@fargowealth/fargo-ai-cli 1.2.1 → 1.4.0

package/CHANGELOG.md

@@ -1,14 +1,24 @@
 # Changelog
 
-## 1.2.1
-
-- Clarified in `fargo lego deploy --help` that deployment preparation creates a
-  ready, unpublished deployment and that production publication is a separate
-  explicitly approved Fargo Pass MCP action.
-- Documented the 4,000-character release-note limit and replaced full-changelog
-  examples with a concise per-release notes file.
-- Documented that publication normally inherits the security-checked access
-  policy stored on the prepared deployment.
+## 1.4.0
+
+- Allow Website Connector operations to select an explicit text response mode
+  for upstream endpoints whose Content-Type does not match their response body.
+- Capture allowlisted localStorage from single-page apps once their DOM is
+  interactive, without waiting indefinitely for `document.readyState=complete`.
+- Add `fargo website runtime` and a local execution mode for Connector
+  development with `fargo website call --mode local --file <definition>`.
+- Use the same versioned `@fargowealth/website-connector-runtime` implementation
+  in Fargo CLI and Browser Gateway, including required-capability negotiation.
+
+## 1.3.0
+
+- Add `fargo website connect` and `fargo website sync` with an isolated local
+  Chrome Profile and allowlisted CDP capture.
+- Negotiate one-time Profile import capabilities through Website Bridge MCP,
+  then upload browser state directly to the Website Bridge data endpoint.
+- Keep raw Cookie/localStorage and upload secrets out of MCP parameters,
+  command output, and the Fargo credential store.
 
 ## 1.2.0
 

package/README.md

@@ -47,6 +47,53 @@ fargo mcp call lego_app_read --args '{"action":"get","appId":"app_xxx"}'
 fargo mcp call lego_app_read --args-file ./arguments.json
 ```
 
+## Website Connectors
+
+`fargo website` is the authoring and control surface for cloud-hosted Website
+Connectors. Connector definitions and immutable releases are stored by Fargo
+Website Bridge; per-user Cookie/localStorage remains encrypted in BrowserGateway
+and is never written to the CLI credential store or emitted as a JSON file. The
+CLI keeps a dedicated local Chrome Profile so the user can log in locally and
+synchronize later; that Profile is isolated from the user's normal Chrome data.
+
+```sh
+fargo website validate --file connector.json
+fargo website runtime
+fargo website release --file connector.json --expected-revision 0 --confirm
+fargo website list
+fargo website operations --connector earningshub
+fargo website connect --connector earningshub
+fargo website sync --connector earningshub
+fargo website sync --connector earningshub --no-prompt --settle-ms 5000
+fargo website connection-status --connector earningshub
+fargo website call --connector earningshub --operation get_symbol --args '{"symbol":"AMZN"}'
+fargo website call --mode local --file connector.json --operation get_symbol --args '{"symbol":"AMZN"}'
+fargo website binding
+```
+
+`connect` opens the Connector login URL in a Fargo-owned local Chrome Profile.
+After login, the CLI captures only the Connector-declared Cookie and
+localStorage selectors. MCP negotiates a five-minute, single-use upload
+capability using SHA-256 digests; the Profile body then goes directly to
+`https://website-bridge.fargowealth.app` and never crosses the central MCP.
+`sync` reopens the same local Profile and uses optimistic Profile-version
+protection before replacing the encrypted cloud state. `--no-prompt` is for a
+Profile that is already authenticated.
+
+Connector operations remain brokered through App MCP `website-bridge`, so the
+same operations are available to Codex, WorkBuddy, other Agents, and Teammates.
+V1 releases are owner-private. A Teammate binding delegates the invoking user's
+identity and contains neither a `connectionId` nor website credentials. The old
+`authorize` / `authorize-complete` Cloud Live View commands remain an optional
+fallback, not the primary connection path.
+
+For V3 development, `--mode local` opens the isolated local Profile and executes
+the definition with the same `@fargowealth/website-connector-runtime` package
+used by Browser Gateway. Local mode never uploads its captured Profile. Remote
+mode remains the default and authoritative path for production Agents and
+Teammates. `fargo website runtime` prints the local Runtime version and supported
+capabilities so Connector requirements can be checked before execution.
+
 ## LEGO source snapshots
 
 ```sh
@@ -78,7 +125,7 @@ fargo lego deploy \
   --entrypoint index.html \
   --version 1.4.0 \
   --name "Navigation refresh" \
-  --notes-file RELEASE_NOTES.md
+  --notes-file CHANGELOG.md
 ```
 
 For Workers use `--target worker`; the default entrypoint becomes `index.js`.
@@ -104,15 +151,9 @@ fargo lego deploy \
   --login-required yes \
   --version 1.4.0 \
   --name "Full-stack release" \
-  --notes-file RELEASE_NOTES.md
+  --notes-file CHANGELOG.md
 ```
 
-Release notes are limited to 4,000 characters by both the CLI and hosted
-deployment service. Pass concise notes for one version with `--notes`, or keep
-them in a per-release file such as `RELEASE_NOTES.md`. Do not pass an entire
-multi-version changelog unless it is within the limit and intentionally belongs
-to the new release.
-
 Use repeated `--assets-run-worker-first-route <glob>` options instead of the
 boolean flag when only selected routes should invoke the Worker first. The
 hosted LEGO publisher uploads the assets and attaches the binding; Cloudflare
@@ -152,18 +193,6 @@ MCP deployment contract. The result is `ready`, never automatically published.
 Use `--dry-run` to validate both local packages without authentication or
 network writes.
 
-After reviewing the returned deployment and receiving explicit approval,
-publish that exact deployment through Fargo Pass MCP:
-
-```sh
-fargo mcp call lego_deployment_release --args \
-  '{"action":"publish","appId":"app_xxx","deploymentId":"dep_xxx"}'
-```
-
-Publication is a separate production write. The prepared deployment already
-contains its security-checked access policy, so callers normally do not need to
-repeat `visibility`, `loginRequired`, or `accessTargets` at publish time.
-
 Deployment artifacts preserve binary bytes and include
 `.fargo-deploy/manifest.json`. Default limits are 1,000 files, 25 MB total,
 20 MB per file, and a 25 MB ZIP.

package/node_modules/@fargowealth/website-connector-runtime/README.md

@@ -0,0 +1,8 @@
+# Fargo Website Connector Runtime
+
+The shared, declarative Website Connector compiler and execution runtime used
+by both Fargo CLI local debugging and the Fargo Browser Gateway.
+
+Connector definitions contain data only. They cannot ship executable code.
+Callers provide browser storage at execution time; the runtime never persists
+cookies or localStorage.

package/node_modules/@fargowealth/website-connector-runtime/package.json

@@ -0,0 +1,24 @@
+{
+  "name": "@fargowealth/website-connector-runtime",
+  "version": "1.0.0",
+  "description": "Shared declarative Website Connector runtime for Fargo AI",
+  "type": "module",
+  "exports": {
+    ".": {
+      "types": "./src/index.d.mts",
+      "import": "./src/index.mjs"
+    }
+  },
+  "files": [
+    "src",
+    "README.md"
+  ],
+  "engines": {
+    "node": ">=20.19.0"
+  },
+  "private": true,
+  "scripts": {
+    "test": "node --test test/*.test.mjs"
+  },
+  "license": "UNLICENSED"
+}

package/node_modules/@fargowealth/website-connector-runtime/src/index.d.mts

@@ -0,0 +1,116 @@
+export type WebsiteConnectorInputSchema = {
+  additionalProperties: false;
+  properties: Record<string, {
+    enum?: Array<string | number | boolean>;
+    maxLength?: number;
+    type: "string" | "number" | "integer" | "boolean";
+  }>;
+  required: string[];
+  type: "object";
+};
+
+export type WebsiteConnectorAuth =
+  | { kind: "none" }
+  | {
+      kind: "browser_storage";
+      sendCookies: boolean;
+      headerSources: Array<{ keySuffix: string; name: string; origin: string; prefix?: string }>;
+    };
+
+export type WebsiteConnectorOperation = {
+  operationId: string;
+  description: string;
+  readOnly: boolean;
+  requiresConnection: boolean;
+  riskLevel: "low" | "medium" | "high" | "critical";
+  inputSchema: WebsiteConnectorInputSchema;
+  request: {
+    origin: string;
+    method: "GET" | "POST" | "PUT" | "PATCH" | "DELETE";
+    path: string;
+    query: Record<string, string>;
+    headers: Record<string, string>;
+    responseMode: "auto" | "json" | "text";
+    body?: unknown;
+  };
+};
+
+export type WebsiteConnectorDefinition = {
+  schemaVersion: "fargo.website-connector/v1";
+  connectorId: string;
+  displayName: string;
+  allowedOrigins: string[];
+  loginUrl?: string;
+  runtime?: {
+    minimumVersion: string;
+    requiredCapabilities: string[];
+  };
+  auth: WebsiteConnectorAuth;
+  operations: WebsiteConnectorOperation[];
+};
+
+export type WebsiteConnectorBrowserStorageState = {
+  cookies: Array<{
+    domain: string;
+    expires?: number;
+    httpOnly?: boolean;
+    name: string;
+    path: string;
+    sameSite?: "Strict" | "Lax" | "None";
+    secure?: boolean;
+    value: string;
+  }>;
+  origins: Array<{
+    localStorage: Array<{ name: string; value: string }>;
+    origin: string;
+  }>;
+};
+
+export type WebsiteConnectorRuntimeDescriptor = {
+  capabilities: string[];
+  runtimeVersion: string;
+};
+
+export const WEBSITE_CONNECTOR_SCHEMA_VERSION: "fargo.website-connector/v1";
+export const WEBSITE_CONNECTOR_RUNTIME_VERSION: "1.0.0";
+export const WEBSITE_CONNECTOR_RUNTIME_CAPABILITIES: readonly string[];
+export class WebsiteConnectorDefinitionError extends Error {
+  code: string;
+  path: string;
+}
+export class WebsiteConnectorRuntimeError extends Error {
+  code: string;
+  details?: Record<string, unknown>;
+  status: number;
+}
+export function parseWebsiteConnectorDefinition(value: unknown): WebsiteConnectorDefinition;
+export function connectorToolName(connectorId: string, operationId: string): string;
+export function renderWebsiteOperation(definition: unknown, operationId: string, rawArguments: unknown): {
+  definition: WebsiteConnectorDefinition;
+  operation: WebsiteConnectorOperation;
+  request: { body?: unknown; headers: Record<string, string>; method: string; responseMode: "auto" | "json" | "text"; url: string };
+};
+export function websiteConnectorRuntimeDescriptor(): WebsiteConnectorRuntimeDescriptor;
+export function requiredWebsiteConnectorCapabilities(definition: unknown): string[];
+export function assertWebsiteConnectorRuntimeCompatibility(
+  definition: unknown,
+  descriptor?: WebsiteConnectorRuntimeDescriptor
+): { definition: WebsiteConnectorDefinition; descriptor: WebsiteConnectorRuntimeDescriptor };
+export function executeWebsiteConnectorOperation(
+  definition: unknown,
+  operationId: string,
+  args: unknown,
+  options?: {
+    fetchImpl?: typeof fetch;
+    readOnlyOnly?: boolean;
+    runtimeDescriptor?: WebsiteConnectorRuntimeDescriptor;
+    storageState?: WebsiteConnectorBrowserStorageState;
+    timeoutMs?: number;
+  }
+): Promise<unknown>;
+export function browserStorageAuthenticated(
+  state: WebsiteConnectorBrowserStorageState,
+  auth: WebsiteConnectorAuth,
+  now?: number
+): boolean;
+export function sanitizeWebsiteConnectorOutput(value: unknown, storageState: WebsiteConnectorBrowserStorageState): unknown;