@cargo-ai/cli 1.0.49 → 1.0.51

package/README.md

@@ -21,6 +21,8 @@ Or run once with `npx` without installing:
 npx @cargo-ai/cli orchestration workflow list
 ```
 
+Using a coding agent? Skip the manual setup — see [Agent Skills](#agent-skills) below to have Claude Code, Codex, or Cursor drive this CLI for you.
+
 ## Authentication
 
 A single `cargo-ai login` command supports three channels — pass exactly one of `--email`, `--oauth` or `--token`:
@@ -188,12 +190,35 @@ Other release verbs (`list`, `get <uuid>`, `get-deployed`, `get-draft`, `update-
 
 ## Agent Skills
 
-[Cargo Skills](https://github.com/getcargohq/cargo-skills) teaches AI coding agents (Claude Code, Cursor, Windsurf, GitHub Copilot, etc.) how to use the Cargo CLI. Install the skill to let your agent build, run, and manage revenue automation workflows programmatically:
+[Cargo Skills](https://github.com/getcargohq/cargo-skills) teaches AI coding agents (Claude Code, Codex, Cursor, Windsurf, GitHub Copilot, Hermes Agent, etc.) how to use this CLI — seventeen skills covering lead sourcing, enrichment, email verification, lead scoring, CRM sync, buying-signal monitoring, orchestration, storage, and workspace-as-code.
+
+**Let your agent install everything.** Paste this into Claude Code, Codex, or Cursor and it handles the CLI, sign-in, and skills for its own platform:
+
+```
+Install Cargo by following every step in https://api.getcargo.io/agent-install.txt
+```
+
+**Or install manually.** As a plugin (Claude Code, Codex, Cursor — bundles the skills plus approval and session hooks):
+
+```bash
+/plugin marketplace add getcargohq/cargo-skills    # Claude Code
+codex plugin marketplace add getcargohq/cargo-skills
+```
+
+As skills only (any [skills.sh](https://skills.sh)-compatible agent):
 
 ```bash
 npx skills add getcargohq/cargo-skills
 ```
 
+Pick one channel — installing both duplicates every skill.
+
+On [Hermes Agent](https://github.com/NousResearch/hermes-agent), install from its own hub instead:
+
+```bash
+hermes skills install skills-sh/getcargohq/cargo-skills/cargo-gtm
+```
+
 ## Development
 
 ```bash

package/build/commands/billing/{addPaymentMethod.d.ts → hostedCardForm.d.ts}

@@ -2,7 +2,7 @@ import { type Billing } from "@cargo-ai/api";
 import type { Api } from "../../api.js";
 export declare const DEFAULT_TIMEOUT_SECONDS = 300;
 export declare const DEFAULT_POLL_INTERVAL_SECONDS = 3;
-export type AddPaymentMethodOptions = {
+export type HostedCardFormOptions = {
     timeout: number;
     pollInterval: number;
     open: boolean;
@@ -14,13 +14,17 @@ export type AddPaymentMethodOptions = {
  * The card never touches this process: the CLI only ever sees the last four
  * digits that the API already exposes. Polling is what makes the handoff usable
  * from a script — the caller gets a definite answer instead of having to guess
- * whether the human finished.
+ * whether the operator finished.
+ *
+ * The URL lands directly on the card form, so an agent driving a browser can
+ * complete this unattended. An agent holding the card details themselves should
+ * pass them to `update-payment-method` instead and skip the browser entirely.
  */
-export declare function runAddPaymentMethod(api: Api, opts: AddPaymentMethodOptions): Promise<void>;
+export declare function runHostedCardForm(api: Api, opts: HostedCardFormOptions): Promise<void>;
 /**
  * Stripe never exposes a raw card number here, so a change is detected from the
  * fields the API does return. Replacing a card with the very same one is
  * therefore indistinguishable from doing nothing, and the command times out.
  */
 export declare function fingerprintCard(card: Billing.CreditCard | undefined): string;
-//# sourceMappingURL=addPaymentMethod.d.ts.map
+//# sourceMappingURL=hostedCardForm.d.ts.map

package/build/commands/billing/hostedCardForm.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hostedCardForm.d.ts","sourceRoot":"","sources":["../../../src/commands/billing/hostedCardForm.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,OAAO,EAAE,MAAM,eAAe,CAAC;AAE7C,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAWxC,eAAO,MAAM,uBAAuB,MAAM,CAAC;AAC3C,eAAO,MAAM,6BAA6B,IAAI,CAAC;AAE/C,MAAM,MAAM,qBAAqB,GAAG;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,OAAO,CAAC;CACf,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,wBAAsB,iBAAiB,CACrC,GAAG,EAAE,GAAG,EACR,IAAI,EAAE,qBAAqB,GAC1B,OAAO,CAAC,IAAI,CAAC,CAgDf;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,UAAU,GAAG,SAAS,GAAG,MAAM,CAW5E"}

package/build/commands/billing/{addPaymentMethod.js → hostedCardForm.js}

@@ -9,11 +9,15 @@ export const DEFAULT_POLL_INTERVAL_SECONDS = 3;
  * The card never touches this process: the CLI only ever sees the last four
  * digits that the API already exposes. Polling is what makes the handoff usable
  * from a script — the caller gets a definite answer instead of having to guess
- * whether the human finished.
+ * whether the operator finished.
+ *
+ * The URL lands directly on the card form, so an agent driving a browser can
+ * complete this unattended. An agent holding the card details themselves should
+ * pass them to `update-payment-method` instead and skip the browser entirely.
  */
-export async function runAddPaymentMethod(api, opts) {
+export async function runHostedCardForm(api, opts) {
     const before = await handleApiCall(() => api.billing.subscription.getCreditCard());
-    const { portalSession } = await handleApiCall(() => api.billing.subscription.createPortalSession());
+    const { portalSession } = await handleApiCall(() => api.billing.subscription.createPaymentMethodPortalSession());
     info("");
     info("To add or replace your card, open this URL in a browser:");
     info(`  ${portalSession.url}`);

package/build/commands/billing/subscription.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"subscription.d.ts","sourceRoot":"","sources":["../../../src/commands/billing/subscription.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEzC,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAQxC,wBAAgB,4BAA4B,CAC1C,MAAM,EAAE,OAAO,EACf,MAAM,EAAE,MAAM,GAAG,GAChB,IAAI,CAqSN"}
+{"version":3,"file":"subscription.d.ts","sourceRoot":"","sources":["../../../src/commands/billing/subscription.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEzC,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAuFxC,wBAAgB,4BAA4B,CAC1C,MAAM,EAAE,OAAO,EACf,MAAM,EAAE,MAAM,GAAG,GAChB,IAAI,CAkSN"}

package/build/commands/billing/subscription.js

@@ -1,5 +1,45 @@
-import { handleApiCall, outputJson, parsePositiveInt } from "../runHandler.js";
-import { DEFAULT_POLL_INTERVAL_SECONDS, DEFAULT_TIMEOUT_SECONDS, runAddPaymentMethod, } from "./addPaymentMethod.js";
+import { ExitCodes, failWith, handleApiCall, outputJson, parsePositiveInt, success, } from "../runHandler.js";
+import { DEFAULT_POLL_INTERVAL_SECONDS, DEFAULT_TIMEOUT_SECONDS, runHostedCardForm, } from "./hostedCardForm.js";
+import { parseCardExpiry, readCardFromStdin, tokenizeCard, } from "./tokenizeCard.js";
+/**
+ * Resolves whichever way the caller supplied a card into a payment method ID,
+ * or `undefined` when they supplied nothing and want the hosted form.
+ */
+async function resolvePaymentMethodId(api, opts) {
+    const hasCardFlags = opts.cardNumber !== undefined ||
+        opts.cardExp !== undefined ||
+        opts.cardCvc !== undefined;
+    if (opts.cardStdin === true && hasCardFlags === true) {
+        failWith("Pass either --card-stdin or the --card-* flags, not both.", {
+            code: ExitCodes.InvalidUsage,
+        });
+    }
+    let card;
+    if (opts.cardStdin === true) {
+        card = await readCardFromStdin();
+    }
+    else if (hasCardFlags === true) {
+        if (opts.cardNumber === undefined ||
+            opts.cardExp === undefined ||
+            opts.cardCvc === undefined) {
+            failWith("Card details need --card-number, --card-exp and --card-cvc together.", { code: ExitCodes.InvalidUsage });
+        }
+        const { expMonth, expYear } = parseCardExpiry(opts.cardExp);
+        card = {
+            number: opts.cardNumber,
+            expMonth,
+            expYear,
+            cvc: opts.cardCvc,
+        };
+    }
+    if (card === undefined) {
+        return undefined;
+    }
+    // Fetched rather than baked in so the CLI follows whichever Stripe
+    // environment the API it is pointed at belongs to.
+    const { publishableKey } = await handleApiCall(() => api.billing.subscription.getStripePublishableKey(), { spinner: "Preparing..." });
+    return tokenizeCard(publishableKey, card);
+}
 export function registerSubscriptionCommands(parent, getApi) {
     const subscription = parent
         .command("subscription")
@@ -40,55 +80,69 @@ Example:
         outputJson(result);
     });
     subscription
-        .command("create-setup-intent")
-        .description("Create a Stripe setup intent for adding/updating a payment method")
-        .addHelpText("after", `
-Example:
-  $ cargo-ai billing subscription create-setup-intent | jq -r .clientSecret`)
-        .action(async () => {
-        const api = getApi();
-        const result = await handleApiCall(() => api.billing.subscription.createSetupIntent());
-        outputJson(result);
-    });
-    subscription
-        .command("add-payment-method")
-        .description("Add or replace the card on file via Stripe's hosted portal, then wait for it to land")
-        .option("--timeout <seconds>", `How long to wait for the card to change (default: ${String(DEFAULT_TIMEOUT_SECONDS)})`)
-        .option("--poll-interval <seconds>", `How often to check for the new card (default: ${String(DEFAULT_POLL_INTERVAL_SECONDS)})`)
-        .option("--no-open", "Print the URL without launching a browser")
+        .command("update-payment-method")
+        .description("Add or replace the card on file")
+        .option("--card-number <number>", "Card number")
+        .option("--card-exp <MM/YYYY>", "Card expiry, e.g. 12/2030")
+        .option("--card-cvc <cvc>", "Card security code")
+        .option("--card-stdin", 'Read {"number","expMonth","expYear","cvc"} as JSON from stdin')
+        .option("--timeout <seconds>", `Hosted-form mode: how long to wait for the card to change (default: ${String(DEFAULT_TIMEOUT_SECONDS)})`)
+        .option("--poll-interval <seconds>", `Hosted-form mode: how often to check for the new card (default: ${String(DEFAULT_POLL_INTERVAL_SECONDS)})`)
+        .option("--no-open", "Hosted-form mode: print the URL without launching a browser")
         .addHelpText("after", `
 Examples:
-  $ cargo-ai billing subscription add-payment-method
-  $ cargo-ai billing subscription add-payment-method --no-open --timeout 600
+  # Card details, no browser
+  $ cargo-ai billing subscription update-payment-method \\
+      --card-number 4242424242424242 --card-exp 12/2030 --card-cvc 123
 
-Card details are entered on Stripe's hosted portal and never pass through this
-CLI. The URL is printed as well as opened, so this works over SSH and in
-sandboxes — relay the link and the command will detect the new card itself.`)
-        .action(async (opts) => {
-        const api = getApi();
-        await runAddPaymentMethod(api, {
-            timeout: opts.timeout !== undefined
-                ? parsePositiveInt(opts.timeout, "--timeout")
-                : DEFAULT_TIMEOUT_SECONDS,
-            pollInterval: opts.pollInterval !== undefined
-                ? parsePositiveInt(opts.pollInterval, "--poll-interval")
-                : DEFAULT_POLL_INTERVAL_SECONDS,
-            open: opts.open,
-        });
-    });
-    subscription
-        .command("update-payment-method")
-        .description("Replace the workspace's payment method")
-        .requiredOption("--payment-method-id <id>", "Stripe payment method ID (e.g. pm_1OabcXYZ...)")
-        .addHelpText("after", `
-Example:
-  $ cargo-ai billing subscription update-payment-method --payment-method-id pm_1OabcXYZ`)
+  # Same, keeping the number out of shell history and the process list
+  $ echo '{"number":"4242424242424242","expMonth":12,"expYear":2030,"cvc":"123"}' \\
+      | cargo-ai billing subscription update-payment-method --card-stdin
+
+  # No card details: hand a human Stripe's hosted form and wait for it
+  $ cargo-ai billing subscription update-payment-method
+
+With card details, they go from this machine straight to Stripe in exchange for
+a token; they never pass through the Cargo API, and nothing prints them.
+
+With no card details, this falls back to Stripe's hosted form. The URL opens
+directly on the card form and is printed as well as opened, so it works over
+SSH and in sandboxes — relay the link, or drive it with a browser, and the
+command detects the new card itself.
+
+Either way the card is verified with a zero-amount authorization before it
+becomes the default, so a declined card — or one whose spend limit or merchant
+restrictions rule us out — fails here rather than at the next renewal. Declines
+report a 'declineCode' you can act on.`)
         .action(async (opts) => {
         const api = getApi();
-        const result = await handleApiCall(() => api.billing.subscription.updatePaymentMethod({
-            paymentMethodId: opts.paymentMethodId,
-        }));
-        outputJson(result);
+        const paymentMethodId = await resolvePaymentMethodId(api, opts);
+        // Nothing to tokenize and nothing handed to us: fall back to letting a
+        // person (or a browser-driving agent) fill in Stripe's hosted form.
+        if (paymentMethodId === undefined) {
+            await runHostedCardForm(api, {
+                timeout: opts.timeout !== undefined
+                    ? parsePositiveInt(opts.timeout, "--timeout")
+                    : DEFAULT_TIMEOUT_SECONDS,
+                pollInterval: opts.pollInterval !== undefined
+                    ? parsePositiveInt(opts.pollInterval, "--poll-interval")
+                    : DEFAULT_POLL_INTERVAL_SECONDS,
+                open: opts.open,
+            });
+            return;
+        }
+        await handleApiCall(() => api.billing.subscription.updatePaymentMethod({ paymentMethodId }));
+        // The card is already set at this point, so a failure to read it back
+        // is cosmetic: reporting it as an error would tell the caller the
+        // update failed when it did not.
+        const creditCard = await api.billing.subscription
+            .getCreditCard()
+            .then((result) => result.creditCard)
+            .catch(() => undefined);
+        if (creditCard !== undefined) {
+            success(`Payment method updated: ${creditCard.brand} ending ${creditCard.last4}.`);
+        }
+        outputJson({ ok: true, status: "updated", creditCard });
     });
     subscription
         .command("create-portal-session")
@@ -101,17 +155,6 @@ Example:
         const result = await handleApiCall(() => api.billing.subscription.createPortalSession());
         outputJson(result);
     });
-    subscription
-        .command("create-stripe-credits-checkout-session")
-        .description("Create a Stripe checkout session for purchasing credits")
-        .addHelpText("after", `
-Example:
-  $ cargo-ai billing subscription create-stripe-credits-checkout-session | jq -r .url`)
-        .action(async () => {
-        const api = getApi();
-        const result = await handleApiCall(() => api.billing.subscription.createStripeCreditsCheckoutSession());
-        outputJson(result);
-    });
     subscription
         .command("update-plan")
         .description("Change the credit allotment and billing cadence")

package/build/commands/billing/tokenizeCard.d.ts

@@ -0,0 +1,31 @@
+export type CardDetails = {
+    number: string;
+    expMonth: number;
+    expYear: number;
+    cvc: string;
+};
+/**
+ * Exchanges raw card details for a Stripe payment method ID, talking to Stripe
+ * directly with the publishable key.
+ *
+ * The card deliberately does not travel through the Cargo API: this request
+ * goes from the caller's machine straight to Stripe, and only the resulting
+ * `pm_...` handle is ever sent to us. That is the same path Stripe.js takes in
+ * a browser, and it is what keeps card data out of our servers and logs.
+ */
+export declare function tokenizeCard(publishableKey: string, card: CardDetails): Promise<string>;
+/**
+ * Parses `MM/YYYY` (also accepting `MM/YY` and `M/YYYY`), the form printed on
+ * the card itself.
+ */
+export declare function parseCardExpiry(value: string): {
+    expMonth: number;
+    expYear: number;
+};
+/**
+ * Reads `{ number, expMonth, expYear, cvc }` from stdin. Preferred over flags
+ * for the card number, which would otherwise sit in shell history and in
+ * `ps` output for every other process on the machine.
+ */
+export declare function readCardFromStdin(): Promise<CardDetails>;
+//# sourceMappingURL=tokenizeCard.d.ts.map

package/build/commands/billing/tokenizeCard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokenizeCard.d.ts","sourceRoot":"","sources":["../../../src/commands/billing/tokenizeCard.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,WAAW,GAAG;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;CACb,CAAC;AAWF;;;;;;;;GAQG;AACH,wBAAsB,YAAY,CAChC,cAAc,EAAE,MAAM,EACtB,IAAI,EAAE,WAAW,GAChB,OAAO,CAAC,MAAM,CAAC,CAiEjB;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG;IAC9C,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;CACjB,CA+BA;AAED;;;;GAIG;AACH,wBAAsB,iBAAiB,IAAI,OAAO,CAAC,WAAW,CAAC,CAmD9D"}

package/build/commands/billing/tokenizeCard.js

@@ -0,0 +1,137 @@
+import { ExitCodes, failWith } from "../runHandler.js";
+const STRIPE_PAYMENT_METHODS_URL = "https://api.stripe.com/v1/payment_methods";
+/**
+ * Exchanges raw card details for a Stripe payment method ID, talking to Stripe
+ * directly with the publishable key.
+ *
+ * The card deliberately does not travel through the Cargo API: this request
+ * goes from the caller's machine straight to Stripe, and only the resulting
+ * `pm_...` handle is ever sent to us. That is the same path Stripe.js takes in
+ * a browser, and it is what keeps card data out of our servers and logs.
+ */
+export async function tokenizeCard(publishableKey, card) {
+    const body = new URLSearchParams({
+        type: "card",
+        "card[number]": card.number,
+        "card[exp_month]": String(card.expMonth),
+        "card[exp_year]": String(card.expYear),
+        "card[cvc]": card.cvc,
+    });
+    let response;
+    try {
+        response = await fetch(STRIPE_PAYMENT_METHODS_URL, {
+            method: "POST",
+            headers: {
+                // Stripe takes the key as the basic-auth username with an empty
+                // password, which is what `curl -u pk_live_xxx:` sends.
+                Authorization: `Basic ${Buffer.from(`${publishableKey}:`).toString("base64")}`,
+                "Content-Type": "application/x-www-form-urlencoded",
+            },
+            body,
+        });
+    }
+    catch (error) {
+        failWith(`Could not reach Stripe to tokenize the card: ${error instanceof Error ? error.message : String(error)}`);
+    }
+    const payload = (await response.json().catch(() => ({})));
+    if (response.ok === false) {
+        const stripeError = payload.error;
+        const message = stripeError !== undefined && stripeError.message !== undefined
+            ? stripeError.message
+            : `Stripe rejected the card (HTTP ${String(response.status)}).`;
+        const extra = {};
+        if (stripeError !== undefined) {
+            if (stripeError.code !== undefined) {
+                extra["code"] = stripeError.code;
+            }
+            if (stripeError.decline_code !== undefined) {
+                extra["declineCode"] = stripeError.decline_code;
+            }
+            if (stripeError.param !== undefined) {
+                extra["param"] = stripeError.param;
+            }
+        }
+        failWith(message, {
+            code: ExitCodes.InvalidUsage,
+            extra: Object.keys(extra).length > 0 ? extra : undefined,
+        });
+    }
+    const paymentMethodId = payload.id;
+    if (typeof paymentMethodId !== "string") {
+        failWith("Stripe accepted the card but returned no payment method ID.");
+    }
+    return paymentMethodId;
+}
+/**
+ * Parses `MM/YYYY` (also accepting `MM/YY` and `M/YYYY`), the form printed on
+ * the card itself.
+ */
+export function parseCardExpiry(value) {
+    const match = /^(\d{1,2})\s*\/\s*(\d{2}|\d{4})$/.exec(value.trim());
+    if (match === null) {
+        failWith(`--card-exp must look like MM/YYYY (got "${value}").`, {
+            code: ExitCodes.InvalidUsage,
+        });
+    }
+    const monthPart = match[1];
+    const yearPart = match[2];
+    if (monthPart === undefined || yearPart === undefined) {
+        failWith(`--card-exp must look like MM/YYYY (got "${value}").`, {
+            code: ExitCodes.InvalidUsage,
+        });
+    }
+    const expMonth = parseInt(monthPart, 10);
+    const expYear = yearPart.length === 2
+        ? 2000 + parseInt(yearPart, 10)
+        : parseInt(yearPart, 10);
+    if (expMonth < 1 || expMonth > 12) {
+        failWith(`--card-exp month must be between 1 and 12 (got "${value}").`, {
+            code: ExitCodes.InvalidUsage,
+        });
+    }
+    return { expMonth, expYear };
+}
+/**
+ * Reads `{ number, expMonth, expYear, cvc }` from stdin. Preferred over flags
+ * for the card number, which would otherwise sit in shell history and in
+ * `ps` output for every other process on the machine.
+ */
+export async function readCardFromStdin() {
+    const chunks = [];
+    for await (const chunk of process.stdin) {
+        chunks.push(Buffer.from(chunk));
+    }
+    const raw = Buffer.concat(chunks).toString("utf8").trim();
+    if (raw.length === 0) {
+        failWith("No card JSON received on stdin.", {
+            code: ExitCodes.InvalidUsage,
+        });
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch {
+        // Deliberately does not echo the input: it contains a card number.
+        failWith("Card JSON on stdin is not valid JSON.", {
+            code: ExitCodes.InvalidUsage,
+        });
+    }
+    if (parsed === null || typeof parsed !== "object") {
+        failWith("Card JSON on stdin must be an object.", {
+            code: ExitCodes.InvalidUsage,
+        });
+    }
+    const record = parsed;
+    const number = record["number"];
+    const expMonth = record["expMonth"];
+    const expYear = record["expYear"];
+    const cvc = record["cvc"];
+    if (typeof number !== "string" ||
+        typeof expMonth !== "number" ||
+        typeof expYear !== "number" ||
+        typeof cvc !== "string") {
+        failWith('Card JSON must be {"number": string, "expMonth": number, "expYear": number, "cvc": string}.', { code: ExitCodes.InvalidUsage });
+    }
+    return { number, expMonth, expYear, cvc };
+}

package/build/commands/runHandler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runHandler.d.ts","sourceRoot":"","sources":["../../src/commands/runHandler.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,SAAS;;;;;;;CAOZ,CAAC;AAEX,MAAM,MAAM,QAAQ,GAAG,CAAC,OAAO,SAAS,CAAC,CAAC,MAAM,OAAO,SAAS,CAAC,CAAC;AAclE,eAAO,MAAM,MAAM;aACR,MAAM,KAAG,MAAM;eACb,MAAM,KAAG,MAAM;gBACd,MAAM,KAAG,MAAM;cACjB,MAAM,KAAG,MAAM;aAChB,MAAM,KAAG,MAAM;cACd,MAAM,KAAG,MAAM;CAC1B,CAAC;AAEF,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI,CAM/C;AAED,wBAAgB,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAE1C;AAED,wBAAgB,OAAO,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAE7C;AAID,wBAAsB,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAUhE;AAED,KAAK,YAAY,GAAG;IAClB,IAAI,CAAC,EAAE,QAAQ,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjC,CAAC;AAEF,wBAAgB,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,YAAY,GAAG,KAAK,CAgCpE;AAKD,MAAM,MAAM,OAAO,GAAG;IAEpB,MAAM,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IAGlC,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5B,IAAI,EAAE,MAAM,IAAI,CAAC;CAClB,CAAC;AAIF,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAuBrD;AAkDD,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,GAAG,CAQhE;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAQ1E;AAED,wBAAgB,iBAAiB,CAAC,CAAC,EACjC,OAAO,EAAE,CAAC,EAAE,EACZ,KAAK,EAAE,MAAM,GACZ;IAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IAAC,YAAY,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CASxD;AAKD,KAAK,iBAAiB,GAAG;IACvB,OAAO,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC;IACzB;;;OAGG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC/B,CAAC;AAEF,wBAAsB,aAAa,CAAC,CAAC,EACnC,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EACpB,IAAI,CAAC,EAAE,iBAAiB,GACvB,OAAO,CAAC,CAAC,CAAC,CAqDZ;AAuED,wBAAgB,KAAK,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAE/C;AAgBD,wBAAsB,oBAAoB,CAAC,CAAC,EAC1C,SAAS,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EAC3B,SAAS,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,MAAM,EAChC,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,CAAC,CAAC,CASZ;AAED,wBAAsB,sBAAsB,CAAC,CAAC,EAC5C,SAAS,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EAC3B,SAAS,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,MAAM,EAChC,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,CAAC,CAAC,CASZ;AAED,wBAAsB,wBAAwB,CAAC,CAAC,EAC9C,SAAS,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EAC3B,aAAa,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,MAAM,GAAG,IAAI,GAAG,SAAS,EACvD,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,CAAC,CAAC,CAWZ"}
+{"version":3,"file":"runHandler.d.ts","sourceRoot":"","sources":["../../src/commands/runHandler.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,SAAS;;;;;;;CAOZ,CAAC;AAEX,MAAM,MAAM,QAAQ,GAAG,CAAC,OAAO,SAAS,CAAC,CAAC,MAAM,OAAO,SAAS,CAAC,CAAC;AAclE,eAAO,MAAM,MAAM;aACR,MAAM,KAAG,MAAM;eACb,MAAM,KAAG,MAAM;gBACd,MAAM,KAAG,MAAM;cACjB,MAAM,KAAG,MAAM;aAChB,MAAM,KAAG,MAAM;cACd,MAAM,KAAG,MAAM;CAC1B,CAAC;AAEF,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI,CAM/C;AAED,wBAAgB,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAE1C;AAED,wBAAgB,OAAO,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAE7C;AAID,wBAAsB,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAUhE;AAED,KAAK,YAAY,GAAG;IAClB,IAAI,CAAC,EAAE,QAAQ,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjC,CAAC;AAEF,wBAAgB,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,YAAY,GAAG,KAAK,CAgCpE;AAKD,MAAM,MAAM,OAAO,GAAG;IAEpB,MAAM,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IAGlC,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5B,IAAI,EAAE,MAAM,IAAI,CAAC;CAClB,CAAC;AAIF,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAuBrD;AAkDD,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,GAAG,CAQhE;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAQ1E;AAED,wBAAgB,iBAAiB,CAAC,CAAC,EACjC,OAAO,EAAE,CAAC,EAAE,EACZ,KAAK,EAAE,MAAM,GACZ;IAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IAAC,YAAY,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CASxD;AAKD,KAAK,iBAAiB,GAAG;IACvB,OAAO,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC;IACzB;;;OAGG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC/B,CAAC;AAEF,wBAAsB,aAAa,CAAC,CAAC,EACnC,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EACpB,IAAI,CAAC,EAAE,iBAAiB,GACvB,OAAO,CAAC,CAAC,CAAC,CAgEZ;AA0ED,wBAAgB,KAAK,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAE/C;AAgBD,wBAAsB,oBAAoB,CAAC,CAAC,EAC1C,SAAS,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EAC3B,SAAS,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,MAAM,EAChC,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,CAAC,CAAC,CASZ;AAED,wBAAsB,sBAAsB,CAAC,CAAC,EAC5C,SAAS,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EAC3B,SAAS,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,MAAM,EAChC,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,CAAC,CAAC,CASZ;AAED,wBAAsB,wBAAwB,CAAC,CAAC,EAC9C,SAAS,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EAC3B,aAAa,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,MAAM,GAAG,IAAI,GAAG,SAAS,EACvD,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,CAAC,CAAC,CAWZ"}

package/build/commands/runHandler.js

@@ -208,7 +208,14 @@ export async function handleApiCall(fn, opts) {
         if (determineIfIsFetcherError(error)) {
             const parsedError = error;
             const status = parsedError.status;
-            const body = parsedError.body !== undefined ? parsedError.body : String(error);
+            // The fetcher's error classes carry the parsed response as `data`;
+            // without it the body degrades to the error string and structured detail
+            // (a decline code, say) never reaches the caller.
+            const body = parsedError.data !== undefined
+                ? parsedError.data
+                : parsedError.body !== undefined
+                    ? parsedError.body
+                    : String(error);
             const { message, code } = describeApiError(status, body, opts !== undefined ? opts.notAuthenticatedHint : undefined);
             failWith(message, {
                 code,
@@ -265,6 +272,9 @@ function extractApiErrorDetail(body) {
     }
     if (body !== null && typeof body === "object") {
         const record = body;
+        if (typeof record["errorMessage"] === "string") {
+            return record["errorMessage"];
+        }
         if (typeof record["message"] === "string") {
             return record["message"];
         }

package/package.json

@@ -1,8 +1,12 @@
 {
   "name": "@cargo-ai/cli",
-  "version": "1.0.49",
+  "version": "1.0.51",
   "private": false,
   "license": "UNLICENSED",
+  "homepage": "https://getcargo.ai",
+  "bugs": {
+    "url": "https://github.com/getcargohq/cargo-skills/issues"
+  },
   "description": "GTM automation from your terminal or coding agent — build lead lists, enrich and verify contacts, run plays and workflows, query workspace data with SQL, and deploy a whole Cargo workspace as code.",
   "keywords": [
     "cargo",
@@ -55,7 +59,7 @@
     "format:check": "prettier --check ."
   },
   "dependencies": {
-    "@cargo-ai/api": "^1.0.58",
+    "@cargo-ai/api": "^1.0.59",
     "@cargo-ai/app-sdk": "^1.0.6",
     "@cargo-ai/cdk": "^1.0.43",
     "@cargo-ai/types": "^1.0.56",

package/build/commands/billing/addPaymentMethod.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"addPaymentMethod.d.ts","sourceRoot":"","sources":["../../../src/commands/billing/addPaymentMethod.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,OAAO,EAAE,MAAM,eAAe,CAAC;AAE7C,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAWxC,eAAO,MAAM,uBAAuB,MAAM,CAAC;AAC3C,eAAO,MAAM,6BAA6B,IAAI,CAAC;AAE/C,MAAM,MAAM,uBAAuB,GAAG;IACpC,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,OAAO,CAAC;CACf,CAAC;AAEF;;;;;;;;GAQG;AACH,wBAAsB,mBAAmB,CACvC,GAAG,EAAE,GAAG,EACR,IAAI,EAAE,uBAAuB,GAC5B,OAAO,CAAC,IAAI,CAAC,CAgDf;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,UAAU,GAAG,SAAS,GAAG,MAAM,CAW5E"}