@fargowealth/fargo-ai-cli 1.1.1 → 1.2.1

package/CHANGELOG.md

@@ -1,5 +1,24 @@
 # Changelog
 
+## 1.2.1
+
+- Clarified in `fargo lego deploy --help` that deployment preparation creates a
+  ready, unpublished deployment and that production publication is a separate
+  explicitly approved Fargo Pass MCP action.
+- Documented the 4,000-character release-note limit and replaced full-changelog
+  examples with a concise per-release notes file.
+- Documented that publication normally inherits the security-checked access
+  policy stored on the prepared deployment.
+
+## 1.2.0
+
+- Added `--login-required yes|no` to select the target company-account sign-in
+  policy while preparing a LEGO deployment.
+- Public Apps that switch to `yes` default to Collaborators and Owner only;
+  `no` prepares a public deployment without an access scope.
+- Included the target login policy in dry-run output and the immutable deployment
+  request so publication cannot drift from the security-checked bundle.
+
 ## 1.1.1
 
 - Fixed the runtime and OAuth `User-Agent` version so the published CLI reports

package/README.md

@@ -78,7 +78,7 @@ fargo lego deploy \
   --entrypoint index.html \
   --version 1.4.0 \
   --name "Navigation refresh" \
-  --notes-file CHANGELOG.md
+  --notes-file RELEASE_NOTES.md
 ```
 
 For Workers use `--target worker`; the default entrypoint becomes `index.js`.
@@ -101,11 +101,18 @@ fargo lego deploy \
   --assets-binding ASSETS \
   --assets-not-found-handling single-page-application \
   --assets-run-worker-first \
+  --login-required yes \
   --version 1.4.0 \
   --name "Full-stack release" \
-  --notes-file CHANGELOG.md
+  --notes-file RELEASE_NOTES.md
 ```
 
+Release notes are limited to 4,000 characters by both the CLI and hosted
+deployment service. Pass concise notes for one version with `--notes`, or keep
+them in a per-release file such as `RELEASE_NOTES.md`. Do not pass an entire
+multi-version changelog unless it is within the limit and intentionally belongs
+to the new release.
+
 Use repeated `--assets-run-worker-first-route <glob>` options instead of the
 boolean flag when only selected routes should invoke the Worker first. The
 hosted LEGO publisher uploads the assets and attaches the binding; Cloudflare
@@ -123,6 +130,12 @@ Run `fargo lego deploy --help` for the complete option list and a full-stack
 Worker example. A dry run reports the manifest schema version and separate
 Worker-module and Static Asset file counts.
 
+Use `--login-required no` to prepare a public deployment with no access scope.
+Use `--login-required yes` to require company-account sign-in; when the current
+App is public, the hosted deployment defaults its scope to Collaborators and
+Owner only. Company-wide and specific-member scopes remain available through
+the hosted MCP deployment contract.
+
 Pass `--source-exclude <gitignore-pattern>` once or multiple times when a
 release command must make additional source exclusions explicit. Secure
 defaults already exclude `node_modules/`, build output, credentials, and common
@@ -139,6 +152,18 @@ MCP deployment contract. The result is `ready`, never automatically published.
 Use `--dry-run` to validate both local packages without authentication or
 network writes.
 
+After reviewing the returned deployment and receiving explicit approval,
+publish that exact deployment through Fargo Pass MCP:
+
+```sh
+fargo mcp call lego_deployment_release --args \
+  '{"action":"publish","appId":"app_xxx","deploymentId":"dep_xxx"}'
+```
+
+Publication is a separate production write. The prepared deployment already
+contains its security-checked access policy, so callers normally do not need to
+repeat `visibility`, `loginRequired`, or `accessTargets` at publish time.
+
 Deployment artifacts preserve binary bytes and include
 `.fargo-deploy/manifest.json`. Default limits are 1,000 files, 25 MB total,
 20 MB per file, and a 25 MB ZIP.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fargowealth/fargo-ai-cli",
-  "version": "1.1.1",
+  "version": "1.2.1",
   "description": "Agent-neutral Fargo AI CLI, MCP client, and LEGO project tooling",
   "type": "module",
   "bin": {

package/src/cli.mjs

@@ -87,6 +87,7 @@ export async function runCli(args, options = {}) {
         deployDir,
         dryRun: args.includes("--dry-run"),
         entrypoint: optionValue(args, "--entrypoint"),
+        loginRequired: optionalYesNo(args, "--login-required"),
         releaseNotes,
         queueConsumer,
         skipSource: args.includes("--skip-source"),
@@ -156,7 +157,8 @@ Required:
   --target <pages|worker>       Deployment target
   --version <version>           Release version
   --name <name>                 Release name
-  --notes <text>                Release notes (or --notes-file <path>)
+  --notes <text>                One release's notes, maximum 4000 characters
+  --notes-file <path>           Read one release's notes from a file; same limit
 
 Source and execution:
   --source <directory>          Source snapshot root (default: .)
@@ -164,6 +166,8 @@ Source and execution:
   --entrypoint <path>           Default: index.html for Pages, index.js for Worker
   --skip-source                 Do not upload a source snapshot
   --dry-run                     Validate and summarize without network writes
+  --login-required <yes|no>     Target company-account sign-in policy; yes defaults
+                                the access scope to Collaborators and Owner only
 
 Worker Static Assets:
   --assets-dir <directory>      Built browser assets; required for Worker frontends
@@ -185,13 +189,18 @@ Worker Runtime Topology:
   --queue-max-concurrency <n>   Optional maximum concurrent consumers
   --queue-retry-delay <s>       Optional retry delay in seconds
 
+Result and publication:
+  This command creates a ready, unpublished deployment. Production traffic is
+  unchanged. After review and explicit approval, publish the returned deployment
+  with Fargo Pass MCP lego_deployment_release(action=publish).
+
 Example:
   fargo lego deploy --app app_xxx --source . \\
     --deploy-dir .build/worker --target worker --entrypoint index.js \\
     --assets-dir dist --assets-binding ASSETS \\
     --assets-not-found-handling single-page-application \\
     --assets-run-worker-first --version 1.4.0 --name "Full-stack release" \\
-    --notes-file CHANGELOG.md
+    --notes-file RELEASE_NOTES.md
 
 .fargo-assets/ is an internal archive directory reserved for Fargo CLI.
 Do not create or copy it manually; always pass browser output with --assets-dir.
@@ -265,6 +274,14 @@ function integerOption(args, optionName, propertyName) {
   return { [propertyName]: parsed };
 }
 
+function optionalYesNo(args, optionName) {
+  const value = optionValue(args, optionName)?.trim().toLowerCase();
+  if (value === undefined) return undefined;
+  if (value === "yes") return true;
+  if (value === "no") return false;
+  throw new Error(`${optionName} must be yes or no`);
+}
+
 function hasOption(args, name) {
   return args.some((value) => value === name || value.startsWith(`${name}=`));
 }

package/src/constants.mjs

@@ -1,4 +1,4 @@
-export const CLI_VERSION = "1.1.1";
+export const CLI_VERSION = "1.2.1";
 export const DEVICE_CODE_GRANT_TYPE = "urn:ietf:params:oauth:grant-type:device_code";
 export const DEFAULT_AUTH_URL = "https://auth.fargowealth.app";
 export const DEFAULT_API_URL = "https://mcp.fargowealth.app";

package/src/lego-deploy.mjs

@@ -34,6 +34,7 @@ export async function deployLocalLegoApp(store, input, options = {}) {
     return {
       dryRun: true,
       release: {
+        loginRequired: input.loginRequired,
         notes: input.releaseNotes,
         version: input.version,
         versionName: input.versionName
@@ -69,6 +70,7 @@ export async function deployLocalLegoApp(store, input, options = {}) {
     ...(input.cronSchedules?.length ? { cronSchedules: input.cronSchedules } : {}),
     deployArtifactId,
     entrypoint: artifact.entrypoint,
+    ...(input.loginRequired === undefined ? {} : { loginRequired: input.loginRequired }),
     releaseNotes: input.releaseNotes,
     ...(input.queueConsumer ? { queueConsumer: input.queueConsumer } : {}),
     version: input.version,