v0.1.0-local-only - local single-user baseline

[sara-protocol]

MY-PI-WEB v0.1.0-local-only - local single-user baseline

This release defines the local-only baseline for MY-PI-WEB: a local web interface for an Ollama-backed coding assistant, with an optional MCP bridge.

Release: tag v0.1.0-local-only points to commit 5796487. This is marked as a pre-release on GitHub.

Try the web app

Prerequisites: Node.js 20+ and Ollama.

git clone https://github.com/sara-protocol/my-pi-web.git
cd my-pi-web
npm ci
ollama pull qwen2.5-coder:7b
npm run dev

Then open http://127.0.0.1:30141.

npm run dev starts only the web app. The MCP server is optional; start.bat starts both Web and MCP and requires MCP_AUTH_TOKEN to be set first.

Security notes:

The MCP server uses one shared Bearer token, compared with timingSafeEqual.
Command execution is disabled by default; rm is not in the allowlist and is denied.
The task tests cover the approval state machine (pending->running->needs_approval), but they do not demonstrate that a real rm -rf / command is caught by that approval flow.
This is an early local single-user tool. The web app has no user authentication, and this setup is not intended to be exposed directly to the public internet.

Release baseline: tag v0.1.0-local-only points to commit 5796487; 89 tests and typecheck passed locally for that baseline. CI subsequently passed 89 tests, typecheck, and production build on main at 8ee55ed (run #4).