@cargo-ai/cli 1.0.88 → 1.0.90

package/README.md

@@ -207,7 +207,7 @@ Other release verbs (`list`, `get <uuid>`, `get-deployed`, `get-draft`, `update-
 **Let your agent install everything.** Paste this into Claude Code, Codex, or Cursor and it handles the CLI, sign-in, and skills for its own platform:
 
 ```
-Install Cargo by following every step in https://api.getcargo.io/agent-install.txt
+Install Cargo by following https://api.getcargo.io/INSTALL.md
 ```
 
 **Or install manually.** As a plugin (Claude Code, Codex, Cursor — bundles the skills plus approval and session hooks):

package/build/commands/ask/localHarness.js

@@ -86,8 +86,8 @@ The user confirms each Bash, Write, Edit and NotebookEdit call, and can only ans
 
 Prefer minimal, focused diffs; match the existing code style; run the project's own checks when they exist. End each task with a short summary of what changed and how it was validated.`;
 const CDK_RAILS_INSTRUCTIONS = `This directory is a Cargo CDK project.
-- Never edit cargo.state.json, cargo.state.lock, or .cargo-ai/ by hand — they are generated.
-- Validate your changes before declaring them done: run \`npx tsc --noEmit\` and \`npx cargo-cdk plan\` (plan is offline and safe).
+- Never edit cargo.state.json, cargo.state.lock, or .cargo-ai/ by hand — they are generated. Repoint this project's deploy state with \`cargo-cdk state bind\`.
+- Validate your changes before declaring them done: run \`npx tsc --noEmit\` and \`npx cargo-cdk plan\` (plan only reads — it changes nothing).
 - Never run \`cargo-cdk deploy\`, \`destroy\`, \`import\`, or \`rollback\` unless the user explicitly asked.`;
 const LOCAL_CDK_RAILS_SKILL = {
     name: "cdk-rails",

package/build/commands/ask/messageStream.js

@@ -25,7 +25,7 @@ export async function* streamMessageTextDeltas(input) {
     }
     const body = {
         chatUuid: input.chatUuid,
-        chatTrigger: { type: "app" },
+        chatTrigger: { type: "cli" },
         uuid: input.messageUuid,
         parts: input.parts,
     };

package/build/commands/ask/session.js

@@ -121,7 +121,7 @@ async function ensureChat(input) {
     }
     await handleApiCall(() => input.api.ai.chat.create({
         uuid: input.chatUuid,
-        trigger: { type: "app" },
+        trigger: { type: "cli" },
         agentUuid: input.agentUuid,
     }), { spinner: false });
 }

package/build/commands/auth/workspace.js

@@ -62,7 +62,7 @@ export async function resolveWorkspace(opts) {
     }
     const promptInput = openPromptInput();
     if (promptInput === undefined) {
-        failWith("Multiple workspaces available and no interactive terminal; pass --workspace-uuid <uuid> (or set CARGO_WORKSPACE_UUID when using install.sh) to select one.", { code: ExitCodes.InvalidUsage });
+        failWith("Multiple workspaces available and no interactive terminal; pass --workspace-uuid <uuid> (or set CARGO_WORKSPACE_UUID) to select one.", { code: ExitCodes.InvalidUsage });
     }
     let selectedWorkspace;
     try {

package/build/commands/workspaceManagement/envVar.d.ts

@@ -0,0 +1,4 @@
+import type { Command } from "commander";
+import type { Api } from "../../api.js";
+export declare function registerEnvVarCommands(parent: Command, getApi: () => Api): void;
+//# sourceMappingURL=envVar.d.ts.map

package/build/commands/workspaceManagement/envVar.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"envVar.d.ts","sourceRoot":"","sources":["../../../src/commands/workspaceManagement/envVar.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEzC,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAGxC,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,OAAO,EACf,MAAM,EAAE,MAAM,GAAG,GAChB,IAAI,CAmFN"}

package/build/commands/workspaceManagement/envVar.js

@@ -0,0 +1,71 @@
+import { handleApiCall, outputJson } from "../runHandler.js";
+export function registerEnvVarCommands(parent, getApi) {
+    const envVar = parent
+        .command("envVar")
+        .description("Workspace environment variables, injected into every worker, app and agent");
+    envVar
+        .command("list")
+        .description("List all workspace environment variables")
+        .action(async () => {
+        const api = getApi();
+        const result = await handleApiCall(() => api.workspaceManagement.envVar.all());
+        outputJson(result);
+    });
+    envVar
+        .command("create")
+        .description("Create a workspace environment variable")
+        .requiredOption("--key <key>", "Environment variable name")
+        .option("--value <value>", "Value. Omit to read it from the environment variable of the same name")
+        .option("--secret", "Encrypt the value at rest and never return it")
+        .option("--description <description>", "What this variable is for")
+        .action(async (opts) => {
+        const api = getApi();
+        const value = resolveValue(opts.key, opts.value);
+        const result = await handleApiCall(() => api.workspaceManagement.envVar.create({
+            key: opts.key,
+            value,
+            isSecret: opts.secret === true,
+            description: opts.description === undefined ? null : opts.description,
+        }));
+        outputJson(result);
+    });
+    envVar
+        .command("update <uuid>")
+        .description("Update a workspace environment variable")
+        .option("--value <value>", "New value. Omit to keep the stored one")
+        .option("--secret", "Encrypt the value at rest and never return it")
+        .option("--no-secret", "Store the value in plain text")
+        .option("--description <description>", "What this variable is for")
+        .action(async (uuid, opts) => {
+        const api = getApi();
+        const result = await handleApiCall(() => api.workspaceManagement.envVar.update({
+            uuid,
+            value: opts.value,
+            isSecret: opts.secret,
+            description: opts.description,
+        }));
+        outputJson(result);
+    });
+    envVar
+        .command("remove <uuid>")
+        .description("Remove a workspace environment variable")
+        .action(async (uuid) => {
+        const api = getApi();
+        await handleApiCall(() => api.workspaceManagement.envVar.remove(uuid));
+        outputJson({ ok: true });
+    });
+}
+/**
+ * Falling back to the local environment keeps a secret out of argv (and out of
+ * the shell history), which is the whole point of `envVar create --secret`.
+ */
+const resolveValue = (key, value) => {
+    if (value !== undefined) {
+        return value;
+    }
+    const fromEnvironment = process.env[key];
+    if (fromEnvironment === undefined) {
+        throw new Error(`no value given — pass --value, or export ${key} before running this command.`);
+    }
+    return fromEnvironment;
+};

package/build/commands/workspaceManagement/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/commands/workspaceManagement/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEzC,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAUxC,wBAAgB,mCAAmC,CACjD,MAAM,EAAE,OAAO,EACf,MAAM,EAAE,MAAM,GAAG,GAChB,IAAI,CAeN"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/commands/workspaceManagement/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEzC,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAWxC,wBAAgB,mCAAmC,CACjD,MAAM,EAAE,OAAO,EACf,MAAM,EAAE,MAAM,GAAG,GAChB,IAAI,CAgBN"}

package/build/commands/workspaceManagement/index.js

@@ -1,3 +1,4 @@
+import { registerEnvVarCommands } from "./envVar.js";
 import { registerFileCommands } from "./file.js";
 import { registerFolderCommands } from "./folder.js";
 import { registerReportCommands } from "./report.js";
@@ -9,10 +10,11 @@ import { registerWorkspacesCommands } from "./workspaces.js";
 export function registerWorkspaceManagementCommands(parent, getApi) {
     const workspaceManagement = parent
         .command("workspaceManagement")
-        .description("Workspaces, users, tokens, roles, folders, reports, sessions");
+        .description("Workspaces, users, tokens, environment variables, roles, folders, reports, sessions");
     registerWorkspacesCommands(workspaceManagement, getApi);
     registerUserCommands(workspaceManagement, getApi);
     registerTokenCommands(workspaceManagement, getApi);
+    registerEnvVarCommands(workspaceManagement, getApi);
     registerRoleCommands(workspaceManagement, getApi);
     registerFolderCommands(workspaceManagement, getApi);
     registerFileCommands(workspaceManagement, getApi);

package/build/utils/cdkState.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cdkState.d.ts","sourceRoot":"","sources":["../../src/utils/cdkState.ts"],"names":[],"mappings":"AAoBA,wBAAgB,oBAAoB,CAAC,GAAG,EAAE;IAAE,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,OAAO,CASxE;AAED;;;;;;;;GAQG;AACH,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,GACd,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,OAAO,CAAA;CAAE,CAAC,CAyBtD;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAOrD;AAaD;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,OAAO,EACd,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,GACd,OAAO,CAuCT"}
+{"version":3,"file":"cdkState.d.ts","sourceRoot":"","sources":["../../src/utils/cdkState.ts"],"names":[],"mappings":"AAoBA,wBAAgB,oBAAoB,CAAC,GAAG,EAAE;IAAE,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,OAAO,CASxE;AAED;;;;;;;;GAQG;AACH,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,GACd,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,OAAO,CAAA;CAAE,CAAC,CAyBtD;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAOrD;AAaD;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,OAAO,EACd,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,GACd,OAAO,CA2CT"}

package/build/utils/cdkState.js

@@ -3,11 +3,11 @@
 // test-run it against ALREADY-DEPLOYED resources. Both need the same two things:
 // peel the tsx interop layer off a module's default export, and resolve any
 // `@cargo-ai/cdk` handle tokens the module references to their real uuids from
-// the committed cargo.state.json — without deploying the module itself.
+// this project's deploy state — without deploying the module itself.
 import { existsSync } from "node:fs";
 import { dirname, isAbsolute, join, resolve } from "node:path";
 import { pathToFileURL } from "node:url";
-import { dependenciesOf, readState, resolveTokens } from "@cargo-ai/cdk";
+import { dependenciesOf, readStateOffline, resolveTokens } from "@cargo-ai/cdk";
 import { cdkProjectDir, cdkProjectRoot } from "@cargo-ai/cdk/cli";
 import { ExitCodes, failWith } from "../commands/runHandler.js";
 // Peel the extra interop layer tsx adds when a TS source is transpiled to CJS:
@@ -104,7 +104,11 @@ export function resolveTokensFromState(value, file, subject) {
             "`cargo-ai cdk deploy`, or reference them by literal uuid " +
             "(toolRef / agentRef / connectorRef).", { code: ExitCodes.NotFound });
     }
-    const state = readState(stateRoot);
+    // A project whose state lives in the workspace has a pointer here, not a
+    // resource map, so the cache the last plan or deploy left behind is what
+    // answers this offline. Resolving a handle is a read of what is already
+    // deployed — worth a stale answer, not worth a round trip on every run.
+    const state = readStateOffline(stateRoot);
     const outputs = new Map();
     if (state !== undefined) {
         for (const [id, entry] of Object.entries(state.resources)) {
@@ -114,7 +118,7 @@ export function resolveTokensFromState(value, file, subject) {
     const missing = [...deps].filter((id) => !outputs.has(id));
     if (missing.length > 0) {
         failWith(`${String(missing.length)} resource(s) referenced by ${subject} ` +
-            `aren't in cargo.state.json yet: ${missing.join(", ")}. A test run ` +
+            `aren't in this project's deploy state yet: ${missing.join(", ")}. A test run ` +
             "resolves existing (already-deployed) resources from state — it won't " +
             "create new ones. Deploy them first with `cargo-ai cdk deploy`, or " +
             "reference them by literal uuid (toolRef / agentRef / connectorRef).", { code: ExitCodes.NotFound });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cargo-ai/cli",
-  "version": "1.0.88",
+  "version": "1.0.90",
   "private": false,
   "license": "UNLICENSED",
   "homepage": "https://getcargo.ai",
@@ -67,10 +67,10 @@
   "dependencies": {
     "@ai-sdk/harness": "^1.0.95",
     "@ai-sdk/harness-claude-code": "^1.0.99",
-    "@cargo-ai/api": "^1.0.76",
+    "@cargo-ai/api": "^1.0.78",
     "@cargo-ai/app-sdk": "^1.0.10",
-    "@cargo-ai/cdk": "^1.0.71",
-    "@cargo-ai/types": "^1.0.73",
+    "@cargo-ai/cdk": "^1.0.73",
+    "@cargo-ai/types": "^1.0.75",
     "@cargo-ai/utils": "^1.0.28",
     "@cargo-ai/worker-sdk": "^1.0.17",
     "@modelcontextprotocol/sdk": "1.29.0",