gflow-cli 0.15.0__tar.gz → 0.15.1__tar.gz

{gflow_cli-0.15.0 → gflow_cli-0.15.1}/AGENTS.md

@@ -76,10 +76,12 @@ The `skills/` directory ships installable agent skill docs in plain Markdown wit
 | `gflow-cli` | [`skills/gflow-cli/SKILL.md`](skills/gflow-cli/SKILL.md) | User wants to run any `gflow` command — auth, T2V, I2V, T2I, I2I, batch |
 | `predict` | [`skills/predict/SKILL.md`](skills/predict/SKILL.md) | Pre-implementation adversarial analysis before any high-stakes change |
 | `scenario` | [`skills/scenario/SKILL.md`](skills/scenario/SKILL.md) | Edge-case explorer after a predict GO/CAUTION |
+| `plan` | [`skills/plan/SKILL.md`](skills/plan/SKILL.md) | Create a structured task-by-task implementation plan for a feature |
+| `status` | [`skills/status/SKILL.md`](skills/status/SKILL.md) | Show current plan state, progress, and next unchecked task |
 | `pr-council-review` | [`skills/pr-council-review/SKILL.md`](skills/pr-council-review/SKILL.md) | Multi-dimensional PR council review |
 
 **Cursor / Aider / Codex / Gemini CLI:** paste or include the relevant `SKILL.md` in your system context.
-**Claude Code:** symlink `skills/gflow-cli` to `~/.claude/skills/gflow-cli` to register the skill; the `/gflow:` slash commands (in `.claude/commands/gflow/`) are auto-discovered from the project directory.
+**Claude Code:** the `/gflow:` slash commands in `.claude/commands/gflow/` are auto-discovered when the project is open — no extra setup needed. To register a skill globally, copy the command file to `~/.claude/commands/`.
 **Custom agents:** fetch `skills/gflow-cli/SKILL.md` into your knowledge base before answering gflow questions.
 
 The SkillOpt harness at `scripts/dev/skillopt/` measures how accurately each skill guides an agent, and supports multiple providers (Anthropic, OpenAI-compat, Gemini, local models). See [`scripts/dev/skillopt/README.md`](scripts/dev/skillopt/README.md).

{gflow_cli-0.15.0 → gflow_cli-0.15.1}/CHANGELOG.md

@@ -7,6 +7,21 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.15.1] — 2026-06-10
+
+### Changed
+
+- Added `--disable-dev-shm-usage` to Chrome launch args in both `FlowApiClient._persistent_context_kwargs()` and `UiAutomationTransport.setup()` — prevents OOM in Docker containers with the default 64 MB `/dev/shm` allocation; no effect on developer machines with adequate shared memory
+- README Stats badges hardened against shields.io outages — GitHub-stat badges now pass `cacheSeconds=3600` (mitigates shields.io's shared GitHub token-pool exhaustion, the "Unable to select next GitHub token from pool" error) and the PyPI downloads badge moved from `img.shields.io/pypi/dm` to pepy.tech (pypistats rate-limits shields.io upstream)
+
+### Added
+
+- `scripts/diag/` directory — documented home for investigation scripts that require a live authenticated profile; includes `memory_profile.py` (Chrome process-tree RSS profiler for issue #155), `capture_flow_traffic.py`, and `recaptcha_mint.py` (both moved from `scripts/` root via git mv, history preserved)
+
+### Fixed
+
+- Video status poll now raises `AuthExpiredError` (exit 3) immediately on HTTP 401 from `batchCheckAsyncVideoGenerationStatus` instead of silently timing out after 600 s with a bare `TimeoutError` (exit 1) — session expiry is now detected mid-workflow, not only at login time (issue #156)
+
 ## [0.15.0] — 2026-06-09
 
 ### Added
@@ -1469,7 +1484,8 @@ shell-script template that branches on these codes.
 
 First skeleton. Not functional end-to-end yet.
 
-[Unreleased]: https://github.com/ffroliva/gflow-cli/compare/v0.15.0...HEAD
+[Unreleased]: https://github.com/ffroliva/gflow-cli/compare/v0.15.1...HEAD
+[0.15.1]: https://github.com/ffroliva/gflow-cli/compare/v0.15.0...v0.15.1
 [0.15.0]: https://github.com/ffroliva/gflow-cli/compare/v0.14.0...v0.15.0
 [0.14.0]: https://github.com/ffroliva/gflow-cli/compare/v0.13.0...v0.14.0
 [0.13.0]: https://github.com/ffroliva/gflow-cli/compare/v0.12.0...v0.13.0

{gflow_cli-0.15.0 → gflow_cli-0.15.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: gflow-cli
-Version: 0.15.0
+Version: 0.15.1
 Summary: Unofficial CLI for Google Flow — drive Veo image-to-video generations from the terminal.
 Project-URL: Homepage, https://github.com/ffroliva/gflow-cli
 Project-URL: Issues, https://github.com/ffroliva/gflow-cli/issues
@@ -196,13 +196,13 @@ gflow CLI  →  Provider (interchangeable)  →  Flow (ui_automation) / Mock (te
 
 ## Stats
 
-[![GitHub stars](https://img.shields.io/github/stars/ffroliva/gflow-cli?style=social)](https://github.com/ffroliva/gflow-cli/stargazers)
-[![GitHub forks](https://img.shields.io/github/forks/ffroliva/gflow-cli?style=social)](https://github.com/ffroliva/gflow-cli/network/members)
-[![GitHub watchers](https://img.shields.io/github/watchers/ffroliva/gflow-cli?style=social)](https://github.com/ffroliva/gflow-cli/watchers)
-[![GitHub issues](https://img.shields.io/github/issues/ffroliva/gflow-cli)](https://github.com/ffroliva/gflow-cli/issues)
-[![GitHub pull requests](https://img.shields.io/github/issues-pr/ffroliva/gflow-cli)](https://github.com/ffroliva/gflow-cli/pulls)
-[![GitHub last commit](https://img.shields.io/github/last-commit/ffroliva/gflow-cli)](https://github.com/ffroliva/gflow-cli/commits/main)
-[![GitHub repo size](https://img.shields.io/github/repo-size/ffroliva/gflow-cli)](https://github.com/ffroliva/gflow-cli)
-[![PyPI downloads](https://img.shields.io/pypi/dm/gflow-cli.svg)](https://pypi.org/project/gflow-cli/)
+[![GitHub stars](https://img.shields.io/github/stars/ffroliva/gflow-cli?style=social&cacheSeconds=3600)](https://github.com/ffroliva/gflow-cli/stargazers)
+[![GitHub forks](https://img.shields.io/github/forks/ffroliva/gflow-cli?style=social&cacheSeconds=3600)](https://github.com/ffroliva/gflow-cli/network/members)
+[![GitHub watchers](https://img.shields.io/github/watchers/ffroliva/gflow-cli?style=social&cacheSeconds=3600)](https://github.com/ffroliva/gflow-cli/watchers)
+[![GitHub issues](https://img.shields.io/github/issues/ffroliva/gflow-cli?cacheSeconds=3600)](https://github.com/ffroliva/gflow-cli/issues)
+[![GitHub pull requests](https://img.shields.io/github/issues-pr/ffroliva/gflow-cli?cacheSeconds=3600)](https://github.com/ffroliva/gflow-cli/pulls)
+[![GitHub last commit](https://img.shields.io/github/last-commit/ffroliva/gflow-cli?cacheSeconds=3600)](https://github.com/ffroliva/gflow-cli/commits/main)
+[![GitHub repo size](https://img.shields.io/github/repo-size/ffroliva/gflow-cli?cacheSeconds=3600)](https://github.com/ffroliva/gflow-cli)
+[![PyPI downloads](https://static.pepy.tech/badge/gflow-cli/month)](https://pepy.tech/project/gflow-cli)
 
 If `gflow-cli` saves you time, please ⭐ the repo — it is the cheapest way to support the project.

{gflow_cli-0.15.0 → gflow_cli-0.15.1}/README.md

@@ -132,13 +132,13 @@ gflow CLI  →  Provider (interchangeable)  →  Flow (ui_automation) / Mock (te
 
 ## Stats
 
-[![GitHub stars](https://img.shields.io/github/stars/ffroliva/gflow-cli?style=social)](https://github.com/ffroliva/gflow-cli/stargazers)
-[![GitHub forks](https://img.shields.io/github/forks/ffroliva/gflow-cli?style=social)](https://github.com/ffroliva/gflow-cli/network/members)
-[![GitHub watchers](https://img.shields.io/github/watchers/ffroliva/gflow-cli?style=social)](https://github.com/ffroliva/gflow-cli/watchers)
-[![GitHub issues](https://img.shields.io/github/issues/ffroliva/gflow-cli)](https://github.com/ffroliva/gflow-cli/issues)
-[![GitHub pull requests](https://img.shields.io/github/issues-pr/ffroliva/gflow-cli)](https://github.com/ffroliva/gflow-cli/pulls)
-[![GitHub last commit](https://img.shields.io/github/last-commit/ffroliva/gflow-cli)](https://github.com/ffroliva/gflow-cli/commits/main)
-[![GitHub repo size](https://img.shields.io/github/repo-size/ffroliva/gflow-cli)](https://github.com/ffroliva/gflow-cli)
-[![PyPI downloads](https://img.shields.io/pypi/dm/gflow-cli.svg)](https://pypi.org/project/gflow-cli/)
+[![GitHub stars](https://img.shields.io/github/stars/ffroliva/gflow-cli?style=social&cacheSeconds=3600)](https://github.com/ffroliva/gflow-cli/stargazers)
+[![GitHub forks](https://img.shields.io/github/forks/ffroliva/gflow-cli?style=social&cacheSeconds=3600)](https://github.com/ffroliva/gflow-cli/network/members)
+[![GitHub watchers](https://img.shields.io/github/watchers/ffroliva/gflow-cli?style=social&cacheSeconds=3600)](https://github.com/ffroliva/gflow-cli/watchers)
+[![GitHub issues](https://img.shields.io/github/issues/ffroliva/gflow-cli?cacheSeconds=3600)](https://github.com/ffroliva/gflow-cli/issues)
+[![GitHub pull requests](https://img.shields.io/github/issues-pr/ffroliva/gflow-cli?cacheSeconds=3600)](https://github.com/ffroliva/gflow-cli/pulls)
+[![GitHub last commit](https://img.shields.io/github/last-commit/ffroliva/gflow-cli?cacheSeconds=3600)](https://github.com/ffroliva/gflow-cli/commits/main)
+[![GitHub repo size](https://img.shields.io/github/repo-size/ffroliva/gflow-cli?cacheSeconds=3600)](https://github.com/ffroliva/gflow-cli)
+[![PyPI downloads](https://static.pepy.tech/badge/gflow-cli/month)](https://pepy.tech/project/gflow-cli)
 
 If `gflow-cli` saves you time, please ⭐ the repo — it is the cheapest way to support the project.

{gflow_cli-0.15.0 → gflow_cli-0.15.1}/docs/INDEX.md

@@ -37,6 +37,7 @@ Welcome to the `gflow-cli` documentation. This index is the routing layer: it te
 | **[tasks/lessons.md](../tasks/lessons.md)** | Running notebook of patterns + reviewer findings, dated and traced to commits | Starting a new phase; debugging "why did the council flag this?" |
 | **[skills/README.md](../skills/README.md)** | Installable agent skill docs (gflow-cli, predict, pr-council-review, scenario) — cross-tool portable Markdown consumed by Claude Code, Cursor, Codex, Gemini CLI, Aider, etc. | Any agent wanting to use gflow-cli correctly |
 | **[scripts/dev/skillopt/README.md](../scripts/dev/skillopt/README.md)** | SkillOpt mock harness — rollout→score loop for measuring and improving skill doc accuracy across multiple LLM providers | Measuring a skill edit's impact; comparing Claude vs GPT-4o vs Gemini on gflow tasks |
+| **[scripts/diag/README.md](../scripts/diag/README.md)** | Diagnostic investigation scripts — run against a live authenticated profile to capture wire samples, measure Chrome memory, or mint reCAPTCHA tokens | Running a one-off investigation against a live Flow session; establishing baseline measurements for issue #155 |
 
 ## Agent commands
 
@@ -54,6 +55,9 @@ Slash commands for Claude Code, stored in `.claude/commands/gflow/`. All prefixe
 | `/gflow:release` | Full release flow (calls `/gflow:changelog` + `/gflow:check`) | Cutting a new version |
 | `/gflow:predict <proposal>` | 5-persona pre-implementation analysis → GO / CAUTION / STOP | Before any high-stakes design decision (new transport, auth change, selector redesign, schema migration) |
 | `/gflow:scenario <feature>` | 12-dimension edge-case explorer → severity-ranked scenario table + BDD skeleton | After predict GO/CAUTION; before `/gflow:plan` |
+| `/gflow:pr-council-review [PR#]` | Multi-dimensional council review of an open PR (5 baseline + adaptive dimensions) | Before merging any non-trivial PR; mandatory for auth/transport/data changes |
+| `/gflow:branch-review` | Same council review run against the current local feature branch (no PR needed) | Pre-PR self-audit; after predict/scenario on a high-stakes branch |
+| `/gflow:doc-review` | Systematic council-driven audit of documentation completeness and drift | Before cutting a release; after major documentation changes |
 
 **Governance:** commands are executable docs — they decay like any doc. When a phase advances or a file path changes, update the relevant command in the same commit. `/gflow:release` includes a staleness review step.
 
@@ -90,6 +94,7 @@ Slash commands for Claude Code, stored in `.claude/commands/gflow/`. All prefixe
 **"How do I use this project's skills in Cursor / Codex / Gemini CLI / Aider?"** → [skills/README.md](../skills/README.md#use-with-other-agents)
 **"How do I benchmark a skill doc against real tasks?"** → [scripts/dev/skillopt/README.md](../scripts/dev/skillopt/README.md)
 **"How do I compare Claude vs GPT-4o vs Gemini on gflow tasks?"** → `python scripts/dev/skillopt/harness.py --provider openai --model gpt-4o` (see [skillopt README](../scripts/dev/skillopt/README.md))
+**"What does Chrome actually use in RAM during a generation?"** → run `uv run python scripts/diag/memory_profile.py --profile NAME` (see [scripts/diag/README.md](../scripts/diag/README.md))
 **"How do I report a security issue?"** → [SECURITY § Reporting](SECURITY.md#reporting)
 **"What branch do I work on? How do I name it?"** → [DEVELOPMENT § Branching model](DEVELOPMENT.md#branching-model)
 **"How do I handle an external GitHub PR?"** → [GITHUB § Scenario Matrix](GITHUB.md#scenario-matrix)
@@ -104,7 +109,7 @@ Slash commands for Claude Code, stored in `.claude/commands/gflow/`. All prefixe
 **"A gflow command hangs / fails — where do I start?"** → [DEBUGGING § Quick reference](DEBUGGING.md#quick-reference)
 **"Flow's UI broke a selector — how do I diagnose it?"** → [DEBUGGING § Inspecting Flow's live UI](DEBUGGING.md#inspecting-flows-live-ui)
 **"What does each `ui_automation.*` log event mean?"** → [DEBUGGING § Listener & HTTP-layer debugging](DEBUGGING.md#listener--http-layer-debugging)
-**"What was actually live-verified for the latest release?"** → [LIVE_VERIFICATION_v0.13.0](LIVE_VERIFICATION_v0.13.0.md) · prior: [v0.12.0](LIVE_VERIFICATION_v0.12.0.md) · [v0.11.0](LIVE_VERIFICATION_v0.11.0.md) · [v0.10.0](LIVE_VERIFICATION_v0.10.0.md) · [v0.9.1](LIVE_VERIFICATION_v0.9.1.md)
+**"What was actually live-verified for the latest release?"** → v0.15.0 / v0.14.x: no dedicated live-verification doc (CI + the v0.13.0 baseline). Latest doc: [LIVE_VERIFICATION_v0.13.0](LIVE_VERIFICATION_v0.13.0.md) · prior: [v0.12.0](LIVE_VERIFICATION_v0.12.0.md) · [v0.11.0](LIVE_VERIFICATION_v0.11.0.md) · [v0.10.0](LIVE_VERIFICATION_v0.10.0.md) · [v0.9.1](LIVE_VERIFICATION_v0.9.1.md)
 **"What was live-verified for the data layer (PR #58)?"** → [LIVE_VERIFICATION_data_layer](LIVE_VERIFICATION_data_layer.md) — 1 Imagen + 1 Veo credit on denon82, 6-layer ledger (file + magic + Pillow + DB rows + CLI round-trip + structlog)
 **"What was live-verified for the video-download feature (#29)?"** → [LIVE_VERIFICATION_video_download](LIVE_VERIFICATION_video_download.md)
 **"What is the jitter matrix evidence for `gflow image batch`?"** → [`LIVE_VERIFICATION_image_batch.md`](LIVE_VERIFICATION_image_batch.md) — jitter matrix evidence for `gflow image batch` (always-same-project mode)

{gflow_cli-0.15.0 → gflow_cli-0.15.1}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "gflow-cli"
-version = "0.15.0"
+version = "0.15.1"
 description = "Unofficial CLI for Google Flow — drive Veo image-to-video generations from the terminal."
 readme = "README.md"
 license = { file = "LICENSE" }

gflow_cli-0.15.1/scripts/diag/README.md

@@ -0,0 +1,29 @@
+# scripts/diag/ — Diagnostic Investigation Scripts
+
+These scripts require a live authenticated Chrome profile to run. They are investigation tools — not CI gates and not developer workflow tools — that help answer "what does this system actually do?" questions by observing a real browser session. Each script produces human-readable or structured output and does not modify production state.
+
+## Scripts
+
+| Script | Purpose | Prerequisite | Run |
+|---|---|---|---|
+| `capture_flow_traffic.py` | Capture Flow's outgoing API requests via `page.route` | `gflow auth login` | `uv run python scripts/diag/capture_flow_traffic.py --profile NAME` |
+| `recaptcha_mint.py` | What `site_key` + token does gflow-cli's `TokenMinter` produce? | `gflow auth login` (headed) | `uv run python scripts/diag/recaptcha_mint.py --profile NAME` |
+| `memory_profile.py` | Chrome process-tree RSS at key milestones (issue #155) | `gflow auth login` + `pip install psutil` | `uv run python scripts/diag/memory_profile.py --profile NAME` |
+
+## What belongs here
+
+1. Requires a live authenticated session to run
+2. Produces human-readable or structured output for investigation
+3. Does not write to production data stores
+4. Answers a specific "what does this system actually do?" question
+
+## What does NOT belong here
+
+- **CI gates** → `scripts/ci/` (run on every commit, no auth needed)
+- **Developer workflow tools** → `scripts/dev/` (`active_plan.py`, `skillopt/`, etc.)
+- **Live smoke tests** → `scripts/` root (`smoke_*.py` — full end-to-end generation runs)
+
+## Platform notes
+
+- `memory_profile.py` requires `psutil`: `uv add --dev psutil` (not a hard dep — detected at runtime)
+- All scripts: `uv run python scripts/diag/<name>.py` (no global Python install needed)

gflow_cli-0.15.0/scripts/diag_capture_flow_traffic.py → gflow_cli-0.15.1/scripts/diag/capture_flow_traffic.py

@@ -4,7 +4,7 @@ Spec § 11 mentioned a captured wire sample (samples/captured/06_batchGenerateIm
 but the file doesn't exist. This script produces that ground truth — what
 headers does Flow's UI actually attach when it calls aisandbox-pa?
 
-Run: `uv run python scripts/diag_capture_flow_traffic.py --profile <your-profile>`
+Run: `uv run python scripts/diag/capture_flow_traffic.py --profile <your-profile>`
 
 Output goes to `tmp/captured/flow_outgoing_<utc>.jsonl` by default. **NEVER write
 captured traffic to `samples/captured/`** — those files contain live Bearer tokens

gflow_cli-0.15.1/scripts/diag/memory_profile.py

@@ -0,0 +1,235 @@
+"""Diagnostic — Chrome process-tree RSS at key milestones (issue #155).
+
+Measures how much memory the Chrome/Chromium process tree consumes at four
+points during a real browser launch against a gflow-cli profile:
+
+  baseline        — before Playwright starts (current Python process only)
+  post_launch     — immediately after launch_persistent_context returns
+  post_navigation — after page.goto(FLOW_URL, wait_until="networkidle")
+  post_close      — after context.close() and Playwright stop
+
+The output table shows Own RSS (the profiler's Python process) and Tree RSS
+(profiler + all Chrome child processes) so you can see exactly how much RAM
+Chrome adds at each stage.
+
+Run: `uv run python scripts/diag/memory_profile.py --profile NAME [--output-json PATH]`
+
+Prerequisite: gflow auth login (plus psutil — install with: uv add --dev psutil)
+"""
+
+from __future__ import annotations
+
+import argparse
+import asyncio
+import json
+import os
+import sys
+from pathlib import Path
+
+try:
+    import psutil
+except ImportError:
+    print("psutil is required: uv add --dev psutil", file=sys.stderr)
+    sys.exit(2)
+
+try:
+    from gflow_cli.api.transports.ui_automation import FLOW_URL
+except ImportError:
+    FLOW_URL = "https://labs.google/fx/tools/flow?hl=en"
+
+from playwright.async_api import async_playwright
+
+from gflow_cli.auth import profile_dir
+from gflow_cli.browser_manager import channel_for_profile
+from gflow_cli.config import get_settings
+
+CHROME_ARGS = [
+    "--disable-blink-features=AutomationControlled",
+    "--disable-dev-shm-usage",
+]
+
+_COL_MILESTONE = 16
+_COL_OWN = 14
+_COL_TREE = 15
+_COL_DELTA = 12
+
+
+def _tree_rss_mb(pid: int) -> float:
+    """Return total RSS (MB) of a process and all its descendants."""
+    try:
+        proc = psutil.Process(pid)
+        procs = [proc, *proc.children(recursive=True)]
+        return sum(p.memory_info().rss for p in procs if p.is_running()) / (1024 * 1024)
+    except (psutil.NoSuchProcess, psutil.AccessDenied):
+        return 0.0
+
+
+def _own_rss_mb() -> float:
+    """Return RSS (MB) of only the current Python process."""
+    try:
+        return psutil.Process(os.getpid()).memory_info().rss / (1024 * 1024)
+    except (psutil.NoSuchProcess, psutil.AccessDenied):
+        return 0.0
+
+
+def _print_table_header() -> None:
+    header = (
+        f"{'Milestone':<{_COL_MILESTONE}} | "
+        f"{'Own RSS (MB)':>{_COL_OWN}} | "
+        f"{'Tree RSS (MB)':>{_COL_TREE}} | "
+        f"{'Delta (MB)':>{_COL_DELTA}}"
+    )
+    sep = "-" * len(header)
+    print(sep)
+    print(header)
+    print(sep)
+
+
+def _print_table_row(name: str, own_mb: float, tree_mb: float, delta: float | None) -> None:
+    delta_str = "—" if delta is None else f"{delta:+.1f}"
+    print(
+        f"{name:<{_COL_MILESTONE}} | "
+        f"{own_mb:>{_COL_OWN}.1f} | "
+        f"{tree_mb:>{_COL_TREE}.1f} | "
+        f"{delta_str:>{_COL_DELTA}}"
+    )
+
+
+async def run(profile_name: str, output_json: Path | None) -> None:
+    """Main diagnostic loop."""
+    # Resolve profile directory using GFLOW_CLI_HOME
+    settings = get_settings()
+    _ = settings.home  # ensure settings loaded; profile_dir() uses get_settings() internally
+    pdir = profile_dir(profile_name)
+    if not pdir.exists():
+        print(f"ERROR: Profile directory not found: {pdir}", file=sys.stderr)
+        sys.exit(1)
+
+    milestones: list[dict[str, object]] = []
+    pid = os.getpid()
+
+    # -------------------------------------------------------------------------
+    # Milestone 1: baseline (before Playwright starts)
+    # -------------------------------------------------------------------------
+    own_baseline = _own_rss_mb()
+    tree_baseline = _tree_rss_mb(pid)
+    milestones.append(
+        {
+            "name": "baseline",
+            "own_rss_mb": round(own_baseline, 2),
+            "tree_rss_mb": round(tree_baseline, 2),
+            "delta_mb": None,
+        }
+    )
+
+    _print_table_header()
+    _print_table_row("baseline", own_baseline, tree_baseline, None)
+
+    channel = channel_for_profile(pdir)
+
+    async with async_playwright() as pw:
+        launcher = pw.chromium
+
+        # -------------------------------------------------------------------------
+        # Milestone 2: post_launch
+        # -------------------------------------------------------------------------
+        ctx = await launcher.launch_persistent_context(
+            str(pdir),
+            headless=False,
+            args=CHROME_ARGS,
+            locale="en-US",
+            **({"channel": channel} if channel else {}),
+        )
+
+        own_post_launch = _own_rss_mb()
+        tree_post_launch = _tree_rss_mb(pid)
+        delta_launch = tree_post_launch - tree_baseline
+        milestones.append(
+            {
+                "name": "post_launch",
+                "own_rss_mb": round(own_post_launch, 2),
+                "tree_rss_mb": round(tree_post_launch, 2),
+                "delta_mb": round(delta_launch, 2),
+            }
+        )
+        _print_table_row("post_launch", own_post_launch, tree_post_launch, delta_launch)
+
+        # -------------------------------------------------------------------------
+        # Milestone 3: post_navigation
+        # -------------------------------------------------------------------------
+        page = ctx.pages[0] if ctx.pages else await ctx.new_page()
+        print(f"Navigating to {FLOW_URL} ...")
+        try:
+            await page.goto(FLOW_URL, wait_until="networkidle", timeout=45_000)
+        except Exception as exc:  # noqa: BLE001
+            print(f"WARNING: navigation did not fully settle: {exc}", file=sys.stderr)
+
+        own_post_nav = _own_rss_mb()
+        tree_post_nav = _tree_rss_mb(pid)
+        delta_nav = tree_post_nav - tree_baseline
+        milestones.append(
+            {
+                "name": "post_navigation",
+                "own_rss_mb": round(own_post_nav, 2),
+                "tree_rss_mb": round(tree_post_nav, 2),
+                "delta_mb": round(delta_nav, 2),
+            }
+        )
+        _print_table_row("post_navigation", own_post_nav, tree_post_nav, delta_nav)
+
+        # -------------------------------------------------------------------------
+        # Milestone 4: post_close
+        # -------------------------------------------------------------------------
+        await ctx.close()
+
+    own_post_close = _own_rss_mb()
+    tree_post_close = _tree_rss_mb(pid)
+    delta_close = tree_post_close - tree_baseline
+    milestones.append(
+        {
+            "name": "post_close",
+            "own_rss_mb": round(own_post_close, 2),
+            "tree_rss_mb": round(tree_post_close, 2),
+            "delta_mb": round(delta_close, 2),
+        }
+    )
+    _print_table_row("post_close", own_post_close, tree_post_close, delta_close)
+    print("-" * (_COL_MILESTONE + _COL_OWN + _COL_TREE + _COL_DELTA + 9))
+
+    # -------------------------------------------------------------------------
+    # JSON output (optional)
+    # -------------------------------------------------------------------------
+    if output_json is not None:
+        result = {
+            "platform": sys.platform,
+            "chrome_args": CHROME_ARGS,
+            "milestones": milestones,
+        }
+        output_json.parent.mkdir(parents=True, exist_ok=True)
+        output_json.write_text(json.dumps(result, indent=2), encoding="utf-8")
+        print(f"JSON written to: {output_json}")
+
+
+def main() -> None:
+    parser = argparse.ArgumentParser(
+        description=__doc__,
+        formatter_class=argparse.RawDescriptionHelpFormatter,
+    )
+    parser.add_argument(
+        "--profile",
+        required=True,
+        help="Name of the gflow-cli profile (directory under GFLOW_CLI_HOME)",
+    )
+    parser.add_argument(
+        "--output-json",
+        type=Path,
+        default=None,
+        metavar="PATH",
+        help="Optional path to write machine-readable results as JSON",
+    )
+    args = parser.parse_args()
+    asyncio.run(run(args.profile, args.output_json))
+
+
+if __name__ == "__main__":
+    main()

gflow_cli-0.15.0/scripts/diag_recaptcha_mint.py → gflow_cli-0.15.1/scripts/diag/recaptcha_mint.py

@@ -1,6 +1,6 @@
 """Diagnostic — what site_key + token does gflow-cli's TokenMinter produce?
 
-Run: `uv run python scripts/diag_recaptcha_mint.py --profile <your-profile>`
+Run: `uv run python scripts/diag/recaptcha_mint.py --profile <your-profile>`
 
 Opens HEADED Chromium, navigates to Flow, runs TokenMinter, prints the
 discovered site_key + minted token length. Compare to HAR ground truth:

{gflow_cli-0.15.0 → gflow_cli-0.15.1}/src/gflow_cli/__init__.py

@@ -1,3 +1,3 @@
 """gflow-cli — unofficial CLI for Google Flow."""
 
-__version__ = "0.15.0"
+__version__ = "0.15.1"

{gflow_cli-0.15.0 → gflow_cli-0.15.1}/src/gflow_cli/api/client.py

@@ -293,7 +293,7 @@ class FlowApiClient:
                 "--no-sandbox",
                 "--password-store=basic",
             ],
-            "args": ["--disable-blink-features=AutomationControlled"],
+            "args": ["--disable-blink-features=AutomationControlled", "--disable-dev-shm-usage"],
         }
 
     async def _enter_setup(self) -> None:

{gflow_cli-0.15.0 → gflow_cli-0.15.1}/src/gflow_cli/api/transports/ui_automation.py

@@ -677,6 +677,7 @@ class UiAutomationTransport(VideoGenerationMixin):
                 args=[
                     "--disable-blink-features=AutomationControlled",
                     "--password-store=basic",
+                    "--disable-dev-shm-usage",
                 ],
             )
             # Hide the automation flag so reCAPTCHA Enterprise doesn't score

{gflow_cli-0.15.0 → gflow_cli-0.15.1}/src/gflow_cli/api/transports/ui_automation_video.py

@@ -522,6 +522,15 @@ class VideoGenerationMixin:
         while time.monotonic() < deadline:
             terminal: VideoStatus | None = None
             for response in captured_status:
+                if response.get("status") == 401:
+                    raise AuthExpiredError(
+                        detail=(
+                            "batchCheckAsyncVideoGenerationStatus returned HTTP 401"
+                            " — session expired mid-poll"
+                        ),
+                        status=401,
+                        route="video:status",
+                    )
                 try:
                     status = parse_video_status(response.get("body") or {}, media_id=media_name)
                 except ValueError:

gflow_cli-0.15.1/tests/api/test_client_launch_kwargs.py

@@ -0,0 +1,77 @@
+"""Pins the ``FlowApiClient._persistent_context_kwargs()`` seam.
+
+The seam was extracted from the inline ``launch_persistent_context(...)`` call so
+a dev-scoped recording subclass can augment the launch without any recording
+concern living in core (see ``scripts/dev/_recording_client.py``). This test
+proves the extraction is value-for-value behavior-preserving and keeps the
+seam's contract stable.
+"""
+
+from __future__ import annotations
+
+from pathlib import Path
+from unittest.mock import AsyncMock, MagicMock, patch
+
+import pytest
+
+from gflow_cli.api.client import FlowApiClient
+from gflow_cli.api.transports.ui_automation import UiAutomationTransport
+
+
+def test_persistent_context_kwargs_are_unchanged(tmp_path: Path) -> None:
+    """The seam returns exactly the kwargs the client launched with before the
+    refactor — proving the extraction changed no behavior."""
+    client = FlowApiClient(profile_dir=tmp_path, headless=True)
+    kwargs = client._persistent_context_kwargs()  # noqa: SLF001
+    assert kwargs["user_data_dir"] == str(tmp_path)
+    assert kwargs["headless"] is True
+    assert kwargs["viewport"] == {"width": 1280, "height": 720}
+    assert kwargs["locale"] == "en-US"
+    assert kwargs["extra_http_headers"] == {"Accept-Language": "en-US,en;q=0.9"}
+    assert kwargs["ignore_default_args"] == [
+        "--enable-automation",
+        "--no-sandbox",
+        "--password-store=basic",
+    ]
+    assert kwargs["args"] == [
+        "--disable-blink-features=AutomationControlled",
+        "--disable-dev-shm-usage",
+    ]
+    # channel is profile-derived; a marker-less tmp_path has no
+    # .gflow_browser_strategy file, so channel_for_profile() returns None.
+    assert kwargs["channel"] is None
+
+
+@pytest.mark.asyncio
+async def test_ui_automation_setup_passes_disable_dev_shm_usage(tmp_path: Path) -> None:
+    """setup() must pass --disable-dev-shm-usage in args to launch_persistent_context."""
+    fake_page = MagicMock()
+    fake_page.goto = AsyncMock()
+    fake_page.add_init_script = AsyncMock()
+
+    fake_ctx = MagicMock()
+    fake_ctx.pages = [fake_page]
+    fake_ctx.add_init_script = AsyncMock()
+
+    fake_chromium = MagicMock()
+    fake_chromium.launch_persistent_context = AsyncMock(return_value=fake_ctx)
+
+    fake_pw = MagicMock()
+    fake_pw.chromium = fake_chromium
+
+    mock_cm = MagicMock()
+    mock_cm.__aenter__ = AsyncMock(return_value=fake_pw)
+    mock_cm.__aexit__ = AsyncMock(return_value=False)
+
+    mock_async_playwright = MagicMock(return_value=mock_cm)
+
+    with patch("gflow_cli.api.transports.ui_automation.async_playwright", mock_async_playwright):
+        transport = UiAutomationTransport()
+        await transport.setup(profile_dir=tmp_path)
+
+    _call_kwargs = fake_chromium.launch_persistent_context.call_args
+    args_passed = _call_kwargs.kwargs.get(
+        "args",
+        _call_kwargs.args[1] if len(_call_kwargs.args) > 1 else [],
+    )
+    assert "--disable-dev-shm-usage" in args_passed

{gflow_cli-0.15.0 → gflow_cli-0.15.1}/tests/api/transports/test_ui_automation_video.py

@@ -17,7 +17,7 @@ from gflow_cli.api.transports.ui_automation_video import (
     VideoGenerationMixin,
 )
 from gflow_cli.api.video import Aspect, GenerateVideoRequest, Mode, VideoModel, VideoStatus
-from gflow_cli.errors import WireFormatError
+from gflow_cli.errors import AuthExpiredError, WireFormatError
 
 
 def _make_listener_page() -> tuple[MagicMock, list]:
@@ -145,6 +145,31 @@ class TestPollVideoStatus:
                 page, [], "m", timeout_s=0.2, poll_interval_s=0.05
             )
 
+    @pytest.mark.asyncio
+    async def test_401_response_raises_auth_expired_error_immediately(self) -> None:
+        page = MagicMock()
+        captured = [
+            {"status": 401, "url": _STATUS_URL, "body": {}},
+        ]
+        with pytest.raises(AuthExpiredError, match="session expired mid-poll"):
+            await VideoGenerationMixin._poll_video_status(
+                page, captured, "m", timeout_s=60.0, poll_interval_s=0.05
+            )
+
+    @pytest.mark.asyncio
+    async def test_401_after_in_progress_raises_auth_expired_error(self) -> None:
+        page = MagicMock()
+        # Simulates session expiry mid-poll: some ACTIVE responses arrive first, then a 401
+        captured: list[dict[str, Any]] = [
+            _status_resp("m", "MEDIA_GENERATION_STATUS_SCHEDULED"),
+            _status_resp("m", "MEDIA_GENERATION_STATUS_ACTIVE"),
+            {"status": 401, "url": _STATUS_URL, "body": {}},
+        ]
+        with pytest.raises(AuthExpiredError, match="session expired mid-poll"):
+            await VideoGenerationMixin._poll_video_status(
+                page, captured, "m", timeout_s=60.0, poll_interval_s=0.05
+            )
+
 
 def _cascade_page(visible: set[str]) -> MagicMock:
     """A fake page whose locator(sel) is 'visible' only for sel in `visible`."""

{gflow_cli-0.15.0 → gflow_cli-0.15.1}/tests/dev/test_recording_client.py

@@ -28,4 +28,7 @@ def test_recording_client_injects_video_and_preserves_base(tmp_path: Path) -> No
     # Base kwargs preserved untouched:
     assert kwargs["user_data_dir"] == str(tmp_path)
     assert kwargs["headless"] is True
-    assert kwargs["args"] == ["--disable-blink-features=AutomationControlled"]
+    assert kwargs["args"] == [
+        "--disable-blink-features=AutomationControlled",
+        "--disable-dev-shm-usage",
+    ]

{gflow_cli-0.15.0 → gflow_cli-0.15.1}/uv.lock

@@ -750,7 +750,7 @@ wheels = [
 
 [[package]]
 name = "gflow-cli"
-version = "0.15.0"
+version = "0.15.1"
 source = { editable = "." }
 dependencies = [
     { name = "click" },