Snapshot: full project state

README.md

@@ -0,0 +1,44 @@
+# Castor — Signup Dashboard
+
+Check the providers you want to open accounts with, hit **Launch & autofill**, and each
+signup page opens in its own browser tab with your identity already filled. You finish the
+CAPTCHA / SMS verification and submit. No retyping your info.
+
+## What it does
+- **Provider catalog** (`providers.json`) — 22 financial providers across checking, savings,
+  brokerage, crypto, credit card, and payment apps, each with its direct signup link.
+- **Checkbox selection** — pick the ones you want, launch them all at once.
+- **Live autofill** — Playwright scans each form, matches fields (name, email, phone, address,
+  city, state, ZIP, DOB, SSN, employer, income) to your profile, and fills them with a highlight
+  flash while you watch. Password fields are never touched.
+- **Profile** — your real info (`autofill_profile.json`), stored locally, used only to fill
+  *your own* forms.
+
+## Files
+- `app.py` — Flask dashboard + the Playwright fill engine.
+- `fill_worker.py` — subprocess entry the dashboard spawns to open the visible browser.
+- `providers.json` — the provider catalog (name, category, signup URL, note).
+- `autofill_profile.json` — your identity (fill in the blanks; SSN/DOB/address left empty for you).
+- `test_form.html` — local test form for verifying the fill engine headless.
+
+## Run
+```bash
+cd ~/account-onboarding
+/usr/bin/python3 app.py --host 0.0.0.0 --port 5057
+# open http://10.30.20.69:5057
+```
+
+> **Use `/usr/bin/python3` explicitly.** In background/launched shells `python3` resolves to
+> Homebrew Python 3.14, which does NOT have playwright installed. System Python 3.9
+> (`/usr/bin/python3`) has both `playwright` and `flask` in its user-site.
+
+## Test the fill engine without a browser window
+```bash
+/usr/bin/python3 fill_worker.py --urls '["file:///Users/drjones/account-onboarding/test_form.html"]' --headless
+```
+
+## Hard rules
+- Single identity: one person, their real verified info, their own accounts.
+- No identity fabrication, no bulk account creation, no KYC evasion.
+- Fill-only by default; you review and submit. Real institutions still require CAPTCHA /
+  SMS / email verification, which is yours to complete.