@bnbagent/studio-cli 0.0.13-alpha.2 → 0.0.13-alpha.4

package/dist/{chunk-XCKI45TP.js → chunk-OFAD65VZ.js}

@@ -33,7 +33,7 @@ import {
 import { build as esbuildBuild } from "esbuild";
 
 // src/cli/utils/protocol.ts
-var SUPPORTED_FACES = ["A2A", "MCP", "X402"];
+var SUPPORTED_FACES = ["A2A", "MCP", "X402", "MPP"];
 var LEGACY_ENTRY_STEMS = {
   unifiedMain: ["main", "foundryMain"],
   mcpMain: [],
@@ -57,7 +57,7 @@ function normalizeProtocolFaces(value) {
     const face = item.trim().toUpperCase();
     if (!SUPPORTED_FACES.includes(face)) {
       throw new Error(
-        `unsupported protocol face '${item}'; expected A2A, MCP, or X402`
+        `unsupported protocol face '${item}'; expected A2A, MCP, X402, or MPP`
       );
     }
     if (seen.has(face)) {
@@ -65,6 +65,11 @@ function normalizeProtocolFaces(value) {
     }
     seen.add(face);
   }
+  if (seen.has("X402") && seen.has("MPP")) {
+    throw new Error(
+      "X402 and MPP are alternative B402 payment protocols; select exactly one"
+    );
+  }
   return SUPPORTED_FACES.filter((face) => seen.has(face));
 }
 function stackFaces(stack, payments = {}) {
@@ -77,7 +82,7 @@ function stackFaces(stack, payments = {}) {
   const rawProtocol = typeof stack.protocol === "string" ? stack.protocol.trim().toUpperCase() : "A2A";
   const protocol = rawProtocol === "MCP" || rawProtocol === "A2A" ? rawProtocol : "A2A";
   const faces = [protocol];
-  if (table(payments.x402_seller).enabled === true) {
+  if (table(payments.b402_seller).enabled === true || table(payments.x402_seller).enabled === true) {
     faces.push("X402");
   }
   return SUPPORTED_FACES.filter((face) => faces.includes(face));
@@ -91,6 +96,12 @@ function hasMcpFace(faces) {
 function hasX402Face(faces) {
   return faces.includes("X402");
 }
+function hasMppFace(faces) {
+  return faces.includes("MPP");
+}
+function hasB402PaymentFace(faces) {
+  return hasX402Face(faces) || hasMppFace(faces);
+}
 function nativeProtocolOf(faces) {
   if (hasA2aFace(faces)) {
     return "A2A";
@@ -98,7 +109,7 @@ function nativeProtocolOf(faces) {
   if (hasMcpFace(faces)) {
     return "MCP";
   }
-  if (hasX402Face(faces)) {
+  if (hasB402PaymentFace(faces)) {
     return "A2A";
   }
   throw new Error("at least one protocol face is required");
@@ -144,7 +155,11 @@ async function buildZip(agentDir, outZip, opts = {}) {
   fs.mkdirSync(buildRoot, { recursive: true });
   try {
     const outfile = path.join(buildRoot, entrypoint);
-    await (opts.bundle ?? bundleEntry)(entry, outfile);
+    if (opts.bundle) {
+      await opts.bundle(entry, outfile);
+    } else {
+      await bundleEntry(entry, outfile, opts.managedPlatform === true);
+    }
     stageManifest(agentDir, buildRoot, entrypoint);
     stageStudioToml(agentDir, buildRoot);
     await stageAltanaSdk(agentDir, buildRoot, opts.bundle ?? bundleEntry);
@@ -202,13 +217,20 @@ function bundleFailure(exc) {
 ${msg.slice(0, 1e3)}`
   );
 }
-async function bundleEntry(entry, outfile) {
+async function bundleEntry(entry, outfile, managedPlatform = false) {
   try {
     await esbuildBuild({
       ...BUNDLE_OPTIONS,
       entryPoints: [entry],
       outfile,
-      minify: true
+      minify: true,
+      ...managedPlatform ? {
+        external: [
+          "@aws-sdk/client-s3",
+          "@azure/identity",
+          "@azure/storage-blob"
+        ]
+      } : {}
     });
   } catch (exc) {
     throw bundleFailure(exc);
@@ -497,15 +519,28 @@ function isB402TestnetBaseUrl(value) {
   return /sandbox|test/.test(value.toLowerCase());
 }
 function x402SellerUsesB402(cfg) {
-  const payments = table2(cfg.payments);
-  const seller = table2(payments.x402_seller);
+  const seller = b402SellerConfig(cfg);
   return seller.enabled === true && x402SellerPricingState(seller).kind === "paid";
 }
 function x402SellerIsFree(cfg) {
-  const payments = table2(cfg.payments);
-  const seller = table2(payments.x402_seller);
+  const seller = b402SellerConfig(cfg);
   return seller.enabled === true && x402SellerPricingState(seller).kind === "free";
 }
+function b402SellerConfig(cfg) {
+  const payments = table2(cfg.payments);
+  const canonical = table2(payments.b402_seller);
+  return Object.keys(canonical).length > 0 ? canonical : table2(payments.x402_seller);
+}
+function b402PaymentProtocol(cfg) {
+  const stack = table2(cfg.stack);
+  const faces = Array.isArray(stack.protocols) ? stack.protocols.map((face) => String(face).trim().toUpperCase()) : [];
+  if (faces.includes("X402") && faces.includes("MPP")) {
+    throw new Error(
+      "X402 and MPP are alternative B402 payment protocols; select exactly one."
+    );
+  }
+  return faces.includes("MPP") ? "mpp" : "x402";
+}
 function table2(value) {
   return value !== null && typeof value === "object" && !Array.isArray(value) ? value : {};
 }
@@ -756,8 +791,8 @@ function packageRoot() {
   }
 }
 function studioCliVersion() {
-  if ("0.0.13-alpha.2") {
-    return "0.0.13-alpha.2";
+  if ("0.0.13-alpha.4") {
+    return "0.0.13-alpha.4";
   }
   const file = path3.join(packageRoot(), "package.json");
   const pkg = JSON.parse(fs3.readFileSync(file, "utf-8"));
@@ -859,6 +894,7 @@ var B402_RUNTIME_KEYS = [
   "B402_PRIVATE_KEY",
   "B402_PRIVATE_KEY_B64"
 ];
+var MPP_RUNTIME_KEYS = ["MPP_SECRET_KEY", "MPP_REALM"];
 var X402_CAPABLE_RUNTIMES = /* @__PURE__ */ new Set([
   "agentcore",
   "azure-foundry"
@@ -867,7 +903,9 @@ function commerceRails(cfg) {
   const payments = table3(cfg.payments);
   return {
     erc8183: isTable(payments.erc8183),
-    x402: table3(payments.x402_seller).enabled === true
+    // Historical property name retained for callers; this means the common
+    // B402 seller rail, whether its public adapter is x402 or MPP.
+    x402: b402SellerConfig(cfg).enabled === true
   };
 }
 function b402Credentials(agentRoot) {
@@ -890,6 +928,22 @@ function b402Credentials(agentRoot) {
     baseUrl: values.get("B402_BASE_URL") ?? null
   };
 }
+function mppCredentials(agentRoot) {
+  const envPath = envLocalPath(agentRoot);
+  const secretKey = process.env.MPP_SECRET_KEY || getEnvVar(envPath, "MPP_SECRET_KEY");
+  const realm = process.env.MPP_REALM || getEnvVar(envPath, "MPP_REALM");
+  const secretKeyPresent = Boolean(secretKey);
+  const secretKeyValid = Boolean(
+    secretKey && Buffer.byteLength(secretKey, "utf8") >= 32
+  );
+  const realmPresent = Boolean(realm);
+  return {
+    secretKeyPresent,
+    secretKeyValid,
+    realmPresent,
+    complete: secretKeyValid && realmPresent
+  };
+}
 function loadDeployConfig(root) {
   const agentRoot = findSubProjectRoot("agent", root) ?? root;
   try {
@@ -912,20 +966,22 @@ function deploymentStatus(priceMode, credentialsComplete, runtime, destination)
 function x402DeploymentSnapshot(root, destination) {
   const { agentRoot, cfg } = loadDeployConfig(root);
   if (!commerceRails(cfg).x402) return null;
-  const seller = table3(table3(cfg.payments).x402_seller);
+  const seller = b402SellerConfig(cfg);
   const pricing = x402SellerPricingState(seller);
   const credentials = b402Credentials(agentRoot);
+  const protocol = b402PaymentProtocol(cfg);
+  const credentialsComplete = credentials.complete && (protocol !== "mpp" || mppCredentials(agentRoot).complete);
   const priceMode = pricing.kind;
   const runtime = String(table3(cfg.stack).runtime ?? "agentcore");
   return {
     status: deploymentStatus(
       priceMode,
-      credentials.complete,
+      credentialsComplete,
       runtime,
       destination
     ),
     priceMode,
-    credentialsComplete: credentials.complete
+    credentialsComplete
   };
 }
 function x402DeploySummary(root, destination, publicUrl) {
@@ -937,54 +993,62 @@ function x402DeploySummary(root, destination, publicUrl) {
     snapshot,
     runtime,
     destination,
-    publicUrl
+    publicUrl,
+    b402PaymentProtocol(cfg)
   );
 }
-function x402DeploySummaryFromSnapshot(snapshot, runtime, destination, publicUrl) {
-  const activation = `${B402_PAID_ONBOARDING_GUIDANCE} Then run the bnbagent-studio-selling-via-b402 skill, fill the four B402_* variables in .studio/.env.local, and redeploy.`;
+function x402DeploySummaryFromSnapshot(snapshot, runtime, destination, publicUrl, protocol = "x402") {
+  const label = protocol === "mpp" ? "MPP" : "x402";
+  const path7 = `/${protocol}`;
+  const activation = `${B402_PAID_ONBOARDING_GUIDANCE} Then run the bnbagent-studio-selling-via-b402 skill, fill the four B402_* variables${protocol === "mpp" ? " plus MPP_SECRET_KEY and MPP_REALM in .studio/.env.local, inject a durable atomic replayStore for production," : " in .studio/.env.local,"} and redeploy.`;
   if (destination !== "platform" && !X402_CAPABLE_RUNTIMES.has(runtime)) {
-    return `x402 rail is FORCED DORMANT: the ${runtime} runtime has no x402 path. Deploy to AgentCore or Azure Foundry (managed platform or self-hosted) to activate the rail.`;
+    return `${protocol} rail is FORCED DORMANT: the ${runtime} runtime has no ${path7} path. Deploy to AgentCore or Azure Foundry (managed platform or self-hosted) to activate the rail.`;
   }
   const azure = runtime === "azure-foundry";
   const runtimeLabel = azure ? "Azure Foundry" : "AgentCore";
-  const tunnelLine = azure ? 'The front wraps each request as envelope-v1 JSON, {"v":1,"method":"POST","path":"/x402","headers":{...},"body":"<base64>"}, inside an Entra-authenticated Foundry invocation (POST \u2026/agents/<name>/endpoint/protocols/invocations with an https://ai.azure.com bearer). Limits: 1 MiB request, 5 MiB response, no streaming.' : 'The front wraps each request as envelope-v1 JSON, {"v":1,"method":"POST","path":"/x402","headers":{...},"body":"<base64>"}, inside an authenticated AgentCore invocation. The default Bag self-deploy uses Cognito OAuth over HTTPS; IAM runtimes may use SDK/SigV4. Limits: 1 MiB request, 5 MiB response, no streaming.';
-  const gatewayDocLine = azure ? `Gateway example: https://unpkg.com/@bnbagent/studio-cli@${studioCliVersion()}/skills/references/bnbagent-studio-use-azure-foundry.md#x402-external-gateway` : "Gateway example: https://github.com/bnb-chain/bnbagent-studio/blob/main/docs/guides/self-hosted-x402-gateway.md";
+  const tunnelLine = azure ? `The front wraps each request as envelope-v1 JSON, {"v":1,"method":"POST","path":"${path7}","headers":{...},"body":"<base64>"}, inside an Entra-authenticated Foundry invocation (POST \u2026/agents/<name>/endpoint/protocols/invocations with an https://ai.azure.com bearer). Limits: 1 MiB request, 5 MiB response, no streaming.` : `The front wraps each request as envelope-v1 JSON, {"v":1,"method":"POST","path":"${path7}","headers":{...},"body":"<base64>"}, inside an authenticated AgentCore invocation. The default Bag self-deploy uses Cognito OAuth over HTTPS; IAM runtimes may use SDK/SigV4. Limits: 1 MiB request, 5 MiB response, no streaming.`;
+  const gatewayDocLine = azure ? protocol === "mpp" ? "Gateway contract: docs/guides/mpp-b402-selling.md" : `Gateway example: https://unpkg.com/@bnbagent/studio-cli@${studioCliVersion()}/skills/references/bnbagent-studio-use-azure-foundry.md#x402-external-gateway` : protocol === "mpp" ? "Gateway contract: https://github.com/bnb-chain/bnbagent-studio/blob/main/docs/guides/mpp-b402-selling.md" : "Gateway example: https://github.com/bnb-chain/bnbagent-studio/blob/main/docs/guides/self-hosted-x402-gateway.md";
   if (snapshot.priceMode === "invalid") {
-    return "x402 rail is DORMANT: price_usd is invalid; run `bag doctor`.";
+    return `${protocol} rail is DORMANT: price_usd is invalid; run \`bag doctor\`.`;
   }
   if (snapshot.priceMode === "free") {
     if (destination !== "platform") {
       return [
-        `x402 rail is ACTIVE in FREE mode (self-hosted ${runtimeLabel}).`,
+        `${protocol} rail is ACTIVE in FREE mode (self-hosted ${runtimeLabel}).`,
         "B402 verify/settle is bypassed; no credentials, token payment, or settlement audit is used.",
-        "This target has no anonymous public URL; expose /x402 with your own HTTP front.",
+        `This target has no anonymous public URL; expose ${path7} with your own HTTP front.`,
         tunnelLine,
-        `You may invoke ${runtimeLabel} with envelope-v1 directly, but that is not a standard public x402 HTTP endpoint.`,
+        `You may invoke ${runtimeLabel} with envelope-v1 directly, but that is not a standard public ${label} HTTP endpoint.`,
         gatewayDocLine
       ].join("\n");
     }
     const url2 = publicUrl ?? "<available after the platform agentId is assigned>";
     return [
-      "x402 rail is ACTIVE in FREE mode.",
+      `${protocol} rail is ACTIVE in FREE mode.`,
       `Anonymous FREE URL: ${url2}`,
       "B402 verify/settle is bypassed; no credentials, token payment, or settlement audit is used."
     ].join("\n");
   }
   if (!snapshot.credentialsComplete) {
-    return `x402 rail is DORMANT. To activate: ${activation}`;
+    return `${protocol} rail is DORMANT. To activate: ${activation}`;
   }
   const settlement = [
     "B402 settlement can add significant latency; buyer timeout must be at least 120 s.",
     "Settlement happens before work. If work later fails, the payment is retained and is not refunded automatically.",
-    "Compatibility note: current @bnb-chain/b402@0.1.0 makes one settle call and classifies an asynchronous pending response as outcome unknown; reconcile it and do not replay the paid request."
+    "B402 classifies an asynchronous pending response or other ambiguous settlement outcome as unknown; reconcile it and do not replay the paid request."
   ];
+  if (protocol === "mpp") {
+    settlement.push(
+      "MPP credentials are HMAC-bound; production replay protection requires a durable atomic replayStore shared by every runtime instance."
+    );
+  }
   if (destination !== "platform") {
     const egressLine = azure ? "PAID also needs fixed facilitator egress. Host the gateway on Azure Container Apps in a workload-profiles environment with a VNet + NAT Gateway static IP and allowlist that IP with B402 \u2014 no relay needed." : "PAID also needs fixed facilitator egress. Operate a restricted B402 Relay on a fixed-IP host such as a user-managed VPS, or use AgentCore VPC mode with a private subnet, NAT Gateway, and Elastic IP.";
     return [
-      `x402 rail is ACTIVE (self-hosted ${runtimeLabel}).`,
-      "This target has no anonymous public URL; expose /x402 with your own HTTP front.",
+      `${protocol} rail is ACTIVE (self-hosted ${runtimeLabel}).`,
+      `This target has no anonymous public URL; expose ${path7} with your own HTTP front.`,
       tunnelLine,
-      `You may invoke ${runtimeLabel} with envelope-v1 directly, but the caller must unpack the inner HTTP response and the result is not a standard public x402 endpoint.`,
+      `You may invoke ${runtimeLabel} with envelope-v1 directly, but the caller must unpack the inner HTTP response and the result is not a standard public ${label} endpoint.`,
       egressLine,
       gatewayDocLine.replace("Gateway example:", "Gateway and Relay examples:"),
       ...settlement
@@ -992,9 +1056,9 @@ function x402DeploySummaryFromSnapshot(snapshot, runtime, destination, publicUrl
   }
   const url = publicUrl ?? "<available after the platform agentId is assigned>";
   return [
-    "x402 rail is ACTIVE.",
+    `${protocol} rail is ACTIVE.`,
     `Anonymous paid URL: ${url}`,
-    "The managed platform supplies the x402 HTTP Gateway and the fixed-egress B402 Relay; no user-managed gateway, proxy, or VPC is required.",
+    `The managed platform supplies the ${label} HTTP Gateway and the fixed-egress B402 Relay; no user-managed gateway, proxy, or VPC is required.`,
     `Payment policy and RSA signing remain inside the ${runtimeLabel} seller. The B402 Relay only forwards the signed request to its fixed facilitator upstream.`,
     ...settlement
   ].join("\n");
@@ -1007,7 +1071,7 @@ function isTable(value) {
 }
 
 // src/cli/_deploy/deployCli.ts
-var DEPLOY_CLI_VERSION = "0.5.13";
+var DEPLOY_CLI_VERSION = "0.5.15";
 var DEPLOY_CLI_PACKAGE = `@bnbagent/deploy-cli@${DEPLOY_CLI_VERSION}`;
 var BNB_PLATFORM_API_URL = "https://bnbagent-api.bnbchain.world";
 var BNB_PLATFORM_API_URL_ENV = "BNBAGENT_API_URL";
@@ -1034,11 +1098,14 @@ var RESERVED_AGENTCORE_KEYS = ["environmentVariables", "secretName"];
 var FOUNDRY_PASSTHROUGH_KEYS = /* @__PURE__ */ new Set([
   "account",
   "cpu",
+  "incomingA2a",
+  "agentCard",
   "location",
   "memory",
   "project",
   "projectEndpoint",
   "protocol",
+  "rawInvocations",
   "registry",
   "subscriptionId"
 ]);
@@ -1151,7 +1218,27 @@ function buildDeploySpec(root, opts) {
     }
     Object.assign(foundry, passthrough);
     if (!("protocol" in foundry)) {
-      foundry.protocol = "invocations";
+      foundry.protocol = "responses";
+    }
+    if (foundry.protocol === "responses" && !("incomingA2a" in foundry)) {
+      foundry.incomingA2a = true;
+    }
+    if (foundry.protocol === "responses" && hasB402PaymentFace(faces)) {
+      foundry.rawInvocations = true;
+    }
+    if (foundry.incomingA2a === true && !("agentCard" in foundry)) {
+      foundry.agentCard = {
+        name,
+        description: `BNB Agent Studio seller ${name}`,
+        version: "1.0",
+        skills: [
+          {
+            id: "erc8183-seller",
+            name: "ERC-8183 seller",
+            description: "Negotiate and fulfil ERC-8183 jobs."
+          }
+        ]
+      };
     }
     const azure = tableOf(studio, "azure");
     for (const [source, dest] of [
@@ -1182,6 +1269,9 @@ function buildDeploySpec(root, opts) {
     }
     deploy.protocol = protocol;
     const stackRuntime = String(stack.runtime ?? "agentcore");
+    doc.deliverables = {
+      storage: stackRuntime === "azure-foundry" ? "azure-blob" : "s3"
+    };
     doc.bnb = stackRuntime === "azure-foundry" ? {
       apiUrl: bnbPlatformApiUrl(),
       backend: "azure",
@@ -1191,9 +1281,11 @@ function buildDeploySpec(root, opts) {
   if (opts.inlineSecrets) {
     Object.assign(env, opts.inlineSecrets);
   }
-  if (opts.target === "bnb/trial" && (!hasProtocolsArray || hasX402Face(faces)) && commerceRails(studio).x402 && (x402SellerIsFree(studio) || b402Credentials(agentRoot).complete)) {
-    doc.x402 = {
-      publicPaths: ["/x402"],
+  const paymentProtocol = b402PaymentProtocol(studio);
+  const hasSelectedPaymentFace = paymentProtocol === "mpp" ? hasMppFace(faces) : hasX402Face(faces);
+  if (opts.target === "bnb/trial" && (!hasProtocolsArray || hasSelectedPaymentFace) && commerceRails(studio).x402 && (x402SellerIsFree(studio) || b402Credentials(agentRoot).complete && (paymentProtocol !== "mpp" || mppCredentials(agentRoot).complete))) {
+    doc[paymentProtocol] = {
+      publicPaths: [paymentProtocol === "mpp" ? "/mpp" : "/x402"],
       tunnel: "http-envelope-v1"
     };
   }
@@ -1203,7 +1295,7 @@ function buildDeploySpec(root, opts) {
       tunnel: "http-envelope-v1"
     };
   }
-  if (opts.target === "bnb/trial" && hasProtocolsArray && faces.length === 1 && hasX402Face(faces)) {
+  if (opts.target === "bnb/trial" && hasProtocolsArray && faces.length === 1 && hasB402PaymentFace(faces)) {
     doc.suppressProtocolFace = true;
   }
   doc.env = env;
@@ -1233,7 +1325,8 @@ async function withDeployFiles(root, opts, fn) {
       const faces = stackFaces(stack, tableOf(studio, "payments"));
       const outZip = path6.join(scratch, "code.zip");
       const built = await (opts.buildZipFn ?? buildZip)(agentRoot, outZip, {
-        protocols: faces
+        protocols: faces,
+        managedPlatform: opts.target === "bnb/trial"
       });
       zip = { path: outZip, entrypoint: built.entrypoint };
     }
@@ -1412,13 +1505,14 @@ export {
   hasA2aFace,
   hasMcpFace,
   hasX402Face,
+  hasMppFace,
+  hasB402PaymentFace,
   nativeProtocolOf,
   entryStemOf,
   devPortOf,
   recipeModeOf,
   dryRunBundle,
   DEFAULT_B402_PRICE_USD,
-  DEFAULT_B402_TESTNET_BASE_URL,
   B402_DEVELOPER_ACCOUNT_URL,
   B402_PAID_ONBOARDING_GUIDANCE,
   x402SellerPricingState,
@@ -1426,6 +1520,7 @@ export {
   isB402TestnetBaseUrl,
   x402SellerUsesB402,
   x402SellerIsFree,
+  b402PaymentProtocol,
   whichBin,
   agentcoreFlavor,
   checkBunx,
@@ -1438,6 +1533,7 @@ export {
   studioCliVersion,
   pnpmVersion,
   B402_RUNTIME_KEYS,
+  MPP_RUNTIME_KEYS,
   X402_CAPABLE_RUNTIMES,
   commerceRails,
   b402Credentials,

package/dist/{deployCli-HZNZU3CN.js → deployCli-NZAZDPKK.js}

@@ -18,7 +18,7 @@ import {
   runPlatformAccountCommand,
   trialFromDeployCliJson,
   withDeployFiles
-} from "./chunk-XCKI45TP.js";
+} from "./chunk-OFAD65VZ.js";
 import "./chunk-RO726HJG.js";
 export {
   BNB_PLATFORM_API_URL,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bnbagent/studio-cli",
-  "version": "0.0.13-alpha.2",
+  "version": "0.0.13-alpha.4",
   "description": "Skills-first toolkit and bag CLI for BNB Chain seller agents: ERC-8004 identity, ERC-8183 escrowed commerce, and x402 payments.",
   "keywords": [
     "bnb-chain",
@@ -42,7 +42,7 @@
     "bag": "./dist/bag.js"
   },
   "dependencies": {
-    "@bnbagent/sdk": "0.5.2-alpha.1",
+    "@bnbagent/sdk": "0.5.3",
     "ai": "^7.0.29",
     "archiver": "^8.0.0",
     "commander": "^15.0.0",
@@ -54,7 +54,7 @@
     "tar": "^7.4.0",
     "viem": "^2.54.0",
     "yaml": "^2.9.0",
-    "@bnbagent/studio-runtime": "0.0.13-alpha.2"
+    "@bnbagent/studio-runtime": "0.0.13-alpha.4"
   },
   "devDependencies": {
     "@a2a-js/sdk": "^0.3.14",
@@ -73,6 +73,7 @@
   },
   "scripts": {
     "build": "tsup",
+    "pretest": "pnpm --filter @bnbagent/studio-runtime build",
     "test": "vitest run",
     "lint": "biome check src tests",
     "typecheck": "tsc --noEmit",

package/recipes/agent/recipe.toml

@@ -11,7 +11,7 @@ node = [
     # neutral. The agent project's serving deps (@a2a-js/sdk / MCP SDK / ai)
     # come from the runtimes/<R>/ recipe selected at `bag init` time.
     "@bnbagent/studio-runtime",
-    "@bnbagent/sdk@0.5.2-alpha.1",
+    "@bnbagent/sdk@0.5.3",
 ]
 
 [env]

package/recipes/mpp-buyer/code/{{PKG}}/mppBuyer.ts.tmpl

@@ -0,0 +1,113 @@
+/**
+ * Native MPP+B402 buyer tools — emitted by `bag recipe code mpp-buyer`.
+ *
+ * Trust a merchant first with `bag mpp trust <url>`. The runtime enforces
+ * exact host, realm, recipient, network, asset, per-call, and daily-budget
+ * constraints before signing. P0 supports evm-local + EIP-3009 only.
+ * x402 is a separate alternative protocol and is never used as fallback.
+ *
+ * Wire into an agent:
+ *
+ *   import { MPP_BUYER_TOOLS } from "./mppBuyer.js";
+ *   tools: { ...LLM_READ_TOOLS, ...MPP_BUYER_TOOLS },
+ */
+
+import { loadStudioToml } from "@bnbagent/studio-runtime/config";
+import {
+  MppBuyerPolicy,
+  MppError,
+  fetchMppWithPayment,
+  quoteMppUrl,
+} from "@bnbagent/studio-runtime/mpp";
+import { getWallet } from "@bnbagent/studio-runtime/wallet";
+import { tool, type ToolSet } from "ai";
+import { z } from "zod";
+
+function policy(): MppBuyerPolicy {
+  return MppBuyerPolicy.fromToml(loadStudioToml());
+}
+
+export async function buyWithMpp(
+  url: string,
+  maxUsd: number,
+  method = "GET",
+): Promise<Record<string, unknown>> {
+  const buyerPolicy = policy();
+  try {
+    const result = await fetchMppWithPayment(url, {
+      wallet: getWallet(),
+      maxUsd: Math.min(maxUsd, buyerPolicy.maxPerRequestUsd),
+      method,
+      policy: buyerPolicy,
+    });
+    return {
+      ok:
+        result.statusCode >= 200 &&
+        result.statusCode < 300 &&
+        result.paymentOutcome !== "unknown",
+      status: result.statusCode,
+      json: result.json,
+      paid_usd: result.paidUsd,
+      payment_outcome: result.paymentOutcome,
+      payment_reference: result.receipt?.reference ?? null,
+    };
+  } catch (error) {
+    if (error instanceof MppError) {
+      return {
+        ok: false,
+        error: error.constructor.name,
+        message: error.message,
+        payment_outcome:
+          error.constructor.name === "MppPaymentOutcomeUnknownError"
+            ? "unknown"
+            : "not-dispatched",
+      };
+    }
+    throw error;
+  }
+}
+
+export async function quoteMpp(
+  url: string,
+  method = "GET",
+): Promise<Record<string, unknown>> {
+  const buyerPolicy = policy();
+  try {
+    const result = await quoteMppUrl(url, {
+      method,
+      policy: buyerPolicy,
+    });
+    return {
+      ok: result.challenge !== null,
+      status: result.statusCode,
+      challenge: result.challenge,
+    };
+  } catch (error) {
+    if (error instanceof MppError) {
+      return { ok: false, error: error.constructor.name, message: error.message };
+    }
+    throw error;
+  }
+}
+
+export const MPP_BUYER_TOOLS: ToolSet = {
+  buy_with_mpp: tool({
+    description:
+      "Pay a trusted native MPP+B402 endpoint with EIP-3009. max_usd is a refusal threshold; Studio merchant and daily caps remain authoritative.",
+    inputSchema: z.object({
+      url: z.string(),
+      max_usd: z.number().positive(),
+      method: z.string().optional(),
+    }),
+    execute: async ({ url, max_usd, method }) =>
+      buyWithMpp(url, max_usd, method ?? "GET"),
+  }),
+  quote_mpp: tool({
+    description: "Probe a trusted native MPP+B402 endpoint without paying.",
+    inputSchema: z.object({
+      url: z.string(),
+      method: z.string().optional(),
+    }),
+    execute: async ({ url, method }) => quoteMpp(url, method ?? "GET"),
+  }),
+};

package/recipes/mpp-buyer/recipe.toml

@@ -0,0 +1,15 @@
+[recipe]
+name = "mpp-buyer"
+description = "Native MPP+B402 buyer tools guarded by trusted merchant recipient/realm pins and per-call/daily caps."
+status = "v0.0.x"
+
+[dependencies]
+node = [
+    "@bnbagent/studio-runtime",
+    "@bnbagent/sdk@0.5.3",
+    "ai@^7.0.29",
+    "zod@^3.25.0",
+]
+
+[env]
+WALLET_PASSWORD = "evm-local keystore password used for EIP-3009 signing"

package/recipes/runtimes/agentcore/code/{{PKG}}/dualMain.ts.tmpl

@@ -67,11 +67,11 @@ import {
 } from "@bnbagent/studio-runtime/wallet";
 import {
   createEnvelopeMiddleware,
-  X402_SELL_PATH,
-  type X402HttpRequest,
-  type X402RunWork,
-  X402Seller,
-} from "@bnbagent/studio-runtime/x402";
+  b402SellPath,
+  type B402HttpRequest,
+  type B402RunWork,
+  B402Seller,
+} from "@bnbagent/studio-runtime/b402";
 import { generateText, stepCountIs } from "ai";
 import express from "express";
 import { StreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/streamableHttp.js";
@@ -236,8 +236,8 @@ function flatQuery(query: Record<string, unknown>): Record<string, string> {
   return out;
 }
 
-function x402Work(runWork: RunWork): X402RunWork {
-  return ({ prompt }) => runWork(prompt, { sessionId: "x402" });
+function b402Work(runWork: RunWork): B402RunWork {
+  return ({ prompt }) => runWork(prompt, { sessionId: "b402" });
 }
 
 // ── serving ───────────────────────────────────────────────────────────────────
@@ -266,6 +266,7 @@ export async function buildDualApp(): Promise<{
 
   const cfg = loadStudioToml();
   const rails = { erc8183: hasErc8183Rail(cfg) };
+  const sellPath = b402SellPath(cfg);
   const port = Number(process.env.AGENT_PORT || "9000");
   const runWork = buildRunWork();
 
@@ -279,13 +280,13 @@ export async function buildDualApp(): Promise<{
     commerceSkills: rails.erc8183,
   });
   const agentCard = buildAgentCard({ commerceSkills: rails.erc8183 });
-  const seller = await X402Seller.create({
+  const seller = await B402Seller.create({
     cfg,
-    runWork: x402Work(runWork),
+    runWork: b402Work(runWork),
     walletAddress: getWallet().address,
     resourceUrl: `${
       process.env.AGENTCORE_RUNTIME_URL ?? `http://localhost:${port}`
-    }${X402_SELL_PATH}`,
+    }${sellPath}`,
   });
 
   const handler = new DefaultRequestHandler(
@@ -309,10 +310,10 @@ export async function buildDualApp(): Promise<{
 
   if (seller.state !== "disabled") {
     app.all(
-      X402_SELL_PATH,
+      sellPath,
       express.text({ type: "*/*", limit: "1mb" }),
       async (req, res) => {
-        const request: X402HttpRequest = {
+        const request: B402HttpRequest = {
           method: req.method,
           path: req.path,
           query: flatQuery(req.query),