flowus-auth

FlowUs Auth Skill

Use the flowus CLI with --json when machine-readable output is needed.

Commands

• Let the user choose interactively: flowus login
• Browser OAuth login: flowus login --browser
• Manual integration token setup: flowus login --manual
• Verify identity: flowus --json whoami
• Inspect auth state: flowus --json doctor
• Remove saved login credentials: flowus logout

Login Guidance

• Do not choose browser vs manual login on behalf of the user; present both options unless the user already chose one.
• Use browser login for desktop sessions where opening a local callback URL is acceptable.
• Use manual login for SSH, server, headless, and CI environments.
• For manual login persistence, inspect the user's environment before advising: shell (SHELL), OS, and CI. Prefer the CLI-generated recommendation from flowus login --manual.

Credential Rules

• Credential precedence is --token, then FLOWUS_TOKEN, then the token saved by flowus login.
• Base URL precedence is --base-url, then FLOWUS_BASE_URL, then the base URL saved by flowus login, then the default API URL.
• Saved credentials live at ~/.flowus/credentials.json by default. FLOWUS_CONFIG_DIR changes the directory.
• If both FLOWUS_TOKEN and saved login credentials exist, whoami uses FLOWUS_TOKEN and prints a warning on stderr.
• Do not print or save bearer tokens outside the FlowUs CLI credential store.
• Use flowus doctor before debugging other FlowUs commands when authentication is unclear.