# Castor — Signup Dashboard

Check the providers you want to open accounts with, hit **Launch & autofill**, and each
signup page opens in its own browser tab with your identity already filled. You finish the
CAPTCHA / SMS verification and submit. No retyping your info.

## What it does
- **Provider catalog** (`providers.json`) — 22 financial providers across checking, savings,
  brokerage, crypto, credit card, and payment apps, each with its direct signup link.
- **Checkbox selection** — pick the ones you want, launch them all at once.
- **Live autofill** — Playwright scans each form, matches fields (name, email, phone, address,
  city, state, ZIP, DOB, SSN, employer, income) to your profile, and fills them with a highlight
  flash while you watch. Password fields are never touched.
- **Profile** — your real info (`autofill_profile.json`), stored locally, used only to fill
  *your own* forms.

## Files
- `app.py` — Flask dashboard + the Playwright fill engine.
- `fill_worker.py` — subprocess entry the dashboard spawns to open the visible browser.
- `providers.json` — the provider catalog (name, category, signup URL, note).
- `autofill_profile.json` — your identity (fill in the blanks; SSN/DOB/address left empty for you).
- `test_form.html` — local test form for verifying the fill engine headless.

## Run
```bash
cd ~/account-onboarding
/usr/bin/python3 app.py --host 0.0.0.0 --port 5057
# open http://10.30.20.69:5057
```

> **Use `/usr/bin/python3` explicitly.** In background/launched shells `python3` resolves to
> Homebrew Python 3.14, which does NOT have playwright installed. System Python 3.9
> (`/usr/bin/python3`) has both `playwright` and `flask` in its user-site.

## Test the fill engine without a browser window
```bash
/usr/bin/python3 fill_worker.py --urls '["file:///Users/drjones/account-onboarding/test_form.html"]' --headless
```

## Hard rules
- Single identity: one person, their real verified info, their own accounts.
- No identity fabrication, no bulk account creation, no KYC evasion.
- Fill-only by default; you review and submit. Real institutions still require CAPTCHA /
  SMS / email verification, which is yours to complete.