flowsh-cli
flowsh-cli turns workflow YAML into executable shell scripts.
Use it when you want a small, reproducible way to encode a workflow once and rerun it locally or in CI.
Quick Start
uvx flowsh-cli path/to/workflows.yml
That reads the workflow YAML at the path you provide and writes harness scripts to the current working directory.
In this repository, the example workflow file lives at workflows.yml.
Useful flags:
uvx flowsh-cli path/to/workflows.yml --dry-run
uvx flowsh-cli path/to/workflows.yml --workflow wf_example
uvx flowsh-cli path/to/workflows.yml --force
uvx flowsh-cli path/to/workflows.yml --schema
uvx flowsh-cli --examples
uvx flowsh-cli --example simple
You can also run it locally with uv run flowsh-cli.
Workflow Shape
The input file is a single mapping with a workflows list:
workflows:
- id: wf_example
name: Example
params:
- name: ISSUE_NUMBER
description: Issue to inspect
required: true
steps:
- type: vars
values:
TODAY: date -u +%F
- type: bash
run: printf 'today=%s\n' "$TODAY"
- type: agent
agent: general
model: openai/gpt-5
command: review
expandPrompt: true
prompt: |
Review issue ${ISSUE_NUMBER} and summarize the repository state.
- type: parallel
steps:
- type: bash
run: echo "worker A"
- type: bash
run: echo "worker B"
- type: for
in: ITEMS
item: ITEM
steps:
- type: bash
run: echo "$ITEM"
- type: while
condition: '[ -n "$(ls doc/plan/steps/planned/ 2>/dev/null)" ]'
steps:
- type: bash
run: echo "keep looping until the queue is empty"
Harness paths are derived from workflow ids. wf_example becomes example.sh in the current working directory.
Step Types
| Type | Purpose | Notes |
|---|---|---|
vars |
Execute shell commands and export their stdout into shell variables | Variable names must be uppercase shell identifiers. |
bash |
Run shell commands | Runs with bash -euo pipefail. |
agent |
Call the agent runtime | Supports agent, model, command, capture, expandPrompt, and dangerouslySkipPermissions. |
for |
Iterate over newline-delimited values from a previous vars step |
Flat iteration only; nested for steps are not supported. |
while |
Re-evaluate a Bash condition before each iteration | Use for dynamic queues or other stateful loops that must keep discovering new work. |
parallel |
Run child steps concurrently | Children run as separate branches and the parent waits for all of them. |
Agent Behavior
agent prompts are literal by default. Use expandPrompt: true only when you want $VAR or ${VAR} tokens from earlier vars steps substituted at runtime.
expandPrompt: true does plain text replacement only. It does not evaluate shell expressions like $(...), backticks, or globs.
Set capture: VARIABLE_NAME on an agent step when you want the full agent output stored in a shell variable for later vars or bash steps.
Set dangerouslySkipPermissions: true only when you want the generated harness to pass --dangerously-skip-permissions to the agent runtime. The YAML alias dangerously-skip-permissions is also accepted.
Validation And Safety
The parser is strict:
- workflow YAML must be UTF-8, non-empty, and under 1 MiB
- the root must be a mapping with a
workflowskey - duplicate mapping keys and YAML aliases are rejected
- workflow ids must match
wf_[A-Za-z0-9_-]+ - workflow and step names must be non-empty single-line labels
- unsafe control characters are rejected in executable fields
agentnames may contain only letters, digits,_, and-
Generated harnesses are non-interactive, owner-executable, and refuse to overwrite existing outputs unless --force is set.
Logs go to .flowsh/logs by default. Set FLOWSH_LOG_DIR to use another relative log directory.
Development
uv sync
make install
make qa
make clean
make qa runs linting, tests, and a local build.
Release
make bump-patch
That bumps the patch version, runs QA, and publishes the package.
Limits
This repository intentionally stays focused on the Python CLI blueprint. It does not include the old TypeScript implementation, workflow templates, DSL explorer, plugin registry, or extra workflow node types.
Metadata
Release files for flowsh-cli 0.10.0
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | Actions |
|---|---|---|---|---|
| flowsh_cli-0.10.0.tar.gz | 16.0 kB | Without provenance | Details for flowsh_cli-0.10.0.tar.gz |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Actions Reset |
|---|---|---|---|---|
| flowsh_cli-0.10.0-py3-none-any.whl | Python 3 | none | any | Details for flowsh_cli-0.10.0-py3-none-any.whl |
Total release size: 35.0 kB
Release files / flowsh_cli-0.10.0.tar.gz
| Download URL | flowsh_cli-0.10.0.tar.gz |
|---|---|
| Size | 16.0 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
c19c8ba18fde93983ae610fe01fe21a8bf3b10617e9a64d76cedcda4a4801f45
|
|
BLAKE2b-256 checksum How to use checksums |
e8505b3aabb5f8d07a12c78a187c192aeb75d55b4675e1a362322fb13a2cedbb
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
uv/0.9.9 {"installer":{"name":"uv","version":"0.9.9"},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":null}
|
Release files / flowsh_cli-0.10.0-py3-none-any.whl
| Download URL | flowsh_cli-0.10.0-py3-none-any.whl |
|---|---|
| Size | 19.0 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
dc8bf2924a1d54fa91878b2729c9cfae76f1f7101881450862be259bfcf5cc02
|
|
BLAKE2b-256 checksum How to use checksums |
75229df8ce53df5c1164c59640ed8526d44187383e28abd254220b67d6523b7f
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
uv/0.9.9 {"installer":{"name":"uv","version":"0.9.9"},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":null}
|
Security for flowsh-cli 0.10.0
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
No provenance found
None of the files in this release were uploaded with provenance metadata.
A note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.