# Changelog

All notable changes to this repository are documented here.
Generated by git-cliff from Conventional Commits; do not edit this file by hand.

## [Unreleased]

### Added

- **example:** Persist the agent workspace on the PVC via subPath (#34) (367294b)
- **example:** Start DSH's folder picker on the persisted workspace (#36) (82ee0d0)

### CI

- **workflows:** Streamline CI and remove redundant builds (#31) (dcb5b43)

### Documentation

- Align readmes, docs and agent guidance with current behavior (#37) (24f23e0)

### Fixed

- **gateway:** Answer client-aborted requests with 499, not a traceback (#32) (cbcc56f)
- Ship bubblewrap for DSH's command sandbox, keep agents usable without it (#35) (a09d4ac)
- **ci:** Harden workflow token scope and download integrity (#39) (2f959e6)
- **gateway:** Replace token cookies with revocable sessions and harden abuse controls (#40) (1a929e3)

### Maintenance

- **changelog:** Refresh for dsh-v0.2.1-rc.5 (#30) (b57916d)
- Bump docker/login-action (#28) (8c34f43)
- **deps:** Bump agent-sandbox to v1.0.9 (#38) (4c073ee)
- **dockerfile:** Improve package installation and add Python dependencies (bd7c6f3)
- **dockerfile:** Update package installation commands for consistency (0a3fe25)

### Other

- Add continue-on-error to CHANGELOG PR step (97c5632)

## [dsh-v0.2.1-rc.5] - 2026-10-30

### Added

- **example:** Add optional failed-Pod recovery (#26) (14c3fb8)

### Fixed

- **ci:** Make release image digests unique and allow changelog PRs (#24) (2b43d5d)

### Maintenance

- **changelog:** Refresh for dsh-v0.2.1-rc.3-r4 (#23) (97abf75)
- **deps:** Bump agent-sandbox to v1.0.8 (#25) (96d3030)
- **release:** Dsh-v0.2.1-rc.5 (#29) (bed8e56)

## [dsh-v0.2.1-rc.3-r4] - 2026-10-26

### Added

- **skills:** Add agent-sandbox platform skill (#20) (bf24306)
- **example:** Add optional gVisor, nodeSelector, NetworkPolicy and provider keys (#21) (3e9ba38)

### Maintenance

- **changelog:** Refresh for dsh-v0.2.1-rc.3-r3 (#19) (8681412)
- **release:** Dsh-v0.2.1-rc.3-r4 (#22) (e2f1fe5)

## [dsh-v0.2.1-rc.3-r3] - 2026-10-25

### Added

- **gateway-api:** Expose dsh-gateway externally via Traefik Gateway API (#12) (7d3faf0)
- **gateway-api:** GitHub SSO via oauth2-proxy in front of dsh-gateway (#13) (3f46279)
- **gateway:** SSO landing auto-connects and offers recreate sandbox (#15) (ed1398d)
- **repo:** Repo reorganization (#16) (3b70f17)

### Fixed

- **Dockerfile:** Update runtime dependencies and enable corepack for pnpm (6d97f61)
- **gateway-api:** Correct oauth2-proxy cookie-secret generation (#14) (73a65d9)

### Maintenance

- Bump the actions group across 1 directory with 3 updates (#17) (6a8fe54)

### Other

- Dockerfile extra tools (2b47afa)
- Modify gateway.yaml for image policy and timeout values (53e55fc)
- Add commit message prefix for Dependabot updates (6876871)
- Versioning update (#18) (ecba8b9)
- Refactor environment variable loading in build workflow (d627526)
- Refactor environment variable loading in build-gateway.yaml (027f74f)
- Refactor release workflow for environment variable sourcing (958cbe2)

## [v0.0.1] - 2026-10-21

### Other

- Initial commit (f3d4312)
- Update Dockerfile, README, and Kubernetes manifests for DSH Web deployment (#1) (0d66cba)
- Add DeepSeek Harness Web agents-as-a-service platform pattern (#2) (98cb547)
- Update action versions and cluster version (d9cb265)
- Add Python to CodeQL workflow languages (b0f992f)
- Add multi-arch Docker image build workflow with GitHub Actions (de11d34)
- Add step to create manifest list for Docker images (c9be929)
- Make DSH agents-as-a-service browser-usable; fix probe crash-loop (#3) (6301c21)
- Fix idle sweeper suspending claims the gateway does not own (#4) (29eefd6)
- Fix DSH crash-loop after suspend/resume (fsGroup chmod) (#5) (a8ef211)
- Add a startup probe so slow DSH cold starts are not killed (#6) (c193ed2)
- Normalise the pod model returned by CoreV1Api (#7) (9dea4a7)
- Forward the upstream query byte-for-byte (#8) (6876406)
- Do not read-time-out proxied upstream streams (#9) (163abae)
- Dial the sandbox pod IP for WebSocket upgrades (#10) (abe5b4d)
- Handshake under the pod-IP authority for WebSocket upgrades (#11) (0a61e57)