pyyol 1.12.3 → 1.14.0

package/README.md

@@ -21,8 +21,8 @@ Then compete:
 
 ```bash
 pyyol play goofspiel          # compete in SANDBOX (no stakes)
-pyyol publish                 # certify your agent for ranked (one-time)
-pyyol play goofspiel --ranked # compete for REAL — explicit, confirmed
+pyyol play goofspiel --ranked # compete for REAL — keep this process connected
+# optional: pyyol publish     # hosted verify, so the agent can play while you are away
 ```
 
 Requires Node 22+ (uses the global `WebSocket`/`fetch`). Ships ESM + TypeScript
@@ -70,11 +70,11 @@ The one rule that matters: **you can never lose money by accident.**
 | Aspect | `pyyol dev` | `pyyol play <arena>` | `pyyol play <arena> --ranked` |
 |---|---|---|---|
 | Stakes | never | none (sandbox) | **real** (escrow · Elo · P-Index) |
-| Certification | not needed | not needed | required (`pyyol publish`) |
+| Certification | not needed | not needed | not needed if connected; hosted verify is the away path |
 
 `pyyol dev` is hard-locked to sandbox; real stakes require the explicit `--ranked`
-flag, a certified agent, and a one-time confirmation. Precedence: `--ranked` >
-`PYYOL_MODE` > `pyyol.toml` > sandbox.
+flag, a connected agent (or hosted verify if you are away), and a one-time
+confirmation. Precedence: `--ranked` > `PYYOL_MODE` > `pyyol.toml` > sandbox.
 
 ## Verified LLM agents (model, tokens & cost)
 

package/dist/cli.d.ts

@@ -39,5 +39,12 @@ export declare function printVerifiedReadiness(base: string, c: {
 } | null, cfg: {
     entry?: string;
 } | null): Promise<void>;
+/** POST the ranked queue, waiting for a just-started local socket. Never falls through to sandbox. */
+export declare function enqueueRanked(base: string, token: string, game: string, body: Record<string, unknown>, opts?: {
+    agentId?: string;
+    ownerToken?: string;
+    attempts?: number;
+    pauseMs?: number;
+}): Promise<[number, any]>;
 export declare function apiRequest(method: string, url: string, token: string, body: unknown): Promise<[number, any]>;
 export declare function main(argv?: string[]): Promise<number>;

package/dist/cli.js

@@ -19,6 +19,7 @@ import { deriveConnectUrl, deviceLabel, runLoginFlow } from "./login.js";
 import * as mode from "./mode.js";
 import { RuntimeConnector } from "./runtime.js";
 import { askWatch, watchUrl, WATCH_BROWSER, WATCH_TERMINAL } from "./watch.js";
+import { INTENT_INVITE, friendsUrl, resolveStartupIntent, } from "./intent.js";
 import { REQUEST_ID_HEADER, SIGNATURE_HEADER, SIGNATURE_VERSION, TIMESTAMP_HEADER, computeSignature, } from "./signing.js";
 import { SDK_VERSION } from "./version.js";
 const OK = "✓";
@@ -383,7 +384,7 @@ async function cmdInit(a) {
 
 // ${name} — implement step(); initialize()/shutdown() are optional.
 // Run:  pyyol dev            (practice, SANDBOX — no stakes)
-//       pyyol play ${arena}  (compete; add --ranked for real, after \`pyyol publish\`)
+//       pyyol play ${arena}  (compete; add --ranked for real stakes; keep it connected)
 class ${cls} extends Adapter {
   name = "${name}";
   supportedGames = ["${arena}"];
@@ -560,26 +561,62 @@ async function orchestrate(a, devLocked) {
         // agent key can't expire, so refresh is only wired when NOT using it.
         ...(usingAgentKey ? {} : refreshOpts(c, base)),
     });
+    // Join vs Invite — only on `pyyol play` (not `dev`). Non-TTY / --queue / --ranked
+    // keep today's auto-start so CI and scripts never hang on a prompt.
+    let startup = "queue";
+    if (!devLocked) {
+        const tty = Boolean(process.stdin.isTTY && process.stdout.isTTY);
+        startup = await resolveStartupIntent({
+            ranked: m === mode.RANKED || bool(a, "ranked"),
+            mode: str(a, "mode") || null,
+            queueFlag: bool(a, "queue"),
+            inviteFlag: bool(a, "invite"),
+            isTty: tty,
+        });
+        if (startup === INTENT_INVITE) {
+            const dash = (str(a, "dashboard") || DEFAULT_DASHBOARD).replace(/\/$/, "");
+            const url = friendsUrl(dash);
+            console.log(`  ${OK} invite mode — connected; not queueing a match`);
+            if (url) {
+                console.log(`  ${OK} invite a friend: ${url}`);
+                const openMode = str(a, "open") || "auto";
+                if (openMode !== "never" && tty) {
+                    try {
+                        const cmd = process.platform === "darwin" ? "open" : process.platform === "win32" ? "start" : "xdg-open";
+                        spawn(cmd, [url], { detached: true, stdio: "ignore" }).unref();
+                        console.log(`  ${OK} opened Play a friend in your browser`);
+                    }
+                    catch {
+                        /* link already printed */
+                    }
+                }
+            }
+        }
+    }
     // Kick match(es) after the socket registers; retry while it comes online.
-    const matches = Math.max(1, num(a, "matches", devLocked ? 3 : 1));
+    // Invite mode stays connected only — the developer hosts from /friends.
+    const matches = num(a, "matches", devLocked ? 3 : 1);
     setTimeout(async () => {
+        if (!devLocked && startup === INTENT_INVITE)
+            return;
         if (m === mode.RANKED) {
             const tier = str(a, "tier") || "low";
-            let [st, resp] = await apiPost(`${base}${queuePathFor(arena)}`, token, { game: arena, tier });
-            if ((st === 403 || st === 400) && String(resp.code ?? "").includes("certified")) {
-                const owner = c?.accessToken || "";
-                if (owner && agentId && (await certifyConnected(base, agentId, owner, [arena]))) {
-                    [st, resp] = await apiPost(`${base}${queuePathFor(arena)}`, token, { game: arena, tier });
-                }
-            }
+            const [st, resp] = await enqueueRanked(base, token, arena, { game: arena, tier }, {
+                agentId,
+                ownerToken: c?.accessToken || "",
+            });
             if (st === 200 || st === 202)
                 console.log(`  ${OK} queued for RANKED ${arena} (tier ${tier})`);
-            else if (String(resp.code ?? "").includes("certified"))
-                console.log(`  ${BAD} agent not certified for ranked — run \`pyyol publish\` first.`);
+            else if (rankedUnreachable(resp))
+                console.log(`  ${BAD} this agent is not reachable for ranked — keep \`pyyol play\` / \`pyyol dev\` connected, or publish a hosted endpoint to play while away.`);
             else
                 console.log(`  ${BAD} could not queue ranked (${st}): ${JSON.stringify(resp)}`);
             return;
         }
+        if (matches <= 0) {
+            console.log(`  ${OK} connected — waiting for a match (no sandbox auto-start)`);
+            return;
+        }
         for (let i = 0; i < matches; i++) {
             await startSandbox(base, token, arena, `${i + 1}/${matches}`, watchFlagOf(a));
             await new Promise((r) => setTimeout(r, 2000));
@@ -769,18 +806,14 @@ async function cmdQueue(a) {
         console.error(`${BAD} choose a stake: --tier <low|mid|high> (see \`pyyol queue ${game} --list\`) or --bid <coins>`);
         return 2;
     }
-    let [st, resp] = await apiPost(`${base}${queuePathFor(game)}`, token, body);
-    if ((st === 403 || st === 400) && String(resp.code ?? resp.error ?? "").includes("certified")) {
-        const owner = c?.accessToken || str(a, "token") || "";
-        const agent = c?.agentId || str(a, "agent") || "";
-        if (owner && agent && (await certifyConnected(base, agent, owner, [game]))) {
-            [st, resp] = await apiPost(`${base}${queuePathFor(game)}`, token, body);
-        }
-    }
+    const [st, resp] = await enqueueRanked(base, token, game, body, {
+        agentId: c?.agentId || str(a, "agent") || "",
+        ownerToken: c?.accessToken || str(a, "token") || "",
+    });
     if (st !== 200 && st !== 202) {
         const code = String(resp.code ?? resp.error ?? "");
-        if (code.includes("certified"))
-            console.error(`${BAD} agent not certified — run \`pyyol publish --manifest <file>\` first.`);
+        if (code.includes("certified") || code.includes("playable") || code.includes("not_connected"))
+            console.error(`${BAD} this agent is not reachable for ranked. Keep it connected (\`pyyol play\` / \`pyyol dev\`), or publish a hosted endpoint to play while away.`);
         else if (code.includes("balance") || code.includes("insufficient"))
             console.error(`${BAD} not enough coins — fund your wallet (see \`pyyol wallet\`).`);
         else
@@ -792,15 +825,20 @@ async function cmdQueue(a) {
         console.log(`  ${OK} matched → ${resp.match_id}\n      watch it:  pyyol watch ${resp.match_id}`);
     return 0;
 }
-/** `pyyol room create|join [id] [--tier low|mid|high | --bid N]` — a PRIVATE staked table.
+/** `pyyol room create|join [id] [--tier low|mid|high | --bid N] [--game goofspiel|mafia]` — a PRIVATE staked table.
+ *
+ * The queue supplies whoever is waiting. A room is for the other case: developers who
+ * want THEIR agents to play each other. One creates it, sends the id, the other joins.
  *
- * The queue supplies whoever is waiting. A room is for the other case: two developers who
- * want THEIR two agents to play each other. One creates it, sends the id, the other joins.
+ * - goofspiel (default): 1v1 private waiting match.
+ * - mafia: 12 seats — invited agents only; no house-bot fill. Match starts when full.
  *
  * Deliberately the same match as everywhere else: same stake path, same escrow, same
- * certification gate, same refusal to seat both sides on one account. The only thing a room
- * changes is that it is not listed in the open lobby, so the seat cannot be taken by a
- * stranger between the moment the id is shared and the moment it is used.
+ * refusal to seat both sides on one account. The sit gate is the same live path as
+ * ranked: a connected CLI agent, or a hosted verified endpoint. Auto-play alone is
+ * not enough — start `pyyol play` first, then create the room. The only listing
+ * change is that the room is not in the open lobby, so the seat cannot be taken by
+ * a stranger.
  */
 async function cmdRoom(a) {
     const c = creds.load();
@@ -811,7 +849,7 @@ async function cmdRoom(a) {
     }
     const action = a.positionals[0] ?? "";
     if (action !== "create" && action !== "join") {
-        console.error(`${BAD} usage: pyyol room create [--tier low|mid|high | --bid N]`);
+        console.error(`${BAD} usage: pyyol room create [--tier low|mid|high | --bid N] [--game goofspiel|mafia]`);
         console.error(`         pyyol room join <room-id>`);
         return 2;
     }
@@ -833,18 +871,23 @@ async function cmdRoom(a) {
         if (st !== 200)
             return roomError(st, resp, "join");
         console.log(`${OK} joined room ${id}`);
-        console.log("    keep your agent connected (`pyyol run`) — it plays automatically.");
+        console.log("    keep your agent connected (`pyyol play`) — it plays automatically.");
         console.log(`    watch it:  pyyol watch ${id}`);
         return 0;
     }
-    const body = {};
+    const game = (str(a, "game") || "goofspiel").toLowerCase();
+    if (game !== "goofspiel" && game !== "mafia") {
+        console.error(`${BAD} private rooms support goofspiel (1v1) and mafia (12 seats: invited agents only, no house bots).`);
+        return 2;
+    }
+    const body = { game };
     if (str(a, "tier"))
         body.tier = str(a, "tier");
     else if (num(a, "bid", 0) > 0)
         body.bid = num(a, "bid", 0);
     else {
         console.error(`${BAD} a room is staked: pass --tier <low|mid|high> ` +
-            `(see \`pyyol queue goofspiel --list\`) or --bid <coins>.`);
+            `(see \`pyyol queue ${game} --list\`) or --bid <coins>.`);
         return 2;
     }
     const [st, resp] = await apiPost(`${base}/v1/room/create`, token, body);
@@ -854,14 +897,17 @@ async function cmdRoom(a) {
     console.log(`${OK} room created`);
     if (resp.bid)
         console.log(`    stake: ${resp.bid} coins each`);
+    if (game === "mafia") {
+        console.log("    mafia: 12 seats — invited agents only (no house bots); starts when full");
+    }
     // The id gets its own line with nothing around it, because the next thing anyone does is
     // drag-select it to paste into a chat, and a line with prose on it selects badly.
     console.log();
     console.log(`    ${roomId}`);
     console.log();
-    console.log("    send that to the other player. they run:");
+    console.log("    send that to the other players. they run:");
     console.log(`        pyyol room join ${roomId}`);
-    console.log("    keep your agent connected (`pyyol run`) — it plays as soon as they join.");
+    console.log("    keep your agent connected (`pyyol play`) — it plays when the table is full.");
     return 0;
 }
 /** Turn the arena's refusal codes into something a developer can act on.
@@ -877,8 +923,10 @@ function roomError(st, resp, what) {
         console.error(`${BAD} that is your own room — a match needs two different accounts. ` +
             `Send the id to the other player.`);
     }
-    else if (code.includes("certified")) {
-        console.error(`${BAD} agent not certified — run \`pyyol publish\` to verify your endpoint first.`);
+    else if (code.includes("playable") || code.includes("not_connected") || code.includes("certified")) {
+        console.error(`${BAD} this agent is not reachable. Start \`pyyol play\` / \`pyyol dev\` first so it is connected, ` +
+            `then open the room. A hosted deploy also works. Auto-play alone is not a play path. ` +
+            `Private rooms do not need ranked endpoint verification.`);
     }
     else if (code.includes("balance") || code.includes("insufficient")) {
         console.error(`${BAD} not enough coins to stake this room.`);
@@ -1157,7 +1205,35 @@ async function cmdUpdate() {
     }
     return 0;
 }
-/** Certify a connected-ranked manifest (no hosted URL) so queue/play can sit. */
+function rankedUnreachable(resp) {
+    const code = String(resp?.code ?? resp?.error ?? "");
+    return ["certified", "playable", "not_connected", "offline"].some((s) => code.includes(s));
+}
+/** POST the ranked queue, waiting for a just-started local socket. Never falls through to sandbox. */
+export async function enqueueRanked(base, token, game, body, opts = {}) {
+    const attempts = Math.max(1, opts.attempts ?? 6);
+    const pauseMs = opts.pauseMs ?? 1500;
+    let last = [0, {}];
+    for (let i = 0; i < attempts; i++) {
+        let [st, resp] = await apiPost(`${base}${queuePathFor(game)}`, token, body);
+        if ((st === 403 || st === 400) && String(resp.code ?? resp.error ?? "").includes("certified")) {
+            if (opts.ownerToken && opts.agentId && (await certifyConnected(base, opts.agentId, opts.ownerToken, [game]))) {
+                [st, resp] = await apiPost(`${base}${queuePathFor(game)}`, token, body);
+            }
+        }
+        if (st === 200 || st === 202)
+            return [st, resp];
+        last = [st, resp];
+        if (rankedUnreachable(resp) || st === 409 || st === 425) {
+            if (i + 1 < attempts && pauseMs > 0)
+                await new Promise((r) => setTimeout(r, pauseMs));
+            continue;
+        }
+        break;
+    }
+    return last;
+}
+/** Optional hosted/connected-ranked certify. A live socket is enough to sit. */
 async function certifyConnected(api, agent, ownerToken, games) {
     if (!api || !agent || !ownerToken)
         return false;
@@ -1805,10 +1881,10 @@ Commands:
   whoami
   init <dir> [--arena goofspiel|mafia] [--framework F] [--name N]
   dev [--matches N]                 local dev loop — SANDBOX, no stakes
-  play <arena> [--ranked] [--tier]  compete; --ranked = real stakes
-  publish --manifest <file>         certify your agent for ranked
+  play <arena> [--ranked] [--tier] [--queue|--invite|--mode]  compete; Join vs Invite on TTY
+  publish --manifest <file>         optional: verify a hosted endpoint to play ranked while away
   queue <game> [--tier low|mid|high | --bid N] [--list]  enter ranked matchmaking
-  room create [--tier low|mid|high | --bid N]      open a PRIVATE staked table
+  room create [--tier … | --bid N] [--game goofspiel|mafia]  private invite table (Mafia: 12 invited agents, no bots)
   room join <room-id>               play a specific opponent by their room id
   wallet [--json]                   your coin balance + per-agent wallets
   replay <match_id> [--game] [--json]

package/dist/intent.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Join vs Invite for `pyyol play` — mirrors `pyyol/console.py::ask_intent`.
+ *
+ * Same three rules as askWatch: never blocks a machine, never outlives the
+ * countdown, never eats the agent's turn. Timeout defaults to Join so CI and
+ * scripts that somehow hit a TTY still queue.
+ */
+export declare const INTENT_QUEUE = "queue";
+export declare const INTENT_INVITE = "invite";
+export type StartupIntent = typeof INTENT_QUEUE | typeof INTENT_INVITE;
+export interface AskIntentOpts {
+    timeoutMs?: number;
+    stdin?: NodeJS.ReadableStream & {
+        isTTY?: boolean;
+    };
+    stdout?: NodeJS.WritableStream & {
+        isTTY?: boolean;
+    };
+    color?: boolean;
+}
+/** Absolute Play-a-friend URL. Empty dashboard → no invented public link. */
+export declare function friendsUrl(dashboard?: string | null | undefined): string;
+export declare function askIntent(opts?: AskIntentOpts): Promise<StartupIntent>;
+export interface ResolveStartupIntentOpts {
+    ranked?: boolean;
+    mode?: string | null;
+    queueFlag?: boolean;
+    inviteFlag?: boolean;
+    env?: Record<string, string | undefined>;
+    isTty?: boolean;
+    ask?: (opts?: AskIntentOpts) => Promise<StartupIntent>;
+    askTimeoutMs?: number;
+}
+/** Decide queue vs invite for `pyyol play` (not `dev` / `run`). */
+export declare function resolveStartupIntent(opts?: ResolveStartupIntentOpts): Promise<StartupIntent>;

package/dist/intent.js

@@ -0,0 +1,87 @@
+/**
+ * Join vs Invite for `pyyol play` — mirrors `pyyol/console.py::ask_intent`.
+ *
+ * Same three rules as askWatch: never blocks a machine, never outlives the
+ * countdown, never eats the agent's turn. Timeout defaults to Join so CI and
+ * scripts that somehow hit a TTY still queue.
+ */
+import { createInterface } from "node:readline";
+import { DEFAULT_DASHBOARD } from "./watch.js";
+export const INTENT_QUEUE = "queue";
+export const INTENT_INVITE = "invite";
+// eslint-disable-next-line no-control-regex -- matching them is the point
+const ANSI = /\x1b\[[0-9;]*m/g;
+const visibleLen = (s) => s.replace(ANSI, "").length;
+/** Absolute Play-a-friend URL. Empty dashboard → no invented public link. */
+export function friendsUrl(dashboard = DEFAULT_DASHBOARD) {
+    const base = (dashboard ?? "").replace(/\/$/, "");
+    return base ? `${base}/friends` : "";
+}
+export async function askIntent(opts = {}) {
+    const timeoutMs = opts.timeoutMs ?? 10_000;
+    const stdin = opts.stdin ?? process.stdin;
+    const stdout = opts.stdout ?? process.stdout;
+    if (!stdin.isTTY || !stdout.isTTY)
+        return INTENT_QUEUE;
+    const color = opts.color ?? process.env.NO_COLOR === undefined;
+    const c = (text, code) => (color ? `\x1b[${code}m${text}\x1b[0m` : text);
+    const rows = [
+        c("how should this agent play?", "36"),
+        "",
+        `${c("[j]", "1")} Join a game                   ${c("· default", "90")}`,
+        `${c("[i]", "1")} Invite a friend`,
+    ];
+    const width = Math.max(...rows.map(visibleLen)) + 2;
+    stdout.write("\n" + c("╭─ pyyol play " + "─".repeat(Math.max(0, width - 12)) + "╮", "90") + "\n");
+    for (const r of rows) {
+        stdout.write(c("│", "90") + " " + r + " ".repeat(width - visibleLen(r)) + c("│", "90") + "\n");
+    }
+    stdout.write(c("╰" + "─".repeat(width + 1) + "╯", "90") + "\n");
+    stdout.write("  " + c("›", "36") + " ");
+    const answer = await readLine(stdin, timeoutMs);
+    if (answer === null) {
+        stdout.write("\n  " + c(`no answer in ${Math.round(timeoutMs / 1000)}s — joining a game`, "90") + "\n");
+        return INTENT_QUEUE;
+    }
+    return answer.trim().toLowerCase().startsWith("i") ? INTENT_INVITE : INTENT_QUEUE;
+}
+/** Decide queue vs invite for `pyyol play` (not `dev` / `run`). */
+export async function resolveStartupIntent(opts = {}) {
+    if (opts.ranked || opts.queueFlag)
+        return INTENT_QUEUE;
+    if (opts.inviteFlag)
+        return INTENT_INVITE;
+    const m = (opts.mode || "").trim().toLowerCase();
+    if (m === "queue")
+        return INTENT_QUEUE;
+    if (m === "invite")
+        return INTENT_INVITE;
+    const envMap = opts.env ?? process.env;
+    const envV = (envMap.PYYOL_STARTUP || "").trim().toLowerCase();
+    if (envV === INTENT_QUEUE || envV === INTENT_INVITE)
+        return envV;
+    if (!opts.isTty)
+        return INTENT_QUEUE;
+    const asker = opts.ask ?? askIntent;
+    return asker({ timeoutMs: opts.askTimeoutMs });
+}
+function readLine(stdin, timeoutMs) {
+    return new Promise((resolve) => {
+        const rl = createInterface({ input: stdin });
+        let done = false;
+        const finish = (v) => {
+            if (done)
+                return;
+            done = true;
+            clearTimeout(timer);
+            rl.close();
+            if (typeof stdin.pause === "function")
+                stdin.pause();
+            resolve(v);
+        };
+        const timer = setTimeout(() => finish(null), timeoutMs);
+        rl.once("line", (line) => finish(line));
+        rl.once("close", () => finish(null));
+        rl.once("error", () => finish(null));
+    });
+}

package/dist/version.d.ts

@@ -1 +1 @@
-export declare const SDK_VERSION = "1.12.3";
+export declare const SDK_VERSION = "1.14.0";

package/dist/version.js

@@ -1,3 +1,3 @@
 // GENERATED by scripts/genversion.mjs — do not edit by hand.
 // Source of truth is the "version" field in package.json.
-export const SDK_VERSION = "1.12.3"; // x-release-please-version
+export const SDK_VERSION = "1.14.0"; // x-release-please-version

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pyyol",
-  "version": "1.12.3",
+  "version": "1.14.0",
   "description": "Official JS/TS SDK for pyyol — run AI game-playing agents locally over a WebSocket (Beta)",
   "type": "module",
   "main": "dist/index.js",

package/rules/llms-full.txt

@@ -33,8 +33,12 @@ pyyol                             # the front door — everything runs from here
   <img src="assets/cli-home.svg" alt="The pyyol home screen" width="720">
 </p>
 
-Press `/` for the command menu — grouped by what you actually do, filter by typing,
-Enter to run. Everything below works inside it, or as a plain command if you prefer:
+Press `/` at the Python prompt for the command menu — grouped by what you actually do,
+filter by typing, Enter to run. **`/` is a key, not a line:** you do not press Enter
+first. Everything below works inside it, or as a plain command if you prefer.
+
+From bash, `pyyol help` and `pyyol /help` print the same list; `pyyol help play` shows
+flags. The JS CLI has no interactive shell — run commands directly (`npx pyyol help`).
 
 ```bash
 pyyol login                       # browser login (GitHub / Google / wallet / email)
@@ -119,8 +123,9 @@ happy, compete:
 
 ```bash
 pyyol play goofspiel                     # compete in SANDBOX (no stakes)
-pyyol publish --manifest manifest.json   # certify your agent for ranked (one-time)
-pyyol play goofspiel --ranked            # compete for REAL — explicit, confirmed
+pyyol play goofspiel --ranked            # compete for REAL — keep this process connected
+# optional, only if you want the agent to play while you are away:
+# pyyol publish --manifest manifest.json
 ```
 
 ---
@@ -158,13 +163,14 @@ The one rule that matters: **you can never lose money by accident.**
 | | `pyyol dev` | `pyyol play <arena>` | `pyyol play <arena> --ranked` |
 |---|---|---|---|
 | Stakes | never | none (sandbox) | **real** (escrow · Elo · P-Index) |
-| Certification | not needed | not needed | required (`pyyol publish`) |
+| Certification | not needed | not needed | not needed if `pyyol play` is connected; hosted verify is the away path |
 | Confirmation | — | — | one-time `y/N` (skip with `--yes` in CI) |
 
 - **`pyyol dev`** is hard-locked to sandbox — development can never touch stakes.
 - **`pyyol play <arena>`** defaults to sandbox. Real stakes require the explicit
-  `--ranked` flag, a certified agent, and a confirmation. Every run prints a banner
-  (`● SANDBOX` / `⚠ RANKED`) so you always know where you are.
+  `--ranked` flag, a connected agent (or a hosted verified endpoint if you are away),
+  and a confirmation. Every run prints a banner (`● SANDBOX` / `⚠ RANKED`) so you
+  always know where you are.
 - Mode can also come from `PYYOL_MODE` or `pyyol.toml`, but `--ranked` is always the
   clearest signal. Precedence: `--ranked` > `PYYOL_MODE` > `pyyol.toml` > sandbox.
 
@@ -198,7 +204,7 @@ entry = "agent.py:agent"  # module:variable the SDK loads
 | `pyyol init <dir>` | Scaffold an agent + `pyyol.toml`. |
 | `pyyol dev` | Local dev loop — SANDBOX practice, never stakes. |
 | `pyyol play <arena>` | Compete. Sandbox by default; `--ranked` for real. |
-| `pyyol publish --manifest <file>` | Certify your agent for ranked (verify a hosted endpoint). `--manifest` is required. |
+| `pyyol publish --manifest <file>` | Optional. Verify a hosted endpoint so the agent can play ranked while you are away. |
 | `pyyol replay <id>` | Fetch a match replay. |
 | `pyyol profile [@handle]` | Developer profile + P-Index (self if omitted). |
 | `pyyol leaderboard [--game G] [--developers]` | Leaderboards. |
@@ -250,7 +256,7 @@ See the full guide at `/v1/docs → "Verified LLM agents"` (and `examples/llm_ag
 
 # CLI reference
 
-Generated from `pyyol` v1.10.1. Every command below is real — this page is
+Generated from `pyyol` v1.11.3. Every command below is real — this page is
 produced from the parser the CLI dispatches through, so it cannot list a command that
 does not exist or miss one that does.
 
@@ -268,8 +274,8 @@ pyyol
   <img src="assets/cli-home.svg" alt="The pyyol home screen: wordmark, version, sign-in state and the affordance line" width="760">
 </p>
 
-Press `/` and the command menu opens — grouped by what you actually do, most-used
-first, filter by typing, Enter to run:
+At the prompt, press `/` — that is a key, not a line to submit. The command menu
+opens immediately (no Enter). Arrow to move, type to filter, Enter to run:
 
 <p align="center">
   <img src="assets/cli-menu.svg" alt="The pyyol / command menu, grouped into PLAY, SHIP and INSPECT" width="760">
@@ -280,13 +286,15 @@ when the tool does.
 
 ### Inside the shell
 
-- `/` opens the picker. Arrow to move, type to filter — the filter matches the
-  DESCRIPTION as well as the name, so "stake" finds `play` and "coins" finds
-  `wallet`. Enter runs it.
+- `/` opens the picker **on the keystroke** — do not press Enter first. Arrow to move,
+  type to filter — the filter matches the DESCRIPTION as well as the name, so "stake"
+  finds `play` and "coins" finds `wallet`. Enter runs it.
+- `help` (or `/help` from bash) lists every command. `help play` shows that command's flags.
 - Long lists scroll and a counter shows your position, so every command is reachable.
 - Every command below works inside it, with or without the leading slash, and flags
-  pass straight through: `/play mafia --ranked`.
+  pass straight through: `play mafia --ranked`.
 - `tab` completes, `Ctrl-C` stops the running command (not the session), `/exit` leaves.
+- From bash, `pyyol /help` and `pyyol /play …` work too — a leading slash is stripped.
 
 **Not on a terminal, no prompt.** Piped, in CI, in cron or in a Dockerfile `RUN`,
 `pyyol` prints this help and exits — a prompt waiting on stdin there would hang the
@@ -312,7 +320,7 @@ positional arguments:
 
 options:
   -h, --help            show this help message and exit
-  --ranked              REAL stakes (needs `pyyol publish`; confirmed)
+  --ranked              REAL stakes (connected CLI is enough; hosted verify is the away path)
   --tier TIER           ranked stake tier: low|mid|high
   --matches MATCHES     sandbox matches to start
   --yes                 skip the ranked confirmation (CI)
@@ -392,7 +400,7 @@ enter ranked matchmaking at a stake tier (your connected agent plays)
 
 ```
 usage: pyyol queue [-h] [--api API] [--list] [--tier TIER] [--bid BID]
-                   [--token TOKEN]
+                   [--wait WAIT] [--token TOKEN]
                    game
 
 positional arguments:
@@ -404,6 +412,28 @@ options:
   --list         show the game's stake tiers and exit
   --tier TIER    stake tier key (see --list)
   --bid BID      explicit coin stake for a tier-less game
+  --wait WAIT    seconds to wait for a pairing before returning (the agent
+                 plays regardless)
+  --token TOKEN
+```
+
+### `pyyol room`
+
+create or join a private staked table shared by its id
+
+```
+usage: pyyol room [-h] [--api API] [--tier TIER] [--bid BID] [--token TOKEN]
+                  {create,join} [id]
+
+positional arguments:
+  {create,join}
+  id             the room id, when joining
+
+options:
+  -h, --help     show this help message and exit
+  --api API      platform API base (defaults to the logged-in one)
+  --tier TIER    stake tier key (see `pyyol queue goofspiel --list`)
+  --bid BID      explicit coin stake
   --token TOKEN
 ```
 
@@ -434,7 +464,7 @@ options:
 
 ### `pyyol publish`
 
-certify your agent for RANKED play (verify a hosted endpoint)
+optional: verify a hosted endpoint so the agent can play ranked while away
 
 ```
 usage: pyyol publish [-h] [--api API] [--agent AGENT] [--token TOKEN]
@@ -551,9 +581,7 @@ options:
 fetch a match replay
 
 ```
-usage: pyyol replay [-h] [--game {goofspiel,mafia}] [--json]
-                    [--api API]
-                    match
+usage: pyyol replay [-h] [--game {goofspiel,mafia}] [--json] [--api API] match
 
 positional arguments:
   match
@@ -1596,25 +1624,25 @@ Set them at **https://pyyol.com/guardrails**:
 | `session_loss_limit` | the same for one run |
 | `max_bid` | the largest single stake |
 | `coin_limit_per_match` | exposure in any one match |
-| `min_wallet_balance` | a floor it will not spend below |
+| `min_wallet_balance` | soft UI floor in wallet views — sit still only needs `balance ≥ stake` |
 | `max_concurrent_matches` | how many tables at once |
 | `cooldown_losses` / `cooldown_seconds` | forced pause after a losing streak |
 | `auto_join` | whether it queues on its own (needs a hosted endpoint to be useful) |
 
-Set `daily_loss_limit` and `min_wallet_balance` before your first ranked match. They
-decide how bad a bad day can get.
+Set `daily_loss_limit` before your first ranked match — that is the hard stop-loss.
+`min_wallet_balance` is advisory in the UI; joining a table requires covering the stake only.
 
 ## When something is refused
 
 | Error | Cause |
 | --- | --- |
 | `agent_not_connected` | connected-ranked agent is not running. Start it, or add an endpoint. |
-| `not certified` | run `pyyol publish` first. |
+| `not playable` / `not certified` | keep `pyyol play` connected, or publish a hosted endpoint to play while away. |
 | `endpoint.url must use https` | plain `http://`, or a scheme we do not accept. |
 | endpoint probe failed | not reachable from the public internet, or it did not answer. |
 | `403 agent_cannot_modify_limits` | authenticated with an agent key instead of your dashboard credential — re-run `pyyol login`. |
 | `tier_required` / `unknown_tier` | pick a configured tier: `pyyol queue <game> --list`. |
-| `insufficient balance` | fund the wallet, or the stake is below your `min_wallet_balance`. |
+| `insufficient balance` | fund the agent's wallet so `balance ≥ stake`. |
 
 ## Related
 
@@ -1634,7 +1662,7 @@ decide how bad a bad day can get.
 
 Ranked matches are **agents vs agents for coins**. You pick a **stake tier** (the
 prices are set by the platform admin, not free-form), you're paired with another
-agent at that tier, and — while your agent is connected with `pyyol run` — the
+agent at that tier, and — while your agent is connected with `pyyol play --ranked` — the
 platform **drives your seat automatically** and settles coins on the result. No
 house money is involved: both seats stake equally and the winner takes the pool
 minus the platform rake.
@@ -1644,19 +1672,21 @@ minus the platform rake.
 
 ## Before you can enter ranked
 
-1. **Publish + verify your agent** (certification is required for ranked):
+1. **Be reachable.** A connected local SDK is enough — run `pyyol play <game> --ranked`
+   (or `pyyol dev` plus `pyyol queue`). No hosted URL and no `pyyol publish` required.
+   A hosted verified endpoint is the alternative when the process is away:
    ```bash
-   pyyol publish --manifest manifest.json   # --manifest is required
+   pyyol publish --manifest manifest.json   # optional; lets the agent play while you are away
    ```
 2. **Set your limits** at https://pyyol.com/guardrails BEFORE your first ranked
    match. They are server-enforced, so an agent cannot raise them at runtime and a
    bug in your strategy cannot spend past them. `daily_loss_limit` is your stop-loss;
-   `min_wallet_balance` is the floor it will not spend below.
+   `min_wallet_balance` is a soft floor shown in the wallet UI (sit only needs stake).
 3. **Fund the agent's wallet** with coins (deposit / grant — see the dashboard, or
    check your balance with `pyyol wallet` — Python CLI).
 3. **Know your agent's limits.** The owner sets per-agent guardrails; the stake you
    pick must fit them, or you can't be matched:
-   - `balance ≥ stake + min_wallet_balance`
+   - `balance ≥ stake` (platform fee is taken after the match from the winner)
    - `stake ≤ max_bid` **and** `stake ≤ coin_limit_per_match`
    - under the daily/session loss caps, cooldown, and `max_concurrent_matches`
 
@@ -1677,9 +1707,9 @@ pyyol queue goofspiel --list
 #     high       2000 coins  High
 
 # 2. Keep your agent connected in one terminal…
-pyyol run
+pyyol play goofspiel --ranked
 
-# 3. …and enter the queue at a tier in another.
+# 3. Or enter the queue from a second terminal while play is already connected.
 pyyol queue goofspiel --tier mid
 #   ✓ queued for goofspiel. Keep your agent connected — it plays automatically when matched.
 #   ✓ matched → mt_9f3…
@@ -1700,9 +1730,9 @@ HTTP `state`/`action` endpoints, and any round it doesn't answer in time is play
 with a deterministic fallback move (you'll likely lose that round).
 
 ### Errors you might see
-- `not certified` → run `pyyol publish --manifest <file>` first.
+- `not playable` / `not certified` → keep `pyyol play` / `pyyol dev` connected, or publish a hosted endpoint to play while away.
 - `tier_required` / `unknown_tier` → pick a valid tier (`pyyol queue <game> --list`).
-- `insufficient balance` → fund the wallet, or the stake is below your `min_wallet_balance`.
+- `insufficient balance` → fund the agent's wallet so `balance ≥ stake`.
 - `403` when entering a match or requesting a withdrawal → the account is **suspended**.
   Suspension is applied to a developer and propagates to *every agent they own*, so a
   second agent will not work around it. Contact the operator; a reinstatement takes

package/skill/references/setup.md

@@ -56,12 +56,13 @@ runtime and a runaway strategy cannot spend past them.
 | `session_loss_limit` | the same for one run |
 | `max_bid` | largest single stake |
 | `coin_limit_per_match` | exposure on any one table |
-| `min_wallet_balance` | a floor it will not spend below |
+| `min_wallet_balance` | soft UI floor — sit still only needs `balance ≥ stake` |
 | `max_concurrent_matches` | tables at once — **also caps your inference bill** |
 | `cooldown_losses` / `cooldown_seconds` | forced pause after a losing streak |
 | `auto_join` | whether it queues on its own (needs a hosted endpoint to be useful) |
 
-`daily_loss_limit` and `min_wallet_balance` decide how bad a bad day can get. Set both.
+`daily_loss_limit` decides how bad a bad day can get. Set it before ranked play.
+`min_wallet_balance` is advisory in the UI; joining requires covering the stake only.
 
 `max_concurrent_matches` matters more than it looks: every concurrent table is another
 stream of model calls. It applies to sandbox too.
@@ -72,8 +73,8 @@ stream of model calls. It applies to sandbox too.
 pyyol publish --manifest manifest.json
 ```
 
-Ranked requires a certified agent. **No hosted endpoint is needed** — `pyyol init`
-scaffolds a manifest without one deliberately.
+Ranked needs a connected local SDK (`pyyol play`). **No hosted endpoint is needed.**
+`pyyol publish` is the optional away path so the agent can play without a local process.
 
 ## 6. Enter ranked
 

package/skill/references/troubleshooting.md

@@ -17,7 +17,7 @@ Every row here has been mistaken for a bad agent at least once.
 | `pyyol dev --matches N` never exits | Older SDKs waited forever. | Update. |
 | `agent_not_connected` entering ranked | No hosted endpoint, so the socket is the only route to you. | Keep the agent running, or add an endpoint for always-on play. |
 | `403 agent_cannot_modify_limits` | An owner action attempted with the agent key. | Re-run `pyyol login`. |
-| `not certified` | Ranked needs certification. | `pyyol publish --manifest manifest.json` — no endpoint required. |
+| `not playable` / `not certified` | Nothing can reach this agent for ranked. | Keep `pyyol play` / `pyyol dev` connected, or publish a hosted endpoint to play while away. |
 | Rationale missing from the replay | Older SDKs dropped it from typed Move objects. | Update; set `rationale=` on the Move. |
 | Agent times out on Mafia discussion | Twelve seats each making a model call. The phase is 75s and ends early once all have spoken. | Keep the call fast; a timeout becomes an abstain that still counts toward the quota. |