@bnbagent/studio-cli 0.0.10 → 0.0.11-alpha.1

package/recipes/x402-buyer/code/{{PKG}}/x402Buyer.ts.tmpl

@@ -6,8 +6,10 @@
  * trusted via `bag x402 trust` (`[payments.x402.merchants.*]` — e.g. the
  * Binance Bazaar shelf: CMC market data).
  *
- * Wire into the agent (main.ts / mcpMain.ts) — signing stays fixed code,
- * these tools only *fetch with payment* inside the config fences:
+ * Wire into the agent (main.ts / mcpMain.ts on agentcore; foundryMain.ts on
+ * azure-foundry — each carries this hint on its `tools:` line) — signing
+ * stays fixed code, these tools only *fetch with payment* inside the config
+ * fences:
  *
  *     import { X402_BUYER_TOOLS } from "./x402Buyer.js";
  *     ...
@@ -150,8 +152,8 @@ export const X402_BUYER_TOOLS: ToolSet = {
 // only produces text.
 //
 // In `sellerCore.ts` `doWorkAndSubmit` (you own that file) — or the
-// azure-foundry `executor.ts` equivalent — replace the generic prompt with a
-// pre-fetch:
+// azure-foundry equivalent, `foundryMain.ts` `buildRunWork` — replace the
+// generic prompt with a pre-fetch:
 //
 //     import { buyWithX402 } from "./x402Buyer.js";
 //

package/skills/bnbagent-studio.md

@@ -11,7 +11,7 @@ Invoked as `/bnbagent-studio <ask>`? Treat `<ask>` as the user's intent and rout
 
 ## The single seller runtime model (the invariants)
 
-One deployed runtime, one signer: a single valuable Agent serves the selected faces (A2A `src/main.ts` on `:9000`, MCP `src/mcpMain.ts` on `:8000/mcp`, or A2A-native `src/dualMain.ts` on `:9000` with tunneled `/mcp`), holds the key, and signs in-process. The ERC-8183 rail exposes exactly two bounded operations - **`negotiate`** (rule-based price clamp + EIP-191 sign; **no LLM touches money**) and **`notify_funded`** (verify the funded job → produce the deliverable → submit on-chain; A2A acks then delivers in the background, MCP delivers synchronously in the tool call). The optional x402 rail adds an anonymous HTTP request at `/x402`; positive prices settle through B402 before work, while explicit zero is FREE passthrough and bypasses the facilitator. It does not expose a general signing tool. Read-only chain tools remain available. ALL signing is fixed entrypoint code in `app/agent/src/signing.ts` or the runtime's bounded x402 payment handler, never an LLM-callable tool. The encrypted keystore lives at the workspace root `.studio/wallets/`, outside the deploy codeLocation, and is injected only via the selected provider's delegated secret channel. `settle` is manual (`bag erc8183 settle`). Full layout and lifecycle details live in the references below - read them before acting.
+One deployed runtime, one signer: a single valuable Agent serves the selected faces (A2A `src/unifiedMain.ts` on `:9000`, MCP `src/mcpMain.ts` on `:8000/mcp`, or A2A-native `src/dualMain.ts` on `:9000` with tunneled `/mcp`), holds the key, and signs in-process. The ERC-8183 rail exposes exactly two bounded operations - **`negotiate`** (rule-based price clamp + EIP-191 sign; **no LLM touches money**) and **`notify_funded`** (verify the funded job → produce the deliverable → submit on-chain; A2A acks then delivers in the background, MCP delivers synchronously in the tool call). The optional x402 rail adds an anonymous HTTP request at `/x402`; positive prices settle through B402 before work, while explicit zero is FREE passthrough and bypasses the facilitator. It does not expose a general signing tool. Read-only chain tools remain available. ALL signing is fixed entrypoint code in `app/agent/src/signing.ts` or the runtime's bounded x402 payment handler, never an LLM-callable tool. The encrypted keystore lives at the workspace root `.studio/wallets/`, outside the deploy codeLocation, and is injected only via the selected provider's delegated secret channel. `settle` is manual (`bag erc8183 settle`). Full layout and lifecycle details live in the references below - read them before acting.
 
 ## Decision tree - which reference to read next
 
@@ -53,7 +53,7 @@ Treat ERC-8183 amounts as decimal strings at CLI/config boundaries and `bigint`
 
 ## CLI groups at a glance
 
-`init`, `scan`, `recipe`, `skills`, `wallet`, `erc8004`, `erc8183`, `x402`, `agents`, `config`, `env`, `dev`, `doctor`, `audit`, `deploy`, `platform`, `llm`, `bundle`, `budget` - see `bag --help` for details. `bag deploy [--provider bnb\|aws] [--backend aws\|azure]` is the primary deploy command; `--backend` is valid only for provider `bnb` and confirms the recipe-derived managed backend. `prepare`, `verify`, `status`, `info`, `destroy`, `logs`, and `fix-gitignore` remain lifecycle subcommands (`deploy agent` is a deprecated compatibility alias). Provider deploy/status/logs/destroy and deploy-time credential validation are delegated to pinned `@bnbagent/deploy-cli@0.5.4`.
+`init`, `scan`, `recipe`, `skills`, `wallet`, `erc8004`, `erc8183`, `x402`, `agents`, `config`, `env`, `dev`, `doctor`, `audit`, `deploy`, `platform`, `llm`, `bundle`, `budget` - see `bag --help` for details. `bag deploy [--provider bnb\|aws] [--backend aws\|azure]` is the primary deploy command; `--backend` is valid only for provider `bnb` and confirms the recipe-derived managed backend. `prepare`, `verify`, `status`, `info`, `destroy`, `logs`, and `fix-gitignore` remain lifecycle subcommands (`deploy agent` is a deprecated compatibility alias). Provider deploy/status/logs/destroy and deploy-time credential validation are delegated to pinned `@bnbagent/deploy-cli@0.5.10`.
 
 ## Tool surface
 

package/skills/references/bnbagent-studio-adding-to-project.md

@@ -55,7 +55,7 @@ bag scan
 
 ## Step 3 - Emit the agent
 
-A seller is the single Agent serving the selected protocol. `bag init` already composes it from recipes - `agent` (the fixed-code `src/signing.ts`) and `runtimes/agentcore` (A2A: `src/main.ts` (the express + A2A entrypoint) + `src/sellerCore.ts` (the protocol-neutral core; executor inherits it) + `src/executor.ts` + `src/agentCard.ts`; MCP: `src/mcpMain.ts`; shared `src/tools.ts` + `src/model.ts`; a `Dockerfile` is added only for a container deployment path such as TWAK). Use `bag recipe code` to inspect or re-emit a piece:
+A seller is the single Agent serving the selected protocol. `bag init` already composes it from recipes - `agent` (the fixed-code `src/signing.ts`) and `runtimes/agentcore` (A2A: `src/unifiedMain.ts` (the express + A2A entrypoint, one code set for both deploy clouds) + `src/sellerCore.ts` (the protocol-neutral core; executor inherits it) + `src/executor.ts` + `src/agentCard.ts`; MCP: `src/mcpMain.ts`; shared `src/tools.ts` + `src/model.ts`; a `Dockerfile` is added only for a container deployment path such as TWAK). Use `bag recipe code` to inspect or re-emit a piece:
 
 ```bash
 bag recipe code agent              > /dev/null   # inspect; bag init writes app/agent/src/signing.ts for you

package/skills/references/bnbagent-studio-buying-from-bazaar.md

@@ -57,7 +57,7 @@ Hard-stop cases: a reviewed merchant whose live payTo drifts from the studio pin
 bag recipe code x402-buyer        # emits src/x402Buyer.ts (next to src/tools.ts)
 ```
 
-Then wire the set into the agent's LLM in `src/main.ts` (A2A) or `src/mcpMain.ts` (MCP) - the scaffold's `tools:` line carries this exact hint in a comment:
+Then wire the set into the agent's LLM in `src/unifiedMain.ts` (A2A — one entrypoint deployed to both clouds) or `src/mcpMain.ts` (MCP) - the scaffold's `tools:` line carries this exact hint in a comment:
 
 ```ts
 import { X402_BUYER_TOOLS } from "./x402Buyer.js";

package/skills/references/bnbagent-studio-operating.md

@@ -7,7 +7,7 @@ description: When the user wants to run, debug, diagnose, or operate a bnbagent-
 
 # bnbagent-studio-operating
 
-Procedure for **day-to-day operation** of an existing bnbagent-studio project. Audience: Claude Code in a current TypeScript workspace (thin root with the `agentcore/` config dir + the workspace-root `.studio/wallets/` + funded wallet, plus the single sub-project `app/agent/` holding `studio.toml` + `src/main.ts` / `src/sellerCore.ts` / `src/executor.ts` / `src/agentCard.ts` / `src/signing.ts`). Most commands run from the workspace root; the current project-root fallback locates the `app/agent/` sub-project automatically for wallet/LLM/budget ops.
+Procedure for **day-to-day operation** of an existing bnbagent-studio project. Audience: Claude Code in a current TypeScript workspace (thin root with the `agentcore/` config dir + the workspace-root `.studio/wallets/` + funded wallet, plus the single sub-project `app/agent/` holding `studio.toml` + `src/unifiedMain.ts` / `src/sellerCore.ts` / `src/executor.ts` / `src/agentCard.ts` / `src/signing.ts`). Most commands run from the workspace root; the current project-root fallback locates the `app/agent/` sub-project automatically for wallet/LLM/budget ops.
 
 **Different from**:
 
@@ -63,7 +63,7 @@ bag dev                # A2A agent on :9000, MCP on :8000/mcp (same for any dest
 bag dev --port 9100    # override the port
 ```
 
-`bag dev` sets `STORAGE_LOCAL_PATH=~/.bag/deliverables/<workspace-name>/` for the agent subprocess and runs it **without** Cognito env, so the local endpoint is reachable without a token (Cognito is mandatory only on the deployed AgentCore runtime). For A2A projects, the agent (`app/agent/src/main.ts`) exposes `/.well-known/agent-card.json` + JSON-RPC `message/send` + `GET /ping` on `:9000`. Smoke-test the card with curl:
+`bag dev` sets `STORAGE_LOCAL_PATH=~/.bag/deliverables/<workspace-name>/` for the agent subprocess and runs it **without** Cognito env, so the local endpoint is reachable without a token (Cognito is mandatory only on the deployed AgentCore runtime). For A2A projects, the agent (`app/agent/src/unifiedMain.ts`) exposes `/.well-known/agent-card.json` + JSON-RPC `message/send` + `GET /ping` on `:9000`. Smoke-test the card with curl:
 
 ```bash
 curl http://localhost:9000/.well-known/agent-card.json
@@ -106,12 +106,12 @@ Returns a rich table of checks across the `app/agent/` sub-project:
 | Check | What FAIL means | Fix |
 | --- | --- | --- |
 | app/agent/studio.toml parseable | Missing or syntax error | `bag init` to regenerate, or hand-fix TOML |
-| Agent entrypoint imports | Protocol entrypoint raises on load (`src/main.ts` for A2A, `src/mcpMain.ts` for MCP) | Fix the error printed by the check (often a missing env var or a broken import) |
+| Agent entrypoint imports | Protocol entrypoint raises on load (`src/unifiedMain.ts` for A2A, `src/mcpMain.ts` for MCP) | Fix the error printed by the check (often a missing env var or a broken import) |
 | wallet keystore | No `<workspace>/.studio/wallets/*.json` | `bag wallet new` (writes to the workspace root keystore dir) |
 | WALLET_PASSWORD env | Not in `.studio/.env.local` / not exported | Edit the owner-only `.studio/.env.local`; never pass the password on argv |
 | LLM provider key | API key env not set | Edit `.studio/.env.local` or export the right `*_API_KEY` |
 | Network reachable | RPC down/wrong URL | Override via `STUDIO_BSC_TESTNET_RPC=...` (testnet) / `STUDIO_BSC_RPC=...` (mainnet) - per-network env vars read by `@bnbagent/studio-runtime/networks` `getNetwork` |
-| Wallet tBNB balance | 0 tBNB | Faucet: testnet.bnbchain.org/faucet-smart |
+| Wallet tBNB balance | 0 tBNB | Message https://t.me/bnbchain_official_bot: `I would like to get tBNB to my wallet <address>` (more options: docs.bnbchain.org/bnb-smart-chain/developers/faucet/) |
 | Wallet U balance | 0 U | Transfer from holder, or ask for sponsor U |
 | 8004 registered | Not registered | Normally registered automatically at `bag deploy verify`. Manual: `bag erc8004 register --endpoint <url>` (only if you need an on-chain identity before deploy). WARN-only in `bag doctor` - it doesn't block local dev. |
 

package/skills/references/bnbagent-studio-scaffolding-agent.md

@@ -36,7 +36,7 @@ Procedure for **greenfield** seller creation. Audience: Claude Code (or another
         ├── tsconfig.json            builds src/ → dist/ (the deployed entrypoint is dist/*.js)
         ├── studio.toml              wallet / llm / budget / payments.erc8183 bounds / payments.x402 / storage
         ├── Dockerfile               container deploy path only (for example, twak)
-        └── src/                     main.ts / mcpMain.ts / dualMain.ts / sellerCore.ts / executor.ts / agentCard.ts / signing.ts / tools.ts / model.ts
+        └── src/                     unifiedMain.ts / mcpMain.ts / dualMain.ts / sellerCore.ts / executor.ts / agentCard.ts / signing.ts / tools.ts / model.ts
 ```
 
 - **The Agent (`<name>/app/agent/`, → AWS Bedrock AgentCore).** ONE valuable agent (memory / tools / skills / KB / LLM) that **serves the selected faces** (A2A: `0.0.0.0:9000`; MCP: `0.0.0.0:8000/mcp`; A2A+MCP: A2A-native `dualMain.ts` on `:9000` with `/mcp` tunneled), holds the key, and signs **in-process**. Its outward surface is two fixed-code commerce operations (A2A skills on `SellerAgentExecutor`, or MCP tools on the MCP server):
@@ -112,7 +112,7 @@ Will create (single seller agent):
                (twak is fully supported too - opt in with --wallet-kind twak)
   storage:     local (offline dev; switch to ipfs - needs a pinning endpoint + key - before deploy)
   fixed:       stack=AI SDK (model factory + tools), runtime=agentcore (AWS Bedrock AgentCore)
-  protocol:    A2A (src/main.ts on 0.0.0.0:9000; local 127.0.0.1:9000)
+  protocol:    A2A (src/unifiedMain.ts on 0.0.0.0:9000; local 127.0.0.1:9000)
                or MCP (src/mcpMain.ts on 0.0.0.0:8000/mcp; local localhost:8000/mcp)
   destination: platform (campaign default while the trial runs - 48h testnet on the operator's AWS; key leaves your machine, use a throwaway wallet)
                or self (prepare for your own AWS Bedrock AgentCore; runtime material stays in your account - pass --destination self)
@@ -138,7 +138,7 @@ Build a TodoWrite list. The shape depends on the `wallet kind`. The canonical 8-
 
 > **Onboarding note.** On a human TTY, `bag init` runs steps 3, 4 and 6 automatically (it prompts once for the wallet password, runs `bag wallet new`, zero-deposit-activates Pieverse, and prints faucet URLs). **You (Claude Code) drive `bag init` non-interactively**, so that auto-flow does NOT fire - keep steps 3/4/6 below. Pass `--no-onboard` to `bag init` to make this explicit and deterministic regardless of how the shell wires stdin.
 
-1. `bag init <name> --llm-provider <p> --network <n> --storage-provider <s> --wallet-kind <k> --rails <8183|b402|both> [--erc8183-price <base-units>] [--b402-price <usd>] --no-onboard` - scaffold the current workspace. **`<name>` must start with a letter, use ASCII letters and digits only, and be at most 23 characters.** `bag init` rejects `-`, `_`, `.`, and overlong names instead of renaming them. Pass `--wallet-kind evm-local` (default) or `--wallet-kind twak` (twak is fully supported - pass the flag to opt in), and `--storage-provider local` (default) or `ipfs`, per the Stage-1 choices; for twak, add `--twak-home <path>` ONLY if the user wants to reuse an existing wallet (otherwise omit - a project-dedicated `.studio/twak` is the safe default). add `--protocols <comma-list>` when the user chose non-default or multiple faces (omit for A2A default; `--protocol <one>` is only a legacy alias), add `--model <m>` only if the user overrode the provider default, and `--enable-auto-topup` / `--no-auto-topup` only if they made an explicit choice (otherwise omit - consent stays deferred). Pass `--erc8183-price 0` only when the user explicitly chose FREE; omitting the flag preserves the paid 0.1 U default. The canonical stack supports FREE; if a custom deployment is selected, set all three `ERC8183_COMMERCE_ADDRESS`, `ERC8183_ROUTER_ADDRESS`, and `ERC8183_POLICY_ADDRESS` values from that same stack. For B402, pass `--b402-price 0` only after the user explicitly accepts an unrestricted anonymous FREE `/x402` endpoint. FREE bypasses B402 verify/settle and needs no merchant credentials; a positive price keeps the `$0.01` default and requires the paid onboarding playbook. **Destination:** while the trial campaign runs, bare `bag init` (no `--destination`) defaults to `platform` - so pass `--destination self` **explicitly** whenever the user chose their own AWS, otherwise studio.toml silently records `platform` and the confirmation block you echoed no longer matches what was written. Omit `--destination` only when the user actually wants the `platform` 48h testnet trial (the campaign default) - do NOT treat that default as a mistake or re-confirm it; it is the intended behavior while the campaign is open. (Bare init also resolves to `self` once the campaign ends, or when `--network bsc-mainnet` / a non-agentcore `--runtime` is passed.) On the `platform` path `bag init` hard-forces `bsc-testnet`, pins `--runtime agentcore` + packages an artifact (a zip for the default evm-local and altana wallets, a container for twak). For evm-local a wallet key will later leave your machine, so pair it with a throwaway `bag wallet new`; for altana only the bounded session ships - do NOT create a new wallet (full flow: `docs/guides/platform-deploy.md`). Defaults `--runtime agentcore` (the only advertised runtime; the Preview `azure-foundry` runtime remains explicitly selectable but is outside this playbook; there is no `--framework` flag because the AI SDK model/tools story is part of the runtime templates). Creates `<name>/` workspace root + `<name>/app/agent/` (the single sub-project: A2A emits `src/main.ts` (the express + A2A entrypoint) + `src/sellerCore.ts` (the protocol-neutral core; executor inherits it) + `src/executor.ts` + `src/agentCard.ts`; MCP emits `src/mcpMain.ts`; both include `src/signing.ts` + `src/tools.ts` + `src/model.ts` + their own `studio.toml` + `package.json` + `tsconfig.json`) + `<name>/agentcore/` (`agentcore.json` + `aws-targets.json`, self-rendered - no agentcore CLI needed at init). The workspace root holds the `agentcore/` deploy descriptor, the `.studio/wallets/` keystore, a thin `package.json` + `pnpm-workspace.yaml`, README, and `.gitignore`. (v1 is seller-only - no `--role`.)
+1. `bag init <name> --llm-provider <p> --network <n> --storage-provider <s> --wallet-kind <k> --rails <8183|b402|both> [--erc8183-price <base-units>] [--b402-price <usd>] --no-onboard` - scaffold the current workspace. **`<name>` must start with a letter, use ASCII letters and digits only, and be at most 23 characters.** `bag init` rejects `-`, `_`, `.`, and overlong names instead of renaming them. Pass `--wallet-kind evm-local` (default) or `--wallet-kind twak` (twak is fully supported - pass the flag to opt in), and `--storage-provider local` (default) or `ipfs`, per the Stage-1 choices; for twak, add `--twak-home <path>` ONLY if the user wants to reuse an existing wallet (otherwise omit - a project-dedicated `.studio/twak` is the safe default). add `--protocols <comma-list>` when the user chose non-default or multiple faces (omit for A2A default; `--protocol <one>` is only a legacy alias), add `--model <m>` only if the user overrode the provider default, and `--enable-auto-topup` / `--no-auto-topup` only if they made an explicit choice (otherwise omit - consent stays deferred). Pass `--erc8183-price 0` only when the user explicitly chose FREE; omitting the flag preserves the paid 0.1 U default. The canonical stack supports FREE; if a custom deployment is selected, set all three `ERC8183_COMMERCE_ADDRESS`, `ERC8183_ROUTER_ADDRESS`, and `ERC8183_POLICY_ADDRESS` values from that same stack. For B402, pass `--b402-price 0` only after the user explicitly accepts an unrestricted anonymous FREE `/x402` endpoint. FREE bypasses B402 verify/settle and needs no merchant credentials; a positive price keeps the `$0.01` default and requires the paid onboarding playbook. **Destination:** while the trial campaign runs, bare `bag init` (no `--destination`) defaults to `platform` - so pass `--destination self` **explicitly** whenever the user chose their own AWS, otherwise studio.toml silently records `platform` and the confirmation block you echoed no longer matches what was written. Omit `--destination` only when the user actually wants the `platform` 48h testnet trial (the campaign default) - do NOT treat that default as a mistake or re-confirm it; it is the intended behavior while the campaign is open. (Bare init also resolves to `self` once the campaign ends, or when `--network bsc-mainnet` / a non-agentcore `--runtime` is passed.) On the `platform` path `bag init` hard-forces `bsc-testnet`, pins `--runtime agentcore` + packages an artifact (a zip for the default evm-local and altana wallets, a container for twak). For evm-local a wallet key will later leave your machine, so pair it with a throwaway `bag wallet new`; for altana only the bounded session ships - do NOT create a new wallet (full flow: `docs/guides/platform-deploy.md`). Defaults `--runtime agentcore` (the only advertised runtime; the Preview `azure-foundry` runtime remains explicitly selectable but is outside this playbook; there is no `--framework` flag because the AI SDK model/tools story is part of the runtime templates). Creates `<name>/` workspace root + `<name>/app/agent/` (the single sub-project: A2A emits `src/unifiedMain.ts` (the express + A2A entrypoint, one code set for both deploy clouds) + `src/sellerCore.ts` (the protocol-neutral core; executor inherits it) + `src/executor.ts` + `src/agentCard.ts`; MCP emits `src/mcpMain.ts`; both include `src/signing.ts` + `src/tools.ts` + `src/model.ts` + their own `studio.toml` + `package.json` + `tsconfig.json`) + `<name>/agentcore/` (`agentcore.json` + `aws-targets.json`, self-rendered - no agentcore CLI needed at init). The workspace root holds the `agentcore/` deploy descriptor, the `.studio/wallets/` keystore, a thin `package.json` + `pnpm-workspace.yaml`, README, and `.gitignore`. (v1 is seller-only - no `--role`.)
 > **Altana + custom contracts:** Altana sessions remain bound to the canonical ERC-8183 targets. Use `evm-local` for a custom Commerce/Router/Policy stack; doctor and deploy readiness reject this unsupported combination when the ERC-8183 rail is active.
 
 2. `cd <name>`, then make sure the dependencies are installed. `bag init` already runs the install by default (skip only if it was scaffolded with `--no-install`); the manual equivalent from the workspace root is:
@@ -186,7 +186,7 @@ Build a TodoWrite list. The shape depends on the `wallet kind`. The canonical 8-
    - **evm-local** (default): `bag wallet new` creates the encrypted keystore. To import an existing key, the user pastes it and you immediately run `bag wallet new --private-key <pk>` (the key is written only into the keystore, nowhere else on disk).
 
 5. **Fund the wallet - OPTIONAL; do NOT block on it.** The default `auto/free` LLM model runs at $0 and AgentCore deploy consumes no wallet balance, so a brand-new seller can scaffold, run `bag dev`, and deploy with an empty wallet. `bag doctor` and `bag deploy` only **WARN** (never block) on zero balance. Funding is needed later only for: a paid LLM model, on-chain settle, paying positive-price ERC-8183 job buys, or buying/smoking a PAID B402 request. A FREE ERC-8183 buy needs no U escrow or ERC-20 approval, but still needs the ERC-8183 state-changing calls and their gas/paymaster path. A FREE B402/x402 request needs neither token funding nor a facilitator call. When funding is needed, the wallet uses **TWO distinct U balances on TWO chains** (same wallet address, same private key, different chains):
-   - **tBNB (gas)** on BSC testnet: https://testnet.bnbchain.org/faucet-smart - paste address
+   - **tBNB (gas)** on BSC testnet: message the official Telegram bot https://t.me/bnbchain_official_bot with `I would like to get tBNB to my wallet <address>` (up to 0.3 tBNB/day; replies with the tx hash). More options: https://docs.bnbchain.org/bnb-smart-chain/developers/faucet/
    - **BSC mainnet U** (`0xcE24439F2D9C6a2289F741120FE202248B666666`) - for Pieverse LLM topup. Minimum **0.2 U** recommended (0.1 for activate + slack). Pieverse runs **only on mainnet chainId=56**; testnet U cannot pay for LLM credits. Acquire via PancakeSwap. Wallet-funded renewal stays off unless the operator explicitly enables it with `bag budget enable`; otherwise refill Account Balance with `bag llm topup` as needed.
    - **BSC testnet U** (`0xc70B8741B8B07A6d61E54fd4B20f22Fa648E5565`) - for ERC-8183 job payments if `[network].default = bsc-testnet`. Faucet: https://united-coin-u.github.io/u-faucet/ (paste the agent wallet address; see also `docs/guides/U-token-testnet.md`).
 

package/skills/references/bnbagent-studio-selling-via-8183.md

@@ -33,7 +33,7 @@ A v1 seller ships as **one runtime**: a single valuable Agent on AWS Bedrock Age
 
 - `bag doctor` is clean (or only warns on optional checks) - run from workspace root
 - Wallet has ≥ 0.05 tBNB (gas to submit deliverables) and ≥ 0 U (sellers receive U, don't spend)
-- The agent sub-project is emitted (`<workspace>/app/agent/src/main.ts` for A2A or `src/mcpMain.ts` for MCP, plus `src/signing.ts`). If not, run `bag init` or read the `bnbagent-studio-adding-to-project.md` reference first.
+- The agent sub-project is emitted (`<workspace>/app/agent/src/unifiedMain.ts` for A2A or `src/mcpMain.ts` for MCP, plus `src/signing.ts`). If not, run `bag init` or read the `bnbagent-studio-adding-to-project.md` reference first.
 - For LLM-using sellers: `[llm].provider` configured in `app/agent/studio.toml` + (if Pieverse) `bag llm activate` has been run
 
 ## Stage 1 - Implement the `notify_funded` value (the `runWork` hook)
@@ -73,9 +73,9 @@ Tune the clamp in `<workspace>/app/agent/studio.toml`:
 # app/agent/studio.toml
 [payments.erc8183]
 currency = "0x..."           # $U token - prefilled by `bag init` from [network].default; rarely changed
-price = "0"                  # raw wei - the asking list price the quote signs
+price = "100000000000000000" # raw wei - the asking list price the quote signs (scaffold default 0.1 U; U has 18 decimals)
 min_price = "0"              # raw wei - clamp floor
-max_price = "0"              # raw wei - clamp ceiling (set > 0 to enforce)
+max_price = ""               # raw wei - clamp ceiling; empty = unbounded (a "0" ceiling clamps every paid quote to 0)
 quote_ttl_seconds = 300
 default_estimated_completion_seconds = 600
 ```

package/skills/references/bnbagent-studio-selling-via-b402.md

@@ -152,7 +152,7 @@ bag deploy --provider bnb   # managed platform
 bag deploy --provider aws   # self-hosted AgentCore
 ```
 
-On the managed platform the deploy summary must say `x402 rail is ACTIVE` (or `ACTIVE in FREE mode`) and print the anonymous `/x402` URL. On a self-hosted AgentCore deploy it says `x402 rail is ACTIVE (self-hosted AgentCore)` or `ACTIVE in FREE mode (self-hosted AgentCore)`: the rail runs in-process, but there is no anonymous URL. Operate your own HTTP front that relays envelope-v1 JSON through an authenticated AgentCore invocation. The default Bag self-deploy uses Cognito OAuth over raw HTTPS; AWS SDK/SigV4 is only for a runtime deliberately configured with IAM authorization. PAID also needs your own fixed-egress B402 Relay or equivalent network path. The complete gateway wrapper, response parser, Relay example, and direct-invocation fallback are in the [self-hosted x402 gateway guide](https://github.com/bnb-chain/bnbagent-studio/blob/main/docs/guides/self-hosted-x402-gateway.md). A dormant or forced-dormant summary means the rail was not activated; fix the named credential, runtime, network, or tunnel condition and redeploy.
+On the managed platform the deploy summary must say `x402 rail is ACTIVE` (or `ACTIVE in FREE mode`) and print the anonymous `/x402` URL. On a self-hosted AgentCore deploy it says `x402 rail is ACTIVE (self-hosted AgentCore)` or `ACTIVE in FREE mode (self-hosted AgentCore)` (self-hosted Azure Foundry prints the same summary with its own label): the rail runs in-process, but there is no anonymous URL. Operate your own HTTP front that relays envelope-v1 JSON through an authenticated AgentCore invocation. The default Bag self-deploy uses Cognito OAuth over raw HTTPS; AWS SDK/SigV4 is only for a runtime deliberately configured with IAM authorization. PAID also needs your own fixed-egress B402 Relay or equivalent network path. The complete gateway wrapper, response parser, Relay example, and direct-invocation fallback are in the [self-hosted x402 gateway guide](https://github.com/bnb-chain/bnbagent-studio/blob/main/docs/guides/self-hosted-x402-gateway.md). A dormant or forced-dormant summary means the rail was not activated; fix the named credential, runtime, network, or tunnel condition and redeploy.
 
 ## Hard rules
 
@@ -161,6 +161,6 @@ On the managed platform the deploy summary must say `x402 rail is ACTIVE` (or `A
 - Never replay a paid HTTP request whose outcome is unknown. Follow `docs/guides/x402-selling.md` and reconcile `(nonce, network, payer)` first.
 - Binance `/settle` is asynchronous. A parseable `success: false` response with a transaction is pending and requires an idempotent poll with the same settlement payload. Studio v0.0.6 and the latest `@bnb-chain/b402@0.1.0` do not yet perform that poll; they classify pending as unknown. Do not claim current mainnet readiness until this is updated.
 - Settlement happens before work. A later work failure retains the payment and does not trigger an automatic refund.
-- The rail activates on AgentCore targets only (managed platform or self-hosted); azure-foundry stays forced dormant.
+- The rail activates on AgentCore and Azure Foundry targets (managed platform or self-hosted); self-hosted targets have no anonymous URL and need an operator-run envelope-v1 front.
 - PAID B402 payout wallets must use `wallet.kind` `evm-local` (private-key wallet stored as an encrypted keystore) or `twak`. Altana is unsupported. FREE x402 bypasses B402, has no payout, and must not be described as Altana B402 support.
 - Never describe FREE as a zero-value B402 settlement. It bypasses B402.

package/skills/references/bnbagent-studio-use-aws-agentcore.md

@@ -1,6 +1,6 @@
 ---
 name: bnbagent-studio-use-aws-agentcore
-description: When the user wants to deploy or operate a bnbagent-studio project on AWS Bedrock AgentCore - deploy with `bag deploy --provider aws` (all cloud lifecycle mutations are delegated to pinned `@bnbagent/deploy-cli@0.5.4`), inspect with `bag deploy status` / `logs --provider aws` / `verify --provider aws`, and tear down with `bag deploy destroy --provider aws --execute [--purge]`. Also covers AWS credential prerequisites, the optional read-only quota probe, and the runtime-secret channel.
+description: When the user wants to deploy or operate a bnbagent-studio project on AWS Bedrock AgentCore - deploy with `bag deploy --provider aws` (all cloud lifecycle mutations are delegated to pinned `@bnbagent/deploy-cli@0.5.10`), inspect with `bag deploy status` / `logs --provider aws` / `verify --provider aws`, and tear down with `bag deploy destroy --provider aws --execute [--purge]`. Also covers AWS credential prerequisites, the optional read-only quota probe, and the runtime-secret channel.
 ---
 
 > **Reference file** of the `bnbagent-studio` router skill - installed at `bnbagent-studio/references/` and loaded on demand (not a standalone skill). Route here via the router's decision tree.

package/skills/references/bnbagent-studio-use-azure-foundry.md

@@ -1,6 +1,6 @@
 ---
 name: bnbagent-studio-use-azure-foundry
-description: When the user wants to deploy or operate a bnbagent-studio project on Azure AI Foundry Hosted Agents - scaffold with `bag init --runtime azure-foundry`, deploy either to the managed platform with `bag deploy --provider bnb --backend azure` or directly with `bag deploy --provider azure`; all cloud lifecycle execution is delegated to pinned `@bnbagent/deploy-cli@0.5.4`. Native MCP is not supported on Azure; use AgentCore for MCP.
+description: When the user wants to deploy or operate a bnbagent-studio project on Azure AI Foundry Hosted Agents - scaffold with `bag init --runtime azure-foundry`, deploy either to the managed platform with `bag deploy --provider bnb --backend azure` or directly with `bag deploy --provider azure`; all cloud lifecycle execution is delegated to pinned `@bnbagent/deploy-cli@0.5.10`. Native MCP is not supported on Azure; use AgentCore for MCP.
 ---
 
 > **Reference file** of the `bnbagent-studio` router skill - installed at `bnbagent-studio/references/` and loaded on demand (not a standalone skill). Route here via the router's decision tree.
@@ -13,7 +13,7 @@ Procedure for deploying and operating the seller Agent on **Azure AI Foundry Hos
 
 ```
 <workspace>/
-├── app/agent/             # the deployed code (src/foundryMain.ts host + Dockerfile here)
+├── app/agent/             # the deployed code (src/unifiedMain.ts host + Dockerfile here)
 │   ├── studio.toml        # [azure] block: location / account_name / subdomain / project_name / agent_endpoint
 │   └── Dockerfile         # the container image bnbagent-deploy builds + pushes
 └── .studio/               # secrets + wallets (workspace root - never in the image)
@@ -47,7 +47,7 @@ Procedure for deploying and operating the seller Agent on **Azure AI Foundry Hos
 
 > The encrypted keystore (`.studio/wallets/`) stays at the workspace root and rides only that secret channel - never baked into the image.
 
-Provider-native overrides go in the optional `studio.toml [deploy.foundry]` table (verbatim deploy-spec keys; deploy-cli 0.5.4 consumes `account`, `cpu`, `location`, `memory`, `project`, `projectEndpoint`, `protocol`, `registry` and warns about anything else). The `[azure]` block's `account_name` / `project_name` / `project_endpoint` / `location` win over conflicting `[deploy.foundry]` keys.
+Provider-native overrides go in the optional `studio.toml [deploy.foundry]` table (verbatim deploy-spec keys; deploy-cli 0.5.10 consumes `account`, `cpu`, `location`, `memory`, `project`, `projectEndpoint`, `protocol`, `registry` and warns about anything else). The `[azure]` block's `account_name` / `project_name` / `project_endpoint` / `location` win over conflicting `[deploy.foundry]` keys.
 
 ## Typical workflow
 

package/skills/references/bnbagent-studio-use-bnb-trial.md

@@ -9,7 +9,7 @@ description: Use when deploying or operating a bnbagent-studio seller on the BNB
 
 Treat this provider as a temporary testnet sandbox. Require a throwaway wallet, keep `bsc-testnet`, and explain that the runtime signing material is transmitted to the operator's managed secret store for the trial. Never use a mainnet key. Exception: `wallet.kind='altana'` ships only the bounded, budget-limited, revocable session - the throwaway-wallet advice does not apply; tighten the session instead (`bag wallet session grant --force --budget-u <small> --expiry-days <short>`) and never run `bag wallet new` on an altana project (it breaks the session's `[wallet].address` anchor).
 
-All auth and cloud lifecycle work must cross the pinned `@bnbagent/deploy-cli@0.5.4` boundary. Do not call a cloud CLI or platform REST routes directly. The managed backend is recipe-derived: `agentcore` uses AWS; `azure-foundry` uses Azure. For headless managed Azure, confirm with `bag deploy --provider bnb --backend azure --yes`; never treat `--backend` as a cross-cloud recipe converter.
+All auth and cloud lifecycle work must cross the pinned `@bnbagent/deploy-cli@0.5.10` boundary. Do not call a cloud CLI or platform REST routes directly. The managed backend is recipe-derived: `agentcore` uses AWS; `azure-foundry` uses Azure. For headless managed Azure, confirm with `bag deploy --provider bnb --backend azure --yes`; never treat `--backend` as a cross-cloud recipe converter.
 
 ## Select and authenticate
 

package/skills/references/bnbagent-studio-wiring-llm-tools.md

@@ -81,7 +81,7 @@ Note: `pieverseUsage` does a SIWE EIP-191 personal_sign (no on-chain effect, dom
 
 ```bash
 # from workspace root:
-ls app/agent/studio.toml && (ls app/agent/src/main.ts 2>/dev/null || ls app/agent/src/mcpMain.ts)
+ls app/agent/studio.toml && (ls app/agent/src/unifiedMain.ts 2>/dev/null || ls app/agent/src/mcpMain.ts)
 ```
 
 If `app/agent/src/tools.ts` already exists, the user has the AI SDK form already. Skip to Step 4 if they want to customize.
@@ -90,7 +90,7 @@ If `app/agent/src/tools.ts` already exists, the user has the AI SDK form already
 
 ## Step 2 - Identify the stack
 
-Look at `app/agent/src/main.ts` or `app/agent/src/mcpMain.ts` imports / `app/agent/package.json`:
+Look at `app/agent/src/unifiedMain.ts` or `app/agent/src/mcpMain.ts` imports / `app/agent/package.json`:
 
 | Sign in code | Stack |
 | --- | --- |
@@ -105,7 +105,7 @@ If AI SDK: emit the stock recipe and stop.
 bag recipe code tools-chain > app/agent/src/chainTools.ts    # full inventory + CHAIN_READ_TOOLS
 ```
 
-Then in the protocol entrypoint (`app/agent/src/main.ts` for A2A, `app/agent/src/mcpMain.ts` for MCP), pass the tool set into the generate call:
+Then in the protocol entrypoint (`app/agent/src/unifiedMain.ts` for A2A, `app/agent/src/mcpMain.ts` for MCP), pass the tool set into the generate call:
 
 ```ts
 import { LLM_READ_TOOLS } from "./tools.js";

package/recipes/runtimes/agentcore/code/{{PKG}}/main.ts.tmpl

@@ -1,347 +0,0 @@
-/**
- * Single A2A seller agent entrypoint. Generated by `bag recipe code agent`.
- *
- * This is the VALUABLE agent AND the SOLE key-holder/signer. It serves its
- * two ERC-8183 seller skills DIRECTLY over the A2A protocol on AWS Bedrock
- * AgentCore (`--protocol A2A`): an `@a2a-js/sdk` express app exposes the
- * agent card at `/.well-known/agent-card.json` + JSON-RPC `message/send` on
- * `0.0.0.0:9000` (`AGENT_PORT` overrides locally), plus `GET /ping` for the
- * AgentCore liveness contract. There is no separate forwarding service — the
- * agent IS the seller (see executor.ts + agentCard.ts).
- *
- * A2A skills (executor.ts):
- *
- *     negotiate     → read the FIXED list price → CLAMP to [min,max] → EIP-191 SIGN
- *                     the offer (no LLM, no tools) → return the signed offer (or reject)
- *     notify_funded → re-verify the funded job on-chain (fast) → ACK accepted at once,
- *                     then in the BACKGROUND: LLM work → manifest → storage →
- *                     submitResult (SIGN + broadcast). The buyer polls the chain for
- *                     the deliverable. Each notify also sweeps other FUNDED jobs
- *                     (buyer-push fallback). While background work is in flight the
- *                     `/ping` handler reports HEALTHY_BUSY so AgentCore keeps the
- *                     scale-to-zero runtime warm until it lands.
- *
- * Buyers reach this endpoint with an OAuth2 (Cognito) bearer — AgentCore A2A
- * mandates inbound auth (see agentCard.ts + `bag deploy provision-cognito`).
- *
- * ## Boundaries (do NOT cross — they are the whole point)
- *
- * - The agent does ALL deterministic SIGNING (quote-sign + submit + settle +
- *   automatic Pieverse LLM-credit auto-renew). ALL signing is FIXED code in
- *   `signing.ts` — NEVER an LLM-callable tool (money never in the LLM).
- * - The price is a FIXED list price from studio.toml (clamped before
- *   signing) — the LLM never prices; it only PRODUCES the work text in the
- *   delivery step.
- * - Chain access for the LLM is READ-ONLY tools only (`tools.ts`).
- * - `settle` (claim payment after the dispute window) is operator-driven —
- *   run `bag erc8183 settle <job_id>`; it is deliberately NOT an A2A skill.
- */
-
-import { createHash } from "node:crypto";
-import { pathToFileURL } from "node:url";
-import {
-  GetSecretValueCommand,
-  SecretsManagerClient,
-} from "@aws-sdk/client-secrets-manager";
-import { DefaultRequestHandler, InMemoryTaskStore } from "@a2a-js/sdk/server";
-import {
-  agentCardHandler,
-  jsonRpcHandler,
-  UserBuilder,
-} from "@a2a-js/sdk/server/express";
-import {
-  loadStudioToml,
-  type TomlTable,
-} from "@bnbagent/studio-runtime/config";
-import {
-  ensureAltanaSessionLoaded,
-  ensureKeystoreMaterialized,
-  ensureTwakMaterialized,
-  getWallet,
-} from "@bnbagent/studio-runtime/wallet";
-import {
-  createEnvelopeMiddleware,
-  X402_SELL_PATH,
-  type X402HttpRequest,
-  type X402RunWork,
-  X402Seller,
-} from "@bnbagent/studio-runtime/x402";
-import { generateText, stepCountIs } from "ai";
-import express from "express";
-import { buildAgentCard } from "./agentCard.js";
-import { SellerAgentExecutor } from "./executor.js";
-import { buildModel } from "./model.js";
-import type { RunWork } from "./sellerCore.js";
-import { LLM_READ_TOOLS } from "./tools.js";
-
-const APP_NAME = "agent";
-
-/**
- * Deliverable `generator` label: this seller's own name, read from
- * studio.toml `[project].name` (minus the `-agent` suffix) so each delivered
- * manifest is self-identifying. Best-effort — falls back to `APP_NAME` if
- * the config can't be read.
- */
-function generatorTag(): string {
-  let name = "";
-  try {
-    const cfg = loadStudioToml();
-    name = String(((cfg.project ?? {}) as Record<string, unknown>).name ?? "");
-  } catch {
-    // a metadata label must never break delivery
-    return APP_NAME;
-  }
-  return name.endsWith("-agent")
-    ? name.slice(0, -"-agent".length)
-    : name || APP_NAME;
-}
-
-// ── Runtime secrets ───────────────────────────────────────────────────────────
-// Keep plaintext secrets OUT of agentcore.json. When BNBAGENT_RUNTIME_SECRET_ID
-// is set (deployed runtime), pull a JSON {ENV_NAME: value} blob from AWS
-// Secrets Manager into the process env BEFORE anything reads it (keystore
-// unlock, provider key, buildModel, Cognito OAuth env). No-op locally, where
-// .env.local already populated the environment. In a deployed runtime the
-// managed secret bundle is authoritative and replaces any stale spec-level
-// value left by an earlier runtime revision.
-async function loadRuntimeSecrets(): Promise<void> {
-  const secretId = process.env.BNBAGENT_RUNTIME_SECRET_ID;
-  if (!secretId) {
-    return;
-  }
-  const resp = await new SecretsManagerClient({}).send(
-    new GetSecretValueCommand({ SecretId: secretId }),
-  );
-  const bundle = JSON.parse(resp.SecretString ?? "{}") as Record<
-    string,
-    unknown
-  >;
-  for (const [key, value] of Object.entries(bundle)) {
-    process.env[key] = String(value);
-  }
-  const pieverseKey = process.env.PIEVERSE_LLM_API_KEY;
-  if (pieverseKey) {
-    const fingerprint = createHash("sha256")
-      .update(pieverseKey, "utf-8")
-      .digest("hex")
-      .slice(0, 12);
-    console.info(
-      `[runtime-secrets] PIEVERSE_LLM_API_KEY source=secretsmanager sha256=${fingerprint}…`,
-    );
-  }
-}
-
-/** studio.toml `[network].default` (best-effort; used by the funded sweep). */
-function defaultNetwork(): string {
-  try {
-    const cfg = loadStudioToml();
-    return String(
-      ((cfg.network ?? {}) as Record<string, unknown>).default ?? "bsc-testnet",
-    );
-  } catch {
-    return "bsc-testnet";
-  }
-}
-
-// ── One-shot LLM helper (the executor's delivery work hook) ──────────────────
-// LLM credit auto-renew (Pieverse path): `buildModel()` (in model.ts) returns
-// a model wrapped with a middleware that auto-tops up the active Pieverse key
-// before each generate call when [llm.auto_renew] is enabled. That top-up is
-// the ONLY automatic signing path outside signing.ts — it is budget-gated and
-// is NOT an LLM tool. It rides transparently into the delivery step.
-//
-// The LLM runs only in an authorized value step: verified ERC-8183 delivery
-// or x402 work after its payment/free gate. `negotiate` is rule-based and
-// never touches the LLM. The read-only chain tools are
-// attached so the work can read on-chain context if it needs to — drop them
-// from `tools.ts` if your work doesn't read chain. Signing / settle are NEVER
-// tools — they are fixed code in signing.ts, triggered by the A2A skills,
-// never callable by the LLM. (The one deliberate exception: the x402-buyer
-// recipe's PAID fetch tools — see the `tools:` note below — the LLM picks the
-// URL, but who gets paid and the per-call/daily caps stay locked in
-// studio.toml.)
-export function buildRunWork(): RunWork {
-  // The model is resolved LAZILY on first delivery, not at boot: a seller
-  // with no provider key yet must still serve negotiate (which never calls
-  // the LLM) — missing-key errors surface at notify_funded delivery time.
-  let model: ReturnType<typeof buildModel> | undefined;
-  return async (prompt, { abortSignal }) => {
-    model ??= buildModel(); // managed model with the auto-renew hook (delivery only)
-    const result = await generateText({
-      model,
-      system:
-        "You are a seller agent. The runtime has already authorized this task " +
-        "through its configured commerce rail. Complete the user's task now; " +
-        "do not ask for a job ID or additional payment. " +
-        "Be concrete and concise. Use the read-only chain tools when on-chain " +
-        "context helps. If a paid-data tool such as `buy_with_x402` is available " +
-        "to you, USE IT to fetch the data a task needs — those merchants (e.g. " +
-        "CoinMarketCap) charge via on-chain wallet payment, NOT an API key; never " +
-        "reply that you cannot complete the task for lack of an API key.",
-      prompt,
-      // LLM_READ_TOOLS = read-only chain tools (wallet, balances,
-      // ERC-8004/8183 queries). Edit `tools.ts` to add/remove. These are
-      // READ-ONLY — the agent never signs via a tool; all signing is in
-      // signing.ts (fixed code).
-      // To let the agent BUY paid data at work time (e.g. CMC market data
-      // after `bag x402 trust cmc` + `bag recipe code x402-buyer`), spread
-      // the emitted tool set — payee + per-call/daily caps stay locked in
-      // studio.toml:
-      //   import { X402_BUYER_TOOLS } from "./x402Buyer.js";
-      //   tools: { ...LLM_READ_TOOLS, ...X402_BUYER_TOOLS },
-      tools: LLM_READ_TOOLS,
-      stopWhen: stepCountIs(8), // bounded tool-call loop, then final text
-      abortSignal,
-    });
-    return result.text.trim();
-  };
-}
-
-function hasErc8183Rail(cfg: TomlTable): boolean {
-  const payments = asTable(cfg.payments);
-  return asTable(payments?.erc8183) !== null;
-}
-
-function asTable(value: unknown): TomlTable | null {
-  return value !== null && typeof value === "object" && !Array.isArray(value)
-    ? (value as TomlTable)
-    : null;
-}
-
-function flatHeaders(
-  headers: Record<string, string | string[] | undefined>,
-): Record<string, string> {
-  const out: Record<string, string> = {};
-  for (const [name, value] of Object.entries(headers)) {
-    if (typeof value === "string") out[name] = value;
-    else if (value !== undefined) out[name] = value[0] ?? "";
-  }
-  return out;
-}
-
-function flatQuery(query: Record<string, unknown>): Record<string, string> {
-  const out: Record<string, string> = {};
-  for (const [name, value] of Object.entries(query)) {
-    if (typeof value === "string") out[name] = value;
-  }
-  return out;
-}
-
-function x402Work(runWork: RunWork): X402RunWork {
-  return ({ prompt }) => runWork(prompt, { sessionId: "x402" });
-}
-
-// ── serving ───────────────────────────────────────────────────────────────────
-
-async function main(): Promise<void> {
-  await loadRuntimeSecrets();
-
-  // Wallet material is NEVER bundled into the deploy artifact. `bag deploy`
-  // injects it via Secrets Manager and these calls (run once at cold start,
-  // before any signing) materialize it on disk. Each is a no-op for the
-  // other wallet kind and locally, where the wallet already lives on disk:
-  //  - evm-local: WALLET_KEYSTORE_JSON → keystore file (unlocked with WALLET_PASSWORD)
-  //  - twak:      TWAK_WALLET_JSON / TWAK_CREDENTIALS_JSON → $TMPDIR/twak-home/.twak
-  //               (exported as TWAK_HOME_DIR; twak reads TWAK_WALLET_PASSWORD itself)
-  ensureKeystoreMaterialized();
-  ensureTwakMaterialized();
-  await ensureAltanaSessionLoaded();
-
-  const cfg = loadStudioToml();
-  const rails = { erc8183: hasErc8183Rail(cfg) };
-  const host = process.env.AGENT_BIND_HOST || "0.0.0.0";
-  const port = Number(process.env.AGENT_PORT || "9000");
-  const runWork = buildRunWork();
-
-  // The executor backs the seller skills with signing.ts fixed code (NEVER an
-  // LLM tool). The express app hosts the agent card + JSON-RPC message/send
-  // on 0.0.0.0:9000 and GET /ping for AgentCore's liveness probe.
-  const executor = new SellerAgentExecutor({
-    runWork,
-    generator: generatorTag(),
-    network: defaultNetwork(),
-    commerceSkills: rails.erc8183,
-  });
-  const agentCard = buildAgentCard({ commerceSkills: rails.erc8183 });
-  const seller = await X402Seller.create({
-    cfg,
-    runWork: x402Work(runWork),
-    walletAddress: getWallet().address,
-    resourceUrl: `${
-      process.env.AGENTCORE_RUNTIME_URL ?? `http://localhost:${port}`
-    }${X402_SELL_PATH}`,
-  });
-
-  const handler = new DefaultRequestHandler(
-    agentCard,
-    new InMemoryTaskStore(),
-    executor,
-  );
-
-  const app = express();
-
-  // GET /ping status fed to AgentCore: HEALTHY_BUSY while a background
-  // delivery is in flight, else HEALTHY.
-  //
-  // notify_funded acks immediately and runs the slow work (LLM + on-chain
-  // submit) in the background. Reporting HEALTHY_BUSY tells AgentCore the
-  // runtime is still working, so the scale-to-zero runtime is NOT reaped on
-  // idle before delivery lands (bounded by the session max-lifetime; ≤8h).
-  app.get("/ping", (_req, res) => {
-    res.json({ status: executor.isBusy() ? "HEALTHY_BUSY" : "HEALTHY" });
-  });
-
-  if (seller.state !== "disabled") {
-    app.all(
-      X402_SELL_PATH,
-      express.text({ type: "*/*", limit: "1mb" }),
-      async (req, res) => {
-        const request: X402HttpRequest = {
-          method: req.method,
-          path: req.path,
-          query: flatQuery(req.query),
-          headers: flatHeaders(req.headers),
-          body:
-            typeof req.body === "string"
-              ? req.body
-              : JSON.stringify(req.body ?? ""),
-        };
-        const out = await seller.handle(request);
-        res.status(out.status).set(out.headers).send(out.body);
-      },
-    );
-  }
-
-  app.use(express.json({ limit: "8mb" }));
-  app.use(createEnvelopeMiddleware({ port }));
-
-  app.use(
-    "/.well-known/agent-card.json",
-    agentCardHandler({ agentCardProvider: handler }),
-  );
-  app.use(
-    jsonRpcHandler({
-      requestHandler: handler,
-      userBuilder: UserBuilder.noAuthentication,
-    }),
-  );
-
-  // AgentCore's A2A contract is 0.0.0.0:9000. Do not honor the HTTP
-  // protocol's $PORT=8080 convention here; AGENT_PORT is the local-dev /
-  // rendered-container override.
-  app.listen(port, host, () => {
-    console.log(`[seller-agent] A2A serving on ${host}:${port}`);
-  });
-}
-
-// Run only as an entrypoint (`node main.js` / the AgentCore runtime), never
-// on import — tests import the builders above without starting a server.
-const isMain =
-  process.argv[1] !== undefined &&
-  import.meta.url === pathToFileURL(process.argv[1]).href;
-if (isMain) {
-  main().catch((e) => {
-    console.error("[seller-agent] fatal:", e);
-    process.exit(1);
-  });
-}