vibespot 1.7.7 → 1.8.0

package/README.md

@@ -113,6 +113,16 @@ Every model produced valid, complete pages — 100% validator pass and section c
 3. **Run it** — `npx vibespot`. The browser opens.
 4. **Connect HubSpot** — Settings → HubSpot → add a Personal Access Key. vibeSpot connects via the HubSpot API directly. No CLI install.
 
+### Access from another device (LAN / Tailscale)
+
+For security, vibeSpot binds to `127.0.0.1` only — other devices can't reach it out of the box. To use it from an iPad or another machine:
+
+```bash
+VIBESPOT_HOST=0.0.0.0 npx vibespot
+```
+
+The terminal prints a URL containing a one-time access token (`?token=...`). Open **that exact URL** on the other device — it's the auth secret, and it's exchanged for a session cookie on first load. Pin a stable token with `VIBESPOT_AUTH_TOKEN`, e.g. `openssl rand -hex 24`. Behind `tailscale serve` (which keeps the loopback bind), set `VIBESPOT_AUTH_TOKEN` and open the tokenized URL the same way.
+
 ## Commands
 
 Most users only need `npx vibespot`. The web UI handles everything else.
@@ -128,6 +138,7 @@ vibespot doctor       # Diagnose environment issues
 
 ## What's new in v1.3
 
+- **Release highlights on upgrade** — open the builder on a new version and a dialog shows what changed, with a link to the full changelog. Dismiss it and it stays gone until the next release.
 - **Email template generation** — full pipeline for HubSpot emails: table layouts, MSO/VML compatibility, email validator auto-fix, 3 email starters.
 - **Multi-page sites** — single prompt → full site with shared header/footer, page tree, navigation validation.
 - **Inline WYSIWYG editing** — edit text, images, and links directly in the live preview with per-section visual controls.

package/assets/whats-new.json

@@ -0,0 +1,27 @@
+{
+  "version": "1.8.0",
+  "date": "2026-07-06",
+  "changelogUrl": "https://github.com/borismichel/vibespot/blob/main/CHANGELOG.md",
+  "highlights": [
+    {
+      "title": "Dead Postgres storage backend removed",
+      "body": "the never-wired pg adapter, its deps, and the unused compose Postgres service are gone; Docker/compose docs now consistently describe filesystem-only persistence ; non-runtime screenshot/readme image…"
+    },
+    {
+      "title": "server.ts split into router + WebSocket modules",
+      "body": "internal refactor, no behavior change. The ~78-case /api/ switch is now a declarative route table + dispatcher (src/server/routes/api-router.ts, exact paths with per-verb 405s plus the two pattern…"
+    },
+    {
+      "title": "Consolidated drifting duplication",
+      "body": "four byte-duplicated code paths that had already produced real drift bugs are collapsed onto single implementations:"
+    },
+    {
+      "title": "Live preview no longer fails silently after an in-place upgrade",
+      "body": "when /api/preview-origin can't be resolved (a stale cached ui/preview.js hitting a moved route after an upgrade, the preview-origin process not running, or its port blocked), refreshPreview used to…"
+    },
+    {
+      "title": "Editor URL reload no longer discards inline field edits",
+      "body": "reloading the tab (or navigating to #/app/<theme>) hits POST /api/setup/open, which always rebuilt a fresh session from the theme folder on disk."
+    }
+  ]
+}