@orchagent/cli 0.3.104 → 0.3.107

package/dist/commands/info.js

@@ -91,6 +91,8 @@ async function getAgentInfo(config, org, agent, version, workspaceId) {
             default_skills: meta.default_skills || [],
             custom_tools: extractCustomTools(manifest),
             environment: manifest?.environment,
+            required_secrets: meta.required_secrets || [],
+            optional_secrets: meta.optional_secrets || [],
         };
     }
     catch (err) {
@@ -139,6 +141,8 @@ async function getAgentInfo(config, org, agent, version, workspaceId) {
         default_skills: targetAgent.default_skills || [],
         custom_tools: extractCustomTools(agentManifest),
         environment: agentManifest?.environment,
+        required_secrets: targetAgent.required_secrets || [],
+        optional_secrets: targetAgent.optional_secrets || [],
     };
 }
 function registerInfoCommand(program) {
@@ -180,6 +184,15 @@ function registerInfoCommand(program) {
             process.stdout.write(`Callable: ${chalk_1.default.green('yes')} — other agents can invoke this via the orchagent SDK\n`);
         }
         process.stdout.write(`Providers: ${agentData.supported_providers.join(', ')}\n`);
+        // Display secrets
+        const hasRequired = agentData.required_secrets && agentData.required_secrets.length > 0;
+        const hasOptional = agentData.optional_secrets && agentData.optional_secrets.length > 0;
+        if (hasRequired) {
+            process.stdout.write(`Secrets (required): ${agentData.required_secrets.join(', ')}\n`);
+        }
+        if (hasOptional) {
+            process.stdout.write(`Secrets (optional): ${agentData.optional_secrets.join(', ')}\n`);
+        }
         if (agentData.type === 'tool') {
             // Don't show internal routing URLs - they confuse users
             if (agentData.url && !agentData.url.includes('.internal')) {

package/dist/commands/publish.js

@@ -469,6 +469,8 @@ async function checkWorkspaceLlmKeys(config, workspaceId, workspaceSlug, executi
     if (executionEngine !== 'direct_llm' && executionEngine !== 'managed_loop') {
         return;
     }
+    // Reverse map: secret name → provider (e.g. ANTHROPIC_API_KEY → anthropic)
+    const SECRET_NAME_TO_PROVIDER = Object.fromEntries(Object.entries(PROVIDER_TO_SECRET_NAME).map(([provider, name]) => [name, provider]));
     let secrets;
     try {
         const result = await (0, api_1.request)(config, 'GET', `/workspaces/${workspaceId}/secrets`);
@@ -479,8 +481,18 @@ async function checkWorkspaceLlmKeys(config, workspaceId, workspaceSlug, executi
     catch {
         return; // Can't reach API or unexpected response — skip warning silently
     }
-    const llmKeys = secrets.filter(s => s.secret_type === 'llm_key' && s.llm_provider);
-    const availableProviders = new Set(llmKeys.map(s => s.llm_provider));
+    // Resolve providers from both secret_type metadata AND secret name.
+    // Gateway resolves LLM keys by name, but `orch secrets set` creates them
+    // with secret_type='custom'. Match by name to avoid false warnings.
+    const availableProviders = new Set();
+    for (const s of secrets) {
+        if (s.secret_type === 'llm_key' && s.llm_provider) {
+            availableProviders.add(s.llm_provider);
+        }
+        if (s.name && s.name in SECRET_NAME_TO_PROVIDER) {
+            availableProviders.add(SECRET_NAME_TO_PROVIDER[s.name]);
+        }
+    }
     // Determine which providers the agent needs
     const needsAny = supportedProviders.includes('any');
     if (needsAny) {
@@ -1231,6 +1243,7 @@ function registerPublishCommand(program) {
                     sdk_compatible: sdkCompatible || undefined,
                     manifest: manifest.manifest,
                     required_secrets: manifest.required_secrets,
+                    optional_secrets: manifest.optional_secrets,
                     default_skills: skillsFromFlag || manifest.default_skills,
                     skills_locked: manifest.skills_locked || options.skillsLocked || undefined,
                     allow_local_download: options.localDownload !== false,
@@ -1332,6 +1345,7 @@ function registerPublishCommand(program) {
                 // Orchestration manifest (includes dependencies)
                 manifest: manifest.manifest,
                 required_secrets: manifest.required_secrets,
+                optional_secrets: manifest.optional_secrets,
                 default_skills: skillsFromFlag || manifest.default_skills,
                 skills_locked: manifest.skills_locked || options.skillsLocked || undefined,
                 allow_local_download: options.localDownload !== false,

package/dist/commands/secrets.js

@@ -10,6 +10,13 @@ const config_1 = require("../lib/config");
 const api_1 = require("../lib/api");
 const errors_1 = require("../lib/errors");
 const output_1 = require("../lib/output");
+// Known LLM key names → provider. Must stay in sync with gateway's
+// _PROVIDER_TO_SECRET_NAME (db.py) and publish.ts PROVIDER_TO_SECRET_NAME.
+const LLM_KEY_NAME_TO_PROVIDER = {
+    ANTHROPIC_API_KEY: 'anthropic',
+    OPENAI_API_KEY: 'openai',
+    GEMINI_API_KEY: 'gemini',
+};
 // ============================================
 // HELPERS
 // ============================================
@@ -145,11 +152,13 @@ function registerSecretsCommand(program) {
             }
         }
         else {
-            // Create new secret
+            // Create new secret — auto-classify LLM keys by name
+            const llmProvider = LLM_KEY_NAME_TO_PROVIDER[name];
             const body = {
                 name,
                 value,
-                secret_type: 'custom',
+                secret_type: llmProvider ? 'llm_key' : 'custom',
+                ...(llmProvider && { llm_provider: llmProvider }),
             };
             if (options.description !== undefined) {
                 body.description = options.description;

package/dist/commands/skill.js

@@ -298,7 +298,8 @@ function registerSkillCommand(program) {
     skill
         .command('create [name]')
         .description('Create a new skill from template')
-        .action(async (name) => {
+        .option('-y, --yes', 'Skip confirmation prompt')
+        .action(async (name, options) => {
         const cwd = process.cwd();
         const skillName = name || path_1.default.basename(cwd);
         const skillPath = path_1.default.join(cwd, 'SKILL.md');
@@ -311,6 +312,20 @@ function registerSkillCommand(program) {
             if (err.code !== 'ENOENT')
                 throw err;
         }
+        // Confirm before writing to CWD (TTY only, skip with --yes)
+        if (!options.yes && process.stdout.isTTY) {
+            const readline = await Promise.resolve().then(() => __importStar(require('readline/promises')));
+            const rl = readline.createInterface({
+                input: process.stdin,
+                output: process.stdout,
+            });
+            const answer = await rl.question(`Create ${skillPath}? (y/N): `);
+            rl.close();
+            if (answer.trim().toLowerCase() !== 'y' && answer.trim().toLowerCase() !== 'yes') {
+                process.stdout.write('Aborted.\n');
+                return;
+            }
+        }
         const template = `---
 name: ${skillName}
 description: When to use this skill

package/dist/lib/llm.js

@@ -37,10 +37,10 @@ exports.PROVIDER_ENV_VARS = {
     gemini: 'GEMINI_API_KEY',
     ollama: 'OLLAMA_HOST',
 };
-// Default models for each provider (best models)
+// Default models for each provider
 exports.DEFAULT_MODELS = {
     openai: 'gpt-5.2',
-    anthropic: 'claude-opus-4-5-20251101',
+    anthropic: 'claude-sonnet-4-6',
     gemini: 'gemini-2.5-pro',
     ollama: 'llama3.2',
 };

package/dist/lib/spinner.js

@@ -11,6 +11,7 @@ exports.createProgressSpinner = createProgressSpinner;
 exports.formatElapsed = formatElapsed;
 exports.createElapsedSpinner = createElapsedSpinner;
 const ora_1 = __importDefault(require("ora"));
+const errors_1 = require("./errors");
 // Global flag to control spinner visibility (set via --no-progress)
 let progressEnabled = true;
 /**
@@ -99,7 +100,10 @@ async function withSpinner(text, fn, options) {
             : options?.failText || (err instanceof Error ? err.message : 'Failed');
         spinner.fail(failMsg);
         // Mark as already displayed so exitWithError doesn't print again
-        if (err instanceof Error) {
+        if (err instanceof errors_1.CliError) {
+            err.displayed = true;
+        }
+        else if (err instanceof Error) {
             ;
             err._displayed = true;
         }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@orchagent/cli",
-  "version": "0.3.104",
+  "version": "0.3.107",
   "description": "Command-line interface for orchagent — deploy and run AI agents for your team",
   "license": "MIT",
   "author": "orchagent <hello@orchagent.io>",