-
Notifications
You must be signed in to change notification settings - Fork 51
Pull requests: decocms/studio
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
refactor(auth): make AccessControl.boundAuth required, drop dead unauth branch
#4181
opened Jun 28, 2026 by
viktormarinho
Contributor
Loading…
feat(decopilot): unified per-run projection workflow (consume step + hosted child harness)
#4179
opened Jun 27, 2026 by
tlgimenes
Contributor
Loading…
feat(launcher): Tauri desktop launcher for multi-org Studio
#4178
opened Jun 27, 2026 by
vibegui
Contributor
Loading…
4 tasks done
fix(dev-agent): render dev views directly against co-located desktop sandbox
#4174
opened Jun 26, 2026 by
viktormarinho
Contributor
Loading…
feat(cms-sections): variant drag-and-drop reorder + variant-aware preview
#4173
opened Jun 26, 2026 by
aka-sacci-ccr
Contributor
Loading…
5 tasks
refactor(sandbox): remove preview-fetch proxy
#4171
opened Jun 26, 2026 by
guitavano
Contributor
Loading…
3 tasks
feat(registry): serve the MCP store from a static JSON catalog over REST
#4169
opened Jun 26, 2026 by
viktormarinho
Contributor
Loading…
4 tasks done
feat(decopilot): in-UI message queue (surface + cancel) + externalize attachments at POST
#4155
opened Jun 25, 2026 by
tlgimenes
Contributor
Loading…
ci(sandbox): auto-bump studio-sandbox image in deco-apps-cd (stg)
#4146
opened Jun 25, 2026 by
viktormarinho
Contributor
Loading…
3 tasks done
feat(sandbox): pre-warm deno cache from S3 for deco site repos
#4145
opened Jun 25, 2026 by
igoramf
Contributor
Loading…
3 tasks
fix(security): restrict OAuth redirect_uri localhost bypass to local mode
#4121
opened Jun 24, 2026 by
0xcucumbersalad
Contributor
Loading…
2 of 5 tasks
fix(security): restrict CORS to configured base URL instead of wildcard
#4120
opened Jun 24, 2026 by
0xcucumbersalad
Contributor
Loading…
2 of 5 tasks
fix(security): prevent privilege escalation via API key permission grants
#4119
opened Jun 24, 2026 by
0xcucumbersalad
Contributor
Loading…
3 of 6 tasks
feat(library): asset-to-chat flow + open() preview tool
#4117
opened Jun 24, 2026 by
rafavalls
Collaborator
Loading…
4 tasks done
fix(security): add rehype-sanitize to prevent stored XSS in chat messages
#4115
opened Jun 24, 2026 by
0xcucumbersalad
Contributor
Loading…
3 of 8 tasks
fix(security): apply CSP sandbox to SVG responses to prevent stored XSS
#4114
opened Jun 24, 2026 by
0xcucumbersalad
Contributor
Loading…
2 of 6 tasks
fix(security): validate postMessage origin in sandbox preview bootstrap
#4113
opened Jun 24, 2026 by
0xcucumbersalad
Contributor
Loading…
3 of 6 tasks
fix(connection-detail): guard chartData access with optional chaining
#4097
opened Jun 23, 2026 by
guitavano
Contributor
Loading…
2 tasks
fix(library): use container queries for card grid breakpoints
#4054
opened Jun 22, 2026 by
rafavalls
Collaborator
Loading…
4 tasks done
test(cms): regression test — site app entry detection on TanStack Start sites
#4049
opened Jun 22, 2026 by
JonasJesus42
Contributor
Loading…
fix(sandbox): reconcile stale VIRTUAL_MCP cache so preview unsticks w…
#4041
opened Jun 20, 2026 by
Rooseveltfj
Contributor
Loading…
fix(security): require authentication on public events endpoint
#4020
opened Jun 19, 2026 by
0xcucumbersalad
Contributor
Loading…
3 of 6 tasks
analytics: cross-subdomain identity for the unified onboarding funnel
#3968
opened Jun 17, 2026 by
vibegui
Contributor
Loading…
Previous Next
ProTip!
no:milestone will show everything without a milestone.