feat(local-mode): local-first developer experience with zero-ceremony setup#2544

Merged

vibegui merged 30 commits intomainfrom

feat/local-first-dx-core

Mar 5, 2026

Commits on Mar 5, 2026

feat(local-mode): local-first developer experience with zero-ceremony setup

authored and
vibegui
committed
fix(local-mode): security hardening, UX improvements, and reliability fixes

vibegui
and
claude
committed
fix(chat): stabilize fresh-chat initializer across remounts

vibegui
and
claude
committed
fix: resolve CI test and e2e failures

vibegui
and
claude
committed
fix: remove unused getMeshHome export flagged by knip

vibegui
and
claude
committed
fix(local-mode): trusted origins, internal URLs, empty state, and title

vibegui
and
claude
committed
feat(studio): add @decocms/studio wrapper package for npm alias

vibegui
and
claude
committed
fix(oauth): use localhost origin for redirect URIs behind proxy

vibegui
and
claude
committed
fix: gate localhost trusted origin to local mode, restore package.json on failure

vibegui
and
claude
committed
fix(local-mode): security hardening and reliability improvements

vibegui
and
claude
committed
fix(tests): update OAuth callback tests for cross-origin postMessage

vibegui
and
claude
committed
fix(local-mode): use socket-level IP check and fix tilde expansion

vibegui
and
claude
committed
feat(studio): rename package to decocms with deco CLI command

vibegui
and
claude
committed
docs(studio): update decocms README and package metadata for npm

vibegui
and
claude
committed
fix(config): only expose internalUrl in local mode

vibegui
and
claude
committed
fix: remove unused getBaseUrl import in org.ts

vibegui
and
claude
committed
docs(studio): align README with decocms.com/studio positioning

vibegui
and
claude
committed
fix: ignore decocms runtime dependency in knip config

vibegui
and
claude
committed
chore: rebrand CLI and docs from @decocms/mesh to npx decocms / deco

vibegui
and
claude
committed
fix(studio): use bun runtime in deco CLI wrapper

vibegui
and
claude
committed
chore: rebrand CLI banners from MCP Mesh to Deco Studio

vibegui
and
claude
committed
fix(studio): require bun runtime and update instructions to bunx

vibegui
and
claude
committed
fix(docs): align section headings with bunx commands

vibegui
and
claude
committed
fix(dev): respect existing DATABASE_URL and fix path resolution

vibegui
and
claude
committed
fix: harden local-first DX — random password, seed gate, postMessage, prod guard

vibegui
and
claude
committed
fix: security hardening, OAuth flow extraction, and deferred debt tracking

vibegui
and
claude
committed
fix: explicit MESH_ALLOW_LOCAL_PROD check and postMessage target for proxy setups

vibegui
and
claude
committed
fix(local-mode): probe ~/deco for secrets.json when MESH_HOME is unset

vibegui
and
claude
committed
fix(dev): check non-interactive before defaultPath existence in resolveMeshHome

vibegui
and
claude
committed
fix: rename system prompt identity from "decopilot" to "Deco Pilot"

vibegui
and
claude
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

feat(local-mode): local-first developer experience with zero-ceremony setup#2544

feat(local-mode): local-first developer experience with zero-ceremony setup#2544
vibegui merged 30 commits intomainfrom
feat/local-first-dx-core

Commits on Mar 5, 2026

feat(local-mode): local-first developer experience with zero-ceremony setup

fix(local-mode): security hardening, UX improvements, and reliability fixes

fix(chat): stabilize fresh-chat initializer across remounts

fix: resolve CI test and e2e failures

fix: remove unused getMeshHome export flagged by knip

fix(local-mode): trusted origins, internal URLs, empty state, and title

feat(studio): add @decocms/studio wrapper package for npm alias

fix(oauth): use localhost origin for redirect URIs behind proxy

fix: gate localhost trusted origin to local mode, restore package.json on failure

fix(local-mode): security hardening and reliability improvements

fix(tests): update OAuth callback tests for cross-origin postMessage

fix(local-mode): use socket-level IP check and fix tilde expansion

feat(studio): rename package to decocms with deco CLI command

docs(studio): update decocms README and package metadata for npm

fix(config): only expose internalUrl in local mode

fix: remove unused getBaseUrl import in org.ts

docs(studio): align README with decocms.com/studio positioning

fix: ignore decocms runtime dependency in knip config

chore: rebrand CLI and docs from @decocms/mesh to npx decocms / deco

fix(studio): use bun runtime in deco CLI wrapper

chore: rebrand CLI banners from MCP Mesh to Deco Studio

fix(studio): require bun runtime and update instructions to bunx

fix(docs): align section headings with bunx commands

fix(dev): respect existing DATABASE_URL and fix path resolution

fix: harden local-first DX — random password, seed gate, postMessage, prod guard

fix: security hardening, OAuth flow extraction, and deferred debt tracking

fix: explicit MESH_ALLOW_LOCAL_PROD check and postMessage target for proxy setups

fix(local-mode): probe ~/deco for secrets.json when MESH_HOME is unset

fix(dev): check non-interactive before defaultPath existence in resolveMeshHome

fix: rename system prompt identity from "decopilot" to "Deco Pilot"