# Changelog

All notable changes to this repository are documented here.
Generated by git-cliff from Conventional Commits; do not edit this file by hand.

## [Unreleased]

### Added

- **gateway-api:** Expose dsh-gateway externally via Traefik Gateway API (#12) (7d3faf0)
- **gateway-api:** GitHub SSO via oauth2-proxy in front of dsh-gateway (#13) (3f46279)
- **gateway:** SSO landing auto-connects and offers recreate sandbox (#15) (ed1398d)
- **repo:** Restructure around the dsh-harness image and one example per implementation (e6e109d)

### Fixed

- **Dockerfile:** Update runtime dependencies and enable corepack for pnpm (6d97f61)
- **gateway-api:** Correct oauth2-proxy cookie-secret generation (#14) (73a65d9)

### Other

- Dockerfile extra tools (2b47afa)
- Modify gateway.yaml for image policy and timeout values (53e55fc)

## [v0.0.1] - 2026-10-21

### Other

- Initial commit (f3d4312)
- Update Dockerfile, README, and Kubernetes manifests for DSH Web deployment (#1) (0d66cba)
- Add DeepSeek Harness Web agents-as-a-service platform pattern (#2) (98cb547)
- Update action versions and cluster version (d9cb265)
- Add Python to CodeQL workflow languages (b0f992f)
- Add multi-arch Docker image build workflow with GitHub Actions (de11d34)
- Add step to create manifest list for Docker images (c9be929)
- Make DSH agents-as-a-service browser-usable; fix probe crash-loop (#3) (6301c21)
- Fix idle sweeper suspending claims the gateway does not own (#4) (29eefd6)
- Fix DSH crash-loop after suspend/resume (fsGroup chmod) (#5) (a8ef211)
- Add a startup probe so slow DSH cold starts are not killed (#6) (c193ed2)
- Normalise the pod model returned by CoreV1Api (#7) (9dea4a7)
- Forward the upstream query byte-for-byte (#8) (6876406)
- Do not read-time-out proxied upstream streams (#9) (163abae)
- Dial the sandbox pod IP for WebSocket upgrades (#10) (abe5b4d)
- Handshake under the pod-IP authority for WebSocket upgrades (#11) (0a61e57)