gflow-cli 0.96.1__tar.gz → 0.98.0__tar.gz

gflow_cli-0.98.0/.claude/commands/gflow/optimize.md

@@ -0,0 +1,9 @@
+---
+description: Make gflow-cli's tests and CI fast without weakening them - measure, find what dominates, apply the lever that fits (per-test cost, -n, shards, rebalancing, profile clones for e2e). Targets CI 3-5 min.
+---
+
+# `/gflow:optimize [ci | local | e2e]` — test and CI speed
+
+**Read `skills/optimize/SKILL.md` and follow the protocol**, passing `$ARGUMENTS` if given.
+
+> Do **not** call `Skill(skill="optimize")` — read the file directly.

gflow_cli-0.98.0/.codex-plugin/plugin.json

@@ -0,0 +1,34 @@
+{
+  "name": "gflow",
+  "version": "0.98.0",
+  "description": "Reusable development and operations workflows for gflow-cli",
+  "author": {
+    "name": "Flavio Oliva",
+    "url": "https://github.com/ffroliva"
+  },
+  "homepage": "https://github.com/ffroliva/gflow-cli",
+  "repository": "https://github.com/ffroliva/gflow-cli",
+  "license": "MIT",
+  "keywords": [
+    "gflow-cli",
+    "codex",
+    "google-flow"
+  ],
+  "skills": "./plugins/gflow/skills/",
+  "interface": {
+    "displayName": "gflow-cli",
+    "shortDescription": "Develop, validate, review, and operate gflow-cli.",
+    "longDescription": "Project workflows for planning, validation, issue handling, reviews, releases, and Google Flow CLI operations.",
+    "developerName": "Flavio Oliva",
+    "category": "Developer Tools",
+    "capabilities": [
+      "Interactive",
+      "Write"
+    ],
+    "websiteURL": "https://github.com/ffroliva/gflow-cli",
+    "defaultPrompt": [
+      "Show the current gflow-cli task with $gflow:status.",
+      "Run the gflow-cli quality gates with $gflow:check."
+    ]
+  }
+}

gflow_cli-0.98.0/.env.template

@@ -0,0 +1,302 @@
+# gflow-cli — example environment variables.
+# Copy to `.env` in the directory where you invoke `gflow` (project-local
+# overrides) or to `$GFLOW_CLI_HOME/.env` (machine-wide defaults; used by
+# processes with arbitrary working directories, e.g. the MCP server) and
+# uncomment what you want to override. On conflicts the CWD `.env` wins.
+# All variables are OPTIONAL — defaults work out of the box for most users.
+# Lines below are commented to show the SHIPPED DEFAULT — uncomment to override.
+
+# -----------------------------------------------------------------------------
+# Auth & profiles
+# -----------------------------------------------------------------------------
+
+# Root directory for Playwright persistent contexts (signed-in Google sessions).
+# Default (via `platformdirs`):
+#   Windows: %LOCALAPPDATA%\gflow-cli                    (e.g. C:\Users\<you>\AppData\Local\gflow-cli)
+#   macOS:   ~/Library/Application Support/gflow-cli
+#   Linux:   $XDG_DATA_HOME/gflow-cli                    (typically ~/.local/share/gflow-cli)
+# GFLOW_CLI_HOME=
+
+# Default profile name. When unset, the resolution chain auto-picks (see
+# docs/CONFIGURATION.md § GFLOW_CLI_PROFILE). Override per-call with
+# `--profile <name>`.
+# GFLOW_CLI_PROFILE=default
+
+# Maximum wait time (seconds) for `gflow auth login` to complete Google sign-in.
+# Useful for agent pipelines — set low to surface hung logins as exit 12 fast.
+# GFLOW_CLI_AUTH_LOGIN_TIMEOUT=600
+
+# Anti-bot pause between prompt submissions in multi-prompt image runs
+# (image batch, t2i --prompts-file/--stdin, gflow run). 'MIN-MAX' seconds, a
+# single number for 0-N, or 0 to disable. Default 0.5-1.5 (small on purpose);
+# widen (e.g. 10-30) if runs hit WAF 403s. The --jitter flag beats this.
+# See docs/CONFIGURATION.md § GFLOW_CLI_JITTER_RANGE.
+# GFLOW_CLI_JITTER_RANGE=0.5-1.5
+
+# -----------------------------------------------------------------------------
+# Output paths
+# -----------------------------------------------------------------------------
+
+# Where downloaded assets land. Subfolders are created per kind/date:
+#   <output_dir>/images/<YYYY-MM-DD>/<job_id>_<index>.png
+#   <output_dir>/videos/<YYYY-MM-DD>/<job_id>.mp4
+#
+# Default (via `platformdirs`):
+#   Windows: %USERPROFILE%\Downloads\gflow-cli
+#   macOS:   ~/Downloads/gflow-cli
+#   Linux:   $XDG_DOWNLOAD_DIR/gflow-cli  (falls back to ~/Downloads/gflow-cli)
+# MCP tools may only write inside this directory (their output / out_dir resolve against it).
+# GFLOW_CLI_OUTPUT_DIR=
+
+# -----------------------------------------------------------------------------
+# Provider selection
+# -----------------------------------------------------------------------------
+
+# Backend to use for generations.
+#   flow      - reverse-engineered Flow REST API (default, requires Ultra/Pro)
+#   official  - official Veo SDK (planned for v0.5+, requires Gemini API key)
+# GFLOW_CLI_PROVIDER=flow
+
+# -----------------------------------------------------------------------------
+# Prompt tools LLM (--tool creative-director / reverse-engineer / storyboard)
+#
+# Any OpenAI-compatible Chat Completions endpoint: OpenAI, OpenRouter, a
+# corporate gateway, a local proxy, Ollama, or Google's compat endpoint.
+# Provider keys stay with your gateway — gflow only holds the one credential it
+# presents to the endpoint below.
+#
+# NOTE: GFLOW_CLI_GEMINI_API_KEY / GFLOW_CLI_GEMINI_MODEL were REMOVED in
+# v0.46.0 and are not forwarded. Use GFLOW_CLI_LLM_API_KEY — an existing Google
+# AIza… key still works, since the default endpoint is Google's compat surface.
+# -----------------------------------------------------------------------------
+
+# Endpoint. This is the on/off switch for the prompt tools.
+# https only, except loopback (127.0.0.1 / localhost / ::1) which may use http.
+# Use 127.0.0.1 rather than localhost — gateways often bind IPv4 only and
+# Windows resolves ::1 first, which stalls.
+# GFLOW_CLI_LLM_BASE_URL=https://generativelanguage.googleapis.com/v1beta/openai
+
+# Credential for that endpoint (Authorization: Bearer). OPTIONAL — omit it for a
+# keyless local gateway and no header is sent at all.
+# Google key: https://aistudio.google.com/apikey
+# GFLOW_CLI_LLM_API_KEY=
+
+# Model, which is also the provider selector since gateways route on it
+# (e.g. openai/gpt-4o-mini). Unset = the gateway chooses.
+# GFLOW_CLI_LLM_MODEL=
+
+# -----------------------------------------------------------------------------
+# Cloud storage
+# -----------------------------------------------------------------------------
+
+# Upload generated assets directly to a cloud bucket instead of saving local
+# asset copies. Supported schemes:
+#   gs://   – Google Cloud Storage (requires: pip install 'gflow-cli[gcs]')
+#   s3://   – Amazon S3 or any S3-compatible store (RustFS, MinIO, ...)
+#             (requires: pip install 'gflow-cli[s3]')
+#
+# Examples:
+#   GFLOW_CLI_STORAGE_URI=gs://my-gcs-bucket/gflow/
+#   GFLOW_CLI_STORAGE_URI=s3://my-s3-bucket/gflow/
+#   GFLOW_CLI_STORAGE_URI=s3://gflow-test/gflow/   # local docker-compose stack (RustFS)
+#
+# For S3-compatible stores you also need the standard AWS SDK env vars:
+#   AWS_ACCESS_KEY_ID=rustfsadmin
+#   AWS_SECRET_ACCESS_KEY=rustfsadmin
+#   AWS_ENDPOINT_URL=http://localhost:9000   # omit for real AWS
+#   AWS_DEFAULT_REGION=us-east-1
+#
+# For GCS (local emulator):
+#   STORAGE_EMULATOR_HOST=http://localhost:4443
+#
+# When unset, assets are saved to GFLOW_CLI_OUTPUT_DIR (local disk). gflow-cli
+# does not dual-write local + cloud copies; configure one storage target per run.
+# GFLOW_CLI_STORAGE_URI=
+
+# -----------------------------------------------------------------------------
+# Runtime tuning
+# -----------------------------------------------------------------------------
+
+# Logging level — DEBUG | INFO | WARNING | ERROR (default WARNING; INFO shows progress events)
+# GFLOW_CLI_LOG_LEVEL=WARNING
+
+# Log format — auto | text | json
+#   auto = text on TTY, json when piped (default)
+# GFLOW_CLI_LOG_FORMAT=auto
+
+# Per-worker Playwright Page-pool size (1-16). FlowApiClient opens N Pages
+# inside one shared persistent BrowserContext. No current CLI command fans
+# out multiple generations concurrently through this pool, so raising it has
+# no effect today. ~30-60 MiB memory per Page on Chromium headless if that
+# changes; don't exceed 8 without measuring. Shipped in v0.4.0a2.
+# GFLOW_CLI_CONCURRENCY=1
+
+# Seconds to wait for another gflow process to release the profile lease
+# before giving up with ProfileLockedError (0 = fail fast, the default).
+# Holders always run to completion; the waiter takes over on release (#478).
+# GFLOW_CLI_LEASE_WAIT_SECONDS=0
+
+# Once-a-day best-effort PyPI check that shows an update banner on stderr when
+# a newer gflow-cli exists (#479; one plain line when stderr is piped). Never
+# blocks; skipped in CI and for editable/source installs. Set to 0 to disable.
+# Upgrade with `gflow update`.
+# GFLOW_CLI_UPDATE_CHECK=1
+
+# Local usage counters (#1164): command/flag names, exit codes and coarse
+# durations, kept in <home>/telemetry.db. Anything but 1/true/on/empty turns
+# them off, as does DO_NOT_TRACK set to anything but empty/0/false. Both are
+# honoured from the environment and from either .env file; a .env can only
+# turn counting off, never on.
+# GFLOW_CLI_TELEMETRY=1
+# DO_NOT_TRACK=1
+
+# Whether generation prompts (and the prompt-derived display names used as the
+# picker search key) are stored in the local catalog — store | redacted.
+# Under 'redacted', `gflow doctor` reports missing display names as info
+# (backfill is deliberately suppressed) instead of warn, and name backfill via
+# `gflow data sync --names` requires switching back to 'store' first.
+# GFLOW_CLI_HISTORY_PROMPTS=store
+
+# MCP no-spend mode (#496): when set to 1, the MCP server (gflow mcp run AND
+# gflow serve) never registers the credit-spending generate tools — agents
+# cannot see them in tools/list. Equivalent to the --no-spend flag.
+# GFLOW_MCP_NO_SPEND=0
+
+# Run Playwright in headless mode for non-`auth login` commands (true|false).
+# Default: false — headed real Chrome is the PRODUCTION default, not a
+# fallback. The ui_automation transport (the only production transport)
+# requires headed Chrome: reCAPTCHA Enterprise rejects headless Chromium
+# outright (immediate 403). Only set true for CI/CD on a non-ui_automation
+# transport (bearer/sapisidhash, experimental). For WAF-sensitive runs, pin
+# GFLOW_CLI_HEADLESS=false explicitly rather than relying on the default.
+# GFLOW_CLI_HEADLESS=false
+
+# Screen position X,Y of the headed generation browser. Default -30000,-30000 opens it
+# off-screen: still real headed Chrome (reCAPTCHA unaffected), just not over your
+# desktop. Set 0,0 (or a second monitor's origin) to watch or debug a run; set empty
+# for Chrome's own placement. It does NOT stop Chrome taking keyboard focus at launch.
+# Login windows are always visible: for an account chooser / consent screen, run
+# `gflow auth login --profile <name>` rather than making this window visible.
+# GFLOW_CLI_BROWSER_WINDOW_POSITION=-30000,-30000
+
+# Proxy for every browser gflow launches (generation, auth login/renew/status), #1036.
+# Opt-in; unset, the browser connects as before (on Windows, via the system proxy).
+# Accepts http://host:port, https://host:port or socks5://host:port. No user:pass@:
+# Flow does not load through proxy credentials, so let a local client (Clash, v2ray)
+# hold them. gflow's own HTTP calls follow HTTPS_PROXY instead, never this: point both
+# at the same proxy, and sign in through it. Validated at startup (exit 11).
+# GFLOW_CLI_BROWSER_PROXY=http://127.0.0.1:7897
+
+# Browser automation engine — playwright (default) | patchright
+# patchright is an OPT-IN, drop-in patched Playwright (Chromium) that avoids the
+# Runtime.enable CDP leak for stronger reCAPTCHA-Enterprise evasion on the HEADED
+# path. It is NOT a headless unlock. Requires a separate install:
+#   pip install patchright        (or: pip install 'gflow-cli[patchright]')
+# When using system Chrome (channel=chrome, the gflow default) you do NOT need
+# `patchright install chromium`. Unset to revert to the default playwright engine.
+# GFLOW_CLI_BROWSER_ENGINE=playwright
+
+# Which Flow UI arm a command needs: auto (default — no arm asked for, so it
+# resolves to classic, the arm that can satisfy a generation request) | classic
+# (require the hard aspect controls) | agentic (require the chat surface; needed
+# for -i instructions). gflow switches to the required arm, verifies via re-probe,
+# and aborts with exit 28 (retryable — the cohort flaps per load) if it can't be
+# reached. -i instructions force agentic automatically. See docs/CONFIGURATION.md.
+# GFLOW_CLI_UI_MODE=auto
+
+# Which Flow frontend gflow drives (#639). auto (default): flow.google.com is the
+# default host for what it can serve today (video t2v; video i2v from a local
+# --initial-frame; video r2v from local --ref files; image t2i; and image i2i from
+# local files — all with --project) on every
+# account; requests it cannot serve yet keep the labs driver on an unmoved
+# account; where Flow serves flow.google.com you get the migrated composer for
+# everything ported to it.
+# flow.google.com: force the migrated composer for everything.
+# labs.google: never use it — where Flow serves flow.google.com, requests fail
+# with exit 36 (kill switch).
+# GFLOW_CLI_FLOW_HOST=auto
+
+# Direct credits read (#1229). 1 (default, except macOS): `gflow credits` and the MCP
+# gflow_get_credits tool read the balance from flow.google.com with the profile's saved
+# cookies, without starting Chrome; a failure (signed out, Chrome holding the profile,
+# network) falls back to the browser read. Flow throttling (HTTP 429/503) is reported as an
+# error instead, since the browser would send the same requests. 0: always use the browser.
+# Off by default on macOS, where reading the cookies can raise a Keychain prompt. Skipped
+# while any proxy is configured (GFLOW_CLI_BROWSER_PROXY, HTTPS_PROXY-style variables, or the
+# OS proxy), so the cookies never leave by a different route than the browser's.
+# GFLOW_CLI_WIRE_READS=1
+
+# Agent-only composer (#799): "Confirm before generating" applied before a run.
+# account (default): leave the Flow account's setting. A confirmation its own
+# submit produced is read first: one that quotes more than requested is rejected
+# (#988), a video one whose count cannot be read is not approved, any other is
+# approved; a second one is never approved.
+# always: set Always. never: set Never — no confirmation and no count check, so an agent that
+# queues more than asked is only caught after credits are spent.
+# Saved to the Flow account and not restored after the run.
+# GFLOW_CLI_AGENT_CONFIRM=account
+
+# DEPRECATED — use GFLOW_CLI_UI_MODE=classic. true maps to ui_mode=classic, but the
+# old silent agentic fallback is gone: a classic-required run now aborts (exit 28).
+# GFLOW_CLI_PREFER_CLASSIC=false
+
+# DEPRECATED — use GFLOW_CLI_UI_MODE=agentic. true maps to ui_mode=agentic.
+# GFLOW_CLI_FORCE_AGENT_UI=false
+
+
+# BCP-47 locale tag passed to Playwright's launch `locale=` parameter
+# (controls Accept-Language only — Chrome's UI language is forced to
+# en-US via the `--lang=en-US` launch arg regardless of this setting, so
+# Flow stays on /fx/tools/flow/ instead of /fx/<locale>/). Default:
+# `en-US`. Override to capture locale-invariant DOM via
+# scripts/dev/capture_locale_invariants.py or to live-verify a non-EN
+# language end-to-end (see KNOWN_ISSUES § issue #24).
+# GFLOW_CLI_LOCALE=en-US
+
+# Display name of the --project project, used by `gflow video i2v` to select
+# the target project in the media picker's project menu when attaching a
+# media-UUID frame (#287 — the menu lists projects by NAME; unnamed projects
+# show only creation timestamps). Same as the `--project-name` flag, which
+# takes precedence when both are set. Escape hatch when automatic name
+# derivation (tab title / page hints) fails.
+# GFLOW_CLI_PROJECT_NAME=
+
+# Default Flow project id for image t2i/i2i, video t2v/i2v/r2v, `gflow run`
+# and the MCP generate tools when no --project / --project-name is given (#1039).
+# Unset = a new project per run. Never used by extend, upscale, scene, character
+# or instructions. See docs/CONFIGURATION.md#gflow_cli_project.
+# GFLOW_CLI_PROJECT=
+
+# -----------------------------------------------------------------------------
+# Debugging (see docs/CONFIGURATION.md; HAR/traceback are opt-in and can
+# expose secrets)
+# -----------------------------------------------------------------------------
+
+# Automatic private incident bundles (DEFAULT: true). On relevant operational
+# failures (Flow app crash, UI drift, transport timeout, WAF/network errors,
+# profile-lock contention) gflow writes a bounded diagnostic bundle under
+# <GFLOW_CLI_HOME>/incidents/. Automatic JSON is allowlisted structural
+# metadata only; screenshots live under sensitive/ and must be reviewed
+# before sharing. Nothing is ever uploaded. Set false to disable.
+# GFLOW_CLI_INCIDENT_CAPTURE=true
+
+# Captures full Playwright network traffic (requests, responses, headers,
+# cookies) to this HAR file for the session. SECURITY: a HAR file contains
+# live auth cookies and bearer tokens -- never share one publicly.
+# GFLOW_CLI_HAR_PATH=
+
+# Prints the real exception message + traceback for unhandled errors, to the
+# console and (under --json) into the payload, instead of the generic
+# placeholder. SECURITY: may leak tokens/cookies present in exception text.
+# GFLOW_CLI_DEBUG_TRACEBACK=
+
+# -----------------------------------------------------------------------------
+# Headless Daemon (gflow serve)
+# -----------------------------------------------------------------------------
+
+# API Token header for gflow serve authentication (required when binding to non-local interface, e.g. 0.0.0.0).
+# GFLOW_DAEMON_TOKEN=
+
+# Port for gflow serve. Default is 8000.
+# GFLOW_DAEMON_PORT=8000
+

gflow_cli-0.98.0/.github/ISSUE_TEMPLATE/bug_report.yml

@@ -0,0 +1,94 @@
+name: Bug report
+description: A gflow command or MCP tool did something wrong.
+labels: ["bug"]
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Thanks for reporting. Before you file: if Flow itself seems to have changed (a selector or wire stopped working), use the **Flow surface change** form instead. Auth or reCAPTCHA trouble? Check [KNOWN_ISSUES.md](https://github.com/ffroliva/gflow-cli/blob/develop/KNOWN_ISSUES.md) first.
+  - type: input
+    id: version
+    attributes:
+      label: gflow version
+      description: Output of `gflow --version`.
+      placeholder: gflow-cli 0.97.0
+    validations:
+      required: true
+  - type: input
+    id: os
+    attributes:
+      label: Operating system
+      placeholder: Windows 11 / macOS 15 / Ubuntu 24.04
+    validations:
+      required: true
+  - type: dropdown
+    id: install
+    attributes:
+      label: Install method
+      options:
+        - uv tool
+        - pipx
+        - pip
+        - source checkout
+    validations:
+      required: true
+  - type: dropdown
+    id: surface
+    attributes:
+      label: Which surface reproduces it?
+      description: The CLI and the MCP server are separate adapters over one service. If you only tried one, say so.
+      options:
+        - CLI
+        - MCP
+        - Both
+        - Only tried one of them
+    validations:
+      required: true
+  - type: textarea
+    id: command
+    attributes:
+      label: Exact command or MCP tool call
+      description: The full `gflow ...` command line, or the MCP tool name and its arguments.
+      render: shell
+    validations:
+      required: true
+  - type: dropdown
+    id: host
+    attributes:
+      label: Host Flow served
+      description: The address in the browser gflow drove. This records what was served, not what your account can or cannot do.
+      options:
+        - flow.google.com
+        - labs.google
+        - Not observed
+    validations:
+      required: true
+  - type: textarea
+    id: expected_actual
+    attributes:
+      label: Expected vs actual
+      placeholder: |
+        Expected: ...
+        Actual: ...
+    validations:
+      required: true
+  - type: textarea
+    id: problem
+    attributes:
+      label: Exit code and problem details
+      description: Paste the exit code (3-39) and the RFC 9457 problem-details JSON, including `charged` and `next_action`, from the `--json` output you already have. Do not re-run a paid generation to collect it. If `charged` is `yes` or `maybe`, follow `next_action` first; a billed clip that failed to download is recovered with `gflow data download <media-id>`.
+      render: json
+  - type: textarea
+    id: doctor
+    attributes:
+      label: "`gflow doctor` output"
+      description: Read-only, spends nothing. Exit 33 just means it found something.
+      render: text
+  - type: checkboxes
+    id: redaction
+    attributes:
+      label: Redaction
+      description: gflow redacts tokens and cookies in its own error output by default, but logs, screenshots and pasted text may still carry them.
+      options:
+        - label: I removed tokens, cookies, signed media URLs and account emails from everything above.
+          required: true

gflow_cli-0.98.0/.github/ISSUE_TEMPLATE/config.yml

@@ -0,0 +1,11 @@
+blank_issues_enabled: false
+contact_links:
+  - name: Report a security vulnerability (private)
+    url: https://github.com/ffroliva/gflow-cli/security/advisories/new
+    about: Secret leaks, auth bypass, supply-chain concerns. Never open a public issue — see docs/SECURITY.md § Reporting.
+  - name: Documentation
+    url: https://ffroliva.github.io/gflow-cli/docs/
+    about: The docs site. Offline, `gflow docs --search TERM` searches the same docs bundled with your install.
+  - name: Questions and ideas
+    url: https://github.com/ffroliva/gflow-cli/discussions
+    about: How-to questions and open-ended ideas belong in Discussions.

gflow_cli-0.98.0/.github/ISSUE_TEMPLATE/feature_request.yml

@@ -0,0 +1,39 @@
+name: Feature request
+description: Something gflow should do that it does not.
+labels: ["enhancement"]
+body:
+  - type: textarea
+    id: problem
+    attributes:
+      label: Problem
+      description: What are you trying to do, and what stops you today? Start here, not with the solution.
+    validations:
+      required: true
+  - type: textarea
+    id: proposal
+    attributes:
+      label: Proposal
+      description: The behaviour you would like. Example commands welcome.
+    validations:
+      required: true
+  - type: dropdown
+    id: surface
+    attributes:
+      label: Where should it live?
+      description: Every user-facing CLI capability has an MCP twin, or a recorded reason it does not. Say which door you would use.
+      options:
+        - CLI and MCP
+        - CLI only (say why below)
+        - MCP only (say why below)
+        - Not sure
+    validations:
+      required: true
+  - type: textarea
+    id: flow
+    attributes:
+      label: Does Flow already do this in the web app?
+      description: If yes, which host served it (flow.google.com / labs.google) and how you reach it there. A feature gflow cannot drive yet is usually "not ported yet", not missing from Flow.
+  - type: textarea
+    id: alternatives
+    attributes:
+      label: Workarounds you use now

gflow_cli-0.98.0/.github/ISSUE_TEMPLATE/flow_surface_change.yml

@@ -0,0 +1,64 @@
+name: Flow surface change
+description: Flow changed — a selector, menu or wire call gflow relies on stopped working.
+labels: ["bug", "investigation"]
+body:
+  - type: markdown
+    attributes:
+      value: |
+        gflow drives a product it does not control, so the most useful thing here is what Flow actually rendered or called on your machine.
+
+        **A timeout is not proof of absence.** A selector that misses is evidence about the selector, never about the feature. Please describe what you *observed*, and if you can, capture it with the $0 spike tools: [skills/spike](https://github.com/ffroliva/gflow-cli/blob/develop/skills/spike/SKILL.md) and [docs/E2E_TESTING.md](https://github.com/ffroliva/gflow-cli/blob/develop/docs/E2E_TESTING.md).
+  - type: input
+    id: version
+    attributes:
+      label: gflow version
+      description: Output of `gflow --version`.
+    validations:
+      required: true
+  - type: textarea
+    id: command
+    attributes:
+      label: Command or MCP tool call
+      render: shell
+    validations:
+      required: true
+  - type: dropdown
+    id: host
+    attributes:
+      label: Host Flow served
+      options:
+        - flow.google.com
+        - labs.google
+        - Not observed
+    validations:
+      required: true
+  - type: input
+    id: locale
+    attributes:
+      label: Account / UI locale
+      description: Flow's UI language for this account (gflow's selectors must not depend on it).
+      placeholder: en, pt-BR, vi ...
+    validations:
+      required: true
+  - type: textarea
+    id: observed
+    attributes:
+      label: What Flow did vs what gflow expected
+      description: What you saw in the web app at that step (button, menu, dialog, request), and the exit code / problem details gflow returned (`--json`).
+    validations:
+      required: true
+  - type: textarea
+    id: har
+    attributes:
+      label: Redacted HAR summary (optional)
+      description: |
+        Only the output of `python scripts/dev/har-spike/extract_har_summary.py <capture>.har`. Keep its default `--host aisandbox-pa.googleapis.com` (the API host); passing the served host drops the API requests. **Never attach a raw HAR** — it carries cookies, Bearer tokens and prompts.
+        The summary replaces every free-text value with its length (#1269); still read it before posting.
+      render: text
+  - type: checkboxes
+    id: redaction
+    attributes:
+      label: Redaction
+      options:
+        - label: I attached no raw HAR or incident bundle, and removed tokens, cookies, signed URLs, account emails and prompt text.
+          required: true