@bnbagent/studio-cli 0.0.6-alpha.4 → 0.0.6-alpha.6

package/dist/{chunk-7RAKL4AS.js → chunk-RO726HJG.js}

@@ -115,12 +115,13 @@ function twakDoubledHomeHint(walletFile) {
   return `hint: the resolved wallet path ${walletFile} nests .twak/.twak \u2014 [wallet].twak_home in studio.toml likely points at the .twak directory itself. Set it to the PARENT directory (the runtime appends .twak/wallet.json) and re-run.`;
 }
 function twakCreateGuidance(fields) {
-  return `error: wallet.kind = "twak" \u2014 \`bag wallet new\` does not create twak wallets.
-studio never puts a wallet password on argv (upstream S-8), so it will not shell
-out \`twak wallet create --password \u2026\` for you. Create the wallet ONCE
-(you choose the password; pick a strong one).
+  return `error: wallet.kind = "twak" \u2014 \`bag wallet new\` only adopts an existing
+twak wallet's address. Create the wallet ONCE (you choose the password; pick a
+strong one).
 
-RECOMMENDED \u2014 let studio drive the create step with the password OFF argv:
+RECOMMENDED \u2014 let studio drive the create step so you never type the password
+on a command line (twak requires --password on its own argv, so the value does
+reach that short-lived child process):
 
     bag wallet twak-init --password-stdin      # CI: printf %s "$PW" | bag wallet twak-init --password-stdin
     bag wallet twak-init --password-file <f>   # file must be chmod 600
@@ -136,13 +137,15 @@ secret, then run \`twak setup\` (without them \`twak wallet create\` fails with
 
     ${fields.setupCmd}
 
-then create the wallet \u2014 interactive (password on twak's own argv; twak warns,
-and it lands in your shell history \u2014 acceptable for a throwaway hot wallet):
+then create the wallet \u2014 interactive (you type the password on argv yourself;
+twak warns, and it lands in your shell history \u2014 acceptable for a throwaway hot
+wallet):
 
     ${fields.createCmd}
 
-  \u2014 or, to keep the password OFF argv (CI / scripts), pass it via the
-    environment and let \`twak setup\` create the wallet non-interactively:
+  \u2014 or, to keep the password out of your shell history (CI / scripts), pass it
+    via the environment and let \`twak setup\` create the wallet
+    non-interactively:
 
     TWAK_NONINTERACTIVE=1 TWAK_SETUP_WALLET=create TWAK_WALLET_PASSWORD=<pw> ${fields.setupCmd}
 

package/dist/{chunk-A7NAGZHR.js → chunk-VEOOFDSF.js}

@@ -5,7 +5,7 @@ import {
   runCaptureOut,
   runStream,
   whichTwak
-} from "./chunk-7RAKL4AS.js";
+} from "./chunk-RO726HJG.js";
 
 // src/cli/_deploy/deployCli.ts
 import * as fs4 from "fs";
@@ -296,6 +296,8 @@ function mb(n) {
 // src/cli/_x402SellerConfig.ts
 var DEFAULT_B402_PRICE_USD = "0.01";
 var DEFAULT_B402_TESTNET_BASE_URL = "https://qacb.sdtaop.com";
+var B402_DEVELOPER_ACCOUNT_URL = "https://developers.binance.com/en/docs/products/onchainpay-x402/basics/6.apply-developer-account";
+var B402_PAID_ONBOARDING_GUIDANCE = `Create the agent wallet first, then apply for a separate B402 merchant for that exact wallet and environment; never reuse merchant credentials across wallets. Apply: ${B402_DEVELOPER_ACCOUNT_URL}`;
 var PRICE_USD_RE = /^(?:0|[1-9]\d*)(?:\.\d+)?$/;
 var ZERO_PRICE_USD_RE = /^0(?:\.0+)?$/;
 function x402SellerPricingState(seller) {
@@ -687,7 +689,7 @@ function x402DeploySummary(root, destination, publicUrl) {
   const seller = table3(table3(cfg.payments).x402_seller);
   const pricing = x402SellerPricingState(seller);
   const credentials = b402Credentials(agentRoot);
-  const activation = "run the bnbagent-studio-selling-via-b402 skill, fill the four B402_* variables in .studio/.env.local, then redeploy.";
+  const activation = `${B402_PAID_ONBOARDING_GUIDANCE} Then run the bnbagent-studio-selling-via-b402 skill, fill the four B402_* variables in .studio/.env.local, and redeploy.`;
   const runtime = String(table3(cfg.stack).runtime ?? "agentcore");
   if (destination !== "platform" && runtime !== "agentcore") {
     return `x402 rail is FORCED DORMANT: the ${runtime} runtime has no x402 path. Deploy to AgentCore (managed platform or self-hosted) to activate the rail.`;
@@ -701,7 +703,9 @@ function x402DeploySummary(root, destination, publicUrl) {
         "x402 rail is ACTIVE in FREE mode (self-hosted AgentCore).",
         "B402 verify/settle is bypassed; no credentials, token payment, or settlement audit is used.",
         "This target has no anonymous public URL; expose /x402 with your own HTTP front.",
-        'The front reaches the agent by wrapping each request as envelope-v1 JSON \u2014 {"v":1,"method":"POST","path":"/x402","headers":{...},"body":"<base64>"} \u2014 inside a SigV4-signed (or JWT bearer) InvokeAgentRuntime call. Limits: 1 MiB request, 5 MiB response, no streaming.'
+        'The front wraps each request as envelope-v1 JSON, {"v":1,"method":"POST","path":"/x402","headers":{...},"body":"<base64>"}, inside an authenticated AgentCore invocation. The default Bag self-deploy uses Cognito OAuth over HTTPS; IAM runtimes may use SDK/SigV4. Limits: 1 MiB request, 5 MiB response, no streaming.',
+        "You may invoke AgentCore with envelope-v1 directly, but that is not a standard public x402 HTTP endpoint.",
+        "Gateway example: https://github.com/bnb-chain/bnbagent-studio/blob/main/docs/guides/self-hosted-x402-gateway.md"
       ].join("\n");
     }
     const url2 = publicUrl ?? "<available after the platform agentId is assigned>";
@@ -715,16 +719,18 @@ function x402DeploySummary(root, destination, publicUrl) {
     return `x402 rail is DORMANT. To activate: ${activation}`;
   }
   const settlement = [
-    "B402 settlement runs inside every paid request and normally adds 10\u201345 s; buyer timeout must be at least 120 s.",
-    "Settlement happens before work. If work later fails, the payment is retained and is not refunded automatically."
+    "B402 settlement can add significant latency; buyer timeout must be at least 120 s.",
+    "Settlement happens before work. If work later fails, the payment is retained and is not refunded automatically.",
+    "Compatibility note: current @bnb-chain/b402@0.1.0 makes one settle call and classifies an asynchronous pending response as outcome unknown; reconcile it and do not replay the paid request."
   ];
   if (destination !== "platform") {
     return [
       "x402 rail is ACTIVE (self-hosted AgentCore).",
       "This target has no anonymous public URL; expose /x402 with your own HTTP front.",
-      'The front reaches the agent by wrapping each request as envelope-v1 JSON \u2014 {"v":1,"method":"POST","path":"/x402","headers":{...},"body":"<base64>"} \u2014 inside a SigV4-signed (or JWT bearer) InvokeAgentRuntime call. Limits: 1 MiB request, 5 MiB response, no streaming.',
-      "B402 allowlists merchant egress IPs and this deploy has no fixed egress IP: route facilitator egress through a fixed-IP forward proxy you control and submit that IP with the merchant application (see the bnbagent-studio-selling-via-b402 reference).",
-      'See docs/guides/x402-selling.md, section "Self-hosted AgentCore access".',
+      'The front wraps each request as envelope-v1 JSON, {"v":1,"method":"POST","path":"/x402","headers":{...},"body":"<base64>"}, inside an authenticated AgentCore invocation. The default Bag self-deploy uses Cognito OAuth over HTTPS; IAM runtimes may use SDK/SigV4. Limits: 1 MiB request, 5 MiB response, no streaming.',
+      "You may invoke AgentCore with envelope-v1 directly, but the caller must unpack the inner HTTP response and the result is not a standard public x402 endpoint.",
+      "PAID also needs fixed facilitator egress. Operate a restricted B402 Relay on a fixed-IP host such as a user-managed VPS, or use AgentCore VPC mode with a private subnet, NAT Gateway, and Elastic IP.",
+      "Gateway and Relay examples: https://github.com/bnb-chain/bnbagent-studio/blob/main/docs/guides/self-hosted-x402-gateway.md",
       ...settlement
     ].join("\n");
   }
@@ -732,6 +738,8 @@ function x402DeploySummary(root, destination, publicUrl) {
   return [
     "x402 rail is ACTIVE.",
     `Anonymous paid URL: ${url}`,
+    "The managed platform supplies the x402 HTTP Gateway and the fixed-egress B402 Relay; no user-managed gateway, proxy, or VPC is required.",
+    "Payment policy and RSA signing remain inside the AgentCore seller. The B402 Relay only forwards the signed request to its fixed facilitator upstream.",
     ...settlement
   ].join("\n");
 }
@@ -996,28 +1004,76 @@ async function ensureRunnable(environment = process.env) {
   }
   return true;
 }
+var MODULE_MISSING_MARKER = "Cannot find module";
+var BUNX_TREE_HINT = [
+  `error: ${DEPLOY_CLI_PACKAGE} could not load its own dependencies \u2014 its `,
+  "bunx install directory is incomplete. Remove it and retry:\n",
+  '  rm -rf "${TMPDIR:-/tmp}"/bunx-*-@bnbagent\n',
+  "If it persists, clear Bun's package cache (`bun pm cache rm`), or point ",
+  "BNBAGENT_DEPLOY_COMMAND at a local checkout."
+].join("");
+function bunxInstallDir(environment = process.env) {
+  if (deployCommand(environment)[0] !== "bunx") {
+    return null;
+  }
+  const uid = typeof process.getuid === "function" ? process.getuid() : null;
+  return uid === null ? null : path5.join(os.tmpdir(), `bunx-${uid}-${DEPLOY_CLI_PACKAGE}`);
+}
+async function bunxTreeIsIncomplete() {
+  const [bin, ...prefix] = deployCommand();
+  const probe = await runCapture(bin, [...prefix, "--help"], {
+    timeoutMs: 12e4
+  });
+  return probe.code !== 0 && `${probe.stderr}
+${probe.stdout}`.includes(MODULE_MISSING_MARKER);
+}
+async function withBunxSelfHeal(hasFailed, attempt) {
+  const first = await attempt();
+  if (!hasFailed(first)) {
+    return first;
+  }
+  const dir = bunxInstallDir();
+  if (dir === null || !await bunxTreeIsIncomplete()) {
+    return first;
+  }
+  if (!fs4.existsSync(dir)) {
+    printErr(BUNX_TREE_HINT);
+    return first;
+  }
+  printErr(
+    `note: ${DEPLOY_CLI_PACKAGE} failed to load its dependencies; clearing its incomplete bunx install and retrying once (${dir}).`
+  );
+  fs4.rmSync(dir, { recursive: true, force: true });
+  const second = await attempt();
+  if (hasFailed(second)) {
+    printErr(BUNX_TREE_HINT);
+  }
+  return second;
+}
 async function runDeployCliStream(argv, opts = {}) {
   if (!await ensureRunnable()) {
     return 127;
   }
   const [bin, ...prefix] = deployCommand();
-  return runStream(bin, [...prefix, ...argv], {
-    cwd: opts.cwd,
-    env: opts.env ? { ...process.env, ...opts.env } : void 0
-  });
+  return withBunxSelfHeal(
+    (code) => code !== 0,
+    () => runStream(bin, [...prefix, ...argv], {
+      cwd: opts.cwd,
+      env: opts.env ? { ...process.env, ...opts.env } : void 0
+    })
+  );
 }
 async function runDeployCliJson(argv, opts = {}) {
   if (!await ensureRunnable()) {
     return { code: 127, data: {} };
   }
   const [bin, ...prefix] = deployCommand();
-  const { code, stdout } = await runCaptureOut(
-    bin,
-    [...prefix, ...argv, "--json"],
-    {
+  const { code, stdout } = await withBunxSelfHeal(
+    (result) => result.code !== 0,
+    () => runCaptureOut(bin, [...prefix, ...argv, "--json"], {
       cwd: opts.cwd,
       env: opts.env ? { ...process.env, ...opts.env } : void 0
-    }
+    })
   );
   let data = {};
   const trimmed = stdout.trim();
@@ -1093,6 +1149,8 @@ export {
   recipeModeOf,
   DEFAULT_B402_PRICE_USD,
   DEFAULT_B402_TESTNET_BASE_URL,
+  B402_DEVELOPER_ACCOUNT_URL,
+  B402_PAID_ONBOARDING_GUIDANCE,
   x402SellerPricingState,
   normalizeB402PriceUsd,
   isB402TestnetBaseUrl,
@@ -1124,6 +1182,7 @@ export {
   buildDeploySpec,
   renderSecretEnvFile,
   withDeployFiles,
+  bunxInstallDir,
   runDeployCliStream,
   runDeployCliJson,
   trialFromDeployCliJson,

package/dist/{deployCli-264UE6KB.js → deployCli-EEK75T67.js}

@@ -8,6 +8,7 @@ import {
   bnbEnv,
   bnbPlatformApiUrl,
   buildDeploySpec,
+  bunxInstallDir,
   deployCommand,
   deployEndpointValue,
   providerPassthrough,
@@ -17,8 +18,8 @@ import {
   runPlatformAccountCommand,
   trialFromDeployCliJson,
   withDeployFiles
-} from "./chunk-A7NAGZHR.js";
-import "./chunk-7RAKL4AS.js";
+} from "./chunk-VEOOFDSF.js";
+import "./chunk-RO726HJG.js";
 export {
   BNB_PLATFORM_API_URL,
   BNB_PLATFORM_API_URL_ENV,
@@ -28,6 +29,7 @@ export {
   bnbEnv,
   bnbPlatformApiUrl,
   buildDeploySpec,
+  bunxInstallDir,
   deployCommand,
   deployEndpointValue,
   providerPassthrough,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bnbagent/studio-cli",
-  "version": "0.0.6-alpha.4",
+  "version": "0.0.6-alpha.6",
   "description": "The `bag` CLI: scaffold, run, deploy, and monetize a single seller agent on BNB Chain (ERC-8004 identity, ERC-8183 commerce, x402 payments).",
   "license": "Apache-2.0",
   "repository": {
@@ -19,13 +19,14 @@
     "dist",
     "skills",
     "recipes",
+    "README.md",
     "DISCLAIMER.md"
   ],
   "bin": {
     "bag": "./dist/bag.js"
   },
   "dependencies": {
-    "@bnbagent/sdk": "0.5.0-alpha.2",
+    "@bnbagent/sdk": "0.5.0-alpha.3",
     "ai": "^7.0.29",
     "archiver": "^8.0.0",
     "commander": "^15.0.0",
@@ -37,7 +38,7 @@
     "tar": "^7.4.0",
     "viem": "^2.54.0",
     "yaml": "^2.9.0",
-    "@bnbagent/studio-runtime": "0.0.6-alpha.4"
+    "@bnbagent/studio-runtime": "0.0.6-alpha.6"
   },
   "devDependencies": {
     "@a2a-js/sdk": "^0.3.14",

package/recipes/agent/recipe.toml

@@ -11,7 +11,7 @@ node = [
     # neutral. The agent project's serving deps (@a2a-js/sdk / MCP SDK / ai)
     # come from the runtimes/<R>/ recipe selected at `bag init` time.
     "@bnbagent/studio-runtime",
-    "@bnbagent/sdk@0.5.0-alpha.1",
+    "@bnbagent/sdk@0.5.0-alpha.3",
 ]
 
 [env]

package/recipes/runtimes/agentcore/recipe.toml

@@ -32,7 +32,7 @@ node = [
     # BNBAGENT_RUNTIME_SECRET_ID is set (default secretsmanager mode + platform).
     "@aws-sdk/client-secrets-manager@^3.600.0",
     "@bnbagent/studio-runtime",
-    "@bnbagent/sdk@0.5.0-alpha.1",
+    "@bnbagent/sdk@0.5.0-alpha.3",
     # The LLM work hook (generateText + tools) and the model factory.
     "ai@^7.0.29",
     # Tool input schemas (AI SDK tools + MCP registerTool).

package/recipes/runtimes/azure-foundry/recipe.toml

@@ -19,7 +19,7 @@ status = "v1"
 [dependencies]
 node = [
     "@bnbagent/studio-runtime",
-    "@bnbagent/sdk@0.5.0-alpha.1",
+    "@bnbagent/sdk@0.5.0-alpha.3",
     # The LLM work hook (generateText + tools) and the model factory; the
     # Foundry host's OpenAI-compatible client comes from @ai-sdk/openai
     # (built from the BNBAGENT_LLM_* env the deploy injects).

package/recipes/x402-buyer/recipe.toml

@@ -6,7 +6,7 @@ status = "v0.0.x"
 [dependencies]
 node = [
     "@bnbagent/studio-runtime",
-    "@bnbagent/sdk@0.5.0-alpha.1",
+    "@bnbagent/sdk@0.5.0-alpha.3",
     "ai@^7.0.29",   # AI SDK `tool` wrappers around the buyer functions
     "zod@^3.25.0",  # tool input schemas
 ]

package/skills/references/bnbagent-studio-buying-via-8183.md

@@ -59,14 +59,22 @@ flow now auto-adds dispute_window).
 - For a paid job, the wallet has ≥ 0.05 tBNB (gas) and enough U for the budget
   plus slack. On BSC testnet the
   ERC-8183 kernel writes (`createJob` / `fund` deposit / `settle` …) are
-  gas-sponsored via the SDK's MegaFuel paymaster, so you spend far less tBNB than
+  gas-sponsored via the SDK's MegaFuel paymaster **when they target the
+  canonical contracts**, so you spend far less tBNB than
   that — but **not zero**: `fund` sends an ERC-20 `approve` (a token call, not
   sponsored) when the token allowance is too low — typically just the first fund,
   since studio approves a floored cap that later jobs reuse. Keep a little tBNB for
-  it. (Mainnet is never sponsored.) For a FREE job, use `--budget-u 0`: no U
-  balance, ERC-20 approval, or token escrow is needed, but the ERC-8183 writes
-  still need the selected gas/paymaster path and a zero-price-compatible
-  commerce/router/policy stack.
+  it. (Mainnet is never sponsored.) Sponsorship is granted per target contract
+  by the paymaster policy: a custom/QA stack selected via the
+  `ERC8183_*_ADDRESS` overrides is normally **not** covered, so every write
+  self-pays gas (the SDK logs `… is not sponsorable on this network;
+  self-paying gas` and falls back automatically) — keep tBNB for the whole
+  flow, or set `BNBAGENT_USE_PAYMASTER=0` to skip the per-transaction
+  sponsorship probe and self-pay directly. For a FREE job, use `--budget-u 0`:
+  no U balance, ERC-20 approval, or token escrow is needed, but the ERC-8183
+  writes still need the selected gas/paymaster path and a zero-price-compatible
+  commerce/router/policy stack — today that means a custom stack, so expect the
+  writes to self-pay gas as above.
 - You know the **provider's wallet address** (the seller agent's address)
 - The seller is **reachable** (its A2A agent is deployed somewhere); discoverable
   via the provider's `bag erc8004 resolve <agent_id>` endpoint URI

package/skills/references/bnbagent-studio-extending-signing.md

@@ -222,6 +222,9 @@ When deeper protocol details are needed:
 
 - Never bypass the policy with `_DANGEROUS_*` calls in agent code. They exist for tests and incident response.
 - Never instruct the user to widen caps / allowlists "to make it work" without explaining the security tradeoff.
-- Never persist the wallet password or signed payloads anywhere outside the keystore.
+- Persist the wallet password only in the generated, gitignored, owner-only
+  `.studio/.env.local` for local use or a managed secret channel for deploys;
+  never put it in argv, application code, logs, or chat.
+- Never persist signed payloads outside the keystore.
 - Always run `bag wallet policy show` after editing `[wallet.signing]` to confirm the change took effect.
 - Always restart the process — SigningPolicy is captured at wallet construction.

package/skills/references/bnbagent-studio-operating.md

@@ -64,7 +64,8 @@ For seller job-lifecycle decisions (settle / submit / dispute defense), read
 ```bash
 # Configure secrets (idempotent — does NOT duplicate existing keys).
 # These write into .studio/.env.local (the Agent's secrets):
-bag env set WALLET_PASSWORD <your password>
+# Edit .studio/.env.local and set WALLET_PASSWORD there; bag auto-loads it.
+# Never put the wallet password on a command line.
 bag env set OPENROUTER_API_KEY <your key>   # or whichever provider app/agent/studio.toml [llm] uses
 
 # From the workspace root — `bag dev` serves the selected protocol:
@@ -129,7 +130,7 @@ Returns a rich table of checks across the `app/agent/` sub-project:
 | app/agent/studio.toml parseable | Missing or syntax error | `bag init` to regenerate, or hand-fix TOML |
 | Agent entrypoint imports | Protocol entrypoint raises on load (`src/main.ts` for A2A, `src/mcpMain.ts` for MCP) | Fix the error printed by the check (often a missing env var or a broken import) |
 | wallet keystore | No `<workspace>/.studio/wallets/*.json` | `bag wallet new` (writes to the workspace root keystore dir) |
-| WALLET_PASSWORD env | Not in `.studio/.env.local` / not exported | `bag env set WALLET_PASSWORD ...` (targets .studio/.env.local) |
+| WALLET_PASSWORD env | Not in `.studio/.env.local` / not exported | Edit the owner-only `.studio/.env.local`; never pass the password on argv |
 | LLM provider key | API key env not set | Edit `.studio/.env.local` or export the right `*_API_KEY` |
 | Network reachable | RPC down/wrong URL | Override via `STUDIO_BSC_TESTNET_RPC=...` (testnet) / `STUDIO_BSC_RPC=...` (mainnet) — per-network env vars read by `@bnbagent/studio-runtime/networks` `getNetwork` |
 | Wallet tBNB balance | 0 tBNB | Faucet: testnet.bnbchain.org/faucet-smart |

package/skills/references/bnbagent-studio-scaffolding-agent.md

@@ -309,10 +309,10 @@ Step 6b when `storage=ipfs`):
    - **twak** (fully supported — opt in with `--wallet-kind twak`): `bag init` writes `[wallet].twak_home =
      "../../.studio/twak"` — a **project-dedicated** wallet isolated from your
      main `~/.twak`, so a deploy never pushes the main wallet's key material to
-     Secrets Manager. The user creates it ONCE themselves — the twak CLI forces
-     the password onto argv (upstream S-8), so studio never runs it — in their
-     own terminal:
-     own terminal — the 3-step `twak setup` wizard:
+     Secrets Manager. Setting it up is a ONE-TIME job: the user runs the
+     interactive 3-step `twak setup` wizard themselves in their own terminal,
+     then `bag wallet twak-init` creates the wallet (so the password never goes
+     into a command line). Start with the wizard:
      ```bash
      HOME=<workspace>/.studio/twak twak setup
      ```
@@ -332,17 +332,21 @@ Step 6b when `storage=ipfs`):
        WalletConnect` = your main wallet.)
 
      ```bash
-     HOME=<workspace>/.studio/twak twak wallet create --password <StrongPw> --no-keychain  # UPPER + lower + digit
+     cd app/agent && bag wallet twak-init                       # hidden prompt
+     printf %s "$PW" | bag wallet twak-init --password-stdin     # CI / scripts
      ```
      Use UPPER + lower + digit; put that same password in `.studio/.env.local`
-     as `TWAK_WALLET_PASSWORD`. `--no-keychain` keeps the password out of the OS
-     keychain (no macOS prompt); studio unlocks via the env. (If you omit it and a
-     macOS prompt *loops*, do NOT "Reset Default Keychain" — `pkill -9 -f twak`,
-     then re-run with `--no-keychain`.) Full detail: the
+     as `TWAK_WALLET_PASSWORD`. `twak-init` passes `--no-keychain`, which keeps
+     the password out of the OS keychain (no macOS prompt); studio unlocks via
+     the env. (If a macOS prompt *loops* on a manual `twak` run, do NOT "Reset
+     Default Keychain" — `pkill -9 -f twak`, then re-run with `--no-keychain`.)
+     It also adopts the address into `studio.toml` and echoes it — confirm it's
+     the intended wallet before funding/deploy, and there is no separate
+     `bag wallet new` step. The manual equivalent is
+     `HOME=<workspace>/.studio/twak twak wallet create --password <StrongPw> --no-keychain`
+     followed by `bag wallet new`. Full detail: the
      `bnbagent-studio-using-twak-wallet.md` reference (in the router skill's `references/` directory).
-     Then YOU run `bag wallet new`, which **adopts** the address into
-     `studio.toml` (and echoes it — confirm it's the intended wallet before
-     funding/deploy). To reuse an EXISTING wallet across agents, scaffold with
+     To reuse an EXISTING wallet across agents, scaffold with
      `bag init --twak-home <path-to-its-home>` instead. Reusing your main
      `~/.twak` is opt-in only (`--twak-home ~`) and discouraged. Full detail:
      the `bnbagent-studio-using-twak-wallet.md` reference (in the router skill's `references/` directory).