Clarify and harden the RecordIt prototype

.github/workflows/ci.yml

@@ -0,0 +1,47 @@
+name: CI
+
+on:
+  pull_request:
+  push:
+    branches: [main]
+
+permissions:
+  contents: read
+
+concurrency:
+  group: ci-${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  quality:
+    name: Lint, build, and audit
+    runs-on: ubuntu-latest
+    timeout-minutes: 20
+    env:
+      NEXT_PUBLIC_SUPABASE_URL: https://example.supabase.co
+      NEXT_PUBLIC_SUPABASE_ANON_KEY: ci-placeholder
+      ANTHROPIC_API_KEY: ci-placeholder
+      GOOGLE_AI_API_KEY: ci-placeholder
+
+    steps:
+      - name: Check out repository
+        uses: actions/checkout@v4
+
+      - name: Set up Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version-file: .nvmrc
+          cache: npm
+          cache-dependency-path: package-lock.json
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Lint
+        run: npm run lint
+
+      - name: Build
+        run: npm run build
+
+      - name: Audit dependencies
+        run: npm audit --audit-level=moderate

.nvmrc

@@ -0,0 +1 @@
+22

README.md

@@ -0,0 +1,57 @@
+# RecordIt
+
+RecordIt is an early AI-assisted process-discovery prototype. It captures a work session, preserves narration and visual evidence, extracts structured steps, and turns the result into an implementation-ready workflow brief.
+
+> [!NOTE]
+> The active continuation of this product direction is [RecordFlow](https://github.com/kaantaskentt/recordflow). RecordIt remains public as a transparent snapshot of the earlier product architecture.
+
+## What it does
+
+- Creates projects and recorded workflow sessions.
+- Captures screen frames, narration, notes, and session metadata.
+- Extracts process steps and follow-up questions with Gemini and Claude.
+- Classifies work as manual, AI-assisted, or automation-ready.
+- Generates project briefings, implementation specifications, and PDF exports.
+- Provides session playback with time-linked process steps.
+
+## Architecture
+
+| Layer | Technology |
+| --- | --- |
+| Product | Next.js 16, React 19, TypeScript, Tailwind CSS |
+| Data | Supabase Postgres and Storage |
+| Vision and extraction | Gemini |
+| Reasoning and gap analysis | Claude |
+| Exports | React PDF |
+
+The recording flow combines screen capture, microphone audio, system audio, live speech transcription, and periodic frame capture. API routes persist the evidence, run AI analysis, and assemble the final process specification.
+
+## Run locally
+
+Requirements: Node.js 22, npm, a Supabase project, and model-provider credentials.
+
+```bash
+git clone https://github.com/kaantaskentt/recordit.git
+cd recordit
+cp .env.local.example .env.local
+npm ci
+npm run dev
+```
+
+Open [http://localhost:3000](http://localhost:3000).
+
+## Quality checks
+
+```bash
+npm run lint
+npm run build
+npm audit --audit-level=moderate
+```
+
+GitHub Actions runs these checks on every pull request and push to `main`. Dependency alerts, automated fixes, secret scanning, push protection, and private vulnerability reporting are enabled.
+
+## Prototype status
+
+RecordIt is not production-ready. Before using it with real customer data, review authentication, Supabase row-level security, recording consent, upload limits, storage retention, personally identifiable information, and model-provider data policies.
+
+See [SECURITY.md](./SECURITY.md) for responsible disclosure guidance.

SECURITY.md

@@ -0,0 +1,7 @@
+# Security policy
+
+Security fixes are applied to the latest commit on `main`.
+
+Please report suspected vulnerabilities through GitHub's private vulnerability reporting flow. Do not open a public issue containing credentials, personal data, or an unpatched exploit.
+
+RecordIt is an historical prototype. Before any production use, review authentication, Supabase row-level security, recording and upload controls, storage retention, model-provider data handling, and PII treatment.

Claude Projects/Kaan-2/next.config.ts → next.config.ts

@@ -1,7 +1,9 @@
 import type { NextConfig } from "next";
 
 const nextConfig: NextConfig = {
-  /* config options here */
+  turbopack: {
+    root: process.cwd(),
+  },
 };
 
 export default nextConfig;