security_patch.patch

new file mode 100644
index 0000000..0ece9f7
--- /dev/null
+++ b/.github/workflows/publish.yml
@@ -0,0 +1,49 @@
+name: Publish to PyPI
+
+on:
+  release:
+    types: [published]
+  workflow_dispatch:
+    inputs:
+      test:
+        description: 'Upload to TestPyPI instead of PyPI'
+        required: false
+        default: 'false'
+        type: boolean
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+
+    steps:
+    - uses: actions/checkout@v4
+
+    - name: Set up Python
+      uses: actions/setup-python@v4
+      with:
+        python-version: '3.9'
+
+    - name: Install dependencies
+      run: |
+        python -m pip install --upgrade pip
+        python -m pip install build twine
+
+    - name: Build package
+      run: python -m build
+
+    - name: Check package
+      run: python -m twine check dist/*
+
+    - name: Upload to TestPyPI
+      if: github.event.inputs.test == 'true'
+      env:
+        TWINE_USERNAME: __token__
+        TWINE_PASSWORD: ${{ secrets.TEST_PYPI_API_TOKEN }}
+      run: python -m twine upload --repository testpypi dist/*
+
+    - name: Upload to PyPI
+      if: github.event.inputs.test != 'true'
+      env:
+        TWINE_USERNAME: __token__
+        TWINE_PASSWORD: ${{ secrets.PYPI_API_TOKEN }}
+      run: python -m twine upload dist/*
\ No newline at end of file
diff --git a/.pypirc.example b/.pypirc.example
new file mode 100644
index 0000000..4190695
--- /dev/null
+++ b/.pypirc.example
@@ -0,0 +1,20 @@
+# PyPI Configuration Example
+# Copy this to ~/.pypirc and add your API tokens
+#
+# Get tokens from:
+# - PyPI: https://pypi.org/manage/account/token/
+# - TestPyPI: https://test.pypi.org/manage/account/token/
+
+[distutils]
+index-servers =
+    pypi
+    testpypi
+
+[pypi]
+username = __token__
+password = pypi-YOUR_REAL_TOKEN_HERE
+
+[testpypi]
+repository = https://test.pypi.org/legacy/
+username = __token__
+password = pypi-YOUR_TEST_TOKEN_HERE
\ No newline at end of file
diff --git a/scripts/build_pypi.ps1 b/scripts/build_pypi.ps1
new file mode 100644
index 0000000..8edd3e3
--- /dev/null
+++ b/scripts/build_pypi.ps1
@@ -0,0 +1,79 @@
+# Build and publish Story Test Framework to PyPI
+# Usage:
+#   .\scripts\build_pypi.ps1          # Build only
+#   .\scripts\build_pypi.ps1 -Test    # Upload to TestPyPI
+#   .\scripts\build_pypi.ps1 -Publish # Upload to PyPI
+
+param(
+    [switch]$Test,
+    [switch]$Publish,
+    [switch]$Clean
+)
+
+$ErrorActionPreference = "Stop"
+
+Write-Host "🎯 Story Test Framework - PyPI Build Script" -ForegroundColor Cyan
+Write-Host "=" * 60
+
+# Clean previous builds
+if ($Clean -or $Test -or $Publish) {
+    Write-Host "`n🧹 Cleaning previous builds..." -ForegroundColor Yellow
+    if (Test-Path "dist") { Remove-Item -Recurse -Force "dist" }
+    if (Test-Path "build") { Remove-Item -Recurse -Force "build" }
+    if (Test-Path "storytest.egg-info") { Remove-Item -Recurse -Force "storytest.egg-info" }
+    Write-Host "✓ Cleaned" -ForegroundColor Green
+}
+
+# Install/upgrade build tools
+Write-Host "`n📦 Installing build tools..." -ForegroundColor Yellow
+python -m pip install --upgrade pip
+python -m pip install --upgrade build twine
+Write-Host "✓ Build tools ready" -ForegroundColor Green
+
+# Build the package
+Write-Host "`n🔨 Building package..." -ForegroundColor Yellow
+python -m build
+Write-Host "✓ Package built successfully" -ForegroundColor Green
+
+# List built files
+Write-Host "`n📋 Built files:" -ForegroundColor Cyan
+Get-ChildItem dist | ForEach-Object { Write-Host "  • $($_.Name)" }
+
+# Check package
+Write-Host "`n🔍 Checking package..." -ForegroundColor Yellow
+python -m twine check dist/*
+Write-Host "✓ Package check passed" -ForegroundColor Green
+
+if ($Test) {
+    Write-Host "`n🧪 Uploading to TestPyPI..." -ForegroundColor Yellow
+    Write-Host "You will need your TestPyPI API token" -ForegroundColor Gray
+    python -m twine upload --repository testpypi dist/*
+    Write-Host "`n✓ Uploaded to TestPyPI" -ForegroundColor Green
+    Write-Host "`nTest installation with:" -ForegroundColor Cyan
+    Write-Host "  pip install --index-url https://test.pypi.org/simple/ storytest" -ForegroundColor White
+}
+elseif ($Publish) {
+    Write-Host "`n🚀 Uploading to PyPI..." -ForegroundColor Yellow
+    Write-Host "⚠️  This will publish to the REAL PyPI!" -ForegroundColor Red
+    $confirm = Read-Host "Are you sure? (yes/no)"
+    
+    if ($confirm -eq "yes") {
+        Write-Host "You will need your PyPI API token" -ForegroundColor Gray
+        python -m twine upload dist/*
+        Write-Host "`n✅ Published to PyPI!" -ForegroundColor Green
+        Write-Host "`nInstall with:" -ForegroundColor Cyan
+        Write-Host "  pip install storytest" -ForegroundColor White
+    }
+    else {
+        Write-Host "`n❌ Publish cancelled" -ForegroundColor Red
+    }
+}
+else {
+    Write-Host "`n✅ Build complete!" -ForegroundColor Green
+    Write-Host "`nNext steps:" -ForegroundColor Cyan
+    Write-Host "  • Test locally: pip install -e ." -ForegroundColor White
+    Write-Host "  • Upload to TestPyPI: .\scripts\build_pypi.ps1 -Test" -ForegroundColor White
+    Write-Host "  • Publish to PyPI: .\scripts\build_pypi.ps1 -Publish" -ForegroundColor White
+}
+
+Write-Host "`n" + ("=" * 60)
\ No newline at end of file