docs: add source build instructions

Author: nikivdev

readme.md

@@ -52,6 +52,32 @@ If you fork Flow (or publish releases under a different repo), set:
 If you are upgrading to a very old tag that doesn't ship `checksums.txt`, you can force bypassing
 checksum verification with `FLOW_UPGRADE_INSECURE=1` (not recommended).
 
+## Build From Source
+
+Clone Flow, hydrate the pinned vendor snapshot, and install an optimized local build:
+
+```sh
+git clone https://github.com/nikivdev/flow.git
+cd flow
+./scripts/vendor/vendor-repo.sh hydrate
+FLOW_PROFILE=release ./scripts/deploy.sh
+f --version
+```
+
+This is the intended source build path.
+
+- `./scripts/vendor/vendor-repo.sh hydrate` reuses `.vendor/flow-vendor` if it already exists.
+- If `.vendor/flow-vendor` is missing, it clones the pinned vendor repo from [`vendor.lock.toml`](vendor.lock.toml) and materializes `lib/vendor/*` from that exact commit.
+- The pinned vendor repo is public: `https://github.com/nikivdev/flow-vendor`
+- `FLOW_PROFILE=release ./scripts/deploy.sh` builds the optimized release binary and installs `f` / `flow` / `lin` into `~/bin` (and symlinks into `~/.local/bin` if that directory exists).
+
+If you want to populate the vendor checkout yourself first, that works too:
+
+```sh
+git clone https://github.com/nikivdev/flow-vendor.git .vendor/flow-vendor
+./scripts/vendor/vendor-repo.sh hydrate
+```
+
 ## Supported Platforms
 
 Release artifacts are built for:

vendor.lock.toml

@@ -1,5 +1,5 @@
 [flow_vendor]
-repo = "git@github.com:nikivdev/flow-vendor.git"
+repo = "https://github.com/nikivdev/flow-vendor.git"
 branch = "main"
 checkout = ".vendor/flow-vendor"
 commit = "7b9a635415eba5820f3d2d8dbca54ec21519a4a3"