MyPersonaOS

A personal operating system for focus, content creation, projects, and learning.

Build your today. Why not today?

---

Documentation

Explore the project documentation in the docs/ directory:

• 📖 About MyPersonaOS — Product vision, core philosophy, and domain areas.
• 🏗️ Architecture & Design — Tech stack, client state vs. Supabase backend, PWA & security model.
• 📜 Changelog & Releases — Release notes and versioning history.
• 🤝 Contributing Guidelines — Setup, PR process, and community standards.
• 🤖 AI Agent Rules (AGENTS.md) — Mandates and entry points for AI pair programming.
• 🗺️ Product Roadmap — Active release gate, verified progress, and next vertical slices.

---

Getting Started

Requirement: Node.js 24.x (matches the repository engines and CI).

Quick Start (Local Development)

# Clone repository
git clone https://github.com/dreyvinixz/MyPersonaOS.git
cd MyPersonaOS

# Install dependencies
npm ci

# Run dev server
npm run dev

Open http://localhost:3000 to view the application in your browser.

---

Current releases and active development

The current released version is v0.2.0 (Supabase Auth, PostgreSQL/RLS, private offline outbox and Realtime). The active v0.3.0 branch adds Tasks/Projects CRUD and is still in validation. Advanced modules remain roadmap work.

Features Included

• Today Dashboard: Primary focus hub for what deserves attention today
• Quick Capture + Inbox: Lightning-fast idea & task input
• Projects & Tasks: High-level overview and organization
• Content Studio: Content pipeline for CodeToday, Personal, and Quant Base
• English Lab: English-learning method & practice module
• Mobile First / PWA: Responsive layout with offline capabilities

---

Architecture & Tech Stack

• Framework: Next.js 16 (App Router, React 19)
• Language: TypeScript
• Styling: Tailwind CSS v4
• Persistence (V0.2): Supabase (PostgreSQL, Auth, Realtime, Row Level Security)
• Deployment: Vercel & PWA
• CI/CD & supply-chain security: GitHub Actions CI, CodeQL, Dependency Review, Dependabot and npm registry signature / lockfile checks

---

Roadmap

See ROADMAP.md for the canonical task-level roadmap and release history.

• V0.1 — Bootstrap: Client-side state, UI foundation, Open Source setup, CI/CD & Documentation
• V0.2 — Private Persistence: Supabase integration, private auth, PostgreSQL, RLS, offline outbox, and cross-device sync
• V0.3 — Workflows: Interactive task management, content stages, English vocabulary sessions
• V0.4 — Orchestrator: Calendar integration, AI prioritization, weekly reviews

---

License

Distributed under the MIT License. See LICENSE for more information.

Dependency supply-chain policy

• Use npm ci (never npm install for CI deployments) to reproduce the checked lockfile.
• .npmrc blocks npm dependency lifecycle install scripts. New packages require human review.
• CI validates official npm registry HTTPS origins, SHA-512 lockfile hashes, npm audit, npm registry signatures, tests and build.
• Dependabot opens npm and GitHub Actions update PRs with a 7-day cooldown for routine versions (14 days for majors); security updates are not delayed.
• Dependency Review rejects newly introduced moderate-or-higher vulnerabilities. CodeQL scans the source.
• No automatic merge for dependency updates. A signed registry tarball, audit, or provenance attestation does not guarantee a package is benign; review ownership, release provenance, change set, transitive dependencies and install scripts before approval.
• Security alert/Dependabot features must be enabled in GitHub repository settings after merging the configuration into the default branch.