@orchagent/cli 0.3.101 → 0.3.103

package/dist/commands/dag.js

@@ -193,6 +193,10 @@ function registerDagCommand(program) {
             throw new errors_1.CliError('Missing API key. Run `orch login` first.');
         }
         const workspaceId = await resolveWorkspaceId(config, options.workspace);
+        // Accept req_xxx format (gateway request_id shown in run output)
+        if (/^req_[0-9a-f]+$/i.test(runId)) {
+            runId = runId.slice(4);
+        }
         // Resolve short run IDs
         let resolvedRunId = runId;
         if (isUuid(runId)) {

package/dist/commands/health.js

@@ -9,6 +9,7 @@ const config_1 = require("../lib/config");
 const api_1 = require("../lib/api");
 const agent_ref_1 = require("../lib/agent-ref");
 const errors_1 = require("../lib/errors");
+const json_input_1 = require("../lib/json-input");
 const spinner_1 = require("../lib/spinner");
 const output_1 = require("../lib/output");
 const package_json_1 = __importDefault(require("../../package.json"));
@@ -194,13 +195,7 @@ function registerHealthCommand(program) {
         const inputSchema = agentMeta.input_schema;
         let body;
         if (options.data) {
-            try {
-                JSON.parse(options.data);
-                body = options.data;
-            }
-            catch {
-                throw new errors_1.CliError('Invalid JSON in --data option.');
-            }
+            body = await (0, json_input_1.resolveJsonBody)(options.data);
         }
         else {
             const sample = generateSampleInput(inputSchema);

package/dist/commands/init.js

@@ -58,7 +58,7 @@ Reads JSON input from stdin, processes it, and writes JSON output to stdout.
 This is the standard orchagent tool protocol.
 
 Usage:
-  echo '{"input": "hello"}' | python main.py
+  echo '{"input": "hello"}' | python3 main.py
 """
 
 import json
@@ -136,7 +136,7 @@ IMPORTANT: Port 8080 is reserved by the platform health server.
            Use a different port (default: 3000).
 
 Local development:
-  python main.py
+  python3 main.py
 """
 
 import json
@@ -405,7 +405,7 @@ orchagent fan-out orchestrator.
 Calls multiple agents in parallel, combines their results.
 
 Usage:
-  echo '{"task": "analyze this"}' | python main.py
+  echo '{"task": "analyze this"}' | python3 main.py
 """
 
 import asyncio
@@ -497,7 +497,7 @@ orchagent pipeline orchestrator.
 Calls agents sequentially — each step's output feeds into the next.
 
 Usage:
-  echo '{"task": "process this data"}' | python main.py
+  echo '{"task": "process this data"}' | python3 main.py
 """
 
 import asyncio
@@ -584,7 +584,7 @@ orchagent map-reduce orchestrator.
 Splits input into chunks, processes each in parallel (map), then aggregates (reduce).
 
 Usage:
-  echo '{"items": ["item1", "item2", "item3"]}' | python main.py
+  echo '{"items": ["item1", "item2", "item3"]}' | python3 main.py
 """
 
 import asyncio
@@ -803,7 +803,7 @@ At least one platform token is required.
 
 \`\`\`sh
 pip install -r requirements.txt
-python main.py
+python3 main.py
 \`\`\`
 
 ### 5. Deploy
@@ -848,7 +848,7 @@ cp .env.example .env
 # Fill in DISCORD_BOT_TOKEN, ANTHROPIC_API_KEY, DISCORD_CHANNEL_IDS
 
 pip install -r requirements.txt
-python main.py
+python3 main.py
 \`\`\`
 
 ### 4. Deploy
@@ -1068,7 +1068,7 @@ Reads JSON input from stdin, processes the task, and writes JSON output to stdou
 This is a code-runtime agent — you control the logic and can call any LLM provider.
 
 Usage:
-  echo '{"task": "summarize this text"}' | python main.py
+  echo '{"task": "summarize this text"}' | python3 main.py
 """
 
 import json
@@ -1203,7 +1203,7 @@ Reads JSON input from stdin, calls dependency agents via the orchagent SDK,
 and writes JSON output to stdout.
 
 Usage:
-  echo '{"task": "do something"}' | python main.py
+  echo '{"task": "do something"}' | python3 main.py
 """
 
 import asyncio
@@ -1328,7 +1328,7 @@ Listens for messages in configured channels and responds using the Anthropic API
 Local development:
   1. Copy .env.example to .env and fill in your tokens
   2. pip install -r requirements.txt
-  3. python main.py
+  3. python3 main.py
 """
 
 import asyncio
@@ -1686,7 +1686,7 @@ function registerInitCommand(program) {
                 type: 'agent',
                 description: 'Multi-platform support agent powered by Claude. Connects to Discord, Telegram, and/or Slack.',
                 run_mode: 'always_on',
-                runtime: { command: 'python main.py' },
+                runtime: { command: 'python3 main.py' },
                 entrypoint: 'main.py',
                 supported_providers: ['anthropic'],
                 default_models: { anthropic: 'claude-sonnet-4-5-20250929' },
@@ -1734,7 +1734,7 @@ function registerInitCommand(program) {
             process.stdout.write(`  ${s}. Edit config.py with your product name and description\n`);
             process.stdout.write(`  ${s + 1}. Replace knowledge/ files with your own docs\n`);
             process.stdout.write(`  ${s + 2}. Copy .env.example to .env and add platform tokens\n`);
-            process.stdout.write(`  ${s + 3}. Test locally: pip install -r requirements.txt && python main.py\n`);
+            process.stdout.write(`  ${s + 3}. Test locally: pip install -r requirements.txt && python3 main.py\n`);
             process.stdout.write(`  ${s + 4}. Deploy: orch publish && orch service deploy\n`);
             process.stdout.write(AGENT_BUILDER_HINT);
             return;
@@ -1904,7 +1904,7 @@ function registerInitCommand(program) {
                 type: 'agent',
                 description: `A ${templateLabel} orchestrator agent`,
                 run_mode: runMode,
-                runtime: { command: isJavaScript ? 'node main.js' : 'python main.py' },
+                runtime: { command: isJavaScript ? 'node main.js' : 'python3 main.py' },
                 manifest: {
                     manifest_version: 1,
                     dependencies,
@@ -1977,7 +1977,7 @@ function registerInitCommand(program) {
                 type: 'tool',
                 description: 'A scheduled job that runs on a cron schedule',
                 run_mode: 'on_demand',
-                runtime: { command: isJavaScript ? 'node main.js' : 'python main.py' },
+                runtime: { command: isJavaScript ? 'node main.js' : 'python3 main.py' },
                 required_secrets: [],
                 tags: ['scheduled', 'cron'],
             };
@@ -2018,7 +2018,7 @@ function registerInitCommand(program) {
                 process.stdout.write(`  1. cd ${name}\n`);
             }
             const mainFile = isJavaScript ? 'main.js' : 'main.py';
-            const testCmd = isJavaScript ? 'node main.js' : 'python main.py';
+            const testCmd = isJavaScript ? 'node main.js' : 'python3 main.py';
             process.stdout.write(`  ${stepNum}. Edit ${mainFile} with your job logic\n`);
             process.stdout.write(`  ${stepNum + 1}. Test: echo '{}' | ${testCmd}\n`);
             process.stdout.write(`  ${stepNum + 2}. Publish: orch publish\n`);
@@ -2040,7 +2040,7 @@ function registerInitCommand(program) {
             }
         }
         if (initMode.flavor !== 'code_runtime' && initMode.flavor !== 'orchestrator' && initMode.flavor !== 'discord' && runMode === 'always_on') {
-            throw new errors_1.CliError("run_mode=always_on requires runtime.command in orchagent.json (e.g. \"runtime\": { \"command\": \"python main.py\" }). Use --type tool or --type agentic for code-runtime agents.");
+            throw new errors_1.CliError("run_mode=always_on requires runtime.command in orchagent.json (e.g. \"runtime\": { \"command\": \"python3 main.py\" }). Use --type tool or --type agentic for code-runtime agents.");
         }
         // Create manifest and type-specific files
         const manifest = JSON.parse(MANIFEST_TEMPLATE);
@@ -2054,7 +2054,7 @@ function registerInitCommand(program) {
                 manifest.entrypoint = 'main.js';
             }
             else {
-                manifest.runtime = { command: 'python main.py' };
+                manifest.runtime = { command: 'python3 main.py' };
             }
             manifest.manifest = {
                 manifest_version: 1,
@@ -2073,7 +2073,7 @@ function registerInitCommand(program) {
         }
         else if (initMode.flavor === 'discord') {
             manifest.description = 'An always-on Discord bot powered by Claude';
-            manifest.runtime = { command: 'python main.py' };
+            manifest.runtime = { command: 'python3 main.py' };
             manifest.supported_providers = ['anthropic'];
             manifest.required_secrets = ['ANTHROPIC_API_KEY', 'DISCORD_BOT_TOKEN', 'DISCORD_CHANNEL_IDS'];
             manifest.tags = ['discord', 'always-on'];
@@ -2085,7 +2085,7 @@ function registerInitCommand(program) {
                 manifest.entrypoint = 'main.js';
             }
             else {
-                manifest.runtime = { command: 'python main.py' };
+                manifest.runtime = { command: 'python3 main.py' };
             }
             manifest.required_secrets = [];
         }
@@ -2202,7 +2202,7 @@ function registerInitCommand(program) {
             process.stdout.write(`  ${stepNum}. Create a Discord bot at https://discord.com/developers/applications\n`);
             process.stdout.write(`  ${stepNum + 1}. Enable Message Content Intent in bot settings\n`);
             process.stdout.write(`  ${stepNum + 2}. Copy .env.example to .env and fill in your tokens\n`);
-            process.stdout.write(`  ${stepNum + 3}. Test locally: pip install -r requirements.txt && python main.py\n`);
+            process.stdout.write(`  ${stepNum + 3}. Test locally: pip install -r requirements.txt && python3 main.py\n`);
             process.stdout.write(`  ${stepNum + 4}. Deploy: orch publish\n`);
         }
         else if (initMode.flavor === 'code_runtime') {
@@ -2212,7 +2212,7 @@ function registerInitCommand(program) {
             }
             if (runMode === 'always_on') {
                 const mainFile = isJavaScript ? 'main.js' : 'main.py';
-                const testCmd = isJavaScript ? 'node main.js' : 'python main.py';
+                const testCmd = isJavaScript ? 'node main.js' : 'python3 main.py';
                 process.stdout.write(`  ${stepNum}. Edit ${mainFile} with your service logic\n`);
                 process.stdout.write(`  ${stepNum + 1}. Test locally: ${testCmd}\n`);
                 process.stdout.write(`  ${stepNum + 2}. Publish: orch publish\n`);
@@ -2229,7 +2229,7 @@ function registerInitCommand(program) {
                 const inputField = initMode.type === 'agent' ? 'task' : 'input';
                 process.stdout.write(`  ${stepNum}. Edit main.py with your agent logic\n`);
                 process.stdout.write(`  ${stepNum + 1}. Edit schema.json with your input/output schemas\n`);
-                process.stdout.write(`  ${stepNum + 2}. Test: echo '{"${inputField}": "test"}' | python main.py\n`);
+                process.stdout.write(`  ${stepNum + 2}. Test: echo '{"${inputField}": "test"}' | python3 main.py\n`);
                 process.stdout.write(`  ${stepNum + 3}. Run: orchagent publish\n`);
             }
         }
@@ -2242,6 +2242,10 @@ function registerInitCommand(program) {
             process.stdout.write(`  ${stepNum + 1}. Edit schema.json with your input/output schemas\n`);
             process.stdout.write(`  ${stepNum + 2}. Run: orchagent publish\n`);
         }
+        if (initMode.flavor === 'managed_loop') {
+            process.stdout.write(`\n  Note: supported_providers: ["any"] means anthropic, openai, or gemini\n`);
+            process.stdout.write(`        Your vault key determines which is used (set with: orch secrets set)\n`);
+        }
         process.stdout.write(AGENT_BUILDER_HINT);
     });
 }

package/dist/commands/publish.js

@@ -42,6 +42,7 @@ exports.scanUndeclaredEnvVars = scanUndeclaredEnvVars;
 exports.scanReservedPort = scanReservedPort;
 exports.detectSdkCompatible = detectSdkCompatible;
 exports.checkDependencies = checkDependencies;
+exports.checkWorkspaceLlmKeys = checkWorkspaceLlmKeys;
 exports.batchPublish = batchPublish;
 exports.registerPublishCommand = registerPublishCommand;
 const promises_1 = __importDefault(require("fs/promises"));
@@ -394,7 +395,7 @@ function commandForEntrypoint(entrypoint) {
     if (entrypoint.endsWith('.js') || entrypoint.endsWith('.mjs') || entrypoint.endsWith('.cjs') || entrypoint.endsWith('.ts')) {
         return `node ${entrypoint}`;
     }
-    return `python ${entrypoint}`;
+    return `python3 ${entrypoint}`;
 }
 /**
  * Check if manifest dependencies are published and callable.
@@ -439,13 +440,71 @@ async function checkDependencies(config, dependencies, publishingOrgSlug, worksp
         }
         catch (err) {
             if (err?.status === 404) {
-                return { ref, status: 'not_found' };
+                // Could be unpublished OR published-but-private — we can't tell from a 404
+                return { ref, status: 'not_found_cross_org' };
             }
             // Network/unexpected error — don't false alarm
             return { ref, status: 'found_callable' };
         }
     }));
 }
+/**
+ * Provider names the platform supports for LLM vault keys.
+ * Must stay in sync with gateway's _PROVIDER_TO_SECRET_NAME (db.py).
+ */
+const PROVIDER_TO_SECRET_NAME = {
+    anthropic: 'ANTHROPIC_API_KEY',
+    openai: 'OPENAI_API_KEY',
+    gemini: 'GEMINI_API_KEY',
+};
+/**
+ * After a successful publish, check whether the target workspace has LLM vault
+ * keys that match the agent's supported_providers. If not, print a warning so
+ * the user knows cloud runs will fail.
+ *
+ * Best-effort: API errors are silently swallowed (the agent is already published).
+ */
+async function checkWorkspaceLlmKeys(config, workspaceId, workspaceSlug, executionEngine, supportedProviders) {
+    // Only direct_llm and managed_loop engines need LLM keys
+    if (executionEngine !== 'direct_llm' && executionEngine !== 'managed_loop') {
+        return;
+    }
+    let secrets;
+    try {
+        const result = await (0, api_1.request)(config, 'GET', `/workspaces/${workspaceId}/secrets`);
+        secrets = result.secrets;
+        if (!Array.isArray(secrets))
+            return;
+    }
+    catch {
+        return; // Can't reach API or unexpected response — skip warning silently
+    }
+    const llmKeys = secrets.filter(s => s.secret_type === 'llm_key' && s.llm_provider);
+    const availableProviders = new Set(llmKeys.map(s => s.llm_provider));
+    // Determine which providers the agent needs
+    const needsAny = supportedProviders.includes('any');
+    if (needsAny) {
+        // 'any' means any single provider works
+        if (availableProviders.size > 0)
+            return;
+    }
+    else {
+        // Check if at least one of the supported providers has a key
+        const hasMatch = supportedProviders.some(p => availableProviders.has(p));
+        if (hasMatch)
+            return;
+    }
+    // Build the warning message
+    const providerList = needsAny
+        ? Object.keys(PROVIDER_TO_SECRET_NAME).join(', ')
+        : supportedProviders.join(', ');
+    const exampleSecretName = needsAny
+        ? 'ANTHROPIC_API_KEY'
+        : (PROVIDER_TO_SECRET_NAME[supportedProviders[0]] || `${supportedProviders[0].toUpperCase()}_API_KEY`);
+    process.stderr.write(chalk_1.default.yellow(`\n⚠ No LLM vault keys found in workspace '${workspaceSlug}' for providers: ${providerList}\n`) +
+        `  Cloud runs will fail until you add keys.\n` +
+        `  Add a key: ${chalk_1.default.cyan(`orch secrets set ${exampleSecretName} <key>`)}\n`);
+}
 /**
  * Batch publish all agents found in subdirectories, in dependency order.
  * Discovers orchagent.json/SKILL.md in immediate subdirectories,
@@ -489,11 +548,21 @@ async function batchPublish(rootDir, options) {
     catch {
         // Non-critical — just won't show org prefix
     }
-    const plan = (0, batch_publish_1.formatPublishPlan)(sorted, orgSlug);
-    process.stderr.write(plan);
+    // Dry-run: show ordering preview and exit (no subprocesses)
     if (options.dryRun) {
-        process.stderr.write(chalk_1.default.cyan('DRY RUN — running orch publish --dry-run in each directory:\n\n'));
+        const summary = (0, batch_publish_1.formatDryRunSummary)(sorted, orgSlug);
+        process.stderr.write(summary);
+        await (0, analytics_1.track)('cli_publish_all', {
+            total: sorted.length,
+            succeeded: 0,
+            failed: 0,
+            skipped: sorted.length,
+            dry_run: true,
+        });
+        return;
     }
+    const plan = (0, batch_publish_1.formatPublishPlan)(sorted, orgSlug);
+    process.stderr.write(plan);
     // Build the CLI args to forward (exclude --all)
     const forwardArgs = [];
     if (options.profile)
@@ -979,6 +1048,7 @@ function registerPublishCommand(program) {
         if (manifestDeps?.length) {
             const depResults = await checkDependencies(config, manifestDeps, org.slug, workspaceId);
             const notFound = depResults.filter(r => r.status === 'not_found');
+            const notFoundCrossOrg = depResults.filter(r => r.status === 'not_found_cross_org');
             const notCallable = depResults.filter(r => r.status === 'found_not_callable');
             if (notFound.length > 0) {
                 process.stderr.write(chalk_1.default.yellow(`\n⚠ Unpublished dependencies:\n`));
@@ -988,6 +1058,14 @@ function registerPublishCommand(program) {
                 process.stderr.write(`\n  These agents must be published before this orchestrator can call them.\n` +
                     `  Publish each dependency first, then re-run this publish.\n\n`);
             }
+            if (notFoundCrossOrg.length > 0) {
+                process.stderr.write(chalk_1.default.yellow(`\n⚠ Dependencies not found (unpublished or not accessible from this workspace):\n`));
+                for (const dep of notFoundCrossOrg) {
+                    process.stderr.write(chalk_1.default.yellow(`  - ${dep.ref}\n`));
+                }
+                process.stderr.write(`\n  If the dependency is published in another workspace, ensure it's in the same\n` +
+                    `  workspace as this orchestrator, or use agent access grants.\n\n`);
+            }
             if (notCallable.length > 0) {
                 process.stderr.write(chalk_1.default.yellow(`\n⚠ Dependencies have callable: false:\n`));
                 for (const dep of notCallable) {
@@ -998,6 +1076,23 @@ function registerPublishCommand(program) {
                     `  the field to use the default) and republish each dependency.\n\n`);
             }
         }
+        // UX-13-02: Warn when managed-loop orchestrator has dependencies but no custom_tools.
+        // Without custom_tools, the LLM has no way to call its declared dependencies.
+        if (executionEngine === 'managed_loop' && manifestDeps?.length) {
+            const mergedTools = Array.isArray(loopConfig?.custom_tools) ? loopConfig.custom_tools : [];
+            if (mergedTools.length === 0) {
+                process.stderr.write(chalk_1.default.yellow(`\n⚠ This managed-loop agent declares dependencies but no custom_tools.\n` +
+                    `  Without custom_tools, the LLM cannot call dependencies at runtime —\n` +
+                    `  it will waste turns exploring the filesystem instead.\n\n` +
+                    `  Use 'orch scaffold orchestration' to auto-generate the correct\n` +
+                    `  custom_tools configuration, or add them manually to your loop config:\n\n` +
+                    `    "loop": {\n` +
+                    `      "custom_tools": [\n` +
+                    `        { "name": "call_worker", "description": "...", "command": "python3 /home/user/helpers/orch_call.py org/worker@v1" }\n` +
+                    `      ]\n` +
+                    `    }\n\n`));
+            }
+        }
         // UX-2: Default required_secrets to [] when omitted for tool/agent types.
         // Prompt and skill types are exempt (prompt agents get LLM keys from platform,
         // skills don't run standalone).
@@ -1409,6 +1504,8 @@ function registerPublishCommand(program) {
                 process.stderr.write(chalk_1.default.yellow(`⚠ ${warning}\n`));
             }
         }
+        // Warn if workspace has no LLM vault keys for this agent's providers (UX-13-01)
+        await checkWorkspaceLlmKeys(config, workspaceId || org.id, org.slug, executionEngine, supportedProviders);
         // Show required secrets with setup instructions (F-18)
         if (manifest.required_secrets?.length) {
             process.stdout.write(`\nRequired secrets:\n`);

package/dist/commands/pull.js

@@ -50,7 +50,7 @@ function commandForEntrypoint(entrypoint) {
         || entrypoint.endsWith('.ts')) {
         return `node ${entrypoint}`;
     }
-    return `python ${entrypoint}`;
+    return `python3 ${entrypoint}`;
 }
 // ─── Agent Resolution ───────────────────────────────────────────────────────
 async function resolveAgent(config, org, agent, version, workspaceId) {
@@ -112,11 +112,14 @@ async function resolveAgent(config, org, agent, version, workspaceId) {
     if (!config.apiKey) {
         throw new api_1.ApiError(`Agent '${org}/${agent}@${version}' not found`, 404);
     }
-    const userOrg = await (0, api_1.getOrg)(config, workspaceId);
-    if (userOrg.slug !== org) {
-        throw new api_1.ApiError(`Agent '${org}/${agent}@${version}' not found`, 404);
+    // Try workspace-scoped search first, then fall back to personal org.
+    // This handles the case where the user is in a team workspace but the
+    // agent lives in their personal org (or vice versa).  The org_slug
+    // filter inside resolveFromMyAgents prevents cross-org contamination.
+    let data = await resolveFromMyAgents(config, agent, version, org, workspaceId);
+    if (!data && workspaceId) {
+        data = await resolveFromMyAgents(config, agent, version, org, undefined);
     }
-    const data = await resolveFromMyAgents(config, agent, version, org, workspaceId);
     if (!data) {
         throw new api_1.ApiError(`Agent '${org}/${agent}@${version}' not found`, 404);
     }
@@ -124,15 +127,10 @@ async function resolveAgent(config, org, agent, version, workspaceId) {
 }
 async function tryOwnerFallback(config, org, agent, version, workspaceId) {
     try {
-        const myAgents = await (0, api_1.listMyAgents)(config, workspaceId);
-        let match;
-        if (version === 'latest') {
-            match = myAgents
-                .filter(a => a.name === agent && a.org_slug === org)
-                .sort((a, b) => new Date(b.created_at).getTime() - new Date(a.created_at).getTime())[0];
-        }
-        else {
-            match = myAgents.find(a => a.name === agent && a.version === version && a.org_slug === org);
+        let match = findOwnerMatch(await (0, api_1.listMyAgents)(config, workspaceId), agent, version, org);
+        // Retry without workspace restriction to find agents in personal org
+        if (!match && workspaceId) {
+            match = findOwnerMatch(await (0, api_1.listMyAgents)(config, undefined), agent, version, org);
         }
         if (!match)
             return null;
@@ -143,6 +141,14 @@ async function tryOwnerFallback(config, org, agent, version, workspaceId) {
         return null;
     }
 }
+function findOwnerMatch(agents, agent, version, org) {
+    if (version === 'latest') {
+        return agents
+            .filter(a => a.name === agent && a.org_slug === org)
+            .sort((a, b) => new Date(b.created_at).getTime() - new Date(a.created_at).getTime())[0];
+    }
+    return agents.find(a => a.name === agent && a.version === version && a.org_slug === org);
+}
 async function resolveFromMyAgents(config, agent, version, org, workspaceId) {
     const agents = await (0, api_1.listMyAgents)(config, workspaceId);
     const matching = agents.filter(a => a.name === agent && a.org_slug === org);

package/dist/commands/run.js

@@ -57,6 +57,7 @@ const config_1 = require("../lib/config");
 const resolve_agent_1 = require("../lib/resolve-agent");
 const api_1 = require("../lib/api");
 const errors_1 = require("../lib/errors");
+const json_input_1 = require("../lib/json-input");
 const output_1 = require("../lib/output");
 const spinner_1 = require("../lib/spinner");
 const llm_1 = require("../lib/llm");
@@ -360,32 +361,6 @@ async function buildMultipartBody(filePaths, metadata) {
         sourceLabel: filePaths.length === 1 ? filePaths[0] : `${filePaths.length} files`,
     };
 }
-async function resolveJsonBody(input) {
-    let raw = input;
-    if (input.startsWith('@')) {
-        const source = input.slice(1);
-        if (!source) {
-            throw new errors_1.CliError('Invalid JSON input. Use a JSON string or @file.');
-        }
-        if (source === '-') {
-            const stdinData = await readStdin();
-            if (!stdinData) {
-                throw new errors_1.CliError('No stdin provided for JSON input.');
-            }
-            raw = stdinData.toString('utf8');
-        }
-        else {
-            await validateFilePath(source);
-            raw = await promises_1.default.readFile(source, 'utf8');
-        }
-    }
-    try {
-        return JSON.stringify(JSON.parse(raw));
-    }
-    catch {
-        throw (0, errors_1.jsonInputError)('data');
-    }
-}
 // ─── Keyed file & mount helpers ──────────────────────────────────────────────
 const KEYED_FILE_KEY_RE = /^[a-zA-Z_][a-zA-Z0-9_]*$/;
 function isKeyedFileArg(arg) {
@@ -494,7 +469,7 @@ async function buildInjectedPayload(options) {
     let merged = {};
     // 1. Start with --data
     if (options.dataOption) {
-        const resolved = await resolveJsonBody(options.dataOption);
+        const resolved = await (0, json_input_1.resolveJsonBody)(options.dataOption);
         merged = JSON.parse(resolved);
     }
     let totalBytes = 0;
@@ -787,6 +762,13 @@ async function detectAllLlmKeys(supportedProviders, config) {
     return providers;
 }
 async function executePromptLocally(agentData, inputData, skillPrompts = [], config, providerOverride, modelOverride) {
+    // Auto-detect provider from model name if not explicitly specified
+    if (!providerOverride && modelOverride) {
+        const detected = (0, llm_1.detectProviderFromModel)(modelOverride);
+        if (detected) {
+            providerOverride = detected;
+        }
+    }
     if (providerOverride) {
         (0, llm_1.validateProvider)(providerOverride);
     }
@@ -805,7 +787,7 @@ async function executePromptLocally(agentData, inputData, skillPrompts = [], con
             throw new errors_1.CliError(`No LLM key found for: ${providers}\n` +
                 `Set an environment variable (e.g., OPENAI_API_KEY), run 'orch secrets set <PROVIDER>_API_KEY <key>', or configure in web dashboard`);
         }
-        if (modelOverride && !providerOverride && allProviders.length > 1) {
+        if (modelOverride && allProviders.length > 1) {
             process.stderr.write(`Warning: --model specified without --provider. The model '${modelOverride}' will be used for all ${allProviders.length} fallback providers, which may cause errors if the model is incompatible.\n` +
                 `Consider specifying --provider to ensure correct model/provider pairing.\n\n`);
         }
@@ -855,6 +837,13 @@ async function executeAgentLocally(agentDir, prompt, inputData, outputSchema, cu
         throw new errors_1.CliError('Python 3 is required for local agent execution.\n' +
             'Install Python 3: https://python.org/downloads');
     }
+    // Auto-detect provider from model name if not explicitly specified
+    if (!providerOverride && modelOverride) {
+        const detected = (0, llm_1.detectProviderFromModel)(modelOverride);
+        if (detected) {
+            providerOverride = detected;
+        }
+    }
     // 2. Detect LLM provider + key
     const supportedProviders = manifest?.supported_providers || ['any'];
     const providersToCheck = providerOverride
@@ -1938,12 +1927,19 @@ async function executeCloud(agentRef, file, options) {
                 return;
             }
         }
-        catch {
-            // Non-fatal: if estimate fails, proceed with the run (or exit if --estimate-only)
+        catch (err) {
+            // Provide specific error messages based on failure type
+            const detail = err instanceof api_1.ApiError && err.status === 404
+                ? 'Agent not found.'
+                : err instanceof api_1.ApiError && err.status === 429
+                    ? 'Rate limited — try again shortly.'
+                    : err instanceof api_1.ApiError
+                        ? `API error (${err.status}).`
+                        : 'Network error — check your connection.';
             if (options.estimateOnly) {
-                throw new errors_1.CliError('Could not fetch cost estimate.');
+                throw new errors_1.CliError(`Could not fetch cost estimate: ${detail}`);
             }
-            process.stderr.write(chalk_1.default.gray('Could not fetch cost estimate. Proceeding...\n\n'));
+            process.stderr.write(chalk_1.default.gray(`Could not fetch cost estimate: ${detail} Proceeding with run...\n\n`));
         }
     }
     const endpoint = options.endpoint?.trim() || agentMeta.default_endpoint || 'analyze';
@@ -1968,18 +1964,8 @@ async function executeCloud(agentRef, file, options) {
             throw new errors_1.CliError('When using --key, you must also specify --provider (openai, anthropic, or gemini)');
         }
         (0, llm_1.validateProvider)(effectiveProvider);
-        if (options.model && effectiveProvider) {
-            const modelLower = options.model.toLowerCase();
-            const providerPatterns = {
-                openai: /^(gpt-|o1-|o3-|davinci|text-)/,
-                anthropic: /^claude-/,
-                gemini: /^gemini-/,
-                ollama: /^(llama|mistral|deepseek|phi|qwen)/,
-            };
-            const expectedPattern = providerPatterns[effectiveProvider];
-            if (expectedPattern && !expectedPattern.test(modelLower)) {
-                process.stderr.write(`Warning: Model '${options.model}' may not be a ${effectiveProvider} model.\n\n`);
-            }
+        if (options.model) {
+            (0, llm_1.warnProviderModelMismatch)(options.model, effectiveProvider);
         }
         llmKey = options.key;
         llmProvider = effectiveProvider;
@@ -1990,17 +1976,7 @@ async function executeCloud(agentRef, file, options) {
             (0, llm_1.validateProvider)(effectiveProvider);
             providersToCheck = [effectiveProvider];
             if (options.model) {
-                const modelLower = options.model.toLowerCase();
-                const providerPatterns = {
-                    openai: /^(gpt-|o1-|o3-|davinci|text-)/,
-                    anthropic: /^claude-/,
-                    gemini: /^gemini-/,
-                    ollama: /^(llama|mistral|deepseek|phi|qwen)/,
-                };
-                const expectedPattern = providerPatterns[effectiveProvider];
-                if (expectedPattern && !expectedPattern.test(modelLower)) {
-                    process.stderr.write(`Warning: Model '${options.model}' may not be a ${effectiveProvider} model.\n\n`);
-                }
+                (0, llm_1.warnProviderModelMismatch)(options.model, effectiveProvider);
             }
         }
         const detected = await (0, llm_1.detectLlmKey)(providersToCheck, resolved);
@@ -2075,7 +2051,7 @@ async function executeCloud(agentRef, file, options) {
         }
         if (options.data && filePaths.length > 0) {
             // Merge file content into --data
-            const resolvedBody = await resolveJsonBody(options.data);
+            const resolvedBody = await (0, json_input_1.resolveJsonBody)(options.data);
             const bodyObj = JSON.parse(resolvedBody);
             if (cloudEngine !== 'code_runtime') {
                 const fieldName = resolveFileField(options.fileField, agentMeta.input_schema);
@@ -2123,7 +2099,7 @@ async function executeCloud(agentRef, file, options) {
             }
         }
         else if (options.data) {
-            const resolvedBody = await resolveJsonBody(options.data);
+            const resolvedBody = await (0, json_input_1.resolveJsonBody)(options.data);
             warnIfLocalPathReference(resolvedBody);
             const parsedBody = JSON.parse(resolvedBody);
             warnInputSchemaErrors(parsedBody, agentMeta.input_schema);
@@ -2579,7 +2555,22 @@ async function executeCloud(agentRef, file, options) {
         process.stdout.write(`${payload}\n`);
         return;
     }
-    (0, output_1.printJson)(payload);
+    // In verbose mode, strip stdout/stderr from the JSON payload since they'll
+    // be displayed in dedicated colored sections below (avoids duplication)
+    if (options.verbose && typeof payload === 'object' && payload !== null && 'metadata' in payload) {
+        const payloadObj = payload;
+        const meta = payloadObj.metadata;
+        if (meta && (meta.stdout || meta.stderr)) {
+            const { stdout: _s, stderr: _e, ...cleanMeta } = meta;
+            (0, output_1.printJson)({ ...payloadObj, metadata: cleanMeta });
+        }
+        else {
+            (0, output_1.printJson)(payload);
+        }
+    }
+    else {
+        (0, output_1.printJson)(payload);
+    }
     // Display timing metadata on stderr (non-json mode only)
     if (typeof payload === 'object' && payload !== null && 'metadata' in payload) {
         const meta = payload.metadata;
@@ -2591,7 +2582,14 @@ async function executeCloud(agentRef, file, options) {
                 if (stderr) {
                     process.stderr.write(chalk_1.default.bold.yellow('\n--- stderr ---') + '\n' + stderr + '\n');
                 }
-                if (stdout) {
+                // For code_runtime agents, stdout IS the data — skip if it would
+                // duplicate what's already visible in the JSON data field
+                const dataStr = typeof payload.data === 'string'
+                    ? payload.data
+                    : JSON.stringify(payload.data);
+                const stdoutDuplicatesData = isCodeRuntimeAgent && stdout && dataStr &&
+                    stdout.trim() === dataStr.trim();
+                if (stdout && !stdoutDuplicatesData) {
                     process.stderr.write(chalk_1.default.bold.cyan('\n--- stdout ---') + '\n' + stdout + '\n');
                 }
                 if (!stderr && !stdout) {
@@ -2637,16 +2635,13 @@ async function executeLocal(agentRef, args, options) {
         options.input = JSON.stringify({ path: options.path });
     }
     if (options.model && options.provider) {
-        const modelLower = options.model.toLowerCase();
-        const providerPatterns = {
-            openai: /^(gpt-|o1-|o3-|davinci|text-)/,
-            anthropic: /^claude-/,
-            gemini: /^gemini-/,
-            ollama: /^(llama|mistral|deepseek|phi|qwen)/,
-        };
-        const expectedPattern = providerPatterns[options.provider];
-        if (expectedPattern && !expectedPattern.test(modelLower)) {
-            process.stderr.write(`Warning: Model '${options.model}' may not be a ${options.provider} model.\n\n`);
+        (0, llm_1.warnProviderModelMismatch)(options.model, options.provider);
+    }
+    else if (options.model && !options.provider) {
+        const detected = (0, llm_1.detectProviderFromModel)(options.model);
+        if (detected) {
+            options.provider = detected;
+            process.stderr.write(`Auto-detected provider: ${detected} (from model '${options.model}')\n\n`);
         }
     }
     const resolved = await (0, config_1.getResolvedConfig)();
@@ -2694,7 +2689,7 @@ async function executeLocal(agentRef, args, options) {
             return;
         }
         // Resolve @file.json / @- stdin syntax before parsing
-        const resolvedInput = await resolveJsonBody(options.input);
+        const resolvedInput = await (0, json_input_1.resolveJsonBody)(options.input);
         let agentInputData;
         try {
             agentInputData = JSON.parse(resolvedInput);

package/dist/commands/schedule.js

@@ -11,6 +11,7 @@ const promises_1 = __importDefault(require("readline/promises"));
 const config_1 = require("../lib/config");
 const api_1 = require("../lib/api");
 const errors_1 = require("../lib/errors");
+const json_input_1 = require("../lib/json-input");
 const output_1 = require("../lib/output");
 const agent_ref_1 = require("../lib/agent-ref");
 const api_2 = require("../lib/api");
@@ -187,12 +188,8 @@ function registerScheduleCommand(program) {
         const rawInput = options.data ?? options.input;
         let inputData;
         if (rawInput) {
-            try {
-                inputData = JSON.parse(rawInput);
-            }
-            catch {
-                throw new errors_1.CliError('Invalid JSON in --data. Use single quotes: --data \'{"key": "value"}\'');
-            }
+            const resolved = await (0, json_input_1.resolveJsonBody)(rawInput);
+            inputData = JSON.parse(resolved);
         }
         const scheduleType = options.webhook ? 'webhook' : 'cron';
         const body = {

package/dist/commands/templates/cron-job.js

@@ -22,7 +22,7 @@ Schedule examples:
   orch schedule create org/my-job --cron "0 */6 * * *"  # Every 6 hours
 
 Local test:
-  echo '{}' | python main.py
+  echo '{}' | python3 main.py
 """
 
 import json

package/dist/commands/templates/github-weekly-summary.js

@@ -14,7 +14,7 @@ exports.TEMPLATE_MANIFEST = `{
   "type": "agent",
   "description": "Weekly GitHub activity summary delivered to Discord. Uses Claude to analyse commits, PRs, and issues — surfaces patterns, risks, and trends.",
   "runtime": {
-    "command": "python main.py"
+    "command": "python3 main.py"
   },
   "required_secrets": [
     "ORCHAGENT_API_KEY",

package/dist/commands/test.js

@@ -640,7 +640,7 @@ function runEntrypointWithInput(agentDir, entrypoint, stdinData, verbose) {
 /**
  * Run fixture tests for code_runtime agents by executing the entrypoint
  * with fixture input as stdin and validating the JSON output.
- * Same interface as E2B: python main.py < input.json
+ * Same interface as E2B: python3 main.py < input.json
  */
 async function runCodeRuntimeFixtureTests(agentDir, fixtures, entrypoint, verbose) {
     process.stderr.write(chalk_1.default.blue('\nRunning fixture tests (code runtime)...\n\n'));
@@ -660,7 +660,7 @@ async function runCodeRuntimeFixtureTests(agentDir, fixtures, entrypoint, verbos
                 throw new errors_1.CliError(`Invalid JSON in ${fixtureName}: ${e.message}`);
             }
             const fixture = validateFixture(parsed, fixturePath);
-            // Run entrypoint with fixture input as stdin (same as E2B: python main.py < input.json)
+            // Run entrypoint with fixture input as stdin (same as E2B: python3 main.py < input.json)
             const inputJson = JSON.stringify(fixture.input);
             const result = await runEntrypointWithInput(agentDir, entrypoint, inputJson, verbose);
             if (result.code !== 0) {

package/dist/commands/trace.js

@@ -105,6 +105,10 @@ function registerTraceCommand(program) {
             throw new errors_1.CliError('Missing API key. Run `orch login` first.');
         }
         const workspaceId = await resolveWorkspaceId(config, options.workspace);
+        // Accept req_xxx format (gateway request_id shown in run output)
+        if (/^req_[0-9a-f]+$/i.test(runId)) {
+            runId = runId.slice(4);
+        }
         // Resolve short run IDs
         let resolvedRunId = runId;
         if (isUuid(runId)) {

package/dist/commands/validate.js

@@ -172,6 +172,7 @@ Options:
                             const org = await (0, api_1.getOrg)(config, workspaceId);
                             const depResults = await (0, publish_1.checkDependencies)(config, deps, org.slug, workspaceId);
                             const notFound = depResults.filter(r => r.status === 'not_found');
+                            const notFoundCrossOrg = depResults.filter(r => r.status === 'not_found_cross_org');
                             const notCallable = depResults.filter(r => r.status === 'found_not_callable');
                             if (notFound.length > 0) {
                                 for (const dep of notFound) {
@@ -181,6 +182,14 @@ Options:
                                     });
                                 }
                             }
+                            if (notFoundCrossOrg.length > 0) {
+                                for (const dep of notFoundCrossOrg) {
+                                    serverIssues.push({
+                                        level: 'warning',
+                                        message: `Dependency not found (unpublished or not accessible from this workspace): ${dep.ref}`,
+                                    });
+                                }
+                            }
                             if (notCallable.length > 0) {
                                 for (const dep of notCallable) {
                                     serverIssues.push({

package/dist/lib/api.js

@@ -380,15 +380,18 @@ async function getAgentWithFallback(config, org, agentName, version, workspaceId
     if (!config.apiKey) {
         throw new ApiError(`Agent '${org}/${agentName}@${version}' not found`, 404);
     }
-    const userOrg = await getOrg(config, workspaceId);
-    if (userOrg.slug !== org) {
-        throw new ApiError(`Agent '${org}/${agentName}@${version}' not found`, 404);
-    }
+    // Try authenticated lookup in the resolved workspace context
     const myAgent = await getMyAgent(config, agentName, version, workspaceId);
-    if (!myAgent) {
-        throw new ApiError(`Agent '${org}/${agentName}@${version}' not found`, 404);
+    if (myAgent)
+        return myAgent;
+    // Fallback: if workspace was specified, also check personal org —
+    // handles cross-workspace lookups (e.g., team context looking up personal agent)
+    if (workspaceId) {
+        const personalAgent = await getMyAgent(config, agentName, version);
+        if (personalAgent)
+            return personalAgent;
     }
-    return myAgent;
+    throw new ApiError(`Agent '${org}/${agentName}@${version}' not found`, 404);
 }
 /**
  * Resolve a workspace ID from an org slug.

package/dist/lib/batch-publish.js

@@ -6,6 +6,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.discoverAgents = discoverAgents;
 exports.topoSort = topoSort;
 exports.formatPublishPlan = formatPublishPlan;
+exports.formatDryRunSummary = formatDryRunSummary;
 const promises_1 = __importDefault(require("fs/promises"));
 const path_1 = __importDefault(require("path"));
 const chalk_1 = __importDefault(require("chalk"));
@@ -221,3 +222,75 @@ function formatPublishPlan(sorted, orgSlug) {
     lines.push('');
     return lines.join('\n');
 }
+/**
+ * Format an enhanced dry-run summary for --all --dry-run.
+ * Shows publish ordering, local/external dependencies, and graph health.
+ */
+function formatDryRunSummary(sorted, orgSlug) {
+    const lines = [];
+    const localNames = new Set(sorted.map(a => a.name));
+    // Collect external deps (referenced but not in the project)
+    const externalDeps = new Map(); // ref → [agent names that reference it]
+    for (const agent of sorted) {
+        for (const ref of agent.dependencyRefs) {
+            const depName = ref.includes('/') ? ref.split('/')[1] : ref;
+            if (!localNames.has(depName)) {
+                const consumers = externalDeps.get(ref) || [];
+                consumers.push(agent.name);
+                externalDeps.set(ref, consumers);
+            }
+        }
+    }
+    // Publish order table
+    lines.push('');
+    lines.push(chalk_1.default.bold(`  Publish order (${sorted.length} agent${sorted.length === 1 ? '' : 's'}):`));
+    lines.push('');
+    for (let i = 0; i < sorted.length; i++) {
+        const agent = sorted[i];
+        const type = agent.isSkill ? 'skill' : 'agent';
+        const prefix = orgSlug ? `${orgSlug}/` : '';
+        // Separate local and external deps for clarity
+        const localDeps = [];
+        const extDeps = [];
+        for (const ref of agent.dependencyRefs) {
+            const depName = ref.includes('/') ? ref.split('/')[1] : ref;
+            if (localNames.has(depName)) {
+                localDeps.push(depName);
+            }
+            else {
+                extDeps.push(ref);
+            }
+        }
+        let depInfo = '';
+        if (localDeps.length > 0 || extDeps.length > 0) {
+            const parts = [];
+            if (localDeps.length > 0)
+                parts.push(localDeps.join(', '));
+            if (extDeps.length > 0)
+                parts.push(extDeps.map(d => `${d} ${chalk_1.default.yellow('(external)')}`).join(', '));
+            depInfo = ` ${chalk_1.default.gray('→')} ${parts.join(', ')}`;
+        }
+        lines.push(`  ${chalk_1.default.bold(`${i + 1}.`)} ${prefix}${agent.name} ${chalk_1.default.gray(`[${type}]`)}${depInfo}`);
+        lines.push(`     ${chalk_1.default.gray(agent.dirName + '/')}`);
+    }
+    // External dependencies section
+    if (externalDeps.size > 0) {
+        lines.push('');
+        lines.push(chalk_1.default.yellow(`  External dependencies (must already be published):`));
+        for (const [ref, consumers] of externalDeps) {
+            lines.push(`    ${ref} ${chalk_1.default.gray(`← ${consumers.join(', ')}`)}`);
+        }
+    }
+    // Summary
+    lines.push('');
+    const skillCount = sorted.filter(a => a.isSkill).length;
+    const agentCount = sorted.length - skillCount;
+    const parts = [];
+    if (agentCount > 0)
+        parts.push(`${agentCount} agent${agentCount === 1 ? '' : 's'}`);
+    if (skillCount > 0)
+        parts.push(`${skillCount} skill${skillCount === 1 ? '' : 's'}`);
+    lines.push(chalk_1.default.green(`  ✓ ${parts.join(', ')} ready to publish (no circular dependencies)`));
+    lines.push('');
+    return lines.join('\n');
+}

package/dist/lib/json-input.js

@@ -0,0 +1,60 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveJsonBody = resolveJsonBody;
+const promises_1 = __importDefault(require("fs/promises"));
+const errors_1 = require("./errors");
+async function readStdin() {
+    if (process.stdin.isTTY)
+        return null;
+    const chunks = [];
+    for await (const chunk of process.stdin) {
+        chunks.push(Buffer.from(chunk));
+    }
+    if (!chunks.length)
+        return null;
+    return Buffer.concat(chunks);
+}
+async function validateFilePath(filePath) {
+    const stat = await promises_1.default.stat(filePath);
+    if (stat.isDirectory()) {
+        throw new errors_1.CliError(`Expected a file but got a directory: ${filePath}\n\n` +
+            `Provide a JSON file path, e.g. --data @input.json`);
+    }
+}
+/**
+ * Resolve a --data value to a validated JSON string.
+ *
+ * Supports three input forms:
+ *   - Plain JSON string:  '{"key":"value"}'
+ *   - File reference:     @input.json
+ *   - Stdin pipe:         @-
+ */
+async function resolveJsonBody(input) {
+    let raw = input;
+    if (input.startsWith('@')) {
+        const source = input.slice(1);
+        if (!source) {
+            throw new errors_1.CliError('Invalid JSON input. Use a JSON string or @file.');
+        }
+        if (source === '-') {
+            const stdinData = await readStdin();
+            if (!stdinData) {
+                throw new errors_1.CliError('No stdin provided for JSON input.');
+            }
+            raw = stdinData.toString('utf8');
+        }
+        else {
+            await validateFilePath(source);
+            raw = await promises_1.default.readFile(source, 'utf8');
+        }
+    }
+    try {
+        return JSON.stringify(JSON.parse(raw));
+    }
+    catch {
+        throw (0, errors_1.jsonInputError)('data');
+    }
+}

package/dist/lib/llm.js

@@ -6,7 +6,7 @@
  * Used by run, call, and skill commands.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.DEFAULT_MODELS = exports.PROVIDER_ENV_VARS = exports.LlmError = void 0;
+exports.MODEL_PROVIDER_PATTERNS = exports.DEFAULT_MODELS = exports.PROVIDER_ENV_VARS = exports.LlmError = void 0;
 exports.isRateLimitError = isRateLimitError;
 exports.detectLlmKeyFromEnv = detectLlmKeyFromEnv;
 exports.detectLlmKey = detectLlmKey;
@@ -15,6 +15,8 @@ exports.buildPrompt = buildPrompt;
 exports.callLlm = callLlm;
 exports.callLlmWithFallback = callLlmWithFallback;
 exports.validateProvider = validateProvider;
+exports.detectProviderFromModel = detectProviderFromModel;
+exports.warnProviderModelMismatch = warnProviderModelMismatch;
 const errors_1 = require("./errors");
 const llm_errors_1 = require("./llm-errors");
 class LlmError extends errors_1.CliError {
@@ -265,3 +267,37 @@ function validateProvider(provider) {
         throw new errors_1.CliError(`Invalid provider: ${provider}. Valid: ${validProviders.join(', ')}`);
     }
 }
+/**
+ * Model-name patterns for auto-detecting the LLM provider.
+ * Tested against the lowercased model string.
+ */
+exports.MODEL_PROVIDER_PATTERNS = {
+    openai: /^(gpt-|o1-|o3-|o4-|davinci|text-)/,
+    anthropic: /^claude-/,
+    gemini: /^gemini-/,
+    ollama: /^(llama|mistral|deepseek|phi|qwen)/,
+};
+/**
+ * Auto-detect the LLM provider from a model name using prefix patterns.
+ * Returns the provider string if a match is found, or null if ambiguous/unknown.
+ */
+function detectProviderFromModel(model) {
+    const modelLower = model.toLowerCase();
+    for (const [provider, pattern] of Object.entries(exports.MODEL_PROVIDER_PATTERNS)) {
+        if (pattern.test(modelLower)) {
+            return provider;
+        }
+    }
+    return null;
+}
+/**
+ * Warn if a model name doesn't match the expected provider's pattern.
+ * Used when both --model and --provider are explicitly specified.
+ */
+function warnProviderModelMismatch(model, provider) {
+    const modelLower = model.toLowerCase();
+    const expectedPattern = exports.MODEL_PROVIDER_PATTERNS[provider];
+    if (expectedPattern && !expectedPattern.test(modelLower)) {
+        process.stderr.write(`Warning: Model '${model}' may not be a ${provider} model.\n\n`);
+    }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@orchagent/cli",
-  "version": "0.3.101",
+  "version": "0.3.103",
   "description": "Command-line interface for orchagent — deploy and run AI agents for your team",
   "license": "MIT",
   "author": "orchagent <hello@orchagent.io>",