gflow-cli 0.46.0__tar.gz → 0.46.1__tar.gz

{gflow_cli-0.46.0 → gflow_cli-0.46.1}/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "gflow",
-  "version": "0.46.0",
+  "version": "0.46.1",
   "description": "Reusable development and operations workflows for gflow-cli",
   "author": {
     "name": "Flavio Oliva",

{gflow_cli-0.46.0 → gflow_cli-0.46.1}/CHANGELOG.md

@@ -7,6 +7,24 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.46.1] — 2026-07-31
+
+### Fixed
+
+- **`image t2i` failed whenever `-n` differed from the displayed count — including
+  the default `-n 1` (#404).** Flow renamed the composer's count-tab labels from
+  `1x`/`x2`/… to `x1`/`x2`/…, so the count setter's label filter silently dropped
+  the count-1 tab and its positional pick clicked the wrong tab (reporting
+  per-click success while the value never changed). The count tab is now selected
+  by the digit in its label across both label cohorts (`1x`/`x1`), the read-back recognises a
+  selected `x1`, and non-convergence raises `UiSelectorDriftError` (exit 23)
+  naming desired vs displayed — instead of a bare `RuntimeError` that
+  observability hashed into an opaque `UnexpectedError`. The per-click
+  `count_click_result` log now carries `effect_observed`, and the video output
+  count setter probes both label cohorts too. Verified live on the classic
+  composer (new e2e: `tests/e2e/test_classic_count_setter_e2e.py`; evidence:
+  [LIVE_VERIFICATION_v0.46.1](docs/LIVE_VERIFICATION_v0.46.1.md)).
+
 ## [0.46.0] — 2026-07-28
 
 ### Changed
@@ -2518,7 +2536,8 @@ shell-script template that branches on these codes.
 
 First skeleton. Not functional end-to-end yet.
 
-[Unreleased]: https://github.com/ffroliva/gflow-cli/compare/v0.46.0...HEAD
+[Unreleased]: https://github.com/ffroliva/gflow-cli/compare/v0.46.1...HEAD
+[0.46.1]: https://github.com/ffroliva/gflow-cli/compare/v0.46.0...v0.46.1
 [0.46.0]: https://github.com/ffroliva/gflow-cli/compare/v0.45.0...v0.46.0
 [0.45.0]: https://github.com/ffroliva/gflow-cli/compare/v0.44.0...v0.45.0
 [0.44.0]: https://github.com/ffroliva/gflow-cli/compare/v0.43.0...v0.44.0

{gflow_cli-0.46.0 → gflow_cli-0.46.1}/KNOWN_ISSUES.md

@@ -118,7 +118,8 @@ denon82 profile (aborted pre-submit, saving the 10-credit generation).
 **Root cause (confirmed live 2026-07-11, screenshot evidence on #288): the
 duration control is ABSENT from this cohort's settings popover** — the panel
 renders mode tabs (Imagem/Video), sub-mode (Frames/Elementos), aspect
-(9:16/16:9), count (1x–x4), and the model dropdown (Veo 3.1 - Lite), and
+(9:16/16:9), count (1x–x4; labels renamed to xN since — see #404), and the
+model dropdown (Veo 3.1 - Lite), and
 nothing else. The earlier locale hypothesis is refuted: the UI renders in
 Portuguese and the sibling count tabs (`1x`/`x2`) match fine; there is simply
 no duration row to click. Whether Flow removed clip-length selection for this
@@ -629,10 +630,14 @@ issue and not blocked by any code change in this repo.
   locale-leak fix.
 
 **Earlier — Phase 7 multi-image-prompt work** addressed the count-tab selectors:
-- `_COUNT_TAB_TEXT_RE = ^(1x|x[2-4])$` only matches the digit+x format Flow
+- `_COUNT_TAB_TEXT_RE = ^(1x|x[1-4])$` only matches the digit+x format Flow
   renders identically in every locale (numbers/symbols are not translated).
-- `_set_count` falls back to positional `.nth(count - 1)` when the read-back
-  text is unrecognised — locale-invariant.
+  Widened for #404: Flow renamed the count-1 label from `1x` to `x1`
+  (uniform `xN`, live-verified 2026-07-31); both cohorts are accepted.
+- `_set_count` clicks the tab carrying the desired DIGIT (`1x`/`x1` for
+  count=1), not a position — the #404 rename shrank the old filtered set and
+  shifted every `.nth(count - 1)` pick by one. Non-convergence raises
+  `UiSelectorDriftError` (exit 23) with desired vs displayed counts.
 
 **Earlier — PR #48:**
 - Added `--lang=en-US` Chromium launch arg; parts of `NEW_PROJECT_SELECTORS` /

{gflow_cli-0.46.0 → gflow_cli-0.46.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: gflow-cli
-Version: 0.46.0
+Version: 0.46.1
 Summary: Unofficial CLI for Google Flow — drive Veo image-to-video generations from the terminal.
 Project-URL: Homepage, https://github.com/ffroliva/gflow-cli
 Project-URL: Issues, https://github.com/ffroliva/gflow-cli/issues

{gflow_cli-0.46.0 → gflow_cli-0.46.1}/docs/INDEX.md

@@ -135,7 +135,7 @@ Slash commands for Claude Code, stored in `.claude/commands/gflow/`. All prefixe
 **"A command failed — where is the incident bundle and what's in it?"** → [DEBUGGING § Automatic incident bundles](DEBUGGING.md#automatic-incident-bundles) (layout, triggers, review-before-sharing); privacy boundaries: [SECURITY § Automatic incident bundles](SECURITY.md#automatic-incident-bundles-gflow_cli_incident_capture-default-on); disable via [CONFIGURATION § GFLOW_CLI_INCIDENT_CAPTURE](CONFIGURATION.md#gflow_cli_incident_capture)
 **"Flow's UI broke a selector — how do I diagnose it?"** → [DEBUGGING § Inspecting Flow's live UI](DEBUGGING.md#inspecting-flows-live-ui)
 **"What does each `ui_automation.*` log event mean?"** → [DEBUGGING § Listener & HTTP-layer debugging](DEBUGGING.md#listener--http-layer-debugging)
-**What was actually live-verified for the latest release?** → latest: [LIVE_VERIFICATION_v0.46.0](LIVE_VERIFICATION_v0.46.0.md) (**#387 provider-agnostic prompt-tools transport live-verified 2026-07-28, ZERO credits** — a four-probe capability spike passed 4/4 against BOTH a non-Google gateway and Google's OpenAI-compat endpoint, including a *semantic* multimodal check [a generated solid-red JPEG round-tripped and the model answered 'Red'], which is what proved the native Gemini `inlineData` path could be deleted outright rather than kept as a fallback; the real CLI then returned `was_expanded: true` on gateway/gateway-no-model/Google-default, emitted the loud one-time notice + no-op for the removed `GFLOW_CLI_GEMINI_API_KEY`, and made NO network call when unconfigured. Live verification caught two defects a fully green 2849-test offline suite missed: Google's compat endpoint has no server-side default model [`400 "model is not specified"`, silently no-oping the DEFAULT configuration], and the first redirect guard did not actually work because `build_opener()` installs its default handlers regardless of arguments, so `Authorization` would still have been replayed cross-host. `/code-review high` is recorded as NOT run — it is user-triggered only). Prior: [v0.45.0](LIVE_VERIFICATION_v0.45.0.md) (**#393 UUID `--ref` binding + #395 character-entity binding live-verified 2026-07-27/28** — a controlled A/B on identical input flipped `--ref` from exit 9 to exit 0 via the catalog-backed upload fallback, with the anti-silence guard [an unbindable ref aborts non-zero and writes no image] pinned by a live e2e; picker DOM + HAR showed Flow indexes a short auto-caption, NOT the prompt, so a prompt-derived search hint was dropped rather than shipped on assumption; a CDP spike against Flow's own character flow then captured the `entityContext` contract that gflow's generations were missing, root-causing #395 to two gflow defects [overlay dismissal Escaping Flow's own composer, and a character-route bounce that sent the prompt to the project composer] — both fixed, both character e2e tests now pass live, including `--format-prompt` [#383], with a read-back confirming the character carries its name and `thumbnail_media_id`). Prior: [v0.44.0](LIVE_VERIFICATION_v0.44.0.md) (**#381 dual-side project management & Playwright Chromium transport live-verified 2026-07-26** — real-editor project creation + rename tRPC server/DOM sync, prompt slugging, `gflow project` subcommand family, HTTP 429 adaptive backoff, and full E2E test suite). Prior: [v0.43.0](LIVE_VERIFICATION_v0.43.0.md) (**private incident diagnostics live-verified 2026-07-23, 1 Veo credit**). Prior: [v0.42.0](LIVE_VERIFICATION_v0.42.0.md) (**#361 production-readiness live-gaps confirmed live 2026-07-21, 1 Veo credit** — a real `veo-lite` t2v through the worker path persisted a real `remote_started` checkpoint [observer→checkpoint→DB chain confirmed], crash-recovery classified the task `indeterminate` without resubmitting, and mid-launch cancellation released the `ProfileLease` credit-free; full evidence in [v0.40.0-production-readiness § "2026-07-21 live follow-up"](LIVE_VERIFICATION_v0.40.0-production-readiness.md#2026-07-21-live-follow-up-0420-cycle); #359 content-safety `400`→`ContentPolicyError` classification is unit-covered, not live-triggered [would require a deliberate policy violation]; #360/#362 are docs-only, verified by the documentation gates). Prior: [v0.41.0](LIVE_VERIFICATION_v0.41.0.md) (**#357 production-readiness hardening — stale-session fail-fast, free image gen, paid veo-lite T2V all proven live**). Prior: [v0.40.0](LIVE_VERIFICATION_v0.40.0.md) (**#344 `@`-mention asset-tagging resolution proven live e2e, ~2 Imagen credits** — `gflow character create` staged a real taggable character [bound reference images, `has_reference_images` guard], the e2e test's documented propagation wait cleared Flow's `projectInitialData` lag, and `gflow image t2i "@Zoro …"` passed with returncode 0, a real generated image, and the correctly de-tagged prompt in the catalog — no code changes needed, `resolve_and_apply` as merged in #344 already works end-to-end; pre-existing unrelated issue #174 [Flow media-library A/B flake] can still intermittently block generation regardless of this feature — recorded, not omitted). Prior: [v0.39.0](LIVE_VERIFICATION_v0.39.0.md) (**#341 failed-generation persistence proven live** — a real `image t2i` on denon82 failed at the wire [`batchGenerateImages` HTTP 400 → `WireFormatError`] and the record-on-catch funnel wrote the **first-ever `failed` row** into the production catalog [`error_type=wire-format`, redacted `error_detail`, browsable via `gflow data list errors`], **$0**; the remaining paid paths [video/chain/batch/movie/worker] are funnel-regression-tested, not force-failed live [would cost credits], and the status-aware `succeeded=false` video-poll fix is unit-locked — recorded, not omitted). Prior: [v0.38.1](LIVE_VERIFICATION_v0.38.1.md) (**#338 agentic-pin recovery proven live ON the pinned account** — run 1 caught the composer-render race the unit suite could not [`ensure_media_incomplete` +115 ms, toggle never reached]; the readiness-wait fix landed and run 2 recovered classic on denon82 after ~2h of pin [`ui_driver.bound mode=classic`, real 768×1376 JPEG, exact prompt adherence]; reload branch unit-locked, live trigger not observed this cycle — recorded, not omitted). Prior: [v0.38.0](LIVE_VERIFICATION_v0.38.0.md) (**#332 mode control + #314 i2i ref dedup proven live e2e** — `image t2i --ui-mode classic` recovered agentic→classic in a real run [`ui_mode.attempt_exit_agent` → full classic chain, 1376×768 JPEG]; two identical `image i2i` runs proved the dedup contract [run 1: picker miss → `image_uploaded`; run 2: `reference_deduped_by_filename`, ZERO uploads]; `video t2v` veo-fast [`MEDIA_GENERATION_STATUS_SUCCESSFUL`, 15.2 MB `ftyp` mp4]; autopilot #333 recorded deferred-with-reason [hermes-ops deployment staged separately]). Prior: [v0.37.0](LIVE_VERIFICATION_v0.37.0.md) (**viewport 1920×1080 + agentic count enforcement + FIPS-safe SAPISIDHASH proven live e2e** — `image t2i` [classic cohort, real 1376×768 JPEG] and `video t2v` veo-fast [`MEDIA_GENERATION_STATUS_SUCCESSFUL`, 11.5 MB `ftyp` mp4] both succeeded end-to-end at the new 1920×1080 viewport with every selector resolving [no drift]; SAPISIDHASH digest verified byte-identical [FIPS-safe `usedforsecurity=False`], auth unchanged). Prior: [v0.36.0](LIVE_VERIFICATION_v0.36.0.md) (**#316 diagnostic tooling live-verified against real Flow traffic** — `GFLOW_CLI_HAR_PATH` captured a real 54-entry HAR [real Flow domains, 34× 200s, and a genuine 401 the tool exists to diagnose]; `GFLOW_CLI_DEBUG_TRACEBACK`'s typed-error scoping confirmed live [console output identical with/without the flag on a `GFlowError`]; unhandled-path behavior covered by 6 new tests (30 total across both files) + SDD task review; #312 reference-entity-smuggling fix covered by its own dedicated e2e test). Prior: [v0.35.0](LIVE_VERIFICATION_v0.35.0.md) (**#305-follow-up multimodal reverse-engineering & storyboard tool proven live e2e** — `gflow tools run storyboard` successfully deconstructed a cyberpunk scene into a cohesive 4-panel sequence; `reverse-engineer` tool extracts frames from video streams/URLs using `claude-video`'s `watch.py` and produces structured prompt components using Gemini multimodal models; dynamic token budgeting and strict Pyright types verified via test suite). Prior: [v0.34.0](LIVE_VERIFICATION_v0.34.0.md) (**#299 `--ui-mode` gate proven live, ZERO credits** — drove `get_ui_driver` directly over 4 real editor loads, never generated: bidirectional switch works [classic→agentic via `_force_agent_mode`, agentic→classic via `_exit_agent_mode`, each DOM-reverified], `agentic`-when-already-agentic is idempotent, and a timed-out toggle → **exit-28 fail-fast before submission**; deprecation behavior-change [`prefer_classic`→exit 28] confirmed). Prior: [v0.33.0](LIVE_VERIFICATION_v0.33.0.md) (**#287-follow-up picker fix proven live on the original repro** — the v0.32.1-failing `i2v <uuid> --project <crowded>` command now exits 0 with a real 3.0 MB `ftyp` mp4, `frame_ref_attached` + `video_saved`, zero uploads; **#241 jitter live-verified on both paths** — flag `--jitter 4-6` → `batch_jitter_sleep seconds=4.98`, and the new 0.5–1.5 s default → `seconds=1.47`, each firing exactly once between two t2i submissions; environment note: the denon82 cohort is now natively agentic and round-2 generations hit the pre-existing #281 `MediaAttributionError`, not a regression). Prior: [v0.32.1](LIVE_VERIFICATION_v0.32.1.md) (**#293 teardown fix live-verified credit-free** — error-path aborts leave ZERO chrome.exe holding the profile [3× leak reproduced pre-fix same day]; force-close fallback + ProfileLockedError translation unit-pinned; #283 wave logic fixes mock-verified to exact call counts). Prior: [v0.32.0](LIVE_VERIFICATION_v0.32.0.md) (**#287 UUID i2v frames proven live e2e** — an in-project asset selected by media UUID in the frame-slot dialog [frame_ref_attached, startImage bound on the wire, ZERO upload events] produced a real 720×1280 interpolation, resolving the #237 negative prior; foreign UUID → exit 9 pre-generation with screenshot; **#288 duration fail-fast proven live** — exit 23 pre-submit saved a 10-credit generation, and the debug screenshot confirmed the duration control is ABSENT from the cohort's settings popover [locale hypothesis refuted]; upload-400 exit-27 repro deferred-with-reason — the original rejected JPEG no longer exists). Prior: [v0.31.0](LIVE_VERIFICATION_v0.31.0.md) (**#281 wrong-media defenses live-verified in BOTH directions, credit-free** — correct attribution downloads with real wire metadata [seed, 768×1376]; the incident-class lazy-render ambiguity reproduced live and hard-stopped with `MediaAttributionError` exit 26 naming every candidate UUID, no file written; **#282 two-UUID-ref i2i proven e2e** — both freshly generated portrait UUIDs picker-selected into one scene with both canonical identities visually transferred). Prior: [v0.30.0](LIVE_VERIFICATION_v0.30.0.md) (**agentic-cohort image path + both fixes live-verified credit-free** — native 768×1376 stills, i2i-chain + canonical-ref identity hold; the character-create `DataIntegrityError` and the `prefer_classic` WARNING were observed live then fixed [recorder idempotent + INFO log]; MCP video-param feature deferred-with-reason on Veo credits, per the stills-only goal). Prior: [v0.29.0](LIVE_VERIFICATION_v0.29.0.md) (**persistent `gflow instructions` CRUD proven live e2e GREEN, credit-free** — 11-command sequence on a fresh project: add incl. `--ref <image-UUID>` attach, list/enable/disable, master toggle both ways, TOML `apply` destructive full-sync with `enabled=false` honored, `rm` with server card-id preserved across mutations; movie brief-sync code-path-verified via the same primitives, deferred-with-reason on credits; MCP `gflow_instructions_*` tools are thin adapters over the live-verified primitives). Prior: [v0.28.0](LIVE_VERIFICATION_v0.28.0.md) (**agent instructions `-i` now steer agentic generation — crayon e2e GREEN**: a style-neutral prompt + an enabled "crayon" card produced an unmistakable crayon drawing through the real transport; root causes were conversational phrasing + the `project_brief.enabled` master switch). Prior: [v0.27.1](LIVE_VERIFICATION_v0.27.1.md) (**v0.27.0 release follow-up fixes and documentation sync**). Prior: [v0.27.0](LIVE_VERIFICATION_v0.27.0.md) (**`[style]` block with named variants + prompt-aware resume — credit-free CLI verification**: real `movie run --dry-run` 3-way ledger proving resolved-style display, `skip (done)` on matching `style_hash`, and `re-run (style changed)` after a style edit; composition is local, wire path untouched, so no Veo credits spent — first credited styled run will confirm visually). Prior: [v0.26.0](LIVE_VERIFICATION_v0.26.0.md) (**image i2i by generated-image UUID proven live e2e GREEN** — the existing asset is *selected in place* by its media UUID, no duplicate upload, producing an i2i output that references it; plus generated-image `display_name` capture, credited @C1ph3r404). Prior: [v0.25.0](LIVE_VERIFICATION_v0.25.0.md) (**#237 remote-UUID i2v proven live e2e GREEN** — a real 8s 720×1280 interpolation from a generated image's UUID, after the picker-search attach was reworked to local upload; #240 home-`.env` matrix live; plus two silent-failure guards root-caused live: video-as-image download rejection and rejected-upload fail-loud). Prior: [v0.24.0](LIVE_VERIFICATION_v0.24.0.md) (--project parity across CLI + MCP — automated coverage; live gen auth-gated). Prior: [v0.23.0](LIVE_VERIFICATION_v0.23.0.md) (MCP generation wiring proven live end-to-end — tool→worker→real Flow REST→structured-error translation; final image-write blocked by an expired session, environmental. #222 macOS fix reporter-verified e2e on Apple Silicon). Prior: [v0.22.0](LIVE_VERIFICATION_v0.22.0.md) (Tools framework — automated/CI coverage complete; credit/key-gated live feature run is a pending owner gate, see the doc) · [v0.21.0](LIVE_VERIFICATION_v0.21.0.md) (MCP server over stdio + HTTP/SSE — credit-free protocol handshake; 4 tools / 2 prompts / 3 resources confirmed on stdout) · [v0.20.1](LIVE_VERIFICATION_v0.20.1.md) · [v0.20.0](LIVE_VERIFICATION_v0.20.0.md) · [v0.19.0](LIVE_VERIFICATION_v0.19.0.md) · [v0.18.0](LIVE_VERIFICATION_v0.18.0.md) · [v0.17.0](LIVE_VERIFICATION_v0.17.0.md) · [v0.16.0](LIVE_VERIFICATION_v0.16.0.md) · [v0.13.0](LIVE_VERIFICATION_v0.13.0.md) · [v0.12.0](LIVE_VERIFICATION_v0.12.0.md) · [v0.11.0](LIVE_VERIFICATION_v0.11.0.md) · [v0.10.0](LIVE_VERIFICATION_v0.10.0.md) · [v0.9.1](LIVE_VERIFICATION_v0.9.1.md) · [v0.9.0](LIVE_VERIFICATION_v0.9.0.md) · [v0.8.1](LIVE_VERIFICATION_v0.8.1.md) · [v0.7.0](LIVE_VERIFICATION_v0.7.0.md)
+**What was actually live-verified for the latest release?** → latest: [LIVE_VERIFICATION_v0.46.1](LIVE_VERIFICATION_v0.46.1.md) (**#404 classic count-setter fix live-verified 2026-07-31 on the reporter's exact environment, ZERO credits** — credit-free DOM recon proved Flow renamed the count-tab labels to uniform `xN` [`x1` replaces `1x`, image AND video rows], that `nth(0)` of the old filtered set landed on the selected `x2` and actively moved the count AWAY from the target, and that a digit-keyed click on `x1` converges instantly and persists without a Save commit; the new classic e2e then passed live [count=1 against a fresh project displaying 2 → exactly 1 image; count=2 early-exit → exactly 2], and the #313 agentic count-enforcement e2e passed 4/4 [counts 1–4 vs deliberately mismatched sticky defaults, magic-byte-verified downloads] after its stale setup was repaired [Flow now loads the editor in classic mode — the setup needed an Agent-pill toggle before the `tune` icon; test-only fix, no product code implicated]; the video output-count cascade carries a recorded waiver [full drive costs Veo credits; its exact selector shape was exercised live in the spike's cleanup step]). Prior: [v0.46.0](LIVE_VERIFICATION_v0.46.0.md) (**#387 provider-agnostic prompt-tools transport live-verified 2026-07-28, ZERO credits** — a four-probe capability spike passed 4/4 against BOTH a non-Google gateway and Google's OpenAI-compat endpoint, including a *semantic* multimodal check [a generated solid-red JPEG round-tripped and the model answered 'Red'], which is what proved the native Gemini `inlineData` path could be deleted outright rather than kept as a fallback; the real CLI then returned `was_expanded: true` on gateway/gateway-no-model/Google-default, emitted the loud one-time notice + no-op for the removed `GFLOW_CLI_GEMINI_API_KEY`, and made NO network call when unconfigured. Live verification caught two defects a fully green 2849-test offline suite missed: Google's compat endpoint has no server-side default model [`400 "model is not specified"`, silently no-oping the DEFAULT configuration], and the first redirect guard did not actually work because `build_opener()` installs its default handlers regardless of arguments, so `Authorization` would still have been replayed cross-host. `/code-review high` is recorded as NOT run — it is user-triggered only). Prior: [v0.45.0](LIVE_VERIFICATION_v0.45.0.md) (**#393 UUID `--ref` binding + #395 character-entity binding live-verified 2026-07-27/28** — a controlled A/B on identical input flipped `--ref` from exit 9 to exit 0 via the catalog-backed upload fallback, with the anti-silence guard [an unbindable ref aborts non-zero and writes no image] pinned by a live e2e; picker DOM + HAR showed Flow indexes a short auto-caption, NOT the prompt, so a prompt-derived search hint was dropped rather than shipped on assumption; a CDP spike against Flow's own character flow then captured the `entityContext` contract that gflow's generations were missing, root-causing #395 to two gflow defects [overlay dismissal Escaping Flow's own composer, and a character-route bounce that sent the prompt to the project composer] — both fixed, both character e2e tests now pass live, including `--format-prompt` [#383], with a read-back confirming the character carries its name and `thumbnail_media_id`). Prior: [v0.44.0](LIVE_VERIFICATION_v0.44.0.md) (**#381 dual-side project management & Playwright Chromium transport live-verified 2026-07-26** — real-editor project creation + rename tRPC server/DOM sync, prompt slugging, `gflow project` subcommand family, HTTP 429 adaptive backoff, and full E2E test suite). Prior: [v0.43.0](LIVE_VERIFICATION_v0.43.0.md) (**private incident diagnostics live-verified 2026-07-23, 1 Veo credit**). Prior: [v0.42.0](LIVE_VERIFICATION_v0.42.0.md) (**#361 production-readiness live-gaps confirmed live 2026-07-21, 1 Veo credit** — a real `veo-lite` t2v through the worker path persisted a real `remote_started` checkpoint [observer→checkpoint→DB chain confirmed], crash-recovery classified the task `indeterminate` without resubmitting, and mid-launch cancellation released the `ProfileLease` credit-free; full evidence in [v0.40.0-production-readiness § "2026-07-21 live follow-up"](LIVE_VERIFICATION_v0.40.0-production-readiness.md#2026-07-21-live-follow-up-0420-cycle); #359 content-safety `400`→`ContentPolicyError` classification is unit-covered, not live-triggered [would require a deliberate policy violation]; #360/#362 are docs-only, verified by the documentation gates). Prior: [v0.41.0](LIVE_VERIFICATION_v0.41.0.md) (**#357 production-readiness hardening — stale-session fail-fast, free image gen, paid veo-lite T2V all proven live**). Prior: [v0.40.0](LIVE_VERIFICATION_v0.40.0.md) (**#344 `@`-mention asset-tagging resolution proven live e2e, ~2 Imagen credits** — `gflow character create` staged a real taggable character [bound reference images, `has_reference_images` guard], the e2e test's documented propagation wait cleared Flow's `projectInitialData` lag, and `gflow image t2i "@Zoro …"` passed with returncode 0, a real generated image, and the correctly de-tagged prompt in the catalog — no code changes needed, `resolve_and_apply` as merged in #344 already works end-to-end; pre-existing unrelated issue #174 [Flow media-library A/B flake] can still intermittently block generation regardless of this feature — recorded, not omitted). Prior: [v0.39.0](LIVE_VERIFICATION_v0.39.0.md) (**#341 failed-generation persistence proven live** — a real `image t2i` on denon82 failed at the wire [`batchGenerateImages` HTTP 400 → `WireFormatError`] and the record-on-catch funnel wrote the **first-ever `failed` row** into the production catalog [`error_type=wire-format`, redacted `error_detail`, browsable via `gflow data list errors`], **$0**; the remaining paid paths [video/chain/batch/movie/worker] are funnel-regression-tested, not force-failed live [would cost credits], and the status-aware `succeeded=false` video-poll fix is unit-locked — recorded, not omitted). Prior: [v0.38.1](LIVE_VERIFICATION_v0.38.1.md) (**#338 agentic-pin recovery proven live ON the pinned account** — run 1 caught the composer-render race the unit suite could not [`ensure_media_incomplete` +115 ms, toggle never reached]; the readiness-wait fix landed and run 2 recovered classic on denon82 after ~2h of pin [`ui_driver.bound mode=classic`, real 768×1376 JPEG, exact prompt adherence]; reload branch unit-locked, live trigger not observed this cycle — recorded, not omitted). Prior: [v0.38.0](LIVE_VERIFICATION_v0.38.0.md) (**#332 mode control + #314 i2i ref dedup proven live e2e** — `image t2i --ui-mode classic` recovered agentic→classic in a real run [`ui_mode.attempt_exit_agent` → full classic chain, 1376×768 JPEG]; two identical `image i2i` runs proved the dedup contract [run 1: picker miss → `image_uploaded`; run 2: `reference_deduped_by_filename`, ZERO uploads]; `video t2v` veo-fast [`MEDIA_GENERATION_STATUS_SUCCESSFUL`, 15.2 MB `ftyp` mp4]; autopilot #333 recorded deferred-with-reason [hermes-ops deployment staged separately]). Prior: [v0.37.0](LIVE_VERIFICATION_v0.37.0.md) (**viewport 1920×1080 + agentic count enforcement + FIPS-safe SAPISIDHASH proven live e2e** — `image t2i` [classic cohort, real 1376×768 JPEG] and `video t2v` veo-fast [`MEDIA_GENERATION_STATUS_SUCCESSFUL`, 11.5 MB `ftyp` mp4] both succeeded end-to-end at the new 1920×1080 viewport with every selector resolving [no drift]; SAPISIDHASH digest verified byte-identical [FIPS-safe `usedforsecurity=False`], auth unchanged). Prior: [v0.36.0](LIVE_VERIFICATION_v0.36.0.md) (**#316 diagnostic tooling live-verified against real Flow traffic** — `GFLOW_CLI_HAR_PATH` captured a real 54-entry HAR [real Flow domains, 34× 200s, and a genuine 401 the tool exists to diagnose]; `GFLOW_CLI_DEBUG_TRACEBACK`'s typed-error scoping confirmed live [console output identical with/without the flag on a `GFlowError`]; unhandled-path behavior covered by 6 new tests (30 total across both files) + SDD task review; #312 reference-entity-smuggling fix covered by its own dedicated e2e test). Prior: [v0.35.0](LIVE_VERIFICATION_v0.35.0.md) (**#305-follow-up multimodal reverse-engineering & storyboard tool proven live e2e** — `gflow tools run storyboard` successfully deconstructed a cyberpunk scene into a cohesive 4-panel sequence; `reverse-engineer` tool extracts frames from video streams/URLs using `claude-video`'s `watch.py` and produces structured prompt components using Gemini multimodal models; dynamic token budgeting and strict Pyright types verified via test suite). Prior: [v0.34.0](LIVE_VERIFICATION_v0.34.0.md) (**#299 `--ui-mode` gate proven live, ZERO credits** — drove `get_ui_driver` directly over 4 real editor loads, never generated: bidirectional switch works [classic→agentic via `_force_agent_mode`, agentic→classic via `_exit_agent_mode`, each DOM-reverified], `agentic`-when-already-agentic is idempotent, and a timed-out toggle → **exit-28 fail-fast before submission**; deprecation behavior-change [`prefer_classic`→exit 28] confirmed). Prior: [v0.33.0](LIVE_VERIFICATION_v0.33.0.md) (**#287-follow-up picker fix proven live on the original repro** — the v0.32.1-failing `i2v <uuid> --project <crowded>` command now exits 0 with a real 3.0 MB `ftyp` mp4, `frame_ref_attached` + `video_saved`, zero uploads; **#241 jitter live-verified on both paths** — flag `--jitter 4-6` → `batch_jitter_sleep seconds=4.98`, and the new 0.5–1.5 s default → `seconds=1.47`, each firing exactly once between two t2i submissions; environment note: the denon82 cohort is now natively agentic and round-2 generations hit the pre-existing #281 `MediaAttributionError`, not a regression). Prior: [v0.32.1](LIVE_VERIFICATION_v0.32.1.md) (**#293 teardown fix live-verified credit-free** — error-path aborts leave ZERO chrome.exe holding the profile [3× leak reproduced pre-fix same day]; force-close fallback + ProfileLockedError translation unit-pinned; #283 wave logic fixes mock-verified to exact call counts). Prior: [v0.32.0](LIVE_VERIFICATION_v0.32.0.md) (**#287 UUID i2v frames proven live e2e** — an in-project asset selected by media UUID in the frame-slot dialog [frame_ref_attached, startImage bound on the wire, ZERO upload events] produced a real 720×1280 interpolation, resolving the #237 negative prior; foreign UUID → exit 9 pre-generation with screenshot; **#288 duration fail-fast proven live** — exit 23 pre-submit saved a 10-credit generation, and the debug screenshot confirmed the duration control is ABSENT from the cohort's settings popover [locale hypothesis refuted]; upload-400 exit-27 repro deferred-with-reason — the original rejected JPEG no longer exists). Prior: [v0.31.0](LIVE_VERIFICATION_v0.31.0.md) (**#281 wrong-media defenses live-verified in BOTH directions, credit-free** — correct attribution downloads with real wire metadata [seed, 768×1376]; the incident-class lazy-render ambiguity reproduced live and hard-stopped with `MediaAttributionError` exit 26 naming every candidate UUID, no file written; **#282 two-UUID-ref i2i proven e2e** — both freshly generated portrait UUIDs picker-selected into one scene with both canonical identities visually transferred). Prior: [v0.30.0](LIVE_VERIFICATION_v0.30.0.md) (**agentic-cohort image path + both fixes live-verified credit-free** — native 768×1376 stills, i2i-chain + canonical-ref identity hold; the character-create `DataIntegrityError` and the `prefer_classic` WARNING were observed live then fixed [recorder idempotent + INFO log]; MCP video-param feature deferred-with-reason on Veo credits, per the stills-only goal). Prior: [v0.29.0](LIVE_VERIFICATION_v0.29.0.md) (**persistent `gflow instructions` CRUD proven live e2e GREEN, credit-free** — 11-command sequence on a fresh project: add incl. `--ref <image-UUID>` attach, list/enable/disable, master toggle both ways, TOML `apply` destructive full-sync with `enabled=false` honored, `rm` with server card-id preserved across mutations; movie brief-sync code-path-verified via the same primitives, deferred-with-reason on credits; MCP `gflow_instructions_*` tools are thin adapters over the live-verified primitives). Prior: [v0.28.0](LIVE_VERIFICATION_v0.28.0.md) (**agent instructions `-i` now steer agentic generation — crayon e2e GREEN**: a style-neutral prompt + an enabled "crayon" card produced an unmistakable crayon drawing through the real transport; root causes were conversational phrasing + the `project_brief.enabled` master switch). Prior: [v0.27.1](LIVE_VERIFICATION_v0.27.1.md) (**v0.27.0 release follow-up fixes and documentation sync**). Prior: [v0.27.0](LIVE_VERIFICATION_v0.27.0.md) (**`[style]` block with named variants + prompt-aware resume — credit-free CLI verification**: real `movie run --dry-run` 3-way ledger proving resolved-style display, `skip (done)` on matching `style_hash`, and `re-run (style changed)` after a style edit; composition is local, wire path untouched, so no Veo credits spent — first credited styled run will confirm visually). Prior: [v0.26.0](LIVE_VERIFICATION_v0.26.0.md) (**image i2i by generated-image UUID proven live e2e GREEN** — the existing asset is *selected in place* by its media UUID, no duplicate upload, producing an i2i output that references it; plus generated-image `display_name` capture, credited @C1ph3r404). Prior: [v0.25.0](LIVE_VERIFICATION_v0.25.0.md) (**#237 remote-UUID i2v proven live e2e GREEN** — a real 8s 720×1280 interpolation from a generated image's UUID, after the picker-search attach was reworked to local upload; #240 home-`.env` matrix live; plus two silent-failure guards root-caused live: video-as-image download rejection and rejected-upload fail-loud). Prior: [v0.24.0](LIVE_VERIFICATION_v0.24.0.md) (--project parity across CLI + MCP — automated coverage; live gen auth-gated). Prior: [v0.23.0](LIVE_VERIFICATION_v0.23.0.md) (MCP generation wiring proven live end-to-end — tool→worker→real Flow REST→structured-error translation; final image-write blocked by an expired session, environmental. #222 macOS fix reporter-verified e2e on Apple Silicon). Prior: [v0.22.0](LIVE_VERIFICATION_v0.22.0.md) (Tools framework — automated/CI coverage complete; credit/key-gated live feature run is a pending owner gate, see the doc) · [v0.21.0](LIVE_VERIFICATION_v0.21.0.md) (MCP server over stdio + HTTP/SSE — credit-free protocol handshake; 4 tools / 2 prompts / 3 resources confirmed on stdout) · [v0.20.1](LIVE_VERIFICATION_v0.20.1.md) · [v0.20.0](LIVE_VERIFICATION_v0.20.0.md) · [v0.19.0](LIVE_VERIFICATION_v0.19.0.md) · [v0.18.0](LIVE_VERIFICATION_v0.18.0.md) · [v0.17.0](LIVE_VERIFICATION_v0.17.0.md) · [v0.16.0](LIVE_VERIFICATION_v0.16.0.md) · [v0.13.0](LIVE_VERIFICATION_v0.13.0.md) · [v0.12.0](LIVE_VERIFICATION_v0.12.0.md) · [v0.11.0](LIVE_VERIFICATION_v0.11.0.md) · [v0.10.0](LIVE_VERIFICATION_v0.10.0.md) · [v0.9.1](LIVE_VERIFICATION_v0.9.1.md) · [v0.9.0](LIVE_VERIFICATION_v0.9.0.md) · [v0.8.1](LIVE_VERIFICATION_v0.8.1.md) · [v0.7.0](LIVE_VERIFICATION_v0.7.0.md)
 **"Where is the reverse-engineered wire protocol for a feature?"** → the `*_RECON.md` design docs: [CHARACTER_RECON](CHARACTER_RECON.md) (Flow character entity protocol), [IMAGE_UPSCALE_RECON](IMAGE_UPSCALE_RECON.md) (`/v1/flow/upsampleImage` wire). Naming convention: one `<FEATURE>_RECON.md` per reverse-engineered surface, kept as the durable spec after the feature ships. Pre-capture research recons: [ASSET_TAGGING_RECON](ASSET_TAGGING_RECON.md) (`@`-mention asset tagging — shipped in v0.40.0, see [LIVE_VERIFICATION_v0.40.0](LIVE_VERIFICATION_v0.40.0.md)).
 **"What was live-verified for the data layer (PR #58)?"** → [LIVE_VERIFICATION_data_layer](LIVE_VERIFICATION_data_layer.md) — 1 Imagen + 1 Veo credit on denon82, 6-layer ledger (file + magic + Pillow + DB rows + CLI round-trip + structlog)
 **"What was live-verified for the video-download feature (#29)?"** → [LIVE_VERIFICATION_video_download](LIVE_VERIFICATION_video_download.md)

gflow_cli-0.46.1/docs/LIVE_VERIFICATION_v0.46.1.md

@@ -0,0 +1,78 @@
+# Live Verification — v0.46.1
+
+**Date:** 2026-07-31
+**Feature under test:** classic count-setter survives Flow's `1x`→`x1` label rename ([#404](https://github.com/ffroliva/gflow-cli/issues/404), PR [#405](https://github.com/ffroliva/gflow-cli/pull/405))
+**Verifier:** repo owner's Windows 11 workstation, profile `ffroliva` — the exact environment of the original incident bundles (`20260729T151458Z-f9c00656…`, `20260729T151827Z-4f4a6093…`)
+**Credit cost:** zero — image generation costs no Flow credits; the DOM recon was navigation-only.
+
+## Why this release needs live verification
+
+The defect *was* Flow-side UI drift: only a real composer can prove the renamed `x1`
+tab exists, that a digit-keyed click converges, and that the selection persists.
+The pre-fix unit suite was fully green while every real `-n 1` run died — the fakes
+ignored locator filters, so no offline test could have caught this (they now honor
+them, and the pre-fix failure is reproduced mechanically in
+`tests/api/transports/test_ui_automation.py::TestSetCountRetry`).
+
+## 1. Root-cause recon (credit-free, navigation only)
+
+`scripts/dev/spike_issue404_count_tabs_recon.py` against project `gflow-cli t2i`:
+
+| Probe | Result |
+|---|---|
+| Image count row labels | `['x1','x2','x3','x4']` — `1x` gone (video row identical) |
+| Old filtered set (`^(1x\|x[2-4])$`) | size **3** — count-1 tab dropped |
+| Replicated failing click (`nth(0)`) | landed on **`x2`**, moved the count 1→2 (away from target) |
+| Selected `x1` under old read-back | `None` (regex miss) |
+| Digit-keyed click on `x1` | `aria-selected="true"` immediately |
+| Persistence | selection survives Escape-close + reopen — **no Save commit** |
+
+Artifacts on disk: `scripts/dev/_spike_out/spike_issue404_count_tabs_*.json` +
+step screenshots (`404_1`–`404_4_*.png`) + `_diagnostics/count_panel_dom_prompt_404.json`.
+
+## 2. Classic surface — the reported invocation (2 passed, 89 s)
+
+`tests/e2e/test_classic_count_setter_e2e.py` (`GFLOW_CLI_UI_MODE=classic`, 9:16,
+NARWHAL — mirroring the reporter's run):
+
+- **count=1 (the regression):** fresh project displays 2 → the renamed `x1` tab was
+  located, clicked, converged; exactly **1** generation result returned.
+- **count=2 (early-exit):** already-matching display short-circuits with no click;
+  exactly **2** results.
+- structlog invariant: final `ui_automation.count_setter_completed` has
+  `success=True` in both cases; no `error_unhandled`.
+
+## 3. Agentic surface (4/4 passed, ~4 min)
+
+`tests/e2e/test_agentic_count_enforcement_e2e.py`, counts 1–4, each against a
+**deliberately mismatched** sticky panel default:
+
+- All four counts returned exactly the requested number of images; every image
+  downloaded with a recognized magic-byte format (PNG/JPEG/WebP) and non-zero size.
+- `ui_driver.bound mode=agentic`; no `enforce_count_failed` events.
+- First attempt failed in the *test's own setup* (Flow now loads the editor in
+  classic mode; the raw-Playwright setup assumed the Agent composer) — repaired in
+  `beeb833` by toggling via the composer pill before waiting for the `tune` icon.
+  No product code was implicated in that failure.
+
+## 4. Not verified live this cycle (recorded, not omitted)
+
+- **Video output-count cascade** (`_set_output_count` widened to probe `x1` then
+  legacy `1x`): a full end-to-end drive would spend Veo credits. DOM-level evidence
+  from §1 covers the selector shape (the video row renders `x1..x4`; a
+  `[role='tab']:text-is('x2')` click — the cascade's exact selector form — executed
+  live during the spike's cleanup). Miss remains non-fatal by design
+  (`Flow default (x2) applies`).
+- Image **dimensions** were not re-measured this cycle (format sniff + non-empty
+  size only); the original incident's passing run already pinned 768×1376 for this
+  aspect/model pair.
+
+## 5. Ledger summary
+
+| Layer | Evidence |
+|---|---|
+| File count | exact requested count, 6 live generations across counts 1–4 (§2, §3) |
+| Magic bytes | PNG/JPEG/WebP sniff on every downloaded image (§3) |
+| Dimensions | not re-measured (recorded above); format+size verified |
+| structlog invariants | `count_setter_completed success=True`, `ui_driver.bound`, zero `error_unhandled` / `enforce_count_failed` |
+| User-confirmable artifact | spike JSON + 4 step screenshots under `scripts/dev/_spike_out/` |

{gflow_cli-0.46.0 → gflow_cli-0.46.1}/docs/PROJECT_STATUS.md

@@ -4,9 +4,21 @@
 
 ## Current release
 
+**v0.46.1 — alpha.** **Classic count-setter fix (#404).** `gflow image t2i` failed whenever `-n` differed from the count displayed in the composer — including the default `-n 1` — because Flow renamed the count-tab labels from `1x`/`x2`/… to uniform `x1`/`x2`/…: the label filter silently dropped the count-1 tab and the positional pick clicked the wrong tab while reporting per-click success. Count tabs are now selected by the digit in their label across both cohorts, the read-back recognises a selected `x1`, and non-convergence raises the typed `UiSelectorDriftError` (exit 23) naming desired vs displayed instead of an opaque `RuntimeError`. Root-caused and verified live on the reporter's exact invocation, zero credits. See [LIVE_VERIFICATION_v0.46.1.md](LIVE_VERIFICATION_v0.46.1.md).
+
+**Develop (unreleased, post-v0.46.1):** *(empty — develop is the staging branch for the next release).*
+
+<details><summary>v0.46.0 — prompt tools on any OpenAI-compatible endpoint (#387)</summary>
+
+**v0.46.0 — alpha.** **BREAKING — the prompt tools drive any OpenAI-compatible endpoint (#387).** `--tool creative-director` / `reverse-engineer` / `storyboard` now speak OpenAI Chat Completions instead of being hardwired to Google's native Gemini API, so OpenAI, gateways/proxies (OpenRouter, LiteLLM), local runtimes (Ollama, LM Studio), and Google's own compatibility endpoint all work. New config: `GFLOW_CLI_LLM_BASE_URL`, `GFLOW_CLI_LLM_API_KEY` (optional — omitted when unset so keyless local gateways work), `GFLOW_CLI_LLM_MODEL`. The removed `GFLOW_CLI_GEMINI_API_KEY` / `GFLOW_CLI_GEMINI_MODEL` trigger a loud one-time notice, never a silent no-op. The user-supplied endpoint is treated as a trust boundary: redirects declined, `https` (or loopback `http`) enforced, error bodies redacted. `reverse-engineer` degrades to the original input instead of expanding a file path as a prompt. See [LIVE_VERIFICATION_v0.46.0.md](LIVE_VERIFICATION_v0.46.0.md).
+
+</details>
+
+<details><summary>v0.45.0 — reference + character binding fixes (#393/#395)</summary>
+
 **v0.45.0 — alpha.** **Reference + character binding fixes (#393/#395).** `gflow image i2i --ref <UUID>` now attaches the catalog's recorded file when Flow's per-project media picker cannot reach the tile, instead of failing the run — the fail-loud contract (never generate without a requested reference) is unchanged and pinned by a live e2e. `gflow character create` binds portraits to the character again: overlay dismissal was pressing Escape on Flow's own composer (`[role='dialog']`/`[role='alert']` matched the app itself), and the character route could bounce to the project page, sending the prompt to the **project** composer — both produced generations with no `entityContext`, which Flow filed as plain project images. Also: a Flow web-app crash on the character route is now the typed retryable `FlowAppError` (exit 31), character binding failures say what actually happened, and `--format-prompt` (#383) is live-verified. 2810 tests pass. See [LIVE_VERIFICATION_v0.45.0.md](LIVE_VERIFICATION_v0.45.0.md).
 
-**Develop (unreleased, post-v0.45.0):** *(empty — develop is the staging branch for the next release).*
+</details>
 
 <details><summary>v0.44.0 — dual-side project naming &amp; management (#381)</summary>
 
@@ -269,6 +281,13 @@ reporter-verified e2e on macOS).
 | Agentic-pin recovery: opt-in reload after a real Agent-toggle click (#338) | ✅ done (v0.38.1) |
 | Failed generations persisted to the local catalog + `gflow data list errors` (#341) | ✅ done (v0.39.0) |
 | Prompt `@`-mention resolution for asset tagging (#344) | ✅ done (v0.40.0) |
+| Production-readiness hardening: queue safety, profile lease, cancellation-safe teardown (#357) | ✅ done (v0.41.0) |
+| Content-safety `ContentPolicyError` classification + Antigravity coding agent (#359/#360/#361) | ✅ done (v0.42.0) |
+| Private incident diagnostics (`GFLOW_CLI_INCIDENT_CAPTURE`) | ✅ done (v0.43.0) |
+| Dual-side project naming & management (`gflow project` family, `--project-name`/`--project-title`) (#381) | ✅ done (v0.44.0) |
+| `--ref` catalog-backed upload fallback + character-entity binding fixes (#393/#395) | ✅ done (v0.45.0) |
+| Prompt tools on any OpenAI-compatible endpoint (`GFLOW_CLI_LLM_*`) (#387) | ✅ done (v0.46.0) |
+| Classic count-setter: digit-keyed tab selection + typed drift error (#404) | ✅ done (v0.46.1) |
 | Manifest-driven video batch runner on `ui_automation` | ❌ removed — never worked end-to-end, shipped as a nonfunctional stub; see v0.41.0 changelog. For multi-clip video, loop `gflow video t2v`/`i2v` from the shell; `gflow image batch` remains supported for images. |
 | Persistence layer (stay-mounted batch sessions across project boundaries) | ⏳ Phase B |
 | Provider abstraction for official Veo 3.1 API | ⏳ planned |

{gflow_cli-0.46.0 → gflow_cli-0.46.1}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "gflow-cli"
-version = "0.46.0"
+version = "0.46.1"
 description = "Unofficial CLI for Google Flow — drive Veo image-to-video generations from the terminal."
 readme = "README.md"
 license = { file = "LICENSE" }

gflow_cli-0.46.1/scripts/dev/spike_issue404_count_tabs_recon.py

@@ -0,0 +1,283 @@
+#!/usr/bin/env python3
+r"""Issue #404 recon — classic composer count tabs: why does clicking
+``nth(0) of _count_tabs_locator`` report success but never change the
+displayed count? (0 credits)
+
+Replicates ``_set_count``'s exact steps using the transport's own static
+helpers (``_open_gen_settings_panel`` / ``_read_displayed_count`` /
+``_count_tabs_locator`` / ``_dump_count_panel_dom``), then probes the
+candidate fix: clicking the count tab whose TEXT contains the desired digit,
+scoped to the tablist that owns the currently aria-selected count tab.
+
+Navigation only — no prompt is submitted, no generate route is hit, 0 credits.
+
+Usage (headed, supervised):
+
+    PYTHONUTF8=1 .venv\Scripts\python.exe scripts\dev\spike_issue404_count_tabs_recon.py \
+        --profile ffroliva --project 9d7b750f-b4a8-4c2f-b5b0-a059cbfbae73
+"""
+
+from __future__ import annotations
+
+import argparse
+import asyncio
+import json
+import os
+import sys
+import time
+from pathlib import Path
+from typing import Any
+
+_ROOT = Path(__file__).resolve().parents[2]
+_SRC = _ROOT / "src"
+if _SRC.exists() and str(_SRC) not in sys.path:
+    sys.path.insert(0, str(_SRC))
+sys.path.insert(0, str(Path(__file__).resolve().parent))
+
+from _spike_common import build_client, default_out_path, resolve_profile_dir, step  # noqa: E402
+
+from gflow_cli.api import routes  # noqa: E402
+from gflow_cli.api.transports.ui_automation import (  # noqa: E402
+    UiAutomationTransport,
+    _count_tabs_locator,
+)
+from gflow_cli.api.transports.ui_automation_video import (  # noqa: E402
+    COMPOSER_AGENT_TOGGLE_SELECTOR,
+    VideoGenerationMixin,
+)
+
+# Per count tab: text, aria-selected, rect, and a fingerprint of the owning
+# tablist (sibling tab texts in DOM order) so duplicate tablists are visible.
+_TABS_TOPOLOGY_JS = """
+() => {
+  const isCount = (t) => /^(1x|x[2-4])$/.test((t || '').trim());
+  const tablists = [...document.querySelectorAll("[role='tablist']")];
+  return {
+    tablists: tablists.map((tl, i) => {
+      const r = tl.getBoundingClientRect();
+      return {
+        index: i,
+        tabTexts: [...tl.querySelectorAll("[role='tab']")].map(
+          (t) => (t.innerText || '').trim().slice(0, 40)),
+        rect: { x: r.x, y: r.y, w: r.width, h: r.height },
+        visible: r.width > 0 && r.height > 0,
+      };
+    }),
+    countTabs: [...document.querySelectorAll("[role='tab']")]
+      .filter((t) => isCount(t.innerText))
+      .map((t) => {
+        const tl = t.closest("[role='tablist']");
+        const r = t.getBoundingClientRect();
+        return {
+          text: (t.innerText || '').trim(),
+          ariaSelected: t.getAttribute('aria-selected'),
+          tablistIndex: tl ? tablists.indexOf(tl) : null,
+          rect: { x: r.x, y: r.y, w: r.width, h: r.height },
+          visible: r.width > 0 && r.height > 0,
+        };
+      }),
+  };
+}
+"""
+
+
+async def _ensure_classic(page: Any, result: dict[str, Any]) -> bool:
+    media_present = await VideoGenerationMixin._media_panel_present(page)  # noqa: SLF001
+    result["mediaPanelPresent_onLoad"] = media_present
+    if not media_present:
+        pill = page.locator(COMPOSER_AGENT_TOGGLE_SELECTOR).first
+        if await pill.count() > 0:
+            await pill.click(force=True, timeout=5_000)
+            await page.wait_for_timeout(1_500)
+            media_present = await VideoGenerationMixin._media_panel_present(page)  # noqa: SLF001
+    result["classicMode"] = media_present
+    return media_present
+
+
+async def _run(*, profile_dir: Path, project_id: str, locale: str, out_path: Path) -> int:
+    out_dir = out_path.parent
+    out_dir.mkdir(parents=True, exist_ok=True)
+    result: dict[str, Any] = {
+        "spike": "issue404-count-tabs-recon",
+        "capturedAt": time.strftime("%Y-%m-%dT%H:%M:%SZ", time.gmtime()),
+        "project": project_id,
+    }
+    T = UiAutomationTransport
+
+    async with build_client(profile_dir, headless=False) as client:
+        page = await client._checkout_page()  # noqa: SLF001
+        try:
+            editor_url = routes.project_editor_url(locale, project_id)
+            step("1", f"goto {editor_url}", prefix="404")
+            await page.goto(editor_url, wait_until="domcontentloaded", timeout=45_000)
+            await page.wait_for_timeout(4_000)
+            await page.keyboard.press("Escape")
+
+            if not await _ensure_classic(page, result):
+                result["error"] = "could not reach classic mode"
+                return 1
+
+            step("2", "opening generation settings panel (transport helper)", prefix="404")
+            panel_open = await T._is_settings_panel_open(page)  # noqa: SLF001
+            if not panel_open:
+                panel_open = await T._open_gen_settings_panel(page)  # noqa: SLF001
+            result["panelOpened"] = panel_open
+            if not panel_open:
+                result["error"] = "settings panel did not open"
+                return 1
+
+            # The real t2i path switches to IMAGE mode before configuring
+            # settings (#40) — replicate via the ligature-keyed mode tab
+            # (locale-invariant, memory: flow-locale-leak-icon-ligatures).
+            step("2b", "selecting Image mode tab (ligature-keyed)", prefix="404")
+            image_tab = page.locator(
+                "[role='tab']:has(i.google-symbols:text-is('image'))"
+            ).first
+            await image_tab.wait_for(state="visible", timeout=5_000)
+            await image_tab.click()
+            await page.wait_for_timeout(800)
+            result["imageModeSelected"] = await image_tab.get_attribute("aria-selected")
+            await page.screenshot(path=str(out_dir / "404_1_panel_open.png"))
+
+            # Full role dump via the transport's own diagnostic (issue #24 shape).
+            await T._dump_count_panel_dom(page, out_dir, 404)  # noqa: SLF001
+            result["topology_before"] = await page.evaluate(_TABS_TOPOLOGY_JS)
+            result["displayed_before"] = await T._read_displayed_count(page)  # noqa: SLF001
+
+            step("3", "replicating failing click: nth(0) of _count_tabs_locator", prefix="404")
+            tabs = _count_tabs_locator(page)
+            result["filtered_set_size"] = await tabs.count()
+            target = tabs.nth(0)
+            result["nth0_before_click"] = await target.evaluate(
+                """(t) => {
+                  const tablists = [...document.querySelectorAll("[role='tablist']")];
+                  return {
+                    text: (t.innerText || '').trim(),
+                    ariaSelected: t.getAttribute('aria-selected'),
+                    tablistIndex: tablists.indexOf(t.closest("[role='tablist']")),
+                    outerHTML: t.outerHTML.slice(0, 400),
+                  };
+                }"""
+            )
+            try:
+                await target.wait_for(state="visible", timeout=3_000)
+                await target.click()
+                await page.wait_for_timeout(300)
+                result["nth0_click"] = "landed"
+            except Exception as e:  # noqa: BLE001
+                result["nth0_click"] = f"error: {e}"
+            result["nth0_after_click_ariaSelected"] = await target.get_attribute("aria-selected")
+            result["displayed_after_nth0"] = await T._read_displayed_count(page)  # noqa: SLF001
+            result["topology_after_nth0"] = await page.evaluate(_TABS_TOPOLOGY_JS)
+            await page.screenshot(path=str(out_dir / "404_2_after_nth0.png"))
+
+            step("4", "candidate fix: text-keyed click scoped to selected tablist", prefix="404")
+            fix = await page.evaluate(
+                """() => {
+                  // Union of old ("1x", "x2"..) and new ("x1", "x2"..) label cohorts.
+                  const isCount = (t) => /^(1x|x[1-4])$/.test((t || '').trim());
+                  const selected = [...document.querySelectorAll(
+                    "[role='tab'][aria-selected='true']")].filter((t) => isCount(t.innerText));
+                  if (!selected.length) return { found: false, reason: 'no selected count tab' };
+                  const tl = selected[0].closest("[role='tablist']");
+                  if (!tl) return { found: false, reason: 'selected tab has no tablist' };
+                  const target = [...tl.querySelectorAll("[role='tab']")].find(
+                    (t) => /^(1x|x1)$/.test((t.innerText || '').trim()));
+                  if (!target) return { found: false, reason: 'no count-1 tab in selected tablist' };
+                  target.setAttribute('data-spike-404-target', '1');
+                  return { found: true };
+                }"""
+            )
+            result["fix_target"] = fix
+            if fix.get("found"):
+                fix_btn = page.locator("[data-spike-404-target='1']").first
+                await fix_btn.click(timeout=5_000)
+                await page.wait_for_timeout(300)
+                result["fix_after_click_ariaSelected"] = await fix_btn.get_attribute(
+                    "aria-selected"
+                )
+                result["displayed_after_fix"] = await T._read_displayed_count(page)  # noqa: SLF001
+                await page.screenshot(path=str(out_dir / "404_3_after_fix.png"))
+
+                step("5", "persistence: Escape-close, reopen, re-read", prefix="404")
+                await page.keyboard.press("Escape")
+                await page.wait_for_timeout(400)
+                reopened = await T._open_gen_settings_panel(page)  # noqa: SLF001
+                result["panelReopened"] = reopened
+                result["displayed_after_reopen"] = await T._read_displayed_count(page)  # noqa: SLF001
+                result["topology_after_reopen"] = await page.evaluate(_TABS_TOPOLOGY_JS)
+                await page.screenshot(path=str(out_dir / "404_4_reopened.png"))
+
+            # Cleanup: earlier probe runs flipped the VIDEO count row to x1 on
+            # this project — restore Flow's x2 default so the recon leaves no
+            # sticky state behind.
+            step("6", "cleanup: restore video count row to x2", prefix="404")
+            video_tab = page.locator(
+                "[role='tab']:has(i.google-symbols:text-is('videocam'))"
+            ).first
+            if await video_tab.count() > 0:
+                await video_tab.click()
+                await page.wait_for_timeout(800)
+                x2_tab = page.locator("[role='tab']:text-is('x2')").first
+                if await x2_tab.count() > 0:
+                    await x2_tab.click()
+                    await page.wait_for_timeout(300)
+                    result["videoCountRestored"] = await x2_tab.get_attribute(
+                        "aria-selected"
+                    )
+        finally:
+            client._checkin_page(page)  # noqa: SLF001
+            out_path.write_text(json.dumps(result, indent=2, ensure_ascii=False), encoding="utf-8")
+
+    print(f"\n[404] json -> {out_path}", flush=True)
+    for key in (
+        "displayed_before",
+        "filtered_set_size",
+        "nth0_before_click",
+        "nth0_click",
+        "nth0_after_click_ariaSelected",
+        "displayed_after_nth0",
+        "fix_target",
+        "fix_after_click_ariaSelected",
+        "displayed_after_fix",
+        "displayed_after_reopen",
+    ):
+        print(f"[404] {key} = {json.dumps(result.get(key), ensure_ascii=False)}", flush=True)
+    return 0
+
+
+def main(argv: list[str] | None = None) -> int:
+    p = argparse.ArgumentParser(
+        description="Issue #404: classic composer count-tab recon (0 credits)"
+    )
+    p.add_argument("--profile", default=os.environ.get("GFLOW_CLI_PROFILE", "ffroliva"))
+    p.add_argument(
+        "--project",
+        default=os.environ.get("GFLOW_CLI_PROJECT"),
+        required="GFLOW_CLI_PROJECT" not in os.environ,
+    )
+    p.add_argument("--locale", default=os.environ.get("GFLOW_CLI_LOCALE", "en"))
+    p.add_argument("--out", default=None)
+    args = p.parse_args(argv)
+
+    profile_dir = resolve_profile_dir(args.profile)
+    out_path = (
+        Path(args.out) if args.out else default_out_path("spike_issue404_count_tabs", ".json")
+    )
+    step("--", f"profile={args.profile} project={args.project}", prefix="404")
+    try:
+        return asyncio.run(
+            _run(
+                profile_dir=profile_dir,
+                project_id=args.project,
+                locale=args.locale,
+                out_path=out_path,
+            )
+        )
+    except KeyboardInterrupt:
+        print("[404] aborted", file=sys.stderr)
+        return 130
+
+
+if __name__ == "__main__":
+    raise SystemExit(main())

{gflow_cli-0.46.0 → gflow_cli-0.46.1}/src/gflow_cli/__init__.py

@@ -1,3 +1,3 @@
 """gflow-cli — unofficial CLI for Google Flow."""
 
-__version__ = "0.46.0"
+__version__ = "0.46.1"

{gflow_cli-0.46.0 → gflow_cli-0.46.1}/src/gflow_cli/api/transports/drivers/agentic.py

@@ -109,7 +109,8 @@ _FIND_PANEL_ROOT_JS_PRELUDE = """
     let node = backBtn.parentElement;
     for (let depth = 0; depth < 8 && node; depth++) {
       const hasCountTablist = [...node.querySelectorAll("[role='tab']")].some((t) =>
-        /^(1x|x[2-4])$/.test((t.textContent || '').trim())
+        // Both label cohorts: legacy "1x" and the renamed "x1" (issue #404).
+        /^(1x|x[1-4])$/.test((t.textContent || '').trim())
       );
       if (hasCountTablist) {
         if (depth < bestDepth) { panelRoot = node; backBtnEl = backBtn; bestDepth = depth; }