@bnbagent/studio-cli 0.0.9 → 0.0.11-alpha.1

package/dist/bag.js

@@ -6,17 +6,21 @@ import {
   CliExit,
   DEFAULT_B402_PRICE_USD,
   DEFAULT_B402_TESTNET_BASE_URL,
+  LEGACY_ENTRY_STEMS,
+  X402_CAPABLE_RUNTIMES,
   act,
   agentcoreFlavor,
   b402Credentials,
   bnbEnv,
   bnbPlatformApiUrl,
+  checkBunx,
   checkDocker,
   checkTwak,
   commerceRails,
   deployChecks,
   deployEndpointValue,
   devPortOf,
+  dryRunBundle,
   entryStemOf,
   getEnvVar,
   hasA2aFace,
@@ -44,7 +48,7 @@ import {
   x402SellerIsFree,
   x402SellerPricingState,
   x402SellerUsesB402
-} from "./chunk-YFEM4564.js";
+} from "./chunk-TTPOH453.js";
 import {
   TWAK_CLI_MIN_VERSION,
   TWAK_CLI_VERSION,
@@ -222,7 +226,7 @@ import {
 var CAMPAIGN_DOC_URL = "https://www.bnbchain.org/en/blog/bnb-agent-studio-is-live-on-bnb-chain-ai-agents-from-one-prompt";
 var CAMPAIGN_CHECK_TIMEOUT_MS = 6e3;
 async function fetchCampaignActive() {
-  const { bnbPlatformApiUrl: bnbPlatformApiUrl2 } = await import("./deployCli-NJFCWBSF.js");
+  const { bnbPlatformApiUrl: bnbPlatformApiUrl2 } = await import("./deployCli-K55GXDVO.js");
   const controller = new AbortController();
   const timer = setTimeout(() => controller.abort(), CAMPAIGN_CHECK_TIMEOUT_MS);
   try {
@@ -437,23 +441,88 @@ function findAgentRoot(start) {
 // src/cli/program.ts
 import { Command } from "commander";
 
-// src/cli/agents.ts
+// src/cli/_packageMetadata.ts
 import * as fs3 from "fs";
-import * as os from "os";
 import * as path2 from "path";
+import { fileURLToPath } from "url";
+function packageRoot() {
+  let dir = path2.dirname(fileURLToPath(import.meta.url));
+  for (; ; ) {
+    const packageJson = path2.join(dir, "package.json");
+    if (fs3.existsSync(packageJson)) return dir;
+    const parent = path2.dirname(dir);
+    if (parent === dir) {
+      throw new Error("cannot locate the studio-cli package root");
+    }
+    dir = parent;
+  }
+}
+function studioCliVersion() {
+  if ("0.0.11-alpha.1") {
+    return "0.0.11-alpha.1";
+  }
+  const file = path2.join(packageRoot(), "package.json");
+  const pkg = JSON.parse(fs3.readFileSync(file, "utf-8"));
+  const value = String(pkg.version ?? "");
+  if (!/^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?$/u.test(value)) {
+    throw new Error(
+      `studio-cli package.json must contain a valid version in ${file}`
+    );
+  }
+  return value;
+}
+function pnpmVersion() {
+  if ("10.24.0") {
+    return "10.24.0";
+  }
+  const file = path2.join(packageRoot(), "package.json");
+  const pkg = JSON.parse(fs3.readFileSync(file, "utf-8"));
+  const value = String(pkg.packageManager ?? "");
+  const match = /^pnpm@(.+)$/u.exec(value);
+  if (!match?.[1]) {
+    throw new Error(
+      `studio-cli packageManager must pin pnpm (expected "pnpm@<version>" in ${file})`
+    );
+  }
+  return match[1];
+}
+
+// src/cli/agents.ts
+import * as fs4 from "fs";
+import * as os from "os";
+import * as path3 from "path";
 import { parse, stringify } from "smol-toml";
 
 // src/cli/utils/prompt.ts
 import * as readline from "readline/promises";
+var PromptCancelled = class extends Error {
+  constructor() {
+    super("prompt cancelled");
+    this.name = "PromptCancelled";
+  }
+};
+async function ask(rl, question) {
+  try {
+    return await Promise.race([
+      rl.question(question),
+      new Promise((_, reject) => {
+        rl.once("SIGINT", () => reject(new PromptCancelled()));
+      })
+    ]);
+  } catch (exc) {
+    if (exc instanceof PromptCancelled) {
+      throw exc;
+    }
+    return "";
+  }
+}
 async function promptUser(question) {
   const rl = readline.createInterface({
     input: process.stdin,
     output: process.stdout
   });
   try {
-    return await rl.question(question);
-  } catch {
-    return "";
+    return await ask(rl, question);
   } finally {
     rl.close();
   }
@@ -464,9 +533,7 @@ async function promptUserStderr(question) {
     output: process.stderr
   });
   try {
-    return await rl.question(question);
-  } catch {
-    return "";
+    return await ask(rl, question);
   } finally {
     rl.close();
   }
@@ -480,9 +547,7 @@ async function promptHidden(question) {
     terminal: false
   });
   try {
-    return await rl.question("");
-  } catch {
-    return "";
+    return await ask(rl, "");
   } finally {
     rl.close();
     process.stderr.write("\n");
@@ -506,18 +571,18 @@ function stdinIsTty() {
 // src/cli/agents.ts
 var SCHEMA_VERSION = "1";
 function registryPath() {
-  return path2.join(os.homedir(), ".bnbagent-studio", "projects.toml");
+  return path3.join(os.homedir(), ".bnbagent-studio", "projects.toml");
 }
 var RegistryCorruptError = class extends Error {
 };
 function loadDoc() {
   const file = registryPath();
-  if (!fs3.existsSync(file)) {
+  if (!fs4.existsSync(file)) {
     return { schema_version: SCHEMA_VERSION, projects: [] };
   }
   let text2;
   try {
-    text2 = fs3.readFileSync(file, "utf-8");
+    text2 = fs4.readFileSync(file, "utf-8");
   } catch (exc) {
     throw new RegistryCorruptError(`cannot read ${file}: ${exc}`);
   }
@@ -538,7 +603,7 @@ function loadDoc() {
 }
 function saveDoc(doc) {
   const file = registryPath();
-  fs3.mkdirSync(path2.dirname(file), { recursive: true });
+  fs4.mkdirSync(path3.dirname(file), { recursive: true });
   const projects = doc.projects.map((entry) => {
     const out = {};
     for (const [k, v] of Object.entries(entry)) {
@@ -548,7 +613,7 @@ function saveDoc(doc) {
     }
     return out;
   });
-  fs3.writeFileSync(
+  fs4.writeFileSync(
     file,
     `${stringify({ schema_version: doc.schema_version, projects })}
 `,
@@ -557,24 +622,24 @@ function saveDoc(doc) {
 }
 function isFile(p) {
   try {
-    return fs3.statSync(p).isFile();
+    return fs4.statSync(p).isFile();
   } catch {
     return false;
   }
 }
 function isDir(p) {
   try {
-    return fs3.statSync(p).isDirectory();
+    return fs4.statSync(p).isDirectory();
   } catch {
     return false;
   }
 }
 function agentSubprojectRoot(projectRoot) {
   for (const candidate of [
-    path2.join(projectRoot, "app", "agent"),
-    path2.join(projectRoot, "agent")
+    path3.join(projectRoot, "app", "agent"),
+    path3.join(projectRoot, "agent")
   ]) {
-    if (isFile(path2.join(candidate, "studio.toml"))) {
+    if (isFile(path3.join(candidate, "studio.toml"))) {
       return candidate;
     }
   }
@@ -582,9 +647,9 @@ function agentSubprojectRoot(projectRoot) {
 }
 function projectStudioToml(projectRoot) {
   const candidates = [
-    path2.join(projectRoot, "studio.toml"),
-    path2.join(projectRoot, "app", "agent", "studio.toml"),
-    path2.join(projectRoot, "agent", "studio.toml")
+    path3.join(projectRoot, "studio.toml"),
+    path3.join(projectRoot, "app", "agent", "studio.toml"),
+    path3.join(projectRoot, "agent", "studio.toml")
   ];
   return candidates.find(isFile) ?? null;
 }
@@ -595,14 +660,14 @@ function readStudioToml(projectRoot) {
       `no studio.toml at ${projectRoot}, ${projectRoot}/app/agent, or ${projectRoot}/agent`
     );
   }
-  return parse(fs3.readFileSync(studioToml, "utf-8"));
+  return parse(fs4.readFileSync(studioToml, "utf-8"));
 }
 function scanWalletAddress(projectRoot) {
-  const walletsDir = path2.join(projectRoot, ".studio", "wallets");
+  const walletsDir = path3.join(projectRoot, ".studio", "wallets");
   if (!isDir(walletsDir)) {
     return null;
   }
-  for (const child of fs3.readdirSync(walletsDir).sort()) {
+  for (const child of fs4.readdirSync(walletsDir).sort()) {
     if (!child.endsWith(".json")) {
       continue;
     }
@@ -617,13 +682,13 @@ function expandUser(p) {
   if (p === "~") {
     return os.homedir();
   }
-  if (p.startsWith(`~${path2.sep}`) || p.startsWith("~/")) {
-    return path2.join(os.homedir(), p.slice(2));
+  if (p.startsWith(`~${path3.sep}`) || p.startsWith("~/")) {
+    return path3.join(os.homedir(), p.slice(2));
   }
   return p;
 }
 function normalizePath(p) {
-  return path2.resolve(expandUser(p));
+  return path3.resolve(expandUser(p));
 }
 function nowIso() {
   const d = /* @__PURE__ */ new Date();
@@ -644,13 +709,13 @@ function registerProject(projectRootArg2, opts = {}) {
   }
   const cfg = readStudioToml(projectRoot);
   const agentRoot2 = agentSubprojectRoot(projectRoot);
-  const resolvedName = opts.name ?? (tableOf(cfg, "project").name || path2.basename(projectRoot));
+  const resolvedName = opts.name ?? (tableOf(cfg, "project").name || path3.basename(projectRoot));
   const network = tableOf(cfg, "network").default || "bsc-testnet";
   const walletAddress = scanWalletAddress(agentRoot2);
   const llmProvider = tableOf(cfg, "llm").provider || null;
   const workspaceRoot = findWorkspaceRoot(projectRoot) ?? projectRoot;
-  const cloud = fs3.existsSync(
-    path2.join(workspaceRoot, "agentcore", "agentcore.json")
+  const cloud = fs4.existsSync(
+    path3.join(workspaceRoot, "agentcore", "agentcore.json")
   ) ? "agentcore" : null;
   const entryData = {
     name: resolvedName,
@@ -731,7 +796,7 @@ function listProjects() {
       }
     }
     if (e.cloud === null) {
-      if (fs3.existsSync(path2.join(p, "agentcore", "agentcore.json"))) {
+      if (fs4.existsSync(path3.join(p, "agentcore", "agentcore.json"))) {
         e.cloud = "agentcore";
         changed = true;
       }
@@ -1036,8 +1101,8 @@ function cmdRegister(pathArg, name, agentId) {
 }
 
 // src/cli/audit.ts
-import * as fs4 from "fs";
-import * as path3 from "path";
+import * as fs5 from "fs";
+import * as path4 from "path";
 
 // src/cli/_auditRead.ts
 import {
@@ -1114,17 +1179,17 @@ function parseSince(s) {
   return `${d.getUTCFullYear()}-${pad(d.getUTCMonth() + 1)}-${pad(d.getUTCDate())}T${pad(d.getUTCHours())}:${pad(d.getUTCMinutes())}:${pad(d.getUTCSeconds())}.000Z`;
 }
 function resolveProjectRoot(argRoot) {
-  const root = argRoot !== void 0 ? path3.resolve(argRoot) : process.cwd();
-  if (fs4.existsSync(path3.join(root, "studio.toml"))) {
+  const root = argRoot !== void 0 ? path4.resolve(argRoot) : process.cwd();
+  if (fs5.existsSync(path4.join(root, "studio.toml"))) {
     return root;
   }
   let current = root;
   for (; ; ) {
-    const parent = path3.dirname(current);
+    const parent = path4.dirname(current);
     if (parent === current) {
       return null;
     }
-    if (fs4.existsSync(path3.join(parent, "studio.toml"))) {
+    if (fs5.existsSync(path4.join(parent, "studio.toml"))) {
       return parent;
     }
     current = parent;
@@ -1200,18 +1265,18 @@ function cmdShow2(txHash, opts) {
 }
 
 // src/cli/budget.ts
-import * as fs6 from "fs";
-import * as path5 from "path";
+import * as fs7 from "fs";
+import * as path6 from "path";
 import { BudgetPolicy } from "@bnbagent/studio-runtime/pieverse";
 import { parse as parse3 } from "smol-toml";
 
 // src/cli/_projectRoot.ts
-import * as fs5 from "fs";
-import * as path4 from "path";
+import * as fs6 from "fs";
+import * as path5 from "path";
 function resolveProjectRootArg(argRoot) {
   if (argRoot !== void 0) {
-    const root2 = path4.resolve(argRoot);
-    if (!fs5.existsSync(path4.join(root2, "studio.toml"))) {
+    const root2 = path5.resolve(argRoot);
+    if (!fs6.existsSync(path5.join(root2, "studio.toml"))) {
       printErr(`error: no studio.toml under --project-root ${root2}`);
       return null;
     }
@@ -1486,7 +1551,7 @@ function registerBudget(program) {
 }
 function loadPolicy(root) {
   const cfg = parse3(
-    fs6.readFileSync(path5.join(root, "studio.toml"), "utf-8")
+    fs7.readFileSync(path6.join(root, "studio.toml"), "utf-8")
   );
   const budget = cfg.budget;
   return policyFromToml(
@@ -1494,9 +1559,9 @@ function loadPolicy(root) {
   );
 }
 function writeSection(root, updates) {
-  const tomlPath = path5.join(root, "studio.toml");
-  const text2 = fs6.readFileSync(tomlPath, "utf-8");
-  fs6.writeFileSync(tomlPath, updateSection(text2, "budget", updates), "utf-8");
+  const tomlPath = path6.join(root, "studio.toml");
+  const text2 = fs7.readFileSync(tomlPath, "utf-8");
+  fs7.writeFileSync(tomlPath, updateSection(text2, "budget", updates), "utf-8");
 }
 function setBudgetEnabled(on) {
   return on ? cmdEnable({}) : cmdDisable(void 0);
@@ -1543,16 +1608,16 @@ function cmdShow3(projectRoot) {
   return 0;
 }
 function printSpendLedger(root) {
-  const ledgerPath = path5.join(root, ".studio", "spend-ledger.json");
+  const ledgerPath = path6.join(root, ".studio", "spend-ledger.json");
   printOut("");
   printOut("spend ledger (.studio/spend-ledger.json):");
-  if (!fs6.existsSync(ledgerPath)) {
+  if (!fs7.existsSync(ledgerPath)) {
     printOut("  (no ledger yet)");
     return;
   }
   let entries;
   try {
-    const raw = JSON.parse(fs6.readFileSync(ledgerPath, "utf-8"));
+    const raw = JSON.parse(fs7.readFileSync(ledgerPath, "utf-8"));
     entries = Array.isArray(raw.entries) ? raw.entries : [];
   } catch (exc) {
     printOut(
@@ -1643,8 +1708,8 @@ function cmdDisable(projectRoot) {
 }
 
 // src/cli/bundle.ts
-import * as fs8 from "fs";
-import * as path7 from "path";
+import * as fs9 from "fs";
+import * as path8 from "path";
 import {
   envLocalPath as envLocalPath4,
   findSubProjectRoot as findSubProjectRoot2,
@@ -1655,29 +1720,29 @@ import * as tar from "tar";
 
 // src/cli/_vendorTarball.ts
 import * as crypto from "crypto";
-import * as fs7 from "fs";
-import * as path6 from "path";
-import { fileURLToPath } from "url";
+import * as fs8 from "fs";
+import * as path7 from "path";
+import { fileURLToPath as fileURLToPath2 } from "url";
 import { parse as parseYaml, stringify as stringifyYaml } from "yaml";
 var VENDORED_PACKAGES = [
   "@bnbagent/sdk",
   "@bnbagent/studio-runtime"
 ];
 function installedSourceRoot(pkgName) {
-  let dir = path6.dirname(fileURLToPath(import.meta.url));
+  let dir = path7.dirname(fileURLToPath2(import.meta.url));
   for (; ; ) {
-    const candidate = path6.join(dir, "node_modules", ...pkgName.split("/"));
-    const packageJson = path6.join(candidate, "package.json");
-    if (fs7.existsSync(packageJson)) {
+    const candidate = path7.join(dir, "node_modules", ...pkgName.split("/"));
+    const packageJson = path7.join(candidate, "package.json");
+    if (fs8.existsSync(packageJson)) {
       try {
-        const real = fs7.realpathSync(packageJson);
-        const pkg = JSON.parse(fs7.readFileSync(real, "utf-8"));
-        return typeof pkg.version === "string" ? { root: path6.dirname(real), version: pkg.version } : null;
+        const real = fs8.realpathSync(packageJson);
+        const pkg = JSON.parse(fs8.readFileSync(real, "utf-8"));
+        return typeof pkg.version === "string" ? { root: path7.dirname(real), version: pkg.version } : null;
       } catch {
         return null;
       }
     }
-    const parent = path6.dirname(dir);
+    const parent = path7.dirname(dir);
     if (parent === dir) {
       return null;
     }
@@ -1690,7 +1755,7 @@ function localSourceRoot(pkgName) {
   if (installed === null) {
     return null;
   }
-  if (installed.root.split(path6.sep).includes("node_modules")) {
+  if (installed.root.split(path7.sep).includes("node_modules")) {
     return null;
   }
   return installed;
@@ -1706,17 +1771,17 @@ async function publishedOnRegistry(name, version) {
 function contentTag(sourceRoot) {
   const h = crypto.createHash("sha256");
   const files = [];
-  const srcDir = path6.join(sourceRoot, "src");
+  const srcDir = path7.join(sourceRoot, "src");
   const walk = (dir) => {
     let names;
     try {
-      names = fs7.readdirSync(dir).sort();
+      names = fs8.readdirSync(dir).sort();
     } catch {
       return;
     }
     for (const name of names) {
-      const full = path6.join(dir, name);
-      const st = fs7.statSync(full);
+      const full = path7.join(dir, name);
+      const st = fs8.statSync(full);
       if (st.isDirectory()) {
         walk(full);
       } else if (st.isFile()) {
@@ -1725,20 +1790,20 @@ function contentTag(sourceRoot) {
     }
   };
   walk(srcDir);
-  const pkgJson = path6.join(sourceRoot, "package.json");
-  if (fs7.existsSync(pkgJson)) {
+  const pkgJson = path7.join(sourceRoot, "package.json");
+  if (fs8.existsSync(pkgJson)) {
     files.push(pkgJson);
   }
   for (const f of files) {
-    h.update(path6.relative(sourceRoot, f));
-    h.update(fs7.readFileSync(f));
+    h.update(path7.relative(sourceRoot, f));
+    h.update(fs8.readFileSync(f));
   }
   return h.digest("hex").slice(0, 8);
 }
 function readManifest(vendorDir) {
   try {
     const data = JSON.parse(
-      fs7.readFileSync(path6.join(vendorDir, MANIFEST_NAME), "utf-8")
+      fs8.readFileSync(path7.join(vendorDir, MANIFEST_NAME), "utf-8")
     );
     return data !== null && typeof data === "object" ? data : {};
   } catch {
@@ -1746,8 +1811,8 @@ function readManifest(vendorDir) {
   }
 }
 function writeManifest(vendorDir, manifest) {
-  fs7.writeFileSync(
-    path6.join(vendorDir, MANIFEST_NAME),
+  fs8.writeFileSync(
+    path7.join(vendorDir, MANIFEST_NAME),
     `${JSON.stringify(manifest, null, 2)}
 `
   );
@@ -1756,26 +1821,26 @@ function tarballPrefix(pkgName) {
   return `${pkgName.replace(/^@/, "").replace(/\//g, "-")}-`;
 }
 function sha256File(p) {
-  return crypto.createHash("sha256").update(fs7.readFileSync(p)).digest("hex");
+  return crypto.createHash("sha256").update(fs8.readFileSync(p)).digest("hex");
 }
 function rewriteDepToTarball(agentDir, pkgName, tarballName) {
-  const pkgJsonPath = path6.join(agentDir, "package.json");
-  if (!fs7.existsSync(pkgJsonPath)) {
+  const pkgJsonPath = path7.join(agentDir, "package.json");
+  if (!fs8.existsSync(pkgJsonPath)) {
     return;
   }
-  const pkg = JSON.parse(fs7.readFileSync(pkgJsonPath, "utf-8"));
+  const pkg = JSON.parse(fs8.readFileSync(pkgJsonPath, "utf-8"));
   if (!pkg.dependencies || !(pkgName in pkg.dependencies)) {
     return;
   }
   pkg.dependencies[pkgName] = `file:vendor/${tarballName}`;
-  fs7.writeFileSync(pkgJsonPath, `${JSON.stringify(pkg, null, 2)}
+  fs8.writeFileSync(pkgJsonPath, `${JSON.stringify(pkg, null, 2)}
 `);
 }
 async function vendorLocalTarballs(agentDir, opts = {}) {
   const packages = opts.packages ?? VENDORED_PACKAGES;
   const resolveLocal = opts.resolveLocal ?? localSourceRoot;
   const required = new Set(opts.requiredPackages ?? []);
-  const vendorDir = path6.join(agentDir, "vendor");
+  const vendorDir = path7.join(agentDir, "vendor");
   const vendored = [];
   for (const pkgName of packages) {
     const local = resolveLocal(pkgName);
@@ -1785,19 +1850,19 @@ async function vendorLocalTarballs(agentDir, opts = {}) {
     if (!opts.force && await publishedOnRegistry(pkgName, local.version)) {
       continue;
     }
-    fs7.mkdirSync(vendorDir, { recursive: true });
+    fs8.mkdirSync(vendorDir, { recursive: true });
     const manifest = readManifest(vendorDir);
     const tag = contentTag(local.root);
     const prior = manifest[pkgName];
-    if (prior !== void 0 && prior.sourceTag === tag && fs7.existsSync(path6.join(vendorDir, prior.tarball))) {
+    if (prior !== void 0 && prior.sourceTag === tag && fs8.existsSync(path7.join(vendorDir, prior.tarball))) {
       rewriteDepToTarball(agentDir, pkgName, prior.tarball);
       vendored.push(pkgName);
       continue;
     }
     const prefix = tarballPrefix(pkgName);
-    for (const name of fs7.readdirSync(vendorDir)) {
+    for (const name of fs8.readdirSync(vendorDir)) {
       if (name.startsWith(prefix) && name.endsWith(".tgz")) {
-        fs7.rmSync(path6.join(vendorDir, name), { force: true });
+        fs8.rmSync(path7.join(vendorDir, name), { force: true });
       }
     }
     const result = await runCapture(
@@ -1816,8 +1881,8 @@ ${result.stderr.trim()}` : ""}`;
     }
     const lines = result.stdout.split("\n").filter((l) => l.trim());
     const packed = lines[lines.length - 1]?.trim();
-    const tarballPath = packed && fs7.existsSync(packed) ? packed : packed ? path6.join(vendorDir, path6.basename(packed)) : null;
-    if (!tarballPath || !fs7.existsSync(tarballPath)) {
+    const tarballPath = packed && fs8.existsSync(packed) ? packed : packed ? path7.join(vendorDir, path7.basename(packed)) : null;
+    if (!tarballPath || !fs8.existsSync(tarballPath)) {
       const message = `pnpm pack for ${pkgName} reported no tarball`;
       if (required.has(pkgName)) {
         throw new Error(message);
@@ -1825,7 +1890,7 @@ ${result.stderr.trim()}` : ""}`;
       printErr(`warning: ${message}; skipping.`);
       continue;
     }
-    const tarballName = path6.basename(tarballPath);
+    const tarballName = path7.basename(tarballPath);
     manifest[pkgName] = {
       version: local.version,
       sha256: sha256File(tarballPath),
@@ -1860,20 +1925,20 @@ async function provisionInstall(workspaceRoot) {
   return true;
 }
 function applyWorkspaceVendorOverrides(workspaceRoot, agentDir) {
-  const manifest = readManifest(path6.join(agentDir, "vendor"));
+  const manifest = readManifest(path7.join(agentDir, "vendor"));
   const entries = Object.entries(manifest);
   if (entries.length === 0) {
     return;
   }
-  const workspacePath = path6.join(workspaceRoot, "pnpm-workspace.yaml");
+  const workspacePath = path7.join(workspaceRoot, "pnpm-workspace.yaml");
   const workspaceDoc = parseYaml(
-    fs7.existsSync(workspacePath) ? fs7.readFileSync(workspacePath, "utf-8") : "packages:\n  - app/agent\n"
+    fs8.existsSync(workspacePath) ? fs8.readFileSync(workspacePath, "utf-8") : "packages:\n  - app/agent\n"
   );
   const workspace = workspaceDoc ?? {};
   const existingOverrides = workspace.overrides !== null && typeof workspace.overrides === "object" && !Array.isArray(workspace.overrides) ? workspace.overrides : {};
-  const pkgPath = path6.join(workspaceRoot, "package.json");
-  const pkg = JSON.parse(fs7.readFileSync(pkgPath, "utf-8"));
-  const relVendor = path6.relative(workspaceRoot, path6.join(agentDir, "vendor")).split(path6.sep).join("/");
+  const pkgPath = path7.join(workspaceRoot, "package.json");
+  const pkg = JSON.parse(fs8.readFileSync(pkgPath, "utf-8"));
+  const relVendor = path7.relative(workspaceRoot, path7.join(agentDir, "vendor")).split(path7.sep).join("/");
   const overrides = {
     ...existingOverrides,
     ...pkg.pnpm?.overrides ?? {}
@@ -1882,10 +1947,10 @@ function applyWorkspaceVendorOverrides(workspaceRoot, agentDir) {
     overrides[name] = `file:${relVendor}/${entry.tarball}`;
   }
   workspace.overrides = overrides;
-  fs7.writeFileSync(workspacePath, stringifyYaml(workspace));
-  const agentWorkspacePath = path6.join(agentDir, "pnpm-workspace.yaml");
+  fs8.writeFileSync(workspacePath, stringifyYaml(workspace));
+  const agentWorkspacePath = path7.join(agentDir, "pnpm-workspace.yaml");
   const agentWorkspaceDoc = parseYaml(
-    fs7.existsSync(agentWorkspacePath) ? fs7.readFileSync(agentWorkspacePath, "utf-8") : "packages:\n  - .\nallowBuilds:\n  esbuild: true\n"
+    fs8.existsSync(agentWorkspacePath) ? fs8.readFileSync(agentWorkspacePath, "utf-8") : "packages:\n  - .\nallowBuilds:\n  esbuild: true\n"
   );
   const agentWorkspace = agentWorkspaceDoc ?? {};
   const agentOverrides = agentWorkspace.overrides !== null && typeof agentWorkspace.overrides === "object" && !Array.isArray(agentWorkspace.overrides) ? agentWorkspace.overrides : {};
@@ -1893,9 +1958,9 @@ function applyWorkspaceVendorOverrides(workspaceRoot, agentDir) {
     agentOverrides[name] = `file:vendor/${entry.tarball}`;
   }
   agentWorkspace.overrides = agentOverrides;
-  fs7.writeFileSync(agentWorkspacePath, stringifyYaml(agentWorkspace));
+  fs8.writeFileSync(agentWorkspacePath, stringifyYaml(agentWorkspace));
   pkg.pnpm = { ...pkg.pnpm ?? {}, overrides };
-  fs7.writeFileSync(pkgPath, `${JSON.stringify(pkg, null, 2)}
+  fs8.writeFileSync(pkgPath, `${JSON.stringify(pkg, null, 2)}
 `);
 }
 
@@ -1930,7 +1995,7 @@ function registerBundle(program) {
     act(async (opts) => {
       try {
         const result = await createBundle(opts);
-        const sizeKb = fs8.statSync(result.archivePath).size / 1024;
+        const sizeKb = fs9.statSync(result.archivePath).size / 1024;
         printOut("");
         printOut(
           `\u2713 bundle ready: ${result.archivePath}  (${sizeKb.toFixed(1)} KB)`
@@ -1952,7 +2017,7 @@ function registerBundle(program) {
   );
 }
 async function createBundle(opts = {}) {
-  const start = path7.resolve(opts.projectRoot ?? process.cwd());
+  const start = path8.resolve(opts.projectRoot ?? process.cwd());
   const agentRoot2 = resolveAgentRoot(start);
   if (agentRoot2 === null) {
     throw new Error(
@@ -1962,24 +2027,24 @@ async function createBundle(opts = {}) {
   const workspaceRoot = trueWorkspaceRoot(agentRoot2);
   const projectName2 = readProjectName(agentRoot2);
   const safeName = projectName2.replace(/[^A-Za-z0-9._-]+/g, "-");
-  const outputDir = path7.resolve(
-    opts.output ?? path7.join(workspaceRoot, "dist")
+  const outputDir = path8.resolve(
+    opts.output ?? path8.join(workspaceRoot, "dist")
   );
-  fs8.mkdirSync(outputDir, { recursive: true });
+  fs9.mkdirSync(outputDir, { recursive: true });
   const stamp = (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
   const archiveBase = `${safeName}-bundle-${stamp}`;
-  const stagingRoot = path7.join(outputDir, `.${archiveBase}.staging`);
-  const stagedWorkspace = path7.join(stagingRoot, safeName);
+  const stagingRoot = path8.join(outputDir, `.${archiveBase}.staging`);
+  const stagedWorkspace = path8.join(stagingRoot, safeName);
   if (stagedWorkspace === stagingRoot || !inside(stagedWorkspace, stagingRoot)) {
     throw new Error(
       `unsafe project name ${JSON.stringify(projectName2)} escapes the bundle staging directory`
     );
   }
-  const agentRel = path7.relative(workspaceRoot, agentRoot2);
-  const stagedAgent = path7.join(stagedWorkspace, agentRel);
-  const archivePath = path7.join(outputDir, `${archiveBase}.tar.gz`);
-  fs8.rmSync(stagingRoot, { recursive: true, force: true });
-  fs8.mkdirSync(stagingRoot, { recursive: true });
+  const agentRel = path8.relative(workspaceRoot, agentRoot2);
+  const stagedAgent = path8.join(stagedWorkspace, agentRel);
+  const archivePath = path8.join(outputDir, `${archiveBase}.tar.gz`);
+  fs9.rmSync(stagingRoot, { recursive: true, force: true });
+  fs9.mkdirSync(stagingRoot, { recursive: true });
   try {
     printOut(`\u2192 Staging seller workspace at ${stagedWorkspace}\u2026`);
     copyWorkspace(workspaceRoot, stagedWorkspace, outputDir);
@@ -2018,26 +2083,26 @@ async function createBundle(opts = {}) {
       [safeName]
     );
   } finally {
-    fs8.rmSync(stagingRoot, { recursive: true, force: true });
+    fs9.rmSync(stagingRoot, { recursive: true, force: true });
   }
   return { archivePath, projectName: projectName2 };
 }
 function resolveAgentRoot(start) {
   const found = findSubProjectRoot2("agent", start);
-  if (found !== null && fs8.existsSync(path7.join(found, "studio.toml"))) {
+  if (found !== null && fs9.existsSync(path8.join(found, "studio.toml"))) {
     return found;
   }
-  return fs8.existsSync(path7.join(start, "studio.toml")) ? start : null;
+  return fs9.existsSync(path8.join(start, "studio.toml")) ? start : null;
 }
 function trueWorkspaceRoot(agentRoot2) {
   const found = findWorkspaceRoot2(agentRoot2);
   if (found === null) {
     return agentRoot2;
   }
-  return path7.basename(found) === "app" ? path7.dirname(found) : found;
+  return path8.basename(found) === "app" ? path8.dirname(found) : found;
 }
 function readProjectName(agentRoot2) {
-  const cfg = loadStudioToml2(path7.join(agentRoot2, "studio.toml"));
+  const cfg = loadStudioToml2(path8.join(agentRoot2, "studio.toml"));
   const project = cfg.project;
   const name = project !== null && typeof project === "object" && !Array.isArray(project) ? project.name : null;
   if (!name) {
@@ -2050,58 +2115,58 @@ function excludedName(name) {
   return EXCLUDED_NAMES.has(lowerName) || CREDENTIAL_FILE_NAMES.has(lowerName) || lowerName.startsWith(".env") || lowerName.endsWith(".egg-info") || lowerName.startsWith(".venv-");
 }
 function inside(child, parent) {
-  const rel = path7.relative(parent, child);
-  return rel === "" || !rel.startsWith("..") && !path7.isAbsolute(rel);
+  const rel = path8.relative(parent, child);
+  return rel === "" || !rel.startsWith("..") && !path8.isAbsolute(rel);
 }
 function copyWorkspace(sourceRoot, destinationRoot, outputDir) {
-  const source = path7.resolve(sourceRoot);
-  const excludedOutput = outputDir ? path7.resolve(outputDir) : null;
+  const source = path8.resolve(sourceRoot);
+  const excludedOutput = outputDir ? path8.resolve(outputDir) : null;
   const copy = (src, dst) => {
     if (excludedOutput !== null && inside(src, excludedOutput)) {
       return;
     }
-    const name = path7.basename(src);
+    const name = path8.basename(src);
     if (src !== source && excludedName(name)) {
       return;
     }
-    const stat = fs8.lstatSync(src);
+    const stat = fs9.lstatSync(src);
     if (stat.isSymbolicLink()) {
-      const link = fs8.readlinkSync(src);
-      const lexicalTarget = path7.resolve(path7.dirname(src), link);
+      const link = fs9.readlinkSync(src);
+      const lexicalTarget = path8.resolve(path8.dirname(src), link);
       let resolvedTarget = lexicalTarget;
       try {
-        resolvedTarget = fs8.realpathSync(lexicalTarget);
+        resolvedTarget = fs9.realpathSync(lexicalTarget);
       } catch {
       }
       if (!inside(resolvedTarget, source)) {
         throw new Error(
-          `refusing to bundle symlink ${path7.relative(source, src)} \u2192 ${link}: its target escapes the project tree (possible secret leak).`
+          `refusing to bundle symlink ${path8.relative(source, src)} \u2192 ${link}: its target escapes the project tree (possible secret leak).`
         );
       }
-      fs8.mkdirSync(path7.dirname(dst), { recursive: true });
-      fs8.symlinkSync(link, dst);
+      fs9.mkdirSync(path8.dirname(dst), { recursive: true });
+      fs9.symlinkSync(link, dst);
       return;
     }
     if (stat.isDirectory()) {
-      fs8.mkdirSync(dst, { recursive: true, mode: stat.mode & 511 });
-      for (const child of fs8.readdirSync(src).sort()) {
-        copy(path7.join(src, child), path7.join(dst, child));
+      fs9.mkdirSync(dst, { recursive: true, mode: stat.mode & 511 });
+      for (const child of fs9.readdirSync(src).sort()) {
+        copy(path8.join(src, child), path8.join(dst, child));
       }
       return;
     }
     if (stat.isFile()) {
-      fs8.mkdirSync(path7.dirname(dst), { recursive: true });
-      fs8.copyFileSync(src, dst);
-      fs8.chmodSync(dst, stat.mode & 511);
+      fs9.mkdirSync(path8.dirname(dst), { recursive: true });
+      fs9.copyFileSync(src, dst);
+      fs9.chmodSync(dst, stat.mode & 511);
     }
   };
   copy(source, destinationRoot);
 }
 function writeEnvExample(agentRoot2, stagedWorkspace) {
   const sourceEnv = envLocalPath4(agentRoot2);
-  const targetDir = path7.join(stagedWorkspace, ".studio");
-  const target = path7.join(targetDir, ".env.local.example");
-  fs8.mkdirSync(targetDir, { recursive: true, mode: 448 });
+  const targetDir = path8.join(stagedWorkspace, ".studio");
+  const target = path8.join(targetDir, ".env.local.example");
+  fs9.mkdirSync(targetDir, { recursive: true, mode: 448 });
   const header = [
     "# Copy to .studio/.env.local and fill in values.",
     "# Generated by `bag bundle`; secret values were stripped.",
@@ -2109,7 +2174,7 @@ function writeEnvExample(agentRoot2, stagedWorkspace) {
   ];
   let lines;
   try {
-    lines = fs8.readFileSync(sourceEnv, "utf-8").split(/\r?\n/);
+    lines = fs9.readFileSync(sourceEnv, "utf-8").split(/\r?\n/);
   } catch {
     lines = [
       "WALLET_PASSWORD=",
@@ -2127,29 +2192,29 @@ function writeEnvExample(agentRoot2, stagedWorkspace) {
     const match = /^\s*([A-Za-z_][A-Za-z0-9_]*)\s*=/.exec(line);
     return match ? `${match[1]}=` : "# omitted unrecognized dotenv entry";
   });
-  fs8.writeFileSync(target, `${[...header, ...stripped].join("\n")}
+  fs9.writeFileSync(target, `${[...header, ...stripped].join("\n")}
 `, {
     mode: 384
   });
 }
 function findStagedLeak(stagedWorkspace) {
-  const root = path7.resolve(stagedWorkspace);
+  const root = path8.resolve(stagedWorkspace);
   const walk = (dir) => {
-    for (const name of fs8.readdirSync(dir).sort()) {
-      const full = path7.join(dir, name);
-      const rel = path7.relative(root, full);
-      const stat = fs8.lstatSync(full);
+    for (const name of fs9.readdirSync(dir).sort()) {
+      const full = path8.join(dir, name);
+      const rel = path8.relative(root, full);
+      const stat = fs9.lstatSync(full);
       const lowerName = name.toLowerCase();
       if (stat.isSymbolicLink()) {
-        const link = fs8.readlinkSync(full);
-        const target = path7.resolve(path7.dirname(full), link);
+        const link = fs9.readlinkSync(full);
+        const target = path8.resolve(path8.dirname(full), link);
         if (!inside(target, root)) {
           return `escaping symlink ${rel} \u2192 ${link}`;
         }
         continue;
       }
       if (stat.isDirectory()) {
-        if (lowerName === "wallets" && path7.basename(path7.dirname(full)).toLowerCase() === ".studio") {
+        if (lowerName === "wallets" && path8.basename(path8.dirname(full)).toLowerCase() === ".studio") {
           return `wallet directory ${rel}`;
         }
         const nested = walk(full);
@@ -2167,7 +2232,7 @@ function findStagedLeak(stagedWorkspace) {
           "# omitted source comment",
           "# omitted unrecognized dotenv entry"
         ]);
-        const unsafeExample = fs8.readFileSync(full, "utf-8").split(/\r?\n/u).some((line) => {
+        const unsafeExample = fs9.readFileSync(full, "utf-8").split(/\r?\n/u).some((line) => {
           if (!line.trim() || safeFixedLines.has(line)) return false;
           return !/^#?\s*[A-Za-z_][A-Za-z0-9_]*=$/u.test(line);
         });
@@ -2218,12 +2283,12 @@ function writeInstallMd(stagedWorkspace, projectName2) {
     "- `node_modules/`, build outputs, caches, and repository history",
     ""
   ];
-  fs8.writeFileSync(path7.join(stagedWorkspace, "INSTALL.md"), lines.join("\n"));
+  fs9.writeFileSync(path8.join(stagedWorkspace, "INSTALL.md"), lines.join("\n"));
 }
 
 // src/cli/config.ts
-import * as fs9 from "fs";
-import * as path8 from "path";
+import * as fs10 from "fs";
+import * as path9 from "path";
 import { NegotiationHandler } from "@bnbagent/sdk/erc8183";
 import { Option } from "commander";
 import { parse as parse4 } from "smol-toml";
@@ -2489,8 +2554,8 @@ function cmdShow4(asJson, projectRoot) {
   if (root === null) {
     return 2;
   }
-  const tomlPath = path8.join(root, "studio.toml");
-  const text2 = fs9.readFileSync(tomlPath, "utf-8");
+  const tomlPath = path9.join(root, "studio.toml");
+  const text2 = fs10.readFileSync(tomlPath, "utf-8");
   if (asJson) {
     printOut(sortedJson(parse4(text2)));
   } else {
@@ -2506,7 +2571,7 @@ function cmdGet(key, projectRoot) {
   if (root === null) {
     return 2;
   }
-  const doc = parse4(fs9.readFileSync(path8.join(root, "studio.toml"), "utf-8"));
+  const doc = parse4(fs10.readFileSync(path9.join(root, "studio.toml"), "utf-8"));
   let val;
   try {
     val = navigate(doc, splitKey(key));
@@ -2528,8 +2593,8 @@ async function cmdSet(key, rawValue, typeFlag, projectRoot) {
   if (root === null) {
     return 2;
   }
-  const tomlPath = path8.join(root, "studio.toml");
-  const text2 = fs9.readFileSync(tomlPath, "utf-8");
+  const tomlPath = path9.join(root, "studio.toml");
+  const text2 = fs10.readFileSync(tomlPath, "utf-8");
   let parts;
   try {
     parts = splitKey(key);
@@ -2550,7 +2615,7 @@ async function cmdSet(key, rawValue, typeFlag, projectRoot) {
     return 2;
   }
   const updatedText = setDottedKey(text2, parts, value);
-  fs9.writeFileSync(tomlPath, updatedText, "utf-8");
+  fs10.writeFileSync(tomlPath, updatedText, "utf-8");
   printOut(`set ${key} = ${JSON.stringify(plainValue(value))}`);
   if (parts.length === 3 && parts[0] === "payments" && parts[1] === "erc8183" && parts[2] === "price") {
     const updated = parse4(updatedText);
@@ -2623,7 +2688,7 @@ function cmdListKeys(projectRoot) {
   if (root === null) {
     return 2;
   }
-  const doc = parse4(fs9.readFileSync(path8.join(root, "studio.toml"), "utf-8"));
+  const doc = parse4(fs10.readFileSync(path9.join(root, "studio.toml"), "utf-8"));
   const leaves = iterLeaves(doc, []);
   leaves.sort((a, b) => a[0] < b[0] ? -1 : a[0] > b[0] ? 1 : 0);
   for (const [k, v] of leaves) {
@@ -2645,8 +2710,8 @@ import { pieverseKeyHash as pieverseKeyHash3 } from "@bnbagent/studio-runtime/ll
 import { Option as Option4 } from "commander";
 
 // src/cli/_agentcoreAccess.ts
-import * as fs10 from "fs";
-import * as path9 from "path";
+import * as fs11 from "fs";
+import * as path10 from "path";
 import {
   envLocalPath as envLocalPath5,
   findWorkspaceRoot as findWorkspaceRoot3,
@@ -2655,7 +2720,7 @@ import {
 var GUIDE_URL = "https://github.com/bnb-chain/bnbagent-studio/blob/main/docs/guides/agentcore-a2a-access.md";
 function isFile2(p) {
   try {
-    return fs10.statSync(p).isFile();
+    return fs11.statSync(p).isFile();
   } catch {
     return false;
   }
@@ -2670,13 +2735,13 @@ function envValue(entries, key) {
   return null;
 }
 function descriptorEnv(workspaceRoot) {
-  const descriptor = path9.join(workspaceRoot, "agentcore", "agentcore.json");
+  const descriptor = path10.join(workspaceRoot, "agentcore", "agentcore.json");
   if (!isFile2(descriptor)) {
     return [];
   }
   let data;
   try {
-    data = JSON.parse(fs10.readFileSync(descriptor, "utf-8"));
+    data = JSON.parse(fs11.readFileSync(descriptor, "utf-8"));
   } catch {
     return [];
   }
@@ -2695,8 +2760,8 @@ function descriptorEnv(workspaceRoot) {
   return Array.isArray(env) ? env : [];
 }
 function agentcoreProjectRoot(workspaceRoot) {
-  for (const candidate of [path9.dirname(workspaceRoot), workspaceRoot]) {
-    if (isFile2(path9.join(candidate, "agentcore", "agentcore.json"))) {
+  for (const candidate of [path10.dirname(workspaceRoot), workspaceRoot]) {
+    if (isFile2(path10.join(candidate, "agentcore", "agentcore.json"))) {
       return candidate;
     }
   }
@@ -2708,7 +2773,7 @@ function dotenvValue(filePath, key) {
   }
   let lines;
   try {
-    lines = fs10.readFileSync(filePath, "utf-8").split(/\r?\n/);
+    lines = fs11.readFileSync(filePath, "utf-8").split(/\r?\n/);
   } catch {
     return null;
   }
@@ -2741,7 +2806,7 @@ function oauthFacts(workspaceRoot, agentRoot2) {
 function accessSummaryForAgentcore(agentRoot2, opts = {}) {
   let data;
   try {
-    data = loadStudioToml3(path9.join(agentRoot2, "studio.toml"));
+    data = loadStudioToml3(path10.join(agentRoot2, "studio.toml"));
   } catch {
     return null;
   }
@@ -2774,8 +2839,8 @@ import {
 } from "@bnbagent/studio-runtime/config";
 
 // src/cli/_deploy/checks/_wallet.ts
-import * as fs11 from "fs";
-import * as path10 from "path";
+import * as fs12 from "fs";
+import * as path11 from "path";
 import {
   findSubProjectRoot as findSubProjectRoot3,
   loadStudioToml as loadStudioToml4
@@ -2882,16 +2947,16 @@ async function checkUBalance(walletAddress, neededUsd, networkName) {
 
 // src/cli/_deploy/checks/_wallet.ts
 function agentRootOf(root) {
-  return findSubProjectRoot3("agent", root) ?? path10.join(root, "app", "agent");
+  return findSubProjectRoot3("agent", root) ?? path11.join(root, "app", "agent");
 }
 function tableOf2(data, key) {
   const v = data[key];
   return v !== null && typeof v === "object" && !Array.isArray(v) ? v : {};
 }
 function loadAgentToml(root) {
-  const p = path10.join(agentRootOf(root), "studio.toml");
+  const p = path11.join(agentRootOf(root), "studio.toml");
   try {
-    if (!fs11.statSync(p).isFile()) {
+    if (!fs12.statSync(p).isFile()) {
       return {};
     }
   } catch {
@@ -2905,7 +2970,7 @@ function loadAgentToml(root) {
 }
 function keystoreJsonPresent(dir) {
   try {
-    return fs11.statSync(dir).isDirectory() && fs11.readdirSync(dir).some((n) => n.endsWith(".json"));
+    return fs12.statSync(dir).isDirectory() && fs12.readdirSync(dir).some((n) => n.endsWith(".json"));
   } catch {
     return false;
   }
@@ -2926,7 +2991,7 @@ function canBuildWallet(root, data) {
     return false;
   }
   const rel = String(walletCfg.keystore_dir ?? ".studio/wallets");
-  const keystoreDir = path10.isAbsolute(rel) ? rel : path10.join(agentRootOf(root), rel);
+  const keystoreDir = path11.isAbsolute(rel) ? rel : path11.join(agentRootOf(root), rel);
   return keystoreJsonPresent(keystoreDir);
 }
 function walletAddressForChecks(root, data) {
@@ -3100,8 +3165,8 @@ import { writePrivate as writePrivate2 } from "@bnbagent/studio-runtime/secretWr
 import { Option as Option3 } from "commander";
 
 // src/cli/_migrations.ts
-import * as fs12 from "fs";
-import * as path11 from "path";
+import * as fs13 from "fs";
+import * as path12 from "path";
 import {
   envLocalPath as envLocalPath7,
   findSubProjectRoot as findSubProjectRoot5,
@@ -3109,59 +3174,59 @@ import {
 } from "@bnbagent/studio-runtime/config";
 function isFile3(p) {
   try {
-    return fs12.statSync(p).isFile();
+    return fs13.statSync(p).isFile();
   } catch {
     return false;
   }
 }
 function isDir2(p) {
   try {
-    return fs12.statSync(p).isDirectory();
+    return fs13.statSync(p).isDirectory();
   } catch {
     return false;
   }
 }
 function realpathOr(p) {
   try {
-    return fs12.realpathSync(p);
+    return fs13.realpathSync(p);
   } catch {
-    return path11.resolve(p);
+    return path12.resolve(p);
   }
 }
 function keystoreJsonFiles(dir) {
   if (!isDir2(dir)) {
     return [];
   }
-  return fs12.readdirSync(dir).filter((n) => n.endsWith(".json")).sort();
+  return fs13.readdirSync(dir).filter((n) => n.endsWith(".json")).sort();
 }
 function migrateEnvLocal(start) {
   try {
     const target = envLocalPath7(start);
-    const ws = path11.dirname(path11.dirname(target));
+    const ws = path12.dirname(path12.dirname(target));
     const agentRoot2 = findSubProjectRoot5("agent", start);
     const sources = [];
     if (agentRoot2 !== null) {
-      sources.push(path11.join(agentRoot2, ".env.local"));
+      sources.push(path12.join(agentRoot2, ".env.local"));
     }
-    sources.push(path11.join(ws, ".bag-env-stash", ".env.local"));
+    sources.push(path12.join(ws, ".bag-env-stash", ".env.local"));
     for (const src of sources) {
-      if (!isFile3(src) || path11.resolve(src) === path11.resolve(target)) {
+      if (!isFile3(src) || path12.resolve(src) === path12.resolve(target)) {
         continue;
       }
-      if (fs12.existsSync(target)) {
+      if (fs13.existsSync(target)) {
         printErr(
           `note: both ${src} and ${target} exist; left ${src} untouched. Secrets now live in .studio/.env.local \u2014 reconcile and remove the old file.`
         );
         continue;
       }
-      fs12.mkdirSync(path11.dirname(target), { recursive: true });
-      fs12.renameSync(src, target);
-      fs12.chmodSync(target, 384);
+      fs13.mkdirSync(path12.dirname(target), { recursive: true });
+      fs13.renameSync(src, target);
+      fs13.chmodSync(target, 384);
       printErr(
         `note: migrated ${src} -> ${target} (secrets now live outside the deploy codeLocation).`
       );
     }
-    fs12.rmSync(path11.join(ws, ".bag-env-stash"), {
+    fs13.rmSync(path12.join(ws, ".bag-env-stash"), {
       recursive: true,
       force: true
     });
@@ -3171,7 +3236,7 @@ function migrateEnvLocal(start) {
 var KEYSTORE_WALLET_KINDS = /* @__PURE__ */ new Set(["evm-local", "altana"]);
 function readWalletKind(agentRoot2) {
   try {
-    const wallet = loadStudioToml5(path11.join(agentRoot2, "studio.toml")).wallet;
+    const wallet = loadStudioToml5(path12.join(agentRoot2, "studio.toml")).wallet;
     if (wallet !== null && typeof wallet === "object") {
       const kind = wallet.kind;
       if (typeof kind === "string" && kind.trim()) {
@@ -3185,7 +3250,7 @@ function readWalletKind(agentRoot2) {
 function resolveKeystoreDir(agentRoot2) {
   let rel = ".studio/wallets";
   try {
-    const data = loadStudioToml5(path11.join(agentRoot2, "studio.toml"));
+    const data = loadStudioToml5(path12.join(agentRoot2, "studio.toml"));
     const wallet = data.wallet;
     if (wallet !== null && typeof wallet === "object") {
       const v = wallet.keystore_dir;
@@ -3195,24 +3260,24 @@ function resolveKeystoreDir(agentRoot2) {
     }
   } catch {
   }
-  return path11.isAbsolute(rel) ? rel : path11.join(agentRoot2, rel);
+  return path12.isAbsolute(rel) ? rel : path12.join(agentRoot2, rel);
 }
 function migrateKeystoreOutOfCodelocation(start) {
   const agentRoot2 = findSubProjectRoot5("agent", start);
   if (agentRoot2 === null) {
     return;
   }
-  const ws = path11.dirname(path11.dirname(envLocalPath7(start)));
-  const target = path11.join(ws, ".studio", "wallets");
-  const stash = path11.join(ws, ".bag-keystore-stash");
+  const ws = path12.dirname(path12.dirname(envLocalPath7(start)));
+  const target = path12.join(ws, ".studio", "wallets");
+  const stash = path12.join(ws, ".bag-keystore-stash");
   if (isDir2(stash)) {
-    for (const name of fs12.readdirSync(stash).sort()) {
-      const sub = path11.join(stash, name);
+    for (const name of fs13.readdirSync(stash).sort()) {
+      const sub = path12.join(stash, name);
       if (isDir2(sub) && keystoreJsonFiles(sub).length > 0) {
         relocateKeys(sub, target, "stashed keystore");
       }
     }
-    fs12.rmSync(stash, { recursive: true, force: true });
+    fs13.rmSync(stash, { recursive: true, force: true });
   }
   if (!KEYSTORE_WALLET_KINDS.has(readWalletKind(agentRoot2))) {
     return;
@@ -3220,7 +3285,7 @@ function migrateKeystoreOutOfCodelocation(start) {
   const src = resolveKeystoreDir(agentRoot2);
   const srcReal = realpathOr(src);
   const agentReal = realpathOr(agentRoot2);
-  if (srcReal !== agentReal && !srcReal.startsWith(agentReal + path11.sep)) {
+  if (srcReal !== agentReal && !srcReal.startsWith(agentReal + path12.sep)) {
     return;
   }
   if (srcReal === realpathOr(target)) {
@@ -3231,13 +3296,13 @@ function migrateKeystoreOutOfCodelocation(start) {
       return;
     }
   }
-  const rel = path11.relative(agentRoot2, target).split(path11.sep).join("/");
-  const tomlPath = path11.join(agentRoot2, "studio.toml");
+  const rel = path12.relative(agentRoot2, target).split(path12.sep).join("/");
+  const tomlPath = path12.join(agentRoot2, "studio.toml");
   if (isFile3(tomlPath)) {
-    const text2 = fs12.readFileSync(tomlPath, "utf-8");
+    const text2 = fs13.readFileSync(tomlPath, "utf-8");
     const updated = updateSection(text2, "wallet", { keystore_dir: rel });
     if (updated !== text2) {
-      fs12.writeFileSync(tomlPath, updated);
+      fs13.writeFileSync(tomlPath, updated);
       printErr(
         `note: updated [wallet].keystore_dir -> ${rel} in studio.toml (keystore now lives at the workspace root, outside the codeLocation).`
       );
@@ -3245,7 +3310,7 @@ function migrateKeystoreOutOfCodelocation(start) {
   }
 }
 function relocateKeys(src, target, label) {
-  fs12.mkdirSync(target, { recursive: true });
+  fs13.mkdirSync(target, { recursive: true });
   if (keystoreJsonFiles(target).length > 0) {
     printErr(
       `note: both a ${label} at ${src} and keys at ${target} exist; left ${src} untouched for manual review (never overwritten).`
@@ -3253,15 +3318,15 @@ function relocateKeys(src, target, label) {
     return false;
   }
   try {
-    for (const name of fs12.readdirSync(src)) {
-      const f = path11.join(src, name);
-      if (fs12.statSync(f).isFile()) {
-        fs12.copyFileSync(f, path11.join(target, name));
+    for (const name of fs13.readdirSync(src)) {
+      const f = path12.join(src, name);
+      if (fs13.statSync(f).isFile()) {
+        fs13.copyFileSync(f, path12.join(target, name));
       }
     }
     for (const name of keystoreJsonFiles(src)) {
-      const a = fs12.readFileSync(path11.join(src, name));
-      const b = fs12.readFileSync(path11.join(target, name));
+      const a = fs13.readFileSync(path12.join(src, name));
+      const b = fs13.readFileSync(path12.join(target, name));
       if (!a.equals(b)) {
         throw new Error(`verification mismatch for ${name}`);
       }
@@ -3273,7 +3338,7 @@ function relocateKeys(src, target, label) {
     );
     return false;
   }
-  fs12.rmSync(src, { recursive: true, force: true });
+  fs13.rmSync(src, { recursive: true, force: true });
   printErr(
     `note: migrated ${label} ${src} -> ${target} (now outside the deploy codeLocation).`
   );
@@ -3290,8 +3355,8 @@ import { Option as Option2 } from "commander";
 import { parse as parseToml } from "smol-toml";
 
 // src/cli/_deploy/providers.ts
-import * as fs13 from "fs";
-import * as path12 from "path";
+import * as fs14 from "fs";
+import * as path13 from "path";
 import {
   findSubProjectRoot as findSubProjectRoot6,
   findWorkspaceRoot as findWorkspaceRoot4,
@@ -3334,8 +3399,8 @@ function text(value) {
 function descriptorName(workspaceRoot) {
   try {
     const data = JSON.parse(
-      fs13.readFileSync(
-        path12.join(workspaceRoot, "agentcore", "agentcore.json"),
+      fs14.readFileSync(
+        path13.join(workspaceRoot, "agentcore", "agentcore.json"),
         "utf-8"
       )
     );
@@ -3345,16 +3410,16 @@ function descriptorName(workspaceRoot) {
   }
 }
 function discoverRecordedDeployments(root) {
-  const workspaceRoot = findWorkspaceRoot4(root) ?? path12.resolve(root);
+  const workspaceRoot = findWorkspaceRoot4(root) ?? path13.resolve(root);
   const agentRoot2 = findSubProjectRoot6("agent", workspaceRoot);
   if (agentRoot2 === null) return [];
   let config;
   try {
-    config = loadStudioToml6(path12.join(agentRoot2, "studio.toml"));
+    config = loadStudioToml6(path13.join(agentRoot2, "studio.toml"));
   } catch {
     return [];
   }
-  const projectName2 = descriptorName(workspaceRoot) ?? text(tableOf3(config, "project").name) ?? path12.basename(workspaceRoot);
+  const projectName2 = descriptorName(workspaceRoot) ?? text(tableOf3(config, "project").name) ?? path13.basename(workspaceRoot);
   const deploy = tableOf3(config, "deploy");
   const platform = tableOf3(deploy, "platform");
   const azure = tableOf3(config, "azure");
@@ -3400,22 +3465,22 @@ function discoverRecordedDeployments(root) {
   return found;
 }
 function unavailableProvidersForProject(root) {
-  const workspaceRoot = findWorkspaceRoot4(root) ?? path12.resolve(root);
+  const workspaceRoot = findWorkspaceRoot4(root) ?? path13.resolve(root);
   const agentRoot2 = findSubProjectRoot6("agent", workspaceRoot);
   if (agentRoot2 === null) return {};
   let runtime = "agentcore";
   let azureProtocolUnsupported = false;
   try {
-    const cfg = loadStudioToml6(path12.join(agentRoot2, "studio.toml"));
+    const cfg = loadStudioToml6(path13.join(agentRoot2, "studio.toml"));
     runtime = text(tableOf3(cfg, "stack").runtime) ?? "agentcore";
     const faces = stackFaces(tableOf3(cfg, "stack"), tableOf3(cfg, "payments"));
-    azureProtocolUnsupported = !hasA2aFace(faces) || hasMcpFace(faces);
+    azureProtocolUnsupported = hasMcpFace(faces) || !hasA2aFace(faces) && !hasX402Face(faces);
   } catch {
     return {};
   }
   if (runtime === "azure-foundry") {
     const reason = "this project uses a different container adapter; scaffold an agentcore project before selecting this provider";
-    const azureProtocolReason = "Azure Foundry deploy currently supports A2A projects only; use an A2A azure-foundry scaffold or AgentCore for MCP";
+    const azureProtocolReason = "Azure Foundry deploy supports A2A and X402 seller projects; use AgentCore for MCP";
     return {
       aws: reason,
       ...azureProtocolUnsupported ? {
@@ -3501,38 +3566,6 @@ async function selectDeployProvider(opts) {
   return promptProvider(opts);
 }
 
-// src/cli/_packageMetadata.ts
-import * as fs14 from "fs";
-import * as path13 from "path";
-import { fileURLToPath as fileURLToPath2 } from "url";
-function packageRoot() {
-  let dir = path13.dirname(fileURLToPath2(import.meta.url));
-  for (; ; ) {
-    const packageJson = path13.join(dir, "package.json");
-    if (fs14.existsSync(packageJson)) return dir;
-    const parent = path13.dirname(dir);
-    if (parent === dir) {
-      throw new Error("cannot locate the studio-cli package root");
-    }
-    dir = parent;
-  }
-}
-function pnpmVersion() {
-  if ("10.24.0") {
-    return "10.24.0";
-  }
-  const file = path13.join(packageRoot(), "package.json");
-  const pkg = JSON.parse(fs14.readFileSync(file, "utf-8"));
-  const value = String(pkg.packageManager ?? "");
-  const match = /^pnpm@(.+)$/u.exec(value);
-  if (!match?.[1]) {
-    throw new Error(
-      `studio-cli packageManager must pin pnpm (expected "pnpm@<version>" in ${file})`
-    );
-  }
-  return match[1];
-}
-
 // src/cli/_runtime/azureFoundry.ts
 import * as crypto2 from "crypto";
 import * as fs18 from "fs";
@@ -4474,22 +4507,23 @@ var checkEntrypointAndDockerfile = async (root, _target) => {
   const findings = [];
   const cfg = loadStudioCfg(deployWorkspaceRoot(root));
   const faces = stackFaces(tableOf4(cfg, "stack"), tableOf4(cfg, "payments"));
-  if (!hasA2aFace(faces) || hasMcpFace(faces)) {
+  if (hasMcpFace(faces) || !hasA2aFace(faces) && !hasX402Face(faces)) {
     return [
       {
         level: "CRITICAL",
         name: "azure_protocol_supported",
-        message: "azure-foundry deploy currently supports protocol A2A only. The delegated Foundry version declares the invocations contract (:8088, /readiness, /invocations), not native MCP /mcp. Re-scaffold with --protocols A2A (optionally X402) or use AgentCore for MCP.",
+        message: "azure-foundry deploy supports the A2A carrier, including X402-only seller configs. The delegated Foundry version declares the invocations contract (:8088, /readiness, /invocations), not native MCP /mcp. Re-scaffold with --protocols A2A, X402, or A2A,X402; or use AgentCore for MCP.",
         details: { faces }
       }
     ];
   }
-  const entry = "src/foundryMain.ts";
+  const entryCandidates = ["src/unifiedMain.ts", "src/foundryMain.ts"];
+  const entry = entryCandidates.find((c2) => isFile6(path17.join(agentRoot2, c2))) ?? entryCandidates[0];
   if (!isFile6(path17.join(agentRoot2, entry))) {
     findings.push({
       level: "CRITICAL",
       name: "azure_agent_entrypoint",
-      message: `app/agent/${entry} is missing \u2014 the A2A Foundry entrypoint the container image runs. Re-scaffold with \`bag init \u2026 --runtime azure-foundry\`.`,
+      message: `app/agent/${entry} is missing \u2014 the A2A entrypoint the container image runs. Re-scaffold with \`bag init \u2026 --runtime azure-foundry\`.`,
       details: { entrypoint: entry }
     });
   }
@@ -4592,7 +4626,11 @@ import * as walletRt2 from "@bnbagent/studio-runtime/wallet";
 import { generateText } from "ai";
 
 // src/cli/_pieverseHelpers.ts
-import { fromRaw as fromRaw2, getNetwork as getNetwork3 } from "@bnbagent/studio-runtime/networks";
+import {
+  BSC_TESTNET_U_FAUCET_URL,
+  fromRaw as fromRaw2,
+  getNetwork as getNetwork3
+} from "@bnbagent/studio-runtime/networks";
 import {
   siweLogin
 } from "@bnbagent/studio-runtime/pieverse";
@@ -4645,9 +4683,7 @@ function printUBalanceShortfall(walletAddress, currentRaw, neededRaw, neededUsd,
       `  swap on PancakeSwap: https://pancakeswap.finance/swap?outputCurrency=${u.address}`
     );
   } else {
-    printErr(
-      "  testnet U faucet URL is TBD \u2014 see docs/guides/pieverse-integration.md \xA76"
-    );
+    printErr(`  testnet U faucet: ${BSC_TESTNET_U_FAUCET_URL}`);
   }
 }
 function writeEnvLocal(key, value, envPath = ".env.local") {
@@ -6436,6 +6472,7 @@ import {
   findProjectRoot as findProjectRoot3,
   loadStudioToml as loadStudioToml10
 } from "@bnbagent/studio-runtime/config";
+import { tbnbFaucetHint as tbnbFaucetHint2 } from "@bnbagent/studio-runtime/networks";
 import { buildPolicy, buildWallet } from "@bnbagent/studio-runtime/wallet";
 
 // src/cli/walletSession.ts
@@ -6453,8 +6490,8 @@ import {
 import { auditedOp as auditedOp2 } from "@bnbagent/studio-runtime/audit";
 import { loadStudioToml as loadStudioToml9 } from "@bnbagent/studio-runtime/config";
 import {
-  BSC_TESTNET_FAUCET_URLS,
   getNetwork as getNetwork5,
+  tbnbFaucetHint,
   toRaw as toRaw2
 } from "@bnbagent/studio-runtime/networks";
 import { writePrivate } from "@bnbagent/studio-runtime/secretWrite";
@@ -6524,7 +6561,7 @@ async function requireAltanaAdminGas(ctx) {
   }
   if (balance !== 0n) return;
   const symbol = ctx.networkName === "bsc-testnet" ? "tBNB" : "BNB";
-  const funding = ctx.networkName === "bsc-testnet" ? ` Fund it and retry. Testnet faucets: ${BSC_TESTNET_FAUCET_URLS.join(", ")}` : " Fund it with BNB and retry.";
+  const funding = ctx.networkName === "bsc-testnet" ? ` Fund it and retry \u2014 ${tbnbFaucetHint(ctx.address)}` : " Fund it with BNB and retry.";
   throw new Error(
     `Altana admin wallet ${ctx.address} has 0 ${symbol} on ${ctx.networkName} and cannot pay gas for session administration.${funding}`
   );
@@ -6986,6 +7023,14 @@ function projectNetwork(projectRoot) {
   const dflt = net2 !== null && typeof net2 === "object" ? net2.default : void 0;
   return dflt ? String(dflt) : "bsc-testnet";
 }
+function printNextAfterNew(projectRoot, address) {
+  const network = projectNetwork(projectRoot);
+  const fund = network === "bsc-testnet" ? `fund it (free, only needed for paid models / on-chain settle): ${tbnbFaucetHint2(address)}` : "fund it with BNB (gas) + U before selling paid work";
+  printErr(
+    `Next: ${fund}
+      then \`bag doctor\` to verify the project, \`bag dev\` to run it locally.`
+  );
+}
 function twakProvider(projectRoot, walletCfg) {
   return buildWallet(walletCfg, projectRoot, {
     network: projectNetwork(projectRoot)
@@ -7179,6 +7224,8 @@ async function cmdNew(opts) {
     printErr(
       "Altana admin keystore created. Fund this address with about 0.05 tBNB for testnet bootstrap/registration, then run `bag wallet session grant` to create the bounded runtime session."
     );
+  } else {
+    printNextAfterNew(projectRoot, provider.address);
   }
   return 0;
 }
@@ -7218,6 +7265,7 @@ Install it (Node >=22):  npm install -g @trustwallet/cli@${TWAK_CLI_VERSION}`
   const address = provider.address;
   printOut(address);
   persistAddress(projectRoot, address);
+  printNextAfterNew(projectRoot, address);
   return 0;
 }
 function ensureTwakCredentials(walletFile, homeDir) {
@@ -7950,6 +7998,44 @@ function enclosingProjectRoot(start) {
   }
 }
 async function cmdInit(nameArg, opts) {
+  const target = path23.resolve(process.cwd(), nameArg);
+  const targetPreexisted = fs24.existsSync(target);
+  const cleanupOnCancel = () => {
+    if (targetPreexisted || !fs24.existsSync(target)) {
+      printErr("cancelled: no project was created.");
+      return;
+    }
+    const walletsDir = path23.join(target, ".studio", "wallets");
+    const hasWallet = fs24.existsSync(walletsDir) && fs24.readdirSync(walletsDir).length > 0;
+    if (hasWallet) {
+      printErr(
+        `cancelled: ${target} is KEPT \u2014 it already contains a wallet keystore (.studio/wallets/). Finish setup there, or back the keystore up before removing the directory.`
+      );
+    } else {
+      fs24.rmSync(target, { recursive: true, force: true });
+      printErr(
+        `cancelled: removed the partially created ${target}; re-run \`bag init\` to start over.`
+      );
+    }
+  };
+  const onSigint = () => {
+    cleanupOnCancel();
+    process.exit(130);
+  };
+  process.once("SIGINT", onSigint);
+  try {
+    return await cmdInitFlow(nameArg, opts);
+  } catch (exc) {
+    if (exc instanceof Error && exc.name === "PromptCancelled") {
+      cleanupOnCancel();
+      return 130;
+    }
+    throw exc;
+  } finally {
+    process.removeListener("SIGINT", onSigint);
+  }
+}
+async function cmdInitFlow(nameArg, opts) {
   const target = path23.resolve(process.cwd(), nameArg);
   let projectName2 = path23.basename(target);
   if (!projectName2) {
@@ -7958,6 +8044,14 @@ async function cmdInit(nameArg, opts) {
     );
     return 2;
   }
+  if (opts.runtime === "agentcore" || opts.destination === "platform") {
+    try {
+      projectName2 = validateProjectName(projectName2);
+    } catch (exc) {
+      printErr(`error: ${exc instanceof Error ? exc.message : exc}`);
+      return 2;
+    }
+  }
   if (opts.protocols !== void 0 && opts.protocol !== void 0) {
     printErr("error: pass either --protocols or --protocol, not both.");
     return 2;
@@ -8048,7 +8142,9 @@ async function cmdInit(nameArg, opts) {
     return 2;
   }
   if (fs24.existsSync(target) && !opts.force) {
-    printErr(`error: ${target} already exists. Use --force to overwrite.`);
+    printErr(
+      `error: ${target} already exists (perhaps from an interrupted \`bag init\`). Re-run with --force to overwrite \u2014 this DELETES the whole directory, including any wallet keystore under its .studio/ \u2014 or pick another name.`
+    );
     return 2;
   }
   if (opts.destination === "platform" && opts.network === "bsc-mainnet") {
@@ -8072,13 +8168,20 @@ async function cmdInit(nameArg, opts) {
     destination = "self";
     runtime = "agentcore";
   }
-  if (destination === "self" && runtime === "azure-foundry" && (!hasA2aFace(faces) || hasMcpFace(faces))) {
+  if (destination === "self" && runtime === "azure-foundry" && (hasMcpFace(faces) || !hasA2aFace(faces) && !hasX402Face(faces))) {
     printErr(
-      "error: azure-foundry supports protocol A2A only as its native face (X402 is optional) and does not support an MCP face. Foundry is delegated through its invocations container contract (:8088, /readiness, /invocations), not the native MCP /mcp transport. Use --protocols A2A (optionally with X402), or use --runtime agentcore for MCP."
+      "error: azure-foundry supports the A2A carrier (including X402-only seller configs) and does not support an MCP face. Foundry is delegated through its invocations container contract (:8088, /readiness, /invocations), not the native MCP /mcp transport. Use --protocols A2A, X402, or A2A,X402; or use --runtime agentcore for MCP."
     );
     return 2;
   }
   if (fs24.existsSync(target)) {
+    const walletsDir = path23.join(target, ".studio", "wallets");
+    if (fs24.existsSync(walletsDir) && fs24.readdirSync(walletsDir).length > 0) {
+      printErr(
+        `error: refusing --force: ${walletsDir} contains a wallet keystore and overwriting would DELETE the key. Back the keystore up and remove the directory yourself, or init under a different name.`
+      );
+      return 2;
+    }
     fs24.rmSync(target, { recursive: true, force: true });
   }
   if (destination === "platform") {
@@ -8396,17 +8499,18 @@ function scaffold(target, name, o) {
   const isContainer = packaging === "container";
   const mode = recipeModeOf(o.faces);
   const stem2 = entryStemOf(o.faces);
-  const a2aEntry = o.runtime === "azure-foundry" ? "dist/foundryMain.js" : "dist/main.js";
   const runtimeCtx = {
     PKG: AGENT_SRC,
     TWAK_CLI_VERSION,
     PNPM_VERSION: packageManagerVersion,
     DEPLOYMENT_TYPE: isContainer ? "container" : "direct_code_deploy",
-    ENTRYPOINT: o.runtime === "azure-foundry" ? a2aEntry : `dist/${stem2}.js`,
-    // Foundry Hosted Agents have a provider-level container contract that is
-    // independent of Studio's local A2A/MCP ports: plain HTTP on :8088 plus
-    // GET /readiness and the declared protocol route.  The deploy host below
-    // declares invocations, so its image must always expose :8088.
+    // The A2A entrypoint (unifiedMain) is cloud-portable: it binds BOTH the
+    // AgentCore (9000) and Foundry (8088) contract ports itself, so the same
+    // rendered image deploys to either cloud — no runtime-specific entry.
+    ENTRYPOINT: `dist/${stem2}.js`,
+    // AGENT_PORT only prepends a primary override; the Foundry contract port
+    // stays reachable regardless. MCP keeps its 8000 contract; Foundry
+    // renders 8088 for continuity with the provider's documented default.
     CONTAINER_PORT: o.runtime === "azure-foundry" ? "8088" : String(devPortOf(o.faces))
   };
   emitRecipe(agentRoot2, "agent", { context: runtimeCtx });
@@ -8772,10 +8876,11 @@ function renderAgentStudioToml(name, o) {
 # Read by the Agent: it quotes the FIXED \`price\`, CLAMPS it to [min,max],
 # freezes a short-TTL offer, and EIP-191 signs it \u2014 pricing is rule-based, the
 # LLM never prices. price=0 is FREE and is supported by the canonical stack.
-currency = "${currencyAddr}"   # $U token address \u2014 prefilled from [network].default
-price = "${o.erc8183Price}"                    # token base units; 0 = FREE (zero token escrow)
+currency = "${currencyAddr}"   # $U token address \u2014 prefilled from [network].default; rarely changed
+# All prices are in wei of the currency token. U has 18 decimals (not 6 like USDC).
+price = "${o.erc8183Price}"                    # wei; 0 = FREE (zero token escrow)
 min_price = "0"                                # wei \u2014 clamp floor
-max_price = ""                                 # wei \u2014 clamp ceiling; SET before going live
+max_price = ""                                 # wei \u2014 clamp ceiling; empty = unbounded; SET before going live
 quote_ttl_seconds = 900                        # seconds a signed quote stays valid; SDK caps at 900 (~15min work window)
 default_estimated_completion_seconds = 600
 poll_interval_seconds = 30
@@ -8913,7 +9018,7 @@ function renderAgentReadme(name, faces, destination, walletKind2) {
   const port = String(devPortOf(faces));
   const x402Only = faces.length === 1 && hasX402Face(faces);
   const surface = mode === "both" ? "A2A natively on `0.0.0.0:9000` (agent card + JSON-RPC `message/send`) and buffered streamable-HTTP MCP on `/mcp` through the platform envelope tunnel" : mode === "mcp" ? "streamable-HTTP MCP on `0.0.0.0:8000/mcp` (negotiate + notify_funded sync-delivery + read-only chain tools)" : x402Only ? "only the public `/x402` seller face; AgentCore uses an internal A2A-native process on port 9000 but the gateway suppresses A2A discovery" : "`serveA2a`: the agent card at `/.well-known/agent-card.json` + JSON-RPC `message/send` on `0.0.0.0:9000`";
-  const filesA2a = `- \`src/main.ts\` \u2014 A2A serving entrypoint (\`serveA2a\` on port 9000).
+  const filesA2a = `- \`src/unifiedMain.ts\` \u2014 unified serving entrypoint (A2A on port 9000 + Foundry invocations on 8088).
 - \`src/executor.ts\` \u2014 the SellerAgentExecutor: the negotiate + notify_funded A2A skills.
 - \`src/agentCard.ts\` \u2014 the discoverable AgentCard (+ OAuth2/Cognito scheme).`;
   const filesMcp = `- \`src/mcpMain.ts\` \u2014 MCP serving entrypoint (streamable HTTP on \`/mcp\`; deploy
@@ -9063,10 +9168,23 @@ async function resolveWalletKind(flagValue, isTty) {
     );
     return "evm-local";
   }
-  const answer = (await promptUser(
-    "Wallet backend? [evm-local] local keystore / altana bounded session / twak Trust Wallet CLI: "
-  )).trim().toLowerCase();
-  return answer === "twak" || answer === "altana" ? answer : "evm-local";
+  printOut("Wallet backend (who holds the Agent's signer key):");
+  printOut(
+    "  1. evm-local  [default] \u2014 encrypted local keystore under .studio/; simplest, works everywhere"
+  );
+  printOut(
+    "  2. twak    \u2014 Trust Wallet CLI wallet; forces container packaging for deploys"
+  );
+  printOut(
+    "  3. altana  \u2014 bounded session signer; incompatible with pieverse-llm and paid b402 selling"
+  );
+  const answer = (await promptUser("Wallet backend [1-3, Enter = evm-local]: ")).trim().toLowerCase();
+  if (answer === "2" || answer === "twak") return "twak";
+  if (answer === "3" || answer === "altana") return "altana";
+  if (answer !== "" && answer !== "1" && answer !== "evm-local") {
+    printErr(`hint: unknown wallet backend '${answer}' \u2014 using evm-local.`);
+  }
+  return "evm-local";
 }
 async function resolveLlmProviderForWallet(walletKind2, configuredProvider, valueSource, isTty) {
   if (walletKind2 !== "altana") {
@@ -9249,12 +9367,22 @@ function readWalletAddress(studioToml) {
 async function printFaucetHint(network, address) {
   printOut("");
   if (network === "bsc-testnet") {
-    const { BSC_TESTNET_FAUCET_URLS: BSC_TESTNET_FAUCET_URLS5 } = await import("@bnbagent/studio-runtime/networks");
+    const {
+      BSC_TESTNET_TBNB_TELEGRAM_FAUCET: BSC_TESTNET_TBNB_TELEGRAM_FAUCET2,
+      BSC_TESTNET_FAUCET_DOCS_URL: BSC_TESTNET_FAUCET_DOCS_URL2,
+      BSC_TESTNET_U_FAUCET_URL: BSC_TESTNET_U_FAUCET_URL4
+    } = await import("@bnbagent/studio-runtime/networks");
     printOut(`Your testnet wallet address: ${address}`);
-    printOut("Fund it (free) from these faucets \u2014 paste the address above:");
-    for (const url of BSC_TESTNET_FAUCET_URLS5) {
-      printOut(`  \xB7 ${url}`);
-    }
+    printOut("Fund it (free):");
+    printOut(
+      `  tBNB \u2014 message the official Telegram bot ${BSC_TESTNET_TBNB_TELEGRAM_FAUCET2}`
+    );
+    printOut(
+      `         send: "I would like to get tBNB to my wallet ${address}"`
+    );
+    printOut("         (up to 0.3 tBNB per day; it replies with the tx hash)");
+    printOut(`         more ways to get tBNB: ${BSC_TESTNET_FAUCET_DOCS_URL2}`);
+    printOut(`  $U   \u2014 ${BSC_TESTNET_U_FAUCET_URL4}`);
     printOut("(Faucets are needed only for paid models / on-chain settle.");
     printOut(" The default `auto/free` LLM model and AgentCore deploy");
     printOut(" do NOT require any funds.)");
@@ -9618,18 +9746,26 @@ function printMainTwakWalletWarning() {
   );
 }
 async function onboardIpfsKey(envPath, ipfsKey) {
+  const url = (await promptUser(
+    "\nIPFS pinning-service UPLOAD ENDPOINT for deliverable storage \u2014 REQUIRED before `bag deploy` (e.g. your provider's pin/upload URL or a self-hosted node's /api/v0/add; blank to fill STORAGE_API_URL later): "
+  )).trim();
+  if (url) {
+    setEnvVar(envPath, "STORAGE_API_URL", url);
+    printOut("\u2713 STORAGE_API_URL written to .studio/.env.local");
+  }
   let key = ipfsKey;
   if (key === void 0) {
     key = (await promptUser(
-      "\nIPFS pinning-service write key/JWT for deliverable storage (blank to skip, fill STORAGE_API_KEY later): "
+      "IPFS pinning-service write key/JWT (blank to skip, fill STORAGE_API_KEY later): "
     )).trim();
   }
   if (key) {
     setEnvVar(envPath, "STORAGE_API_KEY", key);
     printOut("\u2713 STORAGE_API_KEY written to .studio/.env.local");
-  } else {
+  }
+  if (!url || !key) {
     printErr(
-      "hint: set STORAGE_API_URL (your pinning service's upload endpoint) and STORAGE_API_KEY (its write key/JWT)\n      in .studio/.env.local before `bag dev`, or re-scaffold with --storage-provider local for offline dev."
+      "hint: set STORAGE_API_URL (your pinning service's upload endpoint) and STORAGE_API_KEY (its write key/JWT)\n      in .studio/.env.local before `bag dev`, or re-scaffold with --storage-provider local for offline dev.\n      `bag deploy prepare` blocks (CRITICAL) until STORAGE_API_URL is set."
     );
   }
 }
@@ -9651,7 +9787,7 @@ function printCampaignIntro() {
   );
 }
 function printTwakNotice(destination = "self") {
-  const deployLine = destination === "platform" ? " \xB7 DEPLOY (managed platform): builds + pushes the arm64 twak image\n   (Node + the twak CLI) FROM YOUR MACHINE \u2014 local Docker is\n   REQUIRED (no CodeBuild fallback on this path); start Docker Desktop." : " \xB7 RUN/DEPLOY: local `bag dev` runs the agent IN-PROCESS by default\n   (`tsx src/main.ts`, no Docker); `bag dev --container` runs it via\n   `agentcore dev` in Docker for image parity. DEPLOY builds the twak\n   container image (Node + the twak CLI) via AWS CodeBuild \u2014\n   Docker is optional locally. `bag init` already configured\n   build=Container + a Dockerfile.";
+  const deployLine = destination === "platform" ? " \xB7 DEPLOY (managed platform): builds + pushes the arm64 twak image\n   (Node + the twak CLI) FROM YOUR MACHINE \u2014 local Docker is\n   REQUIRED (no CodeBuild fallback on this path); start Docker Desktop." : " \xB7 RUN/DEPLOY: local `bag dev` runs the agent IN-PROCESS by default\n   (`tsx src/unifiedMain.ts`, no Docker); `bag dev --container` runs it via\n   `agentcore dev` in Docker for image parity. DEPLOY builds the twak\n   container image (Node + the twak CLI) via AWS CodeBuild \u2014\n   Docker is optional locally. `bag init` already configured\n   build=Container + a Dockerfile.";
   printOut(
     `
 NOTE \u2014 wallet.kind = "twak" (Trust Wallet Agent Kit, CLI >= ${TWAK_CLI_VERSION}):
@@ -9758,9 +9894,9 @@ function entrypointHint(faces) {
     return "app/agent/src/mcpMain.ts  = MCP entrypoint (build your value here)";
   }
   if (faces.length === 1 && hasX402Face(faces)) {
-    return "app/agent/src/main.ts  = X402-only runtime entrypoint (build your value here)";
+    return "app/agent/src/unifiedMain.ts  = X402-only runtime entrypoint (build your value here)";
   }
-  return "app/agent/src/main.ts + executor.ts  = A2A entrypoint (build your value here)";
+  return "app/agent/src/unifiedMain.ts + executor.ts  = A2A entrypoint (build your value here)";
 }
 function hasVendoredTarballs(agentDir) {
   const vendor = path23.join(agentDir, "vendor");
@@ -9808,18 +9944,17 @@ function printCompactNextSteps(name, o = {}) {
       "  pnpm install               # one-time: install the agent dependencies"
     );
   }
+  printOut("  bag doctor             # verify config + env before funding");
+  printOut("  bag dev                # run the Agent locally");
   if (destination === "platform") {
-    printOut("  bag dev                # run the Agent locally");
     printOut(
       "  bag deploy --provider bnb  # Agent \u2192 managed platform (48h testnet trial)"
     );
   } else if (runtime === "azure-foundry") {
-    printOut("  bag dev                # run the Agent locally");
     printOut(
       "  bag deploy --provider azure   # Agent \u2192 Azure AI Foundry (delegated to bnbagent-deploy; browser login, no azd)"
     );
   } else {
-    printOut("  agentcore dev          # run the Agent locally on AgentCore");
     printOut("  bag deploy --provider aws  # Agent \u2192 AgentCore");
   }
   printOut("");
@@ -9949,19 +10084,7 @@ function printNextSteps(name, provider, o = {}) {
     printOut("  #    is `auto/free` (Free) \u2014 no funding required to start.");
     printOut("  bag llm activate");
     printOut("");
-    printOut(
-      "  # 4. (optional) fund the wallet \u2014 only when you need paid model / deploy / publish:"
-    );
-    printOut(
-      "  #    testnet:  send testnet BNB (gas) + testnet U to the address above"
-    );
-    printOut("  #    mainnet:  swap a small amount via PancakeSwap:");
-    printOut(
-      "  #              https://pancakeswap.finance/swap?outputCurrency=0xcE24439F2D9C6a2289F741120FE202248B666666"
-    );
-    printOut("  #    Then: bag llm topup --amount N   (allocate paid credits)");
-    printOut("");
-    nextStep = 5;
+    nextStep = 4;
   } else {
     const keyEnv = PROVIDER_KEY_ENV[provider];
     if (keyEnv) {
@@ -9973,6 +10096,26 @@ function printNextSteps(name, provider, o = {}) {
     }
     nextStep = 4;
   }
+  printOut(`  # ${nextStep}. verify + run the agent locally (no funds needed)`);
+  printOut("  bag doctor   # diagnose config + env; fix FAILs before deploy");
+  printOut("  bag dev      # serve the Agent locally for a smoke test");
+  nextStep += 1;
+  if (provider === "pieverse-llm") {
+    printOut("");
+    printOut(
+      `  # ${nextStep}. (optional) fund the wallet \u2014 only when you need paid model / deploy / publish:`
+    );
+    printOut(
+      "  #    testnet:  send testnet BNB (gas) + testnet U to the address above"
+    );
+    printOut("  #    mainnet:  swap a small amount via PancakeSwap:");
+    printOut(
+      "  #              https://pancakeswap.finance/swap?outputCurrency=0xcE24439F2D9C6a2289F741120FE202248B666666"
+    );
+    printOut("  #    Then: bag llm topup --amount N   (allocate paid credits)");
+    nextStep += 1;
+  }
+  printOut("");
   printOut(
     `  # ${nextStep}. review ERC-8183 pricing in studio.toml [payments.erc8183]`
   );
@@ -9980,10 +10123,6 @@ function printNextSteps(name, provider, o = {}) {
     "  #    (price was selected at init; `bag config set payments.erc8183.price 0` explicitly switches to FREE)"
   );
   nextStep += 1;
-  printOut(`  # ${nextStep}. verify + run the agent locally`);
-  printOut("  bag doctor");
-  printOut("  bag dev");
-  nextStep += 1;
   if (destination === "platform") {
     printOut(
       `  # ${nextStep}. deploy: app/agent \u2192 managed platform (48h testnet trial)`
@@ -10284,6 +10423,11 @@ function runtimeEnvKeysCore(cfg, resolvable) {
   if (resolvable("RPC_URL")) {
     keys.push("RPC_URL");
   }
+  const runtimeName = String(tableOf8(cfg, "stack").runtime ?? "agentcore");
+  const publicUrlKeys = runtimeName === "azure-foundry" ? ["BNBAGENT_PUBLIC_URL"] : ["BNBAGENT_PUBLIC_URL", "AGENT_PUBLIC_URL"];
+  for (const key of publicUrlKeys) {
+    if (resolvable(key)) keys.push(key);
+  }
   for (const key of PAYMASTER_URL_ENV_KEYS) {
     if (resolvable(key)) keys.push(key);
   }
@@ -10292,8 +10436,7 @@ function runtimeEnvKeysCore(cfg, resolvable) {
       if (resolvable(key)) keys.push(key);
     }
   }
-  const runtime = String(tableOf8(cfg, "stack").runtime ?? "agentcore");
-  if (runtime === "agentcore" && x402SellerUsesB402(cfg)) {
+  if (X402_CAPABLE_RUNTIMES.has(runtimeName) && x402SellerUsesB402(cfg)) {
     for (const key of B402_RUNTIME_KEYS) {
       if (resolvable(key)) keys.push(key);
     }
@@ -10399,8 +10542,12 @@ function agentFaces(workspaceRoot) {
   const cfg = loadAgentToml2(workspaceRoot);
   return stackFaces(tableOf9(cfg, "stack"), tableOf9(cfg, "payments"));
 }
-function localEntryFile(faces) {
-  return `src/${entryStemOf(faces)}.ts`;
+function localEntryFile(faces, agentDir) {
+  const stem2 = entryStemOf(faces);
+  const candidates = [stem2, ...LEGACY_ENTRY_STEMS[stem2]].map(
+    (s) => `src/${s}.ts`
+  );
+  return candidates.find((c2) => isFile10(path24.join(agentDir, c2))) ?? candidates[0];
 }
 function defaultAgentPort(faces) {
   return devPortOf(faces);
@@ -10772,11 +10919,11 @@ async function cmdDev(opts) {
   const agentPort = opts.port ?? defaultAgentPort(faces);
   const runtime = agentRuntime(workspaceRoot);
   const container = Boolean(opts.container);
-  const entryFile = localEntryFile(faces);
+  const entryFile = localEntryFile(faces, agentDir);
   const agentFile = path24.join(agentDir, entryFile);
   if (!isFile10(agentFile)) {
     printErr(
-      `error: Agent entrypoint file ${agentFile} does not exist. [stack] faces = [${faces.join(", ")}], so the entrypoint is ${entryFile} (A2A/X402-only \u2192 src/main.ts, MCP \u2192 src/mcpMain.ts, A2A+MCP \u2192 src/dualMain.ts). Run \`bag init\` to scaffold the workspace.`
+      `error: Agent entrypoint file ${agentFile} does not exist. [stack] faces = [${faces.join(", ")}], so the entrypoint is ${entryFile} (A2A/X402-only \u2192 src/unifiedMain.ts, MCP \u2192 src/mcpMain.ts, A2A+MCP \u2192 src/dualMain.ts; legacy src/main.ts scaffolds still run). Run \`bag init\` to scaffold the workspace.`
     );
     return 2;
   }
@@ -10915,7 +11062,7 @@ Switch to Node \u226522 so it wins on PATH, then reopen the shell and retry. Ver
     printOut(
       `bag dev: starting Agent in-process (\`tsx ${args.join(" ")}\` on :${agentPort}, no Docker \u2014 the entrypoint self-serves; cwd=${agentDir}, runner=${runner2})`
     );
-    if (runtime === RUNTIME_AZURE_FOUNDRY) {
+    if (runtime === RUNTIME_AZURE_FOUNDRY && isFile10(path24.join(agentDir, "src/foundryMain.ts"))) {
       printOut(
         "bag dev: azure-foundry serves this local A2A/MCP entrypoint in-process; src/foundryMain.ts is the deploy-only Foundry host (the entrypoint `bag doctor` reports) and never runs here."
       );
@@ -11088,7 +11235,10 @@ async function checkAgentPackagePresent(root, target) {
   const cfg = loadAgentToml(root);
   const faces = stackFaces(tableOf2(cfg, "stack"), tableOf2(cfg, "payments"));
   const stem2 = entryStemOf(faces);
-  const sourceEntries = [`src/${stem2}.ts`];
+  const effectiveStem = [stem2, ...LEGACY_ENTRY_STEMS[stem2]].find(
+    (s) => isFile11(path25.join(agentRoot2, `src/${s}.ts`))
+  ) ?? stem2;
+  const sourceEntries = [`src/${effectiveStem}.ts`];
   if (stem2 === "dualMain") {
     sourceEntries.push("src/mcpMain.ts");
   }
@@ -11106,7 +11256,7 @@ async function checkAgentPackagePresent(root, target) {
       }
     ];
   }
-  const distEntries = [`dist/${stem2}.js`];
+  const distEntries = [`dist/${effectiveStem}.js`];
   if (stem2 === "dualMain") {
     distEntries.push("dist/mcpMain.js");
   }
@@ -11586,12 +11736,12 @@ function x402SellerRailChecks(agentRoot2, cfg, target) {
   }
   const destination = String(tableOf2(cfg, "deploy").destination ?? "self");
   const stackRuntime2 = String(tableOf2(cfg, "stack").runtime ?? "agentcore");
-  if (rails.x402 && (free || credentials.complete) && destination !== "platform" && (target !== "agentcore" || stackRuntime2 !== "agentcore")) {
-    const blocking = target !== "agentcore" ? target : stackRuntime2;
+  if (rails.x402 && (free || credentials.complete) && !target.startsWith("platform") && !(X402_CAPABLE_RUNTIMES.has(target) && X402_CAPABLE_RUNTIMES.has(stackRuntime2))) {
+    const blocking = !X402_CAPABLE_RUNTIMES.has(target) ? target : stackRuntime2;
     out.push({
       level: Level.WARNING,
       name: "x402_forced_dormant_runtime",
-      message: `x402 pricing is ready, but the ${blocking} runtime has no x402 path; this target is forced dormant. Deploy to AgentCore (managed platform or self-hosted) to activate the rail.`,
+      message: `x402 pricing is ready, but the ${blocking} runtime has no x402 path; this target is forced dormant. Deploy to AgentCore or Azure Foundry (managed platform or self-hosted) to activate the rail.`,
       details: { destination, target, stackRuntime: stackRuntime2 }
     });
   }
@@ -11642,7 +11792,7 @@ async function checkCommerceReady(root, target) {
   return out;
 }
 async function checkDeployCliRunnable(_root, target) {
-  if (target !== "agentcore") {
+  if (target !== "agentcore" && target !== "platform" && target !== "platform-azure") {
     return [];
   }
   const override = (process.env.BNBAGENT_DEPLOY_COMMAND ?? "").trim();
@@ -13048,7 +13198,11 @@ import {
   findSubProjectRoot as findSubProjectRoot13,
   loadStudioToml as loadStudioToml17
 } from "@bnbagent/studio-runtime/config";
-import { BSC_TESTNET_FAUCET_URLS as BSC_TESTNET_FAUCET_URLS2 } from "@bnbagent/studio-runtime/networks";
+import {
+  BSC_TESTNET_FAUCET_DOCS_URL,
+  BSC_TESTNET_TBNB_TELEGRAM_FAUCET,
+  BSC_TESTNET_U_FAUCET_URL as BSC_TESTNET_U_FAUCET_URL2
+} from "@bnbagent/studio-runtime/networks";
 
 // src/cli/_deploy/checks/warning.ts
 import * as crypto4 from "crypto";
@@ -13358,7 +13512,10 @@ var checkPlatformEntrypointPresent = async (root, _target) => {
   const data = loadAgent(root);
   const faces = stackFaces(tableOf11(data, "stack"), tableOf11(data, "payments"));
   const stem2 = entryStemOf(faces);
-  const filenames = [`${stem2}.ts`];
+  const effectiveStem = [stem2, ...LEGACY_ENTRY_STEMS[stem2]].find(
+    (s) => fs35.existsSync(path34.join(agentRoot(root), "src", `${s}.ts`))
+  ) ?? stem2;
+  const filenames = [`${effectiveStem}.ts`];
   if (stem2 === "dualMain") filenames.push("mcpMain.ts");
   const filename = filenames.find(
     (candidate) => !fs35.existsSync(path34.join(agentRoot(root), "src", candidate))
@@ -13522,8 +13679,14 @@ var checkPlatformFundingHint = async (_root, _target) => [
   {
     level: Level.INFO,
     name: "platform_funding_hint",
-    message: `testnet trial \u2014 keep a little tBNB for gas and testnet $U for commerce. Faucets: ${BSC_TESTNET_FAUCET_URLS2.join(" \xB7 ")}`,
-    details: { faucets: [...BSC_TESTNET_FAUCET_URLS2] }
+    message: `testnet trial \u2014 keep a little tBNB for gas and testnet $U for commerce. tBNB: message ${BSC_TESTNET_TBNB_TELEGRAM_FAUCET} (more options: ${BSC_TESTNET_FAUCET_DOCS_URL}) \xB7 $U: ${BSC_TESTNET_U_FAUCET_URL2}`,
+    details: {
+      faucets: [
+        BSC_TESTNET_TBNB_TELEGRAM_FAUCET,
+        BSC_TESTNET_FAUCET_DOCS_URL,
+        BSC_TESTNET_U_FAUCET_URL2
+      ]
+    }
   }
 ];
 var criticalChecks = [
@@ -13532,6 +13695,7 @@ var criticalChecks = [
   checkPlatformTestnetOnly,
   checkPlatformSlugValid,
   checkPlatformLoggedIn,
+  checkDeployCliRunnable,
   checkPlatformDockerAvailable,
   checkPlatformStorageEndpoint,
   checkTwakCustomContractsUnsupported,
@@ -14294,7 +14458,7 @@ async function platformAgent(opts) {
   const root = opts.root;
   const backend = opts.backend ?? "aws";
   const isTty = opts.isTty ?? stdinIsTty;
-  const ask = opts.promptUser ?? promptUser;
+  const ask2 = opts.promptUser ?? promptUser;
   warn(
     `note: deploying to the BNB Chain managed platform (backend=${backend}) \u2014 a 48h TESTNET trial sandbox (network is forced to bsc-testnet; the runtime is auto-reclaimed at 48h). Not a production seller.`
   );
@@ -14303,12 +14467,6 @@ async function platformAgent(opts) {
     const cfg2 = loadAgentCfg(root);
     const faces2 = stackFaces(tableOf12(cfg2, "stack"), tableOf12(cfg2, "payments"));
     const protocol2 = nativeProtocolOf(faces2);
-    if (hasX402Face(faces2)) {
-      warn(
-        "error: x402 publication is not supported on the managed Azure backend. No build or upload was started."
-      );
-      return 1;
-    }
     const runtimeProfile = protocol2 === "A2A" ? "foundry-responses-v1" : "foundry-invocations-v1";
     const capability = await platformCmd(["capabilities"], { json: true });
     const platform = isJsonObject(capability.data.platform) ? capability.data.platform : {};
@@ -14322,6 +14480,12 @@ async function platformAgent(opts) {
       );
       return capability.code || 1;
     }
+    if (hasX402Face(faces2) && azure.x402 !== true) {
+      warn(
+        "error: this platform deployment does not accept x402 publication on the managed Azure backend yet. No build or upload was started. Deploy without the X402 face, or self-host the x402 gateway (`bag deploy --provider azure` + docs/guides/self-hosted-x402-gateway-azure.md)."
+      );
+      return 1;
+    }
   }
   const campaignProbe = opts.campaignActive ?? (async () => null);
   const trialRes = await platformCmd(["trial"], { json: true });
@@ -14350,7 +14514,7 @@ async function platformAgent(opts) {
     const rc = await termsConsentGate(root, {
       acceptRisk: opts.acceptRisk ?? false,
       isTty,
-      promptUser: ask
+      promptUser: ask2
     });
     if (rc !== null) {
       return rc;
@@ -14361,7 +14525,7 @@ async function platformAgent(opts) {
     const confirm = opts.confirmPackaging ?? ((r, p) => confirmPackagingDefault(r, p, {
       acceptRisk: opts.acceptRisk ?? false,
       isTty,
-      promptUser: ask
+      promptUser: ask2
     }));
     const rc = await confirm(root, packaging);
     if (rc !== null && rc !== 0) {
@@ -16847,12 +17011,13 @@ import { pieverseKeyHash as pieverseKeyHash4 } from "@bnbagent/studio-runtime/ll
 import {
   BSC_MAINNET_MIN_BNB,
   BSC_MAINNET_MIN_U,
-  BSC_TESTNET_FAUCET_URLS as BSC_TESTNET_FAUCET_URLS3,
   BSC_TESTNET_MIN_BNB,
   BSC_TESTNET_MIN_U,
+  BSC_TESTNET_U_FAUCET_URL as BSC_TESTNET_U_FAUCET_URL3,
   ERC8183_SUBMIT_GAS_RESERVE_BNB,
   fromRaw as fromRaw3,
-  getNetwork as getNetwork9
+  getNetwork as getNetwork9,
+  tbnbFaucetHint as tbnbFaucetHint3
 } from "@bnbagent/studio-runtime/networks";
 import { listModels as listModels2 } from "@bnbagent/studio-runtime/pieverse";
 import * as walletRt5 from "@bnbagent/studio-runtime/wallet";
@@ -16957,6 +17122,9 @@ async function cmdDoctor(opts) {
   checks.push(...await check8004(projectRoot, data, opts.network));
   const destination = String(tableOf14(data, "deploy").destination ?? "self").trim().toLowerCase();
   checks.push(...await checkDeployTools(data, destination));
+  checks.push(
+    ...await checkPlatformZipBundle(data, destination, projectRoot)
+  );
   checks.push(...checkAgentsMdSkillTrigger(projectRoot));
   printChecks(checks);
   return checks.some((c2) => c2.status === FAIL) ? 1 : 0;
@@ -17039,16 +17207,12 @@ function checkAppMain(projectRootArg2) {
     }
   }
   const stack = tableOf14(config, "stack");
+  const faces = stackFaces(stack, tableOf14(config, "payments"));
+  const stem2 = entryStemOf(faces);
   const runtime = String(stack.runtime ?? "").toLowerCase();
-  let entrypoint;
-  if (runtime === "azure-foundry") {
-    entrypoint = "src/foundryMain.ts";
-  } else if (runtime === "agentcore") {
-    const faces = stackFaces(stack, tableOf14(config, "payments"));
-    entrypoint = `src/${entryStemOf(faces)}.ts`;
-  } else {
-    entrypoint = "src/main.ts";
-  }
+  const legacyStems = runtime === "azure-foundry" && stem2 === "unifiedMain" ? ["foundryMain", "main"] : LEGACY_ENTRY_STEMS[stem2];
+  const candidates = [stem2, ...legacyStems].map((s) => `src/${s}.ts`);
+  const entrypoint = candidates.find((c2) => isFile17(path39.join(agentDir, c2))) ?? candidates[0];
   const entryFile = path39.join(agentDir, entrypoint);
   if (!isFile17(entryFile)) {
     return [
@@ -17059,7 +17223,7 @@ function checkAppMain(projectRootArg2) {
       }
     ];
   }
-  const detail = runtime === "azure-foundry" ? `${entrypoint} (deploy entrypoint; \`bag dev\` serves src/main.ts or src/mcpMain.ts locally)` : entrypoint;
+  const detail = entrypoint === "src/foundryMain.ts" ? `${entrypoint} (deploy entrypoint; \`bag dev\` serves src/main.ts or src/mcpMain.ts locally)` : entrypoint;
   return [{ name: "agent entrypoint", status: PASS, detail }];
 }
 function checkAgentcoreName(projectRoot) {
@@ -17837,7 +18001,8 @@ async function checkBalances(projectRoot, data, networkOverride) {
     const isMainnet = name === "bsc-mainnet";
     const minBnb = isTestnet ? BSC_TESTNET_MIN_BNB : isMainnet ? BSC_MAINNET_MIN_BNB : 0;
     const minBnbWei = BigInt(Math.round(minBnb * 1e6)) * 10n ** 12n;
-    const faucetHint = isTestnet ? ` \u2014 faucets: ${BSC_TESTNET_FAUCET_URLS3.join(", ")}` : "";
+    const bnbFaucetHint = isTestnet ? ` \u2014 ${tbnbFaucetHint3(address)}` : "";
+    const uFaucetHint = isTestnet ? ` \u2014 $U faucet: ${BSC_TESTNET_U_FAUCET_URL3}` : "";
     const bnbRaw = await readNativeBalanceRaw(address, name);
     const reserve = ERC8183_SUBMIT_GAS_RESERVE_BNB;
     const reserveHint = ` (each on-chain action reserves \u2248 ${reserve} BNB worst-case)`;
@@ -17858,7 +18023,7 @@ async function checkBalances(projectRoot, data, networkOverride) {
       out.push({
         name: "wallet BNB balance",
         status: WARN,
-        detail: `${bnbRaw} wei @ ${address} \u2014 need \u2265 ${minBnb} BNB on ${name} for 8183 escrow / ERC-8004 register${reserveHint}${faucetHint}`
+        detail: `${bnbRaw} wei @ ${address} \u2014 need \u2265 ${minBnb} BNB on ${name} for 8183 escrow / ERC-8004 register${reserveHint}${bnbFaucetHint}`
       });
     }
     const uToken = net2.tokens.U;
@@ -17884,7 +18049,7 @@ async function checkBalances(projectRoot, data, networkOverride) {
       out.push({
         name: "wallet U balance",
         status: WARN,
-        detail: `${uRaw} raw @ ${address} \u2014 need \u2265 ${minU} U on ${name} for one auto-topup chunk${faucetHint}`
+        detail: `${uRaw} raw @ ${address} \u2014 need \u2265 ${minU} U on ${name} for one auto-topup chunk${uFaucetHint}`
       });
     }
     return out;
@@ -18033,11 +18198,7 @@ async function checkDeployTools(data, destination) {
   });
   if (destination === "platform") {
     const out = [
-      {
-        name: "deploy: bnbagent-deploy",
-        status: INFO,
-        detail: "[deploy].destination='platform' also delegates to bnbagent-deploy (bunx); `bag deploy prepare` verifies it."
-      },
+      emit2(await checkBunx()),
       {
         name: "deploy: AWS credentials",
         status: INFO,
@@ -18067,6 +18228,49 @@ async function checkDeployTools(data, destination) {
   }
   return (await deployChecks()).map(emit2);
 }
+async function checkPlatformZipBundle(data, destination, projectRootArg2) {
+  if (destination !== "platform" || platformPackagingRequiresContainer(data)) {
+    return [];
+  }
+  let projectRoot = projectRootArg2;
+  const parent = path39.dirname(projectRoot);
+  if (isFile17(path39.join(parent, "agent", "studio.toml"))) {
+    projectRoot = parent;
+  }
+  const agentDir = path39.join(projectRoot, "agent");
+  if (!isFile17(path39.join(agentDir, "studio.toml"))) {
+    return [];
+  }
+  if (!fs39.existsSync(path39.join(agentDir, "node_modules"))) {
+    return [
+      {
+        name: "deploy: zip bundle",
+        status: INFO,
+        detail: "skipped \u2014 dependencies not installed yet (run `pnpm install`); re-run `bag doctor` to dry-run the zip bundle."
+      }
+    ];
+  }
+  const stack = tableOf14(data, "stack");
+  const faces = stackFaces(stack, tableOf14(data, "payments"));
+  try {
+    await dryRunBundle(agentDir, { protocols: faces });
+  } catch (exc) {
+    return [
+      {
+        name: "deploy: zip bundle",
+        status: WARN,
+        detail: errMsg3(exc)
+      }
+    ];
+  }
+  return [
+    {
+      name: "deploy: zip bundle",
+      status: PASS,
+      detail: "esbuild dry run OK \u2014 the agent bundles for the platform ZIP runtime."
+    }
+  ];
+}
 function checkAgentsMdSkillTrigger(projectRoot) {
   const ws = findStudioWorkspaceRoot4(projectRoot);
   if (ws === null) {
@@ -18245,9 +18449,9 @@ import {
   updateServiceEndpoint as updateServiceEndpoint2
 } from "@bnbagent/studio-runtime/erc8004";
 import {
-  BSC_TESTNET_FAUCET_URLS as BSC_TESTNET_FAUCET_URLS4,
   fromRaw as fromRaw4,
-  getNetwork as getNetwork10
+  getNetwork as getNetwork10,
+  tbnbFaucetHint as tbnbFaucetHint4
 } from "@bnbagent/studio-runtime/networks";
 import * as walletRt6 from "@bnbagent/studio-runtime/wallet";
 import { Option as Option5 } from "commander";
@@ -18409,8 +18613,7 @@ async function precheckRegisterGas(wallet, network) {
   if (balance >= REGISTER_MIN_BNB) {
     return null;
   }
-  const faucet = BSC_TESTNET_FAUCET_URLS4[0];
-  return `ERC-8004 register needs gas to broadcast, but ${wallet.address} holds only ${balance} BNB on ${network} (need ~${REGISTER_MIN_BNB}). Fund a little tBNB and retry. Faucet: ${faucet}`;
+  return `ERC-8004 register needs gas to broadcast, but ${wallet.address} holds only ${balance} BNB on ${network} (need ~${REGISTER_MIN_BNB}). Fund a little tBNB and retry \u2014 ${tbnbFaucetHint4(wallet.address)}`;
 }
 function syncAgentRegistry(agentId, op) {
   try {
@@ -19360,7 +19563,7 @@ async function promptInstallScope() {
 }
 function printNextSteps2() {
   printOut(
-    "\nNext: `bag init my-agent` to scaffold a single seller agent project.\nIn your IDE, type /bnbagent-studio to drive any studio task \u2014 the one\ninstalled skill routes everything (its playbooks load on demand).\nSee `bag --help` for the full command surface, or https://github.com/bnb-chain/bnbagent-studio for docs."
+    "\nNext: `bag init myagent` to scaffold a single seller agent project.\nIn your IDE, type /bnbagent-studio to drive any studio task \u2014 the one\ninstalled skill routes everything (its playbooks load on demand).\nSee `bag --help` for the full command surface, or https://github.com/bnb-chain/bnbagent-studio for docs."
   );
 }
 async function installInteractive(flags) {
@@ -21042,7 +21245,7 @@ function buildProgram() {
   return program;
 }
 function cliVersion() {
-  return "0.0.8";
+  return studioCliVersion();
 }
 
 // src/cli/updateCheck.ts
@@ -21169,6 +21372,10 @@ async function main(argv) {
     if (err instanceof CliExit) {
       return err.code;
     }
+    if (err instanceof Error && err.name === "PromptCancelled") {
+      process.stderr.write("cancelled.\n");
+      return 130;
+    }
     if (isCommanderExit(err)) {
       return err.exitCode;
     }