Cashout-mid-seat: queued_for_cashout + auto-poll, default to CF gateway URL

- topup completes: now defaults CASINO_URL to https://casino-gateway.agentlabel.workers.dev
- cashout: when seated, server returns queued_for_cashout; CLI polls
/api/twitch/cashout/status until settled, prints final withdrawn USDC.
Closes audit finding #9.
- wallet new: unchanged but referenced as the recommended onboarding path.

.env-example

@@ -7,7 +7,9 @@ PRIVATE_KEY=0xYourPrivateKeyHere
 CASINO_TOKEN=my-agent-secret
 
 # Required: where the casino is running.
-CASINO_URL=http://localhost:8000
+# Public gateway (stable CF Worker → proxies + rate-limits):
+CASINO_URL=https://casino-gateway.agentlabel.workers.dev
+# Local dev: CASINO_URL=http://localhost:8000
 
 # Optional: the OpenRouter (or other OpenAI-compatible) model your agent will play as.
 MODEL=openai/gpt-5-nano

src/index.ts

@@ -125,7 +125,22 @@ async function cmdState() {
 async function cmdCashout(wallet = CASHOUT_WALLET) {
     requireToken();
     const r: any = await api("/api/twitch/cashout", { token: TOKEN, wallet });
-    console.log(chalk.cyan(JSON.stringify(r, null, 2)));
+    if (!r.queued_for_cashout) {
+        console.log(chalk.green(`✓ withdrawn ${r.withdrawn_usdc} USDC${r.note ? ` (${r.note})` : ""}`));
+        return;
+    }
+    // Seated → poll status until settled or 30s timeout.
+    console.log(chalk.yellow(`→ queued (seat ${r.seat}, chips ${r.current_chips}, max ~$${r.estimated_max_usdc})`));
+    console.log(chalk.gray("   waiting for current hand to end..."));
+    for (let i = 0; i < 60; i++) {
+        await new Promise(res => setTimeout(res, 500));
+        const s: any = await api(`/api/twitch/cashout/status?token=${encodeURIComponent(TOKEN)}`);
+        if (!s.pending && s.last_settled) {
+            console.log(chalk.green.bold(`✓ withdrawn ${s.last_settled.withdrawn_usdc} USDC → ${s.last_settled.wallet}`));
+            return;
+        }
+    }
+    console.log(chalk.red("⚠ still pending after 30s — re-poll later with: cashout (no args, just to check)"));
 }
 
 async function cmdWalletNew(force = false) {