@cargo-ai/cli 1.0.127 → 1.0.128

package/build/commands/ai/prompt.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"prompt.d.ts","sourceRoot":"","sources":["../../../src/commands/ai/prompt.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEzC,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAGxC,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,OAAO,EACf,MAAM,EAAE,MAAM,GAAG,GAChB,IAAI,CAmFN"}
+{"version":3,"file":"prompt.d.ts","sourceRoot":"","sources":["../../../src/commands/ai/prompt.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEzC,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAGxC,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,OAAO,EACf,MAAM,EAAE,MAAM,GAAG,GAChB,IAAI,CAqFN"}

package/build/commands/ai/prompt.js

@@ -2,7 +2,7 @@ import { handleApiCall, outputJson, parseJson } from "../runHandler.js";
 export function registerPromptCommands(parent, getApi) {
     const prompt = parent
         .command("prompt")
-        .description("Optimize and evaluate AI prompts");
+        .description("Optimize and render AI prompts");
     prompt
         .command("optimize")
         .description("Optimize a prompt for better AI performance")
@@ -17,7 +17,7 @@ Example:
     });
     prompt
         .command("evaluate")
-        .description("Evaluate a prompt's quality and get scoring feedback")
+        .description("Render a prompt's template expressions against the variables its actions, resources and capabilities provide — the prompt the agent will actually see. It does not score the prompt")
         .requiredOption("--prompt <text>", "Prompt text to evaluate (string, required)")
         .option("--actions <json>", "Available actions context (JSON array of action objects, default: [])")
         .option("--resources <json>", "Available resources context (JSON array of resource objects, default: [])")

package/build/commands/auth/index.js

@@ -20,7 +20,7 @@ export function registerAuthCommands(program, getApi) {
         .option("--oauth [true|false]", "Sign in via browser using the OAuth 2.0 Device Authorization Flow", parseBooleanOption)
         .option("--agentid [true|false]", "Sign in as an agent through the AgentID connection; prints an Auth0 URL and waits for it to redirect back to this machine", parseBooleanOption)
         .option("--token <token>", "Existing Cargo API token")
-        .option("--workspace-name <name>", "Workspace to use, created if no workspace of that name exists (skips the workspace prompt)")
+        .option("--workspace-name <name>", "Workspace to use (skips the workspace prompt): one of that name if it exists; otherwise the Personal workspace a first sign-in creates is renamed to it (when under 10 minutes old and you are its only member); otherwise it is created")
         .option("--workspace-uuid <uuid>", "Workspace UUID to sign in for (skips the workspace prompt)")
         .option("--base-url <url>", `Cargo API base URL (string, default: ${DEFAULT_BASE_URL})`)
         .addHelpText("after", `

package/build/commands/connection/connector.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"connector.d.ts","sourceRoot":"","sources":["../../../src/commands/connection/connector.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEzC,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAcxC,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,OAAO,EACf,MAAM,EAAE,MAAM,GAAG,GAChB,IAAI,CA6TN"}
+{"version":3,"file":"connector.d.ts","sourceRoot":"","sources":["../../../src/commands/connection/connector.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEzC,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAcxC,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,OAAO,EACf,MAAM,EAAE,MAAM,GAAG,GAChB,IAAI,CAgUN"}

package/build/commands/connection/connector.js

@@ -69,7 +69,7 @@ export function registerConnectorCommands(parent, getApi) {
         .command("get-dynamic-schema")
         .description("Get dynamic schema for a connector action")
         .requiredOption("--connector-uuid <uuid>", "Connector UUID (string, required)")
-        .requiredOption("--slug <slug>", "Action slug (string, required)")
+        .requiredOption("--slug <slug>", "Dynamic-schema slug as the integration declares it (e.g. hubspot's getConsentOptions) — not the action slug (string, required)")
         .requiredOption("--params <json>", "Schema parameters (JSON object, required)")
         .action(async (opts) => {
         const api = getApi();

package/build/commands/hosting/envVar.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"envVar.d.ts","sourceRoot":"","sources":["../../../src/commands/hosting/envVar.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEzC,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AASxC,KAAK,OAAO,GAAG,KAAK,GAAG,QAAQ,CAAC;AAehC;;;;GAIG;AACH,wBAAgB,6BAA6B,CAC3C,MAAM,EAAE,OAAO,EACf,MAAM,EAAE,MAAM,GAAG,EACjB,OAAO,EAAE;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC1C,IAAI,CAqIN"}
+{"version":3,"file":"envVar.d.ts","sourceRoot":"","sources":["../../../src/commands/hosting/envVar.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEzC,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AASxC,KAAK,OAAO,GAAG,KAAK,GAAG,QAAQ,CAAC;AAehC;;;;GAIG;AACH,wBAAgB,6BAA6B,CAC3C,MAAM,EAAE,OAAO,EACf,MAAM,EAAE,MAAM,GAAG,EACjB,OAAO,EAAE;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC1C,IAAI,CAkJN"}

package/build/commands/hosting/envVar.js

@@ -37,18 +37,27 @@ ${note}`);
             : { workerUuid: subjectUuid }));
         outputJson(result);
     });
-    env
+    const set = env
         .command("set")
         .description(`Create an environment variable on a ${subject}, or update it if the key already exists. Takes effect on the next deployment`)
         .requiredOption(`${flag} <uuid>`, `${capitalize(subject)} UUID`)
         .requiredOption("--key <key>", "Environment variable name")
-        .option("--value <value>", "Value. Pass '-' to read it from stdin, or omit it to read the local environment variable of the same name — both keep a secret out of shell history")
-        .option("--secret [true|false]", "Encrypt the value at rest and never return it. On an existing key, omit to keep its current setting", parseBooleanOption)
+        .option("--value <value>", "Value. Pass '-' to read it from stdin, or omit it to read the local environment variable of the same name — both keep a secret out of shell history");
+    // An app's values are compiled into its public bundle, so the API refuses a
+    // secret one (secretNotSupportedForApp); only a worker gets the flag.
+    if (subject === "worker") {
+        set.option("--secret [true|false]", "Encrypt the value at rest and never return it. On an existing key, omit to keep its current setting", parseBooleanOption);
+    }
+    const examples = subject === "worker"
+        ? `  $ cargo-ai hosting ${subject} ${name} set ${flag} <uuid> --key LOG_LEVEL --value debug
+  $ printf %s "$TOKEN" | cargo-ai hosting ${subject} ${name} set ${flag} <uuid> --key CARGO_API_TOKEN --value - --secret
+  $ CARGO_API_TOKEN=... cargo-ai hosting ${subject} ${name} set ${flag} <uuid> --key CARGO_API_TOKEN --secret`
+        : `  $ cargo-ai hosting ${subject} ${name} set ${flag} <uuid> --key VITE_API_URL --value https://api.example.com
+  $ cargo-ai hosting ${subject} ${name} set ${flag} <uuid> --key VITE_WORKER_URL --value https://my-worker.example.com`;
+    set
         .addHelpText("after", `
 Examples:
-  $ cargo-ai hosting ${subject} ${name} set ${flag} <uuid> --key LOG_LEVEL --value debug
-  $ printf %s "$TOKEN" | cargo-ai hosting ${subject} ${name} set ${flag} <uuid> --key CARGO_API_TOKEN --value - --secret
-  $ CARGO_API_TOKEN=... cargo-ai hosting ${subject} ${name} set ${flag} <uuid> --key CARGO_API_TOKEN --secret
+${examples}
 
 ${note}`)
         .action(async (opts) => {

package/build/commands/orchestration/span.js

@@ -24,7 +24,7 @@ export function registerSpanCommands(parent, getApi) {
         .option("--node-release-uuid <uuid>", "Release UUID on the node")
         .option("--execution-statuses <pending,success,error>", "Filter by execution statuses")
         .option("--parent-run-uuid <uuid>", "Parent run UUID")
-        .requiredOption("--execution-started-after <date>", "Execution started after (ISO date)")
+        .requiredOption("--execution-started-after <date>", "Execution started after (ISO date, required)")
         .option("--execution-started-before <date>", "Execution started on or before (ISO date)")
         .option("--search <text>", "Case-insensitive partial match on record title, record ID, execution title, or error message")
         .option("--limit <n>", "Limit", "30")
@@ -89,7 +89,7 @@ export function registerSpanCommands(parent, getApi) {
         .option("--node-release-uuid <uuid>", "Release UUID on the node")
         .option("--execution-statuses <pending,success,error>", "Filter by execution statuses")
         .option("--parent-run-uuid <uuid>", "Parent run UUID")
-        .requiredOption("--execution-started-after <date>", "Execution started after (ISO date)")
+        .requiredOption("--execution-started-after <date>", "Execution started after (ISO date, required)")
         .option("--execution-started-before <date>", "Execution started on or before (ISO date)")
         .action(async (opts) => {
         const api = getApi();

package/build/commands/orchestration/trace.js

@@ -8,7 +8,7 @@ export function registerTraceCommands(parent, getApi) {
         .description("List traces (aggregated over their spans)")
         .option("--workflow-uuid <uuid>", "Workflow UUID (omit to include all workflows in the workspace)")
         .option("--statuses <pending,error,degraded,success>", "Trace statuses")
-        .requiredOption("--started-after <date>", "Trace's first span started after (ISO date)")
+        .requiredOption("--started-after <date>", "Trace's first span started after (ISO date, required)")
         .option("--started-before <date>", "Trace's first span started on or before (ISO date)")
         .option("--limit <n>", "Limit", "30")
         .option("--offset <n>", "Offset", "0")
@@ -31,7 +31,7 @@ export function registerTraceCommands(parent, getApi) {
         .description("Count traces matching the filter")
         .option("--workflow-uuid <uuid>", "Workflow UUID (omit to include all workflows in the workspace)")
         .option("--statuses <pending,error,degraded,success>", "Trace statuses")
-        .requiredOption("--started-after <date>", "Trace's first span started after (ISO date)")
+        .requiredOption("--started-after <date>", "Trace's first span started after (ISO date, required)")
         .option("--started-before <date>", "Trace's first span started on or before (ISO date)")
         .action(async (opts) => {
         const api = getApi();

package/build/commands/segmentation/change.js

@@ -6,7 +6,7 @@ export function registerChangeCommands(parent, getApi) {
         .command("list")
         .description("List changes")
         .option("--segment-uuid <uuid>", "Segment UUID")
-        .option("--not-empty [true|false]", "Only non-empty changes", parseBooleanOption)
+        .option("--not-empty [true|false]", "Only changes where a record was added, updated or removed", parseBooleanOption)
         .option("--has-records <added|updated|removed|unchanged>", "Has records of kind")
         .option("--limit <n>", "Limit")
         .option("--offset <n>", "Offset")

package/build/commands/workspaceManagement/user.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"user.d.ts","sourceRoot":"","sources":["../../../src/commands/workspaceManagement/user.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEzC,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAGxC,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,GAAG,IAAI,CAsM7E"}
+{"version":3,"file":"user.d.ts","sourceRoot":"","sources":["../../../src/commands/workspaceManagement/user.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEzC,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAGxC,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,GAAG,IAAI,CAiN7E"}

package/build/commands/workspaceManagement/user.js

@@ -76,18 +76,21 @@ Example:
         .command("upsert-permission")
         .description("Create or update a user permission")
         .option("--user-uuids <uuids>", "Target user UUIDs (comma-separated strings). At least one of --user-uuids or --emails is required")
-        .option("--emails <emails>", "Target user emails (comma-separated strings). At least one of --user-uuids or --emails is required")
-        .requiredOption("--action <action>", "Permission action (string, required)")
+        .option("--emails <emails>", "Target user emails (comma-separated strings). Invites any address that is not a member yet. At least one of --user-uuids or --emails is required")
+        .requiredOption("--action <action>", "Permission action, e.g. orchestration:workflow:read (string, required)")
         .requiredOption("--resource-uuid <uuid>", "Resource UUID to grant/deny access to (string, required)")
-        .requiredOption("--effect <allow|deny>", "Permission effect")
+        .requiredOption("--effect <allow|deny>", "Permission effect. deny applies to existing members only, so it takes --user-uuids")
         .addHelpText("after", `
 Examples:
-  $ cargo-ai workspaceManagement user upsert-permission --emails alice@example.com --action read --resource-uuid 550e8400-... --effect allow
-  $ cargo-ai workspaceManagement user upsert-permission --user-uuids uuid1,uuid2 --action write --resource-uuid 550e8400-... --effect deny`)
+  $ cargo-ai workspaceManagement user upsert-permission --emails alice@example.com --action orchestration:workflow:read --resource-uuid 550e8400-... --effect allow
+  $ cargo-ai workspaceManagement user upsert-permission --user-uuids uuid1,uuid2 --action orchestration:workflow:write --resource-uuid 550e8400-... --effect deny`)
         .action(async (opts) => {
         if (opts.userUuids === undefined && opts.emails === undefined) {
             throw new Error("--user-uuids or --emails is required");
         }
+        if (opts.effect === "deny" && opts.emails !== undefined) {
+            throw new Error("--effect deny applies to existing members only: pass --user-uuids, not --emails");
+        }
         const api = getApi();
         const result = await handleApiCall(() => api.workspaceManagement.user.upsertPermission({
             userUuids: opts.userUuids !== undefined

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cargo-ai/cli",
-  "version": "1.0.127",
+  "version": "1.0.128",
   "mcpName": "io.github.getcargohq/cargo",
   "private": false,
   "license": "UNLICENSED",
@@ -76,7 +76,7 @@
     "@ai-sdk/harness-claude-code": "1.0.148",
     "@cargo-ai/api": "^1.0.101",
     "@cargo-ai/app-sdk": "^1.0.11",
-    "@cargo-ai/cdk": "^1.0.120",
+    "@cargo-ai/cdk": "^1.0.121",
     "@cargo-ai/types": "^1.0.103",
     "@cargo-ai/utils": "^1.0.35",
     "@cargo-ai/worker-sdk": "^1.0.21",