v1.0.3

Highlights

• Add an experimental, opt-in Codex tool mode behind DEVSPACE_TOOL_MODE=codex. The default tool surface is unchanged (minimal / full); Codex mode exposes apply_patch, exec_command, and write_stdin with resumable process sessions and optional PTY support for interactive commands.
• Add a workspace-confined apply_patch engine aligned with Codex patch semantics, plus workspace UI cards for Codex-style tool output.
• Improve agent skill discovery: standard agent skill paths, workspace-scoped resolution for configured paths, and opt-in Pi project skills.
• Harden local security and dependencies: fix a Windows allowedRoots bypass (#40) and patch transitive advisories for undici, ws, and protobufjs (#33).
• Improve cross-platform exec: process group termination, Windows command quoting and patch behavior, and node-pty portability with a postinstall permissions fix.
• Add devspace -v / devspace --version (#31).

Experimental Codex mode

Codex mode is off by default. Enable it only when you want to try the Codex-compatible MCP tool surface:

DEVSPACE_TOOL_MODE=codex npx @waishnav/devspace serve

See docs/codex-tool-mode-qa.md in the package for a manual QA checklist.

Upgrade notes

• DevSpace now requires Node >=22.19. Use devspace doctor after upgrading.
• Global installs should be refreshed so native dependencies (PTY) rebuild correctly:

npm install -g @waishnav/devspace@1.0.3

Full changelog: v1.0.2...v1.0.3

v1.0.2

Highlights

• Persist OAuth clients, access tokens, and refresh tokens in SQLite so authenticated MCP clients continue working across DevSpace restarts.
• Add automatic, versioned SQLite migrations for existing installations.
• Make refresh-token rotation transactional and reject concurrent token reuse.
• Restrict DevSpace state storage permissions and harden SQLite configuration for local production use.
• Close SQLite stores cleanly during server shutdown.
• Fix README image and documentation links on npm.
• Improve the workspace diff loading indicator and refresh project documentation.

Existing users are migrated automatically the next time DevSpace opens its state database.

Full changelog: v1.0.1...v1.0.2

v1.0.1

What changed

• Made the minimal MCP tool surface the default.
• Made short tool names and full tool-result widgets the defaults.
• Renamed review_changes to show_changes and aligned its checkpoint terminology.
• Added a local development server that restarts on source changes and recovers from crashes.
• Expanded configuration validation and test coverage.
• Updated workflow documentation and added the MIT license.

Full changelog: v1.0.0...v1.0.1

v1.0.0

Initial public release of DevSpace.

• Install and run with npx @waishnav/devspace or install globally as devspace.
• Exposes approved local workspaces over MCP for file reads, writes, edits, search, shell commands, and project navigation.
• Supports AGENTS.md and CLAUDE.md project instructions, including nested instruction discovery.
• Supports local Skills loading so connected MCP clients can use workspace-specific guidance.
• Adds checkout and managed Git worktree modes for direct or isolated coding sessions.
• Includes diff rendering for edit and write tool results through the review UI.
• Provides configurable tool naming, widget modes, allowed roots, OAuth owner approval, and tunnel-friendly public base URL settings.
• Includes cross-platform CI smoke coverage for Linux, macOS, and Windows.