flowstash-cli 0.2.12__tar.gz → 0.2.13__tar.gz

{flowstash_cli-0.2.12 → flowstash_cli-0.2.13}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.3
 Name: flowstash-cli
-Version: 0.2.12
+Version: 0.2.13
 Summary: CLI for the flowstash Managed Platform
 Author: juraj.bezdek@gmail.com
 Author-email: juraj.bezdek@gmail.com
@@ -9,7 +9,7 @@ Classifier: Programming Language :: Python :: 3
 Classifier: Programming Language :: Python :: 3.11
 Classifier: Programming Language :: Python :: 3.12
 Classifier: Programming Language :: Python :: 3.13
-Requires-Dist: flowstash-runtime (>=0.2.12,<0.3.0)
+Requires-Dist: flowstash-runtime (>=0.2.13,<0.3.0)
 Requires-Dist: httpx (>=0.27.0)
 Requires-Dist: keyring (>=25.0.0)
 Requires-Dist: libcst (>=1.1.0)

{flowstash_cli-0.2.12 → flowstash_cli-0.2.13}/pyproject.toml

@@ -1,11 +1,11 @@
 [project]
 name = "flowstash-cli"
-version = "0.2.12"
+version = "0.2.13"
 description = "CLI for the flowstash Managed Platform"
 authors = [{name = "juraj.bezdek@gmail.com", email = "juraj.bezdek@gmail.com"}]
 requires-python = ">=3.11"
 dependencies = [
-    "flowstash-runtime>=0.2.12,<0.3.0",
+    "flowstash-runtime>=0.2.13,<0.3.0",
     "typer[all]>=0.12.0",
     "httpx>=0.27.0",
     "pyyaml>=6.0.1",

{flowstash_cli-0.2.12 → flowstash_cli-0.2.13}/src/flowstash/cli/templates/AGENTS.md

@@ -159,8 +159,42 @@ auth:
   client_secret: "${CLIENT_SECRET}"
   token_url: "https://auth.service.com/oauth/token"
   scopes: ["read", "write"]
+  # clientAuthMethod controls how credentials are sent to the token endpoint:
+  #   client_secret_basic  – Authorization: Basic header (default)
+  #   client_secret_post   – credentials in the POST body
+  clientAuthMethod: client_secret_basic
 ```
 
+#### Example: TLS / Certificate Configuration
+Use the `tls` block to configure mutual TLS (mTLS) client certificates or to customise server certificate verification.
+
+```yaml
+# Mutual TLS — present a client certificate to the server
+baseUrl: https://internal.corp/api
+tls:
+  certFile: /certs/client.pem   # PEM-encoded client certificate
+  keyFile: /certs/client.key    # Private key (omit if the key is bundled in certFile)
+
+# Custom CA bundle — verify the server against a private / corporate CA
+baseUrl: https://internal.corp/api
+tls:
+  caBundle: /certs/corp-ca.pem
+
+# Disable server certificate verification (development / self-signed only)
+baseUrl: https://localhost:8443
+tls:
+  verifySSL: false
+```
+
+All four fields are optional and can be combined:
+
+| Field | Type | Default | Description |
+|-------|------|---------|-------------|
+| `certFile` | string | — | Path to the PEM-encoded client certificate (enables mTLS) |
+| `keyFile` | string | — | Path to the PEM-encoded private key (omit if bundled with `certFile`) |
+| `caBundle` | string | — | Path to a custom CA certificate / bundle for server verification |
+| `verifySSL` | bool | `true` | Set to `false` to skip server certificate verification (**dev/testing only**) |
+
 You can simply define `clients/slackClient.yaml` and the system will expose it to your tasks.