@bnbagent/studio-cli 0.0.6-alpha.2 → 0.0.6-alpha.3

package/dist/bag.js

@@ -3,6 +3,7 @@ import {
   B402_RUNTIME_KEYS,
   CliExit,
   DEFAULT_B402_PRICE_USD,
+  DEFAULT_B402_TESTNET_BASE_URL,
   act,
   agentcoreFlavor,
   b402Credentials,
@@ -19,6 +20,7 @@ import {
   hasA2aFace,
   hasMcpFace,
   hasX402Face,
+  isB402TestnetBaseUrl,
   nativeProtocolOf,
   normalizeB402PriceUsd,
   normalizeProtocolFaces,
@@ -40,7 +42,7 @@ import {
   x402SellerIsFree,
   x402SellerPricingState,
   x402SellerUsesB402
-} from "./chunk-6EYSXRFD.js";
+} from "./chunk-A7NAGZHR.js";
 import {
   TWAK_CLI_MIN_VERSION,
   TWAK_CLI_VERSION,
@@ -102,7 +104,7 @@ import {
 var CAMPAIGN_DOC_URL = "https://www.bnbchain.org/en/blog/bnb-agent-studio-is-live-on-bnb-chain-ai-agents-from-one-prompt";
 var CAMPAIGN_CHECK_TIMEOUT_MS = 6e3;
 async function fetchCampaignActive() {
-  const { bnbPlatformApiUrl: bnbPlatformApiUrl2 } = await import("./deployCli-3U2FESF4.js");
+  const { bnbPlatformApiUrl: bnbPlatformApiUrl2 } = await import("./deployCli-264UE6KB.js");
   const controller = new AbortController();
   const timer = setTimeout(() => controller.abort(), CAMPAIGN_CHECK_TIMEOUT_MS);
   try {
@@ -2483,7 +2485,7 @@ async function cmdSet(key, rawValue, typeFlag, projectRoot) {
       const contracts = erc8183ContractOverrideState();
       if (contracts.mode === "custom") {
         printOut(
-          "ERC-8183 contracts: custom/QA contract stack selected with all three address overrides."
+          "ERC-8183 contracts: custom contract stack selected with all three address overrides."
         );
       } else if (contracts.mode === "partial") {
         printErr(
@@ -3197,6 +3199,9 @@ function packageRoot() {
   }
 }
 function pnpmVersion() {
+  if ("10.24.0") {
+    return "10.24.0";
+  }
   const file = path12.join(packageRoot(), "package.json");
   const pkg = JSON.parse(fs13.readFileSync(file, "utf-8"));
   const value = String(pkg.packageManager ?? "");
@@ -3225,6 +3230,46 @@ import * as fs14 from "fs";
 import * as path13 from "path";
 import { envLocalPath as envLocalPath7 } from "@bnbagent/studio-runtime/config";
 import { resolveTwakHome } from "@bnbagent/studio-runtime/wallet";
+
+// src/cli/_twakContractTargets.ts
+import { resolveNetwork } from "@bnbagent/sdk";
+var CONTRACT_OVERRIDES = [
+  ["ERC8004_REGISTRY_ADDRESS", "registryContract"],
+  ["ERC8183_COMMERCE_ADDRESS", "commerceContract"],
+  ["ERC8183_ROUTER_ADDRESS", "routerContract"],
+  ["ERC8183_POLICY_ADDRESS", "policyContract"]
+];
+function twakCustomContractOverrides(networkName, env = process.env) {
+  let network;
+  try {
+    network = resolveNetwork(networkName);
+  } catch {
+    return [];
+  }
+  const erc8183 = erc8183ContractOverrideState(env);
+  const out = [];
+  for (const [envKey, field] of CONTRACT_OVERRIDES) {
+    if (envKey.startsWith("ERC8183_") && erc8183.mode !== "custom") {
+      continue;
+    }
+    const configured = env[envKey]?.trim() ?? "";
+    if (!/^0x[0-9a-fA-F]{40}$/u.test(configured)) {
+      continue;
+    }
+    const canonical = network[field];
+    if (configured.toLowerCase() !== canonical.toLowerCase()) {
+      out.push({ envKey, configured, canonical });
+    }
+  }
+  return out;
+}
+function twakUnsupportedContractOverrides(networkName, env = process.env) {
+  return twakCustomContractOverrides(networkName, env).filter(
+    (item) => item.envKey.startsWith("ERC8183_")
+  );
+}
+
+// src/cli/_deploy/checks/twak.ts
 var AGENTCORE_DESCRIPTOR = path13.join("agentcore", "agentcore.json");
 function isTwak(data) {
   return tableOf2(data, "wallet").kind === "twak";
@@ -3329,6 +3374,26 @@ async function checkTwakCliPresent(root, _target) {
   }
   return [];
 }
+function checkTwakCustomContractsUnsupported(root, _target) {
+  const data = loadAgentToml(root);
+  if (!isTwak(data)) {
+    return [];
+  }
+  const networkName = String(tableOf2(data, "network").default ?? "bsc-testnet");
+  const overrides = twakUnsupportedContractOverrides(networkName);
+  if (overrides.length === 0) {
+    return [];
+  }
+  const keys = overrides.map((item) => item.envKey);
+  return [
+    {
+      level: Level.CRITICAL,
+      name: "twak_custom_contracts_unsupported",
+      message: `wallet.kind='twak' cannot use the selected custom ERC-8183 targets (${keys.join(", ")}): twak v0.20.0 has no Commerce/Router/Policy address option and would otherwise execute against the wrong canonical contracts. Use wallet.kind='evm-local' for custom ERC-8183 contracts, or remove the overrides and use the canonical stack. ERC8004_REGISTRY_ADDRESS is supported.`,
+      details: { network: networkName, override_keys: keys }
+    }
+  ];
+}
 async function checkTwakWalletExists(root, _target) {
   const data = loadAgentToml(root);
   if (!isTwak(data)) {
@@ -5361,7 +5426,9 @@ var LEGACY_SKILL_NAMES = [
 ];
 var ROUTER_SKILL_NAME = "bnbagent-studio";
 var META_FILENAME = ".bag-meta.json";
-var HIDDEN_SKILL_NAMES = /* @__PURE__ */ new Set();
+var HIDDEN_SKILL_NAMES = /* @__PURE__ */ new Set([
+  "bnbagent-studio-use-azure-foundry"
+]);
 function isDir3(p) {
   try {
     return fs19.statSync(p).isDirectory();
@@ -5767,6 +5834,19 @@ function installSkills(opts) {
   };
 }
 
+// src/cli/utils/options.ts
+import { InvalidArgumentError } from "commander";
+function acceptChoices(option, accepted, advertised) {
+  return option.argParser((value) => {
+    if (!accepted.includes(value)) {
+      throw new InvalidArgumentError(
+        `Allowed choices are ${advertised.join(", ")}.`
+      );
+    }
+    return value;
+  });
+}
+
 // src/cli/wallet.ts
 import * as fs21 from "fs";
 import * as path20 from "path";
@@ -6876,7 +6956,7 @@ var SUPPORTED_STORAGE_PROVIDERS = ["ipfs", "local"];
 var SUPPORTED_DESTINATIONS = ["self", "platform"];
 var RUNTIMES = {
   agentcore: { label: "AWS Bedrock AgentCore", hidden: false },
-  "azure-foundry": { label: "Azure AI Foundry", hidden: false }
+  "azure-foundry": { label: "Azure AI Foundry", hidden: true }
 };
 var SUPPORTED_RUNTIMES = Object.keys(RUNTIMES);
 var APP_DIR = "app";
@@ -6953,7 +7033,7 @@ every intent to the right playbook via its references.
    lives in \`src/signing.ts\`.
 4. **The quote path is deterministic** (fixed list price, clamp + sign).
    Never put an LLM in the quote path.
-5. **Deploy with \`bag deploy --provider bnb|aws|azure\`.** Every deploy or
+5. **Deploy with \`bag deploy --provider bnb|aws\`.** Every deploy or
    redeploy requires a visible provider choice. Studio runs its local business
    gates, then delegates cloud credentials, secrets, packaging and lifecycle
    calls to the pinned bnbagent-deploy CLI. Do not bypass this boundary with
@@ -7095,7 +7175,7 @@ function validateProjectName(basename16) {
   }
   if (safe !== basename16) {
     throw new Error(
-      `Project name '${basename16}' is not a valid AgentCore runtime name: the default runtime (AWS Bedrock AgentCore) requires ASCII letters and digits only ('-', '_', '.' and other characters are not allowed) \u2014 this is an AgentCore naming constraint, not a general bag restriction. Re-run with an alphanumeric name, e.g. \`bag init ${safe}\` \u2014 or, if this project is not for AgentCore, keep the original name on a runtime that allows it: \`bag init --runtime azure-foundry ${basename16}\`.`
+      `Project name '${basename16}' is not a valid AgentCore runtime name: the default runtime (AWS Bedrock AgentCore) requires ASCII letters and digits only ('-', '_', '.' and other characters are not allowed) \u2014 this is an AgentCore naming constraint, not a general bag restriction. Re-run with an alphanumeric name, e.g. \`bag init ${safe}\`.`
     );
   }
   return basename16;
@@ -7108,21 +7188,15 @@ function registerInit(program) {
     "<name>",
     "Project directory name (created in cwd). Becomes the AgentCore runtime name: ASCII alphanumerics only, must start with a letter, \u226423 chars. Names with '-'/'_'/'.' are rejected (not auto-renamed)."
   ).addOption(
-    new Option2(
-      "--runtime <name>",
-      `Runtime / deploy target to scaffold for (choices: ${visibleRuntimes.join(", ")}); recorded in studio.toml [stack].runtime.`
-    ).default("agentcore").choices(SUPPORTED_RUNTIMES)
-  ).addOption(
-    new Option2(
-      "--azure-account <name>",
-      "azure-foundry only: Azure AI Foundry account (resource) name used by the delegated deploy."
-    )
-  ).addOption(
-    new Option2(
-      "--azure-project <name>",
-      "azure-foundry only: Azure AI Foundry project name used by the delegated deploy."
+    acceptChoices(
+      new Option2(
+        "--runtime <name>",
+        `Runtime / deploy target to scaffold for (choices: ${visibleRuntimes.join(", ")}); recorded in studio.toml [stack].runtime.`
+      ).default("agentcore"),
+      SUPPORTED_RUNTIMES,
+      visibleRuntimes
     )
-  ).addOption(
+  ).addOption(new Option2("--azure-account <name>").hideHelp()).addOption(new Option2("--azure-project <name>").hideHelp()).addOption(
     new Option2(
       "--destination <dest>",
       "Where the agent deploys; recorded in studio.toml [deploy].destination (default: platform while the trial campaign runs; self once it has ended, or when a non-agentcore --runtime or --network bsc-mainnet is passed). 'platform' is a 48h testnet trial on the BNB Chain managed platform (forces runtime=agentcore + bsc-testnet; a trial wallet key is transmitted to the operator \u2014 run `bag wallet new` for a throwaway). 'self' deploys to YOUR own cloud."
@@ -7582,9 +7656,10 @@ function derivePackaging(walletKind2, destination, platformArtifact2 = "zip", ru
   return "codezip";
 }
 function scaffold(target, name, o) {
+  const packageManagerVersion = pnpmVersion();
   fs22.writeFileSync(
     path21.join(target, "package.json"),
-    renderWorkspacePackageJson(name)
+    renderWorkspacePackageJson(name, packageManagerVersion)
   );
   fs22.writeFileSync(
     path21.join(target, "pnpm-workspace.yaml"),
@@ -7646,7 +7721,8 @@ function scaffold(target, name, o) {
       o.storageProvider,
       o.walletKind,
       o.rails,
-      o.b402Price
+      o.b402Price,
+      o.network
     )
   );
   fs22.writeFileSync(path21.join(agentRoot2, ".gitignore"), renderAgentGitignore());
@@ -7667,7 +7743,7 @@ function scaffold(target, name, o) {
   const runtimeCtx = {
     PKG: AGENT_SRC,
     TWAK_CLI_VERSION,
-    PNPM_VERSION: pnpmVersion(),
+    PNPM_VERSION: packageManagerVersion,
     DEPLOYMENT_TYPE: isContainer ? "container" : "direct_code_deploy",
     ENTRYPOINT: o.runtime === "azure-foundry" ? a2aEntry : `dist/${stem2}.js`,
     // Foundry Hosted Agents have a provider-level container contract that is
@@ -7756,11 +7832,12 @@ ${deployLine}
 In Claude Code / Cursor, type \`/bnbagent-studio\` \u2014 the skill drives every step.
 `;
 }
-function renderWorkspacePackageJson(name) {
+function renderWorkspacePackageJson(name, packageManagerVersion) {
   return `${JSON.stringify(
     {
       name: `${name}-workspace`,
-      private: true
+      private: true,
+      packageManager: `pnpm@${packageManagerVersion}`
       // NOT a publishable package — the agent lives at app/agent (see
       // pnpm-workspace.yaml); this root only anchors the pnpm workspace.
     },
@@ -8078,7 +8155,7 @@ ${pieverseSection}${erc8183Section}
 ${storageSection}
 ${x402Section}${x402SellerSection}${budgetSection}${azureSection}`;
 }
-function renderAgentEnvLocal(provider, storageProvider, walletKind2, rails, b402Price) {
+function renderAgentEnvLocal(provider, storageProvider, walletKind2, rails, b402Price, network) {
   const keyEnv = PROVIDER_KEY_ENV[provider];
   const lines = [
     "# \u26A0\uFE0F  SECRETS \u2014 do NOT paste this file into issue trackers, logs, or AI chats.",
@@ -8142,11 +8219,12 @@ function renderAgentEnvLocal(provider, storageProvider, walletKind2, rails, b402
   }
   if (rails === "b402" || rails === "both") {
     const free = x402SellerPricingState({ price_usd: b402Price }).kind === "free";
+    const baseUrl = !free && network === "bsc-testnet" ? DEFAULT_B402_TESTNET_BASE_URL : "";
     lines.push(
       "",
       "# B402 merchant credentials (issued per environment after manual approval).",
       free ? "# FREE price 0 does not use these credentials; leave them empty until switching to PAID." : "# PAID requires all four; all absent = dormant, partial = boot error.",
-      "B402_BASE_URL=",
+      `B402_BASE_URL=${baseUrl}`,
       "B402_CLIENT_ID=",
       "B402_ACCESS_TOKEN=",
       "B402_PRIVATE_KEY=",
@@ -8156,7 +8234,7 @@ function renderAgentEnvLocal(provider, storageProvider, walletKind2, rails, b402
   if (rails === "8183" || rails === "both") {
     lines.push(
       "",
-      "# Optional ERC-8183 contract-stack override (QA/custom). Set all three",
+      "# Optional ERC-8183 custom contract-stack override. Set all three",
       "# together; partial overrides can mix incompatible deployments.",
       "# Required for price=0 while canonical contracts reject zero funding.",
       "# ERC8183_COMMERCE_ADDRESS=",
@@ -9415,7 +9493,7 @@ function printConfigSummary(agentRoot2) {
         `  pricing   : FREE \u2014 ${weiToU(String(price))} per job; zero token escrow`
       );
       printOut(
-        contractOverrides.mode === "custom" ? "              contracts: custom/QA stack selected (all three address overrides)" : "              contracts: configure all three ERC8183_*_ADDRESS overrides before deploy"
+        contractOverrides.mode === "custom" ? "              contracts: custom stack selected (all three address overrides)" : "              contracts: configure all three ERC8183_*_ADDRESS overrides before deploy"
       );
     } else {
       printOut(
@@ -9455,7 +9533,7 @@ function printConfigSummary(agentRoot2) {
   }
   if (hasErc8183 && isFreePrice && contractOverrides.mode !== "custom") {
     todo.push(
-      "ERC8183_COMMERCE_ADDRESS / ROUTER_ADDRESS / POLICY_ADDRESS \u2014 select one zero-price-compatible QA/custom contract stack"
+      "ERC8183_COMMERCE_ADDRESS / ROUTER_ADDRESS / POLICY_ADDRESS \u2014 select one zero-price-compatible custom contract stack"
     );
   }
   if (hasX402Seller && !isFreeX402) {
@@ -10647,14 +10725,14 @@ function erc8183RailChecks(cfg) {
       out.push({
         level: Level.CRITICAL,
         name: "commerce_zero_price_contract_unsupported",
-        message: "ERC-8183 pricing is FREE (zero token escrow), but the canonical contract stack rejects zero funding. Set ERC8183_COMMERCE_ADDRESS, ERC8183_ROUTER_ADDRESS, and ERC8183_POLICY_ADDRESS together to a zero-price-compatible QA/custom stack.",
+        message: "ERC-8183 pricing is FREE (zero token escrow), but the canonical contract stack rejects zero funding. Set ERC8183_COMMERCE_ADDRESS, ERC8183_ROUTER_ADDRESS, and ERC8183_POLICY_ADDRESS together to a zero-price-compatible custom stack.",
         details: { effective_wei: "0", contract_profile: "canonical" }
       });
     } else if (contracts.mode === "custom") {
       out.push({
         level: Level.INFO,
         name: "commerce_zero_price_enabled",
-        message: "ERC-8183 pricing is FREE \u2014 buyers fund 0 token units with zero token escrow; a complete custom/QA contract stack is selected.",
+        message: "ERC-8183 pricing is FREE \u2014 buyers fund 0 token units with zero token escrow; a complete custom contract stack is selected.",
         details: { effective_wei: "0", contract_profile: "custom" }
       });
     }
@@ -10776,7 +10854,7 @@ function x402SellerRailChecks(agentRoot2, cfg, target) {
     const network = String(
       tableOf2(cfg, "network").default ?? "bsc-mainnet"
     ).toLowerCase();
-    const testUrl = /sandbox|test/.test(credentials.baseUrl.toLowerCase());
+    const testUrl = isB402TestnetBaseUrl(credentials.baseUrl);
     const testNetwork = network.includes("testnet");
     if (testUrl !== testNetwork) {
       out.push({
@@ -11009,6 +11087,7 @@ var allChecks = [
   // gates on the LEVEL, not on which module produced it.
   checkTwakRequiresContainer,
   checkTwakCliPresent,
+  checkTwakCustomContractsUnsupported,
   checkTwakWalletExists,
   checkTwakPasswordEnvSet,
   checkTwakCredentialsAvailable,
@@ -12151,14 +12230,15 @@ async function checkWalletTbnbBalanceSufficient(root, _target) {
     return [];
   }
   const isTwak2 = tableOf2(data, "wallet").kind === "twak";
-  if (isTwak2 && netName === "bsc-testnet") {
+  const customContracts = isTwak2 && twakCustomContractOverrides(netName).length > 0;
+  if (isTwak2 && netName === "bsc-testnet" && !customContracts) {
     return [];
   }
   const bal = await readNativeBalanceRaw(address, netName);
   if (bal >= TBNB_MIN_WEI) {
     return [];
   }
-  const gasNote = isTwak2 ? " (twak: x402 topups are gasless and ERC-8004 registry writes are gas-sponsored, but mainnet ERC-8183 fund/settle self-pay gas)" : "";
+  const gasNote = isTwak2 ? netName === "bsc-testnet" ? " (twak: custom contract sponsorship depends on the paymaster policy; keep fallback tBNB)" : " (twak: x402 topups are gasless and ERC-8004 registry writes are gas-sponsored, but mainnet ERC-8183 fund/settle self-pay gas)" : "";
   return [
     {
       level: Level.WARNING,
@@ -12691,6 +12771,21 @@ var PROVIDER_LABELS = {
   aws: "AWS AgentCore",
   azure: "Azure Foundry"
 };
+var PROVIDER_MENU_ORDER = [
+  "bnb",
+  "aws",
+  "azure"
+];
+var PROVIDER_SHORT_LABELS = {
+  bnb: "BNB",
+  aws: "AWS",
+  azure: "Azure"
+};
+function providerDigit(provider) {
+  return PROVIDER_MENU_ORDER.indexOf(provider) + 1;
+}
+var ADVERTISED_PROVIDERS = ["bnb", "aws"];
+var ADVERTISED_PROVIDERS_HELP = ADVERTISED_PROVIDERS.join("|");
 function tableOf10(data, key) {
   const value = data[key];
   return value !== null && typeof value === "object" && !Array.isArray(value) ? value : {};
@@ -12783,7 +12878,7 @@ function unavailableProvidersForProject(root) {
     return {};
   }
   if (runtime === "azure-foundry") {
-    const reason = "this project uses the Azure Foundry container adapter; scaffold an agentcore project before selecting BNB or AWS";
+    const reason = "this project uses a different container adapter; scaffold an agentcore project before selecting BNB or AWS";
     return {
       bnb: reason,
       aws: reason,
@@ -12814,9 +12909,12 @@ function unavailableReason(opts, provider) {
   }
   return opts.unavailable?.[provider] ?? null;
 }
+function providerPromptHint() {
+  return PROVIDER_MENU_ORDER.filter((p) => ADVERTISED_PROVIDERS.includes(p)).map((p) => `${providerDigit(p)}=${PROVIDER_SHORT_LABELS[p]}`).join(", ");
+}
 async function promptProvider(opts) {
   for (; ; ) {
-    const answer = (await opts.prompt("Provider [1=BNB, 2=AWS, 3=Azure]: ")).trim().toLowerCase();
+    const answer = (await opts.prompt(`Provider [${providerPromptHint()}]: `)).trim().toLowerCase();
     const provider = answer === "1" || answer === "bnb" ? "bnb" : answer === "2" || answer === "aws" ? "aws" : answer === "3" || answer === "azure" ? "azure" : null;
     if (provider === null) {
       if (answer === "" || answer === "q" || answer === "cancel") {
@@ -14042,9 +14140,11 @@ function isFile14(p) {
 
 // src/cli/_runtime/base.ts
 var DEPLOY_RUNTIME_TARGETS = ["agentcore", "azure-foundry"];
+var ADVERTISED_DEPLOY_RUNTIME_TARGETS = ["agentcore"];
 
 // src/cli/deploy.ts
 var TARGET_CHOICES = [...DEPLOY_RUNTIME_TARGETS];
+var ADVERTISED_TARGET_CHOICES = [...ADVERTISED_DEPLOY_RUNTIME_TARGETS];
 function isFile15(p) {
   try {
     return fs37.statSync(p).isFile();
@@ -14084,17 +14184,33 @@ function loadAgentCfg2(root) {
 function registerDeploy(program) {
   program.enablePositionalOptions();
   const p = program.command("deploy").description(
-    "Deploy the agent after explicitly selecting BNB, AWS, or Azure; lifecycle subcommands inspect recorded deployments."
-  );
-  const runtimeOption = () => new Option4(
-    "--runtime <name>",
-    "Deploy runtime to validate against (default: studio.toml [stack].runtime, else agentcore)."
-  ).choices(TARGET_CHOICES);
-  const targetAlias = () => new Option4("--target <name>", "Deprecated alias of --runtime.").choices(TARGET_CHOICES).hideHelp();
-  const providerOption = () => new Option4(
-    "--provider <provider>",
-    "Provider: bnb, aws, or azure. Required for non-interactive deploy; lifecycle commands need it only when multiple records exist."
-  ).choices(["bnb", "aws", "azure"]);
+    "Deploy the agent after explicitly selecting BNB or AWS; lifecycle subcommands inspect recorded deployments."
+  );
+  const runtimeOption = () => acceptChoices(
+    new Option4(
+      "--runtime <name>",
+      "Deploy runtime to validate against (default: studio.toml [stack].runtime, else agentcore)."
+    ),
+    TARGET_CHOICES,
+    ADVERTISED_TARGET_CHOICES
+  );
+  const targetAlias = () => acceptChoices(
+    new Option4(
+      "--target <name>",
+      "Deprecated alias of --runtime."
+    ).hideHelp(),
+    TARGET_CHOICES,
+    ADVERTISED_TARGET_CHOICES
+  );
+  const providerOption = () => acceptChoices(
+    new Option4(
+      "--provider <provider>",
+      "Provider: bnb or aws. Required for non-interactive deploy; lifecycle commands need it only when multiple records exist."
+    ),
+    // Unadvertised providers stay parseable (see ADVERTISED_PROVIDERS).
+    PROVIDER_MENU_ORDER,
+    ADVERTISED_PROVIDERS
+  );
   p.addOption(providerOption()).option("--project-root <path>", "Override project root.").option("--skip-prepare", "Skip non-storage local readiness checks.").option(
     "--force-deploy-broken-storage",
     "DANGEROUS: bypass fatal deliverable-storage checks."
@@ -14103,7 +14219,7 @@ function registerDeploy(program) {
   ).option("--accept-risk", "Accept provider risk/terms disclosures.").option("--yes", "Confirm the selected deployment plan non-interactively.").option(
     "--allow-multiple",
     "Allow creating a deployment while another provider remains active."
-  ).option("--skip-smoke", "Skip Azure's delegated post-deploy smoke check.").action(act((opts) => cmdDeploy(opts, [])));
+  ).option("--skip-smoke", "Skip the delegated post-deploy smoke check.").action(act((opts) => cmdDeploy(opts, [])));
   p.command("prepare").description("Run the deploy-readiness sweep on this project.").addOption(runtimeOption()).addOption(targetAlias()).option("--project-root <path>", "Override project root.").option("--json", "Emit JSON instead of a table.").option(
     "--ignore-warnings",
     "Exit 0 even if WARNING-level checks fire (still fails on BLOCKED/CRITICAL)."
@@ -14142,7 +14258,7 @@ function registerDeploy(program) {
     "Allow creating a deployment while another provider remains active."
   ).option(
     "--skip-smoke",
-    "(azure-foundry) Skip the post-deploy smoke check (omit `--smoke` from the delegated bnbagent-deploy invocation)."
+    "Skip the post-deploy smoke check (omit `--smoke` from the delegated bnbagent-deploy invocation)."
   ).argument(
     "[agentcoreArgs...]",
     "Extra args passed straight through to `bnbagent-deploy deploy` (put after `--`)."
@@ -14200,7 +14316,7 @@ function registerDeploy(program) {
       (opts) => cmdDestroy(opts)
     )
   );
-  p.command("logs").description("Show the selected deployment's logs via bnbagent-deploy.").option("--project-root <path>", "Override project root.").addOption(providerOption()).option("--since <dur>", "Lower bound, e.g. 5m/2h/1d (default 10m).", "10m").option("--follow", "Stream new lines (poll ~3s).").option("--limit <n>", "Number of recent lines (Azure; default 50).").option("--session <id>", "Azure container session id.").addOption(
+  p.command("logs").description("Show the selected deployment's logs via bnbagent-deploy.").option("--project-root <path>", "Override project root.").addOption(providerOption()).option("--since <dur>", "Lower bound, e.g. 5m/2h/1d (default 10m).", "10m").option("--follow", "Stream new lines (poll ~3s).").option("--limit <n>", "Number of recent lines (default 50).").option("--session <id>", "Container session id.").addOption(
     new Option4(
       "--job <id>",
       "Deprecated Studio direct-CloudWatch filter."
@@ -14652,14 +14768,18 @@ function renderProviderSelection(deployments, trial, unavailable) {
   }
   const remaining = formatTrialRemaining(trial.remainingSeconds);
   const bnbDetail = unavailable.bnb ? `unavailable \u2014 ${unavailable.bnb}` : trial.state === "expired" ? `unavailable \u2014 trial expired${trial.expiresAt ? ` ${trial.expiresAt}` : ""}` : trial.state === "active" ? `active${remaining ? ` \u2014 ${remaining} remaining` : ""}${trial.expiresAt ? ` \xB7 expires ${trial.expiresAt}` : ""}` : trial.state === "available" ? "available \u2014 free 48h testnet; starts on first successful deploy" : "login required to check trial eligibility";
+  const detail = {
+    bnb: bnbDetail,
+    aws: unavailable.aws ? `unavailable \u2014 ${unavailable.aws}` : "deploy to your AWS account",
+    azure: unavailable.azure ? `unavailable \u2014 ${unavailable.azure}` : "deploy to your Azure account"
+  };
   printOut("Deployment providers");
-  printOut(`  1. BNB Chain Trial   ${bnbDetail}`);
-  printOut(
-    `  2. AWS AgentCore     ${unavailable.aws ? `unavailable \u2014 ${unavailable.aws}` : "deploy to your AWS account"}`
-  );
-  printOut(
-    `  3. Azure Foundry     ${unavailable.azure ? `unavailable \u2014 ${unavailable.azure}` : "deploy to your Azure account"}`
-  );
+  for (const provider of PROVIDER_MENU_ORDER) {
+    if (!ADVERTISED_PROVIDERS.includes(provider)) continue;
+    printOut(
+      `  ${providerDigit(provider)}. ${PROVIDER_LABELS[provider].padEnd(18)}${detail[provider]}`
+    );
+  }
 }
 async function cmdDeploy(opts, deployArgs) {
   const rc = applyProjectRoot(opts.projectRoot);
@@ -14684,7 +14804,7 @@ async function cmdDeploy(opts, deployArgs) {
   });
   if (selection.kind === "selection_required") {
     printErr(
-      "error: deployment provider must be selected explicitly in a non-interactive terminal; pass --provider bnb|aws|azure --yes"
+      `error: deployment provider must be selected explicitly in a non-interactive terminal; pass --provider ${ADVERTISED_PROVIDERS_HELP} --yes`
     );
     return selection.exitCode;
   }
@@ -15107,7 +15227,7 @@ async function printAccessNextSteps2(root, runtime, opts = {}) {
     return;
   }
   printOut(
-    "  Azure Foundry buyer access is in Preview \u2014 see the bnbagent-studio-use-azure-foundry.md reference (skills/references/ in the bnbagent-studio repo) and docs/guides/foundry-a2a-access.md. The per-agent A2A card URL and OAuth scope are confirmed only after a live deploy."
+    "  Azure Foundry buyer access is in Preview \u2014 see docs/guides/foundry-a2a-access.md in the bnbagent-studio repo. The per-agent A2A card URL and OAuth scope are confirmed only after a live deploy."
   );
 }
 var CLIENT_PROMPT_RULE2 = "\u2500".repeat(62);
@@ -15381,7 +15501,9 @@ async function cmdStatus2(opts) {
       printOut(JSON.stringify({ deployments: [] }, null, 2));
     } else {
       printOut(`No recorded deployments${detail}.`);
-      printOut("Start one with `bag deploy --provider bnb|aws|azure`.");
+      printOut(
+        `Start one with \`bag deploy --provider ${ADVERTISED_PROVIDERS_HELP}\`.`
+      );
     }
     return opts.provider ? 2 : 0;
   }
@@ -15538,13 +15660,13 @@ async function selectRecordedForLifecycle(root, requested, operation) {
   if (deployments.length === 1 && soleDeployment) return soleDeployment;
   if (deployments.length === 0) {
     printErr(
-      "error: no deployment is recorded; run `bag deploy --provider bnb|aws|azure` first"
+      `error: no deployment is recorded; run \`bag deploy --provider ${ADVERTISED_PROVIDERS_HELP}\` first`
     );
     return 2;
   }
   if (!stdinIsTty()) {
     printErr(
-      `error: multiple deployments are active; non-interactive \`${operation}\` requires --provider bnb|aws|azure`
+      `error: multiple deployments are active; non-interactive \`${operation}\` requires --provider ${ADVERTISED_PROVIDERS_HELP}`
     );
     return 2;
   }
@@ -15997,7 +16119,7 @@ function anchoredKeystoreDir(projectRoot, walletCfg) {
 async function checkWallet(projectRoot, data) {
   const walletCfg = tableOf13(data, "wallet");
   if (walletCfg.kind === "twak") {
-    return checkWalletTwak(walletCfg, projectRoot);
+    return checkWalletTwak(walletCfg, projectRoot, data);
   }
   if (walletCfg.kind === "altana") {
     return checkWalletAltana(walletCfg, projectRoot);
@@ -16142,7 +16264,7 @@ function checkWalletAltana(walletCfg, projectRoot) {
   }
   return out;
 }
-async function checkWalletTwak(walletCfg, projectRoot) {
+async function checkWalletTwak(walletCfg, projectRoot, data = {}) {
   const out = [];
   if (await whichTwak() !== null) {
     const version = await twakInstalledVersion();
@@ -16167,6 +16289,15 @@ async function checkWalletTwak(walletCfg, projectRoot) {
       detail: `not on PATH \u2014 npm install -g @trustwallet/cli@${TWAK_CLI_VERSION}`
     });
   }
+  const networkName = String(tableOf13(data, "network").default ?? "bsc-testnet");
+  const unsupportedTargets = twakUnsupportedContractOverrides(networkName);
+  if (unsupportedTargets.length > 0) {
+    out.push({
+      name: "[wallet] twak contract targets",
+      status: FAIL,
+      detail: `twak v0.20.0 cannot target custom ERC-8183 contracts (${unsupportedTargets.map((item) => item.envKey).join(", ")}) and would use canonical contracts instead. Use wallet.kind='evm-local' for custom ERC-8183 contracts, or remove the overrides. ERC8004_REGISTRY_ADDRESS is supported.`
+    });
+  }
   const walletFile = twakWalletFile(walletCfg, projectRoot);
   if (isFile16(walletFile)) {
     out.push({
@@ -16507,7 +16638,7 @@ function checkErc8183Pricing(data) {
       {
         name: "erc8183 pricing",
         status: PASS,
-        detail: "FREE \u2014 zero token escrow; custom/QA contract stack selected with all three ERC-8183 address overrides."
+        detail: "FREE \u2014 zero token escrow; custom contract stack selected with all three ERC-8183 address overrides."
       }
     ];
   }
@@ -16515,7 +16646,7 @@ function checkErc8183Pricing(data) {
     {
       name: "erc8183 pricing",
       status: FAIL,
-      detail: "FREE \u2014 zero token escrow, but the canonical ERC-8183 contracts reject zero funding. Set ERC8183_COMMERCE_ADDRESS, ERC8183_ROUTER_ADDRESS, and ERC8183_POLICY_ADDRESS together to a zero-price-compatible QA/custom stack."
+      detail: "FREE \u2014 zero token escrow, but the canonical ERC-8183 contracts reject zero funding. Set ERC8183_COMMERCE_ADDRESS, ERC8183_ROUTER_ADDRESS, and ERC8183_POLICY_ADDRESS together to a zero-price-compatible custom stack."
     }
   ];
 }
@@ -17217,7 +17348,7 @@ function loadAgentCfg3() {
     return null;
   }
 }
-function resolveNetwork(override) {
+function resolveNetwork2(override) {
   if (override) {
     return override;
   }
@@ -17407,7 +17538,7 @@ async function cmdRegister2(opts) {
     return 2;
   }
   const wallet = walletRt6.getWallet();
-  const network = resolveNetwork(opts.network);
+  const network = resolveNetwork2(opts.network);
   const gasErr = await precheckRegisterGas(wallet, network);
   if (gasErr !== null) {
     printErr(`error: ${gasErr}`);
@@ -17495,7 +17626,7 @@ async function cmdUpdateEndpoint(opts) {
     return 2;
   }
   const wallet = walletRt6.getWallet();
-  const network = resolveNetwork(opts.network);
+  const network = resolveNetwork2(opts.network);
   const protocol = resolveProtocol(opts.protocol);
   let accessDescription = null;
   const agentRoot2 = findProjectRoot5();
@@ -17538,7 +17669,7 @@ async function cmdUpdateEndpoint(opts) {
 }
 async function cmdUpdateMetadata(opts) {
   const wallet = walletRt6.getWallet();
-  const network = resolveNetwork(opts.network);
+  const network = resolveNetwork2(opts.network);
   let txHash;
   try {
     txHash = await setMetadata(wallet, opts.key, opts.value, {
@@ -17570,7 +17701,7 @@ async function cmdClearPending(opts) {
   }
   const pendingTx = identity.pending_tx ? String(identity.pending_tx) : null;
   if (pendingTx !== null && !opts.force) {
-    const network = resolveNetwork(opts.network);
+    const network = resolveNetwork2(opts.network);
     let seen;
     try {
       seen = await readTransactionSeen(pendingTx, network);
@@ -17601,7 +17732,7 @@ async function cmdGetMetadata(opts) {
   let value;
   try {
     value = await getMetadata(wallet, opts.key, {
-      network: resolveNetwork(opts.network)
+      network: resolveNetwork2(opts.network)
     });
   } catch (exc) {
     printOut(`error: ${errMsg4(exc)}`);
@@ -17614,7 +17745,7 @@ async function cmdShow6(networkArg) {
   const wallet = walletRt6.getWallet();
   let record;
   try {
-    record = await show2(wallet, { network: resolveNetwork(networkArg) });
+    record = await show2(wallet, { network: resolveNetwork2(networkArg) });
   } catch (exc) {
     printOut(`error: ${errMsg4(exc)}`);
     return errName2(exc) === "NotRegisteredError" ? 2 : 1;
@@ -17631,7 +17762,7 @@ async function cmdResolve(agentId, networkArg) {
   try {
     uri = await resolve20(agentId, {
       wallet,
-      network: resolveNetwork(networkArg)
+      network: resolveNetwork2(networkArg)
     });
   } catch (exc) {
     printOut(`error: ${errMsg4(exc)}`);
@@ -19198,7 +19329,7 @@ function loadSellerConfig() {
     return null;
   }
 }
-function resolveNetwork2(cfg, override) {
+function resolveNetwork3(cfg, override) {
   if (override) {
     return override;
   }
@@ -19276,7 +19407,12 @@ async function cmdSellInit(priceFlag) {
   }
   const envPath = envLocalPath17(root);
   for (const key of B402_ENV_KEYS) {
-    if (getEnvVar(envPath, key) === null) setEnvVar(envPath, key, "");
+    const existing = getEnvVar(envPath, key);
+    if (key === "B402_BASE_URL" && !free && resolveNetwork3(cfg).toLowerCase() === "bsc-testnet" && !process.env.B402_BASE_URL && !existing) {
+      setEnvVar(envPath, key, DEFAULT_B402_TESTNET_BASE_URL);
+    } else if (existing === null) {
+      setEnvVar(envPath, key, "");
+    }
   }
   printOut(
     free ? "\u2713 x402 seller config is ready in FREE mode; B402 credentials are not required." : "\u2713 x402 seller config and B402 placeholders are ready for PAID mode."
@@ -19355,7 +19491,7 @@ async function cmdSellStatus(probe) {
     printOut("B402 probe: skipped (rail disabled or credentials incomplete)");
     return 0;
   }
-  const networkName = resolveNetwork2(cfg);
+  const networkName = resolveNetwork3(cfg);
   const network = caip2(getNetwork11(networkName).chainId);
   const token = SELLER_TOKENS[network];
   if (!token) {
@@ -19449,7 +19585,7 @@ async function cmdBuy2(url, opts) {
     printErr(`error: ${errMsg6(exc)}`);
     return 2;
   }
-  const networkName = resolveNetwork2(cfg, opts.network);
+  const networkName = resolveNetwork3(cfg, opts.network);
   const wallet = resolveWallet2();
   if (wallet === null) {
     return 1;
@@ -19638,7 +19774,7 @@ async function cmdTrust(merchant, opts) {
     host = rec.domain;
     methodHint = rec.probeMethod;
   }
-  const networkName = opts.network || (rec ? rec.network : resolveNetwork2(cfg, null));
+  const networkName = opts.network || (rec ? rec.network : resolveNetwork3(cfg, null));
   const probed = await probeChallenge(probeUrl, methodHint);
   if (probed === null) {
     return 1;
@@ -19784,7 +19920,7 @@ function buildProgram() {
   return program;
 }
 function cliVersion() {
-  return "0.0.6-alpha.2";
+  return "0.0.6-alpha.3";
 }
 
 // src/cli/updateCheck.ts

package/dist/{chunk-6EYSXRFD.js → chunk-A7NAGZHR.js}

@@ -295,6 +295,7 @@ function mb(n) {
 
 // src/cli/_x402SellerConfig.ts
 var DEFAULT_B402_PRICE_USD = "0.01";
+var DEFAULT_B402_TESTNET_BASE_URL = "https://qacb.sdtaop.com";
 var PRICE_USD_RE = /^(?:0|[1-9]\d*)(?:\.\d+)?$/;
 var ZERO_PRICE_USD_RE = /^0(?:\.0+)?$/;
 function x402SellerPricingState(seller) {
@@ -317,6 +318,14 @@ function normalizeB402PriceUsd(value) {
   }
   return normalized;
 }
+function isB402TestnetBaseUrl(value) {
+  try {
+    const url = new URL(value);
+    if (url.origin === DEFAULT_B402_TESTNET_BASE_URL) return true;
+  } catch {
+  }
+  return /sandbox|test/.test(value.toLowerCase());
+}
 function x402SellerUsesB402(cfg) {
   const payments = table2(cfg.payments);
   const seller = table2(payments.x402_seller);
@@ -649,10 +658,14 @@ function b402Credentials(agentRoot) {
     if (value) values.set(key, value);
   }
   const privateKey = values.has("B402_PRIVATE_KEY") || values.has("B402_PRIVATE_KEY_B64");
+  const onlyDefaultBaseUrl = values.size === 1 && values.get("B402_BASE_URL")?.replace(/\/+$/, "") === DEFAULT_B402_TESTNET_BASE_URL;
   return {
     presentKeys: [...values.keys()],
     complete: values.has("B402_BASE_URL") && values.has("B402_CLIENT_ID") && values.has("B402_ACCESS_TOKEN") && privateKey,
-    any: values.size > 0,
+    // The testnet facilitator URL is a non-secret platform default. On its own it must not turn an
+    // otherwise dormant rail into a "partial credentials" deployment failure. Any custom URL or
+    // merchant credential still preserves the existing partial/unused checks.
+    any: values.size > 0 && !onlyDefaultBaseUrl,
     bothPrivateKeyFormats: values.has("B402_PRIVATE_KEY") && values.has("B402_PRIVATE_KEY_B64"),
     baseUrl: values.get("B402_BASE_URL") ?? null
   };
@@ -1079,8 +1092,10 @@ export {
   devPortOf,
   recipeModeOf,
   DEFAULT_B402_PRICE_USD,
+  DEFAULT_B402_TESTNET_BASE_URL,
   x402SellerPricingState,
   normalizeB402PriceUsd,
+  isB402TestnetBaseUrl,
   x402SellerUsesB402,
   x402SellerIsFree,
   whichBin,

package/dist/{deployCli-3U2FESF4.js → deployCli-264UE6KB.js}

@@ -17,7 +17,7 @@ import {
   runPlatformAccountCommand,
   trialFromDeployCliJson,
   withDeployFiles
-} from "./chunk-6EYSXRFD.js";
+} from "./chunk-A7NAGZHR.js";
 import "./chunk-7RAKL4AS.js";
 export {
   BNB_PLATFORM_API_URL,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bnbagent/studio-cli",
-  "version": "0.0.6-alpha.2",
+  "version": "0.0.6-alpha.3",
   "description": "The `bag` CLI: scaffold, run, deploy, and monetize a single seller agent on BNB Chain (ERC-8004 identity, ERC-8183 commerce, x402 payments).",
   "license": "Apache-2.0",
   "repository": {
@@ -25,7 +25,7 @@
     "bag": "./dist/bag.js"
   },
   "dependencies": {
-    "@bnbagent/sdk": "0.5.0-alpha.1",
+    "@bnbagent/sdk": "0.5.0-alpha.2",
     "ai": "^7.0.29",
     "archiver": "^8.0.0",
     "commander": "^15.0.0",
@@ -37,7 +37,7 @@
     "tar": "^7.4.0",
     "viem": "^2.54.0",
     "yaml": "^2.9.0",
-    "@bnbagent/studio-runtime": "0.0.6-alpha.2"
+    "@bnbagent/studio-runtime": "0.0.6-alpha.3"
   },
   "devDependencies": {
     "@a2a-js/sdk": "^0.3.14",

package/recipes/runtimes/agentcore/code/{{PKG}}/dualMain.ts.tmpl

@@ -159,8 +159,9 @@ function defaultNetwork(): string {
 // the ONLY automatic signing path outside signing.ts — it is budget-gated and
 // is NOT an LLM tool. It rides transparently into the delivery step.
 //
-// The LLM runs ONLY in the delivery step (the value hook). `negotiate` is
-// rule-based and never touches the LLM. The read-only chain tools are
+// The LLM runs only in an authorized value step: verified ERC-8183 delivery
+// or x402 work after its payment/free gate. `negotiate` is rule-based and
+// never touches the LLM. The read-only chain tools are
 // attached so the work can read on-chain context if it needs to — drop them
 // from `tools.ts` if your work doesn't read chain. Signing / settle are NEVER
 // tools — they are fixed code in signing.ts, triggered by the A2A skills,
@@ -178,7 +179,9 @@ export function buildRunWork(): RunWork {
     const result = await generateText({
       model,
       system:
-        "You are a seller agent. You do the actual work once a job is funded. " +
+        "You are a seller agent. The runtime has already authorized this task " +
+        "through its configured commerce rail. Complete the user's task now; " +
+        "do not ask for a job ID or additional payment. " +
         "Be concrete and concise. Use the read-only chain tools when on-chain " +
         "context helps. If a paid-data tool such as `buy_with_x402` is available " +
         "to you, USE IT to fetch the data a task needs — those merchants (e.g. " +

package/recipes/runtimes/agentcore/code/{{PKG}}/main.ts.tmpl

@@ -150,8 +150,9 @@ function defaultNetwork(): string {
 // the ONLY automatic signing path outside signing.ts — it is budget-gated and
 // is NOT an LLM tool. It rides transparently into the delivery step.
 //
-// The LLM runs ONLY in the delivery step (the value hook). `negotiate` is
-// rule-based and never touches the LLM. The read-only chain tools are
+// The LLM runs only in an authorized value step: verified ERC-8183 delivery
+// or x402 work after its payment/free gate. `negotiate` is rule-based and
+// never touches the LLM. The read-only chain tools are
 // attached so the work can read on-chain context if it needs to — drop them
 // from `tools.ts` if your work doesn't read chain. Signing / settle are NEVER
 // tools — they are fixed code in signing.ts, triggered by the A2A skills,
@@ -169,7 +170,9 @@ export function buildRunWork(): RunWork {
     const result = await generateText({
       model,
       system:
-        "You are a seller agent. You do the actual work once a job is funded. " +
+        "You are a seller agent. The runtime has already authorized this task " +
+        "through its configured commerce rail. Complete the user's task now; " +
+        "do not ask for a job ID or additional payment. " +
         "Be concrete and concise. Use the read-only chain tools when on-chain " +
         "context helps. If a paid-data tool such as `buy_with_x402` is available " +
         "to you, USE IT to fetch the data a task needs — those merchants (e.g. " +

package/recipes/runtimes/agentcore/code/{{PKG}}/mcpMain.ts.tmpl

@@ -184,10 +184,10 @@ function flatQuery(query: Record<string, unknown>): Record<string, string> {
   return out;
 }
 
-// ── LLM work hook (lazy: built on first delivery; negotiate never needs it) ──
-// Deferred construction keeps the negotiate-only path (and a cold start that
-// only quotes) from building the model, and keeps this module importable
-// without the provider env until a deliverable is actually produced.
+// ── LLM work hook (lazy: built on first authorized task) ─────────────────────
+// Deferred construction keeps negotiate and unpaid x402 quote paths from
+// building the model, and keeps this module importable without the provider
+// env until a deliverable is actually produced.
 type RunLlm = (prompt: string) => Promise<string>;
 let cachedRunLlm: RunLlm | null = null;
 
@@ -200,7 +200,9 @@ async function runLlm(prompt: string): Promise<string> {
       const result = await generateText({
         model,
         system:
-          "You are a seller agent. You do the actual work once a job is funded. " +
+          "You are a seller agent. The runtime has already authorized this task " +
+          "through its configured commerce rail. Complete the user's task now; " +
+          "do not ask for a job ID or additional payment. " +
           "Be concrete and concise. Use the read-only chain tools when on-chain " +
           "context helps. If a paid-data tool such as `buy_with_x402` is " +
           "available to you, USE IT to fetch the data a task needs — those " +

package/recipes/runtimes/agentcore/code/{{PKG}}/sellerCore.ts.tmpl

@@ -105,8 +105,9 @@ async function withTimeout<T>(
  * The LLM work hook: produce the deliverable text for a prompt.
  *
  * Built in `main.ts` from the AI SDK (`generateText` + the read-only chain
- * tools); called ONLY inside the background delivery. `abortSignal` is wired
- * to the delivery timeout so a hung LLM call is actually cancelled.
+ * tools); called by verified ERC-8183 delivery and, through the runtime
+ * adapter, by x402 only after its commerce gate. `abortSignal` is wired to
+ * the delivery timeout so a hung LLM call is actually cancelled.
  */
 export type RunWork = (
   prompt: string,

package/skills/bnbagent-studio.md

@@ -1,6 +1,6 @@
 ---
 name: bnbagent-studio
-description: The single entry point for bnbagent-studio — a TypeScript CLI (`bag`) for building a blockchain SELLER agent that earns $U on BNB Chain via ERC-8004 + ERC-8183 + x402 (Pieverse LLM inside). Load this skill whenever the user works in a bnbagent-studio / `bag` project, or wants to create/scaffold, deploy, run, debug, operate, or monetize such a seller agent (composable A2A, MCP, and X402 faces; BNB Chain trial, AWS AgentCore, or Azure Foundry). All detailed playbooks ship as references/ files inside this skill — route via the decision tree in the body. When invoked with arguments, treat them as the user's intent and route the same way.
+description: The single entry point for bnbagent-studio — a TypeScript CLI (`bag`) for building a blockchain SELLER agent that earns $U on BNB Chain via ERC-8004 + ERC-8183 + x402 (Pieverse LLM inside). Load this skill whenever the user works in a bnbagent-studio / `bag` project, or wants to create/scaffold, deploy, run, debug, operate, or monetize such a seller agent (composable A2A, MCP, and X402 faces; BNB Chain trial or AWS AgentCore). All detailed playbooks ship as references/ files inside this skill — route via the decision tree in the body. When invoked with arguments, treat them as the user's intent and route the same way.
 ---
 
 # bnbagent-studio (the single entry point)
@@ -10,15 +10,13 @@ ERC-8004 / ERC-8183 / Pieverse LLM) into a TypeScript agent project, then deploy
 as a **single blockchain seller runtime**. A2A, MCP, and X402 are composable
 public faces selected with `--protocols`; A2A is the default. `bag deploy` uses
 **scheme C**: every new deploy
-or redeploy explicitly selects BNB, AWS, or Azure; a recorded deployment is
+or redeploy explicitly selects BNB or AWS; a recorded deployment is
 used only to offer an explicit update action, never as a silent default. BNB is
-a 48h testnet trial and is disabled after expiry. AWS and Azure deploy into the
+a 48h testnet trial and is disabled after expiry. AWS deploys into the
 user's own account. All cloud lifecycle calls go through the pinned
-`@bnbagent/deploy-cli`; never require `aws`, `az`, or `azd` CLIs.
-BNB/AWS share the agentcore scaffold; Azure requires the azure-foundry
-container scaffold and currently deploys A2A projects only (Foundry's
-Invocations contract is not the native MCP transport). Treat an incompatible provider row as unavailable—do not
-force through it or mutate the scaffold during deploy.
+`@bnbagent/deploy-cli`; never require the `aws` CLI.
+BNB/AWS share the agentcore scaffold. Treat an incompatible provider row as
+unavailable—do not force through it or mutate the scaffold during deploy.
 
 Invoked as `/bnbagent-studio <ask>`? Treat `<ask>` as the user's intent and
 route it through the decision tree below, exactly like a natural-language ask.
@@ -57,7 +55,7 @@ not answer from memory.
 | Run / debug / dev / doctor / RPC / balance / incident triage | `references/bnbagent-studio-operating.md` |
 | Implement what the Agent sells, tune pricing, publish over A2A and/or MCP, defend disputes (seller flow) | `references/bnbagent-studio-selling-via-8183.md` |
 | Sell one paid or FREE HTTP request through the B402-backed x402 rail (pricing choice; paid merchant application, RSA key, credentials, IP allowlist, activation) | `references/bnbagent-studio-selling-via-b402.md` |
-| Deploy / redeploy / status / logs / destroy | Run `bag deploy` and explicitly choose a provider. Non-interactive deploy requires `--provider bnb\|aws\|azure --yes` (and `--allow-multiple` when keeping another provider active). Read `references/bnbagent-studio-use-bnb-trial.md`, `references/bnbagent-studio-use-aws-agentcore.md`, or `references/bnbagent-studio-use-azure-foundry.md` for the selected provider. `bag deploy status` lists every recorded provider; multi-deployment logs/verify/destroy require `--provider`. |
+| Deploy / redeploy / status / logs / destroy | Run `bag deploy` and explicitly choose a provider. Non-interactive deploy requires `--provider bnb\|aws --yes` (and `--allow-multiple` when keeping another provider active). Read `references/bnbagent-studio-use-bnb-trial.md` or `references/bnbagent-studio-use-aws-agentcore.md` for the selected provider. `bag deploy status` lists every recorded provider; multi-deployment logs/verify/destroy require `--provider`. |
 | Wire chain-read tools into the Agent's LLM (AI SDK `tool()` wrappers, or any TS agent framework) | `references/bnbagent-studio-wiring-llm-tools.md` |
 | Buy a service from another ERC-8183 seller via CLI — incl. testing your own seller from the buyer side (v2/internal — NOT the v1 seller product flow) | `references/bnbagent-studio-buying-via-8183.md` |
 | Give the agent a PAID x402 capability — CMC market data / Binance Bazaar (B402) merchants / any pay-per-call API (`bag x402 trust`, x402-buyer recipe, 402 buyer errors) | `references/bnbagent-studio-buying-from-bazaar.md` |
@@ -99,7 +97,7 @@ prices retain the paid merchant flow.
 
 ## CLI groups at a glance
 
-`init`, `scan`, `recipe`, `skills`, `wallet`, `erc8004`, `erc8183`, `x402`, `agents`, `config`, `env`, `dev`, `doctor`, `audit`, `deploy`, `platform`, `llm`, `bundle`, `budget` — see `bag --help` for details. `bag deploy [--provider bnb\|aws\|azure]` is the primary deploy command; `prepare`, `verify`, `status`, `info`, `destroy`, `logs`, `fix-gitignore`, and `provision-cognito` remain lifecycle subcommands (`deploy agent` is a deprecated compatibility alias). Provider deploy/status/logs/destroy and deploy-time credential validation are delegated to pinned `@bnbagent/deploy-cli@0.4.14`.
+`init`, `scan`, `recipe`, `skills`, `wallet`, `erc8004`, `erc8183`, `x402`, `agents`, `config`, `env`, `dev`, `doctor`, `audit`, `deploy`, `platform`, `llm`, `bundle`, `budget` — see `bag --help` for details. `bag deploy [--provider bnb\|aws]` is the primary deploy command; `prepare`, `verify`, `status`, `info`, `destroy`, `logs`, `fix-gitignore`, and `provision-cognito` remain lifecycle subcommands (`deploy agent` is a deprecated compatibility alias). Provider deploy/status/logs/destroy and deploy-time credential validation are delegated to pinned `@bnbagent/deploy-cli@0.4.14`.
 
 ## Tool surface
 

package/skills/references/bnbagent-studio-adding-to-project.md

@@ -171,7 +171,7 @@ refill with `bag llm topup` or enable the budget with `bag budget enable`.
 
 ## Step 5 — Deploy the agent
 
-`bag deploy` always asks the operator to choose BNB, AWS, or Azure; it never
+`bag deploy` always asks the operator to choose BNB or AWS; it never
 silently reuses `[deploy].destination` or the last provider.
 
 **Platform scaffold** (the bare-init default while the campaign runs) — one

package/skills/references/bnbagent-studio-operating.md

@@ -27,7 +27,6 @@ directory (Claude Code: `~/.claude/skills/bnbagent-studio/references/`; Cursor:
 the file when the topic comes up — don't answer from memory:
 - `bnbagent-studio-use-aws-agentcore.md` — the delegated AgentCore lifecycle (`bag deploy --provider aws` / `status` / `logs` / `verify` / `destroy`, `provision-cognito`) + AWS prerequisites
 - `bnbagent-studio-use-bnb-trial.md` — GitHub device login, 48h eligibility, staging verification, and the delegated BNB trial lifecycle
-- `bnbagent-studio-use-azure-foundry.md` — the delegated Azure Foundry lifecycle (`bag deploy --provider azure`; no `az`/`azd` CLI)
 - `bnbagent-studio-using-twak-wallet.md` — `[wallet].kind = "twak"` create / fund / SIWE-bind / container deploy / limitations
 - `bnbagent-studio-extending-signing.md` — `PolicyViolation` / `X402PolicyError` diagnosis + extending the EIP-712 allowlist
 - `bnbagent-studio-adding-to-project.md` — adding the seller runtime to an existing TypeScript project
@@ -55,8 +54,8 @@ For seller job-lifecycle decisions (settle / submit / dispute defense), read
 | "submit work for job X" | **seller action** — read `bnbagent-studio-selling-via-8183.md` (same directory) for the submit/dispute flow |
 | "tx not confirming" | Read BscScan link from prior tx output + check `eth_getTransactionCount` |
 | "wallet balance is wrong" | Check both tBNB (gas) and U (token); see balance section |
-| "is it deployed?" / "deploy status" | `bag deploy status` lists every locally recorded BNB/AWS/Azure deployment and asks `bnbagent-deploy` for live state; add `--no-probe` for record-only output |
-| "deploy logs" / "verify" / "tear it down" | With one recorded deployment, `bag deploy {logs,verify,destroy}` selects it automatically. With multiple, choose interactively or pass `--provider bnb\|aws\|azure` in automation. Cloud calls always go through `bnbagent-deploy`. `bag platform credit` shows the BNB trial countdown. |
+| "is it deployed?" / "deploy status" | `bag deploy status` lists every locally recorded BNB/AWS deployment and asks `bnbagent-deploy` for live state; add `--no-probe` for record-only output |
+| "deploy logs" / "verify" / "tear it down" | With one recorded deployment, `bag deploy {logs,verify,destroy}` selects it automatically. With multiple, choose interactively or pass `--provider bnb\|aws` in automation. Cloud calls always go through `bnbagent-deploy`. `bag platform credit` shows the BNB trial countdown. |
 
 ## Common ops procedures
 
@@ -161,7 +160,7 @@ testnet U pays ERC-8183 jobs, mainnet U pays the Pieverse LLM auto-renew.
 Same wallet address on both chains.
 
 `bag doctor` prints ERC-8183 pricing as `PAID` or `FREE`. FREE is not ready on
-the canonical contract stack: select one zero-price-compatible QA/custom stack
+the canonical contract stack: select one zero-price-compatible custom stack
 by setting `ERC8183_COMMERCE_ADDRESS`, `ERC8183_ROUTER_ADDRESS`, and
 `ERC8183_POLICY_ADDRESS` together. A partial set fails because it can mix
 incompatible commerce, router, and policy deployments.
@@ -216,7 +215,7 @@ covered in `bnbagent-studio-selling-via-8183.md` (same directory).
 | `notify_funded` replies `{"status":"rejected","reason":...}` | `verifySignedJob` failed synchronously in the ack — a **permanent** failure | `reason` names it: not our signature / tampered terms / underfunded / expired (or `error` for a malformed `job_id`). The job is refused outright; re-fund/re-notify with a correct, fully-funded job |
 | Job stays `FUNDED`, never reaches `SUBMITTED` after an `accepted` ack | Background delivery failed (`runWork` / `submitResult` raised) — **not** visible in the A2A reply | The ack only confirms verify passed; delivery runs in the background. Observe the failure via the chain (job never leaves `FUNDED`) + CloudWatch logs; a later `notify_funded` re-attempts it via the sweep |
 | `ERC8183JobOps` has no such export from `@bnbagent/sdk` | package.json pinned an old `@bnbagent/sdk` (missing class) | Bump the dependency and reinstall |
-| FREE price fails doctor/prepare on canonical contracts | `price = "0"` is selected without a zero-price-compatible stack | Set all three `ERC8183_*_ADDRESS` overrides from the current apex-contracts `bscTestnetQa` entry, then rerun `bag doctor` and `bag deploy prepare` |
+| FREE price fails doctor/prepare on canonical contracts | `price = "0"` is selected without a zero-price-compatible stack | Set all three `ERC8183_*_ADDRESS` overrides from one compatible custom deployment, then rerun `bag doctor` and `bag deploy prepare` |
 | ERC-8183 contract override is incomplete | Only one or two of commerce/router/policy were selected | Set or remove all three together; never mix stacks |
 | `/x402` is public without a 402 challenge | `payments.x402_seller.price_usd = "0"` selected anonymous FREE passthrough | If payment is intended, set a positive decimal price, configure the complete B402 credential set, rerun `bag doctor`, and redeploy |
 | B402 credentials are missing but x402 reports FREE | Expected: FREE bypasses B402 and does not synchronize its secrets | No credential fix is needed; change to a positive price only when the route should charge |

package/skills/references/bnbagent-studio-scaffolding-agent.md

@@ -235,7 +235,7 @@ Step 6b when `storage=ipfs`):
    `--erc8183-price 0` only when the user explicitly chose FREE; omitting the
    flag preserves the paid 0.1 U default. FREE additionally requires all three
    `ERC8183_COMMERCE_ADDRESS`, `ERC8183_ROUTER_ADDRESS`, and
-   `ERC8183_POLICY_ADDRESS` values from one zero-price-compatible QA/custom
+   `ERC8183_POLICY_ADDRESS` values from one zero-price-compatible custom
    stack; set them with `bag env set` after scaffolding. For B402, pass
    `--b402-price 0` only after the user explicitly accepts an unrestricted
    anonymous FREE `/x402` endpoint. FREE bypasses B402 verify/settle and needs

package/skills/references/bnbagent-studio-selling-via-8183.md

@@ -115,16 +115,16 @@ string:
 
 ```bash
 bag config set payments.erc8183.price 0
-bag env set ERC8183_COMMERCE_ADDRESS <qa-commerce-proxy>
-bag env set ERC8183_ROUTER_ADDRESS <qa-router-proxy>
-bag env set ERC8183_POLICY_ADDRESS <qa-policy>
+bag env set ERC8183_COMMERCE_ADDRESS <commerce-address>
+bag env set ERC8183_ROUTER_ADDRESS <router-address>
+bag env set ERC8183_POLICY_ADDRESS <policy-address>
 bag doctor
 bag deploy prepare
 ```
 
-Take all three addresses from the same apex-contracts `bscTestnetQa` entry.
+Take all three addresses from the same compatible custom deployment.
 Doctor/prepare reject canonical or partial contract selection for FREE and
-announce `zero token escrow` only when the complete custom/QA stack is selected.
+announce `zero token escrow` only when the complete custom stack is selected.
 
 ## Stage 3 — LLM credit continuity (Pieverse projects only)
 

package/skills/references/bnbagent-studio-selling-via-b402.md

@@ -152,7 +152,7 @@ Open the workspace `.studio/.env.local` in an editor and fill exactly four
 values:
 
 ```dotenv
-B402_BASE_URL=
+B402_BASE_URL=https://qacb.sdtaop.com
 B402_CLIENT_ID=
 B402_ACCESS_TOKEN=
 B402_PRIVATE_KEY_B64=

package/skills/references/bnbagent-studio-use-azure-foundry.md

@@ -7,7 +7,7 @@ description: When the user wants to deploy or operate an A2A bnbagent-studio pro
 
 # bnbagent-studio-use-azure-foundry
 
-> **Preview.** Azure Foundry support is fully wired and listed in the `--runtime` menu. The most recent end-to-end live verification predates the TypeScript rewrite — treat your first deploy as a verification run.
+> **Preview — not advertised in this release.** Azure Foundry support is fully wired but hidden from the `--runtime` menu and the deploy provider menu; these steps still work if you select `azure-foundry` / `--provider azure` explicitly. The most recent end-to-end live verification predates the TypeScript rewrite — treat your first deploy as a verification run.
 
 Procedure for deploying and operating the seller Agent on **Azure AI
 Foundry Hosted Agents** (`[stack].runtime = "azure-foundry"`). ALL cloud

package/skills/references/bnbagent-studio-use-bnb-trial.md

@@ -13,7 +13,7 @@ keep `bsc-testnet`, and explain that the runtime signing material is transmitted
 to the operator's managed secret store for the trial. Never use a mainnet key.
 
 All auth and cloud lifecycle work must cross the pinned
-`@bnbagent/deploy-cli@0.4.14` boundary. Do not call AWS/Azure CLIs or platform
+`@bnbagent/deploy-cli@0.4.14` boundary. Do not call the AWS CLI or platform
 REST routes directly.
 
 ## Select and authenticate
@@ -35,7 +35,7 @@ Before offering BNB, inspect the trial result:
 - `available`: selectable; explain that the 48h clock starts on first success.
 - `active`: selectable; show remaining time and expiry immediately.
 - `expired`: show the row and expiry, but mark it unavailable and do not select
-  it. AWS/Azure remain independently available when compatible with the
+  it. AWS remains independently available when compatible with the
   project scaffold.
 - unknown/auth required: explain that eligibility cannot be confirmed until
   login; the delegated deploy rechecks before building.

package/skills/references/bnbagent-studio-using-twak-wallet.md

@@ -173,11 +173,11 @@ Two assets, two different rules:
   settles), so topping up burns no BNB. A twak wallet is also a supported
   b402 **seller** payout wallet (`bag init --wallet-kind twak --rails b402`);
   receiving needs no signature or gas either.
-- **BNB (gas)** — **testnet: none needed; mainnet: a little for ERC-8183.**
-  Testnet: the SDK forwards MegaFuel's testnet paymaster (`--paymaster-url`,
-  twak >= 0.20.0), so x402 topups (already gasless) plus **all** 8004/8183
-  writes are sponsored — a little tBNB (~0.007) is only a fallback in case
-  sponsorship declines a tx. Mainnet: x402 stays gasless and `bag 8004
+- **BNB (gas)** — **testnet canonical contracts normally use sponsorship;
+  mainnet needs a little for ERC-8183.** Testnet: the SDK forwards MegaFuel's
+  testnet paymaster (`--paymaster-url`, twak >= 0.20.0). Sponsorship still
+  depends on the paymaster policy covering the target contract and method;
+  keep a little tBNB (~0.007) as fallback. Mainnet: x402 stays gasless and `bag 8004
   register` is gas-sponsored by twak internally (Trust gateway — studio
   passes no paymaster flag), but **`8183 settle` / `fund` self-pay gas**, so
   keep ~0.007 BNB on the wallet for them.
@@ -203,8 +203,8 @@ spending limit nothing can bypass. Studio's daily caps
 (persisted to `.studio/spend-ledger.json`), best-effort in the deployed
 runtime (in-memory, resets on cold start).
 
-Testnet faucet: https://www.bnbchain.org/en/testnet-faucet (tBNB, fallback only).
-Mainnet: U via PancakeSwap (BNB not needed — gas is sponsored).
+Testnet faucet: https://www.bnbchain.org/en/testnet-faucet (tBNB fallback).
+Mainnet: U via PancakeSwap; keep BNB for ERC-8183 fund/settle.
 
 ## 4. SIWE binding (Pieverse) — ALWAYS bind before paying
 
@@ -244,7 +244,9 @@ registers a `Container` runtime and `app/agent/Dockerfile` builds the image
 |---|---|---|
 | ~~Seller `submit` unavailable~~ | ~~REQ-1~~ RESOLVED in v0.19.0 | `submit --opt-params` works — verified on-chain. |
 | ~~Seller `quote` signing broken~~ | ~~S-11 regression in v0.19.0~~ RESOLVED in v0.19.1 | v0.19.0 hex-decoded `0x…` messages and signed the bytes, so provider_sig never verified (testnet also rejected `sign-message --chain bsctestnet`). v0.19.1 signs the literal text (EIP-191): `sign_quote` works on both wallet kinds. |
-| ~~Testnet intent writes self-pay gas~~ | ~~REQ-2~~ RESOLVED in v0.20.0 | twak accepts `--paymaster-url`; the SDK forwards MegaFuel's testnet endpoint on every sponsored write, so testnet 8004/8183 writes are gasless too (the relay itself is flaky — see the BUG-029 warning in §3). Mainnet stays twak-internal (no flag passed). The CLI floor is now **0.20.0** — `bag doctor` / `bag deploy prepare` reject older. |
+| ~~No testnet paymaster URL~~ | ~~REQ-2~~ RESOLVED in v0.20.0 | twak accepts `--paymaster-url`; the SDK forwards MegaFuel's testnet endpoint on eligible writes. Actual sponsorship depends on the paymaster policy covering the target and method (the relay itself is flaky — see the BUG-029 warning in §3). The CLI floor is **0.20.0**. |
+| Custom ERC-8004 registry | supported | Set `ERC8004_REGISTRY_ADDRESS`; the SDK requires the intent target and env override to match before invoking twak. Sponsorship still depends on paymaster policy coverage, so keep fallback tBNB. |
+| Custom ERC-8183 targets unavailable | upstream feature request | twak v0.20.0 has no Commerce/Router/Policy address option. Studio doctor/prepare and the SDK fail closed instead of silently executing on canonical contracts; use `evm-local` for a custom ERC-8183 deployment. |
 | No generic EIP-712 signing | P0 (won't fix) | `[wallet.signing]` is ignored; payments go through the delegated payer's own prechecks + `--max-payment`. Endpoints needing an `Authorization` header *and* x402 are unavailable (e.g. `bag llm key new --initial-usd > 0` — use `--initial-usd 0` + topup + allocate instead, same end state). |
 | No wallet import | S-6 | Switching wallet kinds changes your address → re-run `bag 8004 register` (new on-chain identity). |
 | Programmatic wallet creation forces password onto argv | S-8 | Bridged by `bag wallet twak-init` (password via stdin / 0600 file / hidden prompt — never argv); the manual twak commands remain a fallback. |