@orchagent/cli 0.3.8 → 0.3.11

package/dist/commands/call.js

@@ -13,6 +13,41 @@ const output_1 = require("../lib/output");
 const llm_1 = require("../lib/llm");
 const analytics_1 = require("../lib/analytics");
 const DEFAULT_VERSION = 'latest';
+// Keys that might indicate local file path references in JSON payloads
+const LOCAL_PATH_KEYS = ['path', 'directory', 'file', 'filepath', 'dir', 'folder', 'local'];
+/**
+ * Check if a parsed JSON object contains keys that might reference local filesystem paths.
+ * Returns the first matching key found, or undefined if none found.
+ */
+function findLocalPathKey(obj) {
+    if (typeof obj !== 'object' || obj === null) {
+        return undefined;
+    }
+    const keys = Object.keys(obj);
+    for (const key of keys) {
+        if (LOCAL_PATH_KEYS.includes(key.toLowerCase())) {
+            return key;
+        }
+    }
+    return undefined;
+}
+/**
+ * Emit a warning to stderr if the payload contains local path references.
+ */
+function warnIfLocalPathReference(jsonBody) {
+    try {
+        const parsed = JSON.parse(jsonBody);
+        const pathKey = findLocalPathKey(parsed);
+        if (pathKey) {
+            process.stderr.write(`Warning: Your payload contains a local path reference ('${pathKey}').\n` +
+                `Remote agents cannot access your local filesystem. The path will be interpreted\n` +
+                `by the server, not your local machine. Use --help for more information.\n\n`);
+        }
+    }
+    catch {
+        // If parsing fails, skip the warning (the actual error will be thrown later)
+    }
+}
 function parseAgentRef(value) {
     const [ref, versionPart] = value.split('@');
     const version = versionPart?.trim() || DEFAULT_VERSION;
@@ -118,6 +153,11 @@ Examples:
   orch call acme/image-processor photo.jpg --output result.png
 
 Note: Use 'call' for server-side execution (requires login), 'run' for local execution.
+
+Important: Remote agents cannot access your local filesystem. If your --data payload
+contains keys like 'path', 'directory', 'file', etc., those values will be interpreted
+by the server, not your local machine. To send local files, use the positional file
+argument or --file option instead.
 `)
         .action(async (agentRef, file, options) => {
         // Merge --input alias into --data
@@ -194,6 +234,8 @@ Note: Use 'call' for server-side execution (requires login), 'run' for local exe
             }
             // Parse JSON and inject llm_credentials if available
             const resolvedBody = await resolveJsonBody(options.data);
+            // Warn if payload contains local path references
+            warnIfLocalPathReference(resolvedBody);
             if (llmCredentials) {
                 const bodyObj = JSON.parse(resolvedBody);
                 bodyObj.llm_credentials = llmCredentials;

package/dist/commands/env.js

@@ -52,6 +52,13 @@ async function resolveWorkspaceId(config, slug) {
         const org = await (0, api_1.getOrg)(config);
         return org.id;
     }
+    // First check if the target slug matches the user's own org
+    // This avoids calling /workspaces which requires Clerk user identity
+    const org = await (0, api_1.getOrg)(config);
+    if (org.slug === targetSlug) {
+        return org.id;
+    }
+    // Only call /workspaces if accessing a different team workspace
     const response = await (0, api_1.request)(config, 'GET', '/workspaces');
     const workspace = response.workspaces.find((w) => w.slug === targetSlug);
     if (!workspace) {

package/dist/commands/index.js

@@ -26,6 +26,7 @@ const install_1 = require("./install");
 const formats_1 = require("./formats");
 const update_1 = require("./update");
 const env_1 = require("./env");
+const list_1 = require("./list");
 function registerCommands(program) {
     (0, login_1.registerLoginCommand)(program);
     (0, whoami_1.registerWhoamiCommand)(program);
@@ -52,4 +53,5 @@ function registerCommands(program) {
     (0, formats_1.registerFormatsCommand)(program);
     (0, update_1.registerUpdateCommand)(program);
     (0, env_1.registerEnvCommand)(program);
+    (0, list_1.registerListCommand)(program);
 }

package/dist/commands/install.js

@@ -14,7 +14,7 @@ const analytics_1 = require("../lib/analytics");
 const adapters_1 = require("../adapters");
 const installed_1 = require("../lib/installed");
 const agents_md_utils_1 = require("../lib/agents-md-utils");
-const DEFAULT_VERSION = 'v1';
+const DEFAULT_VERSION = 'latest';
 function parseAgentRef(value) {
     const [ref, versionPart] = value.split('@');
     const version = versionPart?.trim() || DEFAULT_VERSION;
@@ -95,7 +95,7 @@ function registerInstallCommand(program) {
             if (jsonMode) {
                 result.errors.push('Missing org. Use org/agent format or set default org.');
                 process.stdout.write(JSON.stringify(result, null, 2) + '\n');
-                process.exit(1);
+                process.exit(errors_1.ExitCodes.INVALID_INPUT);
             }
             throw new errors_1.CliError('Missing org. Use org/agent format or set default org.');
         }
@@ -111,7 +111,7 @@ function registerInstallCommand(program) {
                 if (jsonMode) {
                     result.errors.push(errMsg);
                     process.stdout.write(JSON.stringify(result, null, 2) + '\n');
-                    process.exit(1);
+                    process.exit(errors_1.ExitCodes.INVALID_INPUT);
                 }
                 throw new errors_1.CliError(errMsg);
             }
@@ -134,7 +134,7 @@ function registerInstallCommand(program) {
             if (jsonMode) {
                 result.errors.push(errMsg);
                 process.stdout.write(JSON.stringify(result, null, 2) + '\n');
-                process.exit(1);
+                process.exit(errors_1.ExitCodes.INVALID_INPUT);
             }
             throw new errors_1.CliError(errMsg);
         }
@@ -149,7 +149,7 @@ function registerInstallCommand(program) {
             if (jsonMode) {
                 result.errors.push(err instanceof Error ? err.message : String(err));
                 process.stdout.write(JSON.stringify(result, null, 2) + '\n');
-                process.exit(1);
+                process.exit(errors_1.ExitCodes.NOT_FOUND);
             }
             throw err;
         }
@@ -262,11 +262,11 @@ function registerInstallCommand(program) {
         if (jsonMode) {
             process.stdout.write(JSON.stringify(result, null, 2) + '\n');
             if (!result.success) {
-                process.exit(1);
+                process.exit(errors_1.ExitCodes.GENERAL_ERROR);
             }
         }
         else if (!result.success && !options.dryRun) {
-            process.exit(1);
+            process.exit(errors_1.ExitCodes.GENERAL_ERROR);
         }
     });
 }

package/dist/commands/list.js

@@ -0,0 +1,28 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerListCommand = registerListCommand;
+const installed_1 = require("../lib/installed");
+const output_1 = require("../lib/output");
+function registerListCommand(program) {
+    program
+        .command('list')
+        .alias('ls')
+        .description('List installed agents')
+        .option('--json', 'Output as JSON')
+        .action(async (options) => {
+        const installed = await (0, installed_1.getInstalled)();
+        if (options.json) {
+            (0, output_1.printJson)(installed);
+            return;
+        }
+        if (installed.length === 0) {
+            process.stdout.write('No agents installed.\n');
+            process.stdout.write('Install agents with: orch install <agent>\n');
+            return;
+        }
+        process.stdout.write('Installed agents:\n\n');
+        for (const agent of installed) {
+            process.stdout.write(`  ${agent.agent}@${agent.version}\n`);
+        }
+    });
+}

package/dist/commands/publish.js

@@ -161,6 +161,7 @@ function registerPublishCommand(program) {
         .option('--dry-run', 'Show what would be published without making changes')
         .option('--skills <skills>', 'Default skills (comma-separated, e.g., org/skill@v1,org/other@v1)')
         .option('--skills-locked', 'Lock default skills (callers cannot override via headers)')
+        .option('--docker', 'Include Dockerfile for custom environment (builds E2B template)')
         .action(async (options) => {
         if (options.private) {
             process.stderr.write('Warning: --private is deprecated (private is now the default). You can safely remove it.\n');
@@ -449,10 +450,23 @@ function registerPublishCommand(program) {
             const tempDir = await promises_1.default.mkdtemp(path_1.default.join(os_1.default.tmpdir(), 'orchagent-bundle-'));
             const bundlePath = path_1.default.join(tempDir, 'bundle.zip');
             try {
+                // Build include patterns - add Dockerfile if --docker flag is set
+                const includePatterns = [...(manifest.bundle?.include || [])];
+                if (options.docker) {
+                    const dockerfilePath = path_1.default.join(cwd, 'Dockerfile');
+                    try {
+                        await promises_1.default.access(dockerfilePath);
+                        includePatterns.push('Dockerfile');
+                        process.stdout.write(`  Including Dockerfile for custom environment\n`);
+                    }
+                    catch {
+                        throw new errors_1.CliError('--docker flag specified but no Dockerfile found in project directory');
+                    }
+                }
                 const bundleResult = await (0, bundle_1.createCodeBundle)(cwd, bundlePath, {
                     entrypoint: manifest.entrypoint,
                     exclude: manifest.bundle?.exclude,
-                    include: manifest.bundle?.include,
+                    include: includePatterns.length > 0 ? includePatterns : undefined,
                 });
                 process.stdout.write(`  Created bundle: ${bundleResult.fileCount} files, ${(bundleResult.sizeBytes / 1024).toFixed(1)}KB\n`);
                 // Validate bundle size

package/dist/commands/run.js

@@ -153,6 +153,11 @@ async function checkDependencies(config, dependencies) {
     return results;
 }
 async function promptUserForDeps(depStatuses) {
+    // In non-interactive mode (CI, piped input), exit gracefully with helpful message
+    if (!process.stdin.isTTY) {
+        process.stderr.write('Non-interactive mode detected. Use --with-deps to include dependencies or --no-deps to skip them.\n');
+        return 'cancel';
+    }
     const readline = await Promise.resolve().then(() => __importStar(require('readline')));
     const rl = readline.createInterface({
         input: process.stdin,

package/dist/commands/skill.js

@@ -12,7 +12,7 @@ const api_1 = require("../lib/api");
 const errors_1 = require("../lib/errors");
 const analytics_1 = require("../lib/analytics");
 const package_json_1 = __importDefault(require("../../package.json"));
-const DEFAULT_VERSION = 'v1';
+const DEFAULT_VERSION = 'latest';
 /**
  * AI tool skill directories.
  *
@@ -21,7 +21,7 @@ const DEFAULT_VERSION = 'v1';
  *
  * TODO: Research and add more AI tool directories as the ecosystem evolves.
  * Known tools to research: Gemini CLI, Aider, OpenCode, Amp, Windsurf, Cline,
- * GitHub Copilot CLI, Codex CLI, Qwen Code, Kimi Code, etc.
+ * GitHub Copilot CLI, Qwen Code, Kimi Code, etc.
  *
  * References:
  * - https://github.com/gotalab/skillport
@@ -31,7 +31,6 @@ const DEFAULT_VERSION = 'v1';
 const AI_TOOL_SKILL_DIRS = [
     { name: 'Claude Code', projectPath: '.claude/skills', userPath: '.claude/skills' },
     { name: 'Cursor', projectPath: '.cursor/skills', userPath: '.cursor/skills' },
-    { name: 'Codex', projectPath: '.codex/skills', userPath: '.codex/skills' },
     { name: 'Amp', projectPath: '.agents/skills', userPath: '.agents/skills' },
     { name: 'OpenCode', projectPath: '.opencode/skill', userPath: '.opencode/skill' },
     { name: 'Antigravity', projectPath: '.agent/skills', userPath: '.agent/skills' },
@@ -194,7 +193,7 @@ Instructions and guidance for AI agents...
                 if (jsonMode) {
                     result.errors.push(errMsg);
                     process.stdout.write(JSON.stringify(result, null, 2) + '\n');
-                    process.exit(1);
+                    process.exit(errors_1.ExitCodes.INVALID_INPUT);
                 }
                 throw new errors_1.CliError(errMsg);
             }
@@ -223,7 +222,7 @@ Instructions and guidance for AI agents...
             if (jsonMode) {
                 result.errors.push(errMsg);
                 process.stdout.write(JSON.stringify(result, null, 2) + '\n');
-                process.exit(1);
+                process.exit(errors_1.ExitCodes.INVALID_INPUT);
             }
             throw new errors_1.CliError(errMsg);
         }
@@ -238,7 +237,7 @@ Instructions and guidance for AI agents...
             if (jsonMode) {
                 result.errors.push(err instanceof Error ? err.message : String(err));
                 process.stdout.write(JSON.stringify(result, null, 2) + '\n');
-                process.exit(1);
+                process.exit(errors_1.ExitCodes.NOT_FOUND);
             }
             throw err;
         }
@@ -247,7 +246,7 @@ Instructions and guidance for AI agents...
             if (jsonMode) {
                 result.errors.push(errMsg);
                 process.stdout.write(JSON.stringify(result, null, 2) + '\n');
-                process.exit(1);
+                process.exit(errors_1.ExitCodes.INVALID_INPUT);
             }
             throw new errors_1.CliError('Skill has no content.\n\n' +
                 'The skill exists but has an empty prompt. This may be a publishing issue.\n' +
@@ -309,7 +308,7 @@ ${skillData.prompt}
             if (jsonMode) {
                 result.errors.push(errMsg);
                 process.stdout.write(JSON.stringify(result, null, 2) + '\n');
-                process.exit(1);
+                process.exit(errors_1.ExitCodes.GENERAL_ERROR);
             }
             throw new errors_1.CliError(errMsg);
         }

package/dist/lib/bundle.js

@@ -110,7 +110,10 @@ const DEFAULT_EXCLUDES = [
  * @returns Promise that resolves with bundle metadata
  */
 async function createCodeBundle(sourceDir, outputPath, options = {}) {
-    const excludePatterns = [...DEFAULT_EXCLUDES, ...(options.exclude || [])];
+    // Build exclude patterns, but remove any that are in the include list
+    const includeSet = new Set(options.include || []);
+    const excludePatterns = [...DEFAULT_EXCLUDES, ...(options.exclude || [])]
+        .filter(pattern => !includeSet.has(pattern));
     // Verify source directory exists
     const stat = await promises_1.default.stat(sourceDir);
     if (!stat.isDirectory()) {

package/dist/lib/config.js

@@ -50,12 +50,11 @@ const CONFIG_DIR = path_1.default.join(os_1.default.homedir(), '.orchagent');
 const CONFIG_PATH = path_1.default.join(CONFIG_DIR, 'config.json');
 const DEFAULT_API_URL = 'https://api.orchagent.io';
 // Valid format IDs for multi-format agent export
-exports.VALID_FORMAT_IDS = ['claude-code', 'cursor', 'codex', 'amp', 'opencode', 'antigravity'];
+exports.VALID_FORMAT_IDS = ['claude-code', 'cursor', 'amp', 'opencode', 'antigravity'];
 // Map format IDs to skill directories (used by skill install and agent install)
 exports.FORMAT_SKILL_DIRS = {
     'claude-code': { name: 'Claude Code', projectPath: '.claude/skills', userPath: '.claude/skills' },
     'cursor': { name: 'Cursor', projectPath: '.cursor/skills', userPath: '.cursor/skills' },
-    'codex': { name: 'Codex', projectPath: '.codex/skills', userPath: '.codex/skills' },
     'amp': { name: 'Amp', projectPath: '.agents/skills', userPath: '.agents/skills' },
     'opencode': { name: 'OpenCode', projectPath: '.opencode/skill', userPath: '.opencode/skill' },
     'antigravity': { name: 'Antigravity', projectPath: '.agent/skills', userPath: '.agent/skills' },

package/dist/lib/errors.js

@@ -36,9 +36,11 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.NetworkError = exports.ExitCodes = exports.CliError = void 0;
 exports.formatError = formatError;
 exports.exitWithError = exitWithError;
+exports.mapHttpStatusToExitCode = mapHttpStatusToExitCode;
 exports.jsonInputError = jsonInputError;
 const Sentry = __importStar(require("@sentry/node"));
 const analytics_1 = require("./analytics");
+const api_1 = require("./api");
 class CliError extends Error {
     exitCode;
     cause;
@@ -73,6 +75,10 @@ async function exitWithError(err) {
     if (err instanceof CliError) {
         process.exit(err.exitCode);
     }
+    // Handle API errors with proper exit codes
+    if (err instanceof api_1.ApiError) {
+        process.exit(mapHttpStatusToExitCode(err.status));
+    }
     process.exit(1);
 }
 exports.ExitCodes = {
@@ -87,6 +93,22 @@ exports.ExitCodes = {
     SERVER_ERROR: 8,
     NETWORK_ERROR: 9,
 };
+/**
+ * Map HTTP status codes to CLI exit codes.
+ */
+function mapHttpStatusToExitCode(status) {
+    if (status === 401)
+        return exports.ExitCodes.AUTH_ERROR;
+    if (status === 403)
+        return exports.ExitCodes.PERMISSION_DENIED;
+    if (status === 404)
+        return exports.ExitCodes.NOT_FOUND;
+    if (status === 429)
+        return exports.ExitCodes.RATE_LIMITED;
+    if (status >= 500 && status <= 599)
+        return exports.ExitCodes.SERVER_ERROR;
+    return exports.ExitCodes.GENERAL_ERROR;
+}
 class NetworkError extends CliError {
     constructor(url, cause) {
         const host = new URL(url).host;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@orchagent/cli",
-  "version": "0.3.8",
+  "version": "0.3.11",
   "description": "Command-line interface for the orchagent AI agent marketplace",
   "license": "MIT",
   "author": "orchagent <hello@orchagent.io>",