@bnbagent/studio-cli 0.0.11-alpha.5 → 0.0.11-alpha.7

package/dist/bag.js

@@ -52,7 +52,7 @@ import {
   x402SellerIsFree,
   x402SellerPricingState,
   x402SellerUsesB402
-} from "./chunk-XY6EZGQF.js";
+} from "./chunk-3QSCJAXQ.js";
 import {
   TWAK_CLI_MIN_VERSION,
   TWAK_CLI_VERSION,
@@ -230,7 +230,7 @@ import {
 var CAMPAIGN_DOC_URL = "https://www.bnbchain.org/en/blog/bnb-agent-studio-is-live-on-bnb-chain-ai-agents-from-one-prompt";
 var CAMPAIGN_CHECK_TIMEOUT_MS = 6e3;
 async function fetchCampaignActive() {
-  const { bnbPlatformApiUrl: bnbPlatformApiUrl2 } = await import("./deployCli-OQICQCKT.js");
+  const { bnbPlatformApiUrl: bnbPlatformApiUrl2 } = await import("./deployCli-374HYGDA.js");
   const controller = new AbortController();
   const timer = setTimeout(() => controller.abort(), CAMPAIGN_CHECK_TIMEOUT_MS);
   try {
@@ -3380,6 +3380,10 @@ function recordedX402Snapshot(azure) {
     credentialsComplete
   };
 }
+function recordedX402Carrier(azure) {
+  const carrier = text(azure.deployed_x402_carrier);
+  return carrier === "http-envelope-v1" || carrier === "incompatible-scaffold" ? carrier : void 0;
+}
 function descriptorName(workspaceRoot) {
   try {
     const data = JSON.parse(
@@ -3438,6 +3442,7 @@ function discoverRecordedDeployments(root) {
   const azureDeploymentId = text(azure.deployment_id);
   const azureFaces = protocolFaces(azure.deployed_faces);
   const azureX402 = recordedX402Snapshot(azure);
+  const azureX402Carrier = recordedX402Carrier(azure);
   if (azureEndpoint || azureDeploymentId || text(azure.last_deploy_at)) {
     found.push({
       provider: "azure",
@@ -3447,6 +3452,7 @@ function discoverRecordedDeployments(root) {
       endpoint: azureEndpoint,
       ...azureFaces ? { faces: azureFaces } : {},
       ...azureX402 ? { x402: azureX402 } : {},
+      ...azureX402Carrier ? { x402Carrier: azureX402Carrier } : {},
       status: "active"
     });
   }
@@ -4167,6 +4173,52 @@ function isFile6(p) {
     return false;
   }
 }
+function inspectAzureX402Carrier(agentRoot2) {
+  const dockerfile = path16.join(agentRoot2, "Dockerfile");
+  let entryStem = null;
+  if (isFile6(dockerfile)) {
+    const docker = fs17.readFileSync(dockerfile, "utf8");
+    const match = docker.match(
+      /(?:CMD|ENTRYPOINT)\s*\[\s*["']node["']\s*,\s*["'](?:\.\/)?dist\/([^"'/]+)\.js["']\s*\]/m
+    );
+    entryStem = match?.[1] ?? null;
+  }
+  if (entryStem === null) {
+    return {
+      status: "incompatible-scaffold",
+      entrypoint: null,
+      detail: "Dockerfile does not identify the built Azure entrypoint as CMD/ENTRYPOINT node dist/<name>.js"
+    };
+  }
+  const entrypoint = `src/${entryStem}.ts`;
+  const entryFile = path16.join(agentRoot2, entrypoint);
+  if (!isFile6(entryFile)) {
+    return {
+      status: "incompatible-scaffold",
+      entrypoint,
+      detail: `${entrypoint} is selected by Dockerfile but its source is missing`
+    };
+  }
+  const source = fs17.readFileSync(entryFile, "utf8").replace(/\/\*[\s\S]*?\*\//g, "").replace(/^\s*\/\/.*$/gm, "");
+  const hasSeller = /\bX402Seller\s*\.\s*create\s*\(/m.test(source);
+  const hasCarrier = /\bcreateEnvelopeMiddleware\s*\(/m.test(source);
+  if (!hasSeller || !hasCarrier) {
+    const missing = [
+      ...hasCarrier ? [] : ["createEnvelopeMiddleware"],
+      ...hasSeller ? [] : ["X402Seller.create"]
+    ];
+    return {
+      status: "incompatible-scaffold",
+      entrypoint,
+      detail: `${entrypoint} does not mount ${missing.join(" and ")}`
+    };
+  }
+  return {
+    status: "http-envelope-v1",
+    entrypoint,
+    detail: `${entrypoint} mounts the X402 seller and envelope carrier`
+  };
+}
 function tableOf4(cfg, key) {
   const v = cfg[key];
   return v !== null && typeof v === "object" && !Array.isArray(v) ? v : {};
@@ -4195,11 +4247,13 @@ function recordAzureDeployment(root, data, endpoint) {
   const tomlPath = path16.join(agentRoot2, "studio.toml");
   let deployedFaces = null;
   let deployedX402 = null;
+  let deployedX402Carrier = null;
   try {
     const cfg = loadStudioCfg(deployWorkspaceRoot(root));
     deployedFaces = stackFaces(tableOf4(cfg, "stack"), tableOf4(cfg, "payments"));
     if (hasX402Face(deployedFaces)) {
       deployedX402 = x402DeploymentSnapshot(agentRoot2, "self");
+      deployedX402Carrier = inspectAzureX402Carrier(agentRoot2).status;
     }
   } catch {
   }
@@ -4233,6 +4287,12 @@ function recordAzureDeployment(root, data, endpoint) {
         "deployed_x402_credentials_complete",
         deployedX402?.credentialsComplete ?? false
       );
+      patchTomlKv(
+        tomlPath,
+        "azure",
+        "deployed_x402_carrier",
+        deployedX402Carrier ?? ""
+      );
     }
     patchTomlKv(tomlPath, "azure", "last_deploy_at", (/* @__PURE__ */ new Date()).toISOString());
   } catch {
@@ -4255,6 +4315,7 @@ function clearAzureEndpoint(root) {
     patchTomlKv(tomlPath, "azure", "deployed_x402_status", "");
     patchTomlKv(tomlPath, "azure", "deployed_x402_price_mode", "");
     patchTomlKv(tomlPath, "azure", "deployed_x402_credentials_complete", false);
+    patchTomlKv(tomlPath, "azure", "deployed_x402_carrier", "");
   } catch {
   }
 }
@@ -4362,7 +4423,24 @@ async function deployAzureFoundry(opts) {
 async function destroyAzureFoundry(opts) {
   const workspaceRoot = deployWorkspaceRoot(opts.projectRoot);
   if (!opts.execute) {
-    const extra = opts.purge ? " --purge" : "";
+    if (opts.purge || opts.purgeImages) {
+      return withDeployFiles(
+        opts.projectRoot,
+        { target: "azure/foundry", packaging: "container" },
+        async (files, spec) => runDeployCliStream(
+          [
+            "destroy",
+            "-f",
+            files.configPath,
+            "--yes",
+            "--dry-run",
+            ...opts.purgeImages ? ["--purge-images"] : [],
+            ...opts.purge ? ["--purge"] : []
+          ],
+          { cwd: spec.agentRoot }
+        )
+      );
+    }
     printOut("=== bag deploy destroy \u2014 teardown plan (dry-run) ===\n");
     printOut(
       `project: ${path16.basename(workspaceRoot)}  (runtime: azure-foundry)
@@ -4370,9 +4448,7 @@ async function destroyAzureFoundry(opts) {
     );
     printOut("--- Agent (Foundry Hosted Agent) ---");
     printOut(
-      `  Teardown (delegated to bnbagent-deploy \u2014 removes the hosted agent + the Foundry resources its deploy record tracks):
-    bnbagent-deploy destroy --yes${extra}
-  Run \`bag deploy destroy --provider azure --execute\` to do this. Add \`--purge\` to also delete retained resources (e.g. the soft-deleted account, freeing the custom subdomain now instead of ~48h).`
+      "  Teardown (delegated to bnbagent-deploy \u2014 removes the hosted agent + the Foundry resources its deploy record tracks):\n    bnbagent-deploy destroy --yes\n  Run `bag deploy destroy --provider azure --execute` to do this. Add `--purge-images` to preview/remove this agent's owned ACR repository, or `--purge` to also delete retained infrastructure (e.g. the soft-deleted account, freeing the custom subdomain now instead of ~48h)."
     );
     printOut(
       "\n--- always note ---\n  - the encrypted keystore (.studio/wallets/) is left UNTOUCHED."
@@ -4391,6 +4467,7 @@ async function destroyAzureFoundry(opts) {
         "-f",
         files.configPath,
         "--yes",
+        ...opts.purgeImages ? ["--purge-images"] : [],
         ...opts.purge ? ["--purge"] : []
       ],
       { cwd: spec.agentRoot }
@@ -4551,6 +4628,20 @@ var checkEntrypointAndDockerfile = async (root, _target) => {
       details: { entrypoint: entry }
     });
   }
+  if (hasX402Face(faces)) {
+    const carrier = inspectAzureX402Carrier(agentRoot2);
+    if (carrier.status !== "http-envelope-v1") {
+      findings.push({
+        level: "CRITICAL",
+        name: "azure_x402_entrypoint_compatible",
+        message: `${carrier.detail}. This scaffold cannot serve X402 even though studio.toml enables it. In a clean parent directory, run \`bag init azurex402migration --runtime azure-foundry --protocols ${faces.join(",")} --no-install --no-onboard\`, then review and merge its src/unifiedMain.ts, Dockerfile, and package scripts before redeploying. Studio will not overwrite user-owned agent code.`,
+        details: {
+          entrypoint: carrier.entrypoint,
+          carrier: carrier.status
+        }
+      });
+    }
+  }
   if (!isFile6(path16.join(agentRoot2, "Dockerfile"))) {
     findings.push({
       level: "CRITICAL",
@@ -6065,9 +6156,7 @@ var LEGACY_SKILL_NAMES = [
 ];
 var ROUTER_SKILL_NAME = "bnbagent-studio";
 var META_FILENAME = ".bag-meta.json";
-var HIDDEN_SKILL_NAMES = /* @__PURE__ */ new Set([
-  "bnbagent-studio-use-azure-foundry"
-]);
+var HIDDEN_SKILL_NAMES = /* @__PURE__ */ new Set();
 function isDir3(p) {
   try {
     return fs20.statSync(p).isDirectory();
@@ -13823,6 +13912,7 @@ async function runPrepare(opts = {}) {
           checkLocalKeystoreExists,
           checkWalletPasswordEnvSet,
           checkLlmProviderKeySet,
+          checkPieverseKeyHash,
           checkCommerceReady,
           ...azureFoundryChecks
         ],
@@ -15358,9 +15448,12 @@ function registerDeploy(program) {
   ).option(
     "--yes",
     "Skip the typed project-name confirmation (required for --execute on a non-interactive terminal)."
+  ).option(
+    "--purge-images",
+    "Azure: inspect and delete only this agent's owned ACR repository; dry-run unless --execute is also supplied."
   ).option(
     "--purge",
-    "Also delete retained resources (ECR repository + CloudWatch log groups) via bnbagent-deploy's --purge."
+    "Also delete retained provider-owned infrastructure via bnbagent-deploy's --purge."
   ).action(
     act(
       (opts) => cmdDestroy(opts)
@@ -16095,6 +16188,7 @@ async function cmdAgent(opts, agentcoreArgs) {
       return rc;
     }
     await printAccessNextSteps2(root, "azure-foundry");
+    await printAzureAgentClientPrompt(root);
     return 0;
   }
   migrateEnvLocal(root);
@@ -16468,6 +16562,60 @@ async function printAgentClientPrompt2(root, destination, opts = {}) {
     printOut(`   Scrolled past it? Run:  cat ${saved}`);
   }
 }
+async function printAzureAgentClientPrompt(root) {
+  const agentRoot2 = findSubProjectRoot16("agent", root) ?? root;
+  const deployment = discoverRecordedDeployments(
+    deployWorkspaceRoot2(root)
+  ).find((candidate) => candidate.provider === "azure");
+  const endpoint = deployment?.endpoint ?? recordedEndpoint(root) ?? "<run `bag deploy info --provider azure` to recover the endpoint>";
+  const faces = deployment?.faces ?? agentFacesOf(agentRoot2);
+  const hasX402 = hasX402Face(faces);
+  const hasA2a = hasA2aFace(faces);
+  const request = hasA2a ? JSON.stringify(azureNegotiateQuickVerifyBody()) : hasX402 ? JSON.stringify(azureX402CarrierBody()) : JSON.stringify(azureNegotiateQuickVerifyBody());
+  const lines = [
+    "",
+    CLIENT_PROMPT_RULE2,
+    "\u{1F4CB} COPY EVERYTHING BELOW THIS LINE INTO CLAUDE CODE OR CURSOR",
+    "   \u2014 it will build and run an Azure Foundry operator/gateway client",
+    CLIENT_PROMPT_RULE2,
+    "I deployed a BNB Chain seller to Azure Foundry. Build a small TypeScript (fetch) Azure Foundry operator/gateway client and run one non-destructive smoke request.",
+    "",
+    "WHAT WAS DEPLOYED",
+    `- Faces: ${faces.join(", ") || "unknown"}`,
+    `- Entra-authenticated Invocations endpoint: ${endpoint}`,
+    `- Token scope: ${AZURE_FOUNDRY_TOKEN_SCOPE}`,
+    "- This is not an anonymous buyer URL. A public x402 buyer requires an external HTTPS gateway in front of Foundry.",
+    "",
+    "REQUEST",
+    `- POST application/json: ${request}`,
+    ...hasA2a ? ["- The input field contains the JSON-stringified negotiate payload."] : [],
+    ...hasX402 ? [
+      ...hasA2a ? [
+        `- X402 carrier alternative: ${JSON.stringify(azureX402CarrierBody())}`
+      ] : [],
+      "- The outer object is http-envelope-v1. Build it with:",
+      '  const inner = { prompt: "Say hi in one short sentence." };',
+      '  const body = Buffer.from(JSON.stringify(inner)).toString("base64");',
+      "- The outer response is another HTTP envelope. Decode response.body from base64 before parsing the inner x402 JSON."
+    ] : [],
+    "",
+    "AUTHENTICATION AND LOGS",
+    "- Obtain an Entra token for https://ai.azure.com with DefaultAzureCredential, ClientSecretCredential, or an operator-only `az account get-access-token` smoke command.",
+    "- Capture the response header `x-agent-session-id`; then stream that exact invocation with `bag deploy logs --provider azure --session <id>`.",
+    "",
+    "YOUR TASK",
+    "Create and run the client, print the outer status and body, decode the inner envelope when present, print x-agent-session-id, and show the exact logs command for that session. Do not claim that the Foundry endpoint is anonymously reachable.",
+    CLIENT_PROMPT_RULE2
+  ];
+  const text2 = lines.join("\n");
+  printOut(text2);
+  const saved = persistDeploySummary2(root, text2);
+  if (saved !== null) {
+    printOut(`
+\u{1F4BE} Saved the copy-paste prompt above to ${saved}`);
+    printOut(`   Scrolled past it? Run:  cat ${saved}`);
+  }
+}
 function persistDeploySummary2(root, text2) {
   try {
     if (!fs37.statSync(path37.resolve(root)).isDirectory()) {
@@ -16810,9 +16958,10 @@ function azureX402CarrierBody() {
     path: "/x402",
     query: {},
     headers: { "content-type": "application/json" },
-    body: Buffer.from(JSON.stringify({ prompt: "" }), "utf8").toString(
-      "base64"
-    )
+    body: Buffer.from(
+      JSON.stringify({ prompt: "Say hi in one short sentence." }),
+      "utf8"
+    ).toString("base64")
   };
 }
 function sameFaces(a, b) {
@@ -16859,17 +17008,20 @@ function printAzureInfo(root, deployment, opts) {
   const x402State = deployment.x402 ?? currentX402;
   const x402StateSource = deployment.x402 ? "deployment-record" : "current-scaffold";
   const x402Drift = deployment.x402 !== void 0 && !sameX402Snapshot(deployment.x402, currentX402);
-  const configurationDrift = facesDrift || x402Drift;
-  const x402Summary = hasX402 ? deployment.x402 ? x402DeploySummaryFromSnapshot(
+  const currentCarrier = hasX402Face(currentFaces) ? inspectAzureX402Carrier(agentRoot2).status : null;
+  const carrierDrift = deployment.x402Carrier !== void 0 && deployment.x402Carrier !== currentCarrier;
+  const configurationDrift = facesDrift || x402Drift || carrierDrift;
+  const carrierVerified = deployment.x402Carrier === "http-envelope-v1";
+  const x402Summary = hasX402 ? carrierVerified ? deployment.x402 ? x402DeploySummaryFromSnapshot(
     deployment.x402,
     "azure-foundry",
     "self",
     null
-  ) : x402DeploySummary(agentRoot2, "self", null) : "";
-  const x402Status = x402State?.status ?? (x402Summary.includes("ACTIVE in FREE mode") ? "free" : x402Summary.startsWith("x402 rail is ACTIVE") ? "active" : "dormant");
-  const x402Body = hasX402 ? azureX402CarrierBody() : void 0;
-  const body = hasA2a || x402Body === void 0 ? azureNegotiateQuickVerifyBody() : x402Body;
-  const x402Info = hasX402 ? {
+  ) : x402DeploySummary(agentRoot2, "self", null) : deployment.x402Carrier === "incompatible-scaffold" ? "The deployed Azure entrypoint did not mount createEnvelopeMiddleware and X402Seller. Re-scaffold the unified entrypoint, review the diff, and redeploy." : "This deployment record predates X402 carrier verification, so the deployed artifact cannot be treated as X402-capable. Verify or migrate the unified entrypoint and redeploy." : "";
+  const x402Status = carrierVerified ? x402State?.status ?? (x402Summary.includes("ACTIVE in FREE mode") ? "free" : x402Summary.startsWith("x402 rail is ACTIVE") ? "active" : "dormant") : "incompatible-scaffold";
+  const x402Body = hasX402 && carrierVerified ? azureX402CarrierBody() : void 0;
+  const body = hasA2a ? azureNegotiateQuickVerifyBody() : x402Body;
+  const x402Info = hasX402 ? carrierVerified ? {
     status: x402Status,
     access: x402Status === "dormant" ? "dormant" : "requires-external-gateway",
     public_url: null,
@@ -16882,9 +17034,15 @@ function printAzureInfo(root, deployment, opts) {
         method: "POST",
         content_type: "application/json",
         body: x402Body,
-        executes_seller_work: false
+        executes_seller_work: x402Status === "free"
       }
     }
+  } : {
+    status: "incompatible-scaffold",
+    access: "incompatible-scaffold",
+    public_url: null,
+    summary: x402Summary,
+    state_source: deployment.x402Carrier ? "deployment-record" : "unverified-deployment"
   } : void 0;
   if (opts.json) {
     printOut(
@@ -16903,11 +17061,11 @@ function printAzureInfo(root, deployment, opts) {
             resource: AZURE_FOUNDRY_TOKEN_RESOURCE,
             scope: AZURE_FOUNDRY_TOKEN_SCOPE
           },
-          request: {
+          request: body ? {
             method: "POST",
             content_type: "application/json",
             body
-          },
+          } : null,
           ...x402Info ? { x402: x402Info } : {}
         },
         null,
@@ -16927,10 +17085,18 @@ function printAzureInfo(root, deployment, opts) {
   printOut(
     `  authentication: Microsoft Entra bearer token (resource ${AZURE_FOUNDRY_TOKEN_RESOURCE}; SDK scope ${AZURE_FOUNDRY_TOKEN_SCOPE})`
   );
-  printOut("  request: POST application/json");
-  printOut(`  body: ${JSON.stringify(body)}`);
+  if (body) {
+    printOut("  request: POST application/json");
+    printOut(`  body: ${JSON.stringify(body)}`);
+  } else {
+    printOut(
+      "  request: unavailable until the X402 scaffold is migrated and redeployed"
+    );
+  }
   if (x402Info) {
-    if (x402Info.access === "dormant") {
+    if (x402Info.access === "incompatible-scaffold") {
+      printOut(`  x402 access: incompatible-scaffold \u2014 ${x402Info.summary}`);
+    } else if (x402Info.access === "dormant") {
       printOut(`  x402 access: dormant \u2014 ${x402Info.summary}`);
     } else {
       printOut(
@@ -16941,29 +17107,46 @@ function printAzureInfo(root, deployment, opts) {
       );
       if (hasA2a && x402Body) {
         printOut(
-          `  x402 no-work route probe: ${JSON.stringify(x402Body)} (expect an inner 400 in FREE mode or 402 before payment in PAID mode)`
+          `  x402 request example: ${JSON.stringify(x402Body)} (expect work in FREE mode or 402 before payment in PAID mode)`
         );
       }
       printOut(`  x402 gateway guide: ${foundryX402GatewayGuideUrl()}`);
     }
   }
-  if (opts.withCurl) {
-    printOut(
-      hasA2a ? "\nQuick-verify curl:" : "\nX402 no-work route-probe curl:"
-    );
+  if (opts.withCurl && body) {
+    printOut(hasA2a ? "\nQuick-verify curl:" : "\nX402 request curl:");
     printOut(
       `  AZURE_TOKEN=$(az account get-access-token --resource ${AZURE_FOUNDRY_TOKEN_RESOURCE} --query accessToken -o tsv)`
     );
     printOut(`  AZURE_ENDPOINT=${JSON.stringify(endpoint)}`);
+    printOut("  AZURE_HEADERS=$(mktemp)");
     printOut(
-      `  curl -sS -X POST "$AZURE_ENDPOINT" \\
+      `  AZURE_RESPONSE=$(curl -sS -D "$AZURE_HEADERS" -X POST "$AZURE_ENDPOINT" \\
     -H "Authorization: Bearer $AZURE_TOKEN" \\
     -H "Content-Type: application/json" \\
-    -d '${JSON.stringify(body)}'`
+    -d '${JSON.stringify(body)}')`
+    );
+    printOut('  printf "%s\\n" "$AZURE_RESPONSE"');
+    printOut(
+      `  AZURE_SESSION=$(awk 'tolower($1) == "x-agent-session-id:" {gsub(/\\r/, "", $2); print $2}' "$AZURE_HEADERS" | tail -1)`
     );
+    printOut('  printf "session: %s\\n" "$AZURE_SESSION"');
+    printOut('  bag deploy logs --provider azure --session "$AZURE_SESSION"');
+    if (!hasA2a && x402Body) {
+      printOut(
+        "\n  Decode response.body from base64 to read the inner x402 JSON."
+      );
+      printOut(
+        `  node -e 'const outer=JSON.parse(process.argv[1]); console.log(Buffer.from(outer.body,"base64").toString("utf8"))' "$AZURE_RESPONSE"`
+      );
+    }
     printOut(
       "\n  The Azure CLI command is only a convenient way to mint a token for this curl. Deployment itself does not require az/azd; DefaultAzureCredential or ClientSecretCredential can mint the same scope in an application."
     );
+  } else if (opts.withCurl) {
+    printErr(
+      "warning: no X402 curl was emitted because the recorded Azure deployment does not prove http-envelope-v1 support; migrate and redeploy first."
+    );
   }
   return 0;
 }
@@ -17074,6 +17257,10 @@ async function cmdDestroy(opts) {
     "destroy"
   );
   if (typeof deployment === "number") return deployment;
+  if (opts.purgeImages && deployment.provider !== "azure") {
+    printErr("error: --purge-images is only valid for Azure self-deployments");
+    return 2;
+  }
   if (deployment.provider === "bnb") {
     return platformDestroy({
       root,
@@ -17102,7 +17289,8 @@ async function cmdDestroy(opts) {
     return destroyAzureFoundry({
       projectRoot: workspaceRoot,
       execute: Boolean(opts.execute),
-      purge: Boolean(opts.purge)
+      purge: Boolean(opts.purge),
+      purgeImages: Boolean(opts.purgeImages)
     });
   }
   return runDestroy({

package/dist/{chunk-XY6EZGQF.js → chunk-3QSCJAXQ.js}

@@ -686,8 +686,8 @@ function packageRoot() {
   }
 }
 function studioCliVersion() {
-  if ("0.0.11-alpha.5") {
-    return "0.0.11-alpha.5";
+  if ("0.0.11-alpha.7") {
+    return "0.0.11-alpha.7";
   }
   const file = path3.join(packageRoot(), "package.json");
   const pkg = JSON.parse(fs3.readFileSync(file, "utf-8"));
@@ -937,7 +937,7 @@ function isTable(value) {
 }
 
 // src/cli/_deploy/deployCli.ts
-var DEPLOY_CLI_VERSION = "0.5.12";
+var DEPLOY_CLI_VERSION = "0.5.13";
 var DEPLOY_CLI_PACKAGE = `@bnbagent/deploy-cli@${DEPLOY_CLI_VERSION}`;
 var BNB_PLATFORM_API_URL = "https://bnbagent-api.bnbchain.world";
 var BNB_PLATFORM_API_URL_ENV = "BNBAGENT_API_URL";

package/dist/{deployCli-OQICQCKT.js → deployCli-374HYGDA.js}

@@ -18,7 +18,7 @@ import {
   runPlatformAccountCommand,
   trialFromDeployCliJson,
   withDeployFiles
-} from "./chunk-XY6EZGQF.js";
+} from "./chunk-3QSCJAXQ.js";
 import "./chunk-RO726HJG.js";
 export {
   BNB_PLATFORM_API_URL,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bnbagent/studio-cli",
-  "version": "0.0.11-alpha.5",
+  "version": "0.0.11-alpha.7",
   "description": "Skills-first toolkit and bag CLI for BNB Chain seller agents: ERC-8004 identity, ERC-8183 escrowed commerce, and x402 payments.",
   "keywords": [
     "bnb-chain",
@@ -54,7 +54,7 @@
     "tar": "^7.4.0",
     "viem": "^2.54.0",
     "yaml": "^2.9.0",
-    "@bnbagent/studio-runtime": "0.0.11-alpha.5"
+    "@bnbagent/studio-runtime": "0.0.11-alpha.7"
   },
   "devDependencies": {
     "@a2a-js/sdk": "^0.3.14",

package/skills/bnbagent-studio.md

@@ -53,7 +53,7 @@ Treat ERC-8183 amounts as decimal strings at CLI/config boundaries and `bigint`
 
 ## CLI groups at a glance
 
-`init`, `scan`, `recipe`, `skills`, `wallet`, `erc8004`, `erc8183`, `x402`, `agents`, `config`, `env`, `dev`, `doctor`, `audit`, `deploy`, `platform`, `llm`, `bundle`, `budget` - see `bag --help` for details. `bag deploy [--provider bnb\|aws\|azure] [--backend aws\|azure]` is the primary deploy command; `--backend` is valid only for provider `bnb` and confirms the recipe-derived managed backend. `prepare`, `verify`, `status`, `info`, `destroy`, `logs`, and `fix-gitignore` remain lifecycle subcommands (`deploy agent` is a deprecated compatibility alias). Provider deploy/status/logs/destroy and deploy-time credential validation are delegated to pinned `@bnbagent/deploy-cli@0.5.12`.
+`init`, `scan`, `recipe`, `skills`, `wallet`, `erc8004`, `erc8183`, `x402`, `agents`, `config`, `env`, `dev`, `doctor`, `audit`, `deploy`, `platform`, `llm`, `bundle`, `budget` - see `bag --help` for details. `bag deploy [--provider bnb\|aws\|azure] [--backend aws\|azure]` is the primary deploy command; `--backend` is valid only for provider `bnb` and confirms the recipe-derived managed backend. `prepare`, `verify`, `status`, `info`, `destroy`, `logs`, and `fix-gitignore` remain lifecycle subcommands (`deploy agent` is a deprecated compatibility alias). Provider deploy/status/logs/destroy and deploy-time credential validation are delegated to pinned `@bnbagent/deploy-cli@0.5.13`.
 
 ## Tool surface
 

package/skills/references/bnbagent-studio-use-aws-agentcore.md

@@ -1,6 +1,6 @@
 ---
 name: bnbagent-studio-use-aws-agentcore
-description: When the user wants to deploy or operate a bnbagent-studio project on AWS Bedrock AgentCore - deploy with `bag deploy --provider aws` (all cloud lifecycle mutations are delegated to pinned `@bnbagent/deploy-cli@0.5.12`), inspect with `bag deploy status` / `logs --provider aws` / `verify --provider aws`, and tear down with `bag deploy destroy --provider aws --execute [--purge]`. Also covers AWS credential prerequisites, the optional read-only quota probe, and the runtime-secret channel.
+description: When the user wants to deploy or operate a bnbagent-studio project on AWS Bedrock AgentCore - deploy with `bag deploy --provider aws` (all cloud lifecycle mutations are delegated to pinned `@bnbagent/deploy-cli@0.5.13`), inspect with `bag deploy status` / `logs --provider aws` / `verify --provider aws`, and tear down with `bag deploy destroy --provider aws --execute [--purge]`. Also covers AWS credential prerequisites, the optional read-only quota probe, and the runtime-secret channel.
 ---
 
 > **Reference file** of the `bnbagent-studio` router skill - installed at `bnbagent-studio/references/` and loaded on demand (not a standalone skill). Route here via the router's decision tree.

package/skills/references/bnbagent-studio-use-azure-foundry.md

@@ -1,6 +1,6 @@
 ---
 name: bnbagent-studio-use-azure-foundry
-description: When the user wants to deploy or operate a bnbagent-studio project on Azure AI Foundry Hosted Agents - scaffold with `bag init --runtime azure-foundry`, deploy either to the managed platform with `bag deploy --provider bnb --backend azure` or directly with `bag deploy --provider azure`; all cloud lifecycle execution is delegated to pinned `@bnbagent/deploy-cli@0.5.12`. Native MCP is not supported on Azure; use AgentCore for MCP.
+description: When the user wants to deploy or operate a bnbagent-studio project on Azure AI Foundry Hosted Agents - scaffold with `bag init --runtime azure-foundry`, deploy either to the managed platform with `bag deploy --provider bnb --backend azure` or directly with `bag deploy --provider azure`; all cloud lifecycle execution is delegated to pinned `@bnbagent/deploy-cli@0.5.13`. Native MCP is not supported on Azure; use AgentCore for MCP.
 ---
 
 > **Reference file** of the `bnbagent-studio` router skill - installed at `bnbagent-studio/references/` and loaded on demand (not a standalone skill). Route here via the router's decision tree.
@@ -31,7 +31,7 @@ Procedure for deploying and operating the seller Agent on **Azure AI Foundry Hos
 
 1. **Bun 1.3+ (`bunx`) on PATH** - the pinned `@bnbagent/deploy-cli` runs through it.
 2. **Docker running** - the image is built locally (linux/amd64) before push.
-3. **An Azure subscription** the operator may provision in (Foundry account/project, container registry, hosted agent). Before a local self-deploy, run `bunx --bun @bnbagent/deploy-cli@0.5.12 login --provider azure`; use OIDC/service-principal credentials in CI.
+3. **An Azure subscription** the operator may provision in (Foundry account/project, container registry, hosted agent). Before a local self-deploy, run `bunx --bun @bnbagent/deploy-cli@0.5.13 login --provider azure`; use OIDC/service-principal credentials in CI.
 
 ## ⚠️ Foundry gotchas (read before deploying)
 
@@ -49,7 +49,7 @@ Procedure for deploying and operating the seller Agent on **Azure AI Foundry Hos
 
 > The encrypted keystore (`.studio/wallets/`) stays at the workspace root and rides only that secret channel - never baked into the image.
 
-Provider-native overrides go in the optional `studio.toml [deploy.foundry]` table (verbatim deploy-spec keys; deploy-cli 0.5.12 consumes `account`, `cpu`, `location`, `memory`, `project`, `projectEndpoint`, `protocol`, `registry`, `subscriptionId` and warns about anything else). The `[azure]` block's `subscription_id` / `account_name` / `project_name` / `project_endpoint` / `location` win over conflicting `[deploy.foundry]` keys.
+Provider-native overrides go in the optional `studio.toml [deploy.foundry]` table (verbatim deploy-spec keys; deploy-cli 0.5.13 consumes `account`, `cpu`, `location`, `memory`, `project`, `projectEndpoint`, `protocol`, `registry`, `subscriptionId` and warns about anything else). The `[azure]` block's `subscription_id` / `account_name` / `project_name` / `project_endpoint` / `location` win over conflicting `[deploy.foundry]` keys.
 
 ## Typical workflow
 
@@ -95,6 +95,13 @@ Invocations request. This does not make the Azure CLI a deploy prerequisite;
 application clients may mint the same `https://ai.azure.com/.default` scope
 with `DefaultAzureCredential` or `ClientSecretCredential`.
 
+The generated curl stores the response headers, extracts
+`x-agent-session-id`, and prints the exact
+`bag deploy logs --provider azure --session <id>` command. Without an explicit
+session, logs lists the recent sessions visible to the current Azure identity.
+Foundry scopes that list by identity/isolation key, so an external buyer or
+gateway must still preserve the session header from its own response.
+
 The built-in smoke proves the container contract, not the seller signature. For a release E2E, invoke with a complete `negotiate` envelope and require `response.accepted=true`, a non-empty `negotiation_hash`, and `provider_sig`. The Invocations body is `{"input":"<serialized skill JSON>"}`.
 
 ### X402 external gateway
@@ -117,7 +124,9 @@ body:
 ```
 
 `bag deploy info --provider azure --json` reports the deployed face snapshot,
-seller state, carrier contract, and a no-work route probe. A PAID seller also
+seller state, carrier contract, and a request example. In FREE mode that
+example executes seller work without a payment; in PAID mode it returns the
+inner 402 before work until a valid payment is supplied. A PAID seller also
 needs fixed facilitator egress; use an Azure Container Apps workload-profiles
 environment with VNet integration and a NAT Gateway static IP, then allowlist
 that IP with B402. Studio does not deploy or manage the gateway or network.
@@ -126,11 +135,21 @@ that IP with B402. Studio does not deploy or manage the gateway or network.
 
 ```bash
 bag deploy destroy --provider azure                 # dry-run plan
+bag deploy destroy --provider azure --purge-images  # read-only ACR repository inventory
 bag deploy destroy --provider azure --execute       # delegates `destroy --yes`
+bag deploy destroy --provider azure --execute --purge-images # delete this agent's owned ACR repository
 bag deploy destroy --provider azure --execute --purge # retained resources too
 ```
 
-`--purge` also removes the retained resources the deploy record tracks - including the soft-deleted Cognitive Services account, freeing the custom subdomain immediately (otherwise held ~48h). A successful teardown clears the recorded `[azure].agent_endpoint`.
+Default destroy keeps pushed images and reports that they continue to bill for
+storage. `--purge-images` inventories manifest/tag count and estimated image
+size, then deletes only the deterministic `bnbagent/<agent-name>` repository in
+a registry proven to be owned by bnbagent-deploy. External registry overrides,
+untagged registries, and registries shared by another Foundry project are kept.
+`--purge` also removes the retained resources the deploy record tracks -
+including the soft-deleted Cognitive Services account, freeing the custom
+subdomain immediately (otherwise held ~48h). A successful teardown clears the
+recorded `[azure].agent_endpoint`.
 
 ## Scope note
 

package/skills/references/bnbagent-studio-use-bnb-trial.md

@@ -9,7 +9,7 @@ description: Use when deploying or operating a bnbagent-studio seller on the BNB
 
 Treat this provider as a temporary testnet sandbox. Require a throwaway wallet, keep `bsc-testnet`, and explain that the runtime signing material is transmitted to the operator's managed secret store for the trial. Never use a mainnet key. Exception: `wallet.kind='altana'` ships only the bounded, budget-limited, revocable session - the throwaway-wallet advice does not apply; tighten the session instead (`bag wallet session grant --force --budget-u <small> --expiry-days <short>`) and never run `bag wallet new` on an altana project (it breaks the session's `[wallet].address` anchor).
 
-All auth and cloud lifecycle work must cross the pinned `@bnbagent/deploy-cli@0.5.12` boundary. Do not call a cloud CLI or platform REST routes directly. The managed backend is recipe-derived: `agentcore` uses AWS; `azure-foundry` uses Azure. For headless managed Azure, confirm with `bag deploy --provider bnb --backend azure --yes`; never treat `--backend` as a cross-cloud recipe converter.
+All auth and cloud lifecycle work must cross the pinned `@bnbagent/deploy-cli@0.5.13` boundary. Do not call a cloud CLI or platform REST routes directly. The managed backend is recipe-derived: `agentcore` uses AWS; `azure-foundry` uses Azure. For headless managed Azure, confirm with `bag deploy --provider bnb --backend azure --yes`; never treat `--backend` as a cross-cloud recipe converter.
 
 ## Select and authenticate