L1ght5p33d v0.2.0 - on-demand workflow companion

L1ght5p33d now connects on-demand workflow downloads, a local approval page, and deterministic execution through OpenAdapt Flow. The AI can find a reviewed workflow, supply inputs, and hand it to the user without controlling every click.

• THEBEST curator signatures, exact artifact hashes, schemas, review consistency, and expiry are checked before use.
• Downloaded workflows expire after 90 days without execution by default; --cache-retention-days accepts 1-3650 days. Active, pinned, modified, and untracked content is protected. Authored copies and receipts remain outside eviction.
• Approval starts with a summary. Full steps, input editing, and an editable local workflow copy are available on demand. Changes invalidate approval; original signed bytes are preserved.
• l1ght5p33d try opens the guided synthetic poster trial. The page reports verified completion, interrupted work, or failure without requiring terminal monitoring.
• MCP adds search_curated_workflows, prepare_task, get_task_status, and get_cache_status. Missing packs are fetched automatically; valid cached packs work without another download.

Installation

Install Python 3.12, extract l1ght5p33d-0.2.0-windows-developer-preview.zip, open PowerShell in the extracted folder, and run:

.\scripts\install-l1ght5p33d.ps1
.\packages\l1ght5p33d\.venv\Scripts\python.exe -X utf8 -m l1ght5p33d try

The ZIP installer uses the committed dependency lock and installs Chromium. The wheel and sdist are also included; nothing has been published to PyPI. See the companion guide for MCP and retention configuration. The v0.1.0 tag and assets remain unchanged.

Validation

• Windows 11 development host: 348 passed, 1 interactive Windows test skipped; formatting, lint, Windows/Linux type checks passed.
• GitHub Ubuntu: 347 passed, 2 skipped; PHP integration, browser fixtures, isolated Kubo transfer, dependency/license/secret scans, archive inspection, and fresh-wheel checks passed.
• GitHub Windows: 348 passed, 1 skipped; all lint/type, fixture, isolated Kubo, dependency/license/secret, package-boundary, and fresh-wheel gates passed.
• Fresh Python 3.12 environment: 55 compatible distributions installed from locked constraints, wheel import and version checked, all three browser fixture actions verified.
• Local dependency audit found no known vulnerabilities; all 92 installed distribution licenses passed policy. Gitleaks found no secrets in downstream history, current source, and built archives; no new exceptions were added.
• Actual public GitHub pack download and signature verification succeeded in the installed companion. Preparing or opening its review page executed no workflow actions.

CI: https://github.com/HiTecHelpLLC/l1ght5p33d/actions/runs/33817950286

Scope and limits

This is a developer preview. The public curated library currently contains one synthetic browser workflow. Live authenticated BandLab importing, native Windows foreground-input qualification, and a second physical Windows 11 installation remain pending. The bundled BandLab sequence is tested against a local fixture. Hosted Ubuntu checks do not certify native Linux desktop or WSL GUI automation.

The existing curator attestation describes its specific earlier Windows 11 test/runtime; it is distinct from this release's tests and from user permission. The review URL is a short-lived capability, not cryptographic proof of human presence: cooperating AI clients must leave the approval click to the user. An unrestricted process under the same OS account is outside the isolation boundary.

THEBEST's website and public P2P register are not deployed. The connected curated source is GitHub. Advanced native catalog/Kubo imports remain outside the managed curated cache. No provider/code is installed by a workflow download, and routine execution makes no model calls.

MIT-licensed history-preserving extension of OpenAdapt Flow; reuses Playwright, pywinauto, MCP, cryptography, and MIDI libraries. Unofficial and unaffiliated with BandLab, Suno, or other automated applications. Artifact integrity hashes are in SHA256SUMS.txt.

L1ght5p33d v0.1.0 - developer preview

L1ght5p33d (Lightspeed) is a local-first library and runner for reusable computer workflows, built as a history-preserving downstream fork of OpenAdapt Flow. This first developer preview makes no model calls during routine execution.

Versioned ASCII JSON workflows run through the existing Flow runtime with typed validation, local permissions, semantic browser selectors, Windows UIA providers, local OCR/template fallback, structured receipts, step/pause/resume/abort controls, and reviewed checkpoint recovery. CLI, JSON-RPC and authenticated loopback MCP interfaces let people and AI tools control the same local runner.

The first reference integration analyzes MIDI locally and imports ordered MIDI/reference WAV content into a functional BandLab fixture, including naming, instrument mappings, alignment, muting and saved-state checks. General examples include a browser poster editor and a Windows creative-brief fixture. Live BandLab qualification remains outstanding.

Optional sharing uses Ed25519-signed catalogs and hash-verified downloads through Kubo/IPFS. The tested path discovers a catalog over HTTP and installs a workflow from a second peer without granting execution permission. An original, default-disabled PHP integration is supplied for THEBEST; no public catalog is deployed by this release. Availability depends on online peers or maintained pins.

Install on Windows

Install Python 3.12 and Git, then run in PowerShell:

git clone --branch v0.1.0 https://github.com/HiTecHelpLLC/l1ght5p33d.git
cd l1ght5p33d
.\scripts\install-l1ght5p33d.ps1
.\packages\l1ght5p33d\.venv\Scripts\python.exe -m l1ght5p33d demo browser --headful

Alternatively extract the attached Windows developer-preview ZIP and run its installer; Git is unnecessary for that route. The installer uses the committed transitive lock and downloads Chromium. Python, browsers and Kubo are not bundled. The wheel and sdist are also attached; the package has not been published to PyPI.

Validation

All three jobs in the release-candidate CI run passed at commit e51098ffa1e7ca42b96d6372578876d1c32e632b:

• Windows: 139 tests passed, 1 optional native-input test skipped.
• Linux: 138 tests passed, 2 Windows-specific tests skipped.
• PHP registry integration: 35 checks passed, plus syntax checks.
• Both Python jobs passed formatting/linting, typing, actual two-peer P2P transfer, vulnerability/license/secret scans, wheel/sdist inspection, fresh wheel installation and both browser demos.

Wheel and sdist assets come from that Windows CI run. The source-only Windows ZIP is assembled from the same commit. SHA256SUMS.txt records asset hashes. The locked installer and both browser demos also ran from a fresh extraction on the Windows 11 development host.

Qualification limits

This is a developer preview with production-oriented controls, not a blanket production qualification. No live BandLab login or import was attempted. Follow the live validation guide for manual authentication, current selector calibration, exact workflow approval and the final run command. Custom Studio widgets may require further adapter work.

Native Windows input requires an available, verified foreground desktop; the optional live test was skipped when foreground activation was refused. GitHub Windows runners are Windows Server. A second clean Windows 11 installation and interactive native input remain qualification work. GUI readback is reported as completed_ui_verified, not independent proof of remote persistence.

Integrated recording, generic rollback, cross-application provisioning, persistent catalog rollback protection/revocation, and public registry operations remain roadmap work. See the acceptance evidence and initial issues.

Attribution

MIT-licensed downstream fork preserving OpenAdapt Flow history and notices from upstream snapshot 0b1e6b2a8b7cc1641a8fad4a46e71860d051760a; the separately packaged extension pins published Flow 1.34.0. Playwright, pywinauto, OpenCV/RapidOCR, Mido, the official MCP Python SDK and optional Kubo provide specialized components. See THIRD_PARTY_NOTICES.md and the prior-art report.

Unofficial and unaffiliated with BandLab, Suno or other automated applications. Personal music, browser sessions, credentials and calibration captures are excluded from release assets.