lillycoder: a local-first coder REPL with permission gates