cpatpa/PIP
A self-hostable, firm-branded fork of Mike rebuilt around enterprise sign-in, local AI, and operator-grade deployment.
PIP is cpatpa's reshaping of Mike into something a law firm can actually run on its own terms. The fork is pitched at firm deployments: Microsoft Entra sign-in, an admin console that controls which AI providers and models are on offer, a one-command bare-metal installer, and a rebrand that lets each firm drop in its own colours and logos.
The work reads as deliberate and phased. cpatpa has been moving through a numbered roadmap - auth, database, sharing, workspaces, onboarding, local LLM, admin and account surfaces, persistent memory, document retention - and publishing design docs for what comes next: web search, groups, multi-model comparison, vector retrieval, and curated knowledge collections.
If you tried PIP today you'd land in a firm-shaped onboarding wizard, sign in through your corporate Microsoft account, and find an assistant that respects custom instructions, remembers things between chats, and runs on whichever models your admin has approved - including a fully local stack for offline-only deployments.
What's in it
- Self-hosted, offline-capable AI Runs end-to-end on a firm's own hardware, with a local model path hardened for deployments where no cloud provider is allowed to leave the building.
- Enterprise sign-in Microsoft Entra OIDC and a tightened password-reset flow replace the original consumer-style auth, so users log in with the same account they use for everything else.
- Admin-controlled AI A single admin console decides which providers and models users see, with curated local models and tunable rate limits - the user-facing model picker is no longer a free-for-all.
- Workspaces and granular sharing A team layer sits between user and firm, and projects and reviews have a real membership system instead of a list of email addresses.
- Persistent memory and honest instructions The assistant remembers things between chats, and the custom-instructions box the product always advertised is now actually wired into every prompt.
- Firm-customisable branding A top-to-bottom rebrand from Mike to Pip, plus an admin surface so a firm can swap in its own colours and logos without redeploying.
- One-command deployment A bare-metal installer turns a fresh Ubuntu box into a running PIP, seeds a working admin login on day one, and ships operator tools to keep it alive. Document retention is staged so accidental deletes are recoverable.
Direction
infrastructuremulti-tenantbranding
Activity
Threads of work (detailed view)
cpatpa gives PIP a memory - and finally wires up the instructions box
Two features ship together: an assistant that remembers things between chats, and a prompt chain that actually respects the custom instructions the product has always pretended to read.
cpatpa lays out the next five moves before writing a line of code
A design-doc dump that maps where this fork wants to take search, permissions, model comparison, retrieval, and document collections.
cpatpa moves AI controls from the user to the admin
PIP shifts LLM configuration into a single admin console built for firm deployments.
cpatpa hardens Mike for offline-only deployments
A week-long bug hunt exposes what breaks when a fork runs purely on local AI with no cloud providers allowed.
cpatpa rebrands Mike as Pip and ships firm-customisable branding
A top-to-bottom rename of the upstream codebase, paired with an admin surface so a firm can swap in its own colours and logos without a code deploy.
cpatpa builds a one-command server install for PIP
A long arc of work turns a bare Ubuntu box into a running deployment with a single command - and the operator tools to keep it alive.
cpatpa strips multi-tenant scaffolding off the account page
Piper Alderman's fork drops the org picker and free-tier label - what's left is just "who are you, and what can you do here?"
cpatpa hands the first admin a working login on day one
The installer now seeds a real admin account before anyone touches the app, replacing the old sign-up-and-get-promoted dance.
cpatpa builds a safety net into document deletion
PIP now treats retention as a two-stage process so accidental purges are recoverable for a week.
cpatpa builds a self-hostable Mike for firms that can't ship files to the cloud
Five phases of plumbing turn the fork into something a firm can run end-to-end on its own hardware.
cpatpa builds a firm-shaped front door for Mike
A new signup wizard captures who the lawyer is, where they practice, and what they work on - before they ever touch the AI.
cpatpa gives PIP a team layer between users and the org
A workspaces concept lands in cpatpa's fork, letting groups inside a firm share projects, chats and reviews without spilling across the whole organisation.
cpatpa rebuilds how PIP shares projects and reviews
The fork swaps a quick-and-dirty list of email addresses for a real membership system - without breaking anything visible to users.
cpatpa rips Supabase out of the back end
Nine commits, every database call rewritten, and a much sharper story on who can see what.
cpatpa rips out Supabase Auth for Auth.js plus Microsoft Entra
A full sign-in rebuild that lets enterprise users log in through their corporate Microsoft account - and quietly hardens the password flow while it's at it.
cpatpa closes the upstream audit findings
Three tightly scoped commits work through the bulk of the critical and high items flagged in the upstream security audit.