@bnbagent/studio-cli 0.0.13-alpha.6 → 0.0.13-alpha.8

package/dist/bag.js

@@ -19,6 +19,7 @@ import {
   checkTwak,
   commerceRails,
   deployChecks,
+  deployCommandOverrideAllowed,
   deployEndpointValue,
   devPortOf,
   dryRunBundle,
@@ -55,7 +56,7 @@ import {
   x402SellerIsFree,
   x402SellerPricingState,
   x402SellerUsesB402
-} from "./chunk-LEBIBQWN.js";
+} from "./chunk-NTDWVEW2.js";
 import {
   TWAK_CLI_MIN_VERSION,
   TWAK_CLI_VERSION,
@@ -233,7 +234,7 @@ import {
 var CAMPAIGN_DOC_URL = "https://www.bnbchain.org/en/blog/bnb-agent-studio-is-live-on-bnb-chain-ai-agents-from-one-prompt";
 var CAMPAIGN_CHECK_TIMEOUT_MS = 6e3;
 async function fetchCampaignActive() {
-  const { bnbPlatformApiUrl: bnbPlatformApiUrl2 } = await import("./deployCli-H65YVV3V.js");
+  const { bnbPlatformApiUrl: bnbPlatformApiUrl2 } = await import("./deployCli-ZESBUWQB.js");
   const controller = new AbortController();
   const timer = setTimeout(() => controller.abort(), CAMPAIGN_CHECK_TIMEOUT_MS);
   try {
@@ -1808,7 +1809,7 @@ async function vendorLocalTarballs(agentDir, opts = {}) {
     if (local === null) {
       continue;
     }
-    if (!opts.force && await publishedOnRegistry(pkgName, local.version)) {
+    if (opts.force === false && await publishedOnRegistry(pkgName, local.version)) {
       continue;
     }
     fs7.mkdirSync(vendorDir, { recursive: true });
@@ -2012,7 +2013,12 @@ async function createBundle(opts = {}) {
   fs8.mkdirSync(stagingRoot, { recursive: true });
   try {
     printOut(`\u2192 Staging seller workspace at ${stagedWorkspace}\u2026`);
-    copyWorkspace(workspaceRoot, stagedWorkspace, outputDir);
+    copyWorkspace(
+      workspaceRoot,
+      stagedWorkspace,
+      outputDir,
+      configuredBundleSecretPaths(agentRoot2)
+    );
     printOut("\u2192 Generating .studio/.env.local.example (values stripped)\u2026");
     writeEnvExample(agentRoot2, stagedWorkspace);
     printOut("\u2192 Packing @bnbagent/sdk + @bnbagent/studio-runtime\u2026");
@@ -2079,17 +2085,37 @@ function excludedName(name) {
   const lowerName = name.toLowerCase();
   return EXCLUDED_NAMES.has(lowerName) || CREDENTIAL_FILE_NAMES.has(lowerName) || lowerName.startsWith(".env") || lowerName.endsWith(".egg-info") || lowerName.startsWith(".venv-");
 }
+function configuredBundleSecretPaths(agentRoot2) {
+  const cfg = loadStudioToml2(path7.join(agentRoot2, "studio.toml"));
+  const wallet = cfg.wallet !== null && typeof cfg.wallet === "object" && !Array.isArray(cfg.wallet) ? cfg.wallet : {};
+  return ["keystore_dir", "twak_home", "session_file"].map((key) => wallet[key]).filter(
+    (value) => Boolean(typeof value === "string" && value.trim())
+  ).map(
+    (value) => path7.resolve(
+      path7.isAbsolute(value) ? value : path7.join(agentRoot2, value)
+    )
+  );
+}
 function inside(child, parent) {
   const rel = path7.relative(parent, child);
   return rel === "" || !rel.startsWith("..") && !path7.isAbsolute(rel);
 }
-function copyWorkspace(sourceRoot, destinationRoot, outputDir) {
+function copyWorkspace(sourceRoot, destinationRoot, outputDir, excludedSecretPaths = []) {
   const source = path7.resolve(sourceRoot);
   const excludedOutput = outputDir ? path7.resolve(outputDir) : null;
+  const secretPaths = excludedSecretPaths.map((value) => path7.resolve(value));
+  if (secretPaths.includes(source)) {
+    throw new Error(
+      "refusing to bundle: a configured wallet secret path resolves to the workspace root"
+    );
+  }
   const copy = (src, dst) => {
     if (excludedOutput !== null && inside(src, excludedOutput)) {
       return;
     }
+    if (src !== source && secretPaths.some((secret) => inside(src, secret))) {
+      return;
+    }
     const name = path7.basename(src);
     if (src !== source && excludedName(name)) {
       return;
@@ -2203,11 +2229,31 @@ function findStagedLeak(stagedWorkspace) {
         });
         if (unsafeExample) return `non-empty env example ${rel}`;
       }
+      if (stat.isFile()) {
+        const bytes = fs8.readFileSync(full);
+        if (bytes.includes(0)) continue;
+        const text2 = bytes.toString("utf-8");
+        if (looksLikeKeystore(text2)) return `keystore content in ${rel}`;
+        if (/(?:^|[^0-9a-f])0x[0-9a-f]{64}(?![0-9a-f])/iu.test(text2)) {
+          return `private-key content in ${rel}`;
+        }
+      }
     }
     return null;
   };
   return walk(root);
 }
+function looksLikeKeystore(text2) {
+  try {
+    const value = JSON.parse(text2);
+    const crypto6 = value.crypto;
+    return Boolean(
+      value.version === 3 && typeof value.address === "string" && crypto6 !== null && typeof crypto6 === "object" && typeof crypto6.ciphertext === "string" && typeof crypto6.kdf === "string"
+    );
+  } catch {
+    return false;
+  }
+}
 function writeInstallMd(stagedWorkspace, projectName2) {
   const lines = [
     `# ${projectName2} \u2014 install and operate`,
@@ -2467,7 +2513,7 @@ function isErc8183AmountKey(parts) {
   return parts.length === 3 && parts[0] === "payments" && parts[1] === "erc8183" && ["price", "min_price", "max_price"].includes(parts[2]);
 }
 function isB402PriceKey(parts) {
-  return parts.length === 3 && parts[0] === "payments" && parts[1] === "x402_seller" && parts[2] === "price_usd";
+  return parts.length === 3 && parts[0] === "payments" && (parts[1] === "b402_seller" || parts[1] === "x402_seller") && parts[2] === "price_usd";
 }
 function coerceKnownValue(parts, rawValue, typeFlag) {
   if (!isErc8183AmountKey(parts) && !isB402PriceKey(parts)) {
@@ -3231,8 +3277,8 @@ import * as fs24 from "fs";
 import * as os5 from "os";
 import * as path23 from "path";
 import { loadStudioToml as loadStudioToml11 } from "@bnbagent/studio-runtime/config";
-import { getNetwork as getNetwork7 } from "@bnbagent/studio-runtime/networks";
-import { writePrivate as writePrivate2 } from "@bnbagent/studio-runtime/secretWrite";
+import { getNetwork as getNetwork8 } from "@bnbagent/studio-runtime/networks";
+import { writePrivate as writePrivate3 } from "@bnbagent/studio-runtime/secretWrite";
 import { Option as Option3 } from "commander";
 
 // src/cli/_migrations.ts
@@ -3380,6 +3426,58 @@ function migrateKeystoreOutOfCodelocation(start) {
     }
   }
 }
+function excludeConfiguredWalletPathsFromDockerContext(start) {
+  const agentRoot2 = findSubProjectRoot5("agent", start);
+  if (agentRoot2 === null) return;
+  const cfg = loadStudioToml5(path11.join(agentRoot2, "studio.toml"));
+  const wallet = cfg.wallet !== null && typeof cfg.wallet === "object" && !Array.isArray(cfg.wallet) ? cfg.wallet : {};
+  const patterns = /* @__PURE__ */ new Set();
+  for (const [key, directory] of [
+    ["keystore_dir", true],
+    ["twak_home", true],
+    ["session_file", false]
+  ]) {
+    const configured = wallet[key];
+    if (typeof configured !== "string" || !configured.trim()) continue;
+    if (/\r|\n|[*?[\]]/u.test(configured)) {
+      throw new Error(
+        `[wallet].${key} contains characters that cannot be represented safely in .dockerignore; move the wallet path outside app/agent before deploy`
+      );
+    }
+    const resolved = path11.resolve(
+      path11.isAbsolute(configured) ? configured : path11.join(agentRoot2, configured)
+    );
+    const rel = path11.relative(agentRoot2, resolved);
+    if (rel === "") {
+      throw new Error(
+        `[wallet].${key} resolves to the deploy codeLocation; move wallet material outside app/agent before deploy`
+      );
+    }
+    if (rel === ".." || rel.startsWith(`..${path11.sep}`) || path11.isAbsolute(rel)) {
+      continue;
+    }
+    const normalized = rel.split(path11.sep).join("/");
+    patterns.add(`/${normalized}${directory ? "/" : ""}`);
+  }
+  if (patterns.size === 0) return;
+  const dockerignore = path11.join(agentRoot2, ".dockerignore");
+  let text2 = "";
+  try {
+    text2 = fs12.readFileSync(dockerignore, "utf-8");
+  } catch {
+  }
+  const additions = [...patterns].filter(
+    (pattern) => !text2.split(/\r?\n/u).includes(pattern)
+  );
+  if (additions.length === 0) return;
+  const separator = text2.length === 0 || text2.endsWith("\n") ? "" : "\n";
+  fs12.writeFileSync(
+    dockerignore,
+    `${text2}${separator}# Configured wallet paths (managed by bag deploy)
+${additions.join("\n")}
+`
+  );
+}
 function relocateKeys(src, target, label) {
   fs12.mkdirSync(target, { recursive: true });
   if (keystoreJsonFiles(target).length > 0) {
@@ -3421,10 +3519,11 @@ import * as fs23 from "fs";
 import * as os4 from "os";
 import * as path22 from "path";
 import {
-  getNetwork as getNetwork6,
+  getNetwork as getNetwork7,
   tbnbFaucetHint as tbnbFaucetHint3,
   uFaucetHint as uFaucetHint3
 } from "@bnbagent/studio-runtime/networks";
+import { writePrivate as writePrivate2 } from "@bnbagent/studio-runtime/secretWrite";
 import { ensureTwakKeychain } from "@bnbagent/studio-runtime/wallet";
 import { Option as Option2 } from "commander";
 import { parse as parseToml } from "smol-toml";
@@ -3701,7 +3800,12 @@ import { resolveProviderConfig } from "@bnbagent/studio-runtime/llm";
 // src/cli/_deploy/checks/altana.ts
 import * as fs14 from "fs";
 import * as path13 from "path";
-import { resolveProjectAltanaSdkEntry } from "@bnbagent/studio-runtime/wallet";
+import { getAddress as deployedAddresses } from "@bnbagent/sdk/networks";
+import { getNetwork as getNetwork3 } from "@bnbagent/studio-runtime/networks";
+import {
+  inspectAltanaSessionPermissions,
+  resolveProjectAltanaSdkEntry
+} from "@bnbagent/studio-runtime/wallet";
 var EXPIRY_WARN_SECONDS = 7 * 24 * 60 * 60;
 function isAltana(data) {
   return tableOf2(data, "wallet").kind === "altana";
@@ -3804,6 +3908,28 @@ function checkAltanaSessionReady(root, _target) {
       }
     ];
   }
+  const networkName = String(tableOf2(data, "network").default ?? "bsc-testnet");
+  const chainId = getNetwork3(networkName).chainId;
+  const deployment = deployedAddresses(chainId);
+  const permissionInspection = inspectAltanaSessionPermissions(
+    tableOf2(envelope, "permissions"),
+    chainId
+  );
+  if (!permissionInspection.current) {
+    return [
+      {
+        level: Level.CRITICAL,
+        name: "altana_session_permissions_current",
+        message: `the Altana session at ${sessionFile} does not match the selector-bound @bnbagent/sdk@0.5.4 permission set; older sessions may include target-wide calls or payment-token approve authority that outlives revocation. Revoke and grant a fresh session before deploying.`,
+        fixCmd: "bag wallet session grant --force",
+        details: {
+          required_policy: deployment.policy.toLowerCase(),
+          expected_call_count: permissionInspection.expectedCallCount,
+          actual_call_count: permissionInspection.actualCallCount
+        }
+      }
+    ];
+  }
   const out = [];
   const remaining = envelope.expiry - Math.floor(Date.now() / 1e3);
   if (remaining <= 0) {
@@ -4980,7 +5106,7 @@ import {
   resolveModel,
   resolveProviderConfig as resolveProviderConfig2
 } from "@bnbagent/studio-runtime/llm";
-import { getNetwork as getNetwork4 } from "@bnbagent/studio-runtime/networks";
+import { getNetwork as getNetwork5 } from "@bnbagent/studio-runtime/networks";
 import * as pieverseRt from "@bnbagent/studio-runtime/pieverse";
 import {
   PieverseKeyNotFoundError,
@@ -5001,7 +5127,7 @@ import { generateText } from "ai";
 // src/cli/_pieverseHelpers.ts
 import {
   fromRaw as fromRaw2,
-  getNetwork as getNetwork3,
+  getNetwork as getNetwork4,
   uFaucetHint
 } from "@bnbagent/studio-runtime/networks";
 import {
@@ -5043,7 +5169,7 @@ function resolvePieverseNetwork(cfg, networkOverride) {
   return projectDefault ? String(projectDefault) : "bsc-mainnet";
 }
 function printUBalanceShortfall(walletAddress, currentRaw, neededRaw, neededUsd, networkName) {
-  const net2 = getNetwork3(networkName);
+  const net2 = getNetwork4(networkName);
   const u = net2.token("U");
   const currentH = fromRaw2(currentRaw, u.decimals);
   const neededH = fromRaw2(neededRaw, u.decimals);
@@ -5585,7 +5711,7 @@ Retry: re-run \`bag llm activate\` \u2014 no state was persisted yet.`
     await auditedOp(
       "llm_activate",
       {
-        chainId: getNetwork4(networkName).chainId,
+        chainId: getNetwork5(networkName).chainId,
         asset: "U",
         amount: String(opts.initialUsd),
         agentAddr: wallet.address,
@@ -5873,7 +5999,7 @@ async function cmdTopup(opts) {
   const networkName = resolvePieverseNetwork(cfg, opts.network);
   let netChainId;
   try {
-    netChainId = getNetwork4(networkName).chainId;
+    netChainId = getNetwork5(networkName).chainId;
   } catch {
     netChainId = null;
   }
@@ -5925,7 +6051,7 @@ async function cmdTopup(opts) {
     result = await auditedOp(
       "cli_topup",
       {
-        chainId: getNetwork4(networkName).chainId,
+        chainId: getNetwork5(networkName).chainId,
         asset: "U",
         amount: String(opts.amount),
         agentAddr: wallet.address,
@@ -6849,7 +6975,7 @@ import * as fs21 from "fs";
 import * as path20 from "path";
 import { pathToFileURL } from "url";
 import { AltanaWalletProvider } from "@bnbagent/sdk";
-import { getAddress as deployedAddresses } from "@bnbagent/sdk/networks";
+import { getAddress as deployedAddresses2 } from "@bnbagent/sdk/networks";
 import {
   defaultAgentPermissions,
   deserializeSession,
@@ -6860,7 +6986,7 @@ import { auditedOp as auditedOp2 } from "@bnbagent/studio-runtime/audit";
 import { loadStudioToml as loadStudioToml9 } from "@bnbagent/studio-runtime/config";
 import {
   fromRaw as fromRaw3,
-  getNetwork as getNetwork5,
+  getNetwork as getNetwork6,
   tbnbFaucetHint,
   toRaw as toRaw2
 } from "@bnbagent/studio-runtime/networks";
@@ -6868,6 +6994,7 @@ import { writePrivate } from "@bnbagent/studio-runtime/secretWrite";
 import {
   ALTANA_NETWORK_BY_STUDIO,
   PASSWORD_ENV,
+  inspectAltanaSessionPermissions as inspectAltanaSessionPermissions2,
   resolveProjectAltanaSdkEntry as resolveProjectAltanaSdkEntry2
 } from "@bnbagent/studio-runtime/wallet";
 var defaultAdminFactory = (opts) => AltanaWalletProvider.adminFromKeystore(opts);
@@ -6909,7 +7036,7 @@ function loadContext(projectRoot) {
     projectRoot,
     walletCfg,
     networkName,
-    network: getNetwork5(networkName),
+    network: getNetwork6(networkName),
     altanaNetwork,
     sessionFile: resolvePath(
       walletCfg.session_file,
@@ -6984,6 +7111,7 @@ function withRelayGasDiagnosis(ctx, admin) {
     approveX402SignatureChecker: guard(
       admin.approveX402SignatureChecker.bind(admin)
     ),
+    setErc8183Allowance: guard(admin.setErc8183Allowance.bind(admin)),
     setPermit2Allowance: guard(admin.setPermit2Allowance.bind(admin))
   };
 }
@@ -7034,6 +7162,60 @@ function readSession(ctx) {
   }
   return { serialized, envelope: parseSessionEnvelope(serialized) };
 }
+function encodedBigInt(value) {
+  if (typeof value === "bigint") return value;
+  if (typeof value === "string" && /^\d+$/u.test(value)) return BigInt(value);
+  const encoded = tableOf7(value).$bigint;
+  return typeof encoded === "string" && /^\d+$/u.test(encoded) ? BigInt(encoded) : null;
+}
+function sessionTokenLimit(envelope, token) {
+  const spend = envelope.permissions.spend;
+  if (!Array.isArray(spend)) {
+    throw new Error(
+      "saved Altana session has no token spend permissions; grant a fresh session with --force"
+    );
+  }
+  for (const cap of spend) {
+    const record = tableOf7(cap);
+    if (String(record.token ?? "").toLowerCase() !== token.toLowerCase()) {
+      continue;
+    }
+    const limit = encodedBigInt(record.limit);
+    if (limit !== null && limit > 0n) return limit;
+  }
+  throw new Error(
+    `saved Altana session has no positive spend cap for ${token}; grant a fresh session with --force`
+  );
+}
+function requireCurrentSessionPermissions(envelope, chainId) {
+  if (!inspectAltanaSessionPermissions2(envelope.permissions, chainId).current) {
+    throw new Error(
+      "saved Altana session does not match the selector-bound @bnbagent/sdk@0.5.4 permission set; revoke and grant a fresh session with --force"
+    );
+  }
+}
+async function clearCommerceAllowanceAndRevoke(admin, ctx, publicKey) {
+  const deployment = deployedAddresses2(ctx.network.chainId);
+  requireConfirmed(
+    await admin.setErc8183Allowance(
+      deployment.paymentToken,
+      deployment.commerceProxy,
+      0n
+    ),
+    "zero ERC-8183 Commerce allowance"
+  );
+  requireConfirmed(
+    await admin.revokeSession(publicKey),
+    "revoke Altana session"
+  );
+}
+function requireConfirmed(result, operation) {
+  if (result.status !== "CONFIRMED") {
+    throw new Error(
+      `${operation} returned ${result.status} (callsId ${result.callsId}); on-chain inclusion is not confirmed`
+    );
+  }
+}
 function writeSession(ctx, session) {
   fs21.mkdirSync(path20.dirname(ctx.sessionFile), { recursive: true, mode: 448 });
   fs21.chmodSync(path20.dirname(ctx.sessionFile), 448);
@@ -7112,9 +7294,12 @@ async function cmdSessionGrant(opts) {
         "--approve-only cannot be combined with grant/replacement options."
       );
     }
-    const { serialized } = readSession(ctx);
+    const { serialized, envelope } = readSession(ctx);
     const restored = await sessionDeserializer(serialized);
     const admin2 = buildAdmin(ctx);
+    const deployment = deployedAddresses2(ctx.network.chainId);
+    const tokenLimit2 = sessionTokenLimit(envelope, deployment.paymentToken);
+    requireCurrentSessionPermissions(envelope, ctx.network.chainId);
     await auditedOp2(
       "session_grant",
       {
@@ -7130,13 +7315,24 @@ async function cmdSessionGrant(opts) {
       },
       async () => {
         await requireAltanaAdminGas(ctx);
-        await admin2.approveQuoteSignatureChecker(
-          restored,
-          deployedAddresses(ctx.network.chainId).commerceProxy
+        requireConfirmed(
+          await admin2.setErc8183Allowance(
+            deployment.paymentToken,
+            deployment.commerceProxy,
+            tokenLimit2
+          ),
+          "set bounded ERC-8183 Commerce allowance"
+        );
+        requireConfirmed(
+          await admin2.approveQuoteSignatureChecker(
+            restored,
+            deployment.commerceProxy
+          ),
+          "approve ERC-8183 quote checker"
         );
       }
     );
-    printErr("\u2713 Altana ERC-8183 quote checker approval repaired.");
+    printErr("\u2713 Altana ERC-8183 allowance and quote checker repaired.");
     printOut(restored.publicKey);
     return 0;
   }
@@ -7177,7 +7373,7 @@ async function cmdSessionGrant(opts) {
       await requireAltanaAdminGas(ctx);
       if (existing !== null) {
         printErr(`Revoking existing Altana session ${existing.publicKey}\u2026`);
-        await admin.revokeSession(existing.publicKey);
+        await clearCommerceAllowanceAndRevoke(admin, ctx, existing.publicKey);
         printErr("\u2713 existing session revoked; replacement may proceed.");
       }
       const g = await admin.grantSession({
@@ -7197,13 +7393,22 @@ async function cmdSessionGrant(opts) {
       h.extraContext.expiry = g.expiry;
       writeSession(ctx, g);
       try {
-        await admin.approveQuoteSignatureChecker(
-          g,
-          deployedAddresses(ctx.network.chainId).commerceProxy
+        const deployment = deployedAddresses2(ctx.network.chainId);
+        requireConfirmed(
+          await admin.setErc8183Allowance(
+            deployment.paymentToken,
+            deployment.commerceProxy,
+            tokenLimit
+          ),
+          "set bounded ERC-8183 Commerce allowance"
+        );
+        requireConfirmed(
+          await admin.approveQuoteSignatureChecker(g, deployment.commerceProxy),
+          "approve ERC-8183 quote checker"
         );
       } catch (error) {
         throw new Error(
-          `session was granted and safely persisted at ${ctx.sessionFile}, but ERC-8183 quote checker approval failed: ${error instanceof Error ? error.message : String(error)}. Repair without paying for another grant: bag wallet session grant --approve-only`,
+          `session was granted and safely persisted at ${ctx.sessionFile}, but ERC-8183 allowance/checker setup failed: ${error instanceof Error ? error.message : String(error)}. Repair without paying for another grant: bag wallet session grant --approve-only`,
           { cause: error }
         );
       }
@@ -7265,7 +7470,7 @@ async function cmdSessionRevoke(opts) {
     },
     async () => {
       await requireAltanaAdminGas(ctx);
-      await admin.revokeSession(envelope.publicKey);
+      await clearCommerceAllowanceAndRevoke(admin, ctx, envelope.publicKey);
     }
   );
   fs21.unlinkSync(ctx.sessionFile);
@@ -7282,6 +7487,7 @@ async function cmdSessionX402Setup(opts) {
     "--allowance-u"
   );
   const { serialized, envelope } = readSession(ctx);
+  requireCurrentSessionPermissions(envelope, ctx.network.chainId);
   if (!await confirmed(
     `Authorize x402 for session ${envelope.publicKey} with a ${opts.allowanceU} U Permit2 ceiling?`,
     Boolean(opts.yes)
@@ -7305,11 +7511,17 @@ async function cmdSessionX402Setup(opts) {
     },
     async () => {
       await requireAltanaAdminGas(ctx);
-      await admin.approveX402SignatureChecker(restored);
+      requireConfirmed(
+        await admin.approveX402SignatureChecker(restored),
+        "approve x402 signature checker"
+      );
       try {
-        await admin.setPermit2Allowance(
-          deployedAddresses(ctx.network.chainId).paymentToken,
-          allowance
+        requireConfirmed(
+          await admin.setPermit2Allowance(
+            deployedAddresses2(ctx.network.chainId).paymentToken,
+            allowance
+          ),
+          "set bounded Permit2 allowance"
         );
       } catch (error) {
         throw new Error(
@@ -7346,7 +7558,7 @@ function registerWalletSession(walletCommand) {
     "Session lifetime in whole days (recommended: 30)."
   ).option("--no-register", "Grant without KeyStore registry visibility.").option("--force", "Revoke the existing session before replacement.").option(
     "--approve-only",
-    "Repair quote-checker approval for the saved session."
+    "Repair the bounded ERC-8183 allowance and quote-checker approval."
   ).option("--yes", "Accept the displayed choices without prompts.").option("--project-root <path>", "Override project root.").action(act(wrap((opts) => cmdSessionGrant(opts))));
   session.command("status").description("Read the saved session envelope without loading its signer.").option("--project-root <path>", "Override project root.").action(
     act(
@@ -8972,8 +9184,13 @@ function scaffold(target, name, o) {
     path22.join(agentRoot2, "pnpm-workspace.yaml"),
     renderAgentPnpmWorkspaceYaml()
   );
+  const studioRoot = path22.join(target, ".studio");
+  fs23.mkdirSync(studioRoot, { recursive: true, mode: 448 });
+  fs23.chmodSync(studioRoot, 448);
   if (o.walletKind === "evm-local" || o.walletKind === "altana") {
-    fs23.mkdirSync(path22.join(target, ".studio", "wallets"), { recursive: true });
+    const walletsDir = path22.join(studioRoot, "wallets");
+    fs23.mkdirSync(walletsDir, { recursive: true, mode: 448 });
+    fs23.chmodSync(walletsDir, 448);
   } else if (o.walletKind === "twak") {
     let homeDir;
     let label;
@@ -8984,7 +9201,8 @@ function scaffold(target, name, o) {
       homeDir = path22.isAbsolute(o.twakHome) ? o.twakHome : path22.resolve(agentRoot2, o.twakHome);
       label = o.twakHome;
     }
-    fs23.mkdirSync(homeDir, { recursive: true });
+    fs23.mkdirSync(homeDir, { recursive: true, mode: 448 });
+    fs23.chmodSync(homeDir, 448);
     if (ensureTwakKeychain(homeDir)) {
       printOut(
         `\u2713 isolated twak keychain ready under ${label} (macOS) \u2014 no manual \`security\` setup needed`
@@ -9003,9 +9221,10 @@ function scaffold(target, name, o) {
     path22.join(agentRoot2, "studio.toml"),
     renderAgentStudioToml(name, o)
   );
-  const envLocal = path22.join(target, ".studio", ".env.local");
-  fs23.mkdirSync(path22.dirname(envLocal), { recursive: true });
-  fs23.writeFileSync(
+  const envLocal = path22.join(studioRoot, ".env.local");
+  fs23.mkdirSync(path22.dirname(envLocal), { recursive: true, mode: 448 });
+  fs23.chmodSync(path22.dirname(envLocal), 448);
+  writePrivate2(
     envLocal,
     renderAgentEnvLocal(
       o.provider,
@@ -9433,7 +9652,7 @@ function renderAgentStudioToml(name, o) {
   const azureSection = o.runtime === "azure-foundry" ? renderAzureSection(name, o.azureAccount, o.azureProject) : "";
   const deploySection = renderDeploySection(o.destination, o.platformArtifact);
   const walletSection = renderWalletSection(o.walletKind, o.twakHome);
-  const currencyAddr = getNetwork6(o.network).token("U").address;
+  const currencyAddr = getNetwork7(o.network).token("U").address;
   const erc8183Section = o.rails === "8183" || o.rails === "both" ? `
 [payments.erc8183]
 # Read by the Agent: it quotes the FIXED \`price\`, CLAMPS it to [min,max],
@@ -11536,7 +11755,7 @@ function writeAgentcoreEnvLocal(agentcoreRoot, agentDir) {
 `).join("");
   fs24.mkdirSync(path23.dirname(envPath), { recursive: true });
   ensureAgentcoreEnvGitignored(path23.dirname(envPath));
-  writePrivate2(envPath, content);
+  writePrivate3(envPath, content);
   return [envPath, content !== prior];
 }
 function agentcoreProjectRoot2(workspaceRoot) {
@@ -11802,7 +12021,11 @@ Switch to Node \u226522 so it wins on PATH, then reopen the shell and retry. Ver
     printOut(
       `bag dev: starting Agent via \`agentcore dev\` on :${agentPort} (runtime=${runtimeName ?? "<default>"}, cwd=${root}); ${console2}`
     );
-    const launchEnv = { ...process.env, AGENT_PORT: String(agentPort) };
+    const launchEnv = {
+      ...process.env,
+      NODE_ENV: process.env.NODE_ENV?.trim() || "development",
+      AGENT_PORT: String(agentPort)
+    };
     if (walletKind2 === "altana") {
       Reflect.deleteProperty(launchEnv, "WALLET_PASSWORD");
     }
@@ -11815,6 +12038,7 @@ Switch to Node \u226522 so it wins on PATH, then reopen the shell and retry. Ver
     const args = opts.reload ? ["watch", entryFile] : [entryFile];
     const env = {
       ...process.env,
+      NODE_ENV: process.env.NODE_ENV?.trim() || "development",
       AGENT_PORT: String(agentPort),
       AGENT_BIND_HOST: opts.host,
       AGENT_HOST: opts.host
@@ -11887,7 +12111,7 @@ function networkBanner(agentDir) {
   }
   const trimmed = name.trim();
   try {
-    return `network=${trimmed} (chainId=${getNetwork7(trimmed).chainId})`;
+    return `network=${trimmed} (chainId=${getNetwork8(trimmed).chainId})`;
   } catch {
     return `network=${trimmed}`;
   }
@@ -12041,7 +12265,7 @@ async function checkAgentPackagePresent(root, target) {
   return [];
 }
 async function checkKeystoreNotInsideAgent(root, target) {
-  if (target !== "agentcore") {
+  if (target !== "agentcore" && target !== "azure-foundry") {
     return [];
   }
   const data = loadAgentToml(root);
@@ -12157,11 +12381,31 @@ function agentcoreEnvLocalIgnored(ws) {
   return acLines?.has(".env.local") ?? false;
 }
 function studioIgnored(lines) {
+  if (lines.has("!.studio/.env.local") || lines.has("!.studio/wallets/") || lines.has("!.studio/wallets")) {
+    return false;
+  }
   if (lines.has(".studio/") || lines.has(".studio")) {
     return true;
   }
   return lines.has(".studio/.env.local") && lines.has(".studio/wallets/");
 }
+async function gitSecretExposure(ws, ignoredPaths, trackedPaths = ignoredPaths) {
+  const tracked = await runCapture("git", ["ls-files", "--", ...trackedPaths], {
+    cwd: ws
+  });
+  if (tracked.code !== 0) return "unverifiable";
+  if (tracked.stdout.trim()) return "tracked";
+  for (const secretPath of ignoredPaths) {
+    const ignored = await runCapture(
+      "git",
+      ["check-ignore", "--quiet", "--", secretPath],
+      { cwd: ws }
+    );
+    if (ignored.code === 1) return "not-ignored";
+    if (ignored.code !== 0) return "unverifiable";
+  }
+  return "safe";
+}
 async function checkGitignoreExcludesSecrets(root, _target) {
   const out = [];
   const ws = path24.dirname(path24.dirname(envLocalPath12(root)));
@@ -12178,11 +12422,40 @@ async function checkGitignoreExcludesSecrets(root, _target) {
       }
     ];
   }
-  if (!studioIgnored(lines)) {
+  const gitProbe = await runCapture(
+    "git",
+    ["rev-parse", "--is-inside-work-tree"],
+    { cwd: ws }
+  );
+  const isGitRepository = gitProbe.code === 0 && gitProbe.stdout.trim() === "true";
+  const studioState = isGitRepository ? await gitSecretExposure(
+    ws,
+    [
+      ".studio/.env.local",
+      ".studio/wallets/__bnbagent_secret_probe__.json"
+    ],
+    [".studio/.env.local", ".studio/wallets/"]
+  ) : fs25.existsSync(path24.join(ws, ".git")) ? "unverifiable" : studioIgnored(lines) ? "safe" : "not-ignored";
+  if (studioState === "tracked") {
+    out.push({
+      level: Level.CRITICAL,
+      name: "gitignore_excludes_secrets",
+      message: ".studio secrets are already tracked by git; .gitignore cannot protect committed files. Remove them from the index and rotate any exposed credentials or wallet material.",
+      details: { tracked: [".studio/.env.local", ".studio/wallets/"] }
+    });
+  } else if (studioState === "unverifiable") {
+    out.push({
+      level: Level.CRITICAL,
+      name: "gitignore_excludes_secrets",
+      message: "could not verify .studio secret exclusions with git check-ignore/git ls-files; refusing to treat the wallet and .env.local as protected",
+      fixCmd: "bag deploy fix-gitignore",
+      details: { paths: [".studio/.env.local", ".studio/wallets/"] }
+    });
+  } else if (studioState === "not-ignored") {
     out.push({
       level: Level.CRITICAL,
       name: "gitignore_excludes_secrets",
-      message: "workspace .gitignore does not ignore .studio/ \u2014 the agent's .env.local + keystore live there and could be committed",
+      message: "workspace .studio secrets are not git-ignored \u2014 the agent's .env.local + keystore could be committed (gitignore negations are honoured)",
       fixCmd: "bag deploy fix-gitignore",
       details: { missing: [".studio/"] }
     });
@@ -12597,22 +12870,23 @@ async function checkDeployCliRunnable(_root, target) {
   }
   const override = (process.env.BNBAGENT_DEPLOY_COMMAND ?? "").trim();
   if (override) {
+    const allowed = deployCommandOverrideAllowed();
     return [
       {
-        level: Level.INFO,
+        level: allowed ? Level.INFO : Level.CRITICAL,
         name: "deploy_cli",
-        message: `deploy CLI overridden via BNBAGENT_DEPLOY_COMMAND (${override}).`,
+        message: allowed ? `deploy CLI overridden for local development/test via BNBAGENT_DEPLOY_COMMAND (${override}).` : "BNBAGENT_DEPLOY_COMMAND is disabled outside local development/tests and in CI.",
         details: { override }
       }
     ];
   }
-  const found = await whichBin("bunx");
+  const found = await whichBin("bun");
   if (!found) {
     return [
       {
         level: Level.CRITICAL,
         name: "deploy_cli",
-        message: "bunx not found on PATH; the delegated `bnbagent-deploy` run cannot start. Install Bun 1.3+ (https://bun.sh) or set BNBAGENT_DEPLOY_COMMAND.",
+        message: "bun not found on PATH; the declared, lockfile-pinned `@bnbagent/deploy-cli` cannot start. Install Bun 1.3+ (https://bun.sh).",
         details: {}
       }
     ];
@@ -12621,7 +12895,7 @@ async function checkDeployCliRunnable(_root, target) {
     {
       level: Level.INFO,
       name: "deploy_cli",
-      message: `bunx at ${found}; deploys delegate to the pinned @bnbagent/deploy-cli.`,
+      message: `bun at ${found}; deploys use the declared @bnbagent/deploy-cli dependency.`,
       details: { path: found }
     }
   ];
@@ -12966,6 +13240,10 @@ function readKeystoreJson(agentRoot2) {
         `[wallet].address ${address} does not match any keystore under ${keystoreDir}; refusing to deploy an unrelated signing key`
       );
     }
+  } else if (names.length > 1) {
+    throw new Error(
+      `multiple keystores found under ${keystoreDir}; set [wallet].address to the intended signing wallet before deploy`
+    );
   }
   const file = path25.join(keystoreDir, chosen ?? names[0]);
   try {
@@ -14061,7 +14339,7 @@ import { envLocalPath as envLocalPath15 } from "@bnbagent/studio-runtime/config"
 import { show } from "@bnbagent/studio-runtime/erc8004";
 import {
   DEFAULT_RPC,
-  getNetwork as getNetwork8,
+  getNetwork as getNetwork9,
   tbnbFaucetHint as tbnbFaucetHint4,
   uFaucetHint as uFaucetHint4
 } from "@bnbagent/studio-runtime/networks";
@@ -14140,7 +14418,7 @@ async function checkWalletUBalanceNonzero(root, _target) {
   if (!netName || typeof netName !== "string") {
     return [];
   }
-  if (getNetwork8(netName).tokens.U === void 0) {
+  if (getNetwork9(netName).tokens.U === void 0) {
     return [];
   }
   const bal = await readUBalanceRaw(address, netName);
@@ -14194,7 +14472,7 @@ async function checkNetworkMatchesChainId(root, _target) {
   if (!netName || typeof netName !== "string") {
     return [];
   }
-  const net2 = getNetwork8(netName);
+  const net2 = getNetwork9(netName);
   const actual = await readChainId(netName);
   if (actual !== net2.chainId) {
     return [
@@ -14233,7 +14511,7 @@ async function checkRuntimeRpcReachable(root, _target) {
   if (!netName || typeof netName !== "string") {
     return [];
   }
-  const expected = getNetwork8(netName).chainId;
+  const expected = getNetwork9(netName).chainId;
   const configured = process.env.RPC_URL || getEnvVar(envLocalPath15(root), "RPC_URL") || "";
   const rpcUrl = configured || DEFAULT_RPC[netName] || "";
   if (!rpcUrl) {
@@ -14612,6 +14890,7 @@ async function runPrepare(opts = {}) {
     checks.push(
       ...await runProducers(
         [
+          checkKeystoreNotInsideAgent,
           checkLocalKeystoreExists,
           checkWalletPasswordEnvSet,
           checkLlmProviderKeySet,
@@ -16955,6 +17234,11 @@ async function cmdAgent(opts, agentcoreArgs) {
   if (rc !== null) {
     return rc;
   }
+  migrateEnvLocal(root);
+  migrateKeystoreOutOfCodelocation(root);
+  if (target === "azure-foundry") {
+    excludeConfiguredWalletPathsFromDockerContext(root);
+  }
   if (target === "azure-foundry") {
     if (!opts.skipPrepare) {
       let result = await runPrepare({
@@ -17004,8 +17288,6 @@ async function cmdAgent(opts, agentcoreArgs) {
     await printAzureAgentClientPrompt(root);
     return 0;
   }
-  migrateEnvLocal(root);
-  migrateKeystoreOutOfCodelocation(root);
   const secretsMode = opts.secretsMode ?? "secretsmanager";
   if (secretsMode === "envvars" && agentNetworkDefault(root) === "bsc-mainnet") {
     printErr(
@@ -18329,7 +18611,7 @@ import {
   BSC_TESTNET_MIN_U,
   ERC8183_SUBMIT_GAS_RESERVE_BNB,
   fromRaw as fromRaw4,
-  getNetwork as getNetwork9,
+  getNetwork as getNetwork10,
   tbnbFaucetHint as tbnbFaucetHint6,
   uFaucetHint as uFaucetHint6
 } from "@bnbagent/studio-runtime/networks";
@@ -18819,7 +19101,7 @@ async function checkWalletAltana(walletCfg, projectRoot, data) {
       networkName
     );
     if (allowanceRaw !== null) {
-      const uToken = getNetwork9(networkName).token("U");
+      const uToken = getNetwork10(networkName).token("U");
       out.push(
         allowanceRaw > 0n ? {
           name: "[wallet] Altana x402 buying",
@@ -19120,7 +19402,7 @@ async function checkNetwork(data, networkOverride) {
   const name = String(netName);
   let rpcUrl;
   try {
-    rpcUrl = getNetwork9(name).rpcUrl;
+    rpcUrl = getNetwork10(name).rpcUrl;
   } catch (exc) {
     return [{ name: "network reachable", status: FAIL, detail: errMsg3(exc) }];
   }
@@ -19528,7 +19810,7 @@ async function checkBalances(projectRoot, data, networkOverride) {
     if (address === null) {
       return [];
     }
-    const net2 = getNetwork9(name);
+    const net2 = getNetwork10(name);
     const isTestnet = name === "bsc-testnet";
     const isMainnet = name === "bsc-mainnet";
     const minBnb = isTestnet ? BSC_TESTNET_MIN_BNB : isMainnet ? BSC_MAINNET_MIN_BNB : 0;
@@ -19627,7 +19909,7 @@ async function checkPieverseMainnetU(projectRoot, data) {
   const chunk = typeof autoRenew.topup_chunk_usd === "number" ? autoRenew.topup_chunk_usd : 1;
   const threshold = chunk * 2;
   try {
-    const net2 = getNetwork9(pvNetwork);
+    const net2 = getNetwork10(pvNetwork);
     const uToken = net2.tokens.U;
     if (uToken === void 0) {
       return [];
@@ -20015,7 +20297,7 @@ import {
 } from "@bnbagent/studio-runtime/erc8004";
 import {
   fromRaw as fromRaw5,
-  getNetwork as getNetwork10,
+  getNetwork as getNetwork11,
   tbnbFaucetHint as tbnbFaucetHint7
 } from "@bnbagent/studio-runtime/networks";
 import * as walletRt6 from "@bnbagent/studio-runtime/wallet";
@@ -20332,7 +20614,7 @@ async function cmdRegister2(opts) {
     agentId = await auditedOp3(
       "8004_register",
       {
-        chainId: getNetwork10(network).chainId,
+        chainId: getNetwork11(network).chainId,
         asset: null,
         amount: null,
         agentAddr: wallet.address,
@@ -21345,7 +21627,7 @@ import {
   fetchMppWithPayment,
   quoteMppUrl
 } from "@bnbagent/studio-runtime/mpp";
-import { getNetwork as getNetwork11 } from "@bnbagent/studio-runtime/networks";
+import { getNetwork as getNetwork12 } from "@bnbagent/studio-runtime/networks";
 import * as walletRt8 from "@bnbagent/studio-runtime/wallet";
 import {
   SELLER_TOKENS,
@@ -21599,7 +21881,7 @@ async function cmdBuy2(url, opts) {
     );
     return 1;
   }
-  const network = getNetwork11(networkName);
+  const network = getNetwork12(networkName);
   const token = SELLER_TOKENS[caip2(network.chainId)];
   if (!token) {
     printErr(`error: MPP+B402 has no trusted buyer token on ${networkName}.`);
@@ -22469,7 +22751,7 @@ import {
   findProjectRoot as findProjectRoot7,
   loadStudioToml as loadStudioToml25
 } from "@bnbagent/studio-runtime/config";
-import { fromRaw as fromRaw6, getNetwork as getNetwork12 } from "@bnbagent/studio-runtime/networks";
+import { fromRaw as fromRaw6, getNetwork as getNetwork13 } from "@bnbagent/studio-runtime/networks";
 import * as walletRt9 from "@bnbagent/studio-runtime/wallet";
 import {
   SELLER_TOKENS as SELLER_TOKENS2,
@@ -22855,7 +23137,7 @@ async function cmdSellStatus(probe2) {
     return 0;
   }
   const networkName = resolveNetwork4(cfg);
-  const network = caip22(getNetwork12(networkName).chainId);
+  const network = caip22(getNetwork13(networkName).chainId);
   const token = SELLER_TOKENS2[network];
   if (!token) {
     printOut(`B402 probe: mismatch for ${network}; no pinned U token`);
@@ -23020,7 +23302,7 @@ async function cmdBuy3(url, opts) {
       return 1;
     }
     if (allowanceRaw !== null && allowanceRaw < neededRaw) {
-      const uToken = getNetwork12(networkName).token("U");
+      const uToken = getNetwork13(networkName).token("U");
       printErr(
         `error: U\u2192Permit2 allowance ${fromRaw6(allowanceRaw, uToken.decimals)} U cannot cover max_usd $${opts.maxUsd.toFixed(2)}: b402 settles Altana payments by pulling through Permit2 (${PERMIT2_ADDRESS}).`
       );
@@ -23035,7 +23317,7 @@ async function cmdBuy3(url, opts) {
     result = await auditedOp4(
       "x402_buy",
       {
-        chainId: getNetwork12(networkName).chainId,
+        chainId: getNetwork13(networkName).chainId,
         asset: "U",
         amount: String(opts.maxUsd),
         agentAddr: wallet.address,
@@ -23132,7 +23414,7 @@ async function probeChallenge(url, methodHint) {
   return null;
 }
 function selectPayable(challenge, networkName) {
-  const network = getNetwork12(networkName);
+  const network = getNetwork13(networkName);
   const uToken = network.token("U");
   let matched;
   try {