v0.1.2

Install

macOS / Linux

curl -fsSL https://raw.githubusercontent.com/VedSoni-dev/primer/main/install.sh | sh

Windows

irm https://raw.githubusercontent.com/VedSoni-dev/primer/main/install.ps1 | iex

One file in ~/.local/bin. No Node, no npm, no build step. Then:

primer start

Note: only a Windows binary is attached to this release. The macOS and Linux
binaries this project's release workflow normally builds could not be produced —
GitHub Actions is not running for this repository (account billing issue), so the
per-platform build matrix never ran. This binary was built and verified locally on
Windows and is the same artifact npm run package produces from this tag.

What's in this release

• Browser-based parent app shell: add a child, prepare a session, review, and pair
  a tablet without touching the CLI.
• ACP tutor transport (claude-code-acp when installed), falling back to the
  existing Claude Code CLI path with the same login and MCP tools.
• Opt-in LAN HTTPS with a locally-minted CA, unblocking tablet microphone capture
  and the offline service worker; the device-setup page says plainly what trusting
  that certificate grants.
• Fixed an ACP permission-check bypass: tool approval now checks ACP's programmatic
  tool identity instead of matching substrings in model-chosen text, closing a path
  where a prompt-injected run could get shell/filesystem access auto-approved
  during an unattended session. (This never shipped in a prior release — v0.1.1
  predates the ACP transport entirely.)
• Hardened primer import against path traversal, arbitrary file deletion via
  forget, SQL injection through crafted column names, and stored XSS in the review
  and progress pages.
• Fixed installer PATH corruption on Windows and checksum fail-open in both
  installers.

Every binary below has a .sha256 beside it, and the installers check it.