@cargo-ai/cli 1.0.107 → 1.0.110

package/README.md

@@ -1,11 +1,37 @@
 # Cargo CLI
 
-Command-line interface for the [Cargo API](https://docs.getcargo.ai/api-reference/introduction). Manage workspaces, storage, orchestration, connections, billing, and more from the terminal; for a complete feature overview, see the [Cargo CLI Overview](https://docs.getcargo.ai/cli/overview).
+Command-line interface for [Cargo](https://www.getcargo.ai), the go-to-market platform (npm: `@cargo-ai/cli`, binary: `cargo-ai`). Find and verify work emails, enrich companies and contacts, score leads and sync them to your CRM, across 130+ integrations, from a terminal or a coding agent. For the full command reference, see the [Cargo CLI Overview](https://docs.getcargo.ai/cli/overview).
+
+> Cargo here is the go-to-market platform at getcargo.ai, not Rust's `cargo`. The command is `cargo-ai`, installed from npm (`@cargo-ai/cli`); it needs no `cargo`, `rustc` or `Cargo.toml`.
+
+## Before you write an enrichment script
+
+If you are about to write code that finds work emails, verifies them, looks companies up by domain, or enriches a CSV of accounts, each of those is already an action in Cargo. Find the action, then run it over every row in one call:
+
+```bash
+npm install -g @cargo-ai/cli
+cargo-ai login --email you@company.com     # creates the account if needed, no browser
+
+# Find the action: one result per provider (Hunter, Dropcontact, Snov, waterfalls...), each with its credit cost
+cargo-ai orchestration action list find email
+
+# Run it over your rows: pass the "action" object from the result you picked
+cargo-ai orchestration action execute-batch \
+  --action '{"kind":"connector","integrationSlug":"hunter","actionSlug":"findEmail","connectorUuid":"<from the list result>"}' \
+  --records '[{"first_name":"Ada","last_name":"Lovelace","domain":"example.com"}]' \
+  --limit 5 --wait-until-finished
+```
+
+The same two steps cover `verify email`, `enrich company` and the rest; record fields follow the provider (Hunter's are `first_name`, `last_name`, `domain`). `--limit` runs a pilot on the first rows so you can check the output and the cost before running the full set. `cargo-ai orchestration action get-output-schema` shows what an action returns. Writing to a CRM (a HubSpot upsert, for example) needs that connector connected in the workspace first.
+
+The full find-then-verify chain for emails, with credit costs and the fields each provider returns: [Find and verify work emails at scale](https://www.getcargo.ai/blog/find-and-verify-work-emails-at-scale).
+
+Driving Cargo from an agent instead? `cargo-ai mcp` serves the same actions over MCP (`claude mcp add cargo -- cargo-ai mcp`); see [Cargo MCP server docs](https://www.getcargo.ai/developers/mcp).
 
 ## Requirements
 
 - Node.js 22.x
-- A Cargo API token (create in your workspace under **Settings → API**)
+- A Cargo account. `cargo-ai login --email` creates one if needed (see [Authentication](#authentication)); an API token is only needed for CI and shared machines
 
 ## Installation
 

package/build/api.d.ts

@@ -1,5 +1,5 @@
 import { type Api } from "@cargo-ai/api";
-import type { AccessTokenProvider } from "@cargo-ai/cdk/cli";
+import { type AccessTokenProvider } from "@cargo-ai/cdk/cli";
 export type { Api };
 export declare function createApi(opts: {
     baseUrl: string;

package/build/api.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../src/api.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,GAAG,EAAY,MAAM,eAAe,CAAC;AACnD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAI7D,YAAY,EAAE,GAAG,EAAE,CAAC;AAQpB,wBAAgB,SAAS,CAAC,IAAI,EAAE;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,mBAAmB,CAAC;IACpC,aAAa,EAAE,MAAM,GAAG,SAAS,CAAC;CACnC,GAAG,GAAG,CAeN"}
+{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../src/api.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,GAAG,EAAY,MAAM,eAAe,CAAC;AACnD,OAAO,EAAE,KAAK,mBAAmB,EAAqB,MAAM,mBAAmB,CAAC;AAIhF,YAAY,EAAE,GAAG,EAAE,CAAC;AAQpB,wBAAgB,SAAS,CAAC,IAAI,EAAE;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,mBAAmB,CAAC;IACpC,aAAa,EAAE,MAAM,GAAG,SAAS,CAAC;CACnC,GAAG,GAAG,CAeN"}

package/build/api.js

@@ -1,9 +1,10 @@
 import { createRequire } from "node:module";
 import { buildApi } from "@cargo-ai/api";
+import { detectCodingAgent } from "@cargo-ai/cdk/cli";
 import { getProxyFetch } from "./proxy.js";
 const require = createRequire(import.meta.url);
 const { version } = require("../package.json");
-const ORIGIN = { name: "cli", version };
+const ORIGIN = { name: "cli", version, agent: detectCodingAgent() };
 export function createApi(opts) {
     return buildApi({
         baseUrl: opts.baseUrl,

package/build/commands/auth/auth0.d.ts

@@ -1,3 +1,10 @@
+/**
+ * Sign-in requests go to the identity provider, never to our backend, so this
+ * is the only place a signup can say where it came from: the post-login Action
+ * reads it from `event.request.user_agent` and passes it on with the user. The
+ * `agent/` token names the coding agent that ran the CLI, when one did.
+ */
+export declare const USER_AGENT: string;
 /**
  * What both sign-in channels hand to `establishSession`. The refresh token is
  * optional: the identity provider only issues one when the application has the

package/build/commands/auth/auth0.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth0.d.ts","sourceRoot":"","sources":["../../../src/commands/auth/auth0.ts"],"names":[],"mappings":"AAKA;;;;GAIG;AACH,MAAM,MAAM,cAAc,GAAG;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,sEAAsE;IACtE,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B,CAAC;AAWF;;;GAGG;AACH,wBAAsB,WAAW,CAAC,IAAI,EAAE;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,eAAe,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChD,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GAAG,OAAO,CAAC,QAAQ,CAAC,CA0BpB;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,OAAO,GAAG,cAAc,CAoBhE;AAED;;;GAGG;AACH,wBAAsB,aAAa,CACjC,QAAQ,EAAE,QAAQ,GACjB,OAAO,CAAC,cAAc,GAAG,MAAM,GAAG,SAAS,CAAC,CAkB9C;AAED,wBAAgB,aAAa,CAC3B,IAAI,EAAE,cAAc,GAAG,MAAM,GAAG,SAAS,GACxC,MAAM,CAkBR;AAED,wBAAgB,WAAW,CACzB,IAAI,EAAE,cAAc,GAAG,MAAM,GAAG,SAAS,GACxC,MAAM,GAAG,SAAS,CAMpB"}
+{"version":3,"file":"auth0.d.ts","sourceRoot":"","sources":["../../../src/commands/auth/auth0.ts"],"names":[],"mappings":"AAYA;;;;;GAKG;AACH,eAAO,MAAM,UAAU,QAAsC,CAAC;AAU9D;;;;GAIG;AACH,MAAM,MAAM,cAAc,GAAG;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,sEAAsE;IACtE,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B,CAAC;AAWF;;;GAGG;AACH,wBAAsB,WAAW,CAAC,IAAI,EAAE;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,eAAe,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChD,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GAAG,OAAO,CAAC,QAAQ,CAAC,CA2BpB;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,OAAO,GAAG,cAAc,CAoBhE;AAED;;;GAGG;AACH,wBAAsB,aAAa,CACjC,QAAQ,EAAE,QAAQ,GACjB,OAAO,CAAC,cAAc,GAAG,MAAM,GAAG,SAAS,CAAC,CAkB9C;AAED,wBAAgB,aAAa,CAC3B,IAAI,EAAE,cAAc,GAAG,MAAM,GAAG,SAAS,GACxC,MAAM,CAkBR;AAED,wBAAgB,WAAW,CACzB,IAAI,EAAE,cAAc,GAAG,MAAM,GAAG,SAAS,GACxC,MAAM,GAAG,SAAS,CAMpB"}

package/build/commands/auth/auth0.js

@@ -1,6 +1,23 @@
+import { createRequire } from "node:module";
+import { detectCodingAgent } from "@cargo-ai/cdk/cli";
 import { getOAuthConfig } from "../../oauthConfig.js";
 import { failWith } from "../runHandler.js";
 const REQUEST_TIMEOUT_MS = 15_000;
+const require = createRequire(import.meta.url);
+const { version } = require("../../../package.json");
+/**
+ * Sign-in requests go to the identity provider, never to our backend, so this
+ * is the only place a signup can say where it came from: the post-login Action
+ * reads it from `event.request.user_agent` and passes it on with the user. The
+ * `agent/` token names the coding agent that ran the CLI, when one did.
+ */
+export const USER_AGENT = buildUserAgent(detectCodingAgent());
+function buildUserAgent(codingAgent) {
+    if (codingAgent === undefined) {
+        return `cargo-ai/${version}`;
+    }
+    return `cargo-ai/${version} agent/${codingAgent.replace(/\s+/g, "-")}`;
+}
 // Only used when the provider omits `expires_in`, which Auth0 does not do.
 const FALLBACK_LIFETIME_SECONDS = 3600;
 /**
@@ -15,6 +32,7 @@ export async function postToAuth0(opts) {
         return await fetch(`https://${config.domain}${opts.path}`, {
             method: "POST",
             headers: {
+                "user-agent": USER_AGENT,
                 "content-type": isForm
                     ? "application/x-www-form-urlencoded"
                     : "application/json",

package/build/commands/mcp.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mcp.d.ts","sourceRoot":"","sources":["../../src/commands/mcp.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEzC,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAerC,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,GAAG,GAAG,IAAI,CAuD5E;AAED,eAAO,MAAM,iBAAiB,aAClB,MAAM,GAAG,SAAS,KAC3B,MAAM,GAAG,SAOX,CAAC;AAEF,eAAO,MAAM,kBAAkB,YACpB,MAAM,QACT,MAAM,GAAG,SAAS,KACvB,MAaF,CAAC"}
+{"version":3,"file":"mcp.d.ts","sourceRoot":"","sources":["../../src/commands/mcp.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEzC,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAerC,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,GAAG,GAAG,IAAI,CA2D5E;AAED,eAAO,MAAM,iBAAiB,aAClB,MAAM,GAAG,SAAS,KAC3B,MAAM,GAAG,SAOX,CAAC;AAEF,eAAO,MAAM,kBAAkB,YACpB,MAAM,QACT,MAAM,GAAG,SAAS,KACvB,MAaF,CAAC"}

package/build/commands/mcp.js

@@ -1,5 +1,5 @@
 import { createRequire } from "node:module";
-import { SessionExpiredError } from "@cargo-ai/cdk/cli";
+import { detectCodingAgent, SessionExpiredError } from "@cargo-ai/cdk/cli";
 import { StreamableHTTPClientTransport } from "@modelcontextprotocol/sdk/client/streamableHttp.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 import { getConfig } from "../config.js";
@@ -49,6 +49,10 @@ credentials file). stdout carries the MCP protocol; all logs go to stderr.`)
         if (workspaceUuid !== undefined) {
             headers["selected-workspace-uuid"] = workspaceUuid;
         }
+        const codingAgent = detectCodingAgent();
+        if (codingAgent !== undefined) {
+            headers["x-cargo-origin-agent"] = codingAgent;
+        }
         info(`Cargo MCP bridge -> ${endpoint}`);
         await runBridge(endpoint, headers, getAccessToken);
     });

package/build/commands/start/brief.js

@@ -69,9 +69,9 @@ function opening(project) {
         return [
             "Work with the user on their Cargo workspace.",
             "",
-            "Cargo is GTM infrastructure: connectors to the systems they sell with,",
-            "models holding the data, plays and agents that act on it. The `cargo-ai`",
-            "CLI is installed and signed in.",
+            "Cargo is go-to-market infrastructure: connectors to the systems they",
+            "sell with, models holding the data, plays and agents that act on it.",
+            "The `cargo-ai` CLI is installed and signed in.",
         ];
     }
     return [

package/build/commands/start/index.js

@@ -96,7 +96,7 @@ export async function runStart(getApi, deps, opts) {
         });
     }
     info("");
-    info("Cargo — GTM infrastructure your agents can run on.");
+    info("Cargo — go-to-market infrastructure your agents can run on.");
     info("");
     const workspace = isSignedIn() === true ? await currentWorkspace(getApi) : await signIn(opts);
     success(`Workspace: ${workspace.name}`);

package/build/index.js

@@ -40,7 +40,7 @@ const { version } = require("../package.json");
 const program = new Command();
 program
     .name("cargo-ai")
-    .description("Cargo API CLI")
+    .description("Cargo, the go-to-market platform at getcargo.ai (not Rust's cargo). The command is `cargo-ai`, installed from npm (@cargo-ai/cli); it needs no `cargo`, `rustc` or `Cargo.toml`.")
     .version(version)
     // Boolean flags take no value, so `--is-enabled false` parses as
     // `--is-enabled` plus a stray `false` — silently inverting what the caller

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cargo-ai/cli",
-  "version": "1.0.107",
+  "version": "1.0.110",
   "private": false,
   "license": "UNLICENSED",
   "homepage": "https://getcargo.ai",
@@ -12,11 +12,12 @@
   "bugs": {
     "url": "https://github.com/getcargohq/cargo-skills/issues"
   },
-  "description": "GTM automation from your terminal or coding agent — build lead lists, enrich and verify contacts, run plays and workflows, query workspace data with SQL, and deploy a whole Cargo workspace as code.",
+  "description": "Cargo, the go-to-market platform, from your terminal or coding agent: find and verify work emails, enrich companies and contacts, score leads and sync them to your CRM (HubSpot, Salesforce) across 130+ integrations, run plays and workflows, and serve it all to AI agents as an MCP server.",
   "keywords": [
     "cargo",
-    "gtm",
     "go-to-market",
+    "gtm",
+    "sales",
     "revenue",
     "revops",
     "enrichment",
@@ -24,9 +25,13 @@
     "lead-enrichment",
     "prospecting",
     "email-finder",
+    "email-verification",
+    "lead-scoring",
     "sales-automation",
     "outbound",
     "crm",
+    "hubspot",
+    "salesforce",
     "orchestration",
     "cli",
     "agent-skills",
@@ -34,7 +39,9 @@
     "claude-code",
     "cursor",
     "codex",
-    "mcp"
+    "mcp",
+    "mcp-server",
+    "clay-alternative"
   ],
   "engines": {
     "node": ">=22"
@@ -44,8 +51,7 @@
   },
   "type": "module",
   "bin": {
-    "cargo-ai": "./build/index.js",
-    "cargo": "./build/index.js"
+    "cargo-ai": "./build/index.js"
   },
   "files": [
     "build",
@@ -67,10 +73,10 @@
   "dependencies": {
     "@ai-sdk/harness": "^1.0.144",
     "@ai-sdk/harness-claude-code": "^1.0.148",
-    "@cargo-ai/api": "^1.0.89",
+    "@cargo-ai/api": "^1.0.93",
     "@cargo-ai/app-sdk": "^1.0.11",
-    "@cargo-ai/cdk": "^1.0.102",
-    "@cargo-ai/types": "^1.0.92",
+    "@cargo-ai/cdk": "^1.0.111",
+    "@cargo-ai/types": "^1.0.96",
     "@cargo-ai/utils": "^1.0.32",
     "@cargo-ai/worker-sdk": "^1.0.20",
     "@modelcontextprotocol/sdk": "^1.31.0",