@cargo-ai/cli 1.0.139 → 1.0.141

package/build/commands/content/file.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"file.d.ts","sourceRoot":"","sources":["../../../src/commands/content/file.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEzC,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAGxC,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,GAAG,IAAI,CAwQ7E"}
+{"version":3,"file":"file.d.ts","sourceRoot":"","sources":["../../../src/commands/content/file.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEzC,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAIxC,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,GAAG,IAAI,CA0Q7E"}

package/build/commands/content/file.js

@@ -1,5 +1,6 @@
 import { readFile, writeFile } from "node:fs/promises";
-import { basename, extname } from "node:path";
+import { basename } from "node:path";
+import { guessContentType } from "../../utils/contentType.js";
 import { handleApiCall, outputJson } from "../runHandler.js";
 export function registerFileCommands(parent, getApi) {
     const file = parent.command("file").description("Storage file operations");
@@ -52,7 +53,9 @@ export function registerFileCommands(parent, getApi) {
         .action(async (opts) => {
         const buffer = await readFile(opts.file);
         const name = basename(opts.file);
-        const fileObj = new File([buffer], name);
+        const fileObj = new File([buffer], name, {
+            type: guessContentType(opts.file),
+        });
         const api = getApi();
         await handleApiCall(() => new Promise((resolve, reject) => {
             api.content.file.upload({
@@ -207,29 +210,3 @@ const parseVisibility = (value) => {
     }
     throw new Error(`--visibility must be private or public, got ${value}`);
 };
-const CONTENT_TYPES_BY_EXTENSION = {
-    ".csv": "text/csv",
-    ".gif": "image/gif",
-    ".html": "text/html",
-    ".jpeg": "image/jpeg",
-    ".jpg": "image/jpeg",
-    ".json": "application/json",
-    ".md": "text/markdown",
-    ".mp3": "audio/mpeg",
-    ".mp4": "video/mp4",
-    ".pdf": "application/pdf",
-    ".png": "image/png",
-    ".pptx": "application/vnd.openxmlformats-officedocument.presentationml.presentation",
-    ".svg": "image/svg+xml",
-    ".txt": "text/plain",
-    ".wav": "audio/wav",
-    ".webm": "video/webm",
-    ".webp": "image/webp",
-    ".docx": "application/vnd.openxmlformats-officedocument.wordprocessingml.document",
-    ".xlsx": "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet",
-    ".zip": "application/zip",
-};
-const guessContentType = (filePath) => {
-    const contentType = CONTENT_TYPES_BY_EXTENSION[extname(filePath).toLowerCase()];
-    return contentType !== undefined ? contentType : "application/octet-stream";
-};

package/build/commands/workspaceManagement/file.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"file.d.ts","sourceRoot":"","sources":["../../../src/commands/workspaceManagement/file.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEzC,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAGxC,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,GAAG,IAAI,CA+C7E"}
+{"version":3,"file":"file.d.ts","sourceRoot":"","sources":["../../../src/commands/workspaceManagement/file.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEzC,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAIxC,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,GAAG,IAAI,CAiD7E"}

package/build/commands/workspaceManagement/file.js

@@ -1,5 +1,6 @@
 import { readFile } from "node:fs/promises";
 import { basename } from "node:path";
+import { guessContentType } from "../../utils/contentType.js";
 import { handleApiCall, outputJson } from "../runHandler.js";
 export function registerFileCommands(parent, getApi) {
     const file = parent.command("file").description("Workspace file operations");
@@ -10,7 +11,9 @@ export function registerFileCommands(parent, getApi) {
         .action(async (opts) => {
         const buffer = await readFile(opts.file);
         const name = basename(opts.file);
-        const fileObj = new File([buffer], name);
+        const fileObj = new File([buffer], name, {
+            type: guessContentType(opts.file),
+        });
         const api = getApi();
         await handleApiCall(() => new Promise((resolve, reject) => {
             api.workspaceManagement.file.upload({

package/build/commands/workspaceManagement/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/commands/workspaceManagement/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEzC,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAWxC,wBAAgB,mCAAmC,CACjD,MAAM,EAAE,OAAO,EACf,MAAM,EAAE,MAAM,GAAG,GAChB,IAAI,CAgBN"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/commands/workspaceManagement/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEzC,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAUxC,wBAAgB,mCAAmC,CACjD,MAAM,EAAE,OAAO,EACf,MAAM,EAAE,MAAM,GAAG,GAChB,IAAI,CAeN"}

package/build/commands/workspaceManagement/index.js

@@ -3,14 +3,13 @@ import { registerFileCommands } from "./file.js";
 import { registerFolderCommands } from "./folder.js";
 import { registerReportCommands } from "./report.js";
 import { registerRoleCommands } from "./role.js";
-import { registerSessionCommands } from "./session.js";
 import { registerTokenCommands } from "./token.js";
 import { registerUserCommands } from "./user.js";
 import { registerWorkspacesCommands } from "./workspaces.js";
 export function registerWorkspaceManagementCommands(parent, getApi) {
     const workspaceManagement = parent
         .command("workspaceManagement")
-        .description("Workspaces, users, tokens, environment variables, roles, folders, reports, sessions");
+        .description("Workspaces, users, tokens, environment variables, roles, folders, reports");
     registerWorkspacesCommands(workspaceManagement, getApi);
     registerUserCommands(workspaceManagement, getApi);
     registerTokenCommands(workspaceManagement, getApi);
@@ -19,5 +18,4 @@ export function registerWorkspaceManagementCommands(parent, getApi) {
     registerFolderCommands(workspaceManagement, getApi);
     registerFileCommands(workspaceManagement, getApi);
     registerReportCommands(workspaceManagement, getApi);
-    registerSessionCommands(workspaceManagement, getApi);
 }

package/build/index.js

@@ -32,6 +32,7 @@ import { registerUserManagementCommands } from "./commands/userManagement/index.
 import { registerVersionCommand } from "./commands/version.js";
 import { registerWorkspaceManagementCommands } from "./commands/workspaceManagement/index.js";
 import { getConfig } from "./config.js";
+import { removeLegacySessionHooks } from "./legacySessionHooks.js";
 import { buildPaletteLayout } from "./paletteLayout.js";
 import { collectSetupIssues, isSignedIn } from "./setupIssues.js";
 import { cachedLatestSkillsPin, cachedLatestVersion, maybeRefreshUpdateCache, } from "./updateNotifier.js";
@@ -237,6 +238,17 @@ declareSources({
         },
     ],
 });
+// Before parsing, so it also runs from the legacy hook itself, which still
+// calls the `workspaceManagement session upsert` command removed with it.
+try {
+    const removal = removeLegacySessionHooks();
+    if (removal.outcome === "removed") {
+        process.stderr.write(`Removed the retired Cargo session hooks: ${removal.paths.join(", ")}.\n`);
+    }
+}
+catch {
+    // A cleanup that fails is retried by the next command; it never blocks this one.
+}
 const argv = pinAskBooleanFlags(rewriteChatFlag(process.argv));
 const binPath = process.argv[1] === undefined ? "cargo-ai" : process.argv[1];
 // First, so it is the first row of the palette: for someone signed in, this is

package/build/legacySessionHooks.d.ts

@@ -0,0 +1,9 @@
+export type RemoveLegacySessionHooksResult = {
+    outcome: "removed";
+    paths: string[];
+} | {
+    outcome: "notRemoved";
+    reason: "noLegacyHooks" | "settingsUnreadable";
+};
+export declare const removeLegacySessionHooks: (homeDir?: string) => RemoveLegacySessionHooksResult;
+//# sourceMappingURL=legacySessionHooks.d.ts.map

package/build/legacySessionHooks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"legacySessionHooks.d.ts","sourceRoot":"","sources":["../src/legacySessionHooks.ts"],"names":[],"mappings":"AAyBA,MAAM,MAAM,8BAA8B,GACtC;IAAE,OAAO,EAAE,SAAS,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAA;CAAE,GACvC;IAAE,OAAO,EAAE,YAAY,CAAC;IAAC,MAAM,EAAE,eAAe,GAAG,oBAAoB,CAAA;CAAE,CAAC;AAE9E,eAAO,MAAM,wBAAwB,aAC1B,MAAM,KACd,8BAwBF,CAAC"}

package/build/legacySessionHooks.js

@@ -0,0 +1,101 @@
+import { existsSync, readFileSync, renameSync, unlinkSync, writeFileSync, } from "node:fs";
+import { homedir } from "node:os";
+import { join } from "node:path";
+// What the retired standalone installer (api.getcargo.io/install.sh) put in
+// ~/.claude/hooks: session hooks that uploaded each session's latest prompt and
+// an AI-written summary. That standalone session-start.sh installs the pinned
+// CLI at every session start, so this release reaches those machines through
+// it, and removes the hooks the first time any `cargo-ai` command runs.
+const LEGACY_HOOK_FILES = [
+    "session-start.sh",
+    "session-checkpoint.sh",
+    "session-end.sh",
+];
+// Every version of those scripts opens with this, and only ours do: a file of
+// the same name that another tool wrote is left alone.
+const CARGO_HOOK_HEADER = "# Cargo session";
+export const removeLegacySessionHooks = (homeDir = homedir()) => {
+    const hooksDir = join(homeDir, ".claude", "hooks");
+    const paths = LEGACY_HOOK_FILES.map((file) => join(hooksDir, file)).filter((path) => isCargoHook(path));
+    if (paths.length === 0) {
+        return { outcome: "notRemoved", reason: "noLegacyHooks" };
+    }
+    // Deregister first, and delete only once that worked: a hook still listed in
+    // settings.json but missing on disk errors at every session.
+    const settingsPath = join(homeDir, ".claude", "settings.json");
+    const isDeregistered = deregisterHooks(settingsPath, paths);
+    if (isDeregistered === false) {
+        return { outcome: "notRemoved", reason: "settingsUnreadable" };
+    }
+    paths.forEach((path) => {
+        unlinkSync(path);
+    });
+    return { outcome: "removed", paths };
+};
+function isCargoHook(path) {
+    if (existsSync(path) === false) {
+        return false;
+    }
+    return readFileSync(path, "utf8").includes(CARGO_HOOK_HEADER);
+}
+function deregisterHooks(settingsPath, paths) {
+    if (existsSync(settingsPath) === false) {
+        return true;
+    }
+    let settings;
+    try {
+        settings = JSON.parse(readFileSync(settingsPath, "utf8"));
+    }
+    catch {
+        return false;
+    }
+    if (isRecord(settings) === false) {
+        return false;
+    }
+    const hooks = settings["hooks"];
+    if (isRecord(hooks) === false) {
+        return true;
+    }
+    let isChanged = false;
+    const keptHooks = {};
+    Object.entries(hooks).forEach(([event, entries]) => {
+        if (Array.isArray(entries) === false) {
+            keptHooks[event] = entries;
+            return;
+        }
+        const keptEntries = entries.flatMap((entry) => {
+            if (isRecord(entry) === false ||
+                Array.isArray(entry["hooks"]) === false) {
+                return [entry];
+            }
+            const commands = entry["hooks"];
+            const keptCommands = commands.filter((command) => isRecord(command) === false ||
+                paths.includes(String(command["command"])) === false);
+            if (keptCommands.length === commands.length) {
+                return [entry];
+            }
+            isChanged = true;
+            if (keptCommands.length === 0) {
+                return [];
+            }
+            return [{ ...entry, hooks: keptCommands }];
+        });
+        if (keptEntries.length > 0) {
+            keptHooks[event] = keptEntries;
+        }
+    });
+    if (isChanged === false) {
+        return true;
+    }
+    // Through a temporary file, so an interrupted write never leaves Claude Code
+    // with half a settings.json.
+    const temporaryPath = `${settingsPath}.cargo-${String(process.pid)}`;
+    writeFileSync(temporaryPath, `${JSON.stringify({ ...settings, hooks: keptHooks }, null, 2)}\n`);
+    renameSync(temporaryPath, settingsPath);
+    return true;
+}
+function isRecord(value) {
+    return (typeof value === "object" &&
+        value !== null &&
+        Array.isArray(value) === false);
+}

package/build/utils/contentType.d.ts

@@ -0,0 +1,2 @@
+export declare const guessContentType: (filePath: string) => string;
+//# sourceMappingURL=contentType.d.ts.map

package/build/utils/contentType.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contentType.d.ts","sourceRoot":"","sources":["../../src/utils/contentType.ts"],"names":[],"mappings":"AA+BA,eAAO,MAAM,gBAAgB,aAAc,MAAM,KAAG,MAKnD,CAAC"}

package/build/utils/contentType.js

@@ -0,0 +1,31 @@
+import { extname } from "node:path";
+// Uploads carry this as their type: without it the API stores the file as
+// application/octet-stream under a `.bin` key, and an image shows up as a
+// document.
+const CONTENT_TYPES_BY_EXTENSION = {
+    ".csv": "text/csv",
+    ".gif": "image/gif",
+    ".html": "text/html",
+    ".jpeg": "image/jpeg",
+    ".jpg": "image/jpeg",
+    ".json": "application/json",
+    ".md": "text/markdown",
+    ".mov": "video/quicktime",
+    ".mp3": "audio/mpeg",
+    ".mp4": "video/mp4",
+    ".pdf": "application/pdf",
+    ".png": "image/png",
+    ".pptx": "application/vnd.openxmlformats-officedocument.presentationml.presentation",
+    ".svg": "image/svg+xml",
+    ".txt": "text/plain",
+    ".wav": "audio/wav",
+    ".webm": "video/webm",
+    ".webp": "image/webp",
+    ".docx": "application/vnd.openxmlformats-officedocument.wordprocessingml.document",
+    ".xlsx": "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet",
+    ".zip": "application/zip",
+};
+export const guessContentType = (filePath) => {
+    const contentType = CONTENT_TYPES_BY_EXTENSION[extname(filePath).toLowerCase()];
+    return contentType !== undefined ? contentType : "application/octet-stream";
+};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cargo-ai/cli",
-  "version": "1.0.139",
+  "version": "1.0.141",
   "mcpName": "io.github.getcargohq/cargo",
   "private": false,
   "license": "UNLICENSED",
@@ -48,7 +48,7 @@
     "node": ">=22"
   },
   "volta": {
-    "node": "22.22.2"
+    "node": "24.22.2"
   },
   "type": "module",
   "bin": {
@@ -74,10 +74,10 @@
   "dependencies": {
     "@ai-sdk/harness": "1.0.144",
     "@ai-sdk/harness-claude-code": "1.0.148",
-    "@cargo-ai/api": "^1.0.104",
+    "@cargo-ai/api": "^1.0.106",
     "@cargo-ai/app-sdk": "^1.0.11",
-    "@cargo-ai/cdk": "^1.0.133",
-    "@cargo-ai/types": "^1.0.104",
+    "@cargo-ai/cdk": "^1.0.135",
+    "@cargo-ai/types": "^1.0.105",
     "@cargo-ai/utils": "^1.0.35",
     "@cargo-ai/worker-sdk": "^1.0.21",
     "@modelcontextprotocol/sdk": "^1.32.0",

package/build/commands/workspaceManagement/session.d.ts

@@ -1,4 +0,0 @@
-import type { Command } from "commander";
-import type { Api } from "../../api.js";
-export declare function registerSessionCommands(parent: Command, getApi: () => Api): void;
-//# sourceMappingURL=session.d.ts.map

package/build/commands/workspaceManagement/session.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../../../src/commands/workspaceManagement/session.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEzC,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAIxC,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,OAAO,EACf,MAAM,EAAE,MAAM,GAAG,GAChB,IAAI,CAkDN"}

package/build/commands/workspaceManagement/session.js

@@ -1,32 +0,0 @@
-import { parseBooleanOption } from "../../utils/booleanOption.js";
-import { handleApiCall, outputJson } from "../runHandler.js";
-export function registerSessionCommands(parent, getApi) {
-    const session = parent
-        .command("session")
-        .description("Claude Code session tracking");
-    session
-        .command("upsert")
-        .description("Create or update a Claude Code session")
-        .requiredOption("--session-id <sessionId>", "Claude Code session id")
-        .requiredOption("--title <title>", "Short title for the session")
-        .requiredOption("--summary <summary>", "Summary of what happened in the session")
-        .option("--finished [true|false]", "Mark the session as finished now (sets finishedAt = now)", parseBooleanOption)
-        .option("--finished-at <timestamp>", "Explicit ISO timestamp for when the session finished")
-        .action(async (opts) => {
-        let finishedAt;
-        if (opts.finishedAt !== undefined) {
-            finishedAt = opts.finishedAt;
-        }
-        else if (opts.finished === true) {
-            finishedAt = new Date().toISOString();
-        }
-        const api = getApi();
-        const result = await handleApiCall(() => api.workspaceManagement.session.upsert({
-            sessionId: opts.sessionId,
-            title: opts.title,
-            summary: opts.summary,
-            finishedAt,
-        }));
-        outputJson(result);
-    });
-}