@orchagent/cli 0.3.87 → 0.3.89

package/dist/commands/config.js

@@ -2,6 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.setConfigValue = setConfigValue;
 exports.registerConfigCommand = registerConfigCommand;
+const output_1 = require("../lib/output");
 const config_1 = require("../lib/config");
 const errors_1 = require("../lib/errors");
 const adapters_1 = require("../adapters");
@@ -49,13 +50,17 @@ async function setConfigValue(key, value) {
         process.stdout.write(`Set default-provider to: ${value}\n`);
     }
 }
-async function getConfigValue(key) {
+async function getConfigValue(key, options = {}) {
     if (!isValidKey(key)) {
         throw new errors_1.CliError(`Unknown config key: ${key}. Supported keys: ${SUPPORTED_KEYS.join(', ')}`);
     }
     if (key === 'default-format') {
         const resolved = await (0, config_1.getResolvedConfig)();
         const formats = await (0, config_1.getDefaultFormats)(resolved);
+        if (options.json) {
+            (0, output_1.printJson)({ key, value: formats.length > 0 ? formats : [] });
+            return;
+        }
         if (formats.length === 0) {
             process.stdout.write('(not set)\n');
         }
@@ -65,6 +70,10 @@ async function getConfigValue(key) {
     }
     if (key === 'default-scope') {
         const scope = await (0, config_1.getDefaultScope)();
+        if (options.json) {
+            (0, output_1.printJson)({ key, value: scope ?? null });
+            return;
+        }
         if (!scope) {
             process.stdout.write('(not set)\n');
         }
@@ -74,6 +83,10 @@ async function getConfigValue(key) {
     }
     if (key === 'default-provider') {
         const provider = await (0, config_1.getDefaultProvider)();
+        if (options.json) {
+            (0, output_1.printJson)({ key, value: provider ?? null });
+            return;
+        }
         if (!provider) {
             process.stdout.write('(not set)\n');
         }
@@ -89,8 +102,16 @@ async function unsetConfigValue(key) {
     await (0, config_1.unsetConfigKey)(key);
     process.stdout.write(`Unset ${key}\n`);
 }
-async function listConfigValues() {
+async function listConfigValues(options = {}) {
     const config = await (0, config_1.loadConfig)();
+    if (options.json) {
+        (0, output_1.printJson)({
+            default_format: config.default_formats ?? [],
+            default_scope: config.default_scope ?? null,
+            default_provider: config.default_provider ?? null,
+        });
+        return;
+    }
     process.stdout.write('CLI Configuration:\n\n');
     // default-format
     const formats = config.default_formats ?? [];
@@ -131,8 +152,9 @@ function registerConfigCommand(program) {
     config
         .command('get <key>')
         .description('Get a configuration value')
-        .action(async (key) => {
-        await getConfigValue(key);
+        .option('--json', 'Output as JSON')
+        .action(async (key, options) => {
+        await getConfigValue(key, options);
     });
     config
         .command('unset <key>')
@@ -143,7 +165,8 @@ function registerConfigCommand(program) {
     config
         .command('list')
         .description('List all configuration values')
-        .action(async () => {
-        await listConfigValues();
+        .option('--json', 'Output as JSON')
+        .action(async (options) => {
+        await listConfigValues(options);
     });
 }

package/dist/commands/dag.js

@@ -0,0 +1,259 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerDagCommand = registerDagCommand;
+const chalk_1 = __importDefault(require("chalk"));
+const config_1 = require("../lib/config");
+const api_1 = require("../lib/api");
+const errors_1 = require("../lib/errors");
+const output_1 = require("../lib/output");
+const spinner_1 = require("../lib/spinner");
+// ============================================
+// HELPERS
+// ============================================
+async function resolveWorkspaceId(config, slug) {
+    const configFile = await (0, config_1.loadConfig)();
+    const targetSlug = slug ?? configFile.workspace;
+    if (!targetSlug) {
+        throw new errors_1.CliError('No workspace specified. Use --workspace <slug> or run `orch workspace use <slug>` first.');
+    }
+    const response = await (0, api_1.request)(config, 'GET', '/workspaces');
+    const workspace = response.workspaces.find((w) => w.slug === targetSlug);
+    if (!workspace) {
+        throw new errors_1.CliError(`Workspace '${targetSlug}' not found.`);
+    }
+    return workspace.id;
+}
+function isUuid(value) {
+    return /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(value);
+}
+function isShortUuid(value) {
+    return /^[0-9a-f]{7,}$/i.test(value) && !value.includes('/');
+}
+async function resolveShortRunId(config, workspaceId, shortId) {
+    const result = await (0, api_1.request)(config, 'GET', `/workspaces/${workspaceId}/runs?limit=200&run_id_prefix=${encodeURIComponent(shortId)}`);
+    if (result.runs.length === 0) {
+        throw new errors_1.CliError(`No run found matching '${shortId}'.`);
+    }
+    if (result.runs.length > 1) {
+        throw new errors_1.CliError(`Ambiguous run ID '${shortId}' — matches ${result.runs.length} runs. Use more characters.`);
+    }
+    return result.runs[0].id;
+}
+// ============================================
+// FORMATTERS
+// ============================================
+function statusColor(status) {
+    switch (status) {
+        case 'completed':
+            return chalk_1.default.green(status);
+        case 'failed':
+        case 'timeout':
+        case 'dead_letter':
+            return chalk_1.default.red(status);
+        case 'running':
+            return chalk_1.default.yellow(status);
+        case 'queued':
+        case 'claimed':
+            return chalk_1.default.cyan(status);
+        default:
+            return chalk_1.default.gray(status);
+    }
+}
+function statusIcon(status) {
+    switch (status) {
+        case 'completed':
+            return chalk_1.default.green('✓');
+        case 'failed':
+        case 'timeout':
+        case 'dead_letter':
+            return chalk_1.default.red('✗');
+        case 'running':
+            return chalk_1.default.yellow('◉');
+        case 'queued':
+        case 'claimed':
+            return chalk_1.default.cyan('○');
+        default:
+            return chalk_1.default.gray('?');
+    }
+}
+function formatDuration(ms) {
+    if (ms == null)
+        return '-';
+    if (ms < 1000)
+        return `${ms}ms`;
+    if (ms < 60000)
+        return `${(ms / 1000).toFixed(1)}s`;
+    return `${(ms / 60000).toFixed(1)}m`;
+}
+function formatCost(usd) {
+    if (usd === 0)
+        return '-';
+    if (usd < 0.01)
+        return `$${usd.toFixed(6)}`;
+    return `$${usd.toFixed(4)}`;
+}
+function formatTokens(n) {
+    if (n >= 1_000_000)
+        return `${(n / 1_000_000).toFixed(1)}M`;
+    if (n >= 1_000)
+        return `${(n / 1_000).toFixed(1)}K`;
+    return String(n);
+}
+// ============================================
+// ASCII DAG RENDERER
+// ============================================
+function renderDagHeader(dag) {
+    const liveTag = dag.is_live ? chalk_1.default.blue(' [LIVE]') : '';
+    process.stdout.write(chalk_1.default.bold(`\nOrchestration DAG`) + liveTag + '\n' +
+        `  Root:     ${dag.root_run_id.slice(0, 8)}...\n` +
+        `  Agents:   ${dag.node_count}\n` +
+        `  Duration: ${formatDuration(dag.total_duration_ms)}\n` +
+        `  Cost:     ${formatCost(dag.total_cost_usd)}\n`);
+    if (dag.active_count > 0 || dag.failed_count > 0) {
+        const parts = [];
+        if (dag.completed_count > 0)
+            parts.push(chalk_1.default.green(`${dag.completed_count} completed`));
+        if (dag.active_count > 0)
+            parts.push(chalk_1.default.yellow(`${dag.active_count} active`));
+        if (dag.failed_count > 0)
+            parts.push(chalk_1.default.red(`${dag.failed_count} failed`));
+        process.stdout.write(`  Status:   ${parts.join(', ')}\n`);
+    }
+    if (dag.most_expensive_agent) {
+        process.stdout.write(`  Costly:   ${chalk_1.default.yellow(dag.most_expensive_agent)}\n`);
+    }
+}
+function renderDagTree(node, prefix, isLast, isRoot) {
+    // Connector characters
+    const connector = isRoot ? '' : (isLast ? '└── ' : '├── ');
+    const childPrefix = isRoot ? '' : (isLast ? '    ' : '│   ');
+    // Status icon + agent name
+    const icon = statusIcon(node.status);
+    const name = chalk_1.default.bold(node.agent_name);
+    const version = chalk_1.default.gray(node.agent_version);
+    // Metrics line
+    const metricParts = [];
+    metricParts.push(statusColor(node.status));
+    if (node.duration_ms != null)
+        metricParts.push(chalk_1.default.gray(formatDuration(node.duration_ms)));
+    if (node.self_cost_usd > 0)
+        metricParts.push(chalk_1.default.gray(formatCost(node.self_cost_usd)));
+    if (node.llm_model)
+        metricParts.push(chalk_1.default.gray(node.llm_model));
+    const metrics = metricParts.join(chalk_1.default.gray(' | '));
+    // Trace summary
+    const ts = node.trace_summary;
+    const traceParts = [];
+    if (ts.llm_calls > 0)
+        traceParts.push(`${ts.llm_calls} LLM`);
+    if (ts.tool_calls > 0)
+        traceParts.push(`${ts.tool_calls} tool`);
+    if (ts.errors > 0)
+        traceParts.push(chalk_1.default.red(`${ts.errors} err`));
+    if (ts.total_tokens > 0)
+        traceParts.push(`${formatTokens(ts.total_tokens)} tok`);
+    const traceInfo = traceParts.length > 0 ? chalk_1.default.gray(` (${traceParts.join(', ')})`) : '';
+    process.stdout.write(`${prefix}${connector}${icon} ${name} ${version}\n` +
+        `${prefix}${childPrefix}  ${metrics}${traceInfo}\n`);
+    // Render children
+    for (let i = 0; i < node.children.length; i++) {
+        const isChildLast = i === node.children.length - 1;
+        renderDagTree(node.children[i], prefix + childPrefix, isChildLast, false);
+    }
+}
+function clearScreen() {
+    process.stdout.write('\x1b[2J\x1b[H');
+}
+// ============================================
+// COMMAND
+// ============================================
+function registerDagCommand(program) {
+    program
+        .command('dag <run-id>')
+        .description('Visualize the orchestration call graph for a run. Shows all agents in the chain with real-time status.')
+        .option('--workspace <slug>', 'Workspace slug (default: current workspace)')
+        .option('--live', 'Keep polling for updates while the run is active')
+        .option('--interval <seconds>', 'Poll interval in seconds for --live mode', '2')
+        .option('--json', 'Output as JSON')
+        .action(async (runId, options) => {
+        const config = await (0, config_1.getResolvedConfig)();
+        if (!config.apiKey) {
+            throw new errors_1.CliError('Missing API key. Run `orch login` first.');
+        }
+        const workspaceId = await resolveWorkspaceId(config, options.workspace);
+        // Resolve short run IDs
+        let resolvedRunId = runId;
+        if (isUuid(runId)) {
+            resolvedRunId = runId;
+        }
+        else if (isShortUuid(runId)) {
+            resolvedRunId = await resolveShortRunId(config, workspaceId, runId);
+        }
+        else {
+            throw new errors_1.CliError(`Invalid run ID '${runId}'. Provide a full UUID or a short hex prefix (7+ characters).`);
+        }
+        const interval = Math.max(1, Math.min(30, parseFloat(options.interval || '2')));
+        // Fetch DAG
+        const spinner = (0, spinner_1.createSpinner)('Fetching orchestration DAG...');
+        spinner.start();
+        let dag;
+        try {
+            dag = await (0, api_1.request)(config, 'GET', `/workspaces/${workspaceId}/runs/${resolvedRunId}/dag`);
+            spinner.stop();
+        }
+        catch (e) {
+            spinner.stop();
+            const msg = e instanceof Error ? e.message : 'Unknown error';
+            if (msg.includes('404') || msg.includes('not found') || msg.includes('Not part of')) {
+                throw new errors_1.CliError(`Run ${resolvedRunId.slice(0, 8)}... is not part of an orchestration chain.`);
+            }
+            throw e;
+        }
+        if (options.json && !options.live) {
+            (0, output_1.printJson)(dag);
+            return;
+        }
+        // Render initial DAG
+        renderDagHeader(dag);
+        process.stdout.write('\n');
+        renderDagTree(dag.tree, '  ', true, true);
+        process.stdout.write('\n');
+        // Live mode: poll for updates
+        if (options.live && dag.is_live) {
+            process.stdout.write(chalk_1.default.gray(`Live mode: polling every ${interval}s. Press Ctrl+C to stop.\n\n`));
+            while (true) {
+                await new Promise((resolve) => setTimeout(resolve, interval * 1000));
+                try {
+                    dag = await (0, api_1.request)(config, 'GET', `/workspaces/${workspaceId}/runs/${resolvedRunId}/dag`);
+                }
+                catch {
+                    // Ignore transient errors during polling
+                    continue;
+                }
+                if (options.json) {
+                    (0, output_1.printJson)(dag);
+                }
+                else {
+                    clearScreen();
+                    renderDagHeader(dag);
+                    process.stdout.write('\n');
+                    renderDagTree(dag.tree, '  ', true, true);
+                    process.stdout.write('\n');
+                }
+                if (!dag.is_live) {
+                    process.stdout.write(chalk_1.default.green('Execution complete.\n'));
+                    break;
+                }
+            }
+        }
+        else if (options.live && !dag.is_live) {
+            process.stdout.write(chalk_1.default.gray('Run is not active. Showing final state.\n'));
+        }
+        // Footer hints
+        process.stdout.write(chalk_1.default.gray(`View trace:  orch trace ${resolvedRunId.slice(0, 8)}\n`) +
+            chalk_1.default.gray(`View logs:   orch logs ${resolvedRunId.slice(0, 8)}\n`));
+    });
+}

package/dist/commands/env.js

@@ -43,6 +43,7 @@ const fs = __importStar(require("fs/promises"));
 const config_1 = require("../lib/config");
 const api_1 = require("../lib/api");
 const errors_1 = require("../lib/errors");
+const output_1 = require("../lib/output");
 const analytics_1 = require("../lib/analytics");
 async function resolveWorkspaceId(config, slug) {
     const configFile = await (0, config_1.loadConfig)();
@@ -83,6 +84,10 @@ function statusColor(status) {
 async function listEnvs(config, options) {
     const workspaceId = await resolveWorkspaceId(config, options.workspace);
     const result = await (0, api_1.listEnvironments)(config, workspaceId);
+    if (options.json) {
+        (0, output_1.printJson)(result);
+        return;
+    }
     if (result.environments.length === 0) {
         console.log(chalk_1.default.gray('No environments found.'));
         console.log(chalk_1.default.gray('Use `orchagent env create` to create one, or include a Dockerfile in your agent bundle.'));
@@ -108,7 +113,7 @@ async function listEnvs(config, options) {
             statusColor(env.build?.status),
             env.agent_count.toString(),
             env.environment.is_predefined ? chalk_1.default.blue('predefined') : chalk_1.default.gray('custom'),
-            env.environment.id.slice(0, 8),
+            env.environment.id,
         ]);
     }
     console.log();
@@ -123,8 +128,12 @@ async function listEnvs(config, options) {
         }
     }
 }
-async function getEnvStatus(config, environmentId) {
+async function getEnvStatus(config, environmentId, options) {
     const result = await (0, api_1.getEnvironment)(config, environmentId);
+    if (options.json) {
+        (0, output_1.printJson)(result);
+        return;
+    }
     console.log();
     console.log(chalk_1.default.bold(`Environment: ${result.environment.name}`));
     console.log();
@@ -206,6 +215,7 @@ function registerEnvCommand(program) {
         .command('list')
         .description('List environments in workspace')
         .option('-w, --workspace <slug>', 'Workspace slug')
+        .option('--json', 'Output as JSON')
         .action(async (options) => {
         const config = await (0, config_1.getResolvedConfig)();
         await listEnvs(config, options);
@@ -213,9 +223,10 @@ function registerEnvCommand(program) {
     env
         .command('status <environment-id>')
         .description('Check environment build status')
-        .action(async (environmentId) => {
+        .option('--json', 'Output as JSON')
+        .action(async (environmentId, options) => {
         const config = await (0, config_1.getResolvedConfig)();
-        await getEnvStatus(config, environmentId);
+        await getEnvStatus(config, environmentId, options);
     });
     env
         .command('create')

package/dist/commands/fork.js

@@ -36,16 +36,16 @@ async function resolveWorkspace(config, workspaceSlug) {
 function registerForkCommand(program) {
     program
         .command('fork <agent>')
-        .description('Fork a public agent into your workspace')
+        .description('Fork an agent into your workspace')
         .option('--name <new-name>', 'Rename the forked agent')
         .option('-w, --workspace <workspace-slug>', 'Target workspace slug')
         .option('--json', 'Output raw JSON')
         .addHelpText('after', `
 Examples:
-  orch fork orchagent/my-discord-agent
-  orch fork orchagent/my-discord-agent --workspace acme-corp
-  orch fork orchagent/my-discord-agent --name customer-support-bot
-  orch fork orchagent/my-discord-agent@v2 --json
+  orch fork orchagent/security-agent
+  orch fork orchagent/security-agent --workspace acme-corp
+  orch fork orchagent/security-agent --name my-security-scanner
+  orch fork joe/my-agent --workspace acme-corp   # fork your own private agent into another workspace
 `)
         .action(async (agentRef, options) => {
         const write = (message) => {
@@ -58,7 +58,7 @@ Examples:
         }
         const { org, agent, version } = (0, agent_ref_1.parseAgentRef)(agentRef);
         write('Resolving source agent...\n');
-        const source = await (0, api_1.getPublicAgent)(config, org, agent, version);
+        const source = await (0, api_1.getAgentWithFallback)(config, org, agent, version);
         if (!source.id) {
             throw new errors_1.CliError(`Could not resolve source agent ID for '${org}/${agent}@${version}'.`);
         }

package/dist/commands/index.js

@@ -3,12 +3,10 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.registerCommands = registerCommands;
 const login_1 = require("./login");
 const logout_1 = require("./logout");
-const call_1 = require("./call");
 const agents_1 = require("./agents");
 const init_1 = require("./init");
 const publish_1 = require("./publish");
 const whoami_1 = require("./whoami");
-const keys_1 = require("./keys");
 const run_1 = require("./run");
 const info_1 = require("./info");
 const skill_1 = require("./skill");
@@ -40,17 +38,19 @@ const diff_1 = require("./diff");
 const health_1 = require("./health");
 const dev_1 = require("./dev");
 const estimate_1 = require("./estimate");
+const replay_1 = require("./replay");
+const trace_1 = require("./trace");
+const metrics_1 = require("./metrics");
+const dag_1 = require("./dag");
 function registerCommands(program) {
     (0, login_1.registerLoginCommand)(program);
     (0, logout_1.registerLogoutCommand)(program);
     (0, whoami_1.registerWhoamiCommand)(program);
     (0, init_1.registerInitCommand)(program);
     (0, publish_1.registerPublishCommand)(program);
-    (0, call_1.registerCallCommand)(program);
     (0, run_1.registerRunCommand)(program);
     (0, info_1.registerInfoCommand)(program);
     (0, agents_1.registerAgentsCommand)(program);
-    (0, keys_1.registerKeysCommand)(program);
     (0, skill_1.registerSkillCommand)(program);
     (0, delete_1.registerDeleteCommand)(program);
     (0, fork_1.registerForkCommand)(program);
@@ -80,4 +80,8 @@ function registerCommands(program) {
     (0, health_1.registerHealthCommand)(program);
     (0, dev_1.registerDevCommand)(program);
     (0, estimate_1.registerEstimateCommand)(program);
+    (0, replay_1.registerReplayCommand)(program);
+    (0, trace_1.registerTraceCommand)(program);
+    (0, metrics_1.registerMetricsCommand)(program);
+    (0, dag_1.registerDagCommand)(program);
 }

package/dist/commands/metrics.js

@@ -0,0 +1,137 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerMetricsCommand = registerMetricsCommand;
+const chalk_1 = __importDefault(require("chalk"));
+const config_1 = require("../lib/config");
+const api_1 = require("../lib/api");
+const errors_1 = require("../lib/errors");
+const output_1 = require("../lib/output");
+// ============================================
+// HELPERS
+// ============================================
+async function resolveWorkspaceId(config, slug) {
+    const configFile = await (0, config_1.loadConfig)();
+    const targetSlug = slug ?? configFile.workspace;
+    if (!targetSlug) {
+        throw new errors_1.CliError('No workspace specified. Use --workspace <slug> or run `orch workspace use <slug>` first.');
+    }
+    const response = await (0, api_1.request)(config, 'GET', '/workspaces');
+    const workspace = response.workspaces.find((w) => w.slug === targetSlug);
+    if (!workspace) {
+        throw new errors_1.CliError(`Workspace '${targetSlug}' not found.`);
+    }
+    return workspace.id;
+}
+function formatDuration(ms) {
+    if (ms === 0)
+        return '-';
+    if (ms < 1000)
+        return `${ms}ms`;
+    return `${(ms / 1000).toFixed(1)}s`;
+}
+function rateColor(rate) {
+    if (rate >= 95)
+        return chalk_1.default.green(`${rate}%`);
+    if (rate >= 80)
+        return chalk_1.default.yellow(`${rate}%`);
+    return chalk_1.default.red(`${rate}%`);
+}
+function padRight(str, len) {
+    return str.length >= len ? str.slice(0, len) : str + ' '.repeat(len - str.length);
+}
+function padLeft(str, len) {
+    return str.length >= len ? str.slice(0, len) : ' '.repeat(len - str.length) + str;
+}
+// ============================================
+// COMMAND
+// ============================================
+function registerMetricsCommand(program) {
+    program
+        .command('metrics')
+        .description('Show agent performance metrics for a workspace')
+        .option('--workspace <slug>', 'Workspace slug (default: active workspace)')
+        .option('--days <n>', 'Number of days to analyze', '30')
+        .option('--agent <name>', 'Filter to a specific agent')
+        .option('--json', 'Output as JSON')
+        .action(async (options) => {
+        const config = await (0, config_1.getResolvedConfig)();
+        const workspaceId = await resolveWorkspaceId(config, options.workspace);
+        const days = parseInt(options.days || '30', 10);
+        if (isNaN(days) || days < 1 || days > 365) {
+            process.stderr.write(chalk_1.default.red('Error: --days must be between 1 and 365\n'));
+            process.exit(1);
+        }
+        const params = new URLSearchParams({ days: String(days) });
+        if (options.agent)
+            params.set('agent_name', options.agent);
+        let data;
+        try {
+            data = await (0, api_1.request)(config, 'GET', `/workspaces/${workspaceId}/metrics/dashboard?${params}`, { headers: { 'X-Workspace-Id': workspaceId } });
+        }
+        catch (err) {
+            if (err instanceof api_1.ApiError && err.status === 403) {
+                process.stderr.write(chalk_1.default.red('Error: Not a member of this workspace\n'));
+                process.exit(1);
+            }
+            throw err;
+        }
+        if (options.json) {
+            (0, output_1.printJson)(data);
+            return;
+        }
+        const { overview, agents } = data;
+        // Header
+        process.stdout.write('\n');
+        process.stdout.write(chalk_1.default.bold('Agent Metrics') + chalk_1.default.gray(` (last ${days}d)\n`));
+        process.stdout.write('='.repeat(50) + '\n\n');
+        // Overview stats
+        if (overview.total_runs === 0) {
+            process.stdout.write(chalk_1.default.yellow('No runs in this period.\n\n'));
+            return;
+        }
+        process.stdout.write(`  Total Runs:   ${chalk_1.default.bold(String(overview.total_runs))}\n`);
+        process.stdout.write(`  Success Rate: ${rateColor(overview.success_rate)}\n`);
+        process.stdout.write(`  Error Rate:   ${overview.error_rate}% ${chalk_1.default.gray(`(${overview.failed} failed, ${overview.timeout} timeout)`)}\n`);
+        process.stdout.write(`  p50 Latency:  ${chalk_1.default.cyan(formatDuration(overview.p50_latency_ms))}\n`);
+        process.stdout.write(`  p95 Latency:  ${chalk_1.default.yellow(formatDuration(overview.p95_latency_ms))}\n`);
+        process.stdout.write(`  Avg Latency:  ${formatDuration(overview.avg_latency_ms)}\n`);
+        process.stdout.write(`  Runs/Day:     ${overview.runs_per_day}\n`);
+        // Per-agent table
+        if (agents.length > 0) {
+            process.stdout.write(`\n${chalk_1.default.bold('Per Agent')}\n`);
+            process.stdout.write('-'.repeat(90) + '\n');
+            // Header
+            process.stdout.write(padRight('Agent', 25) +
+                padLeft('Runs', 8) +
+                padLeft('Success', 10) +
+                padLeft('p50', 10) +
+                padLeft('p95', 10) +
+                padLeft('Errors', 8) +
+                '  Top Error\n');
+            process.stdout.write('-'.repeat(90) + '\n');
+            for (const agent of agents) {
+                const nameStr = agent.agent_name.length > 22
+                    ? agent.agent_name.slice(0, 22) + '..'
+                    : agent.agent_name;
+                const errorStr = agent.top_error
+                    ? agent.top_error.slice(0, 20)
+                    : '-';
+                process.stdout.write(padRight(nameStr, 25) +
+                    padLeft(String(agent.total_runs), 8) +
+                    padLeft(agent.success_rate >= 95 ? chalk_1.default.green(`${agent.success_rate}%`) :
+                        agent.success_rate >= 80 ? chalk_1.default.yellow(`${agent.success_rate}%`) :
+                            chalk_1.default.red(`${agent.success_rate}%`), 
+                    // chalk adds escape chars — pad the raw value, then colorize
+                    10) +
+                    padLeft(formatDuration(agent.p50_latency_ms), 10) +
+                    padLeft(formatDuration(agent.p95_latency_ms), 10) +
+                    padLeft(String(agent.failed + agent.timeout), 8) +
+                    '  ' + chalk_1.default.gray(errorStr) + '\n');
+            }
+        }
+        process.stdout.write('\n');
+    });
+}

package/dist/commands/publish.js

@@ -982,6 +982,26 @@ function registerPublishCommand(program) {
                     `  the field to use the default) and republish each dependency.\n\n`);
             }
         }
+        // C-1: Block publish if tool/agent type has no required_secrets declared.
+        // Prompt and skill types are exempt (prompt agents get LLM keys from platform,
+        // skills don't run standalone).
+        // An explicit empty array (required_secrets: []) is a valid declaration
+        // meaning "this agent deliberately needs no secrets."
+        // Runs before dry-run so --dry-run catches the same errors as real publish (BUG-11).
+        if ((canonicalType === 'tool' || canonicalType === 'agent') &&
+            manifest.required_secrets === undefined &&
+            options.requiredSecrets !== false) {
+            process.stderr.write(chalk_1.default.red(`\nError: ${canonicalType} agents must declare required_secrets in orchagent.json.\n\n`) +
+                `  Add the env vars your code needs at runtime:\n` +
+                `  ${chalk_1.default.cyan('"required_secrets": ["ANTHROPIC_API_KEY", "MY_TOKEN"]')}\n\n` +
+                `  If this agent genuinely needs no secrets, add an empty array:\n` +
+                `  ${chalk_1.default.cyan('"required_secrets": []')}\n\n` +
+                `  These are matched by name against your workspace secrets vault.\n` +
+                `  Use ${chalk_1.default.cyan('--no-required-secrets')} to skip this check.\n`);
+            const err = new errors_1.CliError('Missing required_secrets declaration', errors_1.ExitCodes.INVALID_INPUT);
+            err.displayed = true;
+            throw err;
+        }
         // Handle dry-run for agents
         if (options.dryRun) {
             const preview = await (0, api_1.previewAgentVersion)(config, manifest.name, workspaceId);
@@ -1166,25 +1186,6 @@ function registerPublishCommand(program) {
                     `  env var to detect the reserved port.\n\n`);
             }
         }
-        // C-1: Block publish if tool/agent type has no required_secrets declared.
-        // Prompt and skill types are exempt (prompt agents get LLM keys from platform,
-        // skills don't run standalone).
-        // An explicit empty array (required_secrets: []) is a valid declaration
-        // meaning "this agent deliberately needs no secrets."
-        if ((canonicalType === 'tool' || canonicalType === 'agent') &&
-            manifest.required_secrets === undefined &&
-            options.requiredSecrets !== false) {
-            process.stderr.write(chalk_1.default.red(`\nError: ${canonicalType} agents must declare required_secrets in orchagent.json.\n\n`) +
-                `  Add the env vars your code needs at runtime:\n` +
-                `  ${chalk_1.default.cyan('"required_secrets": ["ANTHROPIC_API_KEY", "MY_TOKEN"]')}\n\n` +
-                `  If this agent genuinely needs no secrets, add an empty array:\n` +
-                `  ${chalk_1.default.cyan('"required_secrets": []')}\n\n` +
-                `  These are matched by name against your workspace secrets vault.\n` +
-                `  Use ${chalk_1.default.cyan('--no-required-secrets')} to skip this check.\n`);
-            const err = new errors_1.CliError('Missing required_secrets declaration', errors_1.ExitCodes.INVALID_INPUT);
-            err.displayed = true;
-            throw err;
-        }
         // Create the agent (server auto-assigns version)
         let result;
         try {

package/dist/commands/replay.js

@@ -0,0 +1,198 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerReplayCommand = registerReplayCommand;
+const chalk_1 = __importDefault(require("chalk"));
+const config_1 = require("../lib/config");
+const api_1 = require("../lib/api");
+const errors_1 = require("../lib/errors");
+const output_1 = require("../lib/output");
+// ============================================
+// HELPERS
+// ============================================
+async function resolveWorkspaceId(config, slug) {
+    const configFile = await (0, config_1.loadConfig)();
+    const targetSlug = slug ?? configFile.workspace;
+    if (!targetSlug) {
+        throw new errors_1.CliError('No workspace specified. Use --workspace <slug> or run `orch workspace use <slug>` first.');
+    }
+    const response = await (0, api_1.request)(config, 'GET', '/workspaces');
+    const workspace = response.workspaces.find((w) => w.slug === targetSlug);
+    if (!workspace) {
+        throw new errors_1.CliError(`Workspace '${targetSlug}' not found.`);
+    }
+    return workspace.id;
+}
+function isUuid(value) {
+    return /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(value);
+}
+function isShortUuid(value) {
+    return /^[0-9a-f]{7,}$/i.test(value) && !value.includes('/');
+}
+async function resolveShortRunId(config, workspaceId, shortId) {
+    const result = await (0, api_1.request)(config, 'GET', `/workspaces/${workspaceId}/runs?limit=200&run_id_prefix=${encodeURIComponent(shortId)}`);
+    if (result.runs.length === 0) {
+        throw new errors_1.CliError(`No run found matching '${shortId}'.`);
+    }
+    if (result.runs.length > 1) {
+        throw new errors_1.CliError(`Ambiguous run ID '${shortId}' — matches ${result.runs.length} runs. Use more characters to narrow it down.`);
+    }
+    return result.runs[0].id;
+}
+function statusColor(status) {
+    if (!status)
+        return '-';
+    switch (status) {
+        case 'completed':
+            return chalk_1.default.green(status);
+        case 'failed':
+            return chalk_1.default.red(status);
+        case 'running':
+        case 'queued':
+        case 'claimed':
+            return chalk_1.default.yellow(status);
+        case 'timeout':
+            return chalk_1.default.red(status);
+        default:
+            return status;
+    }
+}
+function formatDuration(ms) {
+    if (ms == null)
+        return '-';
+    if (ms < 1000)
+        return `${ms}ms`;
+    if (ms < 60000)
+        return `${(ms / 1000).toFixed(1)}s`;
+    return `${(ms / 60000).toFixed(1)}m`;
+}
+const POLL_INTERVAL_MS = 2000;
+const MAX_POLL_MS = 600000; // 10 minutes
+// ============================================
+// COMMAND REGISTRATION
+// ============================================
+function registerReplayCommand(program) {
+    program
+        .command('replay <run-id>')
+        .description('Replay a previous run. Re-executes with the same input and config from the original snapshot.')
+        .option('--workspace <slug>', 'Workspace slug (default: current workspace)')
+        .option('--reason <text>', 'Reason for replay (stored in audit log)')
+        .option('--override-policy <id>', 'Override provider policy ID for this replay')
+        .option('--no-wait', 'Queue the replay and return immediately without waiting for results')
+        .option('--json', 'Output as JSON')
+        .action(async (runId, options) => {
+        const config = await (0, config_1.getResolvedConfig)();
+        if (!config.apiKey) {
+            throw new errors_1.CliError('Missing API key. Run `orch login` first.');
+        }
+        const workspaceId = await resolveWorkspaceId(config, options.workspace);
+        // Resolve short run IDs
+        let resolvedRunId = runId;
+        if (isUuid(runId)) {
+            resolvedRunId = runId;
+        }
+        else if (isShortUuid(runId)) {
+            resolvedRunId = await resolveShortRunId(config, workspaceId, runId);
+        }
+        else {
+            throw new errors_1.CliError(`Invalid run ID '${runId}'. Provide a full UUID or a short hex prefix (7+ characters).`);
+        }
+        // Submit replay request
+        const body = {};
+        if (options.reason)
+            body.reason = options.reason;
+        if (options.overridePolicy)
+            body.override_provider_policy_id = options.overridePolicy;
+        const replay = await (0, api_1.request)(config, 'POST', `/workspaces/${workspaceId}/runs/${resolvedRunId}/replay`, {
+            body: JSON.stringify(body),
+            headers: { 'Content-Type': 'application/json' },
+        });
+        if (options.json && options.wait === false) {
+            (0, output_1.printJson)(replay);
+            return;
+        }
+        if (options.wait === false) {
+            process.stdout.write(chalk_1.default.green('Replay queued.\n') +
+                `  Run ID:     ${replay.run_id}\n` +
+                `  Job ID:     ${replay.job_id}\n` +
+                `  Replaying:  ${replay.replay_of_run_id}\n` +
+                chalk_1.default.gray('\nCheck status: orch logs ' + replay.run_id.slice(0, 8) + '\n'));
+            return;
+        }
+        // Poll for completion
+        if (!options.json) {
+            process.stderr.write(chalk_1.default.gray(`Replaying run ${resolvedRunId.slice(0, 8)}... `));
+        }
+        const startTime = Date.now();
+        let lastStatus = 'queued';
+        let pollResult = null;
+        while (Date.now() - startTime < MAX_POLL_MS) {
+            await new Promise((r) => setTimeout(r, POLL_INTERVAL_MS));
+            try {
+                pollResult = await (0, api_1.request)(config, 'GET', `/workspaces/${workspaceId}/runs/${replay.run_id}`);
+            }
+            catch {
+                // Run may not exist yet if job worker hasn't picked it up
+                continue;
+            }
+            lastStatus = pollResult.status;
+            if (!options.json) {
+                const elapsed = ((Date.now() - startTime) / 1000).toFixed(0);
+                process.stderr.write(`\r${chalk_1.default.gray(`Replaying run ${resolvedRunId.slice(0, 8)}... ${statusColor(lastStatus)} (${elapsed}s)`)}`);
+            }
+            if (['completed', 'failed', 'timeout', 'dead_letter', 'cancelled'].includes(lastStatus)) {
+                break;
+            }
+        }
+        if (!options.json) {
+            process.stderr.write('\n');
+        }
+        // Fetch final logs
+        const logs = await (0, api_1.request)(config, 'GET', `/workspaces/${workspaceId}/runs/${replay.run_id}/logs`);
+        if (options.json) {
+            (0, output_1.printJson)({
+                replay: {
+                    run_id: replay.run_id,
+                    replay_of_run_id: replay.replay_of_run_id,
+                    job_id: replay.job_id,
+                },
+                result: logs,
+            });
+            return;
+        }
+        // Render results
+        renderReplayResult(replay, logs);
+    });
+}
+// ============================================
+// RENDER REPLAY RESULT
+// ============================================
+function renderReplayResult(replay, logs) {
+    process.stdout.write(chalk_1.default.bold(`\nReplay ${replay.run_id}\n`) +
+        `  Original:  ${replay.replay_of_run_id.slice(0, 8)}\n` +
+        `  Agent:     ${logs.agent_name ?? '-'}@${logs.agent_version ?? '-'}\n` +
+        `  Status:    ${statusColor(logs.run_status)}\n` +
+        `  Duration:  ${formatDuration(logs.execution_time_ms)}\n`);
+    if (logs.exit_code != null) {
+        const exitLabel = logs.exit_code === 0 ? chalk_1.default.green(String(logs.exit_code)) : chalk_1.default.red(String(logs.exit_code));
+        process.stdout.write(`  Exit code: ${exitLabel}\n`);
+    }
+    if (logs.output_data != null && Object.keys(logs.output_data).length > 0) {
+        process.stdout.write('\n' + chalk_1.default.bold.green('--- output ---') + '\n' +
+            JSON.stringify(logs.output_data, null, 2) + '\n');
+    }
+    if (logs.error_message) {
+        process.stdout.write('\n' + chalk_1.default.red.bold('Error:\n') + chalk_1.default.red(logs.error_message) + '\n');
+    }
+    if (logs.stdout) {
+        process.stdout.write('\n' + chalk_1.default.bold.cyan('--- stdout ---') + '\n' + logs.stdout + '\n');
+    }
+    if (logs.stderr) {
+        process.stdout.write('\n' + chalk_1.default.bold.yellow('--- stderr ---') + '\n' + logs.stderr + '\n');
+    }
+    process.stdout.write('\n');
+    // Footer hint
+    process.stdout.write(chalk_1.default.gray(`View trace: orch trace ${replay.run_id.slice(0, 8)}\n`));
+}

package/dist/commands/trace.js

@@ -0,0 +1,311 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerTraceCommand = registerTraceCommand;
+const chalk_1 = __importDefault(require("chalk"));
+const config_1 = require("../lib/config");
+const api_1 = require("../lib/api");
+const errors_1 = require("../lib/errors");
+const output_1 = require("../lib/output");
+// ============================================
+// HELPERS
+// ============================================
+async function resolveWorkspaceId(config, slug) {
+    const configFile = await (0, config_1.loadConfig)();
+    const targetSlug = slug ?? configFile.workspace;
+    if (!targetSlug) {
+        throw new errors_1.CliError('No workspace specified. Use --workspace <slug> or run `orch workspace use <slug>` first.');
+    }
+    const response = await (0, api_1.request)(config, 'GET', '/workspaces');
+    const workspace = response.workspaces.find((w) => w.slug === targetSlug);
+    if (!workspace) {
+        throw new errors_1.CliError(`Workspace '${targetSlug}' not found.`);
+    }
+    return workspace.id;
+}
+function isUuid(value) {
+    return /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(value);
+}
+function isShortUuid(value) {
+    return /^[0-9a-f]{7,}$/i.test(value) && !value.includes('/');
+}
+async function resolveShortRunId(config, workspaceId, shortId) {
+    const result = await (0, api_1.request)(config, 'GET', `/workspaces/${workspaceId}/runs?limit=200&run_id_prefix=${encodeURIComponent(shortId)}`);
+    if (result.runs.length === 0) {
+        throw new errors_1.CliError(`No run found matching '${shortId}'.`);
+    }
+    if (result.runs.length > 1) {
+        throw new errors_1.CliError(`Ambiguous run ID '${shortId}' — matches ${result.runs.length} runs. Use more characters to narrow it down.`);
+    }
+    return result.runs[0].id;
+}
+function statusColor(status) {
+    if (!status)
+        return '-';
+    switch (status) {
+        case 'completed':
+            return chalk_1.default.green(status);
+        case 'failed':
+            return chalk_1.default.red(status);
+        case 'running':
+            return chalk_1.default.yellow(status);
+        case 'timeout':
+            return chalk_1.default.red(status);
+        default:
+            return status;
+    }
+}
+function formatDuration(ms) {
+    if (ms == null)
+        return '-';
+    if (ms < 1000)
+        return `${ms}ms`;
+    if (ms < 60000)
+        return `${(ms / 1000).toFixed(1)}s`;
+    return `${(ms / 60000).toFixed(1)}m`;
+}
+function formatCost(usd) {
+    if (usd == null || usd === 0)
+        return '-';
+    if (usd < 0.01)
+        return `$${usd.toFixed(6)}`;
+    return `$${usd.toFixed(4)}`;
+}
+function formatTokens(input, output) {
+    const parts = [];
+    if (input)
+        parts.push(`${input.toLocaleString()} in`);
+    if (output)
+        parts.push(`${output.toLocaleString()} out`);
+    return parts.length > 0 ? parts.join(', ') : '-';
+}
+// ============================================
+// COMMAND REGISTRATION
+// ============================================
+function registerTraceCommand(program) {
+    program
+        .command('trace <run-id>')
+        .description('View the execution trace for a run. Shows LLM calls, tool calls, decisions, and errors in timeline order.')
+        .option('--workspace <slug>', 'Workspace slug (default: current workspace)')
+        .option('--json', 'Output as JSON')
+        .action(async (runId, options) => {
+        const config = await (0, config_1.getResolvedConfig)();
+        if (!config.apiKey) {
+            throw new errors_1.CliError('Missing API key. Run `orch login` first.');
+        }
+        const workspaceId = await resolveWorkspaceId(config, options.workspace);
+        // Resolve short run IDs
+        let resolvedRunId = runId;
+        if (isUuid(runId)) {
+            resolvedRunId = runId;
+        }
+        else if (isShortUuid(runId)) {
+            resolvedRunId = await resolveShortRunId(config, workspaceId, runId);
+        }
+        else {
+            throw new errors_1.CliError(`Invalid run ID '${runId}'. Provide a full UUID or a short hex prefix (7+ characters).`);
+        }
+        // Fetch run detail for context
+        const run = await (0, api_1.request)(config, 'GET', `/workspaces/${workspaceId}/runs/${resolvedRunId}`);
+        // Fetch trace header
+        let trace;
+        try {
+            const traceResp = await (0, api_1.request)(config, 'GET', `/workspaces/${workspaceId}/runs/${resolvedRunId}/trace`);
+            trace = traceResp.trace;
+        }
+        catch {
+            throw new errors_1.CliError(`No trace available for run ${resolvedRunId.slice(0, 8)}. Traces are captured for cloud runs only.`);
+        }
+        // Fetch all trace events (paginate if needed)
+        const allEvents = [];
+        let offset = 0;
+        const pageSize = 500;
+        while (true) {
+            const eventsResp = await (0, api_1.request)(config, 'GET', `/workspaces/${workspaceId}/traces/${trace.id}/events?limit=${pageSize}&offset=${offset}`);
+            allEvents.push(...eventsResp.events);
+            if (eventsResp.next_cursor === null || allEvents.length >= eventsResp.total) {
+                break;
+            }
+            offset = parseInt(eventsResp.next_cursor, 10);
+        }
+        if (options.json) {
+            (0, output_1.printJson)({ run, trace, events: allEvents });
+            return;
+        }
+        renderTrace(run, trace, allEvents);
+    });
+}
+// ============================================
+// TRACE RENDERING
+// ============================================
+function renderTrace(run, trace, events) {
+    // Header
+    process.stdout.write(chalk_1.default.bold(`\nTrace for run ${run.id}\n`) +
+        `  Agent:    ${run.agent_name ?? '-'}@${run.agent_version ?? '-'}\n` +
+        `  Status:   ${statusColor(run.status)}\n` +
+        `  Duration: ${formatDuration(run.duration_ms)}\n` +
+        `  Source:   ${run.trigger_source ?? '-'}\n`);
+    // Aggregate stats
+    const stats = computeStats(events);
+    if (stats.totalLlmCalls > 0 || stats.totalToolCalls > 0) {
+        process.stdout.write('\n' + chalk_1.default.bold('  Summary\n'));
+        if (stats.totalLlmCalls > 0) {
+            process.stdout.write(`    LLM calls:   ${stats.totalLlmCalls}` +
+                `  (${formatTokens(stats.totalTokenInput, stats.totalTokenOutput)})` +
+                `  cost: ${formatCost(stats.totalCostUsd)}\n`);
+        }
+        if (stats.totalToolCalls > 0) {
+            process.stdout.write(`    Tool calls:  ${stats.totalToolCalls}\n`);
+        }
+        if (stats.providers.length > 0) {
+            process.stdout.write(`    Providers:   ${stats.providers.join(', ')}\n`);
+        }
+        if (stats.totalErrors > 0) {
+            process.stdout.write(`    Errors:      ${chalk_1.default.red(String(stats.totalErrors))}\n`);
+        }
+    }
+    if (events.length === 0) {
+        process.stdout.write(chalk_1.default.gray('\n  No trace events recorded.\n\n'));
+        return;
+    }
+    // Timeline
+    process.stdout.write('\n' + chalk_1.default.bold('  Timeline\n'));
+    for (const event of events) {
+        renderEvent(event);
+    }
+    process.stdout.write('\n');
+    // Footer hint
+    process.stdout.write(chalk_1.default.gray(`View logs: orch logs ${run.id.slice(0, 8)}\n`));
+    process.stdout.write(chalk_1.default.gray(`Replay:   orch replay ${run.id.slice(0, 8)}\n`));
+}
+function computeStats(events) {
+    const stats = {
+        totalLlmCalls: 0,
+        totalToolCalls: 0,
+        totalErrors: 0,
+        totalTokenInput: 0,
+        totalTokenOutput: 0,
+        totalCostUsd: 0,
+        providers: [],
+    };
+    const providerSet = new Set();
+    for (const e of events) {
+        if (e.event_type === 'llm_call_succeeded') {
+            stats.totalLlmCalls++;
+            stats.totalTokenInput += e.token_input ?? 0;
+            stats.totalTokenOutput += e.token_output ?? 0;
+            stats.totalCostUsd += e.cost_usd ?? 0;
+            if (e.provider)
+                providerSet.add(e.provider);
+        }
+        else if (e.event_type === 'llm_call_failed') {
+            stats.totalLlmCalls++;
+            stats.totalErrors++;
+            if (e.provider)
+                providerSet.add(e.provider);
+        }
+        else if (e.event_type === 'tool_call_succeeded') {
+            stats.totalToolCalls++;
+        }
+        else if (e.event_type === 'tool_call_failed') {
+            stats.totalToolCalls++;
+            stats.totalErrors++;
+        }
+        else if (e.event_type === 'error') {
+            stats.totalErrors++;
+        }
+        else if (e.event_type === 'policy_violation') {
+            stats.totalErrors++;
+        }
+    }
+    stats.providers = Array.from(providerSet);
+    return stats;
+}
+function renderEvent(event) {
+    const seq = chalk_1.default.gray(`  #${String(event.sequence_no).padStart(2, ' ')} `);
+    switch (event.event_type) {
+        case 'llm_call_started': {
+            const provider = event.provider ?? '?';
+            const model = event.model ?? '?';
+            process.stdout.write(seq + chalk_1.default.blue('LLM ') + chalk_1.default.gray(`${provider}/${model} started\n`));
+            break;
+        }
+        case 'llm_call_succeeded': {
+            const provider = event.provider ?? '?';
+            const model = event.model ?? '?';
+            const tokens = formatTokens(event.token_input, event.token_output);
+            const cost = formatCost(event.cost_usd);
+            const dur = formatDuration(event.duration_ms);
+            process.stdout.write(seq + chalk_1.default.green('LLM ') +
+                `${provider}/${model}` +
+                chalk_1.default.gray(` | ${tokens} | ${cost} | ${dur}`) + '\n');
+            break;
+        }
+        case 'llm_call_failed': {
+            const provider = event.provider ?? '?';
+            const model = event.model ?? '?';
+            const errMsg = event.error_message || event.error_type || 'unknown error';
+            const dur = formatDuration(event.duration_ms);
+            process.stdout.write(seq + chalk_1.default.red('LLM ') +
+                `${provider}/${model} ` +
+                chalk_1.default.red(errMsg) +
+                chalk_1.default.gray(` | ${dur}`) + '\n');
+            break;
+        }
+        case 'tool_call_started': {
+            const toolName = event.payload?.tool_name || '?';
+            process.stdout.write(seq + chalk_1.default.cyan('TOOL ') + chalk_1.default.gray(`${toolName} started\n`));
+            break;
+        }
+        case 'tool_call_succeeded': {
+            const toolName = event.payload?.tool_name || '?';
+            const dur = formatDuration(event.duration_ms);
+            process.stdout.write(seq + chalk_1.default.green('TOOL ') + `${toolName}` +
+                chalk_1.default.gray(` | ${dur}`) + '\n');
+            break;
+        }
+        case 'tool_call_failed': {
+            const toolName = event.payload?.tool_name || '?';
+            const errMsg = event.error_message || event.error_type || 'unknown error';
+            const dur = formatDuration(event.duration_ms);
+            process.stdout.write(seq + chalk_1.default.red('TOOL ') + `${toolName} ` +
+                chalk_1.default.red(errMsg) +
+                chalk_1.default.gray(` | ${dur}`) + '\n');
+            break;
+        }
+        case 'decision': {
+            const desc = event.payload?.description || 'decision';
+            process.stdout.write(seq + chalk_1.default.magenta('DECIDE ') + chalk_1.default.gray(desc) + '\n');
+            break;
+        }
+        case 'fallback_transition': {
+            const from = event.payload?.from_provider || '?';
+            const to = event.payload?.to_provider || '?';
+            const reason = event.payload?.reason || '';
+            process.stdout.write(seq + chalk_1.default.yellow('FALLBACK ') +
+                `${from} -> ${to}` +
+                (reason ? chalk_1.default.gray(` (${reason})`) : '') + '\n');
+            break;
+        }
+        case 'policy_violation': {
+            const vType = event.payload?.violation_type || 'violation';
+            const detail = event.payload?.detail || '';
+            process.stdout.write(seq + chalk_1.default.red('POLICY ') + chalk_1.default.red(vType) +
+                (detail ? chalk_1.default.gray(` — ${detail}`) : '') + '\n');
+            break;
+        }
+        case 'error': {
+            const errType = event.error_type || 'error';
+            const errMsg = event.error_message || '';
+            process.stdout.write(seq + chalk_1.default.red('ERROR ') + chalk_1.default.red(errType) +
+                (errMsg ? chalk_1.default.gray(` — ${errMsg}`) : '') + '\n');
+            break;
+        }
+        default: {
+            // Unknown event type — show raw
+            process.stdout.write(seq + chalk_1.default.gray(event.event_type) + '\n');
+        }
+    }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@orchagent/cli",
-  "version": "0.3.87",
+  "version": "0.3.89",
   "description": "Command-line interface for orchagent — deploy and run AI agents for your team",
   "license": "MIT",
   "author": "orchagent <hello@orchagent.io>",

package/dist/commands/call.js

@@ -1,23 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.registerCallCommand = registerCallCommand;
-/**
- * Deprecated: The 'call' command has been merged into 'run'.
- * Cloud execution is now the default behavior of 'orchagent run'.
- * This file provides a thin alias that prints a deprecation notice and exits.
- */
-function registerCallCommand(program) {
-    program
-        .command('call')
-        .description('Deprecated: use "orchagent run" instead')
-        .allowUnknownOption()
-        .allowExcessArguments()
-        .action(() => {
-        process.stderr.write(`The 'call' command has been merged into 'run'.\n\n` +
-            `Cloud execution is now the default behavior of 'orchagent run':\n` +
-            `  orchagent run <agent> --data '{...}'      # runs on server (cloud)\n` +
-            `  orchagent run <agent> --local --data '...' # runs locally\n\n` +
-            `Replace 'orchagent call' with 'orchagent run' in your commands.\n`);
-        process.exit(1);
-    });
-}

package/dist/commands/keys.js

@@ -1,22 +0,0 @@
-"use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.registerKeysCommand = registerKeysCommand;
-const chalk_1 = __importDefault(require("chalk"));
-function registerKeysCommand(program) {
-    program
-        .command('keys')
-        .description('(Deprecated) Use "orch secrets" instead')
-        .allowUnknownOption(true)
-        .action(() => {
-        process.stderr.write(chalk_1.default.yellow('\nThe `orch keys` command has been removed.\n\n') +
-            `LLM API keys are now managed through the unified workspace secrets vault.\n` +
-            `Use ${chalk_1.default.cyan('orch secrets')} instead:\n\n` +
-            `  ${chalk_1.default.cyan('orch secrets set ANTHROPIC_API_KEY <key>')}   Add an LLM key\n` +
-            `  ${chalk_1.default.cyan('orch secrets list')}                          List all secrets\n` +
-            `  ${chalk_1.default.cyan('orch secrets delete ANTHROPIC_API_KEY')}      Remove a key\n\n`);
-        process.exit(1);
-    });
-}