBytes } from "node:crypto";
 import { signRaw } from "./keypair.js";
-import { concatBytes, equalBytes, frameSigningBytes, fromHex, textBytes, toHex0x, } from "./bytes.js";
+import { ByteReader, ByteWriter, equalBytes, frameSigningBytes, fromHex, textBytes, toHex0x, } from "./bytes.js";
 /* The agent's half of a claim: an invitation its own key signs.
  *
  * A wallet claims an agent by signing for it in the arena's UI. That proves
@@ -22,16 +22,6 @@ export const AGENT_CLAIM_INVITE_MAX_WINDOW_MS = 7 * 24 * 60 * 60 * 1000;
  *  nonce || signature`, every field fixed-width. */
 export const AGENT_CLAIM_INVITE_TOKEN_BYTES = 32 + 32 + 32 + 8 + 8 + 16 + 64;
 const ZERO_OWNER = new Uint8Array(32);
-function u64be(value) {
-    const out = new Uint8Array(8);
-    new DataView(out.buffer).setBigUint64(0, value, false);
-    return out;
-}
-function fixed(bytes, length, what) {
-    if (bytes.length !== length)
-        throw new Error(`${what} must be ${length} bytes, got ${bytes.length}`);
-    return bytes;
-}
 /** `AgentClaimInvite::canonical_payload` -- the framed fields. */
 export function claimInviteCanonicalPayload(invite) {
     if (invite.expiresAtMs <= invite.issuedAtMs)
@@ -41,7 +31,18 @@ export function claimInviteCanonicalPayload(invite) {
         throw new Error("an invitation may stay open for at most a week");
     if (invite.nonce.every((byte) => byte === 0))
         throw new Error("the invitation's nonce must not be all zero");
-    return concatBytes(AGENT_CLAIM_INVITE_DOMAIN, Uint8Array.of(0, CANONICAL_WIRE_VERSION, INVITE_OPERATION), fixed(invite.agentId, 32, "agent id"), invite.owner ? fixed(invite.owner, 32, "owner") : ZERO_OWNER, fixed(invite.agentPublicKey, 32, "agent public key"), u64be(invite.issuedAtMs), u64be(invite.expiresAtMs), fixed(invite.nonce, AGENT_CLAIM_INVITE_NONCE_BYTES, "nonce"));
+    return new ByteWriter()
+        .pushBytes(AGENT_CLAIM_INVITE_DOMAIN)
+        .pushByte(0)
+        .pushByte(CANONICAL_WIRE_VERSION)
+        .pushByte(INVITE_OPERATION)
+        .pushFixed(invite.agentId, 32, "agent id")
+        .pushFixed(invite.owner ?? ZERO_OWNER, 32, "owner")
+        .pushFixed(invite.agentPublicKey, 32, "agent public key")
+        .pushU64(invite.issuedAtMs)
+        .pushU64(invite.expiresAtMs)
+        .pushFixed(invite.nonce, AGENT_CLAIM_INVITE_NONCE_BYTES, "nonce")
+        .bytes();
 }
 /** The bytes the agent's key signs, raw ed25519. */
 export function claimInviteSigningBytes(invite) {
@@ -66,7 +67,15 @@ export async function mintClaimInvite(agent, agentId, options = {}) {
 function claimInviteBytes(invite) {
     if (invite.signature.length !== 64)
         throw new Error("an invitation is encoded only once it is signed");
-    return concatBytes(fixed(invite.agentId, 32, "agent id"), invite.owner ?? ZERO_OWNER, fixed(invite.agentPublicKey, 32, "agent public key"), u64be(invite.issuedAtMs), u64be(invite.expiresAtMs), fixed(invite.nonce, 16, "nonce"), invite.signature);
+    return new ByteWriter()
+        .pushFixed(invite.agentId, 32, "agent id")
+        .pushFixed(invite.owner ?? ZERO_OWNER, 32, "owner")
+        .pushFixed(invite.agentPublicKey, 32, "agent public key")
+        .pushU64(invite.issuedAtMs)
+        .pushU64(invite.expiresAtMs)
+        .pushFixed(invite.nonce, AGENT_CLAIM_INVITE_NONCE_BYTES, "nonce")
+        .pushBytes(invite.signature)
+        .bytes();
 }
 /** The token the link carries and the claim body posts back: 0x-hex.
  *
@@ -115,20 +124,27 @@ export function decodeClaimInvite(token) {
     const bytes = claimInviteTokenBytes(token.trim());
     if (bytes.length !== AGENT_CLAIM_INVITE_TOKEN_BYTES)
         throw new Error(`an invitation token is ${AGENT_CLAIM_INVITE_TOKEN_BYTES} bytes, got ${bytes.length}`);
-    const view = new DataView(bytes.buffer, bytes.byteOffset);
-    const owner = bytes.slice(32, 64);
+    const reader = new ByteReader(bytes);
+    const agentId = reader.readFixed(32, "agent id");
+    const owner = reader.readFixed(32, "owner");
+    const agentPublicKey = reader.readFixed(32, "agent public key");
+    const issuedAtMs = reader.readU64("issued");
+    const expiresAtMs = reader.readU64("expires");
+    const nonce = reader.readFixed(AGENT_CLAIM_INVITE_NONCE_BYTES, "nonce");
+    const signature = reader.readFixed(64, "signature");
+    reader.finish();
     return {
-        agentId: bytes.slice(0, 32),
+        agentId,
         owner: equalBytes(owner, ZERO_OWNER) ? null : owner,
-        agentPublicKey: bytes.slice(64, 96),
-        issuedAtMs: view.getBigUint64(96, false),
-        expiresAtMs: view.getBigUint64(104, false),
-        nonce: bytes.slice(112, 128),
-        signature: bytes.slice(128),
+        agentPublicKey,
+        issuedAtMs,
+        expiresAtMs,
+        nonce,
+        signature,
     };
 }
 /** Where the owner goes to accept: the agent's claim page with the token. */
 export function claimInviteLink(arenaOrigin, agentIdHex, token) {
     const id = agentIdHex.startsWith("0x") ? agentIdHex : `0x${agentIdHex}`;
-    return `${arenaOrigin.replace(/\/$/, "")}/arena/agents/${id}/claim?invite=${token}`;
+    return `${arenaOrigin.replace(/\/$/, "")}/open/agents/${id}/claim?invite=${token}`;
 }

package/dist/cli.js

@@ -23,14 +23,20 @@ import { claimInviteLink, encodeClaimInvite, encodeClaimInviteCompact, mintClaim
 import { acceptAndAwaitAdmission } from "./offer.js";
 import { playTour, queueUntilSeated } from "./tour.js";
 import { joinRoomWhenComposed, MIN_ROOM_SEATS, openRoom, roomInvitePrompt, } from "./room.js";
-import { disputeHolding, JoinRefused, joinTransaction, leaveTransaction, listTournaments, matchmakingOverLine, planJoin, presentToTournament, readAgentEntry, playsHeldBy, giveBackTransaction, readTournament, sponsorAndExecute, tournamentIdArg, } from "./openTournament.js";
-import { authorityOriginFromSessionBase, buildConsentRequest, digestForPrompt, settlementConsentPath, verifyConsentDisclosure, } from "./settlement.js";
+import { disputeHolding, JoinRefused, joinTransaction, leaveTransaction, listTournaments, matchmakingOverLine, planJoin, presentToTournament, readAgentEntry, readAgentEntrySettled, playsHeldBy, giveBackTransaction, readTournament, sponsorAndExecute, tournamentIdArg, } from "./openTournament.js";
+import { buildConsentRequest, DEFAULT_OPEN_API_BASE_URL, digestForPrompt, settlementConsentPath, verifyConsentDisclosure, } from "./settlement.js";
 import { actionSigningBytes, joinSigningBytes, requireSessionVersion, resumeSigningBytes, SESSION_VERSION, } from "./sessionWire.js";
 import { describeNext, refusalMessageFromText } from "./refusal.js";
 function fail(message) {
     console.error(`dopa-open: ${message}`);
     process.exit(1);
 }
+/** Resolves `--product-url`, falling back to `DOPA_OPEN_PRODUCT_URL` and then
+ * to the deployed default — the same precedence and env name the Rust CLI
+ * uses, so a script that sets one variable configures both binaries. */
+function resolveProductUrl(explicit) {
+    return explicit ?? process.env.DOPA_OPEN_PRODUCT_URL ?? DEFAULT_OPEN_API_BASE_URL;
+}
 const hex = (value, field) => {
     if (typeof value !== "string")
         fail(`${field} must be a hex string`);
@@ -116,9 +122,7 @@ async function commandRegister(args) {
             "dry-run": { type: "boolean", default: false },
         },
     });
-    const productUrl = values["product-url"];
-    if (!productUrl && !values["dry-run"])
-        fail("--product-url is required (or pass --dry-run to print the request)");
+    const productUrl = resolveProductUrl(values["product-url"]);
     const agent = loadKeypair(values.key);
     const versions = (raw, flag) => {
         const list = raw.split(",").map((piece) => Number.parseInt(piece, 10));
@@ -162,7 +166,7 @@ async function commandRegister(args) {
         console.log(JSON.stringify(request, null, 2));
         return;
     }
-    const response = await fetch(`${productUrl.replace(/\/$/, "")}/open/v1/agents`, {
+    const response = await fetch(`${productUrl.replace(/\/$/, "")}/v1/agents`, {
         method: "POST",
         headers: { "content-type": "application/json" },
         body: JSON.stringify(request),
@@ -225,9 +229,7 @@ async function commandName(args) {
             bio: { type: "string" },
         },
     });
-    const productUrl = values["product-url"];
-    if (!productUrl)
-        fail("--product-url is required");
+    const productUrl = resolveProductUrl(values["product-url"]);
     if (!values["agent-id"])
         fail("--agent-id is required");
     if (!values.name && !values.handle && !values.bio)
@@ -258,7 +260,7 @@ async function commandName(args) {
  * against what they believed, and the refusal for getting it wrong is a bare
  * `stale_generation` that names neither. */
 async function readKeyState(productUrl, agentId) {
-    const response = await fetch(`${productUrl}/open/v1/agents/${encodeURIComponent(agentId)}`);
+    const response = await fetch(`${productUrl}/v1/agents/${encodeURIComponent(agentId)}`);
     if (!response.ok)
         fail(`could not read agent ${agentId} (${response.status})`);
     const wire = (await response.json());
@@ -291,9 +293,7 @@ async function commandKey(args) {
             "dry-run": { type: "boolean", default: false },
         },
     });
-    const productUrl = values["product-url"]?.replace(/\/$/, "");
-    if (!productUrl)
-        fail("--product-url is required");
+    const productUrl = resolveProductUrl(values["product-url"]).replace(/\/$/, "");
     const agentId = values["agent-id"];
     if (!agentId)
         fail("--agent-id is required");
@@ -356,7 +356,7 @@ async function commandKey(args) {
         return;
     }
     const path = retire ? "revocations" : "key-rotations";
-    const response = await fetch(`${productUrl}/open/v1/agents/${encodeURIComponent(agentId)}/${path}`, {
+    const response = await fetch(`${productUrl}/v1/agents/${encodeURIComponent(agentId)}/${path}`, {
         method: "POST",
         headers: { "content-type": "application/json" },
         body: JSON.stringify(request),
@@ -486,9 +486,7 @@ async function commandPlay(args) {
             "disconnect-after-actions": { type: "string" },
         },
     });
-    const productUrl = values["product-url"];
-    if (!productUrl)
-        fail("--product-url is required");
+    const productUrl = resolveProductUrl(values["product-url"]);
     if (!values["agent-id"])
         fail("--agent-id is required");
     /* A tour seat is played over the Product API, so it needs none of the
@@ -581,7 +579,7 @@ function runRecordPath(keyFile) {
 }
 function writeRunRecord(keyFile, record) {
     const path = runRecordPath(keyFile);
-    const watchUrl = `${record.productUrl.replace(/\/$/, "")}/arena/matches/0x${record.executionId.replace(/^0x/i, "")}`;
+    const watchUrl = `${record.productUrl.replace(/\/$/, "")}/open/matches/0x${record.executionId.replace(/^0x/i, "")}`;
     writeFileSync(path, `${JSON.stringify({ ...record, watchUrl, at: new Date().toISOString() }, null, 2)}\n`, { mode: 0o600 });
     return path;
 }
@@ -642,7 +640,7 @@ async function signedGet(productUrl, target, agent, agentIdHex) {
         headers: { [AGENT_HTTP_CAPABILITY_HEADER]: header },
     });
 }
-/** `dopa-open me`: the arena's record of this agent, signed for.
+/** `dopa-open me`: Open's record of this agent, signed for.
  *
  *  Both agents that played on 2026-09-06 wrote this request by hand, against
  *  the skill's own warning that a hand-written signature drifts by a byte. */
@@ -657,13 +655,13 @@ async function signedGet(productUrl, target, agent, agentIdHex) {
 async function resolveAgentId(productUrl, ownerAddressHex, given) {
     if (given)
         return given;
-    const response = await fetch(`${productUrl.replace(/\/$/, "")}/open/v1/agents?owner=${ownerAddressHex}&limit=60`);
+    const response = await fetch(`${productUrl.replace(/\/$/, "")}/v1/agents?owner=${ownerAddressHex}&limit=60`);
     if (!response.ok)
         fail(`--agent-id was not given and the roster could not be read (${response.status})`);
     const body = (await response.json());
     const agents = body.agents ?? [];
     if (agents.length === 0)
-        fail(`no agent on this arena is claimed by ${ownerAddressHex}. The roster lists an agent under the wallet that ` +
+        fail(`no agent on this Open deployment is claimed by ${ownerAddressHex}. The roster lists an agent under the wallet that ` +
             "claimed it, so one that registered itself is not here until it is claimed; pass --agent-id (register printed it)");
     if (agents.length > 1)
         fail(`this key owns ${agents.length} agents; pass --agent-id to say which:\n  ${agents
@@ -680,16 +678,14 @@ async function commandMe(args) {
             "agent-id": { type: "string" },
         },
     });
-    const productUrl = values["product-url"];
-    if (!productUrl)
-        fail("--product-url is required");
+    const productUrl = resolveProductUrl(values["product-url"]);
     const agent = loadKeypair(values.key);
     /* Without `--agent-id`, ask the roster which agent this key owns. */
     const agentId = await resolveAgentId(productUrl, agent.ownerAddressHex, values["agent-id"]);
-    const response = await signedGet(productUrl, "/open/v1/agent/me", agent, agentId);
+    const response = await signedGet(productUrl, "/v1/agent/me", agent, agentId);
     const body = await response.text();
     if (!response.ok)
-        fail(refusalMessageFromText(`agent/me at ${productUrl}/open/v1/agent/me`, response.status, body));
+        fail(refusalMessageFromText(`agent/me at ${productUrl}/v1/agent/me`, response.status, body));
     try {
         console.log(JSON.stringify(JSON.parse(body), null, 2));
     }
@@ -857,14 +853,19 @@ async function commandAct(args) {
  *  this, so it is worth a caller of its own rather than a flag on the play
  *  loop. Prints what the authority recorded. */
 async function consentToTerminal(options) {
-    const offerResponse = await fetch(`${options.productUrl.replace(/\/$/, "")}/open/v1/playground/matches/${options.offerId}`);
+    const offerResponse = await fetch(`${options.productUrl.replace(/\/$/, "")}/v1/playground/matches/${options.offerId}`);
     const offerBody = await offerResponse.text();
     if (!offerResponse.ok)
         fail(`offer read failed (${offerResponse.status}): ${offerBody}`);
     const record = JSON.parse(offerBody);
     if (!record.admission)
         fail("offer is not admitted; there is no execution to settle");
-    const origin = authorityOriginFromSessionBase(record.admission.session_base_url);
+    /* The settlement verbs live on the product origin — `/v1/authority/…` is
+       the product's public route, which forwards to the shard that admitted
+       the execution. The session's own origin serves `/v1/exec/` only, so
+       deriving the consent root from `session_base_url` asks a listener that
+       does not serve this spelling. */
+    const origin = options.productUrl.replace(/\/$/, "");
     const path = settlementConsentPath(record.admission.execution_id);
     const promptResponse = await fetch(`${origin}${path}`);
     const promptText = await promptResponse.text();
@@ -1007,9 +1008,7 @@ async function commandConsent(args) {
             "agent-id": { type: "string" },
         },
     });
-    const productUrl = values["product-url"];
-    if (!productUrl)
-        fail("--product-url is required");
+    const productUrl = resolveProductUrl(values["product-url"]);
     if (!values.offer)
         fail("--offer is required");
     if (!values.seat)
@@ -1045,9 +1044,7 @@ async function commandQueue(args) {
             play: { type: "boolean", default: false },
         },
     });
-    const productUrl = values["product-url"];
-    if (!productUrl)
-        fail("--product-url is required");
+    const productUrl = resolveProductUrl(values["product-url"]);
     if (!values["agent-id"])
         fail("--agent-id is required");
     const tour = values.tour;
@@ -1091,7 +1088,7 @@ async function commandQueue(args) {
        Labelled `agent_page`, never `watch`. It was `watch` for one release, and
        an agent reading that line handed its operator a profile under the word
        WATCH; `watch` is the table, printed below once there is one. */
-    console.log(`agent_page ${client.productUrl.replace(/\/$/, "")}/arena/agents/0x${values["agent-id"].replace(/^0x/i, "")}`);
+    console.log(`agent_page ${client.productUrl.replace(/\/$/, "")}/open/agents/0x${values["agent-id"].replace(/^0x/i, "")}`);
     let lastWaitingLine = "";
     const seated = await queueUntilSeated(client, tour, {
         minAgents,
@@ -1146,7 +1143,7 @@ async function commandQueue(args) {
             executionId: admitted.executionId,
         };
         const recordPath = writeRunRecord(values.key, runRecord);
-        console.log(`watch ${client.productUrl.replace(/\/$/, "")}/arena/matches/0x${admitted.executionId.replace(/^0x/i, "")}`);
+        console.log(`watch ${client.productUrl.replace(/\/$/, "")}/open/matches/0x${admitted.executionId.replace(/^0x/i, "")}`);
         console.log(`run_record ${recordPath}`);
         console.log(`reconnect ${reconnectCommand(values.key, runRecord)}`);
         takeSeatLock(values.key, values["agent-id"]);
@@ -1238,9 +1235,7 @@ async function commandRoom(args) {
             "timeout-ms": { type: "string", default: String(30 * 60_000) },
         },
     });
-    const productUrl = values["product-url"];
-    if (!productUrl)
-        fail("--product-url is required");
+    const productUrl = resolveProductUrl(values["product-url"]);
     if (!values["agent-id"])
         fail("--agent-id is required");
     const client = {
@@ -1279,7 +1274,7 @@ async function commandRoom(args) {
            that word is the match link on every door, and `room join` prints it
            once the room composes, so two different links under one label was a
            thing an agent had to be warned about. */
-        console.log(`room_page ${client.productUrl.replace(/\/$/, "")}/arena/tours/private-room/tables/${room.tableId}`);
+        console.log(`room_page ${client.productUrl.replace(/\/$/, "")}/open/tours/private-room/tables/${room.tableId}`);
         return;
     }
     const tableId = values["table-id"];
@@ -1328,7 +1323,7 @@ async function commandRoom(args) {
         executionId: admitted.executionId,
     };
     const recordPath = writeRunRecord(values.key, runRecord);
-    console.log(`watch ${client.productUrl.replace(/\/$/, "")}/arena/matches/0x${admitted.executionId.replace(/^0x/i, "")}`);
+    console.log(`watch ${client.productUrl.replace(/\/$/, "")}/open/matches/0x${admitted.executionId.replace(/^0x/i, "")}`);
     console.log(`run_record ${recordPath}`);
     console.log(`reconnect ${reconnectCommand(values.key, runRecord)}`);
     takeSeatLock(values.key, values["agent-id"]);
@@ -1395,9 +1390,7 @@ async function commandTournament(args) {
             "until-out": { type: "boolean", default: false },
         },
     });
-    const productUrl = values["product-url"];
-    if (!productUrl)
-        fail("--product-url is required");
+    const productUrl = resolveProductUrl(values["product-url"]);
     const agent = loadKeypair(values.key);
     const tournamentId = await tournamentArg(productUrl, values.tournament);
     const overview = await readTournament(productUrl, tournamentId);
@@ -1408,7 +1401,7 @@ async function commandTournament(args) {
        this agent holds now is on the owner's side of the book. */
     const playTakenBackNext = () => describeNext({
         action: "read",
-        route: `/open/v1/tournaments/${tournamentId}/owners/${owner ?? "{owner}"}`,
+        route: `/v1/tournaments/${tournamentId}/owners/${owner ?? "{owner}"}`,
     });
     const held = async () => owner ? await playsHeldBy(productUrl, tournamentId, owner, chip) : [];
     let plays = await held();
@@ -1471,8 +1464,16 @@ async function commandTournament(args) {
         return;
     }
     if (verb === "leave") {
-        if (entry?.state !== "queued")
-            fail(`this agent is ${entry?.state ?? "not in the book"}; only a queued agent can leave, and a seated one plays its table out`);
+        /* An agent that queued a moment ago is on chain and not yet in the book,
+           which is read a checkpoint behind it. Refusing on the first read told an
+           agent that had just been printed `queued waiting` that it was not in the
+           book at all, and the refusal's own `next` sent it to join again — which
+           would queue an agent that is already queued. So an absent entry is
+           waited out, briefly, before it is believed. */
+        const settled = entry ??
+            (await readAgentEntrySettled(productUrl, tournamentId, chip));
+        if (settled?.state !== "queued")
+            fail(`this agent is ${settled?.state ?? "not in the book"}; only a queued agent can leave, and a seated one plays its table out`);
         const executed = await sponsorAndExecute(client, leaveTransaction(overview, chip));
         console.log(`left ${executed.digest} ${executed.status}`);
         if (executed.status !== "success")
@@ -1634,7 +1635,7 @@ async function commandTournament(args) {
         console.log(`offer ${offerId}`);
         console.log(`seat ${seated.seat}`);
         if (seated.executionId)
-            console.log(`watch ${client.productUrl.replace(/\/$/, "")}/arena/matches/${seated.executionId}`);
+            console.log(`watch ${client.productUrl.replace(/\/$/, "")}/open/matches/${seated.executionId}`);
         if (!values.play)
             return;
         const seat = seated.seat;
@@ -1676,7 +1677,7 @@ async function commandTournament(args) {
 }
 /** `dopa-open claim-invite`: the link a wallet needs to claim this agent.
  *
- *  A claim is two consents. The wallet signs on the arena's page; you, holding
+ *  A claim is two consents. The wallet signs on Open's claim page; you, holding
  *  the agent's key, sign the invitation that lets it. Name the wallet with
  *  `--owner` to make the link good for that wallet alone; leave it out and the
  *  link is good for whoever opens it, for as long as `--hours` says. */
@@ -1692,9 +1693,7 @@ async function commandClaimInvite(args) {
             hours: { type: "string", default: "24" },
         },
     });
-    const productUrl = values["product-url"]?.replace(/\/$/, "");
-    if (!productUrl)
-        fail("--product-url is required");
+    const productUrl = resolveProductUrl(values["product-url"]).replace(/\/$/, "");
     if (!values["agent-id"])
         fail("--agent-id is required");
     const hours = Number(values.hours);
@@ -1712,7 +1711,7 @@ async function commandClaimInvite(args) {
        expects the old form. Both decode to the same 192 bytes. */
     const token = encodeClaimInvite(invite);
     const linkToken = encodeClaimInviteCompact(invite);
-    /* The arena's pages and its API share an origin on a deployment; a local
+    /* Open's pages and its API share an origin on a deployment; a local
        stack serves them apart, which is what --arena-url is for. */
     const arena = (values["arena-url"] ?? productUrl).replace(/\/$/, "");
     console.log(`invite ${token}`);
@@ -1724,7 +1723,7 @@ const USAGE = `usage: dopa-open <command>
 
   keygen    generate a keypair into .dopa-keypair (Sui suiprivkey format)
   address   print the owner address and public key of an existing key file
-  me        print the arena's record of this agent, signed for (agent/me)
+  me        print Open's record of this agent, signed for (agent/me)
   claim-invite
             mint the claim link a wallet needs to claim this agent
   register  self-allocate and register the agent with a product deployment

package/dist/identity.d.ts

@@ -9,7 +9,7 @@ export interface AgentIdentityFields {
 }
 /** The form the product stores, which is the form the signature covers. */
 export declare function parseIdentityFields(fields: AgentIdentityFields): Required<AgentIdentityFields>;
-/** The exact bytes the owning address signs to name an agent. */
+/** The exact message the owning address signs to name an agent. */
 export declare function canonicalIdentityPayload(edit: {
     agentId: string;
     owner: string;

package/dist/identity.js

@@ -6,12 +6,14 @@
  * and names it. After a claim the same route belongs to the claiming wallet,
  * and this key can no longer sign for it -- which is the point of a claim.
  *
- * The payload mirrors `AgentIdentityEdit::canonical_payload` in
- * `backend/dopa-open/product/src/domain/custodial/key_rotation.rs`: every
- * field is length-framed, so "ab"/"c" and "a"/"bc" cannot sign the same
- * bytes. The product parses before it verifies -- it trims each field and
- * lower-cases the handle -- so this signs the parsed form, or the signature
- * is over bytes the store never holds. */
+ * The message mirrors `AgentIdentityEdit::canonical_message` in
+ * `backend/dopa-open/product/src/domain/custodial/key_rotation.rs`: the two
+ * ids render at a fixed 32 bytes and every named field is quoted, so "ab"/"c"
+ * and "a"/"bc" cannot sign the same text and a newline inside a name cannot
+ * forge a line of its own. The product parses before it verifies -- it trims
+ * each field and lower-cases the handle -- so this signs the parsed form, or
+ * the signature is over text the store never holds. */
+import { fixedHex0x, signedMessage } from "./bytes.js";
 import { signOwnerAuthenticator } from "./keypair.js";
 import { refusalMessageFromText } from "./refusal.js";
 const IDENTITY_DOMAIN = "dopa_open::agent_identity::v1";
@@ -25,40 +27,18 @@ export function parseIdentityFields(fields) {
         bio: fields.bio?.trim() || null,
     };
 }
-function u64be(value) {
-    const out = new Uint8Array(8);
-    new DataView(out.buffer).setBigUint64(0, BigInt(value));
-    return out;
-}
-function fromHex(value) {
-    const hex = value.replace(/^0x/i, "");
-    const out = new Uint8Array(hex.length / 2);
-    for (let index = 0; index < out.length; index++)
-        out[index] = Number.parseInt(hex.slice(index * 2, index * 2 + 2), 16);
-    return out;
-}
-/** The exact bytes the owning address signs to name an agent. */
+/** The exact message the owning address signs to name an agent. */
 export function canonicalIdentityPayload(edit) {
-    const encoder = new TextEncoder();
-    const domain = encoder.encode(IDENTITY_DOMAIN);
     const parsed = parseIdentityFields(edit.fields);
-    const parts = [parsed.name ?? "", parsed.handle ?? "", parsed.bio ?? ""].map((field) => encoder.encode(field));
-    const chunks = [
-        u64be(domain.length),
-        domain,
-        fromHex(edit.agentId),
-        fromHex(edit.owner),
-        ...parts.flatMap((field) => [u64be(field.length), field]),
-        u64be(edit.issuedAtMs),
-        u64be(edit.expiresAtMs),
-    ];
-    const out = new Uint8Array(chunks.reduce((total, chunk) => total + chunk.length, 0));
-    let offset = 0;
-    for (const chunk of chunks) {
-        out.set(chunk, offset);
-        offset += chunk.length;
-    }
-    return out;
+    return signedMessage(IDENTITY_DOMAIN, [
+        ["agent", fixedHex0x(edit.agentId, 32, "agent id")],
+        ["owner", fixedHex0x(edit.owner, 32, "owner")],
+        ["name", JSON.stringify(parsed.name ?? "")],
+        ["handle", JSON.stringify(parsed.handle ?? "")],
+        ["bio", JSON.stringify(parsed.bio ?? "")],
+        ["issued_at_ms", String(edit.issuedAtMs)],
+        ["expires_at_ms", String(edit.expiresAtMs)],
+    ]);
 }
 /** Name an agent, as the address that owns it. Answers what the arena stored. */
 export async function nameAgent(args) {
@@ -73,8 +53,8 @@ export async function nameAgent(args) {
         issuedAtMs,
         expiresAtMs,
     }));
-    const agentId = `0x${args.agentId.replace(/^0x/i, "")}`;
-    const response = await fetchImpl(`${args.productUrl.replace(/\/$/, "")}/open/v1/agents/${agentId}/identity`, {
+    const agentId = `0x${args.agentId.replace(/^0x/, "")}`;
+    const response = await fetchImpl(`${args.productUrl.replace(/\/$/, "")}/v1/agents/${agentId}/identity`, {
         method: "PUT",
         headers: { "content-type": "application/json" },
         body: JSON.stringify({