@bnbagent/studio-cli 0.0.11-alpha.6 → 0.0.11

package/dist/bag.js

@@ -52,7 +52,7 @@ import {
   x402SellerIsFree,
   x402SellerPricingState,
   x402SellerUsesB402
-} from "./chunk-VVHPUKLV.js";
+} from "./chunk-VGSWNATS.js";
 import {
   TWAK_CLI_MIN_VERSION,
   TWAK_CLI_VERSION,
@@ -230,7 +230,7 @@ import {
 var CAMPAIGN_DOC_URL = "https://www.bnbchain.org/en/blog/bnb-agent-studio-is-live-on-bnb-chain-ai-agents-from-one-prompt";
 var CAMPAIGN_CHECK_TIMEOUT_MS = 6e3;
 async function fetchCampaignActive() {
-  const { bnbPlatformApiUrl: bnbPlatformApiUrl2 } = await import("./deployCli-5DZVAKMZ.js");
+  const { bnbPlatformApiUrl: bnbPlatformApiUrl2 } = await import("./deployCli-4ATY3SUP.js");
   const controller = new AbortController();
   const timer = setTimeout(() => controller.abort(), CAMPAIGN_CHECK_TIMEOUT_MS);
   try {
@@ -4423,7 +4423,24 @@ async function deployAzureFoundry(opts) {
 async function destroyAzureFoundry(opts) {
   const workspaceRoot = deployWorkspaceRoot(opts.projectRoot);
   if (!opts.execute) {
-    const extra = opts.purge ? " --purge" : "";
+    if (opts.purge || opts.purgeImages) {
+      return withDeployFiles(
+        opts.projectRoot,
+        { target: "azure/foundry", packaging: "container" },
+        async (files, spec) => runDeployCliStream(
+          [
+            "destroy",
+            "-f",
+            files.configPath,
+            "--yes",
+            "--dry-run",
+            ...opts.purgeImages ? ["--purge-images"] : [],
+            ...opts.purge ? ["--purge"] : []
+          ],
+          { cwd: spec.agentRoot }
+        )
+      );
+    }
     printOut("=== bag deploy destroy \u2014 teardown plan (dry-run) ===\n");
     printOut(
       `project: ${path16.basename(workspaceRoot)}  (runtime: azure-foundry)
@@ -4431,9 +4448,7 @@ async function destroyAzureFoundry(opts) {
     );
     printOut("--- Agent (Foundry Hosted Agent) ---");
     printOut(
-      `  Teardown (delegated to bnbagent-deploy \u2014 removes the hosted agent + the Foundry resources its deploy record tracks):
-    bnbagent-deploy destroy --yes${extra}
-  Run \`bag deploy destroy --provider azure --execute\` to do this. Add \`--purge\` to also delete retained resources (e.g. the soft-deleted account, freeing the custom subdomain now instead of ~48h).`
+      "  Teardown (delegated to bnbagent-deploy \u2014 removes the hosted agent + the Foundry resources its deploy record tracks):\n    bnbagent-deploy destroy --yes\n  Run `bag deploy destroy --provider azure --execute` to do this. Add `--purge-images` to preview/remove this agent's owned ACR repository, or `--purge` to also delete retained infrastructure (e.g. the soft-deleted account, freeing the custom subdomain now instead of ~48h)."
     );
     printOut(
       "\n--- always note ---\n  - the encrypted keystore (.studio/wallets/) is left UNTOUCHED."
@@ -4452,6 +4467,7 @@ async function destroyAzureFoundry(opts) {
         "-f",
         files.configPath,
         "--yes",
+        ...opts.purgeImages ? ["--purge-images"] : [],
         ...opts.purge ? ["--purge"] : []
       ],
       { cwd: spec.agentRoot }
@@ -6140,9 +6156,7 @@ var LEGACY_SKILL_NAMES = [
 ];
 var ROUTER_SKILL_NAME = "bnbagent-studio";
 var META_FILENAME = ".bag-meta.json";
-var HIDDEN_SKILL_NAMES = /* @__PURE__ */ new Set([
-  "bnbagent-studio-use-azure-foundry"
-]);
+var HIDDEN_SKILL_NAMES = /* @__PURE__ */ new Set();
 function isDir3(p) {
   try {
     return fs20.statSync(p).isDirectory();
@@ -13898,6 +13912,7 @@ async function runPrepare(opts = {}) {
           checkLocalKeystoreExists,
           checkWalletPasswordEnvSet,
           checkLlmProviderKeySet,
+          checkPieverseKeyHash,
           checkCommerceReady,
           ...azureFoundryChecks
         ],
@@ -15433,9 +15448,12 @@ function registerDeploy(program) {
   ).option(
     "--yes",
     "Skip the typed project-name confirmation (required for --execute on a non-interactive terminal)."
+  ).option(
+    "--purge-images",
+    "Azure: inspect and delete only this agent's owned ACR repository; dry-run unless --execute is also supplied."
   ).option(
     "--purge",
-    "Also delete retained resources (ECR repository + CloudWatch log groups) via bnbagent-deploy's --purge."
+    "Also delete retained provider-owned infrastructure via bnbagent-deploy's --purge."
   ).action(
     act(
       (opts) => cmdDestroy(opts)
@@ -16170,6 +16188,7 @@ async function cmdAgent(opts, agentcoreArgs) {
       return rc;
     }
     await printAccessNextSteps2(root, "azure-foundry");
+    await printAzureAgentClientPrompt(root);
     return 0;
   }
   migrateEnvLocal(root);
@@ -16543,6 +16562,60 @@ async function printAgentClientPrompt2(root, destination, opts = {}) {
     printOut(`   Scrolled past it? Run:  cat ${saved}`);
   }
 }
+async function printAzureAgentClientPrompt(root) {
+  const agentRoot2 = findSubProjectRoot16("agent", root) ?? root;
+  const deployment = discoverRecordedDeployments(
+    deployWorkspaceRoot2(root)
+  ).find((candidate) => candidate.provider === "azure");
+  const endpoint = deployment?.endpoint ?? recordedEndpoint(root) ?? "<run `bag deploy info --provider azure` to recover the endpoint>";
+  const faces = deployment?.faces ?? agentFacesOf(agentRoot2);
+  const hasX402 = hasX402Face(faces);
+  const hasA2a = hasA2aFace(faces);
+  const request = hasA2a ? JSON.stringify(azureNegotiateQuickVerifyBody()) : hasX402 ? JSON.stringify(azureX402CarrierBody()) : JSON.stringify(azureNegotiateQuickVerifyBody());
+  const lines = [
+    "",
+    CLIENT_PROMPT_RULE2,
+    "\u{1F4CB} COPY EVERYTHING BELOW THIS LINE INTO CLAUDE CODE OR CURSOR",
+    "   \u2014 it will build and run an Azure Foundry operator/gateway client",
+    CLIENT_PROMPT_RULE2,
+    "I deployed a BNB Chain seller to Azure Foundry. Build a small TypeScript (fetch) Azure Foundry operator/gateway client and run one non-destructive smoke request.",
+    "",
+    "WHAT WAS DEPLOYED",
+    `- Faces: ${faces.join(", ") || "unknown"}`,
+    `- Entra-authenticated Invocations endpoint: ${endpoint}`,
+    `- Token scope: ${AZURE_FOUNDRY_TOKEN_SCOPE}`,
+    "- This is not an anonymous buyer URL. A public x402 buyer requires an external HTTPS gateway in front of Foundry.",
+    "",
+    "REQUEST",
+    `- POST application/json: ${request}`,
+    ...hasA2a ? ["- The input field contains the JSON-stringified negotiate payload."] : [],
+    ...hasX402 ? [
+      ...hasA2a ? [
+        `- X402 carrier alternative: ${JSON.stringify(azureX402CarrierBody())}`
+      ] : [],
+      "- The outer object is http-envelope-v1. Build it with:",
+      '  const inner = { prompt: "Say hi in one short sentence." };',
+      '  const body = Buffer.from(JSON.stringify(inner)).toString("base64");',
+      "- The outer response is another HTTP envelope. Decode response.body from base64 before parsing the inner x402 JSON."
+    ] : [],
+    "",
+    "AUTHENTICATION AND LOGS",
+    "- Obtain an Entra token for https://ai.azure.com with DefaultAzureCredential, ClientSecretCredential, or an operator-only `az account get-access-token` smoke command.",
+    "- Capture the response header `x-agent-session-id`; then stream that exact invocation with `bag deploy logs --provider azure --session <id>`.",
+    "",
+    "YOUR TASK",
+    "Create and run the client, print the outer status and body, decode the inner envelope when present, print x-agent-session-id, and show the exact logs command for that session. Do not claim that the Foundry endpoint is anonymously reachable.",
+    CLIENT_PROMPT_RULE2
+  ];
+  const text2 = lines.join("\n");
+  printOut(text2);
+  const saved = persistDeploySummary2(root, text2);
+  if (saved !== null) {
+    printOut(`
+\u{1F4BE} Saved the copy-paste prompt above to ${saved}`);
+    printOut(`   Scrolled past it? Run:  cat ${saved}`);
+  }
+}
 function persistDeploySummary2(root, text2) {
   try {
     if (!fs37.statSync(path37.resolve(root)).isDirectory()) {
@@ -16885,9 +16958,10 @@ function azureX402CarrierBody() {
     path: "/x402",
     query: {},
     headers: { "content-type": "application/json" },
-    body: Buffer.from(JSON.stringify({ prompt: "" }), "utf8").toString(
-      "base64"
-    )
+    body: Buffer.from(
+      JSON.stringify({ prompt: "Say hi in one short sentence." }),
+      "utf8"
+    ).toString("base64")
   };
 }
 function sameFaces(a, b) {
@@ -16960,7 +17034,7 @@ function printAzureInfo(root, deployment, opts) {
         method: "POST",
         content_type: "application/json",
         body: x402Body,
-        executes_seller_work: false
+        executes_seller_work: x402Status === "free"
       }
     }
   } : {
@@ -17033,26 +17107,39 @@ function printAzureInfo(root, deployment, opts) {
       );
       if (hasA2a && x402Body) {
         printOut(
-          `  x402 no-work route probe: ${JSON.stringify(x402Body)} (expect an inner 400 in FREE mode or 402 before payment in PAID mode)`
+          `  x402 request example: ${JSON.stringify(x402Body)} (expect work in FREE mode or 402 before payment in PAID mode)`
         );
       }
       printOut(`  x402 gateway guide: ${foundryX402GatewayGuideUrl()}`);
     }
   }
   if (opts.withCurl && body) {
-    printOut(
-      hasA2a ? "\nQuick-verify curl:" : "\nX402 no-work route-probe curl:"
-    );
+    printOut(hasA2a ? "\nQuick-verify curl:" : "\nX402 request curl:");
     printOut(
       `  AZURE_TOKEN=$(az account get-access-token --resource ${AZURE_FOUNDRY_TOKEN_RESOURCE} --query accessToken -o tsv)`
     );
     printOut(`  AZURE_ENDPOINT=${JSON.stringify(endpoint)}`);
+    printOut("  AZURE_HEADERS=$(mktemp)");
     printOut(
-      `  curl -sS -X POST "$AZURE_ENDPOINT" \\
+      `  AZURE_RESPONSE=$(curl -sS -D "$AZURE_HEADERS" -X POST "$AZURE_ENDPOINT" \\
     -H "Authorization: Bearer $AZURE_TOKEN" \\
     -H "Content-Type: application/json" \\
-    -d '${JSON.stringify(body)}'`
+    -d '${JSON.stringify(body)}')`
     );
+    printOut('  printf "%s\\n" "$AZURE_RESPONSE"');
+    printOut(
+      `  AZURE_SESSION=$(awk 'tolower($1) == "x-agent-session-id:" {gsub(/\\r/, "", $2); print $2}' "$AZURE_HEADERS" | tail -1)`
+    );
+    printOut('  printf "session: %s\\n" "$AZURE_SESSION"');
+    printOut('  bag deploy logs --provider azure --session "$AZURE_SESSION"');
+    if (!hasA2a && x402Body) {
+      printOut(
+        "\n  Decode response.body from base64 to read the inner x402 JSON."
+      );
+      printOut(
+        `  node -e 'const outer=JSON.parse(process.argv[1]); console.log(Buffer.from(outer.body,"base64").toString("utf8"))' "$AZURE_RESPONSE"`
+      );
+    }
     printOut(
       "\n  The Azure CLI command is only a convenient way to mint a token for this curl. Deployment itself does not require az/azd; DefaultAzureCredential or ClientSecretCredential can mint the same scope in an application."
     );
@@ -17170,6 +17257,10 @@ async function cmdDestroy(opts) {
     "destroy"
   );
   if (typeof deployment === "number") return deployment;
+  if (opts.purgeImages && deployment.provider !== "azure") {
+    printErr("error: --purge-images is only valid for Azure self-deployments");
+    return 2;
+  }
   if (deployment.provider === "bnb") {
     return platformDestroy({
       root,
@@ -17198,7 +17289,8 @@ async function cmdDestroy(opts) {
     return destroyAzureFoundry({
       projectRoot: workspaceRoot,
       execute: Boolean(opts.execute),
-      purge: Boolean(opts.purge)
+      purge: Boolean(opts.purge),
+      purgeImages: Boolean(opts.purgeImages)
     });
   }
   return runDestroy({

package/dist/{chunk-VVHPUKLV.js → chunk-VGSWNATS.js}

@@ -686,8 +686,8 @@ function packageRoot() {
   }
 }
 function studioCliVersion() {
-  if ("0.0.11-alpha.6") {
-    return "0.0.11-alpha.6";
+  if ("0.0.11") {
+    return "0.0.11";
   }
   const file = path3.join(packageRoot(), "package.json");
   const pkg = JSON.parse(fs3.readFileSync(file, "utf-8"));
@@ -937,7 +937,7 @@ function isTable(value) {
 }
 
 // src/cli/_deploy/deployCli.ts
-var DEPLOY_CLI_VERSION = "0.5.12";
+var DEPLOY_CLI_VERSION = "0.5.13";
 var DEPLOY_CLI_PACKAGE = `@bnbagent/deploy-cli@${DEPLOY_CLI_VERSION}`;
 var BNB_PLATFORM_API_URL = "https://bnbagent-api.bnbchain.world";
 var BNB_PLATFORM_API_URL_ENV = "BNBAGENT_API_URL";

package/dist/{deployCli-5DZVAKMZ.js → deployCli-4ATY3SUP.js}

@@ -18,7 +18,7 @@ import {
   runPlatformAccountCommand,
   trialFromDeployCliJson,
   withDeployFiles
-} from "./chunk-VVHPUKLV.js";
+} from "./chunk-VGSWNATS.js";
 import "./chunk-RO726HJG.js";
 export {
   BNB_PLATFORM_API_URL,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bnbagent/studio-cli",
-  "version": "0.0.11-alpha.6",
+  "version": "0.0.11",
   "description": "Skills-first toolkit and bag CLI for BNB Chain seller agents: ERC-8004 identity, ERC-8183 escrowed commerce, and x402 payments.",
   "keywords": [
     "bnb-chain",
@@ -25,6 +25,7 @@
     "directory": "packages/studio-cli"
   },
   "type": "module",
+  "packageManager": "pnpm@10.24.0",
   "engines": {
     "node": ">=22"
   },
@@ -41,8 +42,16 @@
   "bin": {
     "bag": "./dist/bag.js"
   },
+  "scripts": {
+    "build": "tsup",
+    "test": "vitest run",
+    "lint": "biome check src tests",
+    "typecheck": "tsc --noEmit",
+    "check": "pnpm typecheck && pnpm lint && pnpm test && pnpm build"
+  },
   "dependencies": {
     "@bnbagent/sdk": "0.5.0",
+    "@bnbagent/studio-runtime": "0.0.11",
     "ai": "^7.0.29",
     "archiver": "^8.0.0",
     "commander": "^15.0.0",
@@ -53,8 +62,7 @@
     "smol-toml": "^1.3.0",
     "tar": "^7.4.0",
     "viem": "^2.54.0",
-    "yaml": "^2.9.0",
-    "@bnbagent/studio-runtime": "0.0.11-alpha.6"
+    "yaml": "^2.9.0"
   },
   "devDependencies": {
     "@a2a-js/sdk": "^0.3.14",
@@ -70,12 +78,5 @@
     "typescript": "^5.5.0",
     "vitest": "^2.0.0",
     "zod": "^3.25.76"
-  },
-  "scripts": {
-    "build": "tsup",
-    "test": "vitest run",
-    "lint": "biome check src tests",
-    "typecheck": "tsc --noEmit",
-    "check": "pnpm typecheck && pnpm lint && pnpm test && pnpm build"
   }
-}
+}

package/skills/bnbagent-studio.md

@@ -53,7 +53,7 @@ Treat ERC-8183 amounts as decimal strings at CLI/config boundaries and `bigint`
 
 ## CLI groups at a glance
 
-`init`, `scan`, `recipe`, `skills`, `wallet`, `erc8004`, `erc8183`, `x402`, `agents`, `config`, `env`, `dev`, `doctor`, `audit`, `deploy`, `platform`, `llm`, `bundle`, `budget` - see `bag --help` for details. `bag deploy [--provider bnb\|aws\|azure] [--backend aws\|azure]` is the primary deploy command; `--backend` is valid only for provider `bnb` and confirms the recipe-derived managed backend. `prepare`, `verify`, `status`, `info`, `destroy`, `logs`, and `fix-gitignore` remain lifecycle subcommands (`deploy agent` is a deprecated compatibility alias). Provider deploy/status/logs/destroy and deploy-time credential validation are delegated to pinned `@bnbagent/deploy-cli@0.5.12`.
+`init`, `scan`, `recipe`, `skills`, `wallet`, `erc8004`, `erc8183`, `x402`, `agents`, `config`, `env`, `dev`, `doctor`, `audit`, `deploy`, `platform`, `llm`, `bundle`, `budget` - see `bag --help` for details. `bag deploy [--provider bnb\|aws\|azure] [--backend aws\|azure]` is the primary deploy command; `--backend` is valid only for provider `bnb` and confirms the recipe-derived managed backend. `prepare`, `verify`, `status`, `info`, `destroy`, `logs`, and `fix-gitignore` remain lifecycle subcommands (`deploy agent` is a deprecated compatibility alias). Provider deploy/status/logs/destroy and deploy-time credential validation are delegated to pinned `@bnbagent/deploy-cli@0.5.13`.
 
 ## Tool surface
 

package/skills/references/bnbagent-studio-use-aws-agentcore.md

@@ -1,6 +1,6 @@
 ---
 name: bnbagent-studio-use-aws-agentcore
-description: When the user wants to deploy or operate a bnbagent-studio project on AWS Bedrock AgentCore - deploy with `bag deploy --provider aws` (all cloud lifecycle mutations are delegated to pinned `@bnbagent/deploy-cli@0.5.12`), inspect with `bag deploy status` / `logs --provider aws` / `verify --provider aws`, and tear down with `bag deploy destroy --provider aws --execute [--purge]`. Also covers AWS credential prerequisites, the optional read-only quota probe, and the runtime-secret channel.
+description: When the user wants to deploy or operate a bnbagent-studio project on AWS Bedrock AgentCore - deploy with `bag deploy --provider aws` (all cloud lifecycle mutations are delegated to pinned `@bnbagent/deploy-cli@0.5.13`), inspect with `bag deploy status` / `logs --provider aws` / `verify --provider aws`, and tear down with `bag deploy destroy --provider aws --execute [--purge]`. Also covers AWS credential prerequisites, the optional read-only quota probe, and the runtime-secret channel.
 ---
 
 > **Reference file** of the `bnbagent-studio` router skill - installed at `bnbagent-studio/references/` and loaded on demand (not a standalone skill). Route here via the router's decision tree.

package/skills/references/bnbagent-studio-use-azure-foundry.md

@@ -1,6 +1,6 @@
 ---
 name: bnbagent-studio-use-azure-foundry
-description: When the user wants to deploy or operate a bnbagent-studio project on Azure AI Foundry Hosted Agents - scaffold with `bag init --runtime azure-foundry`, deploy either to the managed platform with `bag deploy --provider bnb --backend azure` or directly with `bag deploy --provider azure`; all cloud lifecycle execution is delegated to pinned `@bnbagent/deploy-cli@0.5.12`. Native MCP is not supported on Azure; use AgentCore for MCP.
+description: When the user wants to deploy or operate a bnbagent-studio project on Azure AI Foundry Hosted Agents - scaffold with `bag init --runtime azure-foundry`, deploy either to the managed platform with `bag deploy --provider bnb --backend azure` or directly with `bag deploy --provider azure`; all cloud lifecycle execution is delegated to pinned `@bnbagent/deploy-cli@0.5.13`. Native MCP is not supported on Azure; use AgentCore for MCP.
 ---
 
 > **Reference file** of the `bnbagent-studio` router skill - installed at `bnbagent-studio/references/` and loaded on demand (not a standalone skill). Route here via the router's decision tree.
@@ -31,7 +31,7 @@ Procedure for deploying and operating the seller Agent on **Azure AI Foundry Hos
 
 1. **Bun 1.3+ (`bunx`) on PATH** - the pinned `@bnbagent/deploy-cli` runs through it.
 2. **Docker running** - the image is built locally (linux/amd64) before push.
-3. **An Azure subscription** the operator may provision in (Foundry account/project, container registry, hosted agent). Before a local self-deploy, run `bunx --bun @bnbagent/deploy-cli@0.5.12 login --provider azure`; use OIDC/service-principal credentials in CI.
+3. **An Azure subscription** the operator may provision in (Foundry account/project, container registry, hosted agent). Before a local self-deploy, run `bunx --bun @bnbagent/deploy-cli@0.5.13 login --provider azure`; use OIDC/service-principal credentials in CI.
 
 ## ⚠️ Foundry gotchas (read before deploying)
 
@@ -49,7 +49,7 @@ Procedure for deploying and operating the seller Agent on **Azure AI Foundry Hos
 
 > The encrypted keystore (`.studio/wallets/`) stays at the workspace root and rides only that secret channel - never baked into the image.
 
-Provider-native overrides go in the optional `studio.toml [deploy.foundry]` table (verbatim deploy-spec keys; deploy-cli 0.5.12 consumes `account`, `cpu`, `location`, `memory`, `project`, `projectEndpoint`, `protocol`, `registry`, `subscriptionId` and warns about anything else). The `[azure]` block's `subscription_id` / `account_name` / `project_name` / `project_endpoint` / `location` win over conflicting `[deploy.foundry]` keys.
+Provider-native overrides go in the optional `studio.toml [deploy.foundry]` table (verbatim deploy-spec keys; deploy-cli 0.5.13 consumes `account`, `cpu`, `location`, `memory`, `project`, `projectEndpoint`, `protocol`, `registry`, `subscriptionId` and warns about anything else). The `[azure]` block's `subscription_id` / `account_name` / `project_name` / `project_endpoint` / `location` win over conflicting `[deploy.foundry]` keys.
 
 ## Typical workflow
 
@@ -95,6 +95,13 @@ Invocations request. This does not make the Azure CLI a deploy prerequisite;
 application clients may mint the same `https://ai.azure.com/.default` scope
 with `DefaultAzureCredential` or `ClientSecretCredential`.
 
+The generated curl stores the response headers, extracts
+`x-agent-session-id`, and prints the exact
+`bag deploy logs --provider azure --session <id>` command. Without an explicit
+session, logs lists the recent sessions visible to the current Azure identity.
+Foundry scopes that list by identity/isolation key, so an external buyer or
+gateway must still preserve the session header from its own response.
+
 The built-in smoke proves the container contract, not the seller signature. For a release E2E, invoke with a complete `negotiate` envelope and require `response.accepted=true`, a non-empty `negotiation_hash`, and `provider_sig`. The Invocations body is `{"input":"<serialized skill JSON>"}`.
 
 ### X402 external gateway
@@ -117,7 +124,9 @@ body:
 ```
 
 `bag deploy info --provider azure --json` reports the deployed face snapshot,
-seller state, carrier contract, and a no-work route probe. A PAID seller also
+seller state, carrier contract, and a request example. In FREE mode that
+example executes seller work without a payment; in PAID mode it returns the
+inner 402 before work until a valid payment is supplied. A PAID seller also
 needs fixed facilitator egress; use an Azure Container Apps workload-profiles
 environment with VNet integration and a NAT Gateway static IP, then allowlist
 that IP with B402. Studio does not deploy or manage the gateway or network.
@@ -126,11 +135,21 @@ that IP with B402. Studio does not deploy or manage the gateway or network.
 
 ```bash
 bag deploy destroy --provider azure                 # dry-run plan
+bag deploy destroy --provider azure --purge-images  # read-only ACR repository inventory
 bag deploy destroy --provider azure --execute       # delegates `destroy --yes`
+bag deploy destroy --provider azure --execute --purge-images # delete this agent's owned ACR repository
 bag deploy destroy --provider azure --execute --purge # retained resources too
 ```
 
-`--purge` also removes the retained resources the deploy record tracks - including the soft-deleted Cognitive Services account, freeing the custom subdomain immediately (otherwise held ~48h). A successful teardown clears the recorded `[azure].agent_endpoint`.
+Default destroy keeps pushed images and reports that they continue to bill for
+storage. `--purge-images` inventories manifest/tag count and estimated image
+size, then deletes only the deterministic `bnbagent/<agent-name>` repository in
+a registry proven to be owned by bnbagent-deploy. External registry overrides,
+untagged registries, and registries shared by another Foundry project are kept.
+`--purge` also removes the retained resources the deploy record tracks -
+including the soft-deleted Cognitive Services account, freeing the custom
+subdomain immediately (otherwise held ~48h). A successful teardown clears the
+recorded `[azure].agent_endpoint`.
 
 ## Scope note
 

package/skills/references/bnbagent-studio-use-bnb-trial.md

@@ -9,7 +9,7 @@ description: Use when deploying or operating a bnbagent-studio seller on the BNB
 
 Treat this provider as a temporary testnet sandbox. Require a throwaway wallet, keep `bsc-testnet`, and explain that the runtime signing material is transmitted to the operator's managed secret store for the trial. Never use a mainnet key. Exception: `wallet.kind='altana'` ships only the bounded, budget-limited, revocable session - the throwaway-wallet advice does not apply; tighten the session instead (`bag wallet session grant --force --budget-u <small> --expiry-days <short>`) and never run `bag wallet new` on an altana project (it breaks the session's `[wallet].address` anchor).
 
-All auth and cloud lifecycle work must cross the pinned `@bnbagent/deploy-cli@0.5.12` boundary. Do not call a cloud CLI or platform REST routes directly. The managed backend is recipe-derived: `agentcore` uses AWS; `azure-foundry` uses Azure. For headless managed Azure, confirm with `bag deploy --provider bnb --backend azure --yes`; never treat `--backend` as a cross-cloud recipe converter.
+All auth and cloud lifecycle work must cross the pinned `@bnbagent/deploy-cli@0.5.13` boundary. Do not call a cloud CLI or platform REST routes directly. The managed backend is recipe-derived: `agentcore` uses AWS; `azure-foundry` uses Azure. For headless managed Azure, confirm with `bag deploy --provider bnb --backend azure --yes`; never treat `--backend` as a cross-cloud recipe converter.
 
 ## Select and authenticate
 

package/LICENSE

@@ -1,201 +0,0 @@
-                                 Apache License
-                           Version 2.0, January 2004
-                        http://www.apache.org/licenses/
-
-   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
-
-   1. Definitions.
-
-      "License" shall mean the terms and conditions for use, reproduction,
-      and distribution as defined by Sections 1 through 9 of this document.
-
-      "Licensor" shall mean the copyright owner or entity authorized by
-      the copyright owner that is granting the License.
-
-      "Legal Entity" shall mean the union of the acting entity and all
-      other entities that control, are controlled by, or are under common
-      control with that entity. For the purposes of this definition,
-      "control" means (i) the power, direct or indirect, to cause the
-      direction or management of such entity, whether by contract or
-      otherwise, or (ii) ownership of fifty percent (50%) or more of the
-      outstanding shares, or (iii) beneficial ownership of such entity.
-
-      "You" (or "Your") shall mean an individual or Legal Entity
-      exercising permissions granted by this License.
-
-      "Source" form shall mean the preferred form for making modifications,
-      including but not limited to software source code, documentation
-      source, and configuration files.
-
-      "Object" form shall mean any form resulting from mechanical
-      transformation or translation of a Source form, including but
-      not limited to compiled object code, generated documentation,
-      and conversions to other media types.
-
-      "Work" shall mean the work of authorship, whether in Source or
-      Object form, made available under the License, as indicated by a
-      copyright notice that is included in or attached to the work
-      (an example is provided in the Appendix below).
-
-      "Derivative Works" shall mean any work, whether in Source or Object
-      form, that is based on (or derived from) the Work and for which the
-      editorial revisions, annotations, elaborations, or other modifications
-      represent, as a whole, an original work of authorship. For the purposes
-      of this License, Derivative Works shall not include works that remain
-      separable from, or merely link (or bind by name) to the interfaces of,
-      the Work and Derivative Works thereof.
-
-      "Contribution" shall mean any work of authorship, including
-      the original version of the Work and any modifications or additions
-      to that Work or Derivative Works thereof, that is intentionally
-      submitted to Licensor for inclusion in the Work by the copyright owner
-      or by an individual or Legal Entity authorized to submit on behalf of
-      the copyright owner. For the purposes of this definition, "submitted"
-      means any form of electronic, verbal, or written communication sent
-      to the Licensor or its representatives, including but not limited to
-      communication on electronic mailing lists, source code control systems,
-      and issue tracking systems that are managed by, or on behalf of, the
-      Licensor for the purpose of tracking or otherwise improving the Work,
-      but excluding communication that is conspicuously marked or otherwise
-      designated in writing by the copyright owner as "Not a Contribution."
-
-      "Contributor" shall mean Licensor and any individual or Legal Entity
-      on behalf of whom a Contribution has been received by Licensor and
-      subsequently incorporated within the Work.
-
-   2. Grant of Copyright License. Subject to the terms and conditions of
-      this License, each Contributor hereby grants to You a perpetual,
-      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
-      copyright license to reproduce, prepare Derivative Works of,
-      publicly display, publicly perform, sublicense, and distribute the
-      Work and such Derivative Works in Source or Object form.
-
-   3. Grant of Patent License. Subject to the terms and conditions of
-      this License, each Contributor hereby grants to You a perpetual,
-      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
-      (except as stated in this section) patent license to make, have made,
-      use, offer to sell, sell, import, and otherwise transfer the Work,
-      where such license applies only to those patent claims licensable
-      by such Contributor that are necessarily infringed by their
-      Contribution(s) alone or by combination of their Contribution(s)
-      with the Work to which such Contribution(s) was submitted. If You
-      institute patent litigation against any entity (including a
-      cross-claim or counterclaim in a lawsuit) alleging that the Work
-      or a Contribution incorporated within the Work constitutes direct
-      or contributory patent infringement, then any patent licenses
-      granted to You under this License for that Work shall terminate
-      as of the date such litigation is filed.
-
-   4. Redistribution. You may reproduce and distribute copies of the
-      Work or Derivative Works thereof in any medium, with or without
-      modifications, and in Source or Object form, provided that You
-      meet the following conditions:
-
-      (a) You must give any other recipients of the Work or
-          Derivative Works a copy of this License; and
-
-      (b) You must cause any modified files to carry prominent notices
-          stating that You changed the files; and
-
-      (c) You must retain, in the Source form of any Derivative Works
-          that You distribute, all copyright, patent, trademark, and
-          attribution notices from the Source form of the Work,
-          excluding those notices that do not pertain to any part of
-          the Derivative Works; and
-
-      (d) If the Work includes a "NOTICE" text file as part of its
-          distribution, then any Derivative Works that You distribute must
-          include a readable copy of the attribution notices contained
-          within such NOTICE file, excluding those notices that do not
-          pertain to any part of the Derivative Works, in at least one
-          of the following places: within a NOTICE text file distributed
-          as part of the Derivative Works; within the Source form or
-          documentation, if provided along with the Derivative Works; or,
-          within a display generated by the Derivative Works, if and
-          wherever such third-party notices normally appear. The contents
-          of the NOTICE file are for informational purposes only and
-          do not modify the License. You may add Your own attribution
-          notices within Derivative Works that You distribute, alongside
-          or as an addendum to the NOTICE text from the Work, provided
-          that such additional attribution notices cannot be construed
-          as modifying the License.
-
-      You may add Your own copyright statement to Your modifications and
-      may provide additional or different license terms and conditions
-      for use, reproduction, or distribution of Your modifications, or
-      for any such Derivative Works as a whole, provided Your use,
-      reproduction, and distribution of the Work otherwise complies with
-      the conditions stated in this License.
-
-   5. Submission of Contributions. Unless You explicitly state otherwise,
-      any Contribution intentionally submitted for inclusion in the Work
-      by You to the Licensor shall be under the terms and conditions of
-      this License, without any additional terms or conditions.
-      Notwithstanding the above, nothing herein shall supersede or modify
-      the terms of any separate license agreement you may have executed
-      with Licensor regarding such Contributions.
-
-   6. Trademarks. This License does not grant permission to use the trade
-      names, trademarks, service marks, or product names of the Licensor,
-      except as required for describing the origin of the Work and
-      reproducing the content of the NOTICE file.
-
-   7. Disclaimer of Warranty. Unless required by applicable law or
-      agreed to in writing, Licensor provides the Work (and each
-      Contributor provides its Contributions) on an "AS IS" BASIS,
-      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
-      implied, including, without limitation, any warranties or conditions
-      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
-      PARTICULAR PURPOSE. You are solely responsible for determining the
-      appropriateness of using or redistributing the Work and assume any
-      risks associated with Your exercise of permissions under this License.
-
-   8. Limitation of Liability. In no event and under no legal theory,
-      whether in tort (including negligence), contract, or otherwise,
-      unless required by applicable law (such as deliberate and grossly
-      negligent acts) or agreed to in writing, shall any Contributor be
-      liable to You for damages, including any direct, indirect, special,
-      incidental, or consequential damages of any character arising as a
-      result of this License or out of the use or inability to use the
-      Work (including but not limited to damages for loss of goodwill,
-      work stoppage, computer failure or malfunction, or any and all
-      other commercial damages or losses), even if such Contributor
-      has been advised of the possibility of such damages.
-
-   9. Accepting Warranty or Support. While redistributing
-      the Work or Derivative Works thereof, You may choose to offer,
-      and charge a fee for, acceptance of support, warranty, indemnity,
-      or other liability obligations and/or rights consistent with this
-      License. However, in accepting such obligations, You may act only
-      on Your own behalf and on Your sole responsibility, not on behalf
-      of any other Contributor, and only if You agree to indemnify,
-      defend, and hold each Contributor harmless for any liability
-      incurred by, or claims asserted against, such Contributor by reason
-      of your accepting any such warranty or support.
-
-   END OF TERMS AND CONDITIONS
-
-   APPENDIX: How to apply the Apache License to your work.
-
-      To apply the Apache License to your work, attach the following
-      boilerplate notice, with the fields enclosed by brackets "[]"
-      replaced with your own identifying information. (Don't include
-      the brackets!)  The text should be enclosed in the appropriate
-      comment syntax for the file format. We also recommend that a
-      file or class name and description of "Purpose" be included on the
-      same "printed page" as the copyright notice for easier
-      identification within third-party archives.
-
-   Copyright 2026 BNB Chain Studio
-
-   Licensed under the Apache License, Version 2.0 (the "License");
-   you may not use this file except in compliance with the License.
-   You may obtain a copy of the License at
-
-       http://www.apache.org/licenses/LICENSE-2.0
-
-   Unless required by applicable law or agreed to in writing, software
-   distributed under the License is distributed on an "AS IS" BASIS,
-   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
-   implied. See the License for the specific language governing
-   permissions and limitations under the License.