@orchagent/cli 0.3.101 → 0.3.102

package/dist/commands/init.js

@@ -58,7 +58,7 @@ Reads JSON input from stdin, processes it, and writes JSON output to stdout.
 This is the standard orchagent tool protocol.
 
 Usage:
-  echo '{"input": "hello"}' | python main.py
+  echo '{"input": "hello"}' | python3 main.py
 """
 
 import json
@@ -136,7 +136,7 @@ IMPORTANT: Port 8080 is reserved by the platform health server.
            Use a different port (default: 3000).
 
 Local development:
-  python main.py
+  python3 main.py
 """
 
 import json
@@ -405,7 +405,7 @@ orchagent fan-out orchestrator.
 Calls multiple agents in parallel, combines their results.
 
 Usage:
-  echo '{"task": "analyze this"}' | python main.py
+  echo '{"task": "analyze this"}' | python3 main.py
 """
 
 import asyncio
@@ -497,7 +497,7 @@ orchagent pipeline orchestrator.
 Calls agents sequentially — each step's output feeds into the next.
 
 Usage:
-  echo '{"task": "process this data"}' | python main.py
+  echo '{"task": "process this data"}' | python3 main.py
 """
 
 import asyncio
@@ -584,7 +584,7 @@ orchagent map-reduce orchestrator.
 Splits input into chunks, processes each in parallel (map), then aggregates (reduce).
 
 Usage:
-  echo '{"items": ["item1", "item2", "item3"]}' | python main.py
+  echo '{"items": ["item1", "item2", "item3"]}' | python3 main.py
 """
 
 import asyncio
@@ -803,7 +803,7 @@ At least one platform token is required.
 
 \`\`\`sh
 pip install -r requirements.txt
-python main.py
+python3 main.py
 \`\`\`
 
 ### 5. Deploy
@@ -848,7 +848,7 @@ cp .env.example .env
 # Fill in DISCORD_BOT_TOKEN, ANTHROPIC_API_KEY, DISCORD_CHANNEL_IDS
 
 pip install -r requirements.txt
-python main.py
+python3 main.py
 \`\`\`
 
 ### 4. Deploy
@@ -1068,7 +1068,7 @@ Reads JSON input from stdin, processes the task, and writes JSON output to stdou
 This is a code-runtime agent — you control the logic and can call any LLM provider.
 
 Usage:
-  echo '{"task": "summarize this text"}' | python main.py
+  echo '{"task": "summarize this text"}' | python3 main.py
 """
 
 import json
@@ -1203,7 +1203,7 @@ Reads JSON input from stdin, calls dependency agents via the orchagent SDK,
 and writes JSON output to stdout.
 
 Usage:
-  echo '{"task": "do something"}' | python main.py
+  echo '{"task": "do something"}' | python3 main.py
 """
 
 import asyncio
@@ -1328,7 +1328,7 @@ Listens for messages in configured channels and responds using the Anthropic API
 Local development:
   1. Copy .env.example to .env and fill in your tokens
   2. pip install -r requirements.txt
-  3. python main.py
+  3. python3 main.py
 """
 
 import asyncio
@@ -1686,7 +1686,7 @@ function registerInitCommand(program) {
                 type: 'agent',
                 description: 'Multi-platform support agent powered by Claude. Connects to Discord, Telegram, and/or Slack.',
                 run_mode: 'always_on',
-                runtime: { command: 'python main.py' },
+                runtime: { command: 'python3 main.py' },
                 entrypoint: 'main.py',
                 supported_providers: ['anthropic'],
                 default_models: { anthropic: 'claude-sonnet-4-5-20250929' },
@@ -1734,7 +1734,7 @@ function registerInitCommand(program) {
             process.stdout.write(`  ${s}. Edit config.py with your product name and description\n`);
             process.stdout.write(`  ${s + 1}. Replace knowledge/ files with your own docs\n`);
             process.stdout.write(`  ${s + 2}. Copy .env.example to .env and add platform tokens\n`);
-            process.stdout.write(`  ${s + 3}. Test locally: pip install -r requirements.txt && python main.py\n`);
+            process.stdout.write(`  ${s + 3}. Test locally: pip install -r requirements.txt && python3 main.py\n`);
             process.stdout.write(`  ${s + 4}. Deploy: orch publish && orch service deploy\n`);
             process.stdout.write(AGENT_BUILDER_HINT);
             return;
@@ -1904,7 +1904,7 @@ function registerInitCommand(program) {
                 type: 'agent',
                 description: `A ${templateLabel} orchestrator agent`,
                 run_mode: runMode,
-                runtime: { command: isJavaScript ? 'node main.js' : 'python main.py' },
+                runtime: { command: isJavaScript ? 'node main.js' : 'python3 main.py' },
                 manifest: {
                     manifest_version: 1,
                     dependencies,
@@ -1977,7 +1977,7 @@ function registerInitCommand(program) {
                 type: 'tool',
                 description: 'A scheduled job that runs on a cron schedule',
                 run_mode: 'on_demand',
-                runtime: { command: isJavaScript ? 'node main.js' : 'python main.py' },
+                runtime: { command: isJavaScript ? 'node main.js' : 'python3 main.py' },
                 required_secrets: [],
                 tags: ['scheduled', 'cron'],
             };
@@ -2018,7 +2018,7 @@ function registerInitCommand(program) {
                 process.stdout.write(`  1. cd ${name}\n`);
             }
             const mainFile = isJavaScript ? 'main.js' : 'main.py';
-            const testCmd = isJavaScript ? 'node main.js' : 'python main.py';
+            const testCmd = isJavaScript ? 'node main.js' : 'python3 main.py';
             process.stdout.write(`  ${stepNum}. Edit ${mainFile} with your job logic\n`);
             process.stdout.write(`  ${stepNum + 1}. Test: echo '{}' | ${testCmd}\n`);
             process.stdout.write(`  ${stepNum + 2}. Publish: orch publish\n`);
@@ -2040,7 +2040,7 @@ function registerInitCommand(program) {
             }
         }
         if (initMode.flavor !== 'code_runtime' && initMode.flavor !== 'orchestrator' && initMode.flavor !== 'discord' && runMode === 'always_on') {
-            throw new errors_1.CliError("run_mode=always_on requires runtime.command in orchagent.json (e.g. \"runtime\": { \"command\": \"python main.py\" }). Use --type tool or --type agentic for code-runtime agents.");
+            throw new errors_1.CliError("run_mode=always_on requires runtime.command in orchagent.json (e.g. \"runtime\": { \"command\": \"python3 main.py\" }). Use --type tool or --type agentic for code-runtime agents.");
         }
         // Create manifest and type-specific files
         const manifest = JSON.parse(MANIFEST_TEMPLATE);
@@ -2054,7 +2054,7 @@ function registerInitCommand(program) {
                 manifest.entrypoint = 'main.js';
             }
             else {
-                manifest.runtime = { command: 'python main.py' };
+                manifest.runtime = { command: 'python3 main.py' };
             }
             manifest.manifest = {
                 manifest_version: 1,
@@ -2073,7 +2073,7 @@ function registerInitCommand(program) {
         }
         else if (initMode.flavor === 'discord') {
             manifest.description = 'An always-on Discord bot powered by Claude';
-            manifest.runtime = { command: 'python main.py' };
+            manifest.runtime = { command: 'python3 main.py' };
             manifest.supported_providers = ['anthropic'];
             manifest.required_secrets = ['ANTHROPIC_API_KEY', 'DISCORD_BOT_TOKEN', 'DISCORD_CHANNEL_IDS'];
             manifest.tags = ['discord', 'always-on'];
@@ -2085,7 +2085,7 @@ function registerInitCommand(program) {
                 manifest.entrypoint = 'main.js';
             }
             else {
-                manifest.runtime = { command: 'python main.py' };
+                manifest.runtime = { command: 'python3 main.py' };
             }
             manifest.required_secrets = [];
         }
@@ -2202,7 +2202,7 @@ function registerInitCommand(program) {
             process.stdout.write(`  ${stepNum}. Create a Discord bot at https://discord.com/developers/applications\n`);
             process.stdout.write(`  ${stepNum + 1}. Enable Message Content Intent in bot settings\n`);
             process.stdout.write(`  ${stepNum + 2}. Copy .env.example to .env and fill in your tokens\n`);
-            process.stdout.write(`  ${stepNum + 3}. Test locally: pip install -r requirements.txt && python main.py\n`);
+            process.stdout.write(`  ${stepNum + 3}. Test locally: pip install -r requirements.txt && python3 main.py\n`);
             process.stdout.write(`  ${stepNum + 4}. Deploy: orch publish\n`);
         }
         else if (initMode.flavor === 'code_runtime') {
@@ -2212,7 +2212,7 @@ function registerInitCommand(program) {
             }
             if (runMode === 'always_on') {
                 const mainFile = isJavaScript ? 'main.js' : 'main.py';
-                const testCmd = isJavaScript ? 'node main.js' : 'python main.py';
+                const testCmd = isJavaScript ? 'node main.js' : 'python3 main.py';
                 process.stdout.write(`  ${stepNum}. Edit ${mainFile} with your service logic\n`);
                 process.stdout.write(`  ${stepNum + 1}. Test locally: ${testCmd}\n`);
                 process.stdout.write(`  ${stepNum + 2}. Publish: orch publish\n`);
@@ -2229,7 +2229,7 @@ function registerInitCommand(program) {
                 const inputField = initMode.type === 'agent' ? 'task' : 'input';
                 process.stdout.write(`  ${stepNum}. Edit main.py with your agent logic\n`);
                 process.stdout.write(`  ${stepNum + 1}. Edit schema.json with your input/output schemas\n`);
-                process.stdout.write(`  ${stepNum + 2}. Test: echo '{"${inputField}": "test"}' | python main.py\n`);
+                process.stdout.write(`  ${stepNum + 2}. Test: echo '{"${inputField}": "test"}' | python3 main.py\n`);
                 process.stdout.write(`  ${stepNum + 3}. Run: orchagent publish\n`);
             }
         }

package/dist/commands/publish.js

@@ -42,6 +42,7 @@ exports.scanUndeclaredEnvVars = scanUndeclaredEnvVars;
 exports.scanReservedPort = scanReservedPort;
 exports.detectSdkCompatible = detectSdkCompatible;
 exports.checkDependencies = checkDependencies;
+exports.checkWorkspaceLlmKeys = checkWorkspaceLlmKeys;
 exports.batchPublish = batchPublish;
 exports.registerPublishCommand = registerPublishCommand;
 const promises_1 = __importDefault(require("fs/promises"));
@@ -394,7 +395,7 @@ function commandForEntrypoint(entrypoint) {
     if (entrypoint.endsWith('.js') || entrypoint.endsWith('.mjs') || entrypoint.endsWith('.cjs') || entrypoint.endsWith('.ts')) {
         return `node ${entrypoint}`;
     }
-    return `python ${entrypoint}`;
+    return `python3 ${entrypoint}`;
 }
 /**
  * Check if manifest dependencies are published and callable.
@@ -439,13 +440,71 @@ async function checkDependencies(config, dependencies, publishingOrgSlug, worksp
         }
         catch (err) {
             if (err?.status === 404) {
-                return { ref, status: 'not_found' };
+                // Could be unpublished OR published-but-private — we can't tell from a 404
+                return { ref, status: 'not_found_cross_org' };
             }
             // Network/unexpected error — don't false alarm
             return { ref, status: 'found_callable' };
         }
     }));
 }
+/**
+ * Provider names the platform supports for LLM vault keys.
+ * Must stay in sync with gateway's _PROVIDER_TO_SECRET_NAME (db.py).
+ */
+const PROVIDER_TO_SECRET_NAME = {
+    anthropic: 'ANTHROPIC_API_KEY',
+    openai: 'OPENAI_API_KEY',
+    gemini: 'GEMINI_API_KEY',
+};
+/**
+ * After a successful publish, check whether the target workspace has LLM vault
+ * keys that match the agent's supported_providers. If not, print a warning so
+ * the user knows cloud runs will fail.
+ *
+ * Best-effort: API errors are silently swallowed (the agent is already published).
+ */
+async function checkWorkspaceLlmKeys(config, workspaceId, workspaceSlug, executionEngine, supportedProviders) {
+    // Only direct_llm and managed_loop engines need LLM keys
+    if (executionEngine !== 'direct_llm' && executionEngine !== 'managed_loop') {
+        return;
+    }
+    let secrets;
+    try {
+        const result = await (0, api_1.request)(config, 'GET', `/workspaces/${workspaceId}/secrets`);
+        secrets = result.secrets;
+        if (!Array.isArray(secrets))
+            return;
+    }
+    catch {
+        return; // Can't reach API or unexpected response — skip warning silently
+    }
+    const llmKeys = secrets.filter(s => s.secret_type === 'llm_key' && s.llm_provider);
+    const availableProviders = new Set(llmKeys.map(s => s.llm_provider));
+    // Determine which providers the agent needs
+    const needsAny = supportedProviders.includes('any');
+    if (needsAny) {
+        // 'any' means any single provider works
+        if (availableProviders.size > 0)
+            return;
+    }
+    else {
+        // Check if at least one of the supported providers has a key
+        const hasMatch = supportedProviders.some(p => availableProviders.has(p));
+        if (hasMatch)
+            return;
+    }
+    // Build the warning message
+    const providerList = needsAny
+        ? Object.keys(PROVIDER_TO_SECRET_NAME).join(', ')
+        : supportedProviders.join(', ');
+    const exampleSecretName = needsAny
+        ? 'ANTHROPIC_API_KEY'
+        : (PROVIDER_TO_SECRET_NAME[supportedProviders[0]] || `${supportedProviders[0].toUpperCase()}_API_KEY`);
+    process.stderr.write(chalk_1.default.yellow(`\n⚠ No LLM vault keys found in workspace '${workspaceSlug}' for providers: ${providerList}\n`) +
+        `  Cloud runs will fail until you add keys.\n` +
+        `  Add a key: ${chalk_1.default.cyan(`orch secrets set ${exampleSecretName} <key>`)}\n`);
+}
 /**
  * Batch publish all agents found in subdirectories, in dependency order.
  * Discovers orchagent.json/SKILL.md in immediate subdirectories,
@@ -979,6 +1038,7 @@ function registerPublishCommand(program) {
         if (manifestDeps?.length) {
             const depResults = await checkDependencies(config, manifestDeps, org.slug, workspaceId);
             const notFound = depResults.filter(r => r.status === 'not_found');
+            const notFoundCrossOrg = depResults.filter(r => r.status === 'not_found_cross_org');
             const notCallable = depResults.filter(r => r.status === 'found_not_callable');
             if (notFound.length > 0) {
                 process.stderr.write(chalk_1.default.yellow(`\n⚠ Unpublished dependencies:\n`));
@@ -988,6 +1048,14 @@ function registerPublishCommand(program) {
                 process.stderr.write(`\n  These agents must be published before this orchestrator can call them.\n` +
                     `  Publish each dependency first, then re-run this publish.\n\n`);
             }
+            if (notFoundCrossOrg.length > 0) {
+                process.stderr.write(chalk_1.default.yellow(`\n⚠ Dependencies not found (unpublished or not accessible from this workspace):\n`));
+                for (const dep of notFoundCrossOrg) {
+                    process.stderr.write(chalk_1.default.yellow(`  - ${dep.ref}\n`));
+                }
+                process.stderr.write(`\n  If the dependency is published in another workspace, ensure it's in the same\n` +
+                    `  workspace as this orchestrator, or use agent access grants.\n\n`);
+            }
             if (notCallable.length > 0) {
                 process.stderr.write(chalk_1.default.yellow(`\n⚠ Dependencies have callable: false:\n`));
                 for (const dep of notCallable) {
@@ -998,6 +1066,23 @@ function registerPublishCommand(program) {
                     `  the field to use the default) and republish each dependency.\n\n`);
             }
         }
+        // UX-13-02: Warn when managed-loop orchestrator has dependencies but no custom_tools.
+        // Without custom_tools, the LLM has no way to call its declared dependencies.
+        if (executionEngine === 'managed_loop' && manifestDeps?.length) {
+            const mergedTools = Array.isArray(loopConfig?.custom_tools) ? loopConfig.custom_tools : [];
+            if (mergedTools.length === 0) {
+                process.stderr.write(chalk_1.default.yellow(`\n⚠ This managed-loop agent declares dependencies but no custom_tools.\n` +
+                    `  Without custom_tools, the LLM cannot call dependencies at runtime —\n` +
+                    `  it will waste turns exploring the filesystem instead.\n\n` +
+                    `  Use 'orch scaffold orchestration' to auto-generate the correct\n` +
+                    `  custom_tools configuration, or add them manually to your loop config:\n\n` +
+                    `    "loop": {\n` +
+                    `      "custom_tools": [\n` +
+                    `        { "name": "call_worker", "description": "...", "command": "python3 /home/user/helpers/orch_call.py org/worker@v1" }\n` +
+                    `      ]\n` +
+                    `    }\n\n`));
+            }
+        }
         // UX-2: Default required_secrets to [] when omitted for tool/agent types.
         // Prompt and skill types are exempt (prompt agents get LLM keys from platform,
         // skills don't run standalone).
@@ -1409,6 +1494,8 @@ function registerPublishCommand(program) {
                 process.stderr.write(chalk_1.default.yellow(`⚠ ${warning}\n`));
             }
         }
+        // Warn if workspace has no LLM vault keys for this agent's providers (UX-13-01)
+        await checkWorkspaceLlmKeys(config, workspaceId || org.id, org.slug, executionEngine, supportedProviders);
         // Show required secrets with setup instructions (F-18)
         if (manifest.required_secrets?.length) {
             process.stdout.write(`\nRequired secrets:\n`);

package/dist/commands/pull.js

@@ -112,11 +112,14 @@ async function resolveAgent(config, org, agent, version, workspaceId) {
     if (!config.apiKey) {
         throw new api_1.ApiError(`Agent '${org}/${agent}@${version}' not found`, 404);
     }
-    const userOrg = await (0, api_1.getOrg)(config, workspaceId);
-    if (userOrg.slug !== org) {
-        throw new api_1.ApiError(`Agent '${org}/${agent}@${version}' not found`, 404);
+    // Try workspace-scoped search first, then fall back to personal org.
+    // This handles the case where the user is in a team workspace but the
+    // agent lives in their personal org (or vice versa).  The org_slug
+    // filter inside resolveFromMyAgents prevents cross-org contamination.
+    let data = await resolveFromMyAgents(config, agent, version, org, workspaceId);
+    if (!data && workspaceId) {
+        data = await resolveFromMyAgents(config, agent, version, org, undefined);
     }
-    const data = await resolveFromMyAgents(config, agent, version, org, workspaceId);
     if (!data) {
         throw new api_1.ApiError(`Agent '${org}/${agent}@${version}' not found`, 404);
     }
@@ -124,15 +127,10 @@ async function resolveAgent(config, org, agent, version, workspaceId) {
 }
 async function tryOwnerFallback(config, org, agent, version, workspaceId) {
     try {
-        const myAgents = await (0, api_1.listMyAgents)(config, workspaceId);
-        let match;
-        if (version === 'latest') {
-            match = myAgents
-                .filter(a => a.name === agent && a.org_slug === org)
-                .sort((a, b) => new Date(b.created_at).getTime() - new Date(a.created_at).getTime())[0];
-        }
-        else {
-            match = myAgents.find(a => a.name === agent && a.version === version && a.org_slug === org);
+        let match = findOwnerMatch(await (0, api_1.listMyAgents)(config, workspaceId), agent, version, org);
+        // Retry without workspace restriction to find agents in personal org
+        if (!match && workspaceId) {
+            match = findOwnerMatch(await (0, api_1.listMyAgents)(config, undefined), agent, version, org);
         }
         if (!match)
             return null;
@@ -143,6 +141,14 @@ async function tryOwnerFallback(config, org, agent, version, workspaceId) {
         return null;
     }
 }
+function findOwnerMatch(agents, agent, version, org) {
+    if (version === 'latest') {
+        return agents
+            .filter(a => a.name === agent && a.org_slug === org)
+            .sort((a, b) => new Date(b.created_at).getTime() - new Date(a.created_at).getTime())[0];
+    }
+    return agents.find(a => a.name === agent && a.version === version && a.org_slug === org);
+}
 async function resolveFromMyAgents(config, agent, version, org, workspaceId) {
     const agents = await (0, api_1.listMyAgents)(config, workspaceId);
     const matching = agents.filter(a => a.name === agent && a.org_slug === org);

package/dist/commands/run.js

@@ -787,6 +787,13 @@ async function detectAllLlmKeys(supportedProviders, config) {
     return providers;
 }
 async function executePromptLocally(agentData, inputData, skillPrompts = [], config, providerOverride, modelOverride) {
+    // Auto-detect provider from model name if not explicitly specified
+    if (!providerOverride && modelOverride) {
+        const detected = (0, llm_1.detectProviderFromModel)(modelOverride);
+        if (detected) {
+            providerOverride = detected;
+        }
+    }
     if (providerOverride) {
         (0, llm_1.validateProvider)(providerOverride);
     }
@@ -805,7 +812,7 @@ async function executePromptLocally(agentData, inputData, skillPrompts = [], con
             throw new errors_1.CliError(`No LLM key found for: ${providers}\n` +
                 `Set an environment variable (e.g., OPENAI_API_KEY), run 'orch secrets set <PROVIDER>_API_KEY <key>', or configure in web dashboard`);
         }
-        if (modelOverride && !providerOverride && allProviders.length > 1) {
+        if (modelOverride && allProviders.length > 1) {
             process.stderr.write(`Warning: --model specified without --provider. The model '${modelOverride}' will be used for all ${allProviders.length} fallback providers, which may cause errors if the model is incompatible.\n` +
                 `Consider specifying --provider to ensure correct model/provider pairing.\n\n`);
         }
@@ -855,6 +862,13 @@ async function executeAgentLocally(agentDir, prompt, inputData, outputSchema, cu
         throw new errors_1.CliError('Python 3 is required for local agent execution.\n' +
             'Install Python 3: https://python.org/downloads');
     }
+    // Auto-detect provider from model name if not explicitly specified
+    if (!providerOverride && modelOverride) {
+        const detected = (0, llm_1.detectProviderFromModel)(modelOverride);
+        if (detected) {
+            providerOverride = detected;
+        }
+    }
     // 2. Detect LLM provider + key
     const supportedProviders = manifest?.supported_providers || ['any'];
     const providersToCheck = providerOverride
@@ -1968,18 +1982,8 @@ async function executeCloud(agentRef, file, options) {
             throw new errors_1.CliError('When using --key, you must also specify --provider (openai, anthropic, or gemini)');
         }
         (0, llm_1.validateProvider)(effectiveProvider);
-        if (options.model && effectiveProvider) {
-            const modelLower = options.model.toLowerCase();
-            const providerPatterns = {
-                openai: /^(gpt-|o1-|o3-|davinci|text-)/,
-                anthropic: /^claude-/,
-                gemini: /^gemini-/,
-                ollama: /^(llama|mistral|deepseek|phi|qwen)/,
-            };
-            const expectedPattern = providerPatterns[effectiveProvider];
-            if (expectedPattern && !expectedPattern.test(modelLower)) {
-                process.stderr.write(`Warning: Model '${options.model}' may not be a ${effectiveProvider} model.\n\n`);
-            }
+        if (options.model) {
+            (0, llm_1.warnProviderModelMismatch)(options.model, effectiveProvider);
         }
         llmKey = options.key;
         llmProvider = effectiveProvider;
@@ -1990,17 +1994,7 @@ async function executeCloud(agentRef, file, options) {
             (0, llm_1.validateProvider)(effectiveProvider);
             providersToCheck = [effectiveProvider];
             if (options.model) {
-                const modelLower = options.model.toLowerCase();
-                const providerPatterns = {
-                    openai: /^(gpt-|o1-|o3-|davinci|text-)/,
-                    anthropic: /^claude-/,
-                    gemini: /^gemini-/,
-                    ollama: /^(llama|mistral|deepseek|phi|qwen)/,
-                };
-                const expectedPattern = providerPatterns[effectiveProvider];
-                if (expectedPattern && !expectedPattern.test(modelLower)) {
-                    process.stderr.write(`Warning: Model '${options.model}' may not be a ${effectiveProvider} model.\n\n`);
-                }
+                (0, llm_1.warnProviderModelMismatch)(options.model, effectiveProvider);
             }
         }
         const detected = await (0, llm_1.detectLlmKey)(providersToCheck, resolved);
@@ -2637,16 +2631,13 @@ async function executeLocal(agentRef, args, options) {
         options.input = JSON.stringify({ path: options.path });
     }
     if (options.model && options.provider) {
-        const modelLower = options.model.toLowerCase();
-        const providerPatterns = {
-            openai: /^(gpt-|o1-|o3-|davinci|text-)/,
-            anthropic: /^claude-/,
-            gemini: /^gemini-/,
-            ollama: /^(llama|mistral|deepseek|phi|qwen)/,
-        };
-        const expectedPattern = providerPatterns[options.provider];
-        if (expectedPattern && !expectedPattern.test(modelLower)) {
-            process.stderr.write(`Warning: Model '${options.model}' may not be a ${options.provider} model.\n\n`);
+        (0, llm_1.warnProviderModelMismatch)(options.model, options.provider);
+    }
+    else if (options.model && !options.provider) {
+        const detected = (0, llm_1.detectProviderFromModel)(options.model);
+        if (detected) {
+            options.provider = detected;
+            process.stderr.write(`Auto-detected provider: ${detected} (from model '${options.model}')\n\n`);
         }
     }
     const resolved = await (0, config_1.getResolvedConfig)();

package/dist/commands/templates/cron-job.js

@@ -22,7 +22,7 @@ Schedule examples:
   orch schedule create org/my-job --cron "0 */6 * * *"  # Every 6 hours
 
 Local test:
-  echo '{}' | python main.py
+  echo '{}' | python3 main.py
 """
 
 import json

package/dist/commands/templates/github-weekly-summary.js

@@ -14,7 +14,7 @@ exports.TEMPLATE_MANIFEST = `{
   "type": "agent",
   "description": "Weekly GitHub activity summary delivered to Discord. Uses Claude to analyse commits, PRs, and issues — surfaces patterns, risks, and trends.",
   "runtime": {
-    "command": "python main.py"
+    "command": "python3 main.py"
   },
   "required_secrets": [
     "ORCHAGENT_API_KEY",

package/dist/commands/test.js

@@ -640,7 +640,7 @@ function runEntrypointWithInput(agentDir, entrypoint, stdinData, verbose) {
 /**
  * Run fixture tests for code_runtime agents by executing the entrypoint
  * with fixture input as stdin and validating the JSON output.
- * Same interface as E2B: python main.py < input.json
+ * Same interface as E2B: python3 main.py < input.json
  */
 async function runCodeRuntimeFixtureTests(agentDir, fixtures, entrypoint, verbose) {
     process.stderr.write(chalk_1.default.blue('\nRunning fixture tests (code runtime)...\n\n'));
@@ -660,7 +660,7 @@ async function runCodeRuntimeFixtureTests(agentDir, fixtures, entrypoint, verbos
                 throw new errors_1.CliError(`Invalid JSON in ${fixtureName}: ${e.message}`);
             }
             const fixture = validateFixture(parsed, fixturePath);
-            // Run entrypoint with fixture input as stdin (same as E2B: python main.py < input.json)
+            // Run entrypoint with fixture input as stdin (same as E2B: python3 main.py < input.json)
             const inputJson = JSON.stringify(fixture.input);
             const result = await runEntrypointWithInput(agentDir, entrypoint, inputJson, verbose);
             if (result.code !== 0) {

package/dist/commands/validate.js

@@ -172,6 +172,7 @@ Options:
                             const org = await (0, api_1.getOrg)(config, workspaceId);
                             const depResults = await (0, publish_1.checkDependencies)(config, deps, org.slug, workspaceId);
                             const notFound = depResults.filter(r => r.status === 'not_found');
+                            const notFoundCrossOrg = depResults.filter(r => r.status === 'not_found_cross_org');
                             const notCallable = depResults.filter(r => r.status === 'found_not_callable');
                             if (notFound.length > 0) {
                                 for (const dep of notFound) {
@@ -181,6 +182,14 @@ Options:
                                     });
                                 }
                             }
+                            if (notFoundCrossOrg.length > 0) {
+                                for (const dep of notFoundCrossOrg) {
+                                    serverIssues.push({
+                                        level: 'warning',
+                                        message: `Dependency not found (unpublished or not accessible from this workspace): ${dep.ref}`,
+                                    });
+                                }
+                            }
                             if (notCallable.length > 0) {
                                 for (const dep of notCallable) {
                                     serverIssues.push({

package/dist/lib/llm.js

@@ -6,7 +6,7 @@
  * Used by run, call, and skill commands.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.DEFAULT_MODELS = exports.PROVIDER_ENV_VARS = exports.LlmError = void 0;
+exports.MODEL_PROVIDER_PATTERNS = exports.DEFAULT_MODELS = exports.PROVIDER_ENV_VARS = exports.LlmError = void 0;
 exports.isRateLimitError = isRateLimitError;
 exports.detectLlmKeyFromEnv = detectLlmKeyFromEnv;
 exports.detectLlmKey = detectLlmKey;
@@ -15,6 +15,8 @@ exports.buildPrompt = buildPrompt;
 exports.callLlm = callLlm;
 exports.callLlmWithFallback = callLlmWithFallback;
 exports.validateProvider = validateProvider;
+exports.detectProviderFromModel = detectProviderFromModel;
+exports.warnProviderModelMismatch = warnProviderModelMismatch;
 const errors_1 = require("./errors");
 const llm_errors_1 = require("./llm-errors");
 class LlmError extends errors_1.CliError {
@@ -265,3 +267,37 @@ function validateProvider(provider) {
         throw new errors_1.CliError(`Invalid provider: ${provider}. Valid: ${validProviders.join(', ')}`);
     }
 }
+/**
+ * Model-name patterns for auto-detecting the LLM provider.
+ * Tested against the lowercased model string.
+ */
+exports.MODEL_PROVIDER_PATTERNS = {
+    openai: /^(gpt-|o1-|o3-|o4-|davinci|text-)/,
+    anthropic: /^claude-/,
+    gemini: /^gemini-/,
+    ollama: /^(llama|mistral|deepseek|phi|qwen)/,
+};
+/**
+ * Auto-detect the LLM provider from a model name using prefix patterns.
+ * Returns the provider string if a match is found, or null if ambiguous/unknown.
+ */
+function detectProviderFromModel(model) {
+    const modelLower = model.toLowerCase();
+    for (const [provider, pattern] of Object.entries(exports.MODEL_PROVIDER_PATTERNS)) {
+        if (pattern.test(modelLower)) {
+            return provider;
+        }
+    }
+    return null;
+}
+/**
+ * Warn if a model name doesn't match the expected provider's pattern.
+ * Used when both --model and --provider are explicitly specified.
+ */
+function warnProviderModelMismatch(model, provider) {
+    const modelLower = model.toLowerCase();
+    const expectedPattern = exports.MODEL_PROVIDER_PATTERNS[provider];
+    if (expectedPattern && !expectedPattern.test(modelLower)) {
+        process.stderr.write(`Warning: Model '${model}' may not be a ${provider} model.\n\n`);
+    }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@orchagent/cli",
-  "version": "0.3.101",
+  "version": "0.3.102",
   "description": "Command-line interface for orchagent — deploy and run AI agents for your team",
   "license": "MIT",
   "author": "orchagent <hello@orchagent.io>",