@fargowealth/fargo-ai-cli 1.4.1 → 1.4.2

package/CHANGELOG.md

@@ -1,5 +1,10 @@
 # Changelog
 
+## 1.4.2
+
+- Add generic large-file upload to Media and R2 resources with resumable TUS and optional local FFmpeg compression.
+- Remove the obsolete Website Connector commands and bundled runtime.
+
 ## 1.4.1
 
 - Capture Connector-declared refresh-only localStorage values without exposing

package/README.md

@@ -47,60 +47,23 @@ fargo mcp call lego_app_read --args '{"action":"get","appId":"app_xxx"}'
 fargo mcp call lego_app_read --args-file ./arguments.json
 ```
 
-## Website Connectors
+## Large-file transfer
 
-`fargo website` is the authoring and control surface for cloud-hosted Website
-Connectors. Connector definitions and immutable releases are stored by Fargo
-Website Bridge; per-user Cookie/localStorage remains encrypted in BrowserGateway
-and is never written to the CLI credential store or emitted as a JSON file. The
-CLI keeps a dedicated local Chrome Profile so the user can log in locally and
-synchronize later; that Profile is isolated from the user's normal Chrome data.
+`fargo upload` transfers a local file using an upload descriptor supplied by
+the target Media or R2 resource. The descriptor contains the resource's
+upload URL and, when needed, preparation and completion actions. Keep it
+private because it may contain short-lived upload credentials.
 
 ```sh
-fargo website validate --file connector.json
-fargo website runtime
-fargo website release --file connector.json --expected-revision 0 --confirm
-fargo website list
-fargo website operations --connector earningshub
-fargo website connect --connector earningshub
-fargo website sync --connector earningshub
-fargo website sync --connector earningshub --no-prompt --settle-ms 5000
-fargo website connection-status --connector earningshub
-fargo website call --connector earningshub --operation get_symbol --args '{"symbol":"AMZN"}'
-fargo website call --mode local --file connector.json --operation get_symbol --args '{"symbol":"AMZN"}'
-fargo website binding
+fargo upload --file ./video.mov --request-file ./upload-request.json
+fargo upload --file ./video.mov --request-file ./upload-request.json --compress
+fargo upload --resume /path/to/checkpoint.json
 ```
 
-`connect` opens the Connector login URL in a Fargo-owned local Chrome Profile.
-After login, the CLI captures only the Connector-declared Cookie and
-localStorage selectors. MCP negotiates a five-minute, single-use upload
-capability using SHA-256 digests; the Profile body then goes directly to
-`https://website-bridge.fargowealth.app` and never crosses the central MCP.
-`sync` reopens the same local Profile and uses optimistic Profile-version
-protection before replacing the encrypted cloud state. `--no-prompt` is for a
-Profile that is already authenticated.
-
-Connectors can declare refresh-only storage selectors separately from request
-headers. For AWS Cognito, Browser Gateway exchanges the encrypted Refresh Token
-for new ID/access tokens before expiry, saves any rotated Refresh Token inside
-the same connection-scoped Durable Object, and only then continues the website
-operation. Refresh Tokens never enter MCP arguments, command output, or normal
-website requests. `sync` is required again only after Cognito rejects or revokes
-the Refresh Token.
-
-Connector operations remain brokered through App MCP `website-bridge`, so the
-same operations are available to Codex, WorkBuddy, other Agents, and Teammates.
-V1 releases are owner-private. A Teammate binding delegates the invoking user's
-identity and contains neither a `connectionId` nor website credentials. The old
-`authorize` / `authorize-complete` Cloud Live View commands remain an optional
-fallback, not the primary connection path.
-
-For V3 development, `--mode local` opens the isolated local Profile and executes
-the definition with the same `@fargowealth/website-connector-runtime` package
-used by Browser Gateway. Local mode never uploads its captured Profile. Remote
-mode remains the default and authoritative path for production Agents and
-Teammates. `fargo website runtime` prints the local Runtime version and supported
-capabilities so Connector requirements can be checked before execution.
+Media uploads support resumable TUS or direct multipart transfer; R2 uploads
+use a signed PUT URL. `--compress` uses a locally installed FFmpeg. For a TUS
+transfer, the CLI prints a private checkpoint path that can resume an interrupted
+upload. Run `fargo upload --help` for the complete options.
 
 ## LEGO source snapshots
 
@@ -133,7 +96,7 @@ fargo lego deploy \
   --entrypoint index.html \
   --version 1.4.0 \
   --name "Navigation refresh" \
-  --notes-file CHANGELOG.md
+  --notes-file RELEASE_NOTES.md
 ```
 
 For Workers use `--target worker`; the default entrypoint becomes `index.js`.
@@ -159,9 +122,15 @@ fargo lego deploy \
   --login-required yes \
   --version 1.4.0 \
   --name "Full-stack release" \
-  --notes-file CHANGELOG.md
+  --notes-file RELEASE_NOTES.md
 ```
 
+Release notes are limited to 4,000 characters by both the CLI and hosted
+deployment service. Pass concise notes for one version with `--notes`, or keep
+them in a per-release file such as `RELEASE_NOTES.md`. Do not pass an entire
+multi-version changelog unless it is within the limit and intentionally belongs
+to the new release.
+
 Use repeated `--assets-run-worker-first-route <glob>` options instead of the
 boolean flag when only selected routes should invoke the Worker first. The
 hosted LEGO publisher uploads the assets and attaches the binding; Cloudflare
@@ -201,6 +170,18 @@ MCP deployment contract. The result is `ready`, never automatically published.
 Use `--dry-run` to validate both local packages without authentication or
 network writes.
 
+After reviewing the returned deployment and receiving explicit approval,
+publish that exact deployment through Fargo Pass MCP:
+
+```sh
+fargo mcp call lego_deployment_release --args \
+  '{"action":"publish","appId":"app_xxx","deploymentId":"dep_xxx"}'
+```
+
+Publication is a separate production write. The prepared deployment already
+contains its security-checked access policy, so callers normally do not need to
+repeat `visibility`, `loginRequired`, or `accessTargets` at publish time.
+
 Deployment artifacts preserve binary bytes and include
 `.fargo-deploy/manifest.json`. Default limits are 1,000 files, 25 MB total,
 20 MB per file, and a 25 MB ZIP.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fargowealth/fargo-ai-cli",
-  "version": "1.4.1",
+  "version": "1.4.2",
   "description": "Agent-neutral Fargo AI CLI, MCP client, and LEGO project tooling",
   "type": "module",
   "bin": {
@@ -17,13 +17,9 @@
     "node": ">=20.19.0"
   },
   "dependencies": {
-    "@fargowealth/website-connector-runtime": "^1.1.0",
     "fflate": "^0.8.2",
     "ignore": "^7.0.6"
   },
-  "bundleDependencies": [
-    "@fargowealth/website-connector-runtime"
-  ],
   "license": "UNLICENSED",
   "publishConfig": {
     "access": "public"

package/src/cli.mjs

@@ -9,7 +9,7 @@ import { applyLegoMigrations, planLegoMigrations } from "./lego-migrations.mjs";
 import { callMcpTool, listMcpTools } from "./mcp-client.mjs";
 import { runMcpProxy } from "./mcp-proxy.mjs";
 import { installAgentMcp } from "./agent-install.mjs";
-import { runWebsiteCommand } from "./website-cli.mjs";
+import { transferUpload } from "./upload-transfer.mjs";
 
 export async function runCli(args, options = {}) {
   const stdout = options.stdout ?? process.stdout;
@@ -24,6 +24,10 @@ export async function runCli(args, options = {}) {
       stdout.write(ROOT_HELP);
       return;
     }
+    if (args[0] === "upload" && isHelpOption(args)) {
+      stdout.write(UPLOAD_HELP);
+      return;
+    }
     if (args[0] === "version" || args[0] === "--version" || args[0] === "-v") {
       stdout.write(`fargo-cli version ${CLI_VERSION}\n`);
       return;
@@ -62,8 +66,23 @@ export async function runCli(args, options = {}) {
       stdout.write(`${JSON.stringify(await callMcpTool(store, toolName, toolArgs, options))}\n`);
       return;
     }
-    if (args[0] === "website") {
-      await runWebsiteCommand(args, stdout, store, options);
+    if (args[0] === "upload") {
+      const input = {
+        compress: args.includes("--compress"),
+        ffmpegBin: optionValue(args, "--ffmpeg-bin")?.trim(),
+        filePath: optionValue(args, "--file")?.trim(),
+        requestPath: optionValue(args, "--request-file")?.trim(),
+        resumePath: optionValue(args, "--resume")?.trim(),
+      };
+      if (input.resumePath) {
+        if (input.compress || input.ffmpegBin || input.requestPath) throw new Error("--resume cannot be combined with --compress, --ffmpeg-bin, or --request-file");
+      } else {
+        for (const [key, optionName] of [["filePath", "--file"], ["requestPath", "--request-file"]]) {
+          if (!input[key] || input[key].startsWith("--")) throw new Error(`Missing required option ${optionName}`);
+        }
+        if (input.ffmpegBin && !input.compress) throw new Error("--ffmpeg-bin requires --compress");
+      }
+      stdout.write(`${JSON.stringify(await transferUpload(input, { ...options, stderr, store }))}\n`);
       return;
     }
     if (args[0] === "lego" && args[1] === "snapshot") {
@@ -131,7 +150,7 @@ export async function runCli(args, options = {}) {
       await installAgentConnection(args, "workbuddy", stdout, store, options);
       return;
     }
-    throw new Error("Usage: fargo auth login|device|status|logout | fargo agent install --agent <agent> | fargo mcp serve|tools|call | fargo website validate|release|list|operations|call|connect|sync|connection-status|authorize|authorize-complete|binding | fargo lego snapshot upload|list|download | fargo lego deploy | fargo lego d1 migrate plan|apply | fargo workbuddy install | fargo version");
+    throw new Error("Usage: fargo auth login|device|status|logout | fargo agent install --agent <agent> | fargo mcp serve|tools|call | fargo upload | fargo lego snapshot upload|list|download | fargo lego deploy | fargo lego d1 migrate plan|apply | fargo workbuddy install | fargo version");
   } catch (error) {
     stderr.write(`fargo: ${error instanceof Error ? error.message : "unknown error"}\n`);
     if (options.throwOnError) throw error;
@@ -145,7 +164,7 @@ Commands:
   auth login|device|status|logout
   agent install --agent <codex|claude-code|cursor|workbuddy>
   mcp serve|tools|call
-  website validate|release|list|operations|call|connect|sync|connection-status|authorize|authorize-complete|binding
+  upload --file <path> --request-file <path>
   lego snapshot upload|list|download
   lego deploy
   lego d1 migrate plan|apply
@@ -155,6 +174,26 @@ Commands:
 Run "fargo lego deploy --help" for deployment options.
 `;
 
+const UPLOAD_HELP = `Usage: fargo upload [options]
+
+Required for a new upload:
+  --file <path>                 Local file to transfer
+  --request-file <path>         JSON upload descriptor supplied by a resource
+
+Optional:
+  --compress                    Transcode a video to H.264/AAC MP4 with local FFmpeg
+  --ffmpeg-bin <path>           FFmpeg executable (default: FFMPEG_PATH or ffmpeg)
+  --resume <checkpoint.json>    Resume an interrupted Media TUS upload
+
+Supported resource providers:
+  media                         TUS for resumable uploads, or multipart direct upload
+  r2                            Signed HTTP PUT upload
+
+FFmpeg is optional and is never bundled with Fargo CLI. If --compress is selected
+and FFmpeg is missing, Fargo prints install instructions for the current OS.
+The resource prepares its upload descriptor using the final file size after compression.
+`;
+
 const LEGO_DEPLOY_HELP = `Usage: fargo lego deploy [options]
 
 Required:
@@ -163,7 +202,8 @@ Required:
   --target <pages|worker>       Deployment target
   --version <version>           Release version
   --name <name>                 Release name
-  --notes <text>                Release notes (or --notes-file <path>)
+  --notes <text>                One release's notes, maximum 4000 characters
+  --notes-file <path>           Read one release's notes from a file; same limit
 
 Source and execution:
   --source <directory>          Source snapshot root (default: .)
@@ -194,13 +234,18 @@ Worker Runtime Topology:
   --queue-max-concurrency <n>   Optional maximum concurrent consumers
   --queue-retry-delay <s>       Optional retry delay in seconds
 
+Result and publication:
+  This command creates a ready, unpublished deployment. Production traffic is
+  unchanged. After review and explicit approval, publish the returned deployment
+  with Fargo Pass MCP lego_deployment_release(action=publish).
+
 Example:
   fargo lego deploy --app app_xxx --source . \\
     --deploy-dir .build/worker --target worker --entrypoint index.js \\
     --assets-dir dist --assets-binding ASSETS \\
     --assets-not-found-handling single-page-application \\
     --assets-run-worker-first --version 1.4.0 --name "Full-stack release" \\
-    --notes-file CHANGELOG.md
+    --notes-file RELEASE_NOTES.md
 
 .fargo-assets/ is an internal archive directory reserved for Fargo CLI.
 Do not create or copy it manually; always pass browser output with --assets-dir.

package/src/constants.mjs

@@ -1,4 +1,4 @@
-export const CLI_VERSION = "1.4.1";
+export const CLI_VERSION = "1.4.2";
 export const DEVICE_CODE_GRANT_TYPE = "urn:ietf:params:oauth:grant-type:device_code";
 export const DEFAULT_AUTH_URL = "https://auth.fargowealth.app";
 export const DEFAULT_API_URL = "https://mcp.fargowealth.app";