gflow-cli 0.85.0__tar.gz → 0.87.0__tar.gz

gflow_cli-0.87.0/.codex-plugin/plugin.json

@@ -0,0 +1,34 @@
+{
+  "name": "gflow",
+  "version": "0.87.0",
+  "description": "Reusable development and operations workflows for gflow-cli",
+  "author": {
+    "name": "Flavio Oliva",
+    "url": "https://github.com/ffroliva"
+  },
+  "homepage": "https://github.com/ffroliva/gflow-cli",
+  "repository": "https://github.com/ffroliva/gflow-cli",
+  "license": "MIT",
+  "keywords": [
+    "gflow-cli",
+    "codex",
+    "google-flow"
+  ],
+  "skills": "./plugins/gflow/skills/",
+  "interface": {
+    "displayName": "gflow-cli",
+    "shortDescription": "Develop, validate, review, and operate gflow-cli.",
+    "longDescription": "Project workflows for planning, validation, issue handling, reviews, releases, and Google Flow CLI operations.",
+    "developerName": "Flavio Oliva",
+    "category": "Developer Tools",
+    "capabilities": [
+      "Interactive",
+      "Write"
+    ],
+    "websiteURL": "https://github.com/ffroliva/gflow-cli",
+    "defaultPrompt": [
+      "Show the current gflow-cli task with $gflow:status.",
+      "Run the gflow-cli quality gates with $gflow:check."
+    ]
+  }
+}

gflow_cli-0.87.0/.env.template

@@ -0,0 +1,272 @@
+# gflow-cli — example environment variables.
+# Copy to `.env` in the directory where you invoke `gflow` (project-local
+# overrides) or to `$GFLOW_CLI_HOME/.env` (machine-wide defaults; used by
+# processes with arbitrary working directories, e.g. the MCP server) and
+# uncomment what you want to override. On conflicts the CWD `.env` wins.
+# All variables are OPTIONAL — defaults work out of the box for most users.
+# Lines below are commented to show the SHIPPED DEFAULT — uncomment to override.
+
+# -----------------------------------------------------------------------------
+# Auth & profiles
+# -----------------------------------------------------------------------------
+
+# Root directory for Playwright persistent contexts (signed-in Google sessions).
+# Default (via `platformdirs`):
+#   Windows: %LOCALAPPDATA%\gflow-cli                    (e.g. C:\Users\<you>\AppData\Local\gflow-cli)
+#   macOS:   ~/Library/Application Support/gflow-cli
+#   Linux:   $XDG_DATA_HOME/gflow-cli                    (typically ~/.local/share/gflow-cli)
+# GFLOW_CLI_HOME=
+
+# Default profile name. When unset, the resolution chain auto-picks (see
+# docs/CONFIGURATION.md § GFLOW_CLI_PROFILE). Override per-call with
+# `--profile <name>`.
+# GFLOW_CLI_PROFILE=default
+
+# Maximum wait time (seconds) for `gflow auth login` to complete Google sign-in.
+# Useful for agent pipelines — set low to surface hung logins as exit 12 fast.
+# GFLOW_CLI_AUTH_LOGIN_TIMEOUT=600
+
+# Anti-bot pause between prompt submissions in multi-prompt image runs
+# (image batch, t2i --prompts-file/--stdin, gflow run). 'MIN-MAX' seconds, a
+# single number for 0-N, or 0 to disable. Default 0.5-1.5 (small on purpose);
+# widen (e.g. 10-30) if runs hit WAF 403s. The --jitter flag beats this.
+# See docs/CONFIGURATION.md § GFLOW_CLI_JITTER_RANGE.
+# GFLOW_CLI_JITTER_RANGE=0.5-1.5
+
+# -----------------------------------------------------------------------------
+# Output paths
+# -----------------------------------------------------------------------------
+
+# Where downloaded assets land. Subfolders are created per kind/date:
+#   <output_dir>/images/<YYYY-MM-DD>/<job_id>_<index>.png
+#   <output_dir>/videos/<YYYY-MM-DD>/<job_id>.mp4
+#
+# Default (via `platformdirs`):
+#   Windows: %USERPROFILE%\Downloads\gflow-cli
+#   macOS:   ~/Downloads/gflow-cli
+#   Linux:   $XDG_DOWNLOAD_DIR/gflow-cli  (falls back to ~/Downloads/gflow-cli)
+# GFLOW_CLI_OUTPUT_DIR=
+
+# -----------------------------------------------------------------------------
+# Provider selection
+# -----------------------------------------------------------------------------
+
+# Backend to use for generations.
+#   flow      - reverse-engineered Flow REST API (default, requires Ultra/Pro)
+#   official  - official Veo SDK (planned for v0.5+, requires Gemini API key)
+# GFLOW_CLI_PROVIDER=flow
+
+# -----------------------------------------------------------------------------
+# Prompt tools LLM (--tool creative-director / reverse-engineer / storyboard)
+#
+# Any OpenAI-compatible Chat Completions endpoint: OpenAI, OpenRouter, a
+# corporate gateway, a local proxy, Ollama, or Google's compat endpoint.
+# Provider keys stay with your gateway — gflow only holds the one credential it
+# presents to the endpoint below.
+#
+# NOTE: GFLOW_CLI_GEMINI_API_KEY / GFLOW_CLI_GEMINI_MODEL were REMOVED in
+# v0.46.0 and are not forwarded. Use GFLOW_CLI_LLM_API_KEY — an existing Google
+# AIza… key still works, since the default endpoint is Google's compat surface.
+# -----------------------------------------------------------------------------
+
+# Endpoint. This is the on/off switch for the prompt tools.
+# https only, except loopback (127.0.0.1 / localhost / ::1) which may use http.
+# Use 127.0.0.1 rather than localhost — gateways often bind IPv4 only and
+# Windows resolves ::1 first, which stalls.
+# GFLOW_CLI_LLM_BASE_URL=https://generativelanguage.googleapis.com/v1beta/openai
+
+# Credential for that endpoint (Authorization: Bearer). OPTIONAL — omit it for a
+# keyless local gateway and no header is sent at all.
+# Google key: https://aistudio.google.com/apikey
+# GFLOW_CLI_LLM_API_KEY=
+
+# Model, which is also the provider selector since gateways route on it
+# (e.g. openai/gpt-4o-mini). Unset = the gateway chooses.
+# GFLOW_CLI_LLM_MODEL=
+
+# -----------------------------------------------------------------------------
+# Cloud storage
+# -----------------------------------------------------------------------------
+
+# Upload generated assets directly to a cloud bucket instead of saving local
+# asset copies. Supported schemes:
+#   gs://   – Google Cloud Storage (requires: pip install 'gflow-cli[gcs]')
+#   s3://   – Amazon S3 or any S3-compatible store (RustFS, MinIO, ...)
+#             (requires: pip install 'gflow-cli[s3]')
+#
+# Examples:
+#   GFLOW_CLI_STORAGE_URI=gs://my-gcs-bucket/gflow/
+#   GFLOW_CLI_STORAGE_URI=s3://my-s3-bucket/gflow/
+#   GFLOW_CLI_STORAGE_URI=s3://gflow-test/gflow/   # local docker-compose stack (RustFS)
+#
+# For S3-compatible stores you also need the standard AWS SDK env vars:
+#   AWS_ACCESS_KEY_ID=rustfsadmin
+#   AWS_SECRET_ACCESS_KEY=rustfsadmin
+#   AWS_ENDPOINT_URL=http://localhost:9000   # omit for real AWS
+#   AWS_DEFAULT_REGION=us-east-1
+#
+# For GCS (local emulator):
+#   STORAGE_EMULATOR_HOST=http://localhost:4443
+#
+# When unset, assets are saved to GFLOW_CLI_OUTPUT_DIR (local disk). gflow-cli
+# does not dual-write local + cloud copies; configure one storage target per run.
+# GFLOW_CLI_STORAGE_URI=
+
+# -----------------------------------------------------------------------------
+# Runtime tuning
+# -----------------------------------------------------------------------------
+
+# Per-request HTTP timeout (seconds). Veo videos can take 60-180s each.
+# GFLOW_CLI_TIMEOUT_SECONDS=600
+
+# Logging level — DEBUG | INFO | WARNING | ERROR
+# GFLOW_CLI_LOG_LEVEL=INFO
+
+# Log format — auto | text | json
+#   auto = text on TTY, json when piped (default)
+# GFLOW_CLI_LOG_FORMAT=auto
+
+# Per-worker Playwright Page-pool size (1-16). FlowApiClient opens N Pages
+# inside one shared persistent BrowserContext. No current CLI command fans
+# out multiple generations concurrently through this pool, so raising it has
+# no effect today. ~30-60 MiB memory per Page on Chromium headless if that
+# changes; don't exceed 8 without measuring. Shipped in v0.4.0a2.
+# GFLOW_CLI_CONCURRENCY=1
+
+# Seconds to wait for another gflow process to release the profile lease
+# before giving up with ProfileLockedError (0 = fail fast, the default).
+# Holders always run to completion; the waiter takes over on release (#478).
+# GFLOW_CLI_LEASE_WAIT_SECONDS=0
+
+# Once-a-day best-effort PyPI check that shows an update banner on stderr when
+# a newer gflow-cli exists (#479; one plain line when stderr is piped). Never
+# blocks; skipped in CI and for editable/source installs. Set to 0 to disable.
+# Upgrade with `gflow update`.
+# GFLOW_CLI_UPDATE_CHECK=1
+
+# Whether generation prompts (and the prompt-derived display names used as the
+# picker search key) are stored in the local catalog — store | redacted.
+# Under 'redacted', `gflow doctor` reports missing display names as info
+# (backfill is deliberately suppressed) instead of warn, and name backfill via
+# `gflow data sync --names` requires switching back to 'store' first.
+# GFLOW_CLI_HISTORY_PROMPTS=store
+
+# MCP no-spend mode (#496): when set to 1, the MCP server (gflow mcp run AND
+# gflow serve) never registers the credit-spending generate tools — agents
+# cannot see them in tools/list. Equivalent to the --no-spend flag.
+# GFLOW_MCP_NO_SPEND=0
+
+# Run Playwright in headless mode for non-`auth login` commands (true|false).
+# Default: false — headed real Chrome is the PRODUCTION default, not a
+# fallback. The ui_automation transport (the only production transport)
+# requires headed Chrome: reCAPTCHA Enterprise rejects headless Chromium
+# outright (immediate 403). Only set true for CI/CD on a non-ui_automation
+# transport (bearer/sapisidhash, experimental). For WAF-sensitive runs, pin
+# GFLOW_CLI_HEADLESS=false explicitly rather than relying on the default.
+# GFLOW_CLI_HEADLESS=false
+
+# Screen position X,Y of the headed generation browser. Default -30000,-30000 opens it
+# off-screen: still real headed Chrome (reCAPTCHA unaffected), just not over your
+# desktop. Set 0,0 (or a second monitor's origin) to watch or debug a run; set empty
+# for Chrome's own placement. It does NOT stop Chrome taking keyboard focus at launch.
+# Login windows are always visible: for an account chooser / consent screen, run
+# `gflow auth login --profile <name>` rather than making this window visible.
+# GFLOW_CLI_BROWSER_WINDOW_POSITION=-30000,-30000
+
+# Browser automation engine — playwright (default) | patchright
+# patchright is an OPT-IN, drop-in patched Playwright (Chromium) that avoids the
+# Runtime.enable CDP leak for stronger reCAPTCHA-Enterprise evasion on the HEADED
+# path. It is NOT a headless unlock. Requires a separate install:
+#   pip install patchright        (or: pip install 'gflow-cli[patchright]')
+# When using system Chrome (channel=chrome, the gflow default) you do NOT need
+# `patchright install chromium`. Unset to revert to the default playwright engine.
+# GFLOW_CLI_BROWSER_ENGINE=playwright
+
+# Which Flow UI arm a command needs: auto (default — no arm asked for, so it
+# resolves to classic, the arm that can satisfy a generation request) | classic
+# (require the hard aspect controls) | agentic (require the chat surface; needed
+# for -i instructions). gflow switches to the required arm, verifies via re-probe,
+# and aborts with exit 28 (retryable — the cohort flaps per load) if it can't be
+# reached. -i instructions force agentic automatically. See docs/CONFIGURATION.md.
+# GFLOW_CLI_UI_MODE=auto
+
+# Which Flow frontend gflow drives (#639). auto (default): flow.google.com is the
+# default host for what it can serve today (video t2v; video i2v from a local
+# --initial-frame; video r2v from local --ref files; image t2i; and image i2i from
+# local files — all with --project) on every
+# account; requests it cannot serve yet keep the labs driver on an unmoved
+# account; where Flow serves flow.google.com you get the migrated composer for
+# everything ported to it.
+# flow.google.com: force the migrated composer for everything.
+# labs.google: never use it — where Flow serves flow.google.com, requests fail
+# with exit 36 (kill switch).
+# GFLOW_CLI_FLOW_HOST=auto
+
+# Agent-only composer (#799): "Confirm before generating" applied before a run.
+# account (default): leave the Flow account's setting; gflow approves one
+# confirmation its own submit produced and stops on a second. Only that second
+# one is stopped before billing: one confirmation can cover several clips, and an
+# over-count under it is caught after the fact.
+# always: set Always. never: set Never — no approval step, so an agent that
+# queues more than asked is only caught after credits are spent.
+# Saved to the Flow account and not restored after the run.
+# GFLOW_CLI_AGENT_CONFIRM=account
+
+# DEPRECATED — use GFLOW_CLI_UI_MODE=classic. true maps to ui_mode=classic, but the
+# old silent agentic fallback is gone: a classic-required run now aborts (exit 28).
+# GFLOW_CLI_PREFER_CLASSIC=false
+
+# DEPRECATED — use GFLOW_CLI_UI_MODE=agentic. true maps to ui_mode=agentic.
+# GFLOW_CLI_FORCE_AGENT_UI=false
+
+
+# BCP-47 locale tag passed to Playwright's launch `locale=` parameter
+# (controls Accept-Language only — Chrome's UI language is forced to
+# en-US via the `--lang=en-US` launch arg regardless of this setting, so
+# Flow stays on /fx/tools/flow/ instead of /fx/<locale>/). Default:
+# `en-US`. Override to capture locale-invariant DOM via
+# scripts/dev/capture_locale_invariants.py or to live-verify a non-EN
+# language end-to-end (see KNOWN_ISSUES § issue #24).
+# GFLOW_CLI_LOCALE=en-US
+
+# Display name of the --project project, used by `gflow video i2v` to select
+# the target project in the media picker's project menu when attaching a
+# media-UUID frame (#287 — the menu lists projects by NAME; unnamed projects
+# show only creation timestamps). Same as the `--project-name` flag, which
+# takes precedence when both are set. Escape hatch when automatic name
+# derivation (tab title / page hints) fails.
+# GFLOW_CLI_PROJECT_NAME=
+
+# -----------------------------------------------------------------------------
+# Debugging (see docs/CONFIGURATION.md; HAR/traceback are opt-in and can
+# expose secrets)
+# -----------------------------------------------------------------------------
+
+# Automatic private incident bundles (DEFAULT: true). On relevant operational
+# failures (Flow app crash, UI drift, transport timeout, WAF/network errors,
+# profile-lock contention) gflow writes a bounded diagnostic bundle under
+# <GFLOW_CLI_HOME>/incidents/. Automatic JSON is allowlisted structural
+# metadata only; screenshots live under sensitive/ and must be reviewed
+# before sharing. Nothing is ever uploaded. Set false to disable.
+# GFLOW_CLI_INCIDENT_CAPTURE=true
+
+# Captures full Playwright network traffic (requests, responses, headers,
+# cookies) to this HAR file for the session. SECURITY: a HAR file contains
+# live auth cookies and bearer tokens -- never share one publicly.
+# GFLOW_CLI_HAR_PATH=
+
+# Prints the real exception message + traceback for unhandled errors, to the
+# console and (under --json) into the payload, instead of the generic
+# placeholder. SECURITY: may leak tokens/cookies present in exception text.
+# GFLOW_CLI_DEBUG_TRACEBACK=
+
+# -----------------------------------------------------------------------------
+# Headless Daemon (gflow serve)
+# -----------------------------------------------------------------------------
+
+# API Token header for gflow serve authentication (required when binding to non-local interface, e.g. 0.0.0.0).
+# GFLOW_DAEMON_TOKEN=
+
+# Port for gflow serve. Default is 8000.
+# GFLOW_DAEMON_PORT=8000
+