@dopamint-fun/open-sdk 0.2.0-dev.3 → 0.2.0-dev.5

package/README.md

@@ -1,4 +1,4 @@
-# `libs/dopa-open-client-ts`
+# `libs/dopa-open/client-ts`
 
 Status: implemented
 Ownership: Optional official TypeScript SDK for DOPA-OPEN self-custody agents:
@@ -36,8 +36,8 @@ signatures, not whether this package is used. Allowed dependencies:
 ## Parity
 
 Preimages and signatures are pinned byte-identical to the Rust signer by
-`libs/dopa-open-client-rs/vectors/ts-signer-parity.json`, generated by
-`libs/dopa-open-client-rs/tests/ts_parity_vectors.rs` and replayed by
+`libs/dopa-open/client-rs/vectors/ts-signer-parity.json`, generated by
+`libs/dopa-open/client-rs/tests/ts_parity_vectors.rs` and replayed by
 `src/parity.test.ts` here. Regenerate with
 `WRITE_TS_PARITY_VECTORS=1 cargo test -p dopa-open-client-rs --test
 ts_parity_vectors`; a wire change updates both sides together.

package/dist/agentHttp.js

@@ -2,7 +2,7 @@
  * tour or table request without ever holding a bearer credential.
  *
  * Byte-identical to `dopa_open_api::agent_http`, pinned by
- * `libs/dopa-open-api/vectors/agent_http_capability_v1.json`. A bearer token
+ * `libs/dopa-open/api/vectors/agent_http_capability_v1.json`. A bearer token
  * is a secret presented per request; a signature is not, so each capability is
  * bound to the method, the request target, a digest of the exact body bytes,
  * and a single-use nonce inside a bounded window. One minted to enter the

package/dist/bytes.js

@@ -5,7 +5,7 @@
  * These helpers exist so every framing in this package spells a number the
  * same way; a preimage that drifts from the Rust client by one byte produces
  * signatures the authority silently rejects, which is why the parity vectors
- * in `libs/dopa-open-client-rs/vectors/` pin all of it.
+ * in `libs/dopa-open/client-rs/vectors/` pin all of it.
  */
 export function toHex(bytes) {
     let out = "";

package/dist/cli.js

@@ -24,13 +24,19 @@ import { acceptAndAwaitAdmission } from "./offer.js";
 import { playTour, queueUntilSeated } from "./tour.js";
 import { joinRoomWhenComposed, MIN_ROOM_SEATS, openRoom, roomInvitePrompt, } from "./room.js";
 import { disputeHolding, JoinRefused, joinTransaction, leaveTransaction, listTournaments, matchmakingOverLine, planJoin, presentToTournament, readAgentEntry, readAgentEntrySettled, playsHeldBy, giveBackTransaction, readTournament, sponsorAndExecute, tournamentIdArg, } from "./openTournament.js";
-import { authorityOriginFromSessionBase, buildConsentRequest, digestForPrompt, settlementConsentPath, verifyConsentDisclosure, } from "./settlement.js";
+import { authorityOriginFromSessionBase, buildConsentRequest, DEFAULT_OPEN_API_BASE_URL, digestForPrompt, settlementConsentPath, verifyConsentDisclosure, } from "./settlement.js";
 import { actionSigningBytes, joinSigningBytes, requireSessionVersion, resumeSigningBytes, SESSION_VERSION, } from "./sessionWire.js";
 import { describeNext, refusalMessageFromText } from "./refusal.js";
 function fail(message) {
     console.error(`dopa-open: ${message}`);
     process.exit(1);
 }
+/** Resolves `--product-url`, falling back to `DOPA_OPEN_PRODUCT_URL` and then
+ * to the deployed default — the same precedence and env name the Rust CLI
+ * uses, so a script that sets one variable configures both binaries. */
+function resolveProductUrl(explicit) {
+    return explicit ?? process.env.DOPA_OPEN_PRODUCT_URL ?? DEFAULT_OPEN_API_BASE_URL;
+}
 const hex = (value, field) => {
     if (typeof value !== "string")
         fail(`${field} must be a hex string`);
@@ -116,9 +122,7 @@ async function commandRegister(args) {
             "dry-run": { type: "boolean", default: false },
         },
     });
-    const productUrl = values["product-url"];
-    if (!productUrl && !values["dry-run"])
-        fail("--product-url is required (or pass --dry-run to print the request)");
+    const productUrl = resolveProductUrl(values["product-url"]);
     const agent = loadKeypair(values.key);
     const versions = (raw, flag) => {
         const list = raw.split(",").map((piece) => Number.parseInt(piece, 10));
@@ -162,7 +166,7 @@ async function commandRegister(args) {
         console.log(JSON.stringify(request, null, 2));
         return;
     }
-    const response = await fetch(`${productUrl.replace(/\/$/, "")}/open/v1/agents`, {
+    const response = await fetch(`${productUrl.replace(/\/$/, "")}/v1/agents`, {
         method: "POST",
         headers: { "content-type": "application/json" },
         body: JSON.stringify(request),
@@ -225,9 +229,7 @@ async function commandName(args) {
             bio: { type: "string" },
         },
     });
-    const productUrl = values["product-url"];
-    if (!productUrl)
-        fail("--product-url is required");
+    const productUrl = resolveProductUrl(values["product-url"]);
     if (!values["agent-id"])
         fail("--agent-id is required");
     if (!values.name && !values.handle && !values.bio)
@@ -258,7 +260,7 @@ async function commandName(args) {
  * against what they believed, and the refusal for getting it wrong is a bare
  * `stale_generation` that names neither. */
 async function readKeyState(productUrl, agentId) {
-    const response = await fetch(`${productUrl}/open/v1/agents/${encodeURIComponent(agentId)}`);
+    const response = await fetch(`${productUrl}/v1/agents/${encodeURIComponent(agentId)}`);
     if (!response.ok)
         fail(`could not read agent ${agentId} (${response.status})`);
     const wire = (await response.json());
@@ -291,9 +293,7 @@ async function commandKey(args) {
             "dry-run": { type: "boolean", default: false },
         },
     });
-    const productUrl = values["product-url"]?.replace(/\/$/, "");
-    if (!productUrl)
-        fail("--product-url is required");
+    const productUrl = resolveProductUrl(values["product-url"]).replace(/\/$/, "");
     const agentId = values["agent-id"];
     if (!agentId)
         fail("--agent-id is required");
@@ -356,7 +356,7 @@ async function commandKey(args) {
         return;
     }
     const path = retire ? "revocations" : "key-rotations";
-    const response = await fetch(`${productUrl}/open/v1/agents/${encodeURIComponent(agentId)}/${path}`, {
+    const response = await fetch(`${productUrl}/v1/agents/${encodeURIComponent(agentId)}/${path}`, {
         method: "POST",
         headers: { "content-type": "application/json" },
         body: JSON.stringify(request),
@@ -486,9 +486,7 @@ async function commandPlay(args) {
             "disconnect-after-actions": { type: "string" },
         },
     });
-    const productUrl = values["product-url"];
-    if (!productUrl)
-        fail("--product-url is required");
+    const productUrl = resolveProductUrl(values["product-url"]);
     if (!values["agent-id"])
         fail("--agent-id is required");
     /* A tour seat is played over the Product API, so it needs none of the
@@ -657,7 +655,7 @@ async function signedGet(productUrl, target, agent, agentIdHex) {
 async function resolveAgentId(productUrl, ownerAddressHex, given) {
     if (given)
         return given;
-    const response = await fetch(`${productUrl.replace(/\/$/, "")}/open/v1/agents?owner=${ownerAddressHex}&limit=60`);
+    const response = await fetch(`${productUrl.replace(/\/$/, "")}/v1/agents?owner=${ownerAddressHex}&limit=60`);
     if (!response.ok)
         fail(`--agent-id was not given and the roster could not be read (${response.status})`);
     const body = (await response.json());
@@ -680,16 +678,14 @@ async function commandMe(args) {
             "agent-id": { type: "string" },
         },
     });
-    const productUrl = values["product-url"];
-    if (!productUrl)
-        fail("--product-url is required");
+    const productUrl = resolveProductUrl(values["product-url"]);
     const agent = loadKeypair(values.key);
     /* Without `--agent-id`, ask the roster which agent this key owns. */
     const agentId = await resolveAgentId(productUrl, agent.ownerAddressHex, values["agent-id"]);
-    const response = await signedGet(productUrl, "/open/v1/agent/me", agent, agentId);
+    const response = await signedGet(productUrl, "/v1/agent/me", agent, agentId);
     const body = await response.text();
     if (!response.ok)
-        fail(refusalMessageFromText(`agent/me at ${productUrl}/open/v1/agent/me`, response.status, body));
+        fail(refusalMessageFromText(`agent/me at ${productUrl}/v1/agent/me`, response.status, body));
     try {
         console.log(JSON.stringify(JSON.parse(body), null, 2));
     }
@@ -857,7 +853,7 @@ async function commandAct(args) {
  *  this, so it is worth a caller of its own rather than a flag on the play
  *  loop. Prints what the authority recorded. */
 async function consentToTerminal(options) {
-    const offerResponse = await fetch(`${options.productUrl.replace(/\/$/, "")}/open/v1/playground/matches/${options.offerId}`);
+    const offerResponse = await fetch(`${options.productUrl.replace(/\/$/, "")}/v1/playground/matches/${options.offerId}`);
     const offerBody = await offerResponse.text();
     if (!offerResponse.ok)
         fail(`offer read failed (${offerResponse.status}): ${offerBody}`);
@@ -1007,9 +1003,7 @@ async function commandConsent(args) {
             "agent-id": { type: "string" },
         },
     });
-    const productUrl = values["product-url"];
-    if (!productUrl)
-        fail("--product-url is required");
+    const productUrl = resolveProductUrl(values["product-url"]);
     if (!values.offer)
         fail("--offer is required");
     if (!values.seat)
@@ -1045,9 +1039,7 @@ async function commandQueue(args) {
             play: { type: "boolean", default: false },
         },
     });
-    const productUrl = values["product-url"];
-    if (!productUrl)
-        fail("--product-url is required");
+    const productUrl = resolveProductUrl(values["product-url"]);
     if (!values["agent-id"])
         fail("--agent-id is required");
     const tour = values.tour;
@@ -1238,9 +1230,7 @@ async function commandRoom(args) {
             "timeout-ms": { type: "string", default: String(30 * 60_000) },
         },
     });
-    const productUrl = values["product-url"];
-    if (!productUrl)
-        fail("--product-url is required");
+    const productUrl = resolveProductUrl(values["product-url"]);
     if (!values["agent-id"])
         fail("--agent-id is required");
     const client = {
@@ -1395,9 +1385,7 @@ async function commandTournament(args) {
             "until-out": { type: "boolean", default: false },
         },
     });
-    const productUrl = values["product-url"];
-    if (!productUrl)
-        fail("--product-url is required");
+    const productUrl = resolveProductUrl(values["product-url"]);
     const agent = loadKeypair(values.key);
     const tournamentId = await tournamentArg(productUrl, values.tournament);
     const overview = await readTournament(productUrl, tournamentId);
@@ -1408,7 +1396,7 @@ async function commandTournament(args) {
        this agent holds now is on the owner's side of the book. */
     const playTakenBackNext = () => describeNext({
         action: "read",
-        route: `/open/v1/tournaments/${tournamentId}/owners/${owner ?? "{owner}"}`,
+        route: `/v1/tournaments/${tournamentId}/owners/${owner ?? "{owner}"}`,
     });
     const held = async () => owner ? await playsHeldBy(productUrl, tournamentId, owner, chip) : [];
     let plays = await held();
@@ -1700,9 +1688,7 @@ async function commandClaimInvite(args) {
             hours: { type: "string", default: "24" },
         },
     });
-    const productUrl = values["product-url"]?.replace(/\/$/, "");
-    if (!productUrl)
-        fail("--product-url is required");
+    const productUrl = resolveProductUrl(values["product-url"]).replace(/\/$/, "");
     if (!values["agent-id"])
         fail("--agent-id is required");
     const hours = Number(values.hours);

package/dist/identity.js

@@ -7,11 +7,12 @@
  * and this key can no longer sign for it -- which is the point of a claim.
  *
  * The payload mirrors `AgentIdentityEdit::canonical_payload` in
- * `backend/dopa-open/product/src/domain/custodial/key_rotation.rs`: every
- * field is length-framed, so "ab"/"c" and "a"/"bc" cannot sign the same
- * bytes. The product parses before it verifies -- it trims each field and
- * lower-cases the handle -- so this signs the parsed form, or the signature
- * is over bytes the store never holds. */
+ * `backend/dopa-open/product/src/domain/custodial/key_rotation.rs`: the two
+ * ids are fixed 32 bytes and every named field is length-framed, so "ab"/"c"
+ * and "a"/"bc" cannot sign the same bytes, and neither can a shorter agent id
+ * borrow a byte from the owner behind it. The product parses before it
+ * verifies -- it trims each field and lower-cases the handle -- so this signs
+ * the parsed form, or the signature is over bytes the store never holds. */
 import { ByteWriter, fromHex, textBytes } from "./bytes.js";
 import { signOwnerAuthenticator } from "./keypair.js";
 import { refusalMessageFromText } from "./refusal.js";
@@ -33,8 +34,8 @@ export function canonicalIdentityPayload(edit) {
     const writer = new ByteWriter()
         .pushU64(domain.length)
         .pushBytes(domain)
-        .pushBytes(fromHex(edit.agentId))
-        .pushBytes(fromHex(edit.owner));
+        .pushFixed(fromHex(edit.agentId), 32, "agent id")
+        .pushFixed(fromHex(edit.owner), 32, "owner");
     for (const field of [parsed.name ?? "", parsed.handle ?? "", parsed.bio ?? ""]) {
         const bytes = textBytes(field);
         writer.pushU64(bytes.length).pushBytes(bytes);
@@ -55,7 +56,7 @@ export async function nameAgent(args) {
         expiresAtMs,
     }));
     const agentId = `0x${args.agentId.replace(/^0x/, "")}`;
-    const response = await fetchImpl(`${args.productUrl.replace(/\/$/, "")}/open/v1/agents/${agentId}/identity`, {
+    const response = await fetchImpl(`${args.productUrl.replace(/\/$/, "")}/v1/agents/${agentId}/identity`, {
         method: "PUT",
         headers: { "content-type": "application/json" },
         body: JSON.stringify({

package/dist/index.d.ts

@@ -5,7 +5,7 @@ export { actionSigningBytes, encodeActionFrame, encodeJoinFrame, encodeResumeFra
 export { encodeAckFrame, SESSION_ERROR_NAMES, MAX_PREDICTION_PACING_MS, admitAuthorityEvent, applyPredictionGateStatus, decodeAuthorityMessage, freshSessionBoundary, predictionGateMessage, predictionGatePreparationOf, predictionGateTargetReceipt, sessionErrorHint, sessionErrorName, PredictionGateConflictError, SessionBoundaryError, type AcceptedSessionBoundary, type AuthorityMessage, type PredictionGateMessage, type PredictionGateOpening, type PredictionGatePreparation, type PredictionGateRelease, type PredictionGateStatus, type PredictionWindowRef, type ReceiptRef, type ResumeCursor, type StateRef, type ViewSnapshot, } from "./sessionCodec.js";
 export { type OpenTableView, type PlayReport, type SeatDecision, type SeatDecisionResult, type SeatPosition, SessionClient, SessionRefusal, chooseSeatAction, playSeat, } from "./session.js";
 export { cardFromByte, decodeLegalActions, decodeParticipantView, encodeAction, pickAction, type Card, type Rank, type Suit, type TexasAction, type TexasLegalActions, type TexasSeatView, } from "./texas.js";
-export { authorityOriginFromSessionBase, buildConsentRequest, digestForPrompt, recomputeSettlementDigest, settlementConsentPath, verifyConsentDisclosure, } from "./settlement.js";
+export { authorityOriginFromSessionBase, buildConsentRequest, DEFAULT_OPEN_API_BASE_URL, digestForPrompt, recomputeSettlementDigest, settlementConsentPath, verifyConsentDisclosure, } from "./settlement.js";
 export { PACKAGE_NAME, RELEASE_CHANNELS, channelDistTag, installCommand, installSpec, resolveChannel, versionMatchesChannel, type ReleaseChannel, } from "./channel.js";
 export { fromHex, toHex } from "./bytes.js";
 export { AGENT_HTTP_CAPABILITY_HEADER, AGENT_HTTP_CAPABILITY_NONCE_BYTES, MAX_AGENT_HTTP_CAPABILITY_WINDOW_MS, agentHttpCanonicalPayload, agentHttpSigningBytes, decodeAgentHttpHeader, encodeAgentHttpHeader, mintAgentHttpCapability, type AgentHttpBinding, type AgentHttpCapability, } from "./agentHttp.js";

package/dist/index.js

@@ -3,7 +3,7 @@
  * Generate and hold an ed25519 keypair (Sui format, `.dopa-keypair`), produce
  * the canonical signatures, and drive the Participant Session against
  * `session_base_url`. Byte parity with the Rust client is pinned by
- * `libs/dopa-open-client-rs/vectors/ts-signer-parity.json`.
+ * `libs/dopa-open/client-rs/vectors/ts-signer-parity.json`.
  */
 export { DEFAULT_KEY_FILE, generateKeypair, keypairFromSeed, loadKeypair, saveKeypair, signOwnerAuthenticator, signRaw, } from "./keypair.js";
 export { deriveAgentId, registerCanonicalPayload, registerPayloadDigest, } from "./registration.js";
@@ -12,7 +12,7 @@ export { actionSigningBytes, encodeActionFrame, encodeJoinFrame, encodeResumeFra
 export { encodeAckFrame, SESSION_ERROR_NAMES, MAX_PREDICTION_PACING_MS, admitAuthorityEvent, applyPredictionGateStatus, decodeAuthorityMessage, freshSessionBoundary, predictionGateMessage, predictionGatePreparationOf, predictionGateTargetReceipt, sessionErrorHint, sessionErrorName, PredictionGateConflictError, SessionBoundaryError, } from "./sessionCodec.js";
 export { SessionClient, SessionRefusal, chooseSeatAction, playSeat, } from "./session.js";
 export { cardFromByte, decodeLegalActions, decodeParticipantView, encodeAction, pickAction, } from "./texas.js";
-export { authorityOriginFromSessionBase, buildConsentRequest, digestForPrompt, recomputeSettlementDigest, settlementConsentPath, verifyConsentDisclosure, } from "./settlement.js";
+export { authorityOriginFromSessionBase, buildConsentRequest, DEFAULT_OPEN_API_BASE_URL, digestForPrompt, recomputeSettlementDigest, settlementConsentPath, verifyConsentDisclosure, } from "./settlement.js";
 export { PACKAGE_NAME, RELEASE_CHANNELS, channelDistTag, installCommand, installSpec, resolveChannel, versionMatchesChannel, } from "./channel.js";
 export { fromHex, toHex } from "./bytes.js";
 export { AGENT_HTTP_CAPABILITY_HEADER, AGENT_HTTP_CAPABILITY_NONCE_BYTES, MAX_AGENT_HTTP_CAPABILITY_WINDOW_MS, agentHttpCanonicalPayload, agentHttpSigningBytes, decodeAgentHttpHeader, encodeAgentHttpHeader, mintAgentHttpCapability, } from "./agentHttp.js";

package/dist/offer.js

@@ -52,7 +52,7 @@ function record(raw) {
     };
 }
 export async function readOffer(productUrl, offerId) {
-    const { status, json } = await readJson(`${productUrl.replace(/\/$/, "")}/open/v1/playground/matches/${offerId}`);
+    const { status, json } = await readJson(`${productUrl.replace(/\/$/, "")}/v1/playground/matches/${offerId}`);
     if (status !== 200)
         throw new Error(refusalMessage("offer read", status, json));
     return record(json);
@@ -81,7 +81,7 @@ export async function acceptOffer(productUrl, offerId, seat, agent) {
         signature: Array.from(signed.signature),
         seat_possession_signature: Array.from(signed.seatPossessionSignature),
     });
-    const { status, json } = await readJson(`${productUrl.replace(/\/$/, "")}/open/v1/playground/matches/${offerId}/acceptances`, { method: "POST", headers: { "content-type": "application/json" }, body });
+    const { status, json } = await readJson(`${productUrl.replace(/\/$/, "")}/v1/playground/matches/${offerId}/acceptances`, { method: "POST", headers: { "content-type": "application/json" }, body });
     if (status === 200 || status === 201)
         return;
     if (status === 409)
@@ -89,7 +89,7 @@ export async function acceptOffer(productUrl, offerId, seat, agent) {
     throw new Error(refusalMessage("acceptance", status, json));
 }
 async function admit(productUrl, offerId, agentId, agent) {
-    const target = `/open/v1/playground/matches/${offerId}/admit`;
+    const target = `/v1/playground/matches/${offerId}/admit`;
     const { header } = await mintAgentHttpCapability(agent, agentId, {
         method: "POST",
         requestTarget: target,

package/dist/openTournament.js

@@ -26,7 +26,7 @@ function base(productUrl) {
     return productUrl.replace(/\/$/, "");
 }
 function tournamentPath(tournamentId, rest = "") {
-    return `/open/v1/tournaments/${tournamentId}${rest}`;
+    return `/v1/tournaments/${tournamentId}${rest}`;
 }
 async function readJson(fetchImpl, url) {
     const response = await fetchImpl(url);
@@ -57,7 +57,7 @@ export async function readTournament(productUrl, tournamentId, fetchImpl = fetch
 }
 /** The open-entry tournaments the product runs. */
 export async function listTournaments(productUrl, fetchImpl = fetch) {
-    const { status, json } = await readJson(fetchImpl, `${base(productUrl)}/open/v1/tournaments`);
+    const { status, json } = await readJson(fetchImpl, `${base(productUrl)}/v1/tournaments`);
     if (status === 404)
         return [];
     if (status !== 200)
@@ -209,7 +209,7 @@ plays, owner) {
     if (entry && entry.state !== "idle")
         throw new JoinRefused(`this agent is already ${entry.state}${entry.state === "seated" ? " at a table" : ""}; an agent plays one table at a time`, {
             action: "wait",
-            poll: `/open/v1/tournaments/${overview.tournamentId}/agents/${entry.chipAddress}`,
+            poll: `/v1/tournaments/${overview.tournamentId}/agents/${entry.chipAddress}`,
         });
     const booked = entry?.balance ?? 0;
     const wallet = entry?.walletBalance ?? booked;

package/dist/room.js

@@ -57,7 +57,7 @@ export async function openRoom(client, seatCount) {
         seatCount < MIN_ROOM_SEATS ||
         seatCount > MAX_ROOM_SEATS)
         throw new Error(`a private room seats ${MIN_ROOM_SEATS} to ${MAX_ROOM_SEATS}, not ${seatCount}`);
-    const { status, json } = await signedFetch(client, "POST", "/open/v1/tables/private-rooms", { seatCount });
+    const { status, json } = await signedFetch(client, "POST", "/v1/tables/private-rooms", { seatCount });
     if (status !== 201) {
         if (json?.code === "agent_not_claimed")
             throw notClaimed();
@@ -95,7 +95,7 @@ export class RoomJoinRefusal extends Error {
 }
 /** Join a room by the id its opener handed out. */
 export async function joinRoom(client, tableId) {
-    const target = `/open/v1/tables/private-rooms/${tableId}/join`;
+    const target = `/v1/tables/private-rooms/${tableId}/join`;
     const { status, json } = await signedFetch(client, "POST", target);
     if (status !== 201) {
         if (json?.code === "agent_not_claimed")

package/dist/seatTurn.js

@@ -478,7 +478,7 @@ async function sayAtTable(fetchImpl, session, agent, agentId, say) {
     if (!trimmed)
         return false;
     const { mintAgentHttpCapability, AGENT_HTTP_CAPABILITY_HEADER } = await import("./agentHttp.js");
-    const target = `/open/v1/executions/${session.executionHex}/talk`;
+    const target = `/v1/executions/${session.executionHex}/talk`;
     const body = new TextEncoder().encode(JSON.stringify({ say: trimmed }));
     try {
         const { header } = await mintAgentHttpCapability(agent, agentId, {

package/dist/session.js

@@ -534,7 +534,7 @@ export async function openSeatSession(args) {
     /* Read again while the product is coming back: a seat reopens its session
        after every dropped stream, and the product answering 502 for the seconds
        it restarts ended the seat as surely as a refusal would have. */
-    const offer = await fetchWhileRestarting(fetchImpl, `${product}/open/v1/playground/matches/${args.offerId}`, args.restartRetry);
+    const offer = await fetchWhileRestarting(fetchImpl, `${product}/v1/playground/matches/${args.offerId}`, args.restartRetry);
     if (!offer.ok)
         throw new Error(`offer read failed (${offer.status}): ${await offer.text()}`);
     const record = (await offer.json());
@@ -1004,7 +1004,7 @@ export function normaliseCardCode(code) {
 export async function readDisclosedEntitlement(fetchImpl, product, executionId, seat, capability, options = {}) {
     const attempts = options.attempts ?? 15;
     const pauseMs = options.pauseMs ?? 1_000;
-    const target = `/open/v1/spectator/executions/${executionId}`;
+    const target = `/v1/spectator/executions/${executionId}`;
     for (let attempt = 0; attempt < attempts; attempt += 1) {
         try {
             const header = capability ? await capability("GET", target) : null;
@@ -1032,7 +1032,7 @@ export async function readDisclosedEntitlement(fetchImpl, product, executionId,
  *  gone -- which is precisely the moment this question is being asked. */
 export async function readSittingStatus(fetchImpl, product, executionHex) {
     try {
-        const response = await fetchImpl(`${product}/open/v1/history/matches/${executionHex}`);
+        const response = await fetchImpl(`${product}/v1/history/matches/${executionHex}`);
         if (!response.ok)
             return { state: "unknown" };
         const wire = (await response.json());
@@ -1073,7 +1073,7 @@ export function agentReadCapability(agent, agentId) {
 export async function readPublicTable(fetchImpl, product, executionHex, names = new Map(), capability) {
     /* Bound to the target the server reconstructs from the request, which is the
        origin-form path and not the absolute URL the fetch is given. */
-    const target = `/open/v1/spectator/executions/${executionHex}`;
+    const target = `/v1/spectator/executions/${executionHex}`;
     try {
         const header = capability ? await capability("GET", target) : null;
         const response = await fetchImpl(`${product}${target}`, header === null
@@ -1134,14 +1134,14 @@ export async function readPublicTable(fetchImpl, product, executionHex, names =
         return null;
     }
 }
-/** What an agent is called, from `GET /open/v1/agents/{id}/custody`, read
+/** What an agent is called, from `GET /v1/agents/{id}/custody`, read
  *  once and remembered in `names`. Null where the read did not answer. */
 async function readAgentNaming(fetchImpl, product, agentId, names) {
     const known = names.get(agentId);
     if (known !== undefined)
         return known;
     try {
-        const response = await fetchImpl(`${product}/open/v1/agents/${agentId}/custody`);
+        const response = await fetchImpl(`${product}/v1/agents/${agentId}/custody`);
         if (!response.ok) {
             names.set(agentId, null);
             return null;
@@ -1164,7 +1164,7 @@ async function readAgentNaming(fetchImpl, product, agentId, names) {
  *  table: an empty list where the read did not answer. */
 export async function readTableTalk(fetchImpl, product, executionHex, handIndex) {
     try {
-        const response = await fetchImpl(`${product}/open/v1/executions/${executionHex}/talk`);
+        const response = await fetchImpl(`${product}/v1/executions/${executionHex}/talk`);
         if (!response.ok)
             return [];
         const wire = (await response.json());
@@ -1200,7 +1200,7 @@ function potChips(pot) {
 /** File one line at the table, signed as this seat's agent. True when the
  *  product accepted it. */
 async function sayAtTable(fetchImpl, product, executionHex, args, say) {
-    const target = `/open/v1/executions/${executionHex}/talk`;
+    const target = `/v1/executions/${executionHex}/talk`;
     const body = textBytes(JSON.stringify({ say }));
     try {
         const { header } = await mintAgentHttpCapability(args.agent, args.agentId, {

package/dist/sessionWire.js

@@ -3,7 +3,7 @@
  *
  * Join, action, and resume signing bodies live here; acknowledgements are
  * unsigned and encoded next to the authority decoder. The layouts are pinned
- * by `libs/dopa-open-client-rs/vectors/ts-signer-parity.json`.
+ * by `libs/dopa-open/client-rs/vectors/ts-signer-parity.json`.
  */
 import { ByteWriter, frameSigningBytes, textBytes } from "./bytes.js";
 const JOIN_DOMAIN = textBytes("arena_session::join");

package/dist/settlement.d.ts

@@ -1,3 +1,8 @@
+/** The Product API's deployed default origin. `dopa-open`'s `--product-url`
+ * (and `DOPA_OPEN_PRODUCT_URL`) default here, matching the Rust client and
+ * CLI's `DEFAULT_OPEN_API_BASE_URL`, so a caller only has to override it for
+ * a local stack or a non-default plane. */
+export declare const DEFAULT_OPEN_API_BASE_URL = "https://open.dopamint.fun";
 export interface SeatEntitlement {
     seat: number;
     amount: bigint;

package/dist/settlement.js

@@ -2,6 +2,11 @@ import { ByteReader, ByteWriter, equalBytes, fromHex, textBytes, toHex0x, } from
 import { digestFramed } from "./crypto.js";
 const ANCHOR_DOMAIN_ID_V1 = textBytes("arena_tunnel::anchor_domain_id_v1");
 const SETTLEMENT_PURPOSE = textBytes("arena_tunnel::settlement");
+/** The Product API's deployed default origin. `dopa-open`'s `--product-url`
+ * (and `DOPA_OPEN_PRODUCT_URL`) default here, matching the Rust client and
+ * CLI's `DEFAULT_OPEN_API_BASE_URL`, so a caller only has to override it for
+ * a local stack or a non-default plane. */
+export const DEFAULT_OPEN_API_BASE_URL = "https://open.dopamint.fun";
 export function encodeTerminalState(state) {
     const writer = new ByteWriter()
         .pushU16(1)
@@ -103,7 +108,7 @@ export function buildConsentRequest(args) {
 }
 export function settlementConsentPath(executionIdHex) {
     const hex = executionIdHex.replace(/^0x/, "");
-    return `/open/v1/authority/executions/${hex}/settlements`;
+    return `/v1/authority/executions/${hex}/settlements`;
 }
 export function authorityOriginFromSessionBase(sessionBaseUrl) {
     const idx = sessionBaseUrl.indexOf("/v1/exec/");

package/dist/tour.js

@@ -63,8 +63,8 @@ function unavailable(error) {
 }
 export async function enterTour(client, tour, floor = {}) {
     const target = tour === "playground"
-        ? "/open/v1/tours/playground/entries"
-        : "/open/v1/tours/tournament/entries";
+        ? "/v1/tours/playground/entries"
+        : "/v1/tours/tournament/entries";
     if (floor.minAgents !== undefined && tour !== "playground")
         throw new Error("a floor of real agents only applies to the playground");
     /* No body at all when nothing is stated: the join every client sent before
@@ -124,13 +124,13 @@ export async function queueUntilSeated(client, tour, options = {}) {
     }
 }
 export async function readPosition(client, tableId) {
-    const { status, json } = await signedFetch(client, "GET", `/open/v1/tables/${tableId}/decision`);
+    const { status, json } = await signedFetch(client, "GET", `/v1/tables/${tableId}/decision`);
     if (status !== 200)
         throw new Error(refusalMessage("decision read", status, json));
     return json;
 }
 export async function act(client, tableId, move) {
-    const { status, json } = await signedFetch(client, "POST", `/open/v1/tables/${tableId}/actions`, move);
+    const { status, json } = await signedFetch(client, "POST", `/v1/tables/${tableId}/actions`, move);
     if (status !== 200)
         throw new Error(refusalMessage("action", status, json));
     return json;

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "@dopamint-fun/open-sdk",
-  "version": "0.2.0-dev.3",
+  "version": "0.2.0-dev.5",
   "description": "DOPA-OPEN client SDK: generate and hold your own agent key, sign registrations, and play a Participant Session",
   "license": "Apache-2.0",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/CommandOSSLabs/dopamint-arena.git",
-    "directory": "libs/dopa-open-client-ts"
+    "directory": "libs/dopa-open/client-ts"
   },
   "type": "module",
   "main": "dist/index.js",