LocalRouter v0.1.0-alpha.4

Highlights

• Makes loopback console password protection optional and disabled by default, so local operators can open the console without entering an API key.
• Adds an explicit enable, rotate, and disable flow for a custom console password, with mode-0600 persisted state and status visibility that never exposes the secret.
• Keeps Agent maintenance isolated behind the separate /manage/mcp administrator or maintenance-token boundary.
• Extends CLI help, global Agent guidance, Web UI guidance, and security documentation around consumer tokens, console access, and maintenance authority.
• Adds end-to-end coverage for password-free startup, protected reload and unlock, password rotation, disablement, installation, release archives, secret scanning, vulnerability scanning, and amd64/arm64 artifacts.

This is an alpha pre-release. Public archives contain no private provider Packs, credentials, pool contents, or private upstream addresses.