@bnbagent/studio-cli 0.0.11-alpha.3 → 0.0.11-alpha.4

package/dist/bag.js

@@ -50,7 +50,7 @@ import {
   x402SellerIsFree,
   x402SellerPricingState,
   x402SellerUsesB402
-} from "./chunk-MIYN6U2D.js";
+} from "./chunk-GKFTJDDJ.js";
 import {
   TWAK_CLI_MIN_VERSION,
   TWAK_CLI_VERSION,
@@ -228,7 +228,7 @@ import {
 var CAMPAIGN_DOC_URL = "https://www.bnbchain.org/en/blog/bnb-agent-studio-is-live-on-bnb-chain-ai-agents-from-one-prompt";
 var CAMPAIGN_CHECK_TIMEOUT_MS = 6e3;
 async function fetchCampaignActive() {
-  const { bnbPlatformApiUrl: bnbPlatformApiUrl2 } = await import("./deployCli-AED2MLUB.js");
+  const { bnbPlatformApiUrl: bnbPlatformApiUrl2 } = await import("./deployCli-YYV7FFFG.js");
   const controller = new AbortController();
   const timer = setTimeout(() => controller.abort(), CAMPAIGN_CHECK_TIMEOUT_MS);
   try {
@@ -4270,6 +4270,7 @@ async function deployAzureFoundry(opts) {
           "deploy",
           "-f",
           files.configPath,
+          ...opts.onboard ? ["--onboard"] : [],
           ...opts.skipSmoke ? [] : ["--smoke"],
           ...extra
         ],
@@ -14390,6 +14391,7 @@ function utcStamp() {
 function buyerAccess(root) {
   const base = bnbPlatformApiUrl();
   const cfg = loadAgentCfg(root);
+  const backend = platformCfg(root).backend === "azure" ? "azure" : "aws";
   const faces = stackFaces(tableOf12(cfg, "stack"), tableOf12(cfg, "payments"));
   const protocol = nativeProtocolOf(faces);
   const rawAgentId = platformCfg(root).agent_id;
@@ -14418,6 +14420,7 @@ function buyerAccess(root) {
   }
   return {
     base,
+    backend,
     faces,
     protocol,
     agentId,
@@ -14838,7 +14841,6 @@ function printAgentClientPrompt(root, invokeUrl, status) {
   const base = access.base;
   const tokenUrl = access.tokenUrl;
   const deploymentId = String(platformCfg(root).deployment_id || "n/a");
-  const managedBackend = platformCfg(root).backend === "azure" ? "azure" : "aws";
   const selftestLine = "- Quick self-test (operator): run `bag deploy info --with-curl`";
   const rt = agentId ? `${base}/v1/rt/${agentId}` : `${base}/v1/rt/<agentId>`;
   const cardUrl = `${rt}/.well-known/agent-card.json`;
@@ -14918,7 +14920,7 @@ function printAgentClientPrompt(root, invokeUrl, status) {
       "- The anonymous x402 route does not use the OAuth2 token flow shown for ERC-8183."
     ],
     ...!x402Only && hasA2aFace(faces) ? [
-      managedBackend === "azure" ? '- A2A callers: Foundry incoming A2A is text-only. Send the payload as a JSON-string TEXT part \u2014 parts:[{"kind":"text","text":"{\\"skill\\":\\"negotiate\\",...}"}].' : '- A2A callers: send the payload as a DATA part, NOT text \u2014 parts:[{"kind":"data","data":{ ...payload above... }}]. A JSON string in a "text" part is rejected (the runtime only reads data parts, so no skill is parsed).'
+      '- A2A callers: send the payload as a DATA part, NOT text \u2014 parts:[{"kind":"data","data":{ ...payload above... }}]. The managed gateway adapts this canonical buyer contract to the selected backend.'
     ] : [],
     "",
     "YOUR TASK",
@@ -15306,7 +15308,10 @@ function registerDeploy(program) {
       (opts) => cmdDestroy(opts)
     )
   );
-  p.command("logs").description("Show the selected deployment's logs via bnbagent-deploy.").option("--project-root <path>", "Override project root.").addOption(providerOption()).option("--since <dur>", "Lower bound, e.g. 5m/2h/1d (default 10m).", "10m").option("--follow", "Stream new lines (poll ~3s).").option("--limit <n>", "Number of recent lines (default 50).").option("--session <id>", "Container session id.").addOption(
+  p.command("logs").description("Show the selected deployment's logs via bnbagent-deploy.").option("--project-root <path>", "Override project root.").addOption(providerOption()).option("--since <dur>", "Lower bound, e.g. 5m/2h/1d (default 10m).", "10m").option("--follow", "Stream new lines (poll ~3s).").option("--limit <n>", "Number of recent lines (default 50).").option(
+    "--session <id>",
+    "Managed Azure runtime session; capture x-agent-session-id from buyer response headers."
+  ).addOption(
     new Option4(
       "--job <id>",
       "Deprecated Studio direct-CloudWatch filter."
@@ -16025,6 +16030,7 @@ async function cmdAgent(opts, agentcoreArgs) {
     rc = await deployAzureFoundry({
       projectRoot: root,
       extraArgs: stripLeadingDdash2(agentcoreArgs),
+      onboard: Boolean(opts.yes),
       skipSmoke: opts.skipSmoke
     });
     if (rc !== 0) {
@@ -16697,12 +16703,24 @@ Quick-verify x402 endpoint:
     -d '{"jsonrpc":"2.0","id":2,"method":"tools/list"}'`
     );
   } else {
+    const captureAzureSession = access.backend === "azure";
+    if (captureAzureSession) {
+      printOut("  HDR=$(mktemp)");
+    }
     printOut(
-      `  curl -X POST ${invokeUrl}/a2a \\
+      `  curl ${captureAzureSession ? '-sS -D "$HDR" ' : ""}-X POST ${invokeUrl}/a2a \\
     -H "Authorization: Bearer $TOKEN" \\
     -H "Content-Type: application/json" \\
     -d '{"jsonrpc":"2.0","id":1,"method":"message/send","params":{"message":{"role":"user","messageId":"nego-1","parts":[{"kind":"data","data":{"skill":"negotiate","task_description":"Create a concise launch checklist","terms":{"deliverables":"A 5-item checklist","quality_standards":"Clear and actionable"}}}]}}}'`
     );
+    if (captureAzureSession) {
+      printOut(
+        `  SESSION=$(awk 'tolower($1)=="x-agent-session-id:"{gsub(/\\r/,"",$2);print $2}' "$HDR")
+  rm -f "$HDR"
+  # Inspect this Azure buyer call's runtime logs when needed:
+  bag deploy logs --provider bnb --session "$SESSION"`
+      );
+    }
     if (hasMcpFace(access.faces)) {
       printOut(
         `  # MCP is also published at ${invokeUrl}/mcp through the buffered platform gateway tunnel; initialize a streamable-HTTP session before tools/list.`

package/dist/{chunk-MIYN6U2D.js → chunk-GKFTJDDJ.js}

@@ -686,8 +686,8 @@ function packageRoot() {
   }
 }
 function studioCliVersion() {
-  if ("0.0.11-alpha.3") {
-    return "0.0.11-alpha.3";
+  if ("0.0.11-alpha.4") {
+    return "0.0.11-alpha.4";
   }
   const file = path3.join(packageRoot(), "package.json");
   const pkg = JSON.parse(fs3.readFileSync(file, "utf-8"));
@@ -904,7 +904,7 @@ function isTable(value) {
 }
 
 // src/cli/_deploy/deployCli.ts
-var DEPLOY_CLI_VERSION = "0.5.10";
+var DEPLOY_CLI_VERSION = "0.5.11";
 var DEPLOY_CLI_PACKAGE = `@bnbagent/deploy-cli@${DEPLOY_CLI_VERSION}`;
 var BNB_PLATFORM_API_URL = "https://bnbagent-api.bnbchain.world";
 var BNB_PLATFORM_API_URL_ENV = "BNBAGENT_API_URL";
@@ -1261,7 +1261,10 @@ function trialFromDeployCliJson(data) {
   };
 }
 function bnbEnv() {
-  return { [BNB_PLATFORM_API_URL_ENV]: bnbPlatformApiUrl() };
+  return {
+    [BNB_PLATFORM_API_URL_ENV]: bnbPlatformApiUrl(),
+    BNBAGENT_CLI_SURFACE: "studio"
+  };
 }
 async function runPlatformAccountCommand(argv, opts = {}) {
   const run = async (args, cwd) => {

package/dist/{deployCli-AED2MLUB.js → deployCli-YYV7FFFG.js}

@@ -18,7 +18,7 @@ import {
   runPlatformAccountCommand,
   trialFromDeployCliJson,
   withDeployFiles
-} from "./chunk-MIYN6U2D.js";
+} from "./chunk-GKFTJDDJ.js";
 import "./chunk-RO726HJG.js";
 export {
   BNB_PLATFORM_API_URL,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bnbagent/studio-cli",
-  "version": "0.0.11-alpha.3",
+  "version": "0.0.11-alpha.4",
   "description": "Skills-first toolkit and bag CLI for BNB Chain seller agents: ERC-8004 identity, ERC-8183 escrowed commerce, and x402 payments.",
   "keywords": [
     "bnb-chain",
@@ -54,7 +54,7 @@
     "tar": "^7.4.0",
     "viem": "^2.54.0",
     "yaml": "^2.9.0",
-    "@bnbagent/studio-runtime": "0.0.11-alpha.3"
+    "@bnbagent/studio-runtime": "0.0.11-alpha.4"
   },
   "devDependencies": {
     "@a2a-js/sdk": "^0.3.14",

package/skills/bnbagent-studio.md

@@ -53,7 +53,7 @@ Treat ERC-8183 amounts as decimal strings at CLI/config boundaries and `bigint`
 
 ## CLI groups at a glance
 
-`init`, `scan`, `recipe`, `skills`, `wallet`, `erc8004`, `erc8183`, `x402`, `agents`, `config`, `env`, `dev`, `doctor`, `audit`, `deploy`, `platform`, `llm`, `bundle`, `budget` - see `bag --help` for details. `bag deploy [--provider bnb\|aws] [--backend aws\|azure]` is the primary deploy command; `--backend` is valid only for provider `bnb` and confirms the recipe-derived managed backend. `prepare`, `verify`, `status`, `info`, `destroy`, `logs`, and `fix-gitignore` remain lifecycle subcommands (`deploy agent` is a deprecated compatibility alias). Provider deploy/status/logs/destroy and deploy-time credential validation are delegated to pinned `@bnbagent/deploy-cli@0.5.10`.
+`init`, `scan`, `recipe`, `skills`, `wallet`, `erc8004`, `erc8183`, `x402`, `agents`, `config`, `env`, `dev`, `doctor`, `audit`, `deploy`, `platform`, `llm`, `bundle`, `budget` - see `bag --help` for details. `bag deploy [--provider bnb\|aws] [--backend aws\|azure]` is the primary deploy command; `--backend` is valid only for provider `bnb` and confirms the recipe-derived managed backend. `prepare`, `verify`, `status`, `info`, `destroy`, `logs`, and `fix-gitignore` remain lifecycle subcommands (`deploy agent` is a deprecated compatibility alias). Provider deploy/status/logs/destroy and deploy-time credential validation are delegated to pinned `@bnbagent/deploy-cli@0.5.11`.
 
 ## Tool surface
 

package/skills/references/bnbagent-studio-use-aws-agentcore.md

@@ -1,6 +1,6 @@
 ---
 name: bnbagent-studio-use-aws-agentcore
-description: When the user wants to deploy or operate a bnbagent-studio project on AWS Bedrock AgentCore - deploy with `bag deploy --provider aws` (all cloud lifecycle mutations are delegated to pinned `@bnbagent/deploy-cli@0.5.10`), inspect with `bag deploy status` / `logs --provider aws` / `verify --provider aws`, and tear down with `bag deploy destroy --provider aws --execute [--purge]`. Also covers AWS credential prerequisites, the optional read-only quota probe, and the runtime-secret channel.
+description: When the user wants to deploy or operate a bnbagent-studio project on AWS Bedrock AgentCore - deploy with `bag deploy --provider aws` (all cloud lifecycle mutations are delegated to pinned `@bnbagent/deploy-cli@0.5.11`), inspect with `bag deploy status` / `logs --provider aws` / `verify --provider aws`, and tear down with `bag deploy destroy --provider aws --execute [--purge]`. Also covers AWS credential prerequisites, the optional read-only quota probe, and the runtime-secret channel.
 ---
 
 > **Reference file** of the `bnbagent-studio` router skill - installed at `bnbagent-studio/references/` and loaded on demand (not a standalone skill). Route here via the router's decision tree.

package/skills/references/bnbagent-studio-use-azure-foundry.md

@@ -1,6 +1,6 @@
 ---
 name: bnbagent-studio-use-azure-foundry
-description: When the user wants to deploy or operate a bnbagent-studio project on Azure AI Foundry Hosted Agents - scaffold with `bag init --runtime azure-foundry`, deploy either to the managed platform with `bag deploy --provider bnb --backend azure` or directly with `bag deploy --provider azure`; all cloud lifecycle execution is delegated to pinned `@bnbagent/deploy-cli@0.5.10`. Native MCP is not supported on Azure; use AgentCore for MCP.
+description: When the user wants to deploy or operate a bnbagent-studio project on Azure AI Foundry Hosted Agents - scaffold with `bag init --runtime azure-foundry`, deploy either to the managed platform with `bag deploy --provider bnb --backend azure` or directly with `bag deploy --provider azure`; all cloud lifecycle execution is delegated to pinned `@bnbagent/deploy-cli@0.5.11`. Native MCP is not supported on Azure; use AgentCore for MCP.
 ---
 
 > **Reference file** of the `bnbagent-studio` router skill - installed at `bnbagent-studio/references/` and loaded on demand (not a standalone skill). Route here via the router's decision tree.
@@ -31,7 +31,7 @@ Procedure for deploying and operating the seller Agent on **Azure AI Foundry Hos
 
 1. **Bun 1.3+ (`bunx`) on PATH** - the pinned `@bnbagent/deploy-cli` runs through it.
 2. **Docker running** - the image is built locally (linux/amd64) before push.
-3. **An Azure subscription** the operator may provision in (Foundry account/project, container registry, hosted agent). Before a local self-deploy, run `bunx --bun @bnbagent/deploy-cli@0.5.10 login --provider azure`; use OIDC/service-principal credentials in CI.
+3. **An Azure subscription** the operator may provision in (Foundry account/project, container registry, hosted agent). Before a local self-deploy, run `bunx --bun @bnbagent/deploy-cli@0.5.11 login --provider azure`; use OIDC/service-principal credentials in CI.
 
 ## ⚠️ Foundry gotchas (read before deploying)
 
@@ -49,7 +49,7 @@ Procedure for deploying and operating the seller Agent on **Azure AI Foundry Hos
 
 > The encrypted keystore (`.studio/wallets/`) stays at the workspace root and rides only that secret channel - never baked into the image.
 
-Provider-native overrides go in the optional `studio.toml [deploy.foundry]` table (verbatim deploy-spec keys; deploy-cli 0.5.10 consumes `account`, `cpu`, `location`, `memory`, `project`, `projectEndpoint`, `protocol`, `registry` and warns about anything else). The `[azure]` block's `account_name` / `project_name` / `project_endpoint` / `location` win over conflicting `[deploy.foundry]` keys.
+Provider-native overrides go in the optional `studio.toml [deploy.foundry]` table (verbatim deploy-spec keys; deploy-cli 0.5.11 consumes `account`, `cpu`, `location`, `memory`, `project`, `projectEndpoint`, `protocol`, `registry` and warns about anything else). The `[azure]` block's `account_name` / `project_name` / `project_endpoint` / `location` win over conflicting `[deploy.foundry]` keys.
 
 ## Typical workflow
 
@@ -74,6 +74,11 @@ bag deploy --provider azure                  # delegated: onboard → build+push
 
 `bag deploy --provider azure` runs an HTTP contract smoke by default (pass `--skip-smoke` to omit it) and captures the Foundry endpoint into `app/agent/studio.toml [azure].agent_endpoint`. If Foundry creates the resource but that post-create check fails, Studio still records the discovered endpoint so `status`, `logs`, and `destroy` can manage the resource; the deploy command continues to return non-zero.
 
+For a first deploy in non-interactive automation, pass `--yes`. Studio treats
+that as confirmation of the full deployment plan and delegates explicit
+Foundry project onboarding. Configure `[azure]` account/subscription selection
+when several candidates are accessible so no prompt or guess is required.
+
 ### C. Validate / operate
 
 ```bash

package/skills/references/bnbagent-studio-use-bnb-trial.md

@@ -9,7 +9,7 @@ description: Use when deploying or operating a bnbagent-studio seller on the BNB
 
 Treat this provider as a temporary testnet sandbox. Require a throwaway wallet, keep `bsc-testnet`, and explain that the runtime signing material is transmitted to the operator's managed secret store for the trial. Never use a mainnet key. Exception: `wallet.kind='altana'` ships only the bounded, budget-limited, revocable session - the throwaway-wallet advice does not apply; tighten the session instead (`bag wallet session grant --force --budget-u <small> --expiry-days <short>`) and never run `bag wallet new` on an altana project (it breaks the session's `[wallet].address` anchor).
 
-All auth and cloud lifecycle work must cross the pinned `@bnbagent/deploy-cli@0.5.10` boundary. Do not call a cloud CLI or platform REST routes directly. The managed backend is recipe-derived: `agentcore` uses AWS; `azure-foundry` uses Azure. For headless managed Azure, confirm with `bag deploy --provider bnb --backend azure --yes`; never treat `--backend` as a cross-cloud recipe converter.
+All auth and cloud lifecycle work must cross the pinned `@bnbagent/deploy-cli@0.5.11` boundary. Do not call a cloud CLI or platform REST routes directly. The managed backend is recipe-derived: `agentcore` uses AWS; `azure-foundry` uses Azure. For headless managed Azure, confirm with `bag deploy --provider bnb --backend azure --yes`; never treat `--backend` as a cross-cloud recipe converter.
 
 ## Select and authenticate