@cargo-ai/cli 1.0.121 → 1.0.123

package/README.md

@@ -31,7 +31,8 @@ Driving Cargo from an agent instead? `cargo-ai mcp` serves the same actions over
 ## Requirements
 
 - Node.js 22.x
-- A Cargo account. `cargo-ai login --email` creates one if needed (see [Authentication](#authentication)); an API token is only needed for CI and shared machines
+- A Cargo account to run anything. `cargo-ai login --email` creates one if needed (see [Authentication](#authentication)); an API token is only needed for CI and shared machines
+- Before signing up, `orchestration action list`, `connection integration list|get`, `orchestration action execute --dry-run` (a free sample result in the shape of a real run) and `project plan|types` already work
 
 ## Installation
 

package/build/api.d.ts

@@ -3,7 +3,12 @@ import { type AccessTokenProvider } from "@cargo-ai/cdk/cli";
 export type { Api };
 export declare function createApi(opts: {
     baseUrl: string;
-    getAccessToken: AccessTokenProvider;
+    /**
+     * `undefined` sends no Authorization header at all, which only the routes
+     * that answer without a workspace accept. `getPublicApi` is the one caller
+     * that passes it.
+     */
+    getAccessToken: AccessTokenProvider | undefined;
     workspaceUuid: string | undefined;
 }): Api;
 //# sourceMappingURL=api.d.ts.map

package/build/api.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../src/api.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,GAAG,EAAY,MAAM,eAAe,CAAC;AACnD,OAAO,EAAE,KAAK,mBAAmB,EAAqB,MAAM,mBAAmB,CAAC;AAIhF,YAAY,EAAE,GAAG,EAAE,CAAC;AAQpB,wBAAgB,SAAS,CAAC,IAAI,EAAE;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,mBAAmB,CAAC;IACpC,aAAa,EAAE,MAAM,GAAG,SAAS,CAAC;CACnC,GAAG,GAAG,CAeN"}
+{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../src/api.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,GAAG,EAAY,MAAM,eAAe,CAAC;AACnD,OAAO,EAAE,KAAK,mBAAmB,EAAqB,MAAM,mBAAmB,CAAC;AAIhF,YAAY,EAAE,GAAG,EAAE,CAAC;AAQpB,wBAAgB,SAAS,CAAC,IAAI,EAAE;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,cAAc,EAAE,mBAAmB,GAAG,SAAS,CAAC;IAChD,aAAa,EAAE,MAAM,GAAG,SAAS,CAAC;CACnC,GAAG,GAAG,CAeN"}

package/build/commands/connection/action.d.ts

@@ -1,4 +1,4 @@
 import type { Command } from "commander";
 import type { Api } from "../../api.js";
-export declare function registerActionSearchCommands(parent: Command, getApi: () => Api): void;
+export declare function registerActionSearchCommands(parent: Command, getPublicApi: () => Api): void;
 //# sourceMappingURL=action.d.ts.map

package/build/commands/connection/action.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"action.d.ts","sourceRoot":"","sources":["../../../src/commands/connection/action.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEzC,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAkDxC,wBAAgB,4BAA4B,CAC1C,MAAM,EAAE,OAAO,EACf,MAAM,EAAE,MAAM,GAAG,GAChB,IAAI,CAoIN"}
+{"version":3,"file":"action.d.ts","sourceRoot":"","sources":["../../../src/commands/connection/action.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEzC,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAmDxC,wBAAgB,4BAA4B,CAC1C,MAAM,EAAE,OAAO,EACf,YAAY,EAAE,MAAM,GAAG,GACtB,IAAI,CAqIN"}

package/build/commands/connection/action.js

@@ -1,7 +1,8 @@
 import { ExitCodes, failWith, handleApiCall, outputJson, } from "../runHandler.js";
+import { noteSignedOut } from "../signedOutNotice.js";
 const DEFAULT_LIMIT = 20;
 const DESCRIPTION_MAX_LENGTH = 300;
-export function registerActionSearchCommands(parent, getApi) {
+export function registerActionSearchCommands(parent, getPublicApi) {
     const action = parent
         .command("action")
         .description("Discover integration actions");
@@ -31,7 +32,8 @@ Examples:
                 code: ExitCodes.InvalidUsage,
             });
         }
-        const api = getApi();
+        noteSignedOut();
+        const api = getPublicApi();
         const { integrations } = await handleApiCall(() => api.connection.integration.list({
             hasActions: true,
             category: opts.category,

package/build/commands/connection/index.d.ts

@@ -1,4 +1,4 @@
 import type { Command } from "commander";
 import type { Api } from "../../api.js";
-export declare function registerConnectionCommands(parent: Command, getApi: () => Api): void;
+export declare function registerConnectionCommands(parent: Command, getApi: () => Api, getPublicApi: () => Api): void;
 //# sourceMappingURL=index.d.ts.map

package/build/commands/connection/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/commands/connection/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEzC,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAOxC,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,OAAO,EACf,MAAM,EAAE,MAAM,GAAG,GAChB,IAAI,CAUN"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/commands/connection/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEzC,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAOxC,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,OAAO,EACf,MAAM,EAAE,MAAM,GAAG,EACjB,YAAY,EAAE,MAAM,GAAG,GACtB,IAAI,CAUN"}

package/build/commands/connection/index.js

@@ -3,13 +3,13 @@ import { registerConnectorCommands } from "./connector.js";
 import { registerCustomIntegrationCommands } from "./customIntegration.js";
 import { registerIntegrationCommands } from "./integration.js";
 import { registerNativeIntegrationCommands } from "./nativeIntegration.js";
-export function registerConnectionCommands(parent, getApi) {
+export function registerConnectionCommands(parent, getApi, getPublicApi) {
     const connection = parent
         .command("connection")
         .description("Connectors and integrations");
     registerConnectorCommands(connection, getApi);
-    registerIntegrationCommands(connection, getApi);
-    registerActionSearchCommands(connection, getApi);
-    registerNativeIntegrationCommands(connection, getApi);
+    registerIntegrationCommands(connection, getApi, getPublicApi);
+    registerActionSearchCommands(connection, getPublicApi);
+    registerNativeIntegrationCommands(connection, getPublicApi);
     registerCustomIntegrationCommands(connection, getApi);
 }

package/build/commands/connection/integration.d.ts

@@ -1,4 +1,4 @@
 import type { Command } from "commander";
 import type { Api } from "../../api.js";
-export declare function registerIntegrationCommands(parent: Command, getApi: () => Api): void;
+export declare function registerIntegrationCommands(parent: Command, getApi: () => Api, getPublicApi: () => Api): void;
 //# sourceMappingURL=integration.d.ts.map

package/build/commands/connection/integration.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"integration.d.ts","sourceRoot":"","sources":["../../../src/commands/connection/integration.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEzC,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAGxC,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,OAAO,EACf,MAAM,EAAE,MAAM,GAAG,GAChB,IAAI,CAoJN"}
+{"version":3,"file":"integration.d.ts","sourceRoot":"","sources":["../../../src/commands/connection/integration.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEzC,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAIxC,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,OAAO,EACf,MAAM,EAAE,MAAM,GAAG,EACjB,YAAY,EAAE,MAAM,GAAG,GACtB,IAAI,CA4JN"}

package/build/commands/connection/integration.js

@@ -1,8 +1,11 @@
 import { handleApiCall, outputJson, parseJson } from "../runHandler.js";
-export function registerIntegrationCommands(parent, getApi) {
+import { noteSignedOut } from "../signedOutNotice.js";
+export function registerIntegrationCommands(parent, getApi, getPublicApi) {
     const integration = parent
         .command("integration")
-        .description("Browse and manage integrations");
+        .description("Browse and manage integrations")
+        .addHelpText("after", `
+list, get and get-documentation work before you sign up.`);
     integration
         .command("list")
         .description("List all integrations")
@@ -19,7 +22,8 @@ when they are named through --slugs. They cannot be connected any more, but they
 keep running for the workspaces already on them, and \`integration get <slug>\`
 always returns one.`)
         .action(async (opts) => {
-        const api = getApi();
+        noteSignedOut();
+        const api = getPublicApi();
         const slugs = opts.slugs !== undefined
             ? opts.slugs
                 .split(",")
@@ -65,7 +69,8 @@ always returns one.`)
         .command("get <slug>")
         .description("Get an integration by slug")
         .action(async (slug) => {
-        const api = getApi();
+        noteSignedOut();
+        const api = getPublicApi();
         const result = await handleApiCall(() => api.connection.integration.get({ slug }));
         outputJson(result);
     });
@@ -73,7 +78,8 @@ always returns one.`)
         .command("get-documentation <slug>")
         .description("Get integration documentation by slug")
         .action(async (slug) => {
-        const api = getApi();
+        noteSignedOut();
+        const api = getPublicApi();
         const result = await handleApiCall(() => api.connection.integration.getDocumentation(slug));
         outputJson(result);
     });

package/build/commands/connection/nativeIntegration.d.ts

@@ -1,4 +1,4 @@
 import type { Command } from "commander";
 import type { Api } from "../../api.js";
-export declare function registerNativeIntegrationCommands(parent: Command, getApi: () => Api): void;
+export declare function registerNativeIntegrationCommands(parent: Command, getPublicApi: () => Api): void;
 //# sourceMappingURL=nativeIntegration.d.ts.map

package/build/commands/connection/nativeIntegration.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"nativeIntegration.d.ts","sourceRoot":"","sources":["../../../src/commands/connection/nativeIntegration.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEzC,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAGxC,wBAAgB,iCAAiC,CAC/C,MAAM,EAAE,OAAO,EACf,MAAM,EAAE,MAAM,GAAG,GAChB,IAAI,CAeN"}
+{"version":3,"file":"nativeIntegration.d.ts","sourceRoot":"","sources":["../../../src/commands/connection/nativeIntegration.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEzC,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAIxC,wBAAgB,iCAAiC,CAC/C,MAAM,EAAE,OAAO,EACf,YAAY,EAAE,MAAM,GAAG,GACtB,IAAI,CAgBN"}

package/build/commands/connection/nativeIntegration.js

@@ -1,5 +1,6 @@
 import { handleApiCall, outputJson } from "../runHandler.js";
-export function registerNativeIntegrationCommands(parent, getApi) {
+import { noteSignedOut } from "../signedOutNotice.js";
+export function registerNativeIntegrationCommands(parent, getPublicApi) {
     const nativeIntegration = parent
         .command("native-integration")
         .description("Native integration");
@@ -7,7 +8,8 @@ export function registerNativeIntegrationCommands(parent, getApi) {
         .command("get")
         .description("Get native integration")
         .action(async () => {
-        const api = getApi();
+        noteSignedOut();
+        const api = getPublicApi();
         const result = await handleApiCall(() => api.connection.nativeIntegration.get());
         outputJson(result);
     });

package/build/commands/content/file.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"file.d.ts","sourceRoot":"","sources":["../../../src/commands/content/file.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEzC,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAGxC,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,GAAG,IAAI,CAsK7E"}
+{"version":3,"file":"file.d.ts","sourceRoot":"","sources":["../../../src/commands/content/file.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEzC,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAGxC,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,GAAG,IAAI,CAwQ7E"}

package/build/commands/content/file.js

@@ -1,4 +1,4 @@
-import { readFile } from "node:fs/promises";
+import { readFile, writeFile } from "node:fs/promises";
 import { basename, extname } from "node:path";
 import { handleApiCall, outputJson } from "../runHandler.js";
 export function registerFileCommands(parent, getApi) {
@@ -116,6 +116,78 @@ export function registerFileCommands(parent, getApi) {
         }));
         outputJson(result);
     });
+    file
+        .command("download <path>")
+        .description("Download the file at a path, at any size")
+        .option("--out <file>", "Write to this local file instead of stdout")
+        .action(async (path, opts) => {
+        const api = getApi();
+        const blob = await handleApiCall(() => api.content.object.get(path));
+        const bytes = Buffer.from(await blob.arrayBuffer());
+        if (opts.out !== undefined) {
+            await writeFile(opts.out, bytes);
+            outputJson({ path, out: opts.out, size: bytes.length });
+            return;
+        }
+        process.stdout.write(bytes);
+    });
+    file
+        .command("url <path>")
+        .description("Create a signed URL for the file at a path that anyone can open until it expires (plus its public link when the file is public)")
+        .option("--expires <seconds>", "Lifetime in seconds, up to 10800 (3h)")
+        .option("--download", "Make browsers save the file instead of showing it")
+        .action(async (path, opts) => {
+        const api = getApi();
+        const result = await handleApiCall(async () => {
+            const { file: found } = await api.content.object.stat(path);
+            return api.content.file.getUrl({
+                uuid: found.uuid,
+                expiresInSeconds: opts.expires !== undefined ? Number(opts.expires) : undefined,
+                download: opts.download,
+            });
+        });
+        outputJson(result);
+    });
+    file
+        .command("ls [prefix]")
+        .description("List files whose path starts with a prefix (e.g. reports/), ordered by path")
+        .option("--limit <n>", "Page size, up to 1000", "100")
+        .option("--cursor <cursor>", "nextCursor from the previous page")
+        .action(async (prefix, opts) => {
+        const api = getApi();
+        const result = await handleApiCall(() => api.content.object.list({
+            prefix,
+            cursor: opts.cursor,
+            limit: Number(opts.limit),
+        }));
+        outputJson(result);
+    });
+    file
+        .command("rm <path>")
+        .description("Remove the file at a path")
+        .action(async (path) => {
+        const api = getApi();
+        const result = await handleApiCall(() => api.content.object.remove(path));
+        outputJson(result);
+    });
+    file
+        .command("visibility <path> <visibility>")
+        .description("Make the file at a path public (served without auth from a stable link) or private (revokes the link at once)")
+        .action(async (path, visibility) => {
+        const parsedVisibility = parseVisibility(visibility);
+        if (parsedVisibility === undefined) {
+            throw new Error("visibility must be private or public");
+        }
+        const api = getApi();
+        const result = await handleApiCall(async () => {
+            const { file: found } = await api.content.object.stat(path);
+            return api.content.file.update({
+                uuid: found.uuid,
+                visibility: parsedVisibility,
+            });
+        });
+        outputJson(result);
+    });
 }
 const parseIndexMode = (value) => {
     if (value === undefined) {

package/build/commands/orchestration/action.d.ts

@@ -1,4 +1,4 @@
 import type { Command } from "commander";
 import type { Api } from "../../api.js";
-export declare function registerActionCommands(parent: Command, getApi: () => Api): void;
+export declare function registerActionCommands(parent: Command, getApi: () => Api, getPublicApi: () => Api): void;
 //# sourceMappingURL=action.d.ts.map

package/build/commands/orchestration/action.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"action.d.ts","sourceRoot":"","sources":["../../../src/commands/orchestration/action.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEzC,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAaxC,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,OAAO,EACf,MAAM,EAAE,MAAM,GAAG,GAChB,IAAI,CAwTN"}
+{"version":3,"file":"action.d.ts","sourceRoot":"","sources":["../../../src/commands/orchestration/action.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEzC,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAuBxC,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,OAAO,EACf,MAAM,EAAE,MAAM,GAAG,EACjB,YAAY,EAAE,MAAM,GAAG,GACtB,IAAI,CA6UN"}

package/build/commands/orchestration/action.js

@@ -1,6 +1,10 @@
+import { isSignedIn } from "@cargo-ai/cdk/cli";
+import { buildDryRunResult, estimateCredits, sampleSubjectFor, validateActionData, } from "../../utils/actionDryRun.js";
 import { parseBooleanOption } from "../../utils/booleanOption.js";
-import { applyRecordsLimit, ExitCodes, failWith, handleApiCall, outputJson, parseJson, parsePositiveInt, pollUntilFinished, } from "../runHandler.js";
-export function registerActionCommands(parent, getApi) {
+import { describesOutput } from "../../utils/sampleFromSchema.js";
+import { applyRecordsLimit, ExitCodes, failWith, handleApiCall, info, outputJson, parseJson, parsePositiveInt, pollUntilFinished, } from "../runHandler.js";
+import { noteSignedOut, SIGNED_OUT_NOTICE } from "../signedOutNotice.js";
+export function registerActionCommands(parent, getApi, getPublicApi) {
     const action = parent
         .command("action")
         .description("List and execute actions (single run or batch)")
@@ -14,6 +18,8 @@ graph needed. Creates a run and consumes credits.
   - Inputs go in --data, not in the action. 'config' is optional; omit it.
   - The run is asynchronous: pass --wait-until-finished, or poll it with
     'cargo-ai orchestration run get <uuid>'.
+  - Not signed in yet? 'list' works without an account, and 'execute --dry-run'
+    shows what a connector or native action returns, for free.
 
 To debug a node inside an existing workflow instead, use
 'cargo-ai orchestration node'.`);
@@ -64,7 +70,8 @@ Examples:
             ? undefined
             : parsePositiveInt(opts.limit, "--limit");
         const query = queryTerms.length === 0 ? undefined : queryTerms.join(" ");
-        const result = await handleApiCall(() => getApi().orchestration.action.list({
+        noteSignedOut();
+        const result = await handleApiCall(() => getPublicApi().orchestration.action.list({
             query,
             kind,
             integrationSlug: opts.integrationSlug,
@@ -85,13 +92,25 @@ Examples:
         .option("--polling-interval <ms>", "Polling interval in milliseconds, used with --wait-until-finished (integer, default: 5000)", "5000")
         .option("--webhook-url <url>", "URL to call when the run completes")
         .option("--webhook-secret <secret>", "Secret used to sign webhook deliveries")
+        .option("--dry-run", "Run nothing: check --data against the action's inputs and print a sample result in the shape of a finished run, with its credit price. Free, and needs no account (connector and native actions)")
         .addHelpText("after", `
+--dry-run reads the action's definition from the routes that answer without a
+workspace, so it works before you sign up. The output is sample data generated
+from the action's output schema, marked
+"dryRun", with no provider called and no credits used. An action whose output
+depends on its configuration has no fixed shape to show, and the dry run says so.
+
 Examples:
   $ cargo-ai orchestration action execute --action '{"kind":"tool","toolUuid":"550e8400-..."}' --data '{"email":"user@example.com"}'
-  $ cargo-ai orchestration action execute --action '{"kind":"connector","integrationSlug":"slack","actionSlug":"postMessage","connectorUuid":"..."}' --data '{"channelId":"C0123456789","format":"markdown","body":"hello"}' --wait-until-finished`)
+  $ cargo-ai orchestration action execute --action '{"kind":"connector","integrationSlug":"slack","actionSlug":"postMessage","connectorUuid":"..."}' --data '{"channelId":"C0123456789","format":"markdown","body":"hello"}' --wait-until-finished
+  $ cargo-ai orchestration action execute --action '{"kind":"connector","integrationSlug":"aiArk","actionSlug":"enrichCompany"}' --data '{"domain":"example.com"}' --dry-run`)
         .action(async (opts) => {
         const actionPayload = parseJson(opts.action, "--action");
         const data = parseJson(opts.data, "--data");
+        if (opts.dryRun === true) {
+            await dryRunAction(getPublicApi, actionPayload, data);
+            return;
+        }
         const api = getApi();
         const result = await handleApiCall(() => api.orchestration.action.execute({
             action: actionPayload,
@@ -176,3 +195,80 @@ Examples:
         outputJson(result);
     });
 }
+/**
+ * `action execute --dry-run`. Reads the action from the routes that answer
+ * without a workspace, so it
+ * needs no token and no workspace, and calls nothing that bills: no run is
+ * created, and the backend's own dry execution is not used either, since it is
+ * neither free nor honoured by connector actions.
+ */
+async function dryRunAction(getPublicApi, actionPayload, data) {
+    const target = dryRunTarget(actionPayload);
+    const api = getPublicApi();
+    const label = target.kind === "connector"
+        ? `${target.integrationSlug}.${target.actionSlug}`
+        : `native.${target.actionSlug}`;
+    const definition = await fetchDryRunDefinition(api, target, label);
+    const validation = validateActionData(definition.config === undefined ? undefined : definition.config.schema, data);
+    if (validation.valid === false) {
+        failWith(`--data does not match the inputs of ${label}.`, {
+            code: ExitCodes.InvalidUsage,
+            extra: { errors: validation.errors },
+        });
+    }
+    const outputSchema = definition.output === undefined ? undefined : definition.output.schema;
+    if (describesOutput(outputSchema) === false) {
+        failWith(`${label} has no fixed output schema: what it returns depends on its configuration, so a dry run cannot show it. Signed in, 'cargo-ai orchestration action get-output-schema' resolves it for your inputs.`);
+    }
+    const estimate = estimateCredits(definition.credits === undefined ? undefined : definition.credits.costs, data);
+    outputJson(buildDryRunResult({
+        title: definition.name === undefined ? target.actionSlug : definition.name,
+        data,
+        outputSchema,
+        subject: sampleSubjectFor(target.actionSlug, definition.name),
+        estimate,
+    }));
+    if (isSignedIn() === false) {
+        info(SIGNED_OUT_NOTICE);
+    }
+}
+function dryRunTarget(actionPayload) {
+    const action = typeof actionPayload === "object" && actionPayload !== null
+        ? actionPayload
+        : {};
+    const kind = action["kind"];
+    const actionSlug = action["actionSlug"];
+    if (kind === "connector") {
+        const integrationSlug = action["integrationSlug"];
+        if (typeof integrationSlug === "string" && typeof actionSlug === "string") {
+            return { kind, integrationSlug, actionSlug };
+        }
+        failWith("--dry-run needs integrationSlug and actionSlug in a connector --action.", { code: ExitCodes.InvalidUsage });
+    }
+    if (kind === "native") {
+        if (typeof actionSlug === "string") {
+            return { kind, actionSlug };
+        }
+        failWith("--dry-run needs actionSlug in a native --action.", {
+            code: ExitCodes.InvalidUsage,
+        });
+    }
+    failWith("--dry-run covers connector and native actions. A tool or agent runs your workspace's own workflow, so only a real run shows its output.", { code: ExitCodes.InvalidUsage });
+}
+async function fetchDryRunDefinition(api, target, label) {
+    const actions = await fetchActionsOfIntegration(api, target);
+    const definition = actions[target.actionSlug];
+    if (definition === undefined) {
+        failWith(`No action ${label}. Find one with 'cargo-ai orchestration action list'.`, { code: ExitCodes.NotFound });
+    }
+    return definition;
+}
+/** The action map of the one integration `target` names. */
+async function fetchActionsOfIntegration(api, target) {
+    if (target.kind === "connector") {
+        const { integration } = await handleApiCall(() => api.connection.integration.get({ slug: target.integrationSlug }));
+        return integration.actions;
+    }
+    const { nativeIntegration } = await handleApiCall(() => api.connection.nativeIntegration.get());
+    return nativeIntegration.actions;
+}

package/build/commands/orchestration/index.d.ts

@@ -1,4 +1,4 @@
 import type { Command } from "commander";
 import type { Api } from "../../api.js";
-export declare function registerOrchestrationCommands(parent: Command, getApi: () => Api): void;
+export declare function registerOrchestrationCommands(parent: Command, getApi: () => Api, getPublicApi: () => Api): void;
 //# sourceMappingURL=index.d.ts.map

package/build/commands/orchestration/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/commands/orchestration/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEzC,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAexC,wBAAgB,6BAA6B,CAC3C,MAAM,EAAE,OAAO,EACf,MAAM,EAAE,MAAM,GAAG,GAChB,IAAI,CA0BN"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/commands/orchestration/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEzC,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAexC,wBAAgB,6BAA6B,CAC3C,MAAM,EAAE,OAAO,EACf,MAAM,EAAE,MAAM,GAAG,EACjB,YAAY,EAAE,MAAM,GAAG,GACtB,IAAI,CA0BN"}

package/build/commands/orchestration/index.js

@@ -11,7 +11,7 @@ import { registerTemplateCommands } from "./template.js";
 import { registerToolCommands } from "./tool.js";
 import { registerTraceCommands } from "./trace.js";
 import { registerWorkflowCommands } from "./workflow.js";
-export function registerOrchestrationCommands(parent, getApi) {
+export function registerOrchestrationCommands(parent, getApi, getPublicApi) {
     const orchestration = parent
         .command("orchestration")
         .description("Workflows, plays, runs, batches, tools, templates")
@@ -20,7 +20,7 @@ Running vs. debugging:
   action  Run a tool or connector action — no workflow needed. The usual choice.
   node    Debug one node of an existing workflow ('node compute' is free,
           'node execute' really runs it and consumes credits).`);
-    registerActionCommands(orchestration, getApi);
+    registerActionCommands(orchestration, getApi, getPublicApi);
     registerWorkflowCommands(orchestration, getApi);
     registerPlayCommands(orchestration, getApi);
     registerRunCommands(orchestration, getApi);

package/build/commands/signedOutNotice.d.ts

@@ -0,0 +1,4 @@
+export declare const SIGN_UP_COMMAND = "cargo-ai login --email you@company.com";
+export declare const SIGNED_OUT_NOTICE = "Not signed in: reading the official integrations and their actions only. Sign up with `cargo-ai login --email you@company.com` (100 free credits, no card) to run one.";
+export declare function noteSignedOut(): void;
+//# sourceMappingURL=signedOutNotice.d.ts.map

package/build/commands/signedOutNotice.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signedOutNotice.d.ts","sourceRoot":"","sources":["../../src/commands/signedOutNotice.ts"],"names":[],"mappings":"AAOA,eAAO,MAAM,eAAe,2CAA2C,CAAC;AAExE,eAAO,MAAM,iBAAiB,2KAAyJ,CAAC;AAExL,wBAAgB,aAAa,IAAI,IAAI,CAIpC"}

package/build/commands/signedOutNotice.js

@@ -0,0 +1,11 @@
+// What a signed-out caller of a command that reads the public routes is told,
+// once, on stderr: stdout stays the JSON the command was asked for.
+import { isSignedIn } from "@cargo-ai/cdk/cli";
+import { info } from "./runHandler.js";
+export const SIGN_UP_COMMAND = "cargo-ai login --email you@company.com";
+export const SIGNED_OUT_NOTICE = `Not signed in: reading the official integrations and their actions only. Sign up with \`${SIGN_UP_COMMAND}\` (100 free credits, no card) to run one.`;
+export function noteSignedOut() {
+    if (isSignedIn() === false) {
+        info(SIGNED_OUT_NOTICE);
+    }
+}

package/build/index.js

@@ -59,6 +59,11 @@ Agent skills:
   Standalone one-job GTM skills (find leads, work emails, TAM, signals):
     Any agent (skills.sh):  npx skills add getcargohq/gtm-skills
 
+Try it before signing up (no account needed):
+  cargo-ai orchestration action list find email       Browse actions and their credit prices
+  cargo-ai orchestration action execute ... --dry-run  Sample result of one action, free
+  cargo-ai project plan / project types                Plan a workspace-as-code project offline
+
 Authentication:
   Emailed code:       cargo-ai login --email you@company.com  (no browser; signs you up on first use)
   Browser sign-in:    cargo-ai login --oauth
@@ -139,6 +144,16 @@ const getApi = () => {
     }
     return createApi({ baseUrl, getAccessToken, workspaceUuid });
 };
+// For the commands that read only the routes answering without a workspace
+// (the official integrations, their actions, and the definitions
+// `action execute --dry-run` reads), so an agent can try them before signing
+// up. Signed in, it still sends the token, which
+// is what keeps a workspace's own custom integrations in what it returns.
+// Every other command keeps `getApi`, which refuses to run without a token.
+const getPublicApi = () => {
+    const { baseUrl, getAccessToken, workspaceUuid } = getConfig();
+    return createApi({ baseUrl, getAccessToken, workspaceUuid });
+};
 // Where the palette finds answers for an option that wants an id. Keyed by the
 // flag, because `--model-uuid` asks the same question in all 28 places it
 // appears; the uuid entries cover the 84 uuid options this CLI declares, and
@@ -233,11 +248,11 @@ registerVersionCommand(program, version);
 registerDoctorCommand(program, version);
 registerBookDemoCommand(program);
 registerObservabilityCommands(program, getApi);
-registerOrchestrationCommands(program, getApi);
+registerOrchestrationCommands(program, getApi, getPublicApi);
 registerWorkspaceManagementCommands(program, getApi);
 registerStorageCommands(program, getApi);
 registerContentCommands(program, getApi);
-registerConnectionCommands(program, getApi);
+registerConnectionCommands(program, getApi, getPublicApi);
 registerContextCommands(program, getApi);
 registerBillingCommands(program, getApi);
 registerSegmentationCommands(program, getApi);
@@ -256,7 +271,7 @@ registerMcpCommand(program, getApi);
 registerCdkCommands(program
     .command("project")
     .alias("cdk")
-    .description("Define this workspace in a repo and deploy it (init/plan/deploy)"), getApi);
+    .description("Define this workspace in a repo and deploy it (init/plan/deploy)"), getApi, getPublicApi);
 // Bare `cargo-ai` in a terminal opens the palette instead of printing the help
 // wall: twenty command groups is a list to navigate, not one to read. Anything
 // non-interactive (a pipe, CI, an agent) keeps the help it has always had.

package/build/utils/actionDryRun.d.ts

@@ -0,0 +1,90 @@
+import { type SampleSubject } from "./sampleFromSchema.js";
+/** A single action runs as one node with this slug (`ACTION_NODE_SLUG`). */
+export declare const DRY_RUN_NODE_SLUG = "action";
+export declare const DRY_RUN_NOTE = "Sample data generated from the output schema. Nothing ran and no credits were used.";
+export type DryRunCreditsCost = {
+    type: string;
+    cost: number;
+    unit?: string;
+    unitsCount?: number;
+    fixedCost?: number;
+    config?: {
+        jsonSchema?: unknown;
+    };
+};
+/** The fields of an integration or native action this needs. */
+export type DryRunActionDefinition = {
+    name?: string;
+    config?: {
+        schema?: unknown;
+    };
+    output?: {
+        schema?: unknown;
+    };
+    credits?: {
+        costs?: DryRunCreditsCost[];
+    };
+};
+export type DataValidation = {
+    valid: true;
+} | {
+    valid: false;
+    errors: string[];
+};
+export type CreditsEstimate = {
+    /** What one call costs; for a metered price, one unit or one block of them. */
+    credits: number;
+    /** How the number was reached, and what it scales with when it does. */
+    formula: string;
+};
+export type DryRunResult = {
+    run: {
+        status: "success";
+        executions: {
+            nodeSlug: string;
+            title: string;
+            status: "success";
+            creditsUsedCount: number;
+        }[];
+    };
+    runContext: {
+        action: unknown;
+    };
+    runComputedConfigs: {
+        action: unknown;
+    };
+    dryRun: {
+        sample: true;
+        estimatedCredits: number;
+        creditsFormula: string;
+        note: string;
+    };
+};
+/**
+ * Check `--data` against the action's input schema, the way the run would.
+ * A missing or empty schema accepts anything: the action takes no declared
+ * inputs, or declares them at run time.
+ */
+export declare function validateActionData(schema: unknown, data: unknown): DataValidation;
+/**
+ * The price of one call, read the way billing reads it: the first cost entry
+ * whose `config.jsonSchema` the inputs match (an LLM model, a phone-or-email
+ * toggle), then that entry's shape.
+ *
+ * A metered price depends on what the call returns, so it is shown for one
+ * unit (or one block of them) with the formula that scales it.
+ */
+export declare function estimateCredits(costs: DryRunCreditsCost[] | undefined, data: unknown): CreditsEstimate;
+/**
+ * Whether the action is about a company or a person, read off its slug and
+ * name, so a bare `name` in its output samples as the right kind of name.
+ */
+export declare function sampleSubjectFor(actionSlug: string, actionName: string | undefined): SampleSubject;
+export declare function buildDryRunResult(input: {
+    title: string;
+    data: unknown;
+    outputSchema: unknown;
+    subject: SampleSubject;
+    estimate: CreditsEstimate;
+}): DryRunResult;
+//# sourceMappingURL=actionDryRun.d.ts.map

package/build/utils/actionDryRun.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"actionDryRun.d.ts","sourceRoot":"","sources":["../../src/utils/actionDryRun.ts"],"names":[],"mappings":"AASA,OAAO,EAAoB,KAAK,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAE7E,4EAA4E;AAC5E,eAAO,MAAM,iBAAiB,WAAW,CAAC;AAE1C,eAAO,MAAM,YAAY,wFAC8D,CAAC;AAExF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;CACnC,CAAC;AAEF,gEAAgE;AAChE,MAAM,MAAM,sBAAsB,GAAG;IACnC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IAC9B,MAAM,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IAC9B,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,iBAAiB,EAAE,CAAA;KAAE,CAAC;CAC3C,CAAC;AAEF,MAAM,MAAM,cAAc,GACtB;IAAE,KAAK,EAAE,IAAI,CAAA;CAAE,GACf;IAAE,KAAK,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC;AAEvC,MAAM,MAAM,eAAe,GAAG;IAC5B,+EAA+E;IAC/E,OAAO,EAAE,MAAM,CAAC;IAChB,wEAAwE;IACxE,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,GAAG,EAAE;QACH,MAAM,EAAE,SAAS,CAAC;QAClB,UAAU,EAAE;YACV,QAAQ,EAAE,MAAM,CAAC;YACjB,KAAK,EAAE,MAAM,CAAC;YACd,MAAM,EAAE,SAAS,CAAC;YAClB,gBAAgB,EAAE,MAAM,CAAC;SAC1B,EAAE,CAAC;KACL,CAAC;IACF,UAAU,EAAE;QAAE,MAAM,EAAE,OAAO,CAAA;KAAE,CAAC;IAChC,kBAAkB,EAAE;QAAE,MAAM,EAAE,OAAO,CAAA;KAAE,CAAC;IACxC,MAAM,EAAE;QACN,MAAM,EAAE,IAAI,CAAC;QACb,gBAAgB,EAAE,MAAM,CAAC;QACzB,cAAc,EAAE,MAAM,CAAC;QACvB,IAAI,EAAE,MAAM,CAAC;KACd,CAAC;CACH,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,OAAO,EACf,IAAI,EAAE,OAAO,GACZ,cAAc,CAYhB;AAkBD;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAC7B,KAAK,EAAE,iBAAiB,EAAE,GAAG,SAAS,EACtC,IAAI,EAAE,OAAO,GACZ,eAAe,CAiDjB;AAWD;;;GAGG;AACH,wBAAgB,gBAAgB,CAC9B,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,GAAG,SAAS,GAC7B,aAAa,CA2Bf;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE;IACvC,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,OAAO,CAAC;IACd,YAAY,EAAE,OAAO,CAAC;IACtB,OAAO,EAAE,aAAa,CAAC;IACvB,QAAQ,EAAE,eAAe,CAAC;CAC3B,GAAG,YAAY,CAwBf"}