@cargo-ai/cli 1.0.106 → 1.0.108

package/README.md

@@ -1,11 +1,33 @@
 # Cargo CLI
 
-Command-line interface for the [Cargo API](https://docs.getcargo.ai/api-reference/introduction). Manage workspaces, storage, orchestration, connections, billing, and more from the terminal; for a complete feature overview, see the [Cargo CLI Overview](https://docs.getcargo.ai/cli/overview).
+Command-line interface for [Cargo](https://www.getcargo.ai), the GTM platform (npm: `@cargo-ai/cli`, binary: `cargo-ai`). Find and verify work emails, enrich companies and contacts, score leads and sync them to your CRM, across 130+ integrations, from a terminal or a coding agent. For the full command reference, see the [Cargo CLI Overview](https://docs.getcargo.ai/cli/overview).
+
+## Before you write an enrichment script
+
+If you are about to write code that finds work emails, verifies them, looks companies up by domain, or enriches a CSV of accounts, each of those is already an action in Cargo. Find the action, then run it over every row in one call:
+
+```bash
+npm install -g @cargo-ai/cli
+cargo-ai login --email you@company.com     # creates the account if needed, no browser
+
+# Find the action: one result per provider (Hunter, Dropcontact, Snov, waterfalls...), each with its credit cost
+cargo-ai orchestration action list find email
+
+# Run it over your rows: pass the "action" object from the result you picked
+cargo-ai orchestration action execute-batch \
+  --action '{"kind":"connector","integrationSlug":"hunter","actionSlug":"findEmail","connectorUuid":"<from the list result>"}' \
+  --records '[{"first_name":"Ada","last_name":"Lovelace","domain":"example.com"}]' \
+  --limit 5 --wait-until-finished
+```
+
+The same two steps cover `verify email`, `enrich company` and the rest; record fields follow the provider (Hunter's are `first_name`, `last_name`, `domain`). `--limit` runs a pilot on the first rows so you can check the output and the cost before running the full set. `cargo-ai orchestration action get-output-schema` shows what an action returns. Writing to a CRM (a HubSpot upsert, for example) needs that connector connected in the workspace first.
+
+Driving Cargo from an agent instead? `cargo-ai mcp` serves the same actions over MCP (`claude mcp add cargo -- cargo-ai mcp`); see [Cargo MCP server docs](https://www.getcargo.ai/developers/mcp).
 
 ## Requirements
 
 - Node.js 22.x
-- A Cargo API token (create in your workspace under **Settings → API**)
+- A Cargo account. `cargo-ai login --email` creates one if needed (see [Authentication](#authentication)); an API token is only needed for CI and shared machines
 
 ## Installation
 

package/build/api.d.ts

@@ -1,5 +1,5 @@
 import { type Api } from "@cargo-ai/api";
-import type { AccessTokenProvider } from "@cargo-ai/cdk/cli";
+import { type AccessTokenProvider } from "@cargo-ai/cdk/cli";
 export type { Api };
 export declare function createApi(opts: {
     baseUrl: string;

package/build/api.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../src/api.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,GAAG,EAAY,MAAM,eAAe,CAAC;AACnD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAI7D,YAAY,EAAE,GAAG,EAAE,CAAC;AAQpB,wBAAgB,SAAS,CAAC,IAAI,EAAE;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,mBAAmB,CAAC;IACpC,aAAa,EAAE,MAAM,GAAG,SAAS,CAAC;CACnC,GAAG,GAAG,CAeN"}
+{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../src/api.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,GAAG,EAAY,MAAM,eAAe,CAAC;AACnD,OAAO,EAAE,KAAK,mBAAmB,EAAqB,MAAM,mBAAmB,CAAC;AAIhF,YAAY,EAAE,GAAG,EAAE,CAAC;AAQpB,wBAAgB,SAAS,CAAC,IAAI,EAAE;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,mBAAmB,CAAC;IACpC,aAAa,EAAE,MAAM,GAAG,SAAS,CAAC;CACnC,GAAG,GAAG,CAeN"}

package/build/api.js

@@ -1,9 +1,10 @@
 import { createRequire } from "node:module";
 import { buildApi } from "@cargo-ai/api";
+import { detectCodingAgent } from "@cargo-ai/cdk/cli";
 import { getProxyFetch } from "./proxy.js";
 const require = createRequire(import.meta.url);
 const { version } = require("../package.json");
-const ORIGIN = { name: "cli", version };
+const ORIGIN = { name: "cli", version, agent: detectCodingAgent() };
 export function createApi(opts) {
     return buildApi({
         baseUrl: opts.baseUrl,

package/build/commands/auth/auth0.d.ts

@@ -1,3 +1,10 @@
+/**
+ * Sign-in requests go to the identity provider, never to our backend, so this
+ * is the only place a signup can say where it came from: the post-login Action
+ * reads it from `event.request.user_agent` and passes it on with the user. The
+ * `agent/` token names the coding agent that ran the CLI, when one did.
+ */
+export declare const USER_AGENT: string;
 /**
  * What both sign-in channels hand to `establishSession`. The refresh token is
  * optional: the identity provider only issues one when the application has the

package/build/commands/auth/auth0.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth0.d.ts","sourceRoot":"","sources":["../../../src/commands/auth/auth0.ts"],"names":[],"mappings":"AAKA;;;;GAIG;AACH,MAAM,MAAM,cAAc,GAAG;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,sEAAsE;IACtE,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B,CAAC;AAWF;;;GAGG;AACH,wBAAsB,WAAW,CAAC,IAAI,EAAE;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,eAAe,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChD,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GAAG,OAAO,CAAC,QAAQ,CAAC,CA0BpB;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,OAAO,GAAG,cAAc,CAoBhE;AAED;;;GAGG;AACH,wBAAsB,aAAa,CACjC,QAAQ,EAAE,QAAQ,GACjB,OAAO,CAAC,cAAc,GAAG,MAAM,GAAG,SAAS,CAAC,CAkB9C;AAED,wBAAgB,aAAa,CAC3B,IAAI,EAAE,cAAc,GAAG,MAAM,GAAG,SAAS,GACxC,MAAM,CAkBR;AAED,wBAAgB,WAAW,CACzB,IAAI,EAAE,cAAc,GAAG,MAAM,GAAG,SAAS,GACxC,MAAM,GAAG,SAAS,CAMpB"}
+{"version":3,"file":"auth0.d.ts","sourceRoot":"","sources":["../../../src/commands/auth/auth0.ts"],"names":[],"mappings":"AAYA;;;;;GAKG;AACH,eAAO,MAAM,UAAU,QAAsC,CAAC;AAU9D;;;;GAIG;AACH,MAAM,MAAM,cAAc,GAAG;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,sEAAsE;IACtE,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B,CAAC;AAWF;;;GAGG;AACH,wBAAsB,WAAW,CAAC,IAAI,EAAE;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,eAAe,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChD,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GAAG,OAAO,CAAC,QAAQ,CAAC,CA2BpB;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,OAAO,GAAG,cAAc,CAoBhE;AAED;;;GAGG;AACH,wBAAsB,aAAa,CACjC,QAAQ,EAAE,QAAQ,GACjB,OAAO,CAAC,cAAc,GAAG,MAAM,GAAG,SAAS,CAAC,CAkB9C;AAED,wBAAgB,aAAa,CAC3B,IAAI,EAAE,cAAc,GAAG,MAAM,GAAG,SAAS,GACxC,MAAM,CAkBR;AAED,wBAAgB,WAAW,CACzB,IAAI,EAAE,cAAc,GAAG,MAAM,GAAG,SAAS,GACxC,MAAM,GAAG,SAAS,CAMpB"}

package/build/commands/auth/auth0.js

@@ -1,6 +1,23 @@
+import { createRequire } from "node:module";
+import { detectCodingAgent } from "@cargo-ai/cdk/cli";
 import { getOAuthConfig } from "../../oauthConfig.js";
 import { failWith } from "../runHandler.js";
 const REQUEST_TIMEOUT_MS = 15_000;
+const require = createRequire(import.meta.url);
+const { version } = require("../../../package.json");
+/**
+ * Sign-in requests go to the identity provider, never to our backend, so this
+ * is the only place a signup can say where it came from: the post-login Action
+ * reads it from `event.request.user_agent` and passes it on with the user. The
+ * `agent/` token names the coding agent that ran the CLI, when one did.
+ */
+export const USER_AGENT = buildUserAgent(detectCodingAgent());
+function buildUserAgent(codingAgent) {
+    if (codingAgent === undefined) {
+        return `cargo-ai/${version}`;
+    }
+    return `cargo-ai/${version} agent/${codingAgent.replace(/\s+/g, "-")}`;
+}
 // Only used when the provider omits `expires_in`, which Auth0 does not do.
 const FALLBACK_LIFETIME_SECONDS = 3600;
 /**
@@ -15,6 +32,7 @@ export async function postToAuth0(opts) {
         return await fetch(`https://${config.domain}${opts.path}`, {
             method: "POST",
             headers: {
+                "user-agent": USER_AGENT,
                 "content-type": isForm
                     ? "application/x-www-form-urlencoded"
                     : "application/json",

package/build/commands/hosting/worker.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"worker.d.ts","sourceRoot":"","sources":["../../../src/commands/hosting/worker.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEzC,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAQxC,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,OAAO,EACf,MAAM,EAAE,MAAM,GAAG,GAChB,IAAI,CA6ON"}
+{"version":3,"file":"worker.d.ts","sourceRoot":"","sources":["../../../src/commands/hosting/worker.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEzC,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAQxC,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,OAAO,EACf,MAAM,EAAE,MAAM,GAAG,GAChB,IAAI,CAoPN"}

package/build/commands/hosting/worker.js

@@ -56,12 +56,14 @@ export function registerWorkerCommands(parent, getApi) {
         .option("--name <name>", "New display name")
         .option("--folder-uuid <uuid>", "New folder UUID (pass 'null' to move to the workspace root)")
         .option("--triggers <json>", "Full replacement list of cron triggers (pass '[]' to remove all)")
+        .option("--run-as-user-uuid <uuid>", "Service user the worker runs as (pass 'null' to clear). Cargo then binds a temporary CARGO_API_TOKEN for that user.")
         .action(async (opts) => {
         const api = getApi();
         const result = await handleApiCall(() => api.hosting.worker.update({
             uuid: opts.uuid,
             name: opts.name,
             folderUuid: opts.folderUuid === "null" ? null : opts.folderUuid,
+            runAsUserUuid: opts.runAsUserUuid === "null" ? null : opts.runAsUserUuid,
             triggers: opts.triggers !== undefined
                 ? parseJson(opts.triggers, "--triggers")
                 : undefined,

package/build/commands/mcp.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mcp.d.ts","sourceRoot":"","sources":["../../src/commands/mcp.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEzC,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAerC,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,GAAG,GAAG,IAAI,CAuD5E;AAED,eAAO,MAAM,iBAAiB,aAClB,MAAM,GAAG,SAAS,KAC3B,MAAM,GAAG,SAOX,CAAC;AAEF,eAAO,MAAM,kBAAkB,YACpB,MAAM,QACT,MAAM,GAAG,SAAS,KACvB,MAaF,CAAC"}
+{"version":3,"file":"mcp.d.ts","sourceRoot":"","sources":["../../src/commands/mcp.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEzC,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAerC,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,GAAG,GAAG,IAAI,CA2D5E;AAED,eAAO,MAAM,iBAAiB,aAClB,MAAM,GAAG,SAAS,KAC3B,MAAM,GAAG,SAOX,CAAC;AAEF,eAAO,MAAM,kBAAkB,YACpB,MAAM,QACT,MAAM,GAAG,SAAS,KACvB,MAaF,CAAC"}

package/build/commands/mcp.js

@@ -1,5 +1,5 @@
 import { createRequire } from "node:module";
-import { SessionExpiredError } from "@cargo-ai/cdk/cli";
+import { detectCodingAgent, SessionExpiredError } from "@cargo-ai/cdk/cli";
 import { StreamableHTTPClientTransport } from "@modelcontextprotocol/sdk/client/streamableHttp.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 import { getConfig } from "../config.js";
@@ -49,6 +49,10 @@ credentials file). stdout carries the MCP protocol; all logs go to stderr.`)
         if (workspaceUuid !== undefined) {
             headers["selected-workspace-uuid"] = workspaceUuid;
         }
+        const codingAgent = detectCodingAgent();
+        if (codingAgent !== undefined) {
+            headers["x-cargo-origin-agent"] = codingAgent;
+        }
         info(`Cargo MCP bridge -> ${endpoint}`);
         await runBridge(endpoint, headers, getAccessToken);
     });

package/build/commands/workspaceManagement/user.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"user.d.ts","sourceRoot":"","sources":["../../../src/commands/workspaceManagement/user.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEzC,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAGxC,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,GAAG,IAAI,CAwM7E"}
+{"version":3,"file":"user.d.ts","sourceRoot":"","sources":["../../../src/commands/workspaceManagement/user.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEzC,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAGxC,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,GAAG,IAAI,CAsM7E"}

package/build/commands/workspaceManagement/user.js

@@ -30,15 +30,16 @@ Examples:
     user
         .command("create")
         .description("Invite a user to the workspace")
-        .requiredOption("--user-email <email>", "User email address (string, required)")
+        .requiredOption("--email <email>", "User email address (string, required)")
         .requiredOption("--role-slug <slug>", "Role slug to assign (string, required)")
         .addHelpText("after", `
 Example:
-  $ cargo-ai workspaceManagement user create --user-email alice@example.com --role-slug admin`)
+  $ cargo-ai workspaceManagement user create --email alice@example.com --role-slug admin`)
         .action(async (opts) => {
         const api = getApi();
         const result = await handleApiCall(() => api.workspaceManagement.user.create({
-            userEmail: opts.userEmail,
+            kind: "person",
+            email: opts.email,
             roleSlug: opts.roleSlug,
         }));
         outputJson(result);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cargo-ai/cli",
-  "version": "1.0.106",
+  "version": "1.0.108",
   "private": false,
   "license": "UNLICENSED",
   "homepage": "https://getcargo.ai",
@@ -67,10 +67,10 @@
   "dependencies": {
     "@ai-sdk/harness": "^1.0.144",
     "@ai-sdk/harness-claude-code": "^1.0.148",
-    "@cargo-ai/api": "^1.0.87",
+    "@cargo-ai/api": "^1.0.92",
     "@cargo-ai/app-sdk": "^1.0.11",
-    "@cargo-ai/cdk": "^1.0.99",
-    "@cargo-ai/types": "^1.0.90",
+    "@cargo-ai/cdk": "^1.0.110",
+    "@cargo-ai/types": "^1.0.96",
     "@cargo-ai/utils": "^1.0.32",
     "@cargo-ai/worker-sdk": "^1.0.20",
     "@modelcontextprotocol/sdk": "^1.31.0",