mozbridge-cli 0.6.0__tar.gz → 0.7.0__tar.gz

{mozbridge_cli-0.6.0 → mozbridge_cli-0.7.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: mozbridge-cli
-Version: 0.6.0
+Version: 0.7.0
 Summary: Command-line client for the Mozbridge deployment platform: SSO login, build, publish, status, and rollback for any project hosted on Mozbridge.
 Project-URL: Homepage, https://mozbridge.com
 Project-URL: Documentation, https://github.com/jessin01/mozbridge/blob/main/cli/docs/commands.md
@@ -305,7 +305,7 @@ so it belongs in the same pipeline step, before `publish`.
 | Env var | Default | Purpose |
 |---|---|---|
 | `MOZBRIDGE_LOGTO_ENDPOINT` | `https://auth.mozbridge.com` | Logto tenant endpoint |
-| `MOZBRIDGE_LOGTO_CLIENT_ID` | `swdtsuiz6dgzack1g75x3` | Logto Native app client id (public client) |
+| `MOZBRIDGE_LOGTO_CLIENT_ID` | `7zkurxlp5x98iw217wrhw` | Logto Native app client id (public client, device-flow-capable) |
 | `MOZBRIDGE_PUBLIC_API_URL` (falls back to `PUBLIC_API_URL`) | `https://api.mozbridge.com` | Mozbridge API base |
 | `MOZBRIDGE_GHCR_ORG` | `jessin01` | GHCR org used to compute default image names for multi-component publish |
 | `MOZBRIDGE_CONFIG_DIR` | `~/.config/mozbridge` | Where the session file lives (mainly for tests) |

{mozbridge_cli-0.6.0 → mozbridge_cli-0.7.0}/README.md

@@ -277,7 +277,7 @@ so it belongs in the same pipeline step, before `publish`.
 | Env var | Default | Purpose |
 |---|---|---|
 | `MOZBRIDGE_LOGTO_ENDPOINT` | `https://auth.mozbridge.com` | Logto tenant endpoint |
-| `MOZBRIDGE_LOGTO_CLIENT_ID` | `swdtsuiz6dgzack1g75x3` | Logto Native app client id (public client) |
+| `MOZBRIDGE_LOGTO_CLIENT_ID` | `7zkurxlp5x98iw217wrhw` | Logto Native app client id (public client, device-flow-capable) |
 | `MOZBRIDGE_PUBLIC_API_URL` (falls back to `PUBLIC_API_URL`) | `https://api.mozbridge.com` | Mozbridge API base |
 | `MOZBRIDGE_GHCR_ORG` | `jessin01` | GHCR org used to compute default image names for multi-component publish |
 | `MOZBRIDGE_CONFIG_DIR` | `~/.config/mozbridge` | Where the session file lives (mainly for tests) |

{mozbridge_cli-0.6.0 → mozbridge_cli-0.7.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "mozbridge-cli"
-version = "0.6.0"
+version = "0.7.0"
 description = "Command-line client for the Mozbridge deployment platform: SSO login, build, publish, status, and rollback for any project hosted on Mozbridge."
 readme = "README.md"
 requires-python = ">=3.10"

{mozbridge_cli-0.6.0 → mozbridge_cli-0.7.0}/src/mozbridge_cli/config.py

@@ -11,8 +11,18 @@ import os
 from pathlib import Path
 
 # Logto tenant serving Mozbridge's real, provisioned Native (public) client.
+#
+# client_id history: the original app (swdtsuiz6dgzack1g75x3) was created
+# without Logto's `customClientMetadata.isDeviceFlow` set, and that field can
+# ONLY be set at application creation — confirmed live, 2026-09-14, via a 422
+# `application.device_flow_not_changeable` on an attempted PATCH. It can
+# never complete a device-flow login and there is no way to repair it in
+# place. Every mozbridge-cli release through 0.6.0 shipped with that old,
+# permanently-broken id — this new one (created with is_device_flow=True,
+# verified live with a real 200 from POST /oidc/device/auth) is what actually
+# works, starting with this release.
 LOGTO_ENDPOINT = os.environ.get("MOZBRIDGE_LOGTO_ENDPOINT", "https://auth.mozbridge.com").rstrip("/")
-LOGTO_CLIENT_ID = os.environ.get("MOZBRIDGE_LOGTO_CLIENT_ID", "swdtsuiz6dgzack1g75x3")
+LOGTO_CLIENT_ID = os.environ.get("MOZBRIDGE_LOGTO_CLIENT_ID", "7zkurxlp5x98iw217wrhw")
 
 DEVICE_AUTH_URL = f"{LOGTO_ENDPOINT}/oidc/device/auth"
 TOKEN_URL = f"{LOGTO_ENDPOINT}/oidc/token"