@fargowealth/fargo-ai-cli 1.1.0 → 1.2.0

package/CHANGELOG.md

@@ -1,5 +1,21 @@
 # Changelog
 
+## 1.2.0
+
+- Added `--login-required yes|no` to select the target company-account sign-in
+  policy while preparing a LEGO deployment.
+- Public Apps that switch to `yes` default to Collaborators and Owner only;
+  `no` prepares a public deployment without an access scope.
+- Included the target login policy in dry-run output and the immutable deployment
+  request so publication cannot drift from the security-checked bundle.
+
+## 1.1.1
+
+- Fixed the runtime and OAuth `User-Agent` version so the published CLI reports
+  the same version as its npm package metadata and passes Fargo Pass 1.1 compatibility checks.
+- Added a release gate that prevents the executable version constant from drifting
+  behind the package version again.
+
 ## 1.1.0
 
 - Added Worker Cron Trigger and Queue Consumer deployment options, including

package/README.md

@@ -101,6 +101,7 @@ fargo lego deploy \
   --assets-binding ASSETS \
   --assets-not-found-handling single-page-application \
   --assets-run-worker-first \
+  --login-required yes \
   --version 1.4.0 \
   --name "Full-stack release" \
   --notes-file CHANGELOG.md
@@ -123,6 +124,12 @@ Run `fargo lego deploy --help` for the complete option list and a full-stack
 Worker example. A dry run reports the manifest schema version and separate
 Worker-module and Static Asset file counts.
 
+Use `--login-required no` to prepare a public deployment with no access scope.
+Use `--login-required yes` to require company-account sign-in; when the current
+App is public, the hosted deployment defaults its scope to Collaborators and
+Owner only. Company-wide and specific-member scopes remain available through
+the hosted MCP deployment contract.
+
 Pass `--source-exclude <gitignore-pattern>` once or multiple times when a
 release command must make additional source exclusions explicit. Secure
 defaults already exclude `node_modules/`, build output, credentials, and common

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fargowealth/fargo-ai-cli",
-  "version": "1.1.0",
+  "version": "1.2.0",
   "description": "Agent-neutral Fargo AI CLI, MCP client, and LEGO project tooling",
   "type": "module",
   "bin": {

package/src/cli.mjs

@@ -87,6 +87,7 @@ export async function runCli(args, options = {}) {
         deployDir,
         dryRun: args.includes("--dry-run"),
         entrypoint: optionValue(args, "--entrypoint"),
+        loginRequired: optionalYesNo(args, "--login-required"),
         releaseNotes,
         queueConsumer,
         skipSource: args.includes("--skip-source"),
@@ -164,6 +165,8 @@ Source and execution:
   --entrypoint <path>           Default: index.html for Pages, index.js for Worker
   --skip-source                 Do not upload a source snapshot
   --dry-run                     Validate and summarize without network writes
+  --login-required <yes|no>     Target company-account sign-in policy; yes defaults
+                                the access scope to Collaborators and Owner only
 
 Worker Static Assets:
   --assets-dir <directory>      Built browser assets; required for Worker frontends
@@ -265,6 +268,14 @@ function integerOption(args, optionName, propertyName) {
   return { [propertyName]: parsed };
 }
 
+function optionalYesNo(args, optionName) {
+  const value = optionValue(args, optionName)?.trim().toLowerCase();
+  if (value === undefined) return undefined;
+  if (value === "yes") return true;
+  if (value === "no") return false;
+  throw new Error(`${optionName} must be yes or no`);
+}
+
 function hasOption(args, name) {
   return args.some((value) => value === name || value.startsWith(`${name}=`));
 }

package/src/constants.mjs

@@ -1,4 +1,4 @@
-export const CLI_VERSION = "1.0.0";
+export const CLI_VERSION = "1.2.0";
 export const DEVICE_CODE_GRANT_TYPE = "urn:ietf:params:oauth:grant-type:device_code";
 export const DEFAULT_AUTH_URL = "https://auth.fargowealth.app";
 export const DEFAULT_API_URL = "https://mcp.fargowealth.app";

package/src/lego-deploy.mjs

@@ -34,6 +34,7 @@ export async function deployLocalLegoApp(store, input, options = {}) {
     return {
       dryRun: true,
       release: {
+        loginRequired: input.loginRequired,
         notes: input.releaseNotes,
         version: input.version,
         versionName: input.versionName
@@ -69,6 +70,7 @@ export async function deployLocalLegoApp(store, input, options = {}) {
     ...(input.cronSchedules?.length ? { cronSchedules: input.cronSchedules } : {}),
     deployArtifactId,
     entrypoint: artifact.entrypoint,
+    ...(input.loginRequired === undefined ? {} : { loginRequired: input.loginRequired }),
     releaseNotes: input.releaseNotes,
     ...(input.queueConsumer ? { queueConsumer: input.queueConsumer } : {}),
     version: input.version,