@orchagent/cli 0.3.103 → 0.3.106

package/dist/commands/info.js

@@ -91,6 +91,8 @@ async function getAgentInfo(config, org, agent, version, workspaceId) {
             default_skills: meta.default_skills || [],
             custom_tools: extractCustomTools(manifest),
             environment: manifest?.environment,
+            required_secrets: meta.required_secrets || [],
+            optional_secrets: meta.optional_secrets || [],
         };
     }
     catch (err) {
@@ -139,6 +141,8 @@ async function getAgentInfo(config, org, agent, version, workspaceId) {
         default_skills: targetAgent.default_skills || [],
         custom_tools: extractCustomTools(agentManifest),
         environment: agentManifest?.environment,
+        required_secrets: targetAgent.required_secrets || [],
+        optional_secrets: targetAgent.optional_secrets || [],
     };
 }
 function registerInfoCommand(program) {
@@ -180,6 +184,15 @@ function registerInfoCommand(program) {
             process.stdout.write(`Callable: ${chalk_1.default.green('yes')} — other agents can invoke this via the orchagent SDK\n`);
         }
         process.stdout.write(`Providers: ${agentData.supported_providers.join(', ')}\n`);
+        // Display secrets
+        const hasRequired = agentData.required_secrets && agentData.required_secrets.length > 0;
+        const hasOptional = agentData.optional_secrets && agentData.optional_secrets.length > 0;
+        if (hasRequired) {
+            process.stdout.write(`Secrets (required): ${agentData.required_secrets.join(', ')}\n`);
+        }
+        if (hasOptional) {
+            process.stdout.write(`Secrets (optional): ${agentData.optional_secrets.join(', ')}\n`);
+        }
         if (agentData.type === 'tool') {
             // Don't show internal routing URLs - they confuse users
             if (agentData.url && !agentData.url.includes('.internal')) {

package/dist/commands/publish.js

@@ -1231,6 +1231,7 @@ function registerPublishCommand(program) {
                     sdk_compatible: sdkCompatible || undefined,
                     manifest: manifest.manifest,
                     required_secrets: manifest.required_secrets,
+                    optional_secrets: manifest.optional_secrets,
                     default_skills: skillsFromFlag || manifest.default_skills,
                     skills_locked: manifest.skills_locked || options.skillsLocked || undefined,
                     allow_local_download: options.localDownload !== false,
@@ -1332,6 +1333,7 @@ function registerPublishCommand(program) {
                 // Orchestration manifest (includes dependencies)
                 manifest: manifest.manifest,
                 required_secrets: manifest.required_secrets,
+                optional_secrets: manifest.optional_secrets,
                 default_skills: skillsFromFlag || manifest.default_skills,
                 skills_locked: manifest.skills_locked || options.skillsLocked || undefined,
                 allow_local_download: options.localDownload !== false,

package/dist/commands/pull.js

@@ -128,13 +128,21 @@ async function resolveAgent(config, org, agent, version, workspaceId) {
 async function tryOwnerFallback(config, org, agent, version, workspaceId) {
     try {
         let match = findOwnerMatch(await (0, api_1.listMyAgents)(config, workspaceId), agent, version, org);
+        let effectiveWorkspaceId = workspaceId;
         // Retry without workspace restriction to find agents in personal org
         if (!match && workspaceId) {
             match = findOwnerMatch(await (0, api_1.listMyAgents)(config, undefined), agent, version, org);
+            effectiveWorkspaceId = undefined;
         }
         if (!match)
             return null;
-        const agentData = await (0, api_1.request)(config, 'GET', `/agents/${match.id}`);
+        // Pass workspace context so GET /agents/{id} uses the correct org scope.
+        // Without this header, the gateway scopes to the caller's personal org,
+        // which 404s when the agent lives in a team workspace.
+        const headers = {};
+        if (effectiveWorkspaceId)
+            headers['X-Workspace-Id'] = effectiveWorkspaceId;
+        const agentData = await (0, api_1.request)(config, 'GET', `/agents/${match.id}`, { headers });
         return mapAgentToPullData(agentData);
     }
     catch {
@@ -164,7 +172,13 @@ async function resolveFromMyAgents(config, agent, version, org, workspaceId) {
             return null;
         target = found;
     }
-    const agentData = await (0, api_1.request)(config, 'GET', `/agents/${target.id}`);
+    // Pass workspace context so GET /agents/{id} uses the correct org scope.
+    // Without this header, the gateway scopes to the caller's personal org,
+    // which 404s when the agent lives in a team workspace.
+    const headers = {};
+    if (workspaceId)
+        headers['X-Workspace-Id'] = workspaceId;
+    const agentData = await (0, api_1.request)(config, 'GET', `/agents/${target.id}`, { headers });
     return mapAgentToPullData(agentData);
 }
 function mapAgentToPullData(agent) {

package/dist/commands/run.js

@@ -1887,7 +1887,7 @@ async function executeCloud(agentRef, file, options) {
     // --estimate-only: show cost estimate and exit without running
     if (options.estimate || options.estimateOnly) {
         try {
-            const est = await (0, api_1.getAgentCostEstimate)(resolved, org, agentName, version);
+            const est = await (0, api_1.getAgentCostEstimate)(resolved, org, agentName, version, workspaceId);
             const e = est.estimate;
             if (e.sample_size === 0) {
                 process.stderr.write(chalk_1.default.yellow('\nNo run history available for cost estimation.\n'));
@@ -2875,7 +2875,7 @@ function registerRunCommand(program) {
         // Local-only options
         .option('--download-only', 'Just download the agent, do not execute (local only)')
         .option('--with-deps', 'Automatically download all dependencies (local only)')
-        .option('--here', 'Scan current directory (local only)')
+        .option('--here', 'Send current directory as path input, for tool agents with a path field (local only)')
         .option('--path <dir>', 'Shorthand for --data \'{"path": "<dir>"}\' (local only)')
         .addHelpText('after', `
 Examples:

package/dist/lib/api.js

@@ -286,10 +286,11 @@ async function getPublicAgent(config, org, agent, version) {
 }
 async function getAgentCostEstimate(config, org, agent, version, workspaceId) {
     const path = `/public/agents/${org}/${agent}/${version}/cost-estimate`;
-    if (workspaceId && config.apiKey) {
-        return request(config, 'GET', path, {
-            headers: { 'X-Workspace-Id': workspaceId },
-        });
+    if (config.apiKey) {
+        const headers = {};
+        if (workspaceId)
+            headers['X-Workspace-Id'] = workspaceId;
+        return request(config, 'GET', path, { headers });
     }
     return publicRequest(config, path);
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@orchagent/cli",
-  "version": "0.3.103",
+  "version": "0.3.106",
   "description": "Command-line interface for orchagent — deploy and run AI agents for your team",
   "license": "MIT",
   "author": "orchagent <hello@orchagent.io>",