@fargowealth/fargo-ai-cli 1.4.2 → 1.5.1

package/CHANGELOG.md

@@ -1,5 +1,63 @@
 # Changelog
 
+## 1.5.1 — 2026-10-17
+
+- Remove the local `fargo yida` command family, personal YiDA OAuth and seven local `yida_*` MCP tools from the distributed CLI. The MCP bridge and one-shot commands use the hosted Fargo Pass catalog. Local YiDA source and maintenance tests are archived outside the npm package.
+
+- Request explicit default-mailbox read/write scopes for desktop Fargo Pass connections. Reauthorize an existing connection to enable the four mail tools.
+
+## 1.5.0 — 2026-10-15
+
+- Align the Portal and Fargo Pass displayed CLI version with this package.
+- Discover the selected employee business directory by Chinese name, group and aliases; load background dictionaries only through the selected business's dependencies.
+
+- Return a two-part Markdown confirmation (overall parameters + item rows) from
+  expense preview. Require explicit caller attestation of human confirmation
+  plus the unchanged preview pin before execution. Add schema-backed display
+  templates for expense, travel reimbursement and external payment; those display
+  templates do not enable unreviewed submission branches.
+
+- Reuse one online Fargo identity within an expense tool task. Concurrent reads
+  share the result; local credential changes, logout and task expiry invalidate it.
+  Revalidate online before a mutation, and discard the context on completion.
+- Permit a fresh independent expense after matching prior attempts are confirmed
+  terminated by detail read-back. Preserve active/completed duplicate blocking and
+  durable one-shot journals; never add a business association or erase old receipts.
+
+- Share one own-HR response and one checked definition per expense preparation;
+  schedule 13 live lookups by schema dependencies with a concurrency limit of four.
+  Keep identity/admission and pre-write schema checks; never cache bank/rate values
+  across operations. Add a versioned execution contract to the expense bundle.
+- Use decimal half-up currency multiplication, reject impossible invoice dates,
+  and verify persisted rates, accounting items and attachment names/sizes as well
+  as amounts and file UUIDs. Document pending/unknown/duplicate recovery outcomes.
+
+- Add the local `yida_submit_expense` adapter for the reviewed ordinary,
+  non-project expense form: own HR bank details, live company/accounting/rate
+  lookups, uploaded PDF receipt, pinned preview, invoice/order duplicate checks,
+  durable one-shot submission and read-back. Generic form submission stays disabled.
+- Add one local `yida_cancel_request` MCP tool shared across declared process
+  businesses: preview and version pinning, own-originator/form/process checks,
+  one-shot termination, durable duplicate protection and API read-back. Keep
+  completed/ordinary forms blocked and ambiguous results out of automatic retries.
+- Capture calculation, option-loading, linkage, visibility, dataset-query and
+  script-reference metadata in YiDA model v2; retain legacy model support.
+- Add the local read-only `yida_resolve_field` tool and reviewed self/department
+  initialization adapters. Preserve the originating form context and reject
+  write functions, raw MCP expressions and unrelated HR fields.
+- Verify one explicitly authorized 0.06 HKD synthetic payment via API, with
+  recorded duplicate protection and exact amount/currency/attachment readback.
+
+- Add local personal YiDA OAuth, account-isolated credential profiles, refresh
+  and logout commands, and read-only schema modeling.
+- Add `yida_connection_status` and `yida_describe_form` to the local MCP bridge;
+  keep YiDA authorization and execution on the client computer.
+- Include OpenYida attribution and its MIT license for adapted protocol and
+  schema conventions.
+- Add local business catalog/package commands and MCP tools backed by the
+  LEGO publisher, atomic paired schema/handbook cache, immutable workflow pins,
+  enterprise isolation, integrity/version checks and live schema drift detection.
+
 ## 1.4.2
 
 - Add generic large-file upload to Media and R2 resources with resumable TUS and optional local FFmpeg compression.

package/README.md

@@ -37,7 +37,7 @@ reused by both MCP and local CLI operations.
   deploy composition, and migration-file ordering.
 - CLI has no generic R2 or Cloudflare administration commands.
 - `fargo mcp serve` is the local stdio bridge for WorkBuddy, Claude Code,
-  Codex, and Cursor.
+  Codex, and Cursor. It forwards tool discovery and calls to hosted Fargo Pass.
 - `fargo mcp tools` and `fargo mcp call` support scripts and one-shot
   diagnostics without starting an MCP host.
 
@@ -250,3 +250,7 @@ serialized across CLI processes.
 
 Never copy, upload, commit, or print the credential file. Use
 `fargo auth logout` when a device is no longer trusted.
+
+## Default Mate mailbox
+
+Fargo Pass exposes `mail_list`, `mail_get`, `mail_get_attachment` and `mail_update` for your single default Agent mailbox. Upgrade to CLI 1.5.1 and sign in again to grant `fargo:mail:read` and `fargo:mail:write`. The mailbox address comes from the default Agent, not your login username. If no default Agent is active, the tools return `mailbox_not_provisioned` with a link to Fargo Mate. `ping_who_am_i.account.defaultAgent` exposes its current name and email, or `null`.

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@fargowealth/fargo-ai-cli",
-  "version": "1.4.2",
-  "description": "Agent-neutral Fargo AI CLI, MCP client, and LEGO project tooling",
+  "version": "1.5.1",
+  "description": "Fargo Pass CLI for desktop agents, hosted MCP, default Agent mailboxes, uploads and LEGO deployment",
   "type": "module",
   "bin": {
     "fargo": "bin/fargo.mjs",
@@ -16,6 +16,9 @@
   "engines": {
     "node": ">=20.19.0"
   },
+  "scripts": {
+    "test": "node --test test/*.test.mjs"
+  },
   "dependencies": {
     "fflate": "^0.8.2",
     "ignore": "^7.0.6"

package/src/constants.mjs

@@ -1,8 +1,8 @@
-export const CLI_VERSION = "1.4.2";
+export const CLI_VERSION = "1.5.1";
 export const DEVICE_CODE_GRANT_TYPE = "urn:ietf:params:oauth:grant-type:device_code";
 export const DEFAULT_AUTH_URL = "https://auth.fargowealth.app";
 export const DEFAULT_API_URL = "https://mcp.fargowealth.app";
 export const DEFAULT_MCP_URL = "https://mcp.fargowealth.app/mcp";
 export const OAUTH_CLIENT_ID = "fargo-cli-workbuddy";
-export const OAUTH_SCOPE = "fargo:forum:read fargo:forum:write fargo:hub:read fargo:lego:read fargo:lego:write fargo:knowledge:read fargo:knowledge:write fargo:knowledge:share";
+export const OAUTH_SCOPE = "fargo:mail:read fargo:mail:write fargo:forum:read fargo:forum:write fargo:hub:read fargo:lego:read fargo:lego:write fargo:knowledge:read fargo:knowledge:write fargo:knowledge:share";
 export const SUPPORTED_AGENT_TYPES = ["codex", "claude-code", "cursor", "workbuddy"];

package/src/loopback-receiver.mjs

@@ -4,7 +4,8 @@ import { createServer } from "node:http";
 const LOOPBACK_HOST = "127.0.0.1";
 
 export async function createLoopbackReceiver(options = {}) {
-  const callbackPath = `/oauth/callback/${(options.randomBytes ?? randomBytes)(18).toString("base64url")}`;
+  const callbackPath = options.callbackPath ?? `/oauth/callback/${(options.randomBytes ?? randomBytes)(18).toString("base64url")}`;
+  if (!/^\/oauth\/callback(?:\/[A-Za-z0-9_-]+)?$/.test(callbackPath)) throw new Error("Invalid OAuth loopback callback path");
   const timeoutMs = Math.max(1_000, Number(options.timeoutMs) || 10 * 60 * 1_000);
   let address;
   let settled = false;

package/src/mcp-client.mjs

@@ -1,12 +1,13 @@
 import { DEFAULT_MCP_URL } from "./constants.mjs";
 import { authenticatedRequest, responsePayload } from "./api-client.mjs";
+import { requireCurrentTool } from "./retired-tools.mjs";
 
 export async function listMcpTools(store, options = {}) {
-  const result = await mcpRequest(store, "tools/list", {}, options);
-  return result;
+  return mcpRequest(store, "tools/list", {}, options);
 }
 
 export async function callMcpTool(store, name, args, options = {}) {
+  requireCurrentTool(name);
   return mcpRequest(store, "tools/call", { name, arguments: args }, options);
 }
 

package/src/mcp-proxy.mjs

@@ -1,6 +1,7 @@
 import { createInterface } from "node:readline";
 import { CLI_VERSION, DEFAULT_MCP_URL } from "./constants.mjs";
 import { currentCredential, refreshCurrentCredential } from "./auth.mjs";
+import { requireCurrentTool } from "./retired-tools.mjs";
 
 export async function runMcpProxy(store, options = {}) {
   const input = options.input ?? process.stdin;
@@ -17,8 +18,11 @@ export async function runMcpProxy(store, options = {}) {
       try { message = JSON.parse(line); }
       catch { return; }
       try {
+        if (message.method === "tools/call") requireCurrentTool(message.params?.name);
         const responses = await forward(message, false);
-        for (const response of responses) output.write(`${JSON.stringify(response)}\n`);
+        for (const response of responses) {
+          output.write(`${JSON.stringify(response)}\n`);
+        }
       } catch (error) {
         if (message.id !== undefined) output.write(`${JSON.stringify({ jsonrpc: "2.0", id: message.id, error: { code: -32001, message: error instanceof Error ? error.message : "Fargo MCP proxy failed" } })}\n`);
       }

package/src/retired-tools.mjs

@@ -0,0 +1,6 @@
+/** Old local tool calls must not send their private arguments to the hosted MCP. */
+export function requireCurrentTool(name) {
+  if (typeof name === "string" && name.startsWith("yida_")) {
+    throw new Error("Local YiDA tools were removed in Fargo CLI 1.5.1. Restart the MCP client to refresh its tool catalog.");
+  }
+}