@bnbagent/studio-cli 0.0.13-alpha.8 → 0.0.14-alpha.1

package/recipes/runtimes/agentcore/code/{{PKG}}/sellerCore.ts.tmpl

@@ -38,24 +38,38 @@
  */
 
 import { ERC8183JobOps } from "@bnbagent/sdk/erc8183";
+import { maskUrlSecrets } from "@bnbagent/studio-runtime/audit";
 import { SubmitPermanentlyUnsupportedError } from "@bnbagent/studio-runtime/erc8183";
 import { getWallet } from "@bnbagent/studio-runtime/wallet";
+import {
+  DeliveryTimeoutError,
+  deliveryTimeoutSeconds,
+  envSeconds,
+  minimumDeliveryWindowSeconds,
+  withTimeout,
+} from "./deliveryPolicy.js";
 import { limitCommerceOperation } from "./requestLimits.js";
 import * as defaultSigning from "./signing.js";
 
+function safeLogText(value: unknown): string {
+  const text =
+    value instanceof Error
+      ? (value.stack ?? `${value.name}: ${value.message}`)
+      : String(value ?? "");
+  return maskUrlSecrets(text);
+}
+
 const log = {
-  info: (msg: string) => console.log(`[seller-agent.core] ${msg}`),
-  warn: (msg: string) => console.warn(`[seller-agent.core] WARNING ${msg}`),
+  info: (msg: string) => console.log(`[seller-agent.core] ${safeLogText(msg)}`),
+  warn: (msg: string) =>
+    console.warn(`[seller-agent.core] WARNING ${safeLogText(msg)}`),
   error: (msg: string, e?: unknown) =>
-    console.error(`[seller-agent.core] ERROR ${msg}`, e ?? ""),
+    console.error(
+      `[seller-agent.core] ERROR ${safeLogText(msg)}`,
+      safeLogText(e),
+    ),
 };
 
-/** Read a positive timeout (seconds) from the env, falling back to `dflt`. */
-function envSeconds(name: string, dflt: number): number {
-  const v = Number(process.env[name] || dflt);
-  return Number.isFinite(v) && v > 0 ? v : dflt;
-}
-
 // Background-task ceilings. notifyFunded ACKs immediately and delivers in a
 // BACKGROUND task; AgentCore keeps the scale-to-zero microVM warm
 // (HEALTHY_BUSY) while isBusy() is true. A delivery (LLM text + on-chain
@@ -65,43 +79,10 @@ function envSeconds(name: string, dflt: number): number {
 // billing memory the whole time. A timed-out job is treated as TRANSIENT
 // (not dropped): the funded job stays on-chain and a later sweep re-delivers
 // it idempotently. (Read lazily so tests can tune them via the env.)
-const jobDeliveryTimeoutSeconds = () =>
-  envSeconds("NOTIFY_DELIVERY_TIMEOUT_SECONDS", 600);
 const sweepTimeoutSeconds = () => envSeconds("NOTIFY_SWEEP_TIMEOUT_SECONDS", 60);
 const preverifyTimeoutSeconds = () =>
   envSeconds("NOTIFY_PREVERIFY_TIMEOUT_SECONDS", 30);
 
-/** Rejection raised by {@link withTimeout} when the deadline fires. */
-export class DeliveryTimeoutError extends Error {}
-
-/**
- * Race `work` against a deadline, aborting `controller` when it fires.
- *
- * JS cannot hard-cancel an arbitrary promise the way asyncio.wait_for
- * cancels a coroutine: the abort signal stops the LLM call (the AI SDK
- * honours it), and the on-chain layers are idempotent — `verifySignedJob`
- * returns non-OK for an already-SUBMITTED job and `submitResult` re-verifies
- * FUNDED — so an orphaned straggler can never double-deliver.
- */
-async function withTimeout<T>(
-  work: Promise<T>,
-  seconds: number,
-  controller?: AbortController,
-): Promise<T> {
-  let timer: ReturnType<typeof setTimeout> | undefined;
-  const deadline = new Promise<never>((_, reject) => {
-    timer = setTimeout(() => {
-      controller?.abort();
-      reject(new DeliveryTimeoutError(`timed out after ${seconds}s`));
-    }, seconds * 1000);
-  });
-  try {
-    return await Promise.race([work, deadline]);
-  } finally {
-    clearTimeout(timer);
-  }
-}
-
 /**
  * The LLM work hook: produce the deliverable text for a prompt.
  *
@@ -125,6 +106,7 @@ export interface SigningApi {
   ): Promise<Record<string, unknown>>;
   verifySignedJob(
     jobId: number,
+    minimumRemainingSeconds?: number,
   ): Promise<{ ok: boolean; reason: string; permanent: boolean }>;
   jobSpec(
     jobId: number,
@@ -284,7 +266,7 @@ export class SellerCore {
       // Time-bounded: a hung RPC must not stall the ack path. On timeout we
       // fall through to accept-and-re-verify below.
       const v = await withTimeout(
-        this.signing.verifySignedJob(jobId),
+        this.signing.verifySignedJob(jobId, minimumDeliveryWindowSeconds()),
         preverifyTimeoutSeconds(),
       );
       if (!v.ok && v.permanent) {
@@ -351,7 +333,7 @@ export class SellerCore {
         verified
           ? this.doWorkAndSubmit(jobId, controller.signal)
           : this.fulfillJob(jobId, controller.signal),
-        jobDeliveryTimeoutSeconds(),
+        deliveryTimeoutSeconds(),
         controller,
       );
       log.info(`notify_funded job ${jobId} → ${JSON.stringify(result)}`);
@@ -367,7 +349,7 @@ export class SellerCore {
       if (e instanceof DeliveryTimeoutError) {
         // Transient by design — leave terminal false so a later sweep retries.
         log.warn(
-          `background delivery of job ${jobId} timed out after ${jobDeliveryTimeoutSeconds()}s; will retry`,
+          `background delivery of job ${jobId} timed out after ${deliveryTimeoutSeconds()}s; will retry`,
         );
       } else {
         log.error(`background delivery of job ${jobId} failed`, e);
@@ -399,7 +381,10 @@ export class SellerCore {
     jobId: number,
     abortSignal: AbortSignal,
   ): Promise<Record<string, unknown>> {
-    const v = await this.signing.verifySignedJob(jobId);
+    const v = await this.signing.verifySignedJob(
+      jobId,
+      minimumDeliveryWindowSeconds(),
+    );
     if (!v.ok) {
       return { ok: false, job_id: jobId, skip: v.permanent, reason: v.reason };
     }

package/recipes/runtimes/agentcore/code/{{PKG}}/tools.ts.tmpl

@@ -30,6 +30,7 @@ import * as cr from "@bnbagent/studio-runtime/tools";
 import { loadStudioToml } from "@bnbagent/studio-runtime/config";
 import { tool, type ToolSet } from "ai";
 import { z } from "zod";
+import { READ_TOOL_CATALOG } from "./readToolCatalog.js";
 
 /**
  * The project-wide default network (`[network].default`) — tool calls that
@@ -46,51 +47,34 @@ function defaultNetwork(): string {
   }
 }
 
-const networkArg = z
-  .string()
-  .optional()
-  .describe("studio network name (defaults to the project's [network].default)");
-
 export const LLM_READ_TOOLS: ToolSet = {
   // --- Wallet & chain basics ---
   wallet_info: tool({
-    description:
-      "Describe the agent's active wallet (address, kind, key location).",
-    inputSchema: z.object({}),
+    description: READ_TOOL_CATALOG.wallet_info.description,
+    inputSchema: z.object(READ_TOOL_CATALOG.wallet_info.inputSchema),
     execute: async () => cr.walletInfo(),
   }),
   balance_native: tool({
-    description:
-      "Native BNB balance of an address (defaults to the agent's own wallet).",
-    inputSchema: z.object({
-      address: z.string().optional().describe("0x address; omit for own wallet"),
-      network: networkArg,
-    }),
+    description: READ_TOOL_CATALOG.balance_native.description,
+    inputSchema: z.object(READ_TOOL_CATALOG.balance_native.inputSchema),
     execute: async ({ address, network }) =>
       cr.balanceNative(address ?? null, network ?? defaultNetwork()),
   }),
   balance_u: tool({
     // requires [u_token] in studio.toml
-    description:
-      "$U (payment token) balance of an address (defaults to the agent's own wallet).",
-    inputSchema: z.object({
-      address: z.string().optional().describe("0x address; omit for own wallet"),
-      network: networkArg,
-    }),
+    description: READ_TOOL_CATALOG.balance_u.description,
+    inputSchema: z.object(READ_TOOL_CATALOG.balance_u.inputSchema),
     execute: async ({ address, network }) =>
       cr.balanceU(address ?? null, network ?? defaultNetwork()),
   }),
   network_info: tool({
-    description: "Chain id / RPC / token info for a studio network.",
-    inputSchema: z.object({ network: networkArg }),
+    description: READ_TOOL_CATALOG.network_info.description,
+    inputSchema: z.object(READ_TOOL_CATALOG.network_info.inputSchema),
     execute: async ({ network }) => cr.networkInfo(network ?? defaultNetwork()),
   }),
   tx_status: tool({
-    description: "Status + receipt summary of a transaction hash.",
-    inputSchema: z.object({
-      tx_hash: z.string().describe("0x transaction hash"),
-      network: networkArg,
-    }),
+    description: READ_TOOL_CATALOG.tx_status.description,
+    inputSchema: z.object(READ_TOOL_CATALOG.tx_status.inputSchema),
     execute: async ({ tx_hash, network }) =>
       cr.txStatus(tx_hash, network ?? defaultNetwork()),
   }),
@@ -106,21 +90,15 @@ export const LLM_READ_TOOLS: ToolSet = {
   // --- ERC-8004 identity (read-only lookups the LLM may want for context) ---
   agent_info: tool({
     // requires [erc8004] in studio.toml
-    description: "ERC-8004 identity record for an agent id.",
-    inputSchema: z.object({
-      agent_id: z.number().int().describe("ERC-8004 agent id"),
-      network: networkArg,
-    }),
+    description: READ_TOOL_CATALOG.agent_info.description,
+    inputSchema: z.object(READ_TOOL_CATALOG.agent_info.inputSchema),
     execute: async ({ agent_id, network }) =>
       cr.agentInfo(agent_id, network ?? defaultNetwork()),
   }),
   agent_by_address: tool({
     // requires [erc8004] in studio.toml
-    description: "Look up an ERC-8004 agent registration by wallet address.",
-    inputSchema: z.object({
-      address: z.string().describe("0x wallet address"),
-      network: networkArg,
-    }),
+    description: READ_TOOL_CATALOG.agent_by_address.description,
+    inputSchema: z.object(READ_TOOL_CATALOG.agent_by_address.inputSchema),
     execute: async ({ address, network }) =>
       cr.agentByAddress(address, network ?? defaultNetwork()),
   }),
@@ -128,22 +106,15 @@ export const LLM_READ_TOOLS: ToolSet = {
   // --- ERC-8183 jobs (READ-ONLY status/list — writes live in signing.ts) ---
   job_status: tool({
     // requires [erc8183] in studio.toml
-    description: "Read-only ERC-8183 job summary (status, budget, deliverable URL).",
-    inputSchema: z.object({
-      job_id: z.number().int().describe("on-chain job id"),
-      network: networkArg,
-    }),
+    description: READ_TOOL_CATALOG.job_status.description,
+    inputSchema: z.object(READ_TOOL_CATALOG.job_status.inputSchema),
     execute: async ({ job_id, network }) =>
       cr.jobStatus(job_id, network ?? defaultNetwork()),
   }),
   job_list: tool({
     // requires [erc8183] in studio.toml
-    description: "List recent ERC-8183 jobs (optionally only this agent's).",
-    inputSchema: z.object({
-      limit: z.number().int().optional(),
-      mine: z.boolean().optional().describe("only jobs assigned to this agent"),
-      network: networkArg,
-    }),
+    description: READ_TOOL_CATALOG.job_list.description,
+    inputSchema: z.object(READ_TOOL_CATALOG.job_list.inputSchema),
     execute: async ({ limit, mine, network }) =>
       cr.jobList({ limit, mine, network: network ?? defaultNetwork() }),
   }),

package/recipes/runtimes/agentcore/code/{{PKG}}/unifiedMain.ts.tmpl

@@ -225,7 +225,8 @@ export function buildRunWork(): RunWork {
 
 function hasErc8183Rail(cfg: TomlTable): boolean {
   const payments = asTable(cfg.payments);
-  return asTable(payments?.erc8183) !== null;
+  const rail = asTable(payments?.erc8183);
+  return rail !== null && rail.enabled !== false;
 }
 
 function asTable(value: unknown): TomlTable | null {