@bnbagent/studio-cli 0.0.11-alpha.6 → 0.0.11-alpha.7

package/dist/bag.js

@@ -52,7 +52,7 @@ import {
   x402SellerIsFree,
   x402SellerPricingState,
   x402SellerUsesB402
-} from "./chunk-VVHPUKLV.js";
+} from "./chunk-3QSCJAXQ.js";
 import {
   TWAK_CLI_MIN_VERSION,
   TWAK_CLI_VERSION,
@@ -230,7 +230,7 @@ import {
 var CAMPAIGN_DOC_URL = "https://www.bnbchain.org/en/blog/bnb-agent-studio-is-live-on-bnb-chain-ai-agents-from-one-prompt";
 var CAMPAIGN_CHECK_TIMEOUT_MS = 6e3;
 async function fetchCampaignActive() {
-  const { bnbPlatformApiUrl: bnbPlatformApiUrl2 } = await import("./deployCli-5DZVAKMZ.js");
+  const { bnbPlatformApiUrl: bnbPlatformApiUrl2 } = await import("./deployCli-374HYGDA.js");
   const controller = new AbortController();
   const timer = setTimeout(() => controller.abort(), CAMPAIGN_CHECK_TIMEOUT_MS);
   try {
@@ -4423,7 +4423,24 @@ async function deployAzureFoundry(opts) {
 async function destroyAzureFoundry(opts) {
   const workspaceRoot = deployWorkspaceRoot(opts.projectRoot);
   if (!opts.execute) {
-    const extra = opts.purge ? " --purge" : "";
+    if (opts.purge || opts.purgeImages) {
+      return withDeployFiles(
+        opts.projectRoot,
+        { target: "azure/foundry", packaging: "container" },
+        async (files, spec) => runDeployCliStream(
+          [
+            "destroy",
+            "-f",
+            files.configPath,
+            "--yes",
+            "--dry-run",
+            ...opts.purgeImages ? ["--purge-images"] : [],
+            ...opts.purge ? ["--purge"] : []
+          ],
+          { cwd: spec.agentRoot }
+        )
+      );
+    }
     printOut("=== bag deploy destroy \u2014 teardown plan (dry-run) ===\n");
     printOut(
       `project: ${path16.basename(workspaceRoot)}  (runtime: azure-foundry)
@@ -4431,9 +4448,7 @@ async function destroyAzureFoundry(opts) {
     );
     printOut("--- Agent (Foundry Hosted Agent) ---");
     printOut(
-      `  Teardown (delegated to bnbagent-deploy \u2014 removes the hosted agent + the Foundry resources its deploy record tracks):
-    bnbagent-deploy destroy --yes${extra}
-  Run \`bag deploy destroy --provider azure --execute\` to do this. Add \`--purge\` to also delete retained resources (e.g. the soft-deleted account, freeing the custom subdomain now instead of ~48h).`
+      "  Teardown (delegated to bnbagent-deploy \u2014 removes the hosted agent + the Foundry resources its deploy record tracks):\n    bnbagent-deploy destroy --yes\n  Run `bag deploy destroy --provider azure --execute` to do this. Add `--purge-images` to preview/remove this agent's owned ACR repository, or `--purge` to also delete retained infrastructure (e.g. the soft-deleted account, freeing the custom subdomain now instead of ~48h)."
     );
     printOut(
       "\n--- always note ---\n  - the encrypted keystore (.studio/wallets/) is left UNTOUCHED."
@@ -4452,6 +4467,7 @@ async function destroyAzureFoundry(opts) {
         "-f",
         files.configPath,
         "--yes",
+        ...opts.purgeImages ? ["--purge-images"] : [],
         ...opts.purge ? ["--purge"] : []
       ],
       { cwd: spec.agentRoot }
@@ -6140,9 +6156,7 @@ var LEGACY_SKILL_NAMES = [
 ];
 var ROUTER_SKILL_NAME = "bnbagent-studio";
 var META_FILENAME = ".bag-meta.json";
-var HIDDEN_SKILL_NAMES = /* @__PURE__ */ new Set([
-  "bnbagent-studio-use-azure-foundry"
-]);
+var HIDDEN_SKILL_NAMES = /* @__PURE__ */ new Set();
 function isDir3(p) {
   try {
     return fs20.statSync(p).isDirectory();
@@ -13898,6 +13912,7 @@ async function runPrepare(opts = {}) {
           checkLocalKeystoreExists,
           checkWalletPasswordEnvSet,
           checkLlmProviderKeySet,
+          checkPieverseKeyHash,
           checkCommerceReady,
           ...azureFoundryChecks
         ],
@@ -15433,9 +15448,12 @@ function registerDeploy(program) {
   ).option(
     "--yes",
     "Skip the typed project-name confirmation (required for --execute on a non-interactive terminal)."
+  ).option(
+    "--purge-images",
+    "Azure: inspect and delete only this agent's owned ACR repository; dry-run unless --execute is also supplied."
   ).option(
     "--purge",
-    "Also delete retained resources (ECR repository + CloudWatch log groups) via bnbagent-deploy's --purge."
+    "Also delete retained provider-owned infrastructure via bnbagent-deploy's --purge."
   ).action(
     act(
       (opts) => cmdDestroy(opts)
@@ -16170,6 +16188,7 @@ async function cmdAgent(opts, agentcoreArgs) {
       return rc;
     }
     await printAccessNextSteps2(root, "azure-foundry");
+    await printAzureAgentClientPrompt(root);
     return 0;
   }
   migrateEnvLocal(root);
@@ -16543,6 +16562,60 @@ async function printAgentClientPrompt2(root, destination, opts = {}) {
     printOut(`   Scrolled past it? Run:  cat ${saved}`);
   }
 }
+async function printAzureAgentClientPrompt(root) {
+  const agentRoot2 = findSubProjectRoot16("agent", root) ?? root;
+  const deployment = discoverRecordedDeployments(
+    deployWorkspaceRoot2(root)
+  ).find((candidate) => candidate.provider === "azure");
+  const endpoint = deployment?.endpoint ?? recordedEndpoint(root) ?? "<run `bag deploy info --provider azure` to recover the endpoint>";
+  const faces = deployment?.faces ?? agentFacesOf(agentRoot2);
+  const hasX402 = hasX402Face(faces);
+  const hasA2a = hasA2aFace(faces);
+  const request = hasA2a ? JSON.stringify(azureNegotiateQuickVerifyBody()) : hasX402 ? JSON.stringify(azureX402CarrierBody()) : JSON.stringify(azureNegotiateQuickVerifyBody());
+  const lines = [
+    "",
+    CLIENT_PROMPT_RULE2,
+    "\u{1F4CB} COPY EVERYTHING BELOW THIS LINE INTO CLAUDE CODE OR CURSOR",
+    "   \u2014 it will build and run an Azure Foundry operator/gateway client",
+    CLIENT_PROMPT_RULE2,
+    "I deployed a BNB Chain seller to Azure Foundry. Build a small TypeScript (fetch) Azure Foundry operator/gateway client and run one non-destructive smoke request.",
+    "",
+    "WHAT WAS DEPLOYED",
+    `- Faces: ${faces.join(", ") || "unknown"}`,
+    `- Entra-authenticated Invocations endpoint: ${endpoint}`,
+    `- Token scope: ${AZURE_FOUNDRY_TOKEN_SCOPE}`,
+    "- This is not an anonymous buyer URL. A public x402 buyer requires an external HTTPS gateway in front of Foundry.",
+    "",
+    "REQUEST",
+    `- POST application/json: ${request}`,
+    ...hasA2a ? ["- The input field contains the JSON-stringified negotiate payload."] : [],
+    ...hasX402 ? [
+      ...hasA2a ? [
+        `- X402 carrier alternative: ${JSON.stringify(azureX402CarrierBody())}`
+      ] : [],
+      "- The outer object is http-envelope-v1. Build it with:",
+      '  const inner = { prompt: "Say hi in one short sentence." };',
+      '  const body = Buffer.from(JSON.stringify(inner)).toString("base64");',
+      "- The outer response is another HTTP envelope. Decode response.body from base64 before parsing the inner x402 JSON."
+    ] : [],
+    "",
+    "AUTHENTICATION AND LOGS",
+    "- Obtain an Entra token for https://ai.azure.com with DefaultAzureCredential, ClientSecretCredential, or an operator-only `az account get-access-token` smoke command.",
+    "- Capture the response header `x-agent-session-id`; then stream that exact invocation with `bag deploy logs --provider azure --session <id>`.",
+    "",
+    "YOUR TASK",
+    "Create and run the client, print the outer status and body, decode the inner envelope when present, print x-agent-session-id, and show the exact logs command for that session. Do not claim that the Foundry endpoint is anonymously reachable.",
+    CLIENT_PROMPT_RULE2
+  ];
+  const text2 = lines.join("\n");
+  printOut(text2);
+  const saved = persistDeploySummary2(root, text2);
+  if (saved !== null) {
+    printOut(`
+\u{1F4BE} Saved the copy-paste prompt above to ${saved}`);
+    printOut(`   Scrolled past it? Run:  cat ${saved}`);
+  }
+}
 function persistDeploySummary2(root, text2) {
   try {
     if (!fs37.statSync(path37.resolve(root)).isDirectory()) {
@@ -16885,9 +16958,10 @@ function azureX402CarrierBody() {
     path: "/x402",
     query: {},
     headers: { "content-type": "application/json" },
-    body: Buffer.from(JSON.stringify({ prompt: "" }), "utf8").toString(
-      "base64"
-    )
+    body: Buffer.from(
+      JSON.stringify({ prompt: "Say hi in one short sentence." }),
+      "utf8"
+    ).toString("base64")
   };
 }
 function sameFaces(a, b) {
@@ -16960,7 +17034,7 @@ function printAzureInfo(root, deployment, opts) {
         method: "POST",
         content_type: "application/json",
         body: x402Body,
-        executes_seller_work: false
+        executes_seller_work: x402Status === "free"
       }
     }
   } : {
@@ -17033,26 +17107,39 @@ function printAzureInfo(root, deployment, opts) {
       );
       if (hasA2a && x402Body) {
         printOut(
-          `  x402 no-work route probe: ${JSON.stringify(x402Body)} (expect an inner 400 in FREE mode or 402 before payment in PAID mode)`
+          `  x402 request example: ${JSON.stringify(x402Body)} (expect work in FREE mode or 402 before payment in PAID mode)`
         );
       }
       printOut(`  x402 gateway guide: ${foundryX402GatewayGuideUrl()}`);
     }
   }
   if (opts.withCurl && body) {
-    printOut(
-      hasA2a ? "\nQuick-verify curl:" : "\nX402 no-work route-probe curl:"
-    );
+    printOut(hasA2a ? "\nQuick-verify curl:" : "\nX402 request curl:");
     printOut(
       `  AZURE_TOKEN=$(az account get-access-token --resource ${AZURE_FOUNDRY_TOKEN_RESOURCE} --query accessToken -o tsv)`
     );
     printOut(`  AZURE_ENDPOINT=${JSON.stringify(endpoint)}`);
+    printOut("  AZURE_HEADERS=$(mktemp)");
     printOut(
-      `  curl -sS -X POST "$AZURE_ENDPOINT" \\
+      `  AZURE_RESPONSE=$(curl -sS -D "$AZURE_HEADERS" -X POST "$AZURE_ENDPOINT" \\
     -H "Authorization: Bearer $AZURE_TOKEN" \\
     -H "Content-Type: application/json" \\
-    -d '${JSON.stringify(body)}'`
+    -d '${JSON.stringify(body)}')`
     );
+    printOut('  printf "%s\\n" "$AZURE_RESPONSE"');
+    printOut(
+      `  AZURE_SESSION=$(awk 'tolower($1) == "x-agent-session-id:" {gsub(/\\r/, "", $2); print $2}' "$AZURE_HEADERS" | tail -1)`
+    );
+    printOut('  printf "session: %s\\n" "$AZURE_SESSION"');
+    printOut('  bag deploy logs --provider azure --session "$AZURE_SESSION"');
+    if (!hasA2a && x402Body) {
+      printOut(
+        "\n  Decode response.body from base64 to read the inner x402 JSON."
+      );
+      printOut(
+        `  node -e 'const outer=JSON.parse(process.argv[1]); console.log(Buffer.from(outer.body,"base64").toString("utf8"))' "$AZURE_RESPONSE"`
+      );
+    }
     printOut(
       "\n  The Azure CLI command is only a convenient way to mint a token for this curl. Deployment itself does not require az/azd; DefaultAzureCredential or ClientSecretCredential can mint the same scope in an application."
     );
@@ -17170,6 +17257,10 @@ async function cmdDestroy(opts) {
     "destroy"
   );
   if (typeof deployment === "number") return deployment;
+  if (opts.purgeImages && deployment.provider !== "azure") {
+    printErr("error: --purge-images is only valid for Azure self-deployments");
+    return 2;
+  }
   if (deployment.provider === "bnb") {
     return platformDestroy({
       root,
@@ -17198,7 +17289,8 @@ async function cmdDestroy(opts) {
     return destroyAzureFoundry({
       projectRoot: workspaceRoot,
       execute: Boolean(opts.execute),
-      purge: Boolean(opts.purge)
+      purge: Boolean(opts.purge),
+      purgeImages: Boolean(opts.purgeImages)
     });
   }
   return runDestroy({

package/dist/{chunk-VVHPUKLV.js → chunk-3QSCJAXQ.js}

@@ -686,8 +686,8 @@ function packageRoot() {
   }
 }
 function studioCliVersion() {
-  if ("0.0.11-alpha.6") {
-    return "0.0.11-alpha.6";
+  if ("0.0.11-alpha.7") {
+    return "0.0.11-alpha.7";
   }
   const file = path3.join(packageRoot(), "package.json");
   const pkg = JSON.parse(fs3.readFileSync(file, "utf-8"));
@@ -937,7 +937,7 @@ function isTable(value) {
 }
 
 // src/cli/_deploy/deployCli.ts
-var DEPLOY_CLI_VERSION = "0.5.12";
+var DEPLOY_CLI_VERSION = "0.5.13";
 var DEPLOY_CLI_PACKAGE = `@bnbagent/deploy-cli@${DEPLOY_CLI_VERSION}`;
 var BNB_PLATFORM_API_URL = "https://bnbagent-api.bnbchain.world";
 var BNB_PLATFORM_API_URL_ENV = "BNBAGENT_API_URL";

package/dist/{deployCli-5DZVAKMZ.js → deployCli-374HYGDA.js}

@@ -18,7 +18,7 @@ import {
   runPlatformAccountCommand,
   trialFromDeployCliJson,
   withDeployFiles
-} from "./chunk-VVHPUKLV.js";
+} from "./chunk-3QSCJAXQ.js";
 import "./chunk-RO726HJG.js";
 export {
   BNB_PLATFORM_API_URL,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bnbagent/studio-cli",
-  "version": "0.0.11-alpha.6",
+  "version": "0.0.11-alpha.7",
   "description": "Skills-first toolkit and bag CLI for BNB Chain seller agents: ERC-8004 identity, ERC-8183 escrowed commerce, and x402 payments.",
   "keywords": [
     "bnb-chain",
@@ -54,7 +54,7 @@
     "tar": "^7.4.0",
     "viem": "^2.54.0",
     "yaml": "^2.9.0",
-    "@bnbagent/studio-runtime": "0.0.11-alpha.6"
+    "@bnbagent/studio-runtime": "0.0.11-alpha.7"
   },
   "devDependencies": {
     "@a2a-js/sdk": "^0.3.14",

package/skills/bnbagent-studio.md

@@ -53,7 +53,7 @@ Treat ERC-8183 amounts as decimal strings at CLI/config boundaries and `bigint`
 
 ## CLI groups at a glance
 
-`init`, `scan`, `recipe`, `skills`, `wallet`, `erc8004`, `erc8183`, `x402`, `agents`, `config`, `env`, `dev`, `doctor`, `audit`, `deploy`, `platform`, `llm`, `bundle`, `budget` - see `bag --help` for details. `bag deploy [--provider bnb\|aws\|azure] [--backend aws\|azure]` is the primary deploy command; `--backend` is valid only for provider `bnb` and confirms the recipe-derived managed backend. `prepare`, `verify`, `status`, `info`, `destroy`, `logs`, and `fix-gitignore` remain lifecycle subcommands (`deploy agent` is a deprecated compatibility alias). Provider deploy/status/logs/destroy and deploy-time credential validation are delegated to pinned `@bnbagent/deploy-cli@0.5.12`.
+`init`, `scan`, `recipe`, `skills`, `wallet`, `erc8004`, `erc8183`, `x402`, `agents`, `config`, `env`, `dev`, `doctor`, `audit`, `deploy`, `platform`, `llm`, `bundle`, `budget` - see `bag --help` for details. `bag deploy [--provider bnb\|aws\|azure] [--backend aws\|azure]` is the primary deploy command; `--backend` is valid only for provider `bnb` and confirms the recipe-derived managed backend. `prepare`, `verify`, `status`, `info`, `destroy`, `logs`, and `fix-gitignore` remain lifecycle subcommands (`deploy agent` is a deprecated compatibility alias). Provider deploy/status/logs/destroy and deploy-time credential validation are delegated to pinned `@bnbagent/deploy-cli@0.5.13`.
 
 ## Tool surface
 

package/skills/references/bnbagent-studio-use-aws-agentcore.md

@@ -1,6 +1,6 @@
 ---
 name: bnbagent-studio-use-aws-agentcore
-description: When the user wants to deploy or operate a bnbagent-studio project on AWS Bedrock AgentCore - deploy with `bag deploy --provider aws` (all cloud lifecycle mutations are delegated to pinned `@bnbagent/deploy-cli@0.5.12`), inspect with `bag deploy status` / `logs --provider aws` / `verify --provider aws`, and tear down with `bag deploy destroy --provider aws --execute [--purge]`. Also covers AWS credential prerequisites, the optional read-only quota probe, and the runtime-secret channel.
+description: When the user wants to deploy or operate a bnbagent-studio project on AWS Bedrock AgentCore - deploy with `bag deploy --provider aws` (all cloud lifecycle mutations are delegated to pinned `@bnbagent/deploy-cli@0.5.13`), inspect with `bag deploy status` / `logs --provider aws` / `verify --provider aws`, and tear down with `bag deploy destroy --provider aws --execute [--purge]`. Also covers AWS credential prerequisites, the optional read-only quota probe, and the runtime-secret channel.
 ---
 
 > **Reference file** of the `bnbagent-studio` router skill - installed at `bnbagent-studio/references/` and loaded on demand (not a standalone skill). Route here via the router's decision tree.

package/skills/references/bnbagent-studio-use-azure-foundry.md

@@ -1,6 +1,6 @@
 ---
 name: bnbagent-studio-use-azure-foundry
-description: When the user wants to deploy or operate a bnbagent-studio project on Azure AI Foundry Hosted Agents - scaffold with `bag init --runtime azure-foundry`, deploy either to the managed platform with `bag deploy --provider bnb --backend azure` or directly with `bag deploy --provider azure`; all cloud lifecycle execution is delegated to pinned `@bnbagent/deploy-cli@0.5.12`. Native MCP is not supported on Azure; use AgentCore for MCP.
+description: When the user wants to deploy or operate a bnbagent-studio project on Azure AI Foundry Hosted Agents - scaffold with `bag init --runtime azure-foundry`, deploy either to the managed platform with `bag deploy --provider bnb --backend azure` or directly with `bag deploy --provider azure`; all cloud lifecycle execution is delegated to pinned `@bnbagent/deploy-cli@0.5.13`. Native MCP is not supported on Azure; use AgentCore for MCP.
 ---
 
 > **Reference file** of the `bnbagent-studio` router skill - installed at `bnbagent-studio/references/` and loaded on demand (not a standalone skill). Route here via the router's decision tree.
@@ -31,7 +31,7 @@ Procedure for deploying and operating the seller Agent on **Azure AI Foundry Hos
 
 1. **Bun 1.3+ (`bunx`) on PATH** - the pinned `@bnbagent/deploy-cli` runs through it.
 2. **Docker running** - the image is built locally (linux/amd64) before push.
-3. **An Azure subscription** the operator may provision in (Foundry account/project, container registry, hosted agent). Before a local self-deploy, run `bunx --bun @bnbagent/deploy-cli@0.5.12 login --provider azure`; use OIDC/service-principal credentials in CI.
+3. **An Azure subscription** the operator may provision in (Foundry account/project, container registry, hosted agent). Before a local self-deploy, run `bunx --bun @bnbagent/deploy-cli@0.5.13 login --provider azure`; use OIDC/service-principal credentials in CI.
 
 ## ⚠️ Foundry gotchas (read before deploying)
 
@@ -49,7 +49,7 @@ Procedure for deploying and operating the seller Agent on **Azure AI Foundry Hos
 
 > The encrypted keystore (`.studio/wallets/`) stays at the workspace root and rides only that secret channel - never baked into the image.
 
-Provider-native overrides go in the optional `studio.toml [deploy.foundry]` table (verbatim deploy-spec keys; deploy-cli 0.5.12 consumes `account`, `cpu`, `location`, `memory`, `project`, `projectEndpoint`, `protocol`, `registry`, `subscriptionId` and warns about anything else). The `[azure]` block's `subscription_id` / `account_name` / `project_name` / `project_endpoint` / `location` win over conflicting `[deploy.foundry]` keys.
+Provider-native overrides go in the optional `studio.toml [deploy.foundry]` table (verbatim deploy-spec keys; deploy-cli 0.5.13 consumes `account`, `cpu`, `location`, `memory`, `project`, `projectEndpoint`, `protocol`, `registry`, `subscriptionId` and warns about anything else). The `[azure]` block's `subscription_id` / `account_name` / `project_name` / `project_endpoint` / `location` win over conflicting `[deploy.foundry]` keys.
 
 ## Typical workflow
 
@@ -95,6 +95,13 @@ Invocations request. This does not make the Azure CLI a deploy prerequisite;
 application clients may mint the same `https://ai.azure.com/.default` scope
 with `DefaultAzureCredential` or `ClientSecretCredential`.
 
+The generated curl stores the response headers, extracts
+`x-agent-session-id`, and prints the exact
+`bag deploy logs --provider azure --session <id>` command. Without an explicit
+session, logs lists the recent sessions visible to the current Azure identity.
+Foundry scopes that list by identity/isolation key, so an external buyer or
+gateway must still preserve the session header from its own response.
+
 The built-in smoke proves the container contract, not the seller signature. For a release E2E, invoke with a complete `negotiate` envelope and require `response.accepted=true`, a non-empty `negotiation_hash`, and `provider_sig`. The Invocations body is `{"input":"<serialized skill JSON>"}`.
 
 ### X402 external gateway
@@ -117,7 +124,9 @@ body:
 ```
 
 `bag deploy info --provider azure --json` reports the deployed face snapshot,
-seller state, carrier contract, and a no-work route probe. A PAID seller also
+seller state, carrier contract, and a request example. In FREE mode that
+example executes seller work without a payment; in PAID mode it returns the
+inner 402 before work until a valid payment is supplied. A PAID seller also
 needs fixed facilitator egress; use an Azure Container Apps workload-profiles
 environment with VNet integration and a NAT Gateway static IP, then allowlist
 that IP with B402. Studio does not deploy or manage the gateway or network.
@@ -126,11 +135,21 @@ that IP with B402. Studio does not deploy or manage the gateway or network.
 
 ```bash
 bag deploy destroy --provider azure                 # dry-run plan
+bag deploy destroy --provider azure --purge-images  # read-only ACR repository inventory
 bag deploy destroy --provider azure --execute       # delegates `destroy --yes`
+bag deploy destroy --provider azure --execute --purge-images # delete this agent's owned ACR repository
 bag deploy destroy --provider azure --execute --purge # retained resources too
 ```
 
-`--purge` also removes the retained resources the deploy record tracks - including the soft-deleted Cognitive Services account, freeing the custom subdomain immediately (otherwise held ~48h). A successful teardown clears the recorded `[azure].agent_endpoint`.
+Default destroy keeps pushed images and reports that they continue to bill for
+storage. `--purge-images` inventories manifest/tag count and estimated image
+size, then deletes only the deterministic `bnbagent/<agent-name>` repository in
+a registry proven to be owned by bnbagent-deploy. External registry overrides,
+untagged registries, and registries shared by another Foundry project are kept.
+`--purge` also removes the retained resources the deploy record tracks -
+including the soft-deleted Cognitive Services account, freeing the custom
+subdomain immediately (otherwise held ~48h). A successful teardown clears the
+recorded `[azure].agent_endpoint`.
 
 ## Scope note
 

package/skills/references/bnbagent-studio-use-bnb-trial.md

@@ -9,7 +9,7 @@ description: Use when deploying or operating a bnbagent-studio seller on the BNB
 
 Treat this provider as a temporary testnet sandbox. Require a throwaway wallet, keep `bsc-testnet`, and explain that the runtime signing material is transmitted to the operator's managed secret store for the trial. Never use a mainnet key. Exception: `wallet.kind='altana'` ships only the bounded, budget-limited, revocable session - the throwaway-wallet advice does not apply; tighten the session instead (`bag wallet session grant --force --budget-u <small> --expiry-days <short>`) and never run `bag wallet new` on an altana project (it breaks the session's `[wallet].address` anchor).
 
-All auth and cloud lifecycle work must cross the pinned `@bnbagent/deploy-cli@0.5.12` boundary. Do not call a cloud CLI or platform REST routes directly. The managed backend is recipe-derived: `agentcore` uses AWS; `azure-foundry` uses Azure. For headless managed Azure, confirm with `bag deploy --provider bnb --backend azure --yes`; never treat `--backend` as a cross-cloud recipe converter.
+All auth and cloud lifecycle work must cross the pinned `@bnbagent/deploy-cli@0.5.13` boundary. Do not call a cloud CLI or platform REST routes directly. The managed backend is recipe-derived: `agentcore` uses AWS; `azure-foundry` uses Azure. For headless managed Azure, confirm with `bag deploy --provider bnb --backend azure --yes`; never treat `--backend` as a cross-cloud recipe converter.
 
 ## Select and authenticate