@cargo-ai/cli 1.0.126 → 1.0.128

package/build/commands/ask/session/tree.js

@@ -1,7 +1,9 @@
-import { isAbsolute, relative } from "node:path";
+import { basename, isAbsolute, relative } from "node:path";
 import { selectOne } from "@cargo-ai/cdk/cli";
+import { clipToCells, textWidth } from "../../../utils/textWidth.js";
 import { clipToWidth, colors } from "../../runHandler.js";
 import { ASK_USER_QUESTION_TOOL_NAME, readAskUserQuestions, } from "../harness/askUserQuestion.js";
+import { renderMarkdown } from "./markdown.js";
 /**
  * What an assistant turn is marked with, alongside `◇` for a step and `│` for
  * the rail.
@@ -35,7 +37,7 @@ export function wrapLine(text, width) {
     const lines = [];
     for (const word of text.split(/\s+/).filter((part) => part.length > 0)) {
         const current = lines[lines.length - 1];
-        if (current === undefined || `${current} ${word}`.length > width) {
+        if (current === undefined || textWidth(`${current} ${word}`) > width) {
             lines.push(word);
             continue;
         }
@@ -63,16 +65,6 @@ function writeRailWrapped(body) {
         writeRail(line);
     }
 }
-/**
- * Light cleanup so model markdown does not fight the tree. Keeps the words;
- * drops heading marks, bold markers, and horizontal rules.
- */
-function forTerminal(text) {
-    return text
-        .replace(/^#{1,6}\s+/gm, "")
-        .replace(/\*\*([^*]+)\*\*/g, "$1")
-        .replace(/^---+$/gm, "");
-}
 /**
  * A `◇` step: the first line beside the marker, the rest continuing on the
  * rail under it.
@@ -115,44 +107,66 @@ export function showUserTurn(body) {
     writeDiamondBlock(body);
 }
 /**
- * Display lines for an assistant body. First line is the brick header body;
- * later lines sit on the │ rail. Blank paragraphs keep an empty rail.
+ * Where the finished part of a reply ends: just past its last blank line, as
+ * long as that line is not inside a code fence. Never before `from`.
  */
-function assistantDisplayLines(body) {
-    const paragraphs = forTerminal(body).split("\n");
-    const lines = [];
-    for (let index = 0; index < paragraphs.length; index += 1) {
-        const paragraph = paragraphs[index];
-        if (paragraph === undefined) {
-            continue;
-        }
-        if (paragraph === "") {
-            lines.push("");
-            continue;
+function commitPoint(buffer, from) {
+    const cursor = { at: buffer.lastIndexOf("\n\n") };
+    while (cursor.at >= from) {
+        const fences = buffer
+            .slice(0, cursor.at)
+            .split("\n")
+            .filter((line) => /^\s*(```|~~~)/.test(line) === true).length;
+        if (fences % 2 === 0) {
+            return cursor.at + 2;
         }
-        const wrapped = wrapLine(paragraph, treeBodyWidth());
-        if (wrapped.length === 0) {
-            lines.push("");
-            continue;
-        }
-        for (const line of wrapped) {
-            lines.push(line);
+        cursor.at = buffer.lastIndexOf("\n\n", cursor.at - 1);
+    }
+    return from;
+}
+/**
+ * Write reply lines: the first beside `■` until one has been printed for
+ * good, the rest on the │ rail. Returns how many rows were written.
+ */
+function writeAssistantLines(live, lines) {
+    lines.forEach((line, index) => {
+        if (index === 0 && live.markerCommitted === false) {
+            process.stderr.write(`${ASSISTANT_MARKER}  ${line}\n`);
+            return;
         }
+        writeRail(line);
+    });
+    return lines.length;
+}
+/**
+ * Markdown lines for part of a reply, after the blank row that separates it
+ * from paragraphs already printed for good.
+ */
+function assistantLines(text, withGap) {
+    const body = text.replace(/^\n+/, "").replace(/\n+$/, "");
+    if (body === "") {
+        return [];
     }
+    const lines = renderMarkdown(body, treeBodyWidth());
+    return withGap === true ? ["", ...lines] : lines;
+}
+/** Print reply lines for good: they are never cleared or drawn again. */
+function commitAssistantLines(live, lines) {
     if (lines.length === 0) {
-        return [""];
+        return;
     }
-    return lines;
+    writeAssistantLines(live, lines);
+    live.markerCommitted = true;
 }
-function writeAssistantLines(lines) {
-    const first = lines[0] === undefined ? "" : lines[0];
-    process.stderr.write(`${ASSISTANT_MARKER}  ${first}\n`);
-    for (let index = 1; index < lines.length; index += 1) {
-        const line = lines[index];
-        if (line !== undefined) {
-            writeRail(line);
-        }
-    }
+/**
+ * How many rows the redrawn part of a reply may take. Clearing it means
+ * moving the cursor up past every row, and the cursor stops at the top of the
+ * screen: rows that scrolled off would be drawn again under themselves. Two
+ * rows are kept for the typed line and the margin.
+ */
+function liveRowLimit() {
+    const rows = process.stderr.rows === undefined ? 24 : process.stderr.rows;
+    return Math.max(3, rows - 2);
 }
 function clearPaintedLines(count) {
     if (count <= 0 || process.stderr.isTTY !== true) {
@@ -164,7 +178,15 @@ function clearPaintedLines(count) {
 export function beginAssistantTurn() {
     writeRail("");
     process.stderr.write(`${ASSISTANT_MARKER}  \n`);
-    return { buffer: "", paintedLines: 1, footer: "" };
+    return {
+        buffer: "",
+        committed: 0,
+        tailLinesCommitted: 0,
+        tailHasGap: false,
+        markerCommitted: false,
+        paintedLines: 1,
+        footer: "",
+    };
 }
 export function appendAssistantDelta(live, delta) {
     // A tool between two pieces of narration inserts a paragraph break, so that
@@ -182,10 +204,27 @@ export function appendAssistantDelta(live, delta) {
 }
 /** Draw the block again from its buffer, with the typed line under it. */
 function repaintAssistantTurn(live) {
-    const lines = assistantDisplayLines(live.buffer);
     clearPaintedLines(live.paintedLines);
-    writeAssistantLines(lines);
-    live.paintedLines = lines.length;
+    live.paintedLines = 0;
+    const cut = commitPoint(live.buffer, live.committed);
+    if (cut > live.committed) {
+        // Rows of it may already be out, from when it was the unfinished part.
+        commitAssistantLines(live, assistantLines(live.buffer.slice(live.committed, cut), live.tailHasGap).slice(live.tailLinesCommitted));
+        live.committed = cut;
+        live.tailLinesCommitted = 0;
+        live.tailHasGap = live.markerCommitted;
+    }
+    const tail = assistantLines(live.buffer.slice(live.committed), live.tailHasGap).slice(live.tailLinesCommitted);
+    const overflow = Math.max(0, tail.length - liveRowLimit());
+    // A table or a code block taller than the screen: its top rows go out for
+    // good. A table can still widen below them; that beats drawing it twice.
+    if (overflow > 0) {
+        commitAssistantLines(live, tail.slice(0, overflow));
+        live.tailLinesCommitted += overflow;
+    }
+    const visible = tail.slice(overflow);
+    // Nothing said yet: keep the bare marker up, as `beginAssistantTurn` drew it.
+    live.paintedLines = writeAssistantLines(live, visible.length === 0 && live.markerCommitted === false ? [""] : visible);
     if (live.footer !== "") {
         // Clipped for the same reason the spinner's is: it has to occupy exactly
         // one row, or the next repaint clears from the wrong line.
@@ -216,6 +255,171 @@ export function showAssistantTurn(body) {
     appendAssistantDelta(live, body);
     endAssistantTurn(live);
 }
+/**
+ * How Claude Code's thinking is drawn, the same choices `@ai-sdk/tui` offers:
+ *
+ * - `full`: the whole summary stays in the transcript.
+ * - `auto-collapsed`: the latest lines show while it thinks, then fold into
+ *   one "Thought for 4s" line once it moves on.
+ * - `collapsed`: only that one line.
+ * - `hidden`: nothing beyond the spinner.
+ */
+export const REASONING_DISPLAYS = [
+    "full",
+    "auto-collapsed",
+    "collapsed",
+    "hidden",
+];
+/**
+ * How finished tool calls are drawn: `full` adds the start of each result
+ * under its line, `collapsed` keeps one line per call (and the first line of
+ * an error), `hidden` leaves only the spinner while they run.
+ */
+export const TOOL_DISPLAYS = ["full", "collapsed", "hidden"];
+const REASONING_MARKER = "∴";
+/** Rows of thinking kept on screen while it streams. */
+const REASONING_LIVE_LINES = 6;
+/** Rows of a tool result shown under it in `full`. */
+const TOOL_OUTPUT_PREVIEW_LINES = 6;
+/**
+ * Open a thinking block. Only the expanded displays draw while it streams;
+ * `collapsed` leaves the spinner up and adds its one line at the end.
+ */
+export function beginReasoning(display) {
+    const live = {
+        buffer: "",
+        display,
+        startedAtMs: Date.now(),
+        paintedLines: 0,
+        footer: "",
+    };
+    // No gap before it: thinking sits with the tool lines, not the replies.
+    if (drawsWhileThinking(display) === true) {
+        repaintReasoning(live);
+    }
+    return live;
+}
+export function appendReasoningDelta(live, delta) {
+    live.buffer += delta;
+    if (drawsWhileThinking(live.display) === true) {
+        repaintReasoning(live);
+    }
+}
+export function setReasoningFooter(live, footer) {
+    if (live.footer === footer) {
+        return;
+    }
+    live.footer = footer;
+    if (drawsWhileThinking(live.display) === true) {
+        repaintReasoning(live);
+    }
+}
+/** Close the block, leaving what its display keeps in the transcript. */
+export function endReasoning(live, spinner) {
+    clearPaintedLines(live.paintedLines);
+    live.paintedLines = 0;
+    if (live.display === "hidden") {
+        return;
+    }
+    const header = `${colors.dim(REASONING_MARKER)}  ${colors.dim(`Thought for ${formatDuration(Date.now() - live.startedAtMs)}`)}`;
+    if (live.display === "collapsed") {
+        // The spinner stayed up through this one; log above it.
+        if (spinner !== undefined) {
+            spinner.log(header);
+            return;
+        }
+        process.stderr.write(`${header}\n`);
+        return;
+    }
+    process.stderr.write(`${header}\n`);
+    if (live.display === "full") {
+        for (const line of reasoningLines(live.buffer)) {
+            writeRail(line);
+        }
+    }
+}
+function drawsWhileThinking(display) {
+    return display === "full" || display === "auto-collapsed";
+}
+function repaintReasoning(live) {
+    clearPaintedLines(live.paintedLines);
+    const lines = reasoningLines(live.buffer).slice(-REASONING_LIVE_LINES);
+    process.stderr.write(`${colors.dim(REASONING_MARKER)}  ${colors.dim("Thinking…")}\n`);
+    for (const line of lines) {
+        writeRail(line);
+    }
+    live.paintedLines = lines.length + 1;
+    if (live.footer !== "") {
+        process.stderr.write(`${colors.dim(clipToWidth(live.footer))}\n`);
+        live.paintedLines += 1;
+    }
+}
+function reasoningLines(text) {
+    const body = text.trim();
+    if (body === "") {
+        return [];
+    }
+    return renderMarkdown(body, treeBodyWidth(), "dim");
+}
+/** `4s`, `1m 12s`. */
+function formatDuration(ms) {
+    const seconds = Math.max(1, Math.round(ms / 1000));
+    if (seconds < 60) {
+        return `${String(seconds)}s`;
+    }
+    return `${String(Math.floor(seconds / 60))}m ${String(seconds % 60)}s`;
+}
+/**
+ * What a turn cost, under the reply: tokens written, how fast they came, how
+ * full the context window is, and the credits it was billed.
+ *
+ *   │  2.4k tokens written · 38 tok/s · 92k of 1M context (9%) · 6.10 credits
+ */
+export function showTurnStats(stats) {
+    if (stats.outputTokens === 0) {
+        return;
+    }
+    // Written, not read: what the model read is the context share below.
+    const parts = [`${formatTokens(stats.outputTokens)} tokens written`];
+    // Under a second of generation is too short to measure a rate from.
+    if (stats.generationMs >= 1000) {
+        parts.push(`${String(Math.round(stats.outputTokens / (stats.generationMs / 1000)))} tok/s`);
+    }
+    if (stats.contextTokens !== undefined && stats.contextTokens > 0) {
+        const percent = Math.min(100, Math.max(1, Math.round((stats.contextTokens / stats.contextWindow) * 100)));
+        parts.push(`${formatTokens(stats.contextTokens)} of ${formatTokens(stats.contextWindow)} context (${String(percent)}%)`);
+    }
+    if (stats.credits > 0) {
+        parts.push(`${stats.credits.toFixed(2)} credit${stats.credits === 1 ? "" : "s"}`);
+    }
+    // Broken between items, never inside one, when the line is wider than the
+    // rail leaves room for: wrapped by the terminal it would start its next row
+    // at column zero, outside the tree.
+    const width = treeBodyWidth();
+    const rows = [];
+    for (const part of parts.map((entry) => clipToCells(entry, width))) {
+        const last = rows[rows.length - 1];
+        if (last !== undefined && textWidth(`${last} · ${part}`) <= width) {
+            rows[rows.length - 1] = `${last} · ${part}`;
+            continue;
+        }
+        rows.push(part);
+    }
+    for (const row of rows) {
+        writeRail(colors.dim(row));
+    }
+    writeRail("");
+}
+/** `950`, `2.4k`, `1M`. */
+function formatTokens(count) {
+    if (count >= 1_000_000) {
+        return `${String(Math.round(count / 100_000) / 10)}M`;
+    }
+    if (count >= 1_000) {
+        return `${String(Math.round(count / 100) / 10)}k`;
+    }
+    return String(count);
+}
 /** Common tool names arrive lowercase (`bash`); natives keep their case. */
 function toolLabel(toolName) {
     if (toolName === ASK_USER_QUESTION_TOOL_NAME) {
@@ -233,9 +437,7 @@ export function describeToolActivity(toolName, summary) {
         return label;
     }
     const line = `${label}: ${summary}`;
-    return line.length > ACTIVITY_MAX_LENGTH
-        ? `${line.slice(0, ACTIVITY_MAX_LENGTH - 1)}…`
-        : line;
+    return clipToCells(line, ACTIVITY_MAX_LENGTH);
 }
 /**
  * A tool that has finished, left in the transcript.
@@ -250,15 +452,84 @@ export function describeToolActivity(toolName, summary) {
  * line, leaves this behind, and lets the next frame redraw underneath.
  */
 export function showToolRun(input) {
+    if (input.display === "hidden") {
+        return;
+    }
     const marker = input.isError === true ? colors.red("✗") : colors.dim(TOOL_MARKER);
     const label = describeToolActivity(input.toolName, input.summary);
-    const line = `${marker}  ${colors.dim(label)}`;
+    const lines = [
+        `${marker}  ${colors.dim(label)}`,
+        ...toolOutputPreview(input.output, input.display, input.isError).map((line) => `${colors.dim("│")}  ${colors.dim(line)}`),
+    ];
+    for (const line of lines) {
+        if (input.spinner !== undefined) {
+            input.spinner.log(line);
+        }
+        else {
+            process.stderr.write(`${line}\n`);
+        }
+    }
+}
+/**
+ * Several calls of one tool that finished in a row, as one line:
+ *
+ *   ⏺  Read 6 files: run.ts, tree.ts, markdown.ts, …
+ *
+ * Six `Read` lines say less than this one, and push the reply off screen.
+ * Only for successful calls under `collapsed`: a failure keeps its own line
+ * and its error, and `full` shows each result.
+ */
+export function showToolGroup(input) {
+    const count = input.summaries.length;
+    const verb = TOOL_GROUP_VERBS.find((entry) => entry.toolName === input.toolName.toLowerCase());
+    const head = verb === undefined
+        ? `${toolLabel(input.toolName)} ×${String(count)}`
+        : `${verb.label} ${String(count)} ${verb.noun}`;
+    // Paths shown by file name: the directory is usually the same for all.
+    const items = input.summaries
+        .filter((summary) => summary !== "")
+        .map((summary) => isAbsolute(summary) === true ? basename(summary) : summary);
+    const label = clipToCells(items.length === 0 ? head : `${head}: ${items.join(", ")}`, treeBodyWidth());
+    const line = `${colors.dim(TOOL_MARKER)}  ${colors.dim(label)}`;
     if (input.spinner !== undefined) {
         input.spinner.log(line);
         return;
     }
     process.stderr.write(`${line}\n`);
 }
+/** How a run of one built-in tool is counted. Names arrive lowercase. */
+const TOOL_GROUP_VERBS = [
+    { toolName: "read", label: "Read", noun: "files" },
+    { toolName: "edit", label: "Edited", noun: "files" },
+    { toolName: "multiedit", label: "Edited", noun: "files" },
+    { toolName: "write", label: "Wrote", noun: "files" },
+    { toolName: "bash", label: "Ran", noun: "commands" },
+    { toolName: "grep", label: "Ran", noun: "searches" },
+    { toolName: "glob", label: "Listed", noun: "patterns" },
+    { toolName: "webfetch", label: "Fetched", noun: "pages" },
+    { toolName: "websearch", label: "Ran", noun: "web searches" },
+];
+/**
+ * The start of a tool's result, clipped to the rail. A failure always gets
+ * its first line, so a ✗ says why without switching the display.
+ */
+function toolOutputPreview(output, display, isError) {
+    const limit = display === "full" ? TOOL_OUTPUT_PREVIEW_LINES : isError === true ? 1 : 0;
+    if (limit === 0) {
+        return [];
+    }
+    const lines = output
+        .replace(/\t/g, "  ")
+        .split("\n")
+        .map((line) => line.trimEnd())
+        .filter((line) => line !== "");
+    const width = treeBodyWidth();
+    const shown = lines.slice(0, limit).map((line) => clipToCells(line, width));
+    if (lines.length > limit) {
+        shown.push(`… ${String(lines.length - limit)} more line${lines.length - limit === 1 ? "" : "s"}`);
+    }
+    return shown;
+}
 /**
  * A path inside the session directory reads better relative to it; anything
  * outside stays absolute so it is obvious the turn left the project.

package/build/commands/auth/index.js

@@ -20,7 +20,7 @@ export function registerAuthCommands(program, getApi) {
         .option("--oauth [true|false]", "Sign in via browser using the OAuth 2.0 Device Authorization Flow", parseBooleanOption)
         .option("--agentid [true|false]", "Sign in as an agent through the AgentID connection; prints an Auth0 URL and waits for it to redirect back to this machine", parseBooleanOption)
         .option("--token <token>", "Existing Cargo API token")
-        .option("--workspace-name <name>", "Workspace to use, created if no workspace of that name exists (skips the workspace prompt)")
+        .option("--workspace-name <name>", "Workspace to use (skips the workspace prompt): one of that name if it exists; otherwise the Personal workspace a first sign-in creates is renamed to it (when under 10 minutes old and you are its only member); otherwise it is created")
         .option("--workspace-uuid <uuid>", "Workspace UUID to sign in for (skips the workspace prompt)")
         .option("--base-url <url>", `Cargo API base URL (string, default: ${DEFAULT_BASE_URL})`)
         .addHelpText("after", `

package/build/commands/connection/connector.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"connector.d.ts","sourceRoot":"","sources":["../../../src/commands/connection/connector.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEzC,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAcxC,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,OAAO,EACf,MAAM,EAAE,MAAM,GAAG,GAChB,IAAI,CA6TN"}
+{"version":3,"file":"connector.d.ts","sourceRoot":"","sources":["../../../src/commands/connection/connector.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEzC,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAcxC,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,OAAO,EACf,MAAM,EAAE,MAAM,GAAG,GAChB,IAAI,CAgUN"}

package/build/commands/connection/connector.js

@@ -69,7 +69,7 @@ export function registerConnectorCommands(parent, getApi) {
         .command("get-dynamic-schema")
         .description("Get dynamic schema for a connector action")
         .requiredOption("--connector-uuid <uuid>", "Connector UUID (string, required)")
-        .requiredOption("--slug <slug>", "Action slug (string, required)")
+        .requiredOption("--slug <slug>", "Dynamic-schema slug as the integration declares it (e.g. hubspot's getConsentOptions) — not the action slug (string, required)")
         .requiredOption("--params <json>", "Schema parameters (JSON object, required)")
         .action(async (opts) => {
         const api = getApi();

package/build/commands/hosting/envVar.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"envVar.d.ts","sourceRoot":"","sources":["../../../src/commands/hosting/envVar.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEzC,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AASxC,KAAK,OAAO,GAAG,KAAK,GAAG,QAAQ,CAAC;AAehC;;;;GAIG;AACH,wBAAgB,6BAA6B,CAC3C,MAAM,EAAE,OAAO,EACf,MAAM,EAAE,MAAM,GAAG,EACjB,OAAO,EAAE;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC1C,IAAI,CAqIN"}
+{"version":3,"file":"envVar.d.ts","sourceRoot":"","sources":["../../../src/commands/hosting/envVar.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEzC,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AASxC,KAAK,OAAO,GAAG,KAAK,GAAG,QAAQ,CAAC;AAehC;;;;GAIG;AACH,wBAAgB,6BAA6B,CAC3C,MAAM,EAAE,OAAO,EACf,MAAM,EAAE,MAAM,GAAG,EACjB,OAAO,EAAE;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC1C,IAAI,CAkJN"}

package/build/commands/hosting/envVar.js

@@ -37,18 +37,27 @@ ${note}`);
             : { workerUuid: subjectUuid }));
         outputJson(result);
     });
-    env
+    const set = env
         .command("set")
         .description(`Create an environment variable on a ${subject}, or update it if the key already exists. Takes effect on the next deployment`)
         .requiredOption(`${flag} <uuid>`, `${capitalize(subject)} UUID`)
         .requiredOption("--key <key>", "Environment variable name")
-        .option("--value <value>", "Value. Pass '-' to read it from stdin, or omit it to read the local environment variable of the same name — both keep a secret out of shell history")
-        .option("--secret [true|false]", "Encrypt the value at rest and never return it. On an existing key, omit to keep its current setting", parseBooleanOption)
+        .option("--value <value>", "Value. Pass '-' to read it from stdin, or omit it to read the local environment variable of the same name — both keep a secret out of shell history");
+    // An app's values are compiled into its public bundle, so the API refuses a
+    // secret one (secretNotSupportedForApp); only a worker gets the flag.
+    if (subject === "worker") {
+        set.option("--secret [true|false]", "Encrypt the value at rest and never return it. On an existing key, omit to keep its current setting", parseBooleanOption);
+    }
+    const examples = subject === "worker"
+        ? `  $ cargo-ai hosting ${subject} ${name} set ${flag} <uuid> --key LOG_LEVEL --value debug
+  $ printf %s "$TOKEN" | cargo-ai hosting ${subject} ${name} set ${flag} <uuid> --key CARGO_API_TOKEN --value - --secret
+  $ CARGO_API_TOKEN=... cargo-ai hosting ${subject} ${name} set ${flag} <uuid> --key CARGO_API_TOKEN --secret`
+        : `  $ cargo-ai hosting ${subject} ${name} set ${flag} <uuid> --key VITE_API_URL --value https://api.example.com
+  $ cargo-ai hosting ${subject} ${name} set ${flag} <uuid> --key VITE_WORKER_URL --value https://my-worker.example.com`;
+    set
         .addHelpText("after", `
 Examples:
-  $ cargo-ai hosting ${subject} ${name} set ${flag} <uuid> --key LOG_LEVEL --value debug
-  $ printf %s "$TOKEN" | cargo-ai hosting ${subject} ${name} set ${flag} <uuid> --key CARGO_API_TOKEN --value - --secret
-  $ CARGO_API_TOKEN=... cargo-ai hosting ${subject} ${name} set ${flag} <uuid> --key CARGO_API_TOKEN --secret
+${examples}
 
 ${note}`)
         .action(async (opts) => {

package/build/commands/orchestration/span.js

@@ -24,7 +24,7 @@ export function registerSpanCommands(parent, getApi) {
         .option("--node-release-uuid <uuid>", "Release UUID on the node")
         .option("--execution-statuses <pending,success,error>", "Filter by execution statuses")
         .option("--parent-run-uuid <uuid>", "Parent run UUID")
-        .requiredOption("--execution-started-after <date>", "Execution started after (ISO date)")
+        .requiredOption("--execution-started-after <date>", "Execution started after (ISO date, required)")
         .option("--execution-started-before <date>", "Execution started on or before (ISO date)")
         .option("--search <text>", "Case-insensitive partial match on record title, record ID, execution title, or error message")
         .option("--limit <n>", "Limit", "30")
@@ -89,7 +89,7 @@ export function registerSpanCommands(parent, getApi) {
         .option("--node-release-uuid <uuid>", "Release UUID on the node")
         .option("--execution-statuses <pending,success,error>", "Filter by execution statuses")
         .option("--parent-run-uuid <uuid>", "Parent run UUID")
-        .requiredOption("--execution-started-after <date>", "Execution started after (ISO date)")
+        .requiredOption("--execution-started-after <date>", "Execution started after (ISO date, required)")
         .option("--execution-started-before <date>", "Execution started on or before (ISO date)")
         .action(async (opts) => {
         const api = getApi();

package/build/commands/orchestration/trace.js

@@ -8,7 +8,7 @@ export function registerTraceCommands(parent, getApi) {
         .description("List traces (aggregated over their spans)")
         .option("--workflow-uuid <uuid>", "Workflow UUID (omit to include all workflows in the workspace)")
         .option("--statuses <pending,error,degraded,success>", "Trace statuses")
-        .requiredOption("--started-after <date>", "Trace's first span started after (ISO date)")
+        .requiredOption("--started-after <date>", "Trace's first span started after (ISO date, required)")
         .option("--started-before <date>", "Trace's first span started on or before (ISO date)")
         .option("--limit <n>", "Limit", "30")
         .option("--offset <n>", "Offset", "0")
@@ -31,7 +31,7 @@ export function registerTraceCommands(parent, getApi) {
         .description("Count traces matching the filter")
         .option("--workflow-uuid <uuid>", "Workflow UUID (omit to include all workflows in the workspace)")
         .option("--statuses <pending,error,degraded,success>", "Trace statuses")
-        .requiredOption("--started-after <date>", "Trace's first span started after (ISO date)")
+        .requiredOption("--started-after <date>", "Trace's first span started after (ISO date, required)")
         .option("--started-before <date>", "Trace's first span started on or before (ISO date)")
         .action(async (opts) => {
         const api = getApi();

package/build/commands/runHandler.d.ts

@@ -7,6 +7,7 @@ export declare const ExitCodes: {
     readonly NotFound: 5;
 };
 export type ExitCode = (typeof ExitCodes)[keyof typeof ExitCodes];
+export declare const colorize: (text: string, code: string) => string;
 export declare const colors: {
     red: (s: string) => string;
     green: (s: string) => string;

package/build/commands/runHandler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runHandler.d.ts","sourceRoot":"","sources":["../../src/commands/runHandler.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,SAAS;;;;;;;CAOZ,CAAC;AAEX,MAAM,MAAM,QAAQ,GAAG,CAAC,OAAO,SAAS,CAAC,CAAC,MAAM,OAAO,SAAS,CAAC,CAAC;AAclE,eAAO,MAAM,MAAM;aACR,MAAM,KAAG,MAAM;eACb,MAAM,KAAG,MAAM;gBACd,MAAM,KAAG,MAAM;cACjB,MAAM,KAAG,MAAM;aAChB,MAAM,KAAG,MAAM;cACd,MAAM,KAAG,MAAM;CAC1B,CAAC;AAEF,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI,CAM/C;AAED,wBAAgB,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAE1C;AAED,wBAAgB,OAAO,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAE7C;AAID,wBAAsB,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAUhE;AAED,KAAK,YAAY,GAAG;IAClB,IAAI,CAAC,EAAE,QAAQ,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjC,CAAC;AAEF,wBAAgB,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,YAAY,GAAG,KAAK,CAgCpE;AAQD;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAiBlE;AAED,MAAM,MAAM,OAAO,GAAG;IAEpB,MAAM,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IAGlC,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAU5B,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC/B,IAAI,EAAE,MAAM,IAAI,CAAC;CAClB,CAAC;AAIF,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAwBrD;AAgED,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,GAAG,CAQhE;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAQ1E;AAED,wBAAgB,iBAAiB,CAAC,CAAC,EACjC,OAAO,EAAE,CAAC,EAAE,EACZ,KAAK,EAAE,MAAM,GACZ;IAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IAAC,YAAY,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CASxD;AAKD,KAAK,iBAAiB,GAAG;IACvB,OAAO,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC;IACzB;;;OAGG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC/B,CAAC;AAEF,wBAAsB,aAAa,CAAC,CAAC,EACnC,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EACpB,IAAI,CAAC,EAAE,iBAAiB,GACvB,OAAO,CAAC,CAAC,CAAC,CAgEZ;AA0ED,wBAAgB,KAAK,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAE/C;AAED;;;;;;;GAOG;AACH,wBAAsB,iBAAiB,CAAC,CAAC,EACvC,SAAS,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EAC3B,aAAa,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,IAAI,GAAG,MAAM,GAAG,IAAI,GAAG,SAAS,EAC9D,UAAU,EAAE,MAAM,EAClB,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,CAAC,CAAC,CAyBZ"}
+{"version":3,"file":"runHandler.d.ts","sourceRoot":"","sources":["../../src/commands/runHandler.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,SAAS;;;;;;;CAOZ,CAAC;AAEX,MAAM,MAAM,QAAQ,GAAG,CAAC,OAAO,SAAS,CAAC,CAAC,MAAM,OAAO,SAAS,CAAC,CAAC;AAOlE,eAAO,MAAM,QAAQ,SAAU,MAAM,QAAQ,MAAM,KAAG,MAKrD,CAAC;AAEF,eAAO,MAAM,MAAM;aACR,MAAM,KAAG,MAAM;eACb,MAAM,KAAG,MAAM;gBACd,MAAM,KAAG,MAAM;cACjB,MAAM,KAAG,MAAM;aAChB,MAAM,KAAG,MAAM;cACd,MAAM,KAAG,MAAM;CAC1B,CAAC;AAEF,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI,CAM/C;AAED,wBAAgB,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAE1C;AAED,wBAAgB,OAAO,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAE7C;AAID,wBAAsB,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAUhE;AAED,KAAK,YAAY,GAAG;IAClB,IAAI,CAAC,EAAE,QAAQ,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjC,CAAC;AAEF,wBAAgB,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,YAAY,GAAG,KAAK,CAgCpE;AAQD;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAmBlE;AAED,MAAM,MAAM,OAAO,GAAG;IAEpB,MAAM,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IAGlC,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAU5B,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC/B,IAAI,EAAE,MAAM,IAAI,CAAC;CAClB,CAAC;AAIF,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAwBrD;AAgED,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,GAAG,CAQhE;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAQ1E;AAED,wBAAgB,iBAAiB,CAAC,CAAC,EACjC,OAAO,EAAE,CAAC,EAAE,EACZ,KAAK,EAAE,MAAM,GACZ;IAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IAAC,YAAY,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CASxD;AAKD,KAAK,iBAAiB,GAAG;IACvB,OAAO,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC;IACzB;;;OAGG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC/B,CAAC;AAEF,wBAAsB,aAAa,CAAC,CAAC,EACnC,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EACpB,IAAI,CAAC,EAAE,iBAAiB,GACvB,OAAO,CAAC,CAAC,CAAC,CAgEZ;AA0ED,wBAAgB,KAAK,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAE/C;AAED;;;;;;;GAOG;AACH,wBAAsB,iBAAiB,CAAC,CAAC,EACvC,SAAS,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EAC3B,aAAa,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,IAAI,GAAG,MAAM,GAAG,IAAI,GAAG,SAAS,EAC9D,UAAU,EAAE,MAAM,EAClB,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,CAAC,CAAC,CAyBZ"}

package/build/commands/runHandler.js

@@ -1,4 +1,5 @@
 import { determineIfIsFetcherError } from "@cargo-ai/api";
+import { clipToCells } from "../utils/textWidth.js";
 export const ExitCodes = {
     Success: 0,
     GenericError: 1,
@@ -10,7 +11,7 @@ export const ExitCodes = {
 const useColor = process.stderr.isTTY === true &&
     process.env["NO_COLOR"] === undefined &&
     process.env["CI"] !== "true";
-const colorize = (text, code) => {
+export const colorize = (text, code) => {
     if (useColor !== true) {
         return text;
     }
@@ -99,10 +100,12 @@ export function clipToWidth(text, columns) {
     // One column short of the edge: writing into the last cell makes some
     // terminals wrap to the next row, which is the thing being avoided.
     const limit = width - 1;
-    if (limit <= 1 || text.length <= limit) {
+    if (limit <= 1) {
         return text;
     }
-    return `${text.slice(0, limit - 1)}…`;
+    // Counted in columns: an emoji or a CJK character is two of them, and a
+    // line that wraps throws off every redraw that assumed one row.
+    return clipToCells(text, limit);
 }
 let activeSpinner;
 export function startSpinner(message) {

package/build/commands/segmentation/change.js

@@ -6,7 +6,7 @@ export function registerChangeCommands(parent, getApi) {
         .command("list")
         .description("List changes")
         .option("--segment-uuid <uuid>", "Segment UUID")
-        .option("--not-empty [true|false]", "Only non-empty changes", parseBooleanOption)
+        .option("--not-empty [true|false]", "Only changes where a record was added, updated or removed", parseBooleanOption)
         .option("--has-records <added|updated|removed|unchanged>", "Has records of kind")
         .option("--limit <n>", "Limit")
         .option("--offset <n>", "Offset")

package/build/commands/workspaceManagement/user.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"user.d.ts","sourceRoot":"","sources":["../../../src/commands/workspaceManagement/user.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEzC,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAGxC,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,GAAG,IAAI,CAsM7E"}
+{"version":3,"file":"user.d.ts","sourceRoot":"","sources":["../../../src/commands/workspaceManagement/user.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEzC,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAGxC,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,GAAG,IAAI,CAiN7E"}

package/build/commands/workspaceManagement/user.js

@@ -76,18 +76,21 @@ Example:
         .command("upsert-permission")
         .description("Create or update a user permission")
         .option("--user-uuids <uuids>", "Target user UUIDs (comma-separated strings). At least one of --user-uuids or --emails is required")
-        .option("--emails <emails>", "Target user emails (comma-separated strings). At least one of --user-uuids or --emails is required")
-        .requiredOption("--action <action>", "Permission action (string, required)")
+        .option("--emails <emails>", "Target user emails (comma-separated strings). Invites any address that is not a member yet. At least one of --user-uuids or --emails is required")
+        .requiredOption("--action <action>", "Permission action, e.g. orchestration:workflow:read (string, required)")
         .requiredOption("--resource-uuid <uuid>", "Resource UUID to grant/deny access to (string, required)")
-        .requiredOption("--effect <allow|deny>", "Permission effect")
+        .requiredOption("--effect <allow|deny>", "Permission effect. deny applies to existing members only, so it takes --user-uuids")
         .addHelpText("after", `
 Examples:
-  $ cargo-ai workspaceManagement user upsert-permission --emails alice@example.com --action read --resource-uuid 550e8400-... --effect allow
-  $ cargo-ai workspaceManagement user upsert-permission --user-uuids uuid1,uuid2 --action write --resource-uuid 550e8400-... --effect deny`)
+  $ cargo-ai workspaceManagement user upsert-permission --emails alice@example.com --action orchestration:workflow:read --resource-uuid 550e8400-... --effect allow
+  $ cargo-ai workspaceManagement user upsert-permission --user-uuids uuid1,uuid2 --action orchestration:workflow:write --resource-uuid 550e8400-... --effect deny`)
         .action(async (opts) => {
         if (opts.userUuids === undefined && opts.emails === undefined) {
             throw new Error("--user-uuids or --emails is required");
         }
+        if (opts.effect === "deny" && opts.emails !== undefined) {
+            throw new Error("--effect deny applies to existing members only: pass --user-uuids, not --emails");
+        }
         const api = getApi();
         const result = await handleApiCall(() => api.workspaceManagement.user.upsertPermission({
             userUuids: opts.userUuids !== undefined