@bnbagent/studio-cli 0.0.7 → 0.0.8

package/dist/bag.js

@@ -6439,7 +6439,11 @@ import {
 } from "@bnbagent/sdk/wallets";
 import { auditedOp as auditedOp2 } from "@bnbagent/studio-runtime/audit";
 import { loadStudioToml as loadStudioToml9 } from "@bnbagent/studio-runtime/config";
-import { getNetwork as getNetwork5, toRaw as toRaw2 } from "@bnbagent/studio-runtime/networks";
+import {
+  BSC_TESTNET_FAUCET_URLS,
+  getNetwork as getNetwork5,
+  toRaw as toRaw2
+} from "@bnbagent/studio-runtime/networks";
 import { writePrivate } from "@bnbagent/studio-runtime/secretWrite";
 import {
   ALTANA_NETWORK_BY_STUDIO,
@@ -6495,6 +6499,23 @@ function loadContext(projectRoot) {
     address
   };
 }
+async function requireAltanaAdminGas(ctx) {
+  let balance;
+  try {
+    balance = await readNativeBalanceRaw(ctx.address, ctx.networkName);
+  } catch (error) {
+    printErr(
+      `warning: could not check Altana admin gas balance on ${ctx.networkName} (${error instanceof Error ? error.message : String(error)}); continuing and letting Altana return the authoritative result.`
+    );
+    return;
+  }
+  if (balance !== 0n) return;
+  const symbol = ctx.networkName === "bsc-testnet" ? "tBNB" : "BNB";
+  const funding = ctx.networkName === "bsc-testnet" ? ` Fund it and retry. Testnet faucets: ${BSC_TESTNET_FAUCET_URLS.join(", ")}` : " Fund it with BNB and retry.";
+  throw new Error(
+    `Altana admin wallet ${ctx.address} has 0 ${symbol} on ${ctx.networkName} and cannot pay gas for session administration.${funding}`
+  );
+}
 function requirePassword() {
   const password = process.env[PASSWORD_ENV];
   if (!password) {
@@ -6646,6 +6667,7 @@ async function cmdSessionGrant(opts) {
         projectRoot
       },
       async () => {
+        await requireAltanaAdminGas(ctx);
         await admin2.approveQuoteSignatureChecker(
           restored,
           deployedAddresses(ctx.network.chainId).commerceProxy
@@ -6690,6 +6712,7 @@ async function cmdSessionGrant(opts) {
       projectRoot
     },
     async (h) => {
+      await requireAltanaAdminGas(ctx);
       if (existing !== null) {
         printErr(`Revoking existing Altana session ${existing.publicKey}\u2026`);
         await admin.revokeSession(existing.publicKey);
@@ -6779,6 +6802,7 @@ async function cmdSessionRevoke(opts) {
       projectRoot
     },
     async () => {
+      await requireAltanaAdminGas(ctx);
       await admin.revokeSession(envelope.publicKey);
     }
   );
@@ -6818,6 +6842,7 @@ async function cmdSessionX402Setup(opts) {
       projectRoot
     },
     async () => {
+      await requireAltanaAdminGas(ctx);
       await admin.approveX402SignatureChecker(restored);
       try {
         await admin.setPermit2Allowance(
@@ -8013,6 +8038,12 @@ async function cmdInit(nameArg, opts) {
     printErr(`error: ${target} already exists. Use --force to overwrite.`);
     return 2;
   }
+  if (opts.destination === "platform" && opts.network === "bsc-mainnet") {
+    printErr(
+      "error: --destination platform cannot be combined with --network bsc-mainnet. The managed platform trial is testnet-only; use --destination self for mainnet, or select bsc-testnet."
+    );
+    return 2;
+  }
   let runtime = opts.runtime;
   let network = opts.network;
   let destination = opts.destination;
@@ -9205,10 +9236,10 @@ function readWalletAddress(studioToml) {
 async function printFaucetHint(network, address) {
   printOut("");
   if (network === "bsc-testnet") {
-    const { BSC_TESTNET_FAUCET_URLS: BSC_TESTNET_FAUCET_URLS4 } = await import("@bnbagent/studio-runtime/networks");
+    const { BSC_TESTNET_FAUCET_URLS: BSC_TESTNET_FAUCET_URLS5 } = await import("@bnbagent/studio-runtime/networks");
     printOut(`Your testnet wallet address: ${address}`);
     printOut("Fund it (free) from these faucets \u2014 paste the address above:");
-    for (const url of BSC_TESTNET_FAUCET_URLS4) {
+    for (const url of BSC_TESTNET_FAUCET_URLS5) {
       printOut(`  \xB7 ${url}`);
     }
     printOut("(Faucets are needed only for paid models / on-chain settle.");
@@ -10200,6 +10231,10 @@ function isDir4(p) {
 }
 
 // src/cli/_runtimeEnvKeys.ts
+var PAYMASTER_URL_ENV_KEYS = [
+  "BNBAGENT_PAYMASTER_URL_BSC_MAINNET",
+  "BNBAGENT_PAYMASTER_URL_BSC_TESTNET"
+];
 function tableOf8(cfg, key) {
   const v = cfg[key];
   return v !== null && typeof v === "object" && !Array.isArray(v) ? v : {};
@@ -10236,6 +10271,9 @@ function runtimeEnvKeysCore(cfg, resolvable) {
   if (resolvable("RPC_URL")) {
     keys.push("RPC_URL");
   }
+  for (const key of PAYMASTER_URL_ENV_KEYS) {
+    if (resolvable(key)) keys.push(key);
+  }
   if (commerceRails(cfg).erc8183) {
     for (const key of ERC8183_ADDRESS_OVERRIDE_KEYS) {
       if (resolvable(key)) keys.push(key);
@@ -11408,6 +11446,29 @@ function erc8183RailChecks(cfg, env = process.env) {
   }
   return out;
 }
+function dockerUsesNode22OrNewer(source) {
+  for (const line of source.split(/\r?\n/)) {
+    const from = /^\s*FROM\s+(.+)$/i.exec(line);
+    if (from === null) continue;
+    const tokens = from[1].trim().split(/\s+/);
+    if (tokens[0]?.startsWith("--platform=")) {
+      tokens.shift();
+    } else if (tokens[0] === "--platform") {
+      tokens.splice(0, 2);
+    }
+    const image = tokens[0];
+    if (!image || image.includes("${")) continue;
+    const withoutDigest = image.split("@", 1)[0];
+    const lastSegment = withoutDigest.slice(withoutDigest.lastIndexOf("/") + 1);
+    const colon = lastSegment.lastIndexOf(":");
+    if (colon <= 0 || lastSegment.slice(0, colon) !== "node") continue;
+    const major = /^(\d+)(?:[.-]|$)/.exec(lastSegment.slice(colon + 1));
+    if (major !== null && Number.parseInt(major[1], 10) >= 22) {
+      return true;
+    }
+  }
+  return false;
+}
 function x402SellerRailChecks(agentRoot2, cfg, target) {
   const payments = tableOf2(cfg, "payments");
   const rawSeller = payments.x402_seller;
@@ -11524,11 +11585,11 @@ function x402SellerRailChecks(agentRoot2, cfg, target) {
   const dockerfile = path25.join(agentRoot2, "Dockerfile");
   if (rails.x402 && isFile11(dockerfile)) {
     const source = fs26.readFileSync(dockerfile, "utf8");
-    if (!/^\s*FROM\s+node:22(?:[.-]|\s|$)/im.test(source)) {
+    if (!dockerUsesNode22OrNewer(source)) {
       out.push({
         level: Level.WARNING,
         name: "x402_node_version",
-        message: "The x402/B402 seller requires Node 22, but this container Dockerfile does not use a node:22 base image.",
+        message: "The x402/B402 seller requires Node >=22, but this container Dockerfile has no exact node image with a numeric major >=22.",
         details: { dockerfile }
       });
     }
@@ -12974,7 +13035,7 @@ import {
   findSubProjectRoot as findSubProjectRoot13,
   loadStudioToml as loadStudioToml17
 } from "@bnbagent/studio-runtime/config";
-import { BSC_TESTNET_FAUCET_URLS } from "@bnbagent/studio-runtime/networks";
+import { BSC_TESTNET_FAUCET_URLS as BSC_TESTNET_FAUCET_URLS2 } from "@bnbagent/studio-runtime/networks";
 
 // src/cli/_deploy/checks/warning.ts
 import * as crypto4 from "crypto";
@@ -13447,8 +13508,8 @@ var checkPlatformFundingHint = async (_root, _target) => [
   {
     level: Level.INFO,
     name: "platform_funding_hint",
-    message: `testnet trial \u2014 keep a little tBNB for gas and testnet $U for commerce. Faucets: ${BSC_TESTNET_FAUCET_URLS.join(" \xB7 ")}`,
-    details: { faucets: [...BSC_TESTNET_FAUCET_URLS] }
+    message: `testnet trial \u2014 keep a little tBNB for gas and testnet $U for commerce. Faucets: ${BSC_TESTNET_FAUCET_URLS2.join(" \xB7 ")}`,
+    details: { faucets: [...BSC_TESTNET_FAUCET_URLS2] }
   }
 ];
 var criticalChecks = [
@@ -14428,7 +14489,7 @@ function walletWarning(root, secrets) {
     const who2 = typeof address === "string" && address ? ` (wallet ${address})` : "";
     warn(
       `
-!!! session exposure (platform trial) !!!
+[expected \xB7 bounded Altana session]
   This project's bounded Altana session${who2} will be transmitted to the BNB Chain operator's Secrets Manager so the trial runtime can sign on testnet. The session is budget-limited, expiring, and revocable \u2014 the admin keystore and WALLET_PASSWORD never ship.
   If the current budget or expiry is wider than you want an operator-held key to carry, stop and grant a tighter one first:
       bag wallet session grant --force --budget-u <small> --expiry-days <short>
@@ -15070,6 +15131,15 @@ function agentNetworkDefault(root) {
   }
   return String(tableOf13(cfg, "network").default ?? "").toLowerCase();
 }
+function rejectPlatformMainnet(root) {
+  if (agentNetworkDefault(root) !== "bsc-mainnet") {
+    return null;
+  }
+  printErr(
+    "error: the BNB Chain managed platform is testnet-only, but [network].default is bsc-mainnet. Deploy to your own provider or change the project to bsc-testnet. --skip-prepare, --force, and --yes cannot bypass this boundary."
+  );
+  return 1;
+}
 function agentDeployDestination(root) {
   const cfg = loadAgentCfg2(root);
   if (cfg === null) {
@@ -15483,6 +15553,10 @@ async function cmdDeploy(opts, deployArgs) {
   const rc = applyProjectRoot(opts.projectRoot);
   if (rc !== null) return rc;
   const root = resolveProjectRoot2(opts.projectRoot);
+  if (opts.provider === "bnb") {
+    const networkGate = rejectPlatformMainnet(root);
+    if (networkGate !== null) return networkGate;
+  }
   const deployments = discoverRecordedDeployments(root);
   const unavailable = unavailableProvidersForProject(root);
   const interactive = stdinIsTty();
@@ -15516,6 +15590,10 @@ async function cmdDeploy(opts, deployArgs) {
     printErr("cancelled: no deployment was started.");
     return selection.exitCode;
   }
+  if (selection.provider === "bnb") {
+    const networkGate = rejectPlatformMainnet(root);
+    if (networkGate !== null) return networkGate;
+  }
   if (!interactive && !opts.yes) {
     printErr(
       `error: non-interactive ${selection.operation} on ${selection.provider} requires --yes`
@@ -15587,6 +15665,10 @@ async function cmdAgent(opts, agentcoreArgs) {
   const root = resolveProjectRoot2(opts.projectRoot);
   const destination = opts.provider ? opts.provider === "bnb" ? "platform" : "self" : opts.to ?? opts.destination ?? agentDeployDestination(root);
   const packagingDestination = opts.to ?? opts.destination ?? agentDeployDestination(root);
+  if (destination === "platform") {
+    const networkGate = rejectPlatformMainnet(root);
+    if (networkGate !== null) return networkGate;
+  }
   const driftAgentRoot = findSubProjectRoot16("agent", root) ?? root;
   const driftKind = deployWalletKind(driftAgentRoot);
   rc = checkPackagingDrift(
@@ -16565,7 +16647,7 @@ import { pieverseKeyHash as pieverseKeyHash4 } from "@bnbagent/studio-runtime/ll
 import {
   BSC_MAINNET_MIN_BNB,
   BSC_MAINNET_MIN_U,
-  BSC_TESTNET_FAUCET_URLS as BSC_TESTNET_FAUCET_URLS2,
+  BSC_TESTNET_FAUCET_URLS as BSC_TESTNET_FAUCET_URLS3,
   BSC_TESTNET_MIN_BNB,
   BSC_TESTNET_MIN_U,
   ERC8183_SUBMIT_GAS_RESERVE_BNB,
@@ -17555,7 +17637,7 @@ async function checkBalances(projectRoot, data, networkOverride) {
     const isMainnet = name === "bsc-mainnet";
     const minBnb = isTestnet ? BSC_TESTNET_MIN_BNB : isMainnet ? BSC_MAINNET_MIN_BNB : 0;
     const minBnbWei = BigInt(Math.round(minBnb * 1e6)) * 10n ** 12n;
-    const faucetHint = isTestnet ? ` \u2014 faucets: ${BSC_TESTNET_FAUCET_URLS2.join(", ")}` : "";
+    const faucetHint = isTestnet ? ` \u2014 faucets: ${BSC_TESTNET_FAUCET_URLS3.join(", ")}` : "";
     const bnbRaw = await readNativeBalanceRaw(address, name);
     const reserve = ERC8183_SUBMIT_GAS_RESERVE_BNB;
     const reserveHint = ` (each on-chain action reserves \u2248 ${reserve} BNB worst-case)`;
@@ -17963,7 +18045,7 @@ import {
   updateServiceEndpoint as updateServiceEndpoint2
 } from "@bnbagent/studio-runtime/erc8004";
 import {
-  BSC_TESTNET_FAUCET_URLS as BSC_TESTNET_FAUCET_URLS3,
+  BSC_TESTNET_FAUCET_URLS as BSC_TESTNET_FAUCET_URLS4,
   fromRaw as fromRaw4,
   getNetwork as getNetwork10
 } from "@bnbagent/studio-runtime/networks";
@@ -18127,7 +18209,7 @@ async function precheckRegisterGas(wallet, network) {
   if (balance >= REGISTER_MIN_BNB) {
     return null;
   }
-  const faucet = BSC_TESTNET_FAUCET_URLS3[0];
+  const faucet = BSC_TESTNET_FAUCET_URLS4[0];
   return `ERC-8004 register needs gas to broadcast, but ${wallet.address} holds only ${balance} BNB on ${network} (need ~${REGISTER_MIN_BNB}). Fund a little tBNB and retry. Faucet: ${faucet}`;
 }
 function syncAgentRegistry(agentId, op) {
@@ -20760,7 +20842,7 @@ function buildProgram() {
   return program;
 }
 function cliVersion() {
-  return "0.0.6";
+  return "0.0.8";
 }
 
 // src/cli/updateCheck.ts

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bnbagent/studio-cli",
-  "version": "0.0.7",
+  "version": "0.0.8",
   "description": "Skills-first toolkit and bag CLI for BNB Chain seller agents: ERC-8004 identity, ERC-8183 escrowed commerce, and x402 payments.",
   "keywords": [
     "bnb-chain",
@@ -51,7 +51,7 @@
   },
   "dependencies": {
     "@bnbagent/sdk": "0.5.0",
-    "@bnbagent/studio-runtime": "0.0.7",
+    "@bnbagent/studio-runtime": "0.0.8",
     "ai": "^7.0.29",
     "archiver": "^8.0.0",
     "commander": "^15.0.0",