@cargo-ai/cli 1.0.120 → 1.0.122

package/README.md

@@ -31,7 +31,8 @@ Driving Cargo from an agent instead? `cargo-ai mcp` serves the same actions over
 ## Requirements
 
 - Node.js 22.x
-- A Cargo account. `cargo-ai login --email` creates one if needed (see [Authentication](#authentication)); an API token is only needed for CI and shared machines
+- A Cargo account to run anything. `cargo-ai login --email` creates one if needed (see [Authentication](#authentication)); an API token is only needed for CI and shared machines
+- Before signing up, `orchestration action list`, `connection integration list|get`, `orchestration action execute --dry-run` (a free sample result in the shape of a real run) and `project plan|types` already work
 
 ## Installation
 

package/build/api.d.ts

@@ -3,7 +3,12 @@ import { type AccessTokenProvider } from "@cargo-ai/cdk/cli";
 export type { Api };
 export declare function createApi(opts: {
     baseUrl: string;
-    getAccessToken: AccessTokenProvider;
+    /**
+     * `undefined` sends no Authorization header at all, which only the routes
+     * that answer without a workspace accept. `getPublicApi` is the one caller
+     * that passes it.
+     */
+    getAccessToken: AccessTokenProvider | undefined;
     workspaceUuid: string | undefined;
 }): Api;
 //# sourceMappingURL=api.d.ts.map

package/build/api.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../src/api.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,GAAG,EAAY,MAAM,eAAe,CAAC;AACnD,OAAO,EAAE,KAAK,mBAAmB,EAAqB,MAAM,mBAAmB,CAAC;AAIhF,YAAY,EAAE,GAAG,EAAE,CAAC;AAQpB,wBAAgB,SAAS,CAAC,IAAI,EAAE;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,mBAAmB,CAAC;IACpC,aAAa,EAAE,MAAM,GAAG,SAAS,CAAC;CACnC,GAAG,GAAG,CAeN"}
+{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../src/api.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,GAAG,EAAY,MAAM,eAAe,CAAC;AACnD,OAAO,EAAE,KAAK,mBAAmB,EAAqB,MAAM,mBAAmB,CAAC;AAIhF,YAAY,EAAE,GAAG,EAAE,CAAC;AAQpB,wBAAgB,SAAS,CAAC,IAAI,EAAE;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,cAAc,EAAE,mBAAmB,GAAG,SAAS,CAAC;IAChD,aAAa,EAAE,MAAM,GAAG,SAAS,CAAC;CACnC,GAAG,GAAG,CAeN"}

package/build/commands/connection/action.d.ts

@@ -1,4 +1,4 @@
 import type { Command } from "commander";
 import type { Api } from "../../api.js";
-export declare function registerActionSearchCommands(parent: Command, getApi: () => Api): void;
+export declare function registerActionSearchCommands(parent: Command, getPublicApi: () => Api): void;
 //# sourceMappingURL=action.d.ts.map

package/build/commands/connection/action.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"action.d.ts","sourceRoot":"","sources":["../../../src/commands/connection/action.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEzC,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAkDxC,wBAAgB,4BAA4B,CAC1C,MAAM,EAAE,OAAO,EACf,MAAM,EAAE,MAAM,GAAG,GAChB,IAAI,CAoIN"}
+{"version":3,"file":"action.d.ts","sourceRoot":"","sources":["../../../src/commands/connection/action.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEzC,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAmDxC,wBAAgB,4BAA4B,CAC1C,MAAM,EAAE,OAAO,EACf,YAAY,EAAE,MAAM,GAAG,GACtB,IAAI,CAqIN"}

package/build/commands/connection/action.js

@@ -1,7 +1,8 @@
 import { ExitCodes, failWith, handleApiCall, outputJson, } from "../runHandler.js";
+import { noteSignedOut } from "../signedOutNotice.js";
 const DEFAULT_LIMIT = 20;
 const DESCRIPTION_MAX_LENGTH = 300;
-export function registerActionSearchCommands(parent, getApi) {
+export function registerActionSearchCommands(parent, getPublicApi) {
     const action = parent
         .command("action")
         .description("Discover integration actions");
@@ -31,7 +32,8 @@ Examples:
                 code: ExitCodes.InvalidUsage,
             });
         }
-        const api = getApi();
+        noteSignedOut();
+        const api = getPublicApi();
         const { integrations } = await handleApiCall(() => api.connection.integration.list({
             hasActions: true,
             category: opts.category,

package/build/commands/connection/index.d.ts

@@ -1,4 +1,4 @@
 import type { Command } from "commander";
 import type { Api } from "../../api.js";
-export declare function registerConnectionCommands(parent: Command, getApi: () => Api): void;
+export declare function registerConnectionCommands(parent: Command, getApi: () => Api, getPublicApi: () => Api): void;
 //# sourceMappingURL=index.d.ts.map

package/build/commands/connection/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/commands/connection/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEzC,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAOxC,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,OAAO,EACf,MAAM,EAAE,MAAM,GAAG,GAChB,IAAI,CAUN"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/commands/connection/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEzC,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAOxC,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,OAAO,EACf,MAAM,EAAE,MAAM,GAAG,EACjB,YAAY,EAAE,MAAM,GAAG,GACtB,IAAI,CAUN"}

package/build/commands/connection/index.js

@@ -3,13 +3,13 @@ import { registerConnectorCommands } from "./connector.js";
 import { registerCustomIntegrationCommands } from "./customIntegration.js";
 import { registerIntegrationCommands } from "./integration.js";
 import { registerNativeIntegrationCommands } from "./nativeIntegration.js";
-export function registerConnectionCommands(parent, getApi) {
+export function registerConnectionCommands(parent, getApi, getPublicApi) {
     const connection = parent
         .command("connection")
         .description("Connectors and integrations");
     registerConnectorCommands(connection, getApi);
-    registerIntegrationCommands(connection, getApi);
-    registerActionSearchCommands(connection, getApi);
-    registerNativeIntegrationCommands(connection, getApi);
+    registerIntegrationCommands(connection, getApi, getPublicApi);
+    registerActionSearchCommands(connection, getPublicApi);
+    registerNativeIntegrationCommands(connection, getPublicApi);
     registerCustomIntegrationCommands(connection, getApi);
 }

package/build/commands/connection/integration.d.ts

@@ -1,4 +1,4 @@
 import type { Command } from "commander";
 import type { Api } from "../../api.js";
-export declare function registerIntegrationCommands(parent: Command, getApi: () => Api): void;
+export declare function registerIntegrationCommands(parent: Command, getApi: () => Api, getPublicApi: () => Api): void;
 //# sourceMappingURL=integration.d.ts.map

package/build/commands/connection/integration.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"integration.d.ts","sourceRoot":"","sources":["../../../src/commands/connection/integration.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEzC,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAGxC,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,OAAO,EACf,MAAM,EAAE,MAAM,GAAG,GAChB,IAAI,CAoJN"}
+{"version":3,"file":"integration.d.ts","sourceRoot":"","sources":["../../../src/commands/connection/integration.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEzC,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAIxC,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,OAAO,EACf,MAAM,EAAE,MAAM,GAAG,EACjB,YAAY,EAAE,MAAM,GAAG,GACtB,IAAI,CA4JN"}

package/build/commands/connection/integration.js

@@ -1,8 +1,11 @@
 import { handleApiCall, outputJson, parseJson } from "../runHandler.js";
-export function registerIntegrationCommands(parent, getApi) {
+import { noteSignedOut } from "../signedOutNotice.js";
+export function registerIntegrationCommands(parent, getApi, getPublicApi) {
     const integration = parent
         .command("integration")
-        .description("Browse and manage integrations");
+        .description("Browse and manage integrations")
+        .addHelpText("after", `
+list, get and get-documentation work before you sign up.`);
     integration
         .command("list")
         .description("List all integrations")
@@ -19,7 +22,8 @@ when they are named through --slugs. They cannot be connected any more, but they
 keep running for the workspaces already on them, and \`integration get <slug>\`
 always returns one.`)
         .action(async (opts) => {
-        const api = getApi();
+        noteSignedOut();
+        const api = getPublicApi();
         const slugs = opts.slugs !== undefined
             ? opts.slugs
                 .split(",")
@@ -65,7 +69,8 @@ always returns one.`)
         .command("get <slug>")
         .description("Get an integration by slug")
         .action(async (slug) => {
-        const api = getApi();
+        noteSignedOut();
+        const api = getPublicApi();
         const result = await handleApiCall(() => api.connection.integration.get({ slug }));
         outputJson(result);
     });
@@ -73,7 +78,8 @@ always returns one.`)
         .command("get-documentation <slug>")
         .description("Get integration documentation by slug")
         .action(async (slug) => {
-        const api = getApi();
+        noteSignedOut();
+        const api = getPublicApi();
         const result = await handleApiCall(() => api.connection.integration.getDocumentation(slug));
         outputJson(result);
     });

package/build/commands/connection/nativeIntegration.d.ts

@@ -1,4 +1,4 @@
 import type { Command } from "commander";
 import type { Api } from "../../api.js";
-export declare function registerNativeIntegrationCommands(parent: Command, getApi: () => Api): void;
+export declare function registerNativeIntegrationCommands(parent: Command, getPublicApi: () => Api): void;
 //# sourceMappingURL=nativeIntegration.d.ts.map

package/build/commands/connection/nativeIntegration.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"nativeIntegration.d.ts","sourceRoot":"","sources":["../../../src/commands/connection/nativeIntegration.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEzC,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAGxC,wBAAgB,iCAAiC,CAC/C,MAAM,EAAE,OAAO,EACf,MAAM,EAAE,MAAM,GAAG,GAChB,IAAI,CAeN"}
+{"version":3,"file":"nativeIntegration.d.ts","sourceRoot":"","sources":["../../../src/commands/connection/nativeIntegration.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEzC,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAIxC,wBAAgB,iCAAiC,CAC/C,MAAM,EAAE,OAAO,EACf,YAAY,EAAE,MAAM,GAAG,GACtB,IAAI,CAgBN"}

package/build/commands/connection/nativeIntegration.js

@@ -1,5 +1,6 @@
 import { handleApiCall, outputJson } from "../runHandler.js";
-export function registerNativeIntegrationCommands(parent, getApi) {
+import { noteSignedOut } from "../signedOutNotice.js";
+export function registerNativeIntegrationCommands(parent, getPublicApi) {
     const nativeIntegration = parent
         .command("native-integration")
         .description("Native integration");
@@ -7,7 +8,8 @@ export function registerNativeIntegrationCommands(parent, getApi) {
         .command("get")
         .description("Get native integration")
         .action(async () => {
-        const api = getApi();
+        noteSignedOut();
+        const api = getPublicApi();
         const result = await handleApiCall(() => api.connection.nativeIntegration.get());
         outputJson(result);
     });

package/build/commands/content/file.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"file.d.ts","sourceRoot":"","sources":["../../../src/commands/content/file.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEzC,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAGxC,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,GAAG,IAAI,CAkF7E"}
+{"version":3,"file":"file.d.ts","sourceRoot":"","sources":["../../../src/commands/content/file.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEzC,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAGxC,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,GAAG,IAAI,CAwQ7E"}

package/build/commands/content/file.js

@@ -1,5 +1,5 @@
-import { readFile } from "node:fs/promises";
-import { basename } from "node:path";
+import { readFile, writeFile } from "node:fs/promises";
+import { basename, extname } from "node:path";
 import { handleApiCall, outputJson } from "../runHandler.js";
 export function registerFileCommands(parent, getApi) {
     const file = parent.command("file").description("Storage file operations");
@@ -47,6 +47,8 @@ export function registerFileCommands(parent, getApi) {
         .description("Upload a file")
         .requiredOption("--file <path>", "Path to the file to upload")
         .option("--folder-uuid <uuid>", "Folder UUID")
+        .option("--index <none|vectorStore>", "vectorStore (default) makes the file searchable by agents; none only stores it")
+        .option("--visibility <private|public>", "Defaults to private")
         .action(async (opts) => {
         const buffer = await readFile(opts.file);
         const name = basename(opts.file);
@@ -56,6 +58,8 @@ export function registerFileCommands(parent, getApi) {
             api.content.file.upload({
                 file: fileObj,
                 folderUuid: opts.folderUuid,
+                indexMode: parseIndexMode(opts.index),
+                visibility: parseVisibility(opts.visibility),
                 onProgress: (pct) => {
                     process.stderr.write(`\rUpload progress: ${pct}%`);
                 },
@@ -71,4 +75,161 @@ export function registerFileCommands(parent, getApi) {
             });
         }));
     });
+    file
+        .command("put <path>")
+        .description("Store a file at a path (e.g. reports/2026-q3/summary.pdf), creating folders and overwriting what is there. Any size: large files go straight to storage in parts.")
+        .requiredOption("--file <path>", "Path to the local file")
+        .option("--content-type <type>", "MIME type (guessed from the extension)")
+        .option("--index <none|vectorStore>", "none (default for a new file) only stores it; vectorStore makes it searchable by agents")
+        .option("--visibility <private|public>", "Defaults to private")
+        .option("--mirror-to-context", "Also write it under .files/ in the context")
+        .action(async (path, opts) => {
+        const contentType = opts.contentType !== undefined
+            ? opts.contentType
+            : guessContentType(opts.file);
+        const buffer = await readFile(opts.file);
+        const fileObj = new File([buffer], basename(opts.file), { type: contentType });
+        const api = getApi();
+        const uploaded = await handleApiCall(() => new Promise((resolve, reject) => {
+            api.workspaceManagement.file.upload({
+                file: fileObj,
+                onProgress: (pct) => {
+                    process.stderr.write(`\rUpload progress: ${pct}%`);
+                },
+                onComplete: (result) => {
+                    process.stderr.write("\n");
+                    resolve(result);
+                },
+                onError: () => {
+                    process.stderr.write("\n");
+                    reject(new Error("Upload failed"));
+                },
+            });
+        }));
+        const result = await handleApiCall(() => api.content.file.import({
+            s3Filename: uploaded.s3Filename,
+            path,
+            contentType,
+            indexMode: parseIndexMode(opts.index),
+            visibility: parseVisibility(opts.visibility),
+            mirrorToContext: opts.mirrorToContext,
+        }));
+        outputJson(result);
+    });
+    file
+        .command("download <path>")
+        .description("Download the file at a path, at any size")
+        .option("--out <file>", "Write to this local file instead of stdout")
+        .action(async (path, opts) => {
+        const api = getApi();
+        const blob = await handleApiCall(() => api.content.object.get(path));
+        const bytes = Buffer.from(await blob.arrayBuffer());
+        if (opts.out !== undefined) {
+            await writeFile(opts.out, bytes);
+            outputJson({ path, out: opts.out, size: bytes.length });
+            return;
+        }
+        process.stdout.write(bytes);
+    });
+    file
+        .command("url <path>")
+        .description("Create a signed URL for the file at a path that anyone can open until it expires (plus its public link when the file is public)")
+        .option("--expires <seconds>", "Lifetime in seconds, up to 10800 (3h)")
+        .option("--download", "Make browsers save the file instead of showing it")
+        .action(async (path, opts) => {
+        const api = getApi();
+        const result = await handleApiCall(async () => {
+            const { file: found } = await api.content.object.stat(path);
+            return api.content.file.getUrl({
+                uuid: found.uuid,
+                expiresInSeconds: opts.expires !== undefined ? Number(opts.expires) : undefined,
+                download: opts.download,
+            });
+        });
+        outputJson(result);
+    });
+    file
+        .command("ls [prefix]")
+        .description("List files whose path starts with a prefix (e.g. reports/), ordered by path")
+        .option("--limit <n>", "Page size, up to 1000", "100")
+        .option("--cursor <cursor>", "nextCursor from the previous page")
+        .action(async (prefix, opts) => {
+        const api = getApi();
+        const result = await handleApiCall(() => api.content.object.list({
+            prefix,
+            cursor: opts.cursor,
+            limit: Number(opts.limit),
+        }));
+        outputJson(result);
+    });
+    file
+        .command("rm <path>")
+        .description("Remove the file at a path")
+        .action(async (path) => {
+        const api = getApi();
+        const result = await handleApiCall(() => api.content.object.remove(path));
+        outputJson(result);
+    });
+    file
+        .command("visibility <path> <visibility>")
+        .description("Make the file at a path public (served without auth from a stable link) or private (revokes the link at once)")
+        .action(async (path, visibility) => {
+        const parsedVisibility = parseVisibility(visibility);
+        if (parsedVisibility === undefined) {
+            throw new Error("visibility must be private or public");
+        }
+        const api = getApi();
+        const result = await handleApiCall(async () => {
+            const { file: found } = await api.content.object.stat(path);
+            return api.content.file.update({
+                uuid: found.uuid,
+                visibility: parsedVisibility,
+            });
+        });
+        outputJson(result);
+    });
 }
+const parseIndexMode = (value) => {
+    if (value === undefined) {
+        return undefined;
+    }
+    if (value === "none" || value === "vectorStore") {
+        return value;
+    }
+    throw new Error(`--index must be none or vectorStore, got ${value}`);
+};
+const parseVisibility = (value) => {
+    if (value === undefined) {
+        return undefined;
+    }
+    if (value === "private" || value === "public") {
+        return value;
+    }
+    throw new Error(`--visibility must be private or public, got ${value}`);
+};
+const CONTENT_TYPES_BY_EXTENSION = {
+    ".csv": "text/csv",
+    ".gif": "image/gif",
+    ".html": "text/html",
+    ".jpeg": "image/jpeg",
+    ".jpg": "image/jpeg",
+    ".json": "application/json",
+    ".md": "text/markdown",
+    ".mp3": "audio/mpeg",
+    ".mp4": "video/mp4",
+    ".pdf": "application/pdf",
+    ".png": "image/png",
+    ".pptx": "application/vnd.openxmlformats-officedocument.presentationml.presentation",
+    ".svg": "image/svg+xml",
+    ".txt": "text/plain",
+    ".wav": "audio/wav",
+    ".webm": "video/webm",
+    ".webp": "image/webp",
+    ".docx": "application/vnd.openxmlformats-officedocument.wordprocessingml.document",
+    ".xlsx": "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet",
+    ".zip": "application/zip",
+};
+const guessContentType = (filePath) => {
+    const contentType = CONTENT_TYPES_BY_EXTENSION[extname(filePath).toLowerCase()];
+    return contentType !== undefined ? contentType : "application/octet-stream";
+};

package/build/commands/orchestration/action.d.ts

@@ -1,4 +1,4 @@
 import type { Command } from "commander";
 import type { Api } from "../../api.js";
-export declare function registerActionCommands(parent: Command, getApi: () => Api): void;
+export declare function registerActionCommands(parent: Command, getApi: () => Api, getPublicApi: () => Api): void;
 //# sourceMappingURL=action.d.ts.map

package/build/commands/orchestration/action.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"action.d.ts","sourceRoot":"","sources":["../../../src/commands/orchestration/action.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEzC,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAaxC,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,OAAO,EACf,MAAM,EAAE,MAAM,GAAG,GAChB,IAAI,CAwTN"}
+{"version":3,"file":"action.d.ts","sourceRoot":"","sources":["../../../src/commands/orchestration/action.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEzC,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAuBxC,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,OAAO,EACf,MAAM,EAAE,MAAM,GAAG,EACjB,YAAY,EAAE,MAAM,GAAG,GACtB,IAAI,CA6UN"}

package/build/commands/orchestration/action.js

@@ -1,6 +1,10 @@
+import { isSignedIn } from "@cargo-ai/cdk/cli";
+import { buildDryRunResult, estimateCredits, sampleSubjectFor, validateActionData, } from "../../utils/actionDryRun.js";
 import { parseBooleanOption } from "../../utils/booleanOption.js";
-import { applyRecordsLimit, ExitCodes, failWith, handleApiCall, outputJson, parseJson, parsePositiveInt, pollUntilFinished, } from "../runHandler.js";
-export function registerActionCommands(parent, getApi) {
+import { describesOutput } from "../../utils/sampleFromSchema.js";
+import { applyRecordsLimit, ExitCodes, failWith, handleApiCall, info, outputJson, parseJson, parsePositiveInt, pollUntilFinished, } from "../runHandler.js";
+import { noteSignedOut, SIGNED_OUT_NOTICE } from "../signedOutNotice.js";
+export function registerActionCommands(parent, getApi, getPublicApi) {
     const action = parent
         .command("action")
         .description("List and execute actions (single run or batch)")
@@ -14,6 +18,8 @@ graph needed. Creates a run and consumes credits.
   - Inputs go in --data, not in the action. 'config' is optional; omit it.
   - The run is asynchronous: pass --wait-until-finished, or poll it with
     'cargo-ai orchestration run get <uuid>'.
+  - Not signed in yet? 'list' works without an account, and 'execute --dry-run'
+    shows what a connector or native action returns, for free.
 
 To debug a node inside an existing workflow instead, use
 'cargo-ai orchestration node'.`);
@@ -64,7 +70,8 @@ Examples:
             ? undefined
             : parsePositiveInt(opts.limit, "--limit");
         const query = queryTerms.length === 0 ? undefined : queryTerms.join(" ");
-        const result = await handleApiCall(() => getApi().orchestration.action.list({
+        noteSignedOut();
+        const result = await handleApiCall(() => getPublicApi().orchestration.action.list({
             query,
             kind,
             integrationSlug: opts.integrationSlug,
@@ -85,13 +92,25 @@ Examples:
         .option("--polling-interval <ms>", "Polling interval in milliseconds, used with --wait-until-finished (integer, default: 5000)", "5000")
         .option("--webhook-url <url>", "URL to call when the run completes")
         .option("--webhook-secret <secret>", "Secret used to sign webhook deliveries")
+        .option("--dry-run", "Run nothing: check --data against the action's inputs and print a sample result in the shape of a finished run, with its credit price. Free, and needs no account (connector and native actions)")
         .addHelpText("after", `
+--dry-run reads the action's definition from the routes that answer without a
+workspace, so it works before you sign up. The output is sample data generated
+from the action's output schema, marked
+"dryRun", with no provider called and no credits used. An action whose output
+depends on its configuration has no fixed shape to show, and the dry run says so.
+
 Examples:
   $ cargo-ai orchestration action execute --action '{"kind":"tool","toolUuid":"550e8400-..."}' --data '{"email":"user@example.com"}'
-  $ cargo-ai orchestration action execute --action '{"kind":"connector","integrationSlug":"slack","actionSlug":"postMessage","connectorUuid":"..."}' --data '{"channelId":"C0123456789","format":"markdown","body":"hello"}' --wait-until-finished`)
+  $ cargo-ai orchestration action execute --action '{"kind":"connector","integrationSlug":"slack","actionSlug":"postMessage","connectorUuid":"..."}' --data '{"channelId":"C0123456789","format":"markdown","body":"hello"}' --wait-until-finished
+  $ cargo-ai orchestration action execute --action '{"kind":"connector","integrationSlug":"aiArk","actionSlug":"enrichCompany"}' --data '{"domain":"example.com"}' --dry-run`)
         .action(async (opts) => {
         const actionPayload = parseJson(opts.action, "--action");
         const data = parseJson(opts.data, "--data");
+        if (opts.dryRun === true) {
+            await dryRunAction(getPublicApi, actionPayload, data);
+            return;
+        }
         const api = getApi();
         const result = await handleApiCall(() => api.orchestration.action.execute({
             action: actionPayload,
@@ -176,3 +195,80 @@ Examples:
         outputJson(result);
     });
 }
+/**
+ * `action execute --dry-run`. Reads the action from the routes that answer
+ * without a workspace, so it
+ * needs no token and no workspace, and calls nothing that bills: no run is
+ * created, and the backend's own dry execution is not used either, since it is
+ * neither free nor honoured by connector actions.
+ */
+async function dryRunAction(getPublicApi, actionPayload, data) {
+    const target = dryRunTarget(actionPayload);
+    const api = getPublicApi();
+    const label = target.kind === "connector"
+        ? `${target.integrationSlug}.${target.actionSlug}`
+        : `native.${target.actionSlug}`;
+    const definition = await fetchDryRunDefinition(api, target, label);
+    const validation = validateActionData(definition.config === undefined ? undefined : definition.config.schema, data);
+    if (validation.valid === false) {
+        failWith(`--data does not match the inputs of ${label}.`, {
+            code: ExitCodes.InvalidUsage,
+            extra: { errors: validation.errors },
+        });
+    }
+    const outputSchema = definition.output === undefined ? undefined : definition.output.schema;
+    if (describesOutput(outputSchema) === false) {
+        failWith(`${label} has no fixed output schema: what it returns depends on its configuration, so a dry run cannot show it. Signed in, 'cargo-ai orchestration action get-output-schema' resolves it for your inputs.`);
+    }
+    const estimate = estimateCredits(definition.credits === undefined ? undefined : definition.credits.costs, data);
+    outputJson(buildDryRunResult({
+        title: definition.name === undefined ? target.actionSlug : definition.name,
+        data,
+        outputSchema,
+        subject: sampleSubjectFor(target.actionSlug, definition.name),
+        estimate,
+    }));
+    if (isSignedIn() === false) {
+        info(SIGNED_OUT_NOTICE);
+    }
+}
+function dryRunTarget(actionPayload) {
+    const action = typeof actionPayload === "object" && actionPayload !== null
+        ? actionPayload
+        : {};
+    const kind = action["kind"];
+    const actionSlug = action["actionSlug"];
+    if (kind === "connector") {
+        const integrationSlug = action["integrationSlug"];
+        if (typeof integrationSlug === "string" && typeof actionSlug === "string") {
+            return { kind, integrationSlug, actionSlug };
+        }
+        failWith("--dry-run needs integrationSlug and actionSlug in a connector --action.", { code: ExitCodes.InvalidUsage });
+    }
+    if (kind === "native") {
+        if (typeof actionSlug === "string") {
+            return { kind, actionSlug };
+        }
+        failWith("--dry-run needs actionSlug in a native --action.", {
+            code: ExitCodes.InvalidUsage,
+        });
+    }
+    failWith("--dry-run covers connector and native actions. A tool or agent runs your workspace's own workflow, so only a real run shows its output.", { code: ExitCodes.InvalidUsage });
+}
+async function fetchDryRunDefinition(api, target, label) {
+    const actions = await fetchActionsOfIntegration(api, target);
+    const definition = actions[target.actionSlug];
+    if (definition === undefined) {
+        failWith(`No action ${label}. Find one with 'cargo-ai orchestration action list'.`, { code: ExitCodes.NotFound });
+    }
+    return definition;
+}
+/** The action map of the one integration `target` names. */
+async function fetchActionsOfIntegration(api, target) {
+    if (target.kind === "connector") {
+        const { integration } = await handleApiCall(() => api.connection.integration.get({ slug: target.integrationSlug }));
+        return integration.actions;
+    }
+    const { nativeIntegration } = await handleApiCall(() => api.connection.nativeIntegration.get());
+    return nativeIntegration.actions;
+}

package/build/commands/orchestration/index.d.ts

@@ -1,4 +1,4 @@
 import type { Command } from "commander";
 import type { Api } from "../../api.js";
-export declare function registerOrchestrationCommands(parent: Command, getApi: () => Api): void;
+export declare function registerOrchestrationCommands(parent: Command, getApi: () => Api, getPublicApi: () => Api): void;
 //# sourceMappingURL=index.d.ts.map

package/build/commands/orchestration/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/commands/orchestration/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEzC,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAexC,wBAAgB,6BAA6B,CAC3C,MAAM,EAAE,OAAO,EACf,MAAM,EAAE,MAAM,GAAG,GAChB,IAAI,CA0BN"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/commands/orchestration/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEzC,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAexC,wBAAgB,6BAA6B,CAC3C,MAAM,EAAE,OAAO,EACf,MAAM,EAAE,MAAM,GAAG,EACjB,YAAY,EAAE,MAAM,GAAG,GACtB,IAAI,CA0BN"}

package/build/commands/orchestration/index.js

@@ -11,7 +11,7 @@ import { registerTemplateCommands } from "./template.js";
 import { registerToolCommands } from "./tool.js";
 import { registerTraceCommands } from "./trace.js";
 import { registerWorkflowCommands } from "./workflow.js";
-export function registerOrchestrationCommands(parent, getApi) {
+export function registerOrchestrationCommands(parent, getApi, getPublicApi) {
     const orchestration = parent
         .command("orchestration")
         .description("Workflows, plays, runs, batches, tools, templates")
@@ -20,7 +20,7 @@ Running vs. debugging:
   action  Run a tool or connector action — no workflow needed. The usual choice.
   node    Debug one node of an existing workflow ('node compute' is free,
           'node execute' really runs it and consumes credits).`);
-    registerActionCommands(orchestration, getApi);
+    registerActionCommands(orchestration, getApi, getPublicApi);
     registerWorkflowCommands(orchestration, getApi);
     registerPlayCommands(orchestration, getApi);
     registerRunCommands(orchestration, getApi);

package/build/commands/signedOutNotice.d.ts

@@ -0,0 +1,4 @@
+export declare const SIGN_UP_COMMAND = "cargo-ai login --email you@company.com";
+export declare const SIGNED_OUT_NOTICE = "Not signed in: reading the official integrations and their actions only. Sign up with `cargo-ai login --email you@company.com` (100 free credits, no card) to run one.";
+export declare function noteSignedOut(): void;
+//# sourceMappingURL=signedOutNotice.d.ts.map

package/build/commands/signedOutNotice.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signedOutNotice.d.ts","sourceRoot":"","sources":["../../src/commands/signedOutNotice.ts"],"names":[],"mappings":"AAOA,eAAO,MAAM,eAAe,2CAA2C,CAAC;AAExE,eAAO,MAAM,iBAAiB,2KAAyJ,CAAC;AAExL,wBAAgB,aAAa,IAAI,IAAI,CAIpC"}

package/build/commands/signedOutNotice.js

@@ -0,0 +1,11 @@
+// What a signed-out caller of a command that reads the public routes is told,
+// once, on stderr: stdout stays the JSON the command was asked for.
+import { isSignedIn } from "@cargo-ai/cdk/cli";
+import { info } from "./runHandler.js";
+export const SIGN_UP_COMMAND = "cargo-ai login --email you@company.com";
+export const SIGNED_OUT_NOTICE = `Not signed in: reading the official integrations and their actions only. Sign up with \`${SIGN_UP_COMMAND}\` (100 free credits, no card) to run one.`;
+export function noteSignedOut() {
+    if (isSignedIn() === false) {
+        info(SIGNED_OUT_NOTICE);
+    }
+}

package/build/index.js

@@ -59,6 +59,11 @@ Agent skills:
   Standalone one-job GTM skills (find leads, work emails, TAM, signals):
     Any agent (skills.sh):  npx skills add getcargohq/gtm-skills
 
+Try it before signing up (no account needed):
+  cargo-ai orchestration action list find email       Browse actions and their credit prices
+  cargo-ai orchestration action execute ... --dry-run  Sample result of one action, free
+  cargo-ai project plan / project types                Plan a workspace-as-code project offline
+
 Authentication:
   Emailed code:       cargo-ai login --email you@company.com  (no browser; signs you up on first use)
   Browser sign-in:    cargo-ai login --oauth
@@ -139,6 +144,16 @@ const getApi = () => {
     }
     return createApi({ baseUrl, getAccessToken, workspaceUuid });
 };
+// For the commands that read only the routes answering without a workspace
+// (the official integrations, their actions, and the definitions
+// `action execute --dry-run` reads), so an agent can try them before signing
+// up. Signed in, it still sends the token, which
+// is what keeps a workspace's own custom integrations in what it returns.
+// Every other command keeps `getApi`, which refuses to run without a token.
+const getPublicApi = () => {
+    const { baseUrl, getAccessToken, workspaceUuid } = getConfig();
+    return createApi({ baseUrl, getAccessToken, workspaceUuid });
+};
 // Where the palette finds answers for an option that wants an id. Keyed by the
 // flag, because `--model-uuid` asks the same question in all 28 places it
 // appears; the uuid entries cover the 84 uuid options this CLI declares, and
@@ -233,11 +248,11 @@ registerVersionCommand(program, version);
 registerDoctorCommand(program, version);
 registerBookDemoCommand(program);
 registerObservabilityCommands(program, getApi);
-registerOrchestrationCommands(program, getApi);
+registerOrchestrationCommands(program, getApi, getPublicApi);
 registerWorkspaceManagementCommands(program, getApi);
 registerStorageCommands(program, getApi);
 registerContentCommands(program, getApi);
-registerConnectionCommands(program, getApi);
+registerConnectionCommands(program, getApi, getPublicApi);
 registerContextCommands(program, getApi);
 registerBillingCommands(program, getApi);
 registerSegmentationCommands(program, getApi);
@@ -256,7 +271,7 @@ registerMcpCommand(program, getApi);
 registerCdkCommands(program
     .command("project")
     .alias("cdk")
-    .description("Define this workspace in a repo and deploy it (init/plan/deploy)"), getApi);
+    .description("Define this workspace in a repo and deploy it (init/plan/deploy)"), getApi, getPublicApi);
 // Bare `cargo-ai` in a terminal opens the palette instead of printing the help
 // wall: twenty command groups is a list to navigate, not one to read. Anything
 // non-interactive (a pipe, CI, an agent) keeps the help it has always had.