v1.0.6

Highlights

This release adds conversation-aware checkout reuse, improves workspace review reliability, shortens model-facing workspace IDs, and refreshes the workspace and tool-card UI.

Added

• Reuse the same checkout workspace within a supported ChatGPT conversation using optional _meta["openai/session"] metadata (#128).
• Persist conversation-to-workspace bindings in SQLite so checkout reuse survives reconnects and DevSpace restarts.
• Keep worktree opens isolated and always create a fresh worktree with complete workspace context.
• Add safer review checkpoint recovery, root validation, and missing-checkpoint fallback (#128).
• Use compact ws_ workspace IDs to reduce model-facing context overhead (#129).

Improved

• Refresh tool cards and change-review rendering with clearer statuses, file operations, rename paths, diff rows, and payload scrolling (#122, #131).
• Open single-file patch reviews immediately while keeping larger multi-file patches collapsed.
• Improve workspace cards with expandable instructions, skills, provider details, agent profiles, and provider icons (#134).
• Keep internal workspace lifecycle flags out of model-facing tool results while providing clearer actionable guidance.
• Improve workspace context recovery and documentation for checkout reuse and review workflows.

Fixed

• Preserve workspace and review state across registry and server restarts.
• Handle stale checkout bindings, missing review refs, concurrent workspace opens, and workspace-root mismatches safely.
• Prevent internal diagnostics and implementation details from leaking into user-facing cards.

Screenshots

Notes

• Conversation-aware reuse depends on host support for the optional OpenAI session metadata.
• The portable workflow remains unchanged: reuse the workspaceId returned by open_workspace.
• Hosts without conversation metadata continue to receive normal explicit-workspace behavior.
• Worktree mode always creates a new isolated workspace.
• Existing persisted workspace IDs remain valid.

Full changelog: v1.0.5...v1.0.6

v1.0.5

Highlights

This release adds opt-in native ChatGPT file downloads into workspaces, bounds long-running MCP session memory growth, hardens AGENTS.md symlink handling, and refreshes the workspace tool-card UI.

Added

• Added optional download_artifact to save a native MCP-host file (for example a ChatGPT attachment or generated image) directly into an open workspace (#88).
• Enable with DEVSPACE_ARTIFACTS=1; cap size with DEVSPACE_ARTIFACT_MAX_FILE_BYTES (default 100 MiB).
• Streams only from trusted OpenAI download hosts, refuses overwrites, creates parent dirs, and publishes owner-only files.
• Currently registered on Linux only (descriptor-relative filesystem ops are not available on macOS/Windows/BSD in Node).

Fixed

• Clean up idle MCP Streamable HTTP sessions after 24h of inactivity (5-minute sweep) so abandoned reconnects no longer retain transports for the life of the process (#71).
• Await MCP transport cleanup during graceful server shutdown.
• Resolve symlinked AGENTS.md context files and reject symlink targets that escape the project root (#65, #66).
• Open checkout workspaces correctly on Windows drive roots (#43).

Improved

• Align workspace tool cards with the Codex card shell: Lucide icons, normalized titles/metadata, clearer patch/delete presentation, and better mobile chevrons (#73).
• Hide unreliable glob match counts in tool cards.

Notes

• Artifact download is off by default. Enable only when you want host-native file handoff:

DEVSPACE_ARTIFACTS=1 npx @waishnav/devspace serve

• See docs/artifact-exchange.md, docs/configuration.md, and docs/security.md for the tool contract and safety model.
• Idle MCP session timeout is intentionally conservative (24h) so normal ChatGPT/Claude pauses are not disrupted; expired sessions return Unknown MCP session and clients re-initialize.

Full changelog: v1.0.4...v1.0.5

v1.0.4

Highlights

This release adds experimental local subagent delegation, improves apply-patch review rendering, and simplifies the model-facing MCP tool surface.

Added

• Added experimental DevSpace subagent delegation via the packaged subagent-delegation skill.
• Added devspace agents ls, devspace agents run, and devspace agents show for starting and inspecting local agent sessions.
• Added user-owned agent profiles with YAML frontmatter, discovered from ~/.devspace/agents/*.md and .devspace/agents/*.md.
• Added built-in provider support for Codex, Claude, OpenCode, Pi, Cursor, and Copilot.
• Added provider model and thinking/reasoning controls in agent profiles.
• Added starter agent profile examples for reviewer, explorer, tester, and worker roles.

Improved

• Routes built-in local agent providers through dedicated adapters.
• Persists subagent sessions in SQLite and scopes session listing by workspace.
• Adds provider availability preflight checks before launching agents.
• Hardens provider response parsing, malformed output handling, and error reporting.
• Improves ACP, Claude, Codex, Pi, and OpenCode provider integration behavior.
• Renders apply-patch operations as clearer multi-file, multi-hunk diffs in the workspace UI.
• Handles case-only file moves in apply-patch.
• Clarifies apply-patch and show-changes review behavior in docs.

Changed

• Exposes only short MCP tool names.
• Removes legacy tool naming configuration and related documentation.

Notes

Local subagent delegation remains experimental and depends on the selected provider CLI/SDK being available on the host machine.

Full changelog: v1.0.3...v1.0.4

v1.0.3

Highlights

• Add an experimental, opt-in Codex tool mode behind DEVSPACE_TOOL_MODE=codex. The default tool surface is unchanged (minimal / full); Codex mode exposes apply_patch, exec_command, and write_stdin with resumable process sessions and optional PTY support for interactive commands.
• Add a workspace-confined apply_patch engine aligned with Codex patch semantics, plus workspace UI cards for Codex-style tool output.
• Improve agent skill discovery: standard agent skill paths, workspace-scoped resolution for configured paths, and opt-in Pi project skills.
• Harden local security and dependencies: fix a Windows allowedRoots bypass (#40) and patch transitive advisories for undici, ws, and protobufjs (#33).
• Improve cross-platform exec: process group termination, Windows command quoting and patch behavior, and node-pty portability with a postinstall permissions fix.
• Add devspace -v / devspace --version (#31).

Experimental Codex mode

Codex mode is off by default. Enable it only when you want to try the Codex-compatible MCP tool surface:

DEVSPACE_TOOL_MODE=codex npx @waishnav/devspace serve

See docs/codex-tool-mode-qa.md in the package for a manual QA checklist.

Upgrade notes

• DevSpace now requires Node >=22.19. Use devspace doctor after upgrading.
• Global installs should be refreshed so native dependencies (PTY) rebuild correctly:

npm install -g @waishnav/devspace@1.0.3

Full changelog: v1.0.2...v1.0.3

v1.0.2

Highlights

• Persist OAuth clients, access tokens, and refresh tokens in SQLite so authenticated MCP clients continue working across DevSpace restarts.
• Add automatic, versioned SQLite migrations for existing installations.
• Make refresh-token rotation transactional and reject concurrent token reuse.
• Restrict DevSpace state storage permissions and harden SQLite configuration for local production use.
• Close SQLite stores cleanly during server shutdown.
• Fix README image and documentation links on npm.
• Improve the workspace diff loading indicator and refresh project documentation.

Existing users are migrated automatically the next time DevSpace opens its state database.

Full changelog: v1.0.1...v1.0.2

v1.0.1

What changed

• Made the minimal MCP tool surface the default.
• Made short tool names and full tool-result widgets the defaults.
• Renamed review_changes to show_changes and aligned its checkpoint terminology.
• Added a local development server that restarts on source changes and recovers from crashes.
• Expanded configuration validation and test coverage.
• Updated workflow documentation and added the MIT license.

Full changelog: v1.0.0...v1.0.1

v1.0.0

Initial public release of DevSpace.

• Install and run with npx @waishnav/devspace or install globally as devspace.
• Exposes approved local workspaces over MCP for file reads, writes, edits, search, shell commands, and project navigation.
• Supports AGENTS.md and CLAUDE.md project instructions, including nested instruction discovery.
• Supports local Skills loading so connected MCP clients can use workspace-specific guidance.
• Adds checkout and managed Git worktree modes for direct or isolated coding sessions.
• Includes diff rendering for edit and write tool results through the review UI.
• Provides configurable tool naming, widget modes, allowed roots, OAuth owner approval, and tunnel-friendly public base URL settings.
• Includes cross-platform CI smoke coverage for Linux, macOS, and Windows.