flow2skill 0.1.0__tar.gz

flow2skill-0.1.0/CHANGELOG.md

@@ -0,0 +1,37 @@
+# Changelog
+
+All notable changes to Flow2Skill are documented here. The format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and releases follow semantic versioning.
+
+## [Unreleased]
+
+## [0.1.0] - 2026-07-30
+
+### Added
+
+- Local Studio for recording, compiling, inspecting, and previewing workflows.
+- Strict AST compiler for synchronous Playwright Python pytest recordings.
+- Fingerprinted JSON and YAML workflow contracts.
+- Portable `SKILL.md` generation.
+- Standalone Playwright/pytest proof generation.
+- Default environment protection for typed and asserted values.
+- Echo-aware protection for captured values repeated in selector and result text.
+- URL credential, secret-query, and secret-fragment redaction.
+- Review and approval classification for mutating browser actions.
+- Recorder cancellation and stale-capture cleanup.
+- Loopback, Host, Origin, token, body-size, and path-containment protections.
+- Executable packaged local demo and Windows launcher for source checkouts.
+- `flow2skill doctor` prerequisite validation.
+
+### Security
+
+- Recorded Python is parsed but never imported or executed.
+- Dynamic expressions, control flow, multiple tests, unsupported calls, malformed manifests, fingerprint changes, and risk downgrades fail closed.
+- Unknown call arguments, foreign environment placeholders, and templated navigation without approval fail closed.
+- Overlapping protected values are replaced longest-first so credential suffixes cannot leak.
+- Nested locator scopes, unknown selector modifiers, and untrusted source metadata fail closed.
+- JWT-bearing URL parameters are protected and obsolete generated tests are removed on bundle refresh.
+- Workflow compilation requires at least one executable assertion.
+- Live generated proofs fail nonzero rather than false-green skipping when review permission is missing.
+
+[Unreleased]: https://github.com/godhiraj-code/flow2skill/compare/v0.1.0...HEAD
+[0.1.0]: https://github.com/godhiraj-code/flow2skill/releases/tag/v0.1.0

flow2skill-0.1.0/CODE_OF_CONDUCT.md

@@ -0,0 +1,17 @@
+# Code of Conduct
+
+## Our standard
+
+Be respectful, specific, and technically honest. Give feedback about the work, not the person. Assume good intent while holding security, privacy, and evidence claims to a high standard.
+
+Unacceptable behavior includes harassment, discrimination, threats, publishing another person's private information, deliberately introducing insecure behavior, or using project spaces for spam.
+
+## Enforcement
+
+Project maintainers may edit or remove contributions, comments, issues, or other participation that violates this standard. Serious or repeated violations may result in a temporary or permanent ban from project spaces.
+
+Report conduct concerns privately to the project maintainer through the repository's available private contact route. Reports will be reviewed promptly and handled with appropriate confidentiality.
+
+## Scope
+
+This code applies in project spaces and when representing the project in public spaces.

flow2skill-0.1.0/CONTRIBUTING.md

@@ -0,0 +1,39 @@
+# Contributing to Flow2Skill
+
+Flow2Skill is intentionally narrow: compile one successful Playwright demonstration into a protected workflow, a portable skill, and executable proof. Changes should strengthen that contract rather than add autonomous planning or cloud dependencies.
+
+## Development setup
+
+```bash
+python -m venv .venv
+python -m pip install -e ".[dev]"
+python -m playwright install chromium
+flow2skill doctor
+```
+
+On Windows, use `.venv\Scripts\python.exe` and `.venv\Scripts\flow2skill.exe`.
+
+## Before opening a pull request
+
+```bash
+ruff format --check src tests
+ruff check src tests
+PYTEST_DISABLE_PLUGIN_AUTOLOAD=1 pytest -q
+python -m build
+python -m twine check dist/*
+```
+
+Add regression tests for every parser, redaction, manifest, replay, recorder, or Studio security change. A parser change must state whether unsupported input is rejected or preserved. Silent omission is not acceptable.
+
+## Pull request rules
+
+- Keep recordings synthetic. Never commit real credentials, cookies, storage state, private URLs, or generated raw captures.
+- Preserve Python 3.10–3.13 and Windows/Linux/macOS behavior.
+- Do not add shell execution around user-controlled recorder arguments.
+- Do not weaken default input protection or action gates.
+- Do not claim a workflow is proven without an executable assertion.
+- Update `CHANGELOG.md` for user-visible changes.
+
+## Reporting security issues
+
+Follow [SECURITY.md](SECURITY.md). Do not disclose vulnerabilities or sensitive recordings in public issues.

flow2skill-0.1.0/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Dhiraj Das
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

flow2skill-0.1.0/MANIFEST.in

@@ -0,0 +1,11 @@
+include LICENSE
+include README.md
+include CHANGELOG.md
+include CODE_OF_CONDUCT.md
+include CONTRIBUTING.md
+include SECURITY.md
+include launch-flow2skill.bat
+recursive-include tests *.py *.html
+recursive-include scripts *.py
+recursive-include src/flow2skill/ui *.html
+recursive-include docs *.png

flow2skill-0.1.0/PKG-INFO

@@ -0,0 +1,233 @@
+Metadata-Version: 2.4
+Name: flow2skill
+Version: 0.1.0
+Summary: Record a browser workflow once, export a portable agent skill and deterministic Playwright regression test.
+Author: Dhiraj Das
+License-Expression: MIT
+Project-URL: Homepage, https://github.com/godhiraj-code/flow2skill
+Project-URL: Repository, https://github.com/godhiraj-code/flow2skill
+Project-URL: Issues, https://github.com/godhiraj-code/flow2skill/issues
+Project-URL: Changelog, https://github.com/godhiraj-code/flow2skill/blob/main/CHANGELOG.md
+Keywords: playwright,browser-automation,ai-agents,agent-skills,testing
+Classifier: Development Status :: 3 - Alpha
+Classifier: Environment :: Console
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Requires-Python: >=3.10
+Description-Content-Type: text/markdown
+License-File: LICENSE
+Requires-Dist: playwright==1.61.0
+Provides-Extra: dev
+Requires-Dist: build>=1.2; extra == "dev"
+Requires-Dist: pytest>=8; extra == "dev"
+Requires-Dist: ruff>=0.9; extra == "dev"
+Requires-Dist: twine>=6; extra == "dev"
+Dynamic: license-file
+
+# Flow2Skill
+
+[![Flow2Skill: record, sanitize, review and prove](https://raw.githubusercontent.com/godhiraj-code/flow2skill/main/docs/flow2skill-demo.gif)](https://github.com/godhiraj-code/flow2skill/raw/refs/heads/main/docs/flow2skill-demo-narrated.mp4)
+
+**[Watch the 50-second narrated proof](https://github.com/godhiraj-code/flow2skill/raw/refs/heads/main/docs/flow2skill-demo-narrated.mp4)** · [Studio screenshot](https://raw.githubusercontent.com/godhiraj-code/flow2skill/main/docs/studio.png) · [Replay evidence](https://raw.githubusercontent.com/godhiraj-code/flow2skill/main/docs/replay-evidence.png)
+
+> **Browser agents improvise. Flow2Skill preserves what already worked.**
+
+Flow2Skill is a local-first compiler for demonstrated browser workflows. Record a successful flow with Playwright codegen. Flow2Skill turns it into an inspectable contract, a portable agent skill, and an executable regression test.
+
+```text
+human demonstration → strict AST compiler → protected workflow → agent skill + pytest proof
+```
+
+It exports:
+
+- `flow.json` and `flow.yaml`: fingerprinted workflow contracts;
+- `SKILL.md`: reviewable instructions for Hermes, Codex, Claude Code, Cursor, and other agents;
+- `test_<workflow>.py`: a standalone Playwright/pytest proof;
+- `README.md`: run instructions for the generated bundle.
+
+Flow2Skill is not an autonomous browser agent. It preserves a workflow that already worked.
+
+## Why use it
+
+Browser agents are useful when the path is unknown. They are expensive and inconsistent when the path is already known. Flow2Skill converts a successful run into a reusable asset with stable selectors, protected inputs, explicit review gates, and mechanical success criteria.
+
+- **Local-first:** Studio only binds to loopback.
+- **Parse, never execute:** recordings are inspected through Python's AST and are never imported or run.
+- **Protected by default:** typed values and text/value assertions become environment variables.
+- **Echo-aware:** a protected input repeated in later selector or result text is replaced with the same runtime variable.
+- **Fail closed:** dynamic values, nested locator scopes, control flow, multiple tests, missing assertions, unknown selector modifiers, and unsupported calls stop compilation.
+- **Review before mutation:** all clicks, key presses, fills, selections, and check operations are review-gated. Publish, send, buy, submit, delete, and similar actions are approval-gated.
+- **Proof required:** a workflow without an executable assertion is rejected.
+- **Portable:** the generated pytest does not depend on Flow2Skill at runtime.
+
+## Install
+
+Prerequisites:
+
+- Python 3.10–3.13;
+- Node.js with `npx`, required only for recording;
+- Chromium installed through Playwright, required for default replay.
+
+```bash
+python -m pip install flow2skill
+python -m playwright install chromium
+flow2skill doctor
+flow2skill studio
+```
+
+From a source checkout:
+
+```bash
+python -m venv .venv
+# Windows
+.venv\Scripts\python.exe -m pip install -e ".[dev]"
+.venv\Scripts\python.exe -m playwright install chromium
+.venv\Scripts\flow2skill.exe doctor
+.venv\Scripts\flow2skill.exe studio
+```
+
+Windows source checkouts also include `launch-flow2skill.bat`. Installed wheels use the `flow2skill` console command; the batch launcher is not installed by the wheel.
+
+Studio opens at `http://127.0.0.1:8765` and writes bundles to `~/Flow2SkillWorkspaces` unless another root is supplied.
+
+## Thirty-second proof
+
+Generate an entirely local sample bundle:
+
+```bash
+flow2skill demo --out ./flow2skill-demo
+```
+
+Run it against Flow2Skill's packaged local fixture:
+
+```bash
+# macOS/Linux
+F2S_LABEL_API_TOKEN_1="runtime-demo-token" \
+FLOW2SKILL_LIVE=1 \
+FLOW2SKILL_ALLOW_SIDE_EFFECTS=1 \
+pytest -q ./flow2skill-demo/test_agent_release_gate.py
+```
+
+Windows Command Prompt:
+
+```cmd
+set F2S_LABEL_API_TOKEN_1=runtime-demo-token
+set FLOW2SKILL_LIVE=1
+set FLOW2SKILL_ALLOW_SIDE_EFFECTS=1
+pytest -q flow2skill-demo\test_agent_release_gate.py
+```
+
+The side-effect flag is required because the proof fills a synthetic API-token field and clicks a validation button, even though the packaged fixture is local and harmless. The captured synthetic value is absent from the generated bundle.
+
+## Record a workflow
+
+```bash
+flow2skill record https://example.com ^
+  --name "Documentation search" ^
+  --success-text "Results"
+```
+
+Complete the flow in Playwright Inspector, capture an assertion or provide `--success-text`, and close the recorder window. Flow2Skill compiles the capture and deletes its temporary raw codegen and recorder log.
+
+Recording uses the pinned Playwright codegen version declared by this package. `flow2skill doctor` verifies version alignment and prerequisites.
+
+## Compile existing codegen
+
+```bash
+flow2skill compile recording.py \
+  --name "Documentation search" \
+  --intent "Search the docs and prove results appear." \
+  --out ./compiled-flow
+```
+
+Protection is enabled by default. `--no-protect-inputs` preserves non-sensitive literal values and should only be used for known-public test data. Sensitive fields remain protected.
+
+**Input-file contract:** `flow2skill compile` never deletes the file you explicitly provide. Playwright codegen files can contain credentials or typed data; store and remove that source according to your own retention policy.
+
+## Inspect and replay
+
+Dry-run without opening a browser:
+
+```bash
+flow2skill inspect ./compiled-flow/flow.json
+```
+
+Run the generated standalone proof:
+
+```bash
+FLOW2SKILL_LIVE=1 pytest -q ./compiled-flow/test_documentation_search.py
+```
+
+Use `FLOW2SKILL_HEADED=1` to watch. Any workflow containing review or approval actions also requires `FLOW2SKILL_ALLOW_SIDE_EFFECTS=1`. Set it only after reviewing the exact generated plan. Use `FLOW2SKILL_CHANNEL=chrome` to replay with an installed Chrome channel instead of Playwright's managed Chromium.
+
+## Supported capture surface
+
+- one synchronous pytest-style test function;
+- direct Playwright call statements only;
+- `page.goto`;
+- role, label, placeholder, text, test-id, title, alt-text, and CSS selectors;
+- `.first` and literal `.nth(...)` modifiers;
+- `click`, `fill`, `press`, `select_option`, `check`, `uncheck`, and `hover`;
+- `expect(...).to_be_visible()`;
+- exact `to_have_text()` and substring `to_contain_text()` assertions;
+- `expect(page).to_have_url()`;
+- `expect(...).to_have_value()`.
+
+Unsupported calls, dynamic expressions, assignments, loops, branches, context managers, nested functions, and multiple tests are rejected. They are never flattened or silently omitted.
+
+## Security and privacy model
+
+### Recording boundary
+
+During live recording, Playwright briefly writes raw Python to a hidden workspace file. Flow2Skill deletes this file and the recorder log on completion, cancellation, launch failure, or compile failure. On startup it removes abandoned raw captures older than one hour. A hard power loss can therefore leave a temporary file until the next cleanup window. Do not record real production credentials when synthetic test credentials are available.
+
+### Manifest integrity
+
+`flow.json` carries a SHA-256 fingerprint. Loading rejects unknown fields, malformed selector types, missing fingerprints, content tampering, stale slugs, and risk-classification downgrades. The fingerprint detects accidental or local modification; it is not a cryptographic signature from a trusted publisher.
+
+Runtime variables are restricted to the compiler-owned `F2S_*` namespace. Captured `${VARIABLE}` syntax is rejected instead of being allowed to read arbitrary host environment variables. Navigation containing protected values is approval-gated because it can transmit the value to the destination.
+
+Common credential-bearing URL parameters, including JWT, token, signature, session, authentication, and password fields, are replaced with runtime variables. Recompiling into an existing managed bundle directory removes obsolete generated `test_*.py` files so stale executable proofs cannot survive unnoticed.
+
+### Studio boundary
+
+Studio enforces:
+
+- loopback-only binding;
+- strict local `Host` validation against DNS rebinding;
+- same-origin checks;
+- a random per-process request token;
+- a one-megabyte JSON body limit;
+- strict request field types;
+- workspace and artifact path containment;
+- no-store and browser hardening headers.
+
+### Approval boundary
+
+Flow2Skill compiles instructions; it does not grant permission. Generated skills call out approval-gated actions. Generated tests are disabled unless `FLOW2SKILL_LIVE=1` is present. Once live execution is requested, a missing side-effect flag fails the test rather than reporting a successful skip.
+
+See [SECURITY.md](SECURITY.md) for the threat model and reporting process.
+
+## Development
+
+```bash
+python -m pip install -e ".[dev]"
+ruff format --check src tests scripts
+ruff check src tests scripts
+PYTEST_DISABLE_PLUGIN_AUTOLOAD=1 pytest -q
+python -m build
+python -m twine check dist/*
+```
+
+The release gate also installs the wheel into a clean environment, runs the packaged demo against a real browser, checks source/wheel contents, and scans tracked files for high-confidence secrets and private paths.
+
+## Intentional boundaries
+
+Flow2Skill does not include cloud sync, a browser extension, shared secret storage, autonomous planning, or LLM selector healing. Those features create a platform before the deterministic compiler has earned it. The current product does one job: preserve a successful browser workflow as a reviewable procedure and executable proof.
+
+## License
+
+MIT

flow2skill-0.1.0/README.md

@@ -0,0 +1,204 @@
+# Flow2Skill
+
+[![Flow2Skill: record, sanitize, review and prove](https://raw.githubusercontent.com/godhiraj-code/flow2skill/main/docs/flow2skill-demo.gif)](https://github.com/godhiraj-code/flow2skill/raw/refs/heads/main/docs/flow2skill-demo-narrated.mp4)
+
+**[Watch the 50-second narrated proof](https://github.com/godhiraj-code/flow2skill/raw/refs/heads/main/docs/flow2skill-demo-narrated.mp4)** · [Studio screenshot](https://raw.githubusercontent.com/godhiraj-code/flow2skill/main/docs/studio.png) · [Replay evidence](https://raw.githubusercontent.com/godhiraj-code/flow2skill/main/docs/replay-evidence.png)
+
+> **Browser agents improvise. Flow2Skill preserves what already worked.**
+
+Flow2Skill is a local-first compiler for demonstrated browser workflows. Record a successful flow with Playwright codegen. Flow2Skill turns it into an inspectable contract, a portable agent skill, and an executable regression test.
+
+```text
+human demonstration → strict AST compiler → protected workflow → agent skill + pytest proof
+```
+
+It exports:
+
+- `flow.json` and `flow.yaml`: fingerprinted workflow contracts;
+- `SKILL.md`: reviewable instructions for Hermes, Codex, Claude Code, Cursor, and other agents;
+- `test_<workflow>.py`: a standalone Playwright/pytest proof;
+- `README.md`: run instructions for the generated bundle.
+
+Flow2Skill is not an autonomous browser agent. It preserves a workflow that already worked.
+
+## Why use it
+
+Browser agents are useful when the path is unknown. They are expensive and inconsistent when the path is already known. Flow2Skill converts a successful run into a reusable asset with stable selectors, protected inputs, explicit review gates, and mechanical success criteria.
+
+- **Local-first:** Studio only binds to loopback.
+- **Parse, never execute:** recordings are inspected through Python's AST and are never imported or run.
+- **Protected by default:** typed values and text/value assertions become environment variables.
+- **Echo-aware:** a protected input repeated in later selector or result text is replaced with the same runtime variable.
+- **Fail closed:** dynamic values, nested locator scopes, control flow, multiple tests, missing assertions, unknown selector modifiers, and unsupported calls stop compilation.
+- **Review before mutation:** all clicks, key presses, fills, selections, and check operations are review-gated. Publish, send, buy, submit, delete, and similar actions are approval-gated.
+- **Proof required:** a workflow without an executable assertion is rejected.
+- **Portable:** the generated pytest does not depend on Flow2Skill at runtime.
+
+## Install
+
+Prerequisites:
+
+- Python 3.10–3.13;
+- Node.js with `npx`, required only for recording;
+- Chromium installed through Playwright, required for default replay.
+
+```bash
+python -m pip install flow2skill
+python -m playwright install chromium
+flow2skill doctor
+flow2skill studio
+```
+
+From a source checkout:
+
+```bash
+python -m venv .venv
+# Windows
+.venv\Scripts\python.exe -m pip install -e ".[dev]"
+.venv\Scripts\python.exe -m playwright install chromium
+.venv\Scripts\flow2skill.exe doctor
+.venv\Scripts\flow2skill.exe studio
+```
+
+Windows source checkouts also include `launch-flow2skill.bat`. Installed wheels use the `flow2skill` console command; the batch launcher is not installed by the wheel.
+
+Studio opens at `http://127.0.0.1:8765` and writes bundles to `~/Flow2SkillWorkspaces` unless another root is supplied.
+
+## Thirty-second proof
+
+Generate an entirely local sample bundle:
+
+```bash
+flow2skill demo --out ./flow2skill-demo
+```
+
+Run it against Flow2Skill's packaged local fixture:
+
+```bash
+# macOS/Linux
+F2S_LABEL_API_TOKEN_1="runtime-demo-token" \
+FLOW2SKILL_LIVE=1 \
+FLOW2SKILL_ALLOW_SIDE_EFFECTS=1 \
+pytest -q ./flow2skill-demo/test_agent_release_gate.py
+```
+
+Windows Command Prompt:
+
+```cmd
+set F2S_LABEL_API_TOKEN_1=runtime-demo-token
+set FLOW2SKILL_LIVE=1
+set FLOW2SKILL_ALLOW_SIDE_EFFECTS=1
+pytest -q flow2skill-demo\test_agent_release_gate.py
+```
+
+The side-effect flag is required because the proof fills a synthetic API-token field and clicks a validation button, even though the packaged fixture is local and harmless. The captured synthetic value is absent from the generated bundle.
+
+## Record a workflow
+
+```bash
+flow2skill record https://example.com ^
+  --name "Documentation search" ^
+  --success-text "Results"
+```
+
+Complete the flow in Playwright Inspector, capture an assertion or provide `--success-text`, and close the recorder window. Flow2Skill compiles the capture and deletes its temporary raw codegen and recorder log.
+
+Recording uses the pinned Playwright codegen version declared by this package. `flow2skill doctor` verifies version alignment and prerequisites.
+
+## Compile existing codegen
+
+```bash
+flow2skill compile recording.py \
+  --name "Documentation search" \
+  --intent "Search the docs and prove results appear." \
+  --out ./compiled-flow
+```
+
+Protection is enabled by default. `--no-protect-inputs` preserves non-sensitive literal values and should only be used for known-public test data. Sensitive fields remain protected.
+
+**Input-file contract:** `flow2skill compile` never deletes the file you explicitly provide. Playwright codegen files can contain credentials or typed data; store and remove that source according to your own retention policy.
+
+## Inspect and replay
+
+Dry-run without opening a browser:
+
+```bash
+flow2skill inspect ./compiled-flow/flow.json
+```
+
+Run the generated standalone proof:
+
+```bash
+FLOW2SKILL_LIVE=1 pytest -q ./compiled-flow/test_documentation_search.py
+```
+
+Use `FLOW2SKILL_HEADED=1` to watch. Any workflow containing review or approval actions also requires `FLOW2SKILL_ALLOW_SIDE_EFFECTS=1`. Set it only after reviewing the exact generated plan. Use `FLOW2SKILL_CHANNEL=chrome` to replay with an installed Chrome channel instead of Playwright's managed Chromium.
+
+## Supported capture surface
+
+- one synchronous pytest-style test function;
+- direct Playwright call statements only;
+- `page.goto`;
+- role, label, placeholder, text, test-id, title, alt-text, and CSS selectors;
+- `.first` and literal `.nth(...)` modifiers;
+- `click`, `fill`, `press`, `select_option`, `check`, `uncheck`, and `hover`;
+- `expect(...).to_be_visible()`;
+- exact `to_have_text()` and substring `to_contain_text()` assertions;
+- `expect(page).to_have_url()`;
+- `expect(...).to_have_value()`.
+
+Unsupported calls, dynamic expressions, assignments, loops, branches, context managers, nested functions, and multiple tests are rejected. They are never flattened or silently omitted.
+
+## Security and privacy model
+
+### Recording boundary
+
+During live recording, Playwright briefly writes raw Python to a hidden workspace file. Flow2Skill deletes this file and the recorder log on completion, cancellation, launch failure, or compile failure. On startup it removes abandoned raw captures older than one hour. A hard power loss can therefore leave a temporary file until the next cleanup window. Do not record real production credentials when synthetic test credentials are available.
+
+### Manifest integrity
+
+`flow.json` carries a SHA-256 fingerprint. Loading rejects unknown fields, malformed selector types, missing fingerprints, content tampering, stale slugs, and risk-classification downgrades. The fingerprint detects accidental or local modification; it is not a cryptographic signature from a trusted publisher.
+
+Runtime variables are restricted to the compiler-owned `F2S_*` namespace. Captured `${VARIABLE}` syntax is rejected instead of being allowed to read arbitrary host environment variables. Navigation containing protected values is approval-gated because it can transmit the value to the destination.
+
+Common credential-bearing URL parameters, including JWT, token, signature, session, authentication, and password fields, are replaced with runtime variables. Recompiling into an existing managed bundle directory removes obsolete generated `test_*.py` files so stale executable proofs cannot survive unnoticed.
+
+### Studio boundary
+
+Studio enforces:
+
+- loopback-only binding;
+- strict local `Host` validation against DNS rebinding;
+- same-origin checks;
+- a random per-process request token;
+- a one-megabyte JSON body limit;
+- strict request field types;
+- workspace and artifact path containment;
+- no-store and browser hardening headers.
+
+### Approval boundary
+
+Flow2Skill compiles instructions; it does not grant permission. Generated skills call out approval-gated actions. Generated tests are disabled unless `FLOW2SKILL_LIVE=1` is present. Once live execution is requested, a missing side-effect flag fails the test rather than reporting a successful skip.
+
+See [SECURITY.md](SECURITY.md) for the threat model and reporting process.
+
+## Development
+
+```bash
+python -m pip install -e ".[dev]"
+ruff format --check src tests scripts
+ruff check src tests scripts
+PYTEST_DISABLE_PLUGIN_AUTOLOAD=1 pytest -q
+python -m build
+python -m twine check dist/*
+```
+
+The release gate also installs the wheel into a clean environment, runs the packaged demo against a real browser, checks source/wheel contents, and scans tracked files for high-confidence secrets and private paths.
+
+## Intentional boundaries
+
+Flow2Skill does not include cloud sync, a browser extension, shared secret storage, autonomous planning, or LLM selector healing. Those features create a platform before the deterministic compiler has earned it. The current product does one job: preserve a successful browser workflow as a reviewable procedure and executable proof.
+
+## License
+
+MIT

flow2skill-0.1.0/SECURITY.md

@@ -0,0 +1,52 @@
+# Security Policy
+
+## Supported versions
+
+Security fixes are applied to the latest released minor version of Flow2Skill.
+
+| Version | Supported |
+| --- | --- |
+| 0.1.x | Yes |
+| Earlier | No |
+
+## Report a vulnerability
+
+Use GitHub's **Private vulnerability reporting** for this repository. Do not open a public issue containing credentials, raw Playwright recordings, private URLs, or an exploit that has not been fixed.
+
+Include:
+
+- affected Flow2Skill version and operating system;
+- the smallest safe reproduction;
+- expected and observed behavior;
+- whether a raw recording, generated artifact, Studio endpoint, or replay boundary is involved.
+
+You should receive an acknowledgement within seven days. A fix and disclosure timeline will be coordinated based on severity.
+
+## Threat model
+
+Flow2Skill treats all recordings and workflow manifests as untrusted input.
+
+Security boundaries include:
+
+- AST parsing without importing or executing recorded Python;
+- a strict allowlist of portable Playwright calls;
+- fail-closed rejection of nested locator scopes and unknown selector modifiers;
+- default protection of typed and asserted values;
+- correlation and replacement of protected values echoed in later selector text;
+- URL credential, query-secret, and fragment-secret redaction;
+- compiler-owned `F2S_*` runtime variables; captured placeholder syntax is rejected;
+- fingerprint and schema validation for manifests;
+- review or approval gates for mutating browser actions;
+- loopback-only Studio binding, local Host validation, same-origin enforcement, and request tokens;
+- deletion of recorder-owned raw captures and logs.
+
+## Non-goals and residual risks
+
+- A SHA-256 manifest fingerprint detects modification but does not authenticate an author.
+- Selector text and public page labels are preserved and may reveal application structure.
+- A hard crash can leave a temporary raw recording until startup cleanup removes files older than one hour.
+- `flow2skill compile recording.py` does not delete the user-supplied source file.
+- Environment variables can be exposed by the host process, shell history, CI logs, or malicious test code. Flow2Skill does not provide a secret store.
+- Navigation containing a runtime value is approval-gated because replay sends that value to the destination.
+- Bundle output directories are Flow2Skill-managed: refreshing a bundle removes obsolete generated `test_*.py` files but preserves unrelated filenames.
+- Generated tests drive a real browser. Review the plan and target environment before enabling live replay.

flow2skill-0.1.0/launch-flow2skill.bat

@@ -0,0 +1,14 @@
+@echo off
+setlocal
+cd /d "%~dp0"
+if exist ".venv\Scripts\flow2skill.exe" (
+  ".venv\Scripts\flow2skill.exe" studio
+) else (
+  python -m flow2skill studio
+)
+if errorlevel 1 (
+  echo.
+  echo Flow2Skill could not start. Install it once with:
+  echo   python -m pip install -e ".[dev]"
+  pause
+)