@farthershore/cli 0.35.0 → 0.36.0

package/CHANGELOG.md

@@ -1,9 +1,27 @@
 # Changelog — @farthershore/cli
 
-All notable changes to the `farthershore` CLI and its MCP server
-(`farthershore-mcp`) are documented here. The CLI versions independently from
-the SDKs. Pre-1.0: minor versions may include breaking changes. Releases
-before 0.35.0 are recorded only in the git history.
+All notable changes to the `farthershore` CLI are documented here. The CLI
+versions independently from the SDKs. Pre-1.0: minor versions may include
+breaking changes. Releases before 0.35.0 are recorded only in the git history.
+
+## [0.36.0] - 2026-10-13
+
+### Changed
+
+- **Breaking:** `farthershore create api` is now `farthershore backend scaffold`
+  (same flags), so it no longer reads like `farthershore api`. The top-level
+  `create` group is gone, and its error codes are renamed from `CREATE_API_*`
+  to `BACKEND_SCAFFOLD_*` (for example `BACKEND_SCAFFOLD_EXISTS`).
+- Every command calls the `@farthershore/client` operation surface directly;
+  command output and flags are unchanged.
+
+### Removed
+
+- **Breaking:** the local stdio MCP server and its `farthershore-mcp` binary
+  are gone. MCP launch configurations that run `farthershore-mcp` (or
+  `npx -p @farthershore/cli farthershore-mcp`) stop working on upgrade. Use
+  `farthershore code run` or `farthershore api` from an agent until the hosted
+  MCP server ships.
 
 ## [0.35.0] - 2026-10-12
 

package/README.md

@@ -3,7 +3,7 @@
 Create and operate [FartherShore](https://farthershore.com) software businesses
 from the terminal.
 
-**Status: `0.35.0`.** Pre-1.0 — the command surface is stable but may still
+**Status: `0.36.0`.** Pre-1.0 — the command surface is stable but may still
 change between minor versions. Pin an exact version in CI.
 
 FartherShore lets you define a software business as code, then sells, meters,
@@ -15,25 +15,18 @@ This CLI is the tool layer around that repo: provision a managed business repo,
 validate it locally before you push, inspect publication state, and run
 day-to-day operations (consumers, secrets, backends, webhooks, promo codes,
 usage). It is designed to be safe for both humans and agents — every command
-takes `--format json` for non-interactive scripting, and the MCP server exposes
-the explicitly agent-operable subset of the CLI surface.
+takes `--format json` for non-interactive scripting.
 
 ## Install
 
 ```bash
-npm install -g @farthershore/cli@0.35.0
+npm install -g @farthershore/cli@0.36.0
 ```
 
 Or run it directly with npx:
 
 ```bash
-npx -p @farthershore/cli@0.35.0 farthershore --help
-```
-
-The package also ships an MCP stdio server for agents:
-
-```bash
-npx -p @farthershore/cli@0.35.0 farthershore-mcp
+npx -p @farthershore/cli@0.36.0 farthershore --help
 ```
 
 ## Authentication
@@ -209,17 +202,17 @@ before pagination; the CLI does not sort or filter a partial page locally.
 Each command rejects fields outside its endpoint-specific allowlist shown by
 `--help`.
 
-### `farthershore create`
+### `farthershore backend scaffold`
 
-Create local project components inside a managed builder repo. `create api`
-scaffolds a starter backend into `api/` by downloading the public Node template
-tarball, then patches the repo root `.gitignore`.
+Scaffold a starter backend into `api/` inside a managed builder repo, by
+downloading the public Node template tarball, then patch the repo root
+`.gitignore`. It runs locally and needs no login.
 
 ```bash
-farthershore create api
-farthershore create api --path ../weather-api
-farthershore create api --force
-farthershore create api --node --ref v0.1.0 --format json
+farthershore backend scaffold
+farthershore backend scaffold --path ../weather-api
+farthershore backend scaffold --force
+farthershore backend scaffold --node --ref v0.1.0 --format json
 ```
 
 `--node` is the default language today: Node (TypeScript + Express). `--ref`
@@ -385,8 +378,7 @@ default, and `--org <id>` overrides it for one command.
 
 Create and administer organization-owned MakerTokens. These commands require a
 signed-in user CLI session (`farthershore login`); an existing MakerToken cannot
-list, mint, approve, rotate, revoke, or otherwise administer credentials. The
-entire group is CLI-only and is deliberately absent from `farthershore-mcp`.
+list, mint, approve, rotate, revoke, or otherwise administer credentials.
 
 ```bash
 # Exact permissions a human may delegate — read this before choosing --permissions.
@@ -470,8 +462,8 @@ never print `plaintext`. ACTIVE creates
 and rotations print the one-time key once. If one of these commands times out,
 run `service-account list` before trying again.
 
-This group is direct CLI-only and deliberately has no MCP projection: the MCP
-operation registry carries builder principals, not portal consumer sessions.
+This group is registered directly rather than through the operation registry:
+that registry carries builder principals, not portal consumer sessions.
 
 ### `farthershore limit`
 
@@ -522,8 +514,17 @@ portal renders locally exactly as it serves in production. Pass `--mock` to
 inject `{ mock: true }` instead of Core/Clerk config for local page inspection
 with placeholder data and auth bypassed.
 
+A build is published only when its output ships the SDK's managed sign-in.
+A refused build never replaces what is live; `frontend status` shows the
+reason, and `builds[].diagnostics[].code` is `FRONTEND_SIGN_IN_MISSING` (mount
+`<FartherShoreRoot>` and render `<FsSignIn />`) or `FRONTEND_SDK_TOO_OLD`
+(upgrade `@farthershore/farthershore-js`). `--wait` exits `BUILD_FAILED` with
+that code in `details.reasonCode`. Mock mode is for this local preview only: a
+hosted portal ignores it, and always uses the platform's sign-in.
+
 ```bash
 farthershore frontend status weather-api --format json
+farthershore frontend status weather-api --wait --ref <commitSha> --format json
 farthershore frontend rollback weather-api --release-id <hash> --yes --format json
 
 # Local preview (shells out to vite; needs a frontend/ project)
@@ -734,8 +735,8 @@ farthershore webhook listen weather-api --forward-to localhost:3000/webhooks \
 ```
 
 `listen` needs `cloudflared` — bundled as an optional
-`@farthershore/cloudflared-<platform>` dependency, or on your PATH. It has no
-MCP tool (long-running, process-owning). A listener killed hard leaves an
+`@farthershore/cloudflared-<platform>` dependency, or on your PATH. A listener
+killed hard leaves an
 endpoint with a `*.trycloudflare.com` URL; `webhook delete --yes` removes it.
 
 ### `farthershore promo-code`
@@ -763,18 +764,18 @@ Use `--all-plans` to clear plan scoping.
 Install or refresh the platform-verified skills bundle together. The platform
 pins this immutable release, and CI plus a daily repository check compare it to
 GitHub's latest stable release so the guidance cannot silently drift.
-This command requires `@farthershore/cli` 0.35.0 or newer.
+This command requires `@farthershore/cli` 0.36.0 or newer.
 
 ```bash
 set -euo pipefail
 CLI_VERSION=$(farthershore --version)
-printf '%s' "$CLI_VERSION" | node -e 'let v=""; process.stdin.on("data", c => v += c).on("end", () => { const m = /^(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)(?:\+[0-9A-Za-z.-]+)?$/.exec(v.trim()); if (!m || !(+m[1] > 0 || +m[2] > 35 || (+m[2] === 35 && +m[3] >= 0))) { console.error("Stop: CLI 0.35.0 or newer is required; ask the human to upgrade."); process.exitCode = 1; } })'
+printf '%s' "$CLI_VERSION" | node -e 'let v=""; process.stdin.on("data", c => v += c).on("end", () => { const m = /^(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)(?:\+[0-9A-Za-z.-]+)?$/.exec(v.trim()); if (!m || !(+m[1] > 0 || +m[2] > 36 || (+m[2] === 36 && +m[3] >= 0))) { console.error("Stop: CLI 0.36.0 or newer is required; ask the human to upgrade."); process.exitCode = 1; } })'
 farthershore skills install --help
 farthershore skills install
 ```
 
 If either prerequisite fails, stop and ask the human to run
-`npm install -g @farthershore/cli@0.35.0`, then repeat the checks.
+`npm install -g @farthershore/cli@0.36.0`, then repeat the checks.
 Do not install or upgrade global tooling autonomously.
 
 The Farther Shore CLI downloads the exact installer archive and verifies this
@@ -904,7 +905,8 @@ until, deadlineMs })`, `console`, `setTimeout` / `clearTimeout` and
 One-time secrets (minted or rotated credentials) come back to the script as
 `{ redacted: true, last4 }` unless you pass `--reveal-secrets`; a redacted
 secret cannot be shown again, so rotate with `--reveal-secrets` when you need
-the value. Other results pass the same credential masking as the MCP server.
+the value. In every other result, credential-shaped strings (tokens, API keys,
+JWTs) and known secret fields are masked before the script sees them.
 
 **Budgets:** `--max-calls` (200), `--max-writes` (20), `--timeout` (60s; `60`,
 `60s`, `500ms`, `2m`) and at most 4 calls in flight. Exceeding one stops the
@@ -973,25 +975,6 @@ MakerToken through `FARTHERSHORE_TOKEN`. Device login waits for human approval;
 `farthershore validate --local-only` need no network or auth and are safe to
 run in CI.
 
-## MCP server
-
-The MCP server (`farthershore-mcp`) projects its tools from the same operation
-registry that defines the CLI commands. Every MCP tool has a CLI sibling, but
-not every CLI command is exposed through MCP. Tool names use the `fs_*` prefix
-and cover only operations explicitly marked agent-operable in that registry.
-Organization, role, member, invitation, and org MakerToken administration
-requires a live-user CLI session and is not projected into MCP; audit logs,
-notifications, and apply timelines are also CLI-only.
-
-The server resolves its target exactly as the CLI does: the stored login,
-`FARTHERSHORE_API_URL` (else the configured API URL), and the organization
-linked to its working directory, else the one chosen with
-`farthershore auth organization use`.
-
-```bash
-farthershore-mcp
-```
-
 ## Learn more
 
 - Platform documentation: [farthershore.com](https://farthershore.com)