# Changelog ## v0.2.3 Changes since [v0.2.2](https://github.com/hxy91819/dsh-auth/compare/v0.2.2...v0.2.3). ### Changes - release: prepare v0.2.3 (`eee4338`). Thanks @hxy91819. - test: prove failed upgrade restores a file: spec offline ([#28](https://github.com/hxy91819/dsh-auth/pull/28)). Thanks @hxy91819. - fix: load auth state through an O_NOFOLLOW descriptor ([#27](https://github.com/hxy91819/dsh-auth/pull/27)). Thanks @hxy91819. - fix: distinguish Origin/CSRF token denials from spent-link errors ([#26](https://github.com/hxy91819/dsh-auth/pull/26)). Thanks @hxy91819. - fix: restore offline tarball rollback for file: profile specs ([#25](https://github.com/hxy91819/dsh-auth/pull/25)). Thanks @hxy91819. - ci: drop leftover Nginx checks from daily CI and E2E ([#24](https://github.com/hxy91819/dsh-auth/pull/24)). Thanks @hxy91819. - fix: prepare Caddy log path in release preflight ([#23](https://github.com/hxy91819/dsh-auth/pull/23)). Thanks @hxy91819. - release: prepare v0.2.2 ([#22](https://github.com/hxy91819/dsh-auth/pull/22)). Thanks @hxy91819. ### Contributors Thanks @hxy91819 for this release. ## Unreleased ### Changes ## v0.2.2 Changes since [v0.2.1](https://github.com/hxy91819/dsh-auth/compare/v0.2.1...v0.2.2). ### Changes - release: prepare v0.2.2 (`8ed57ed`). Thanks @hxy91819. - test: cover outer TLS proxy end to end ([#21](https://github.com/hxy91819/dsh-auth/pull/21)). Thanks @hxy91819. - test: track the repository release in installer host fakes ([#19](https://github.com/hxy91819/dsh-auth/pull/19)). Thanks @hxy91819. - feat: harden managed plugin installation lifecycle ([#18](https://github.com/hxy91819/dsh-auth/pull/18)). Thanks @hxy91819. ### Contributors Thanks @hxy91819 for this release. ## Unreleased ### Changes - feat: support a loopback authentication edge behind an operator-managed TLS proxy. ## v0.2.1 Changes since [v0.2.0](https://github.com/hxy91819/dsh-auth/compare/v0.2.0...v0.2.1). ### Changes - release: prepare v0.2.1 (`87e0d10`). Thanks @hxy91819. - docs: add a Chinese README for operator install docs ([#16](https://github.com/hxy91819/dsh-auth/pull/16)). Thanks @hxy91819. - feat: add privacy-safe authentication audit logs ([#15](https://github.com/hxy91819/dsh-auth/pull/15)). Thanks @hxy91819. - Move sign-out from the sidebar into Settings ([#17](https://github.com/hxy91819/dsh-auth/pull/17)). Thanks @hxy91819. - docs: label dsh-auth as unofficial and add marketplace keywords (`98ae8a8`). Thanks @hxy91819. ### Contributors Thanks @hxy91819 for this release. ## v0.2.0 Changes since [v0.1.15](https://github.com/hxy91819/dsh-auth/compare/v0.1.15...v0.2.0). ### Breaking changes - release!: require v1 uninstall before 0.2.0 setup (`fd1741a`). Thanks masonxhuang. ### Changes - build: remove stale output before packaging (`c59aef1`). Thanks masonxhuang. - fix: make managed uninstall transactional (`0e897a6`). Thanks masonxhuang. - docs: remove password reset screenshots (`19697f5`). Thanks masonxhuang. - docs: derive token-login progress from execution cards ([#14](https://github.com/hxy91819/dsh-auth/pull/14)). Thanks @hxy91819. - feat: reset the administrator password from Settings ([#13](https://github.com/hxy91819/dsh-auth/pull/13)). Thanks @hxy91819. - docs: require every PR review comment to be adopted or rejected before land (`109a099`). Thanks masonxhuang. - ci: run Actions once per PR and cancel superseded runs (`80f2061`). Thanks masonxhuang. - fix: restore exact token Origin checks and cross-process issue capacity ([#9](https://github.com/hxy91819/dsh-auth/pull/9)). Thanks @hxy91819. - docs: require autoreview and green CI before landing a PR ([#12](https://github.com/hxy91819/dsh-auth/pull/12)). Thanks @hxy91819. - docs: document custom login-token failure messages ([#11](https://github.com/hxy91819/dsh-auth/pull/11)). Thanks @hxy91819. - fix: fail closed on unsafe login-token directories and files ([#10](https://github.com/hxy91819/dsh-auth/pull/10)). Thanks @hxy91819. - docs: close the one-time token login epic after 0.1.15 ([#8](https://github.com/hxy91819/dsh-auth/pull/8)). Thanks @hxy91819. - docs: mark the token-login epic complete in the topic README (`0aa1e61`). Thanks masonxhuang. - docs: close STORY-06 after publishing dsh-auth 0.1.15 (`04c717b`). Thanks masonxhuang. - fix: vendor Caddy before ignore-scripts release pack (`30ab723`). Thanks masonxhuang. ### Contributors Thanks masonxhuang and @hxy91819 for this release. ## v0.1.15 Changes since [v0.1.14](https://github.com/hxy91819/dsh-auth/compare/v0.1.14...v0.1.15). ### Changes - docs: record live systemd acceptance for bundled Caddy 0.1.15 (`7381c4a`). Thanks masonxhuang. - merge: incorporate main Caddy self-contained docs contract (`d499c2a`). Thanks masonxhuang. - fix: start DynamicUser Caddy without a root-owned state directory (`4f5c39d`). Thanks masonxhuang. - feat: ship official Caddy binaries inside the dsh-auth tarball (`92e5234`). Thanks masonxhuang. ### Contributors Thanks masonxhuang for this release. ## v0.1.14 Changes since [v0.1.13](https://github.com/hxy91819/dsh-auth/compare/v0.1.13...v0.1.14). ### Changes - release: prepare v0.1.14 (`0e5919f`). Thanks masonxhuang. - fix: keep published lib files and Chrome token redemption working (`82bd485`). Thanks masonxhuang. - docs: record the next multi-account collaboration direction (`4b26ad2`). Thanks masonxhuang. - chore: ignore node_modules when it is a worktree symlink (`43ed0ca`). Thanks masonxhuang. - feat: let the first token login set administrator credentials (`047e017`). Thanks masonxhuang. - chore: apply advisory code-health policy to long test suites (`c335111`). Thanks masonxhuang. - feat: redeem one-time login tokens through a fragment bridge (`92796d1`). Thanks masonxhuang. - feat: issue one-time login tokens from system and container states (`f5d8bf8`). Thanks masonxhuang. - feat: switch installer to enterprise v2 Caddy contract (`c707512`). Thanks masonxhuang. - docs: complete Caddy spike and plan parallel work (`4a0fe68`). Thanks masonxhuang. - feat: validate embedded Caddy edge runtime (`09b00ba`). Thanks masonxhuang. - docs: complete unified auth state story (`88ca83e`). Thanks masonxhuang. - feat: unify administrator authentication state (`46721cb`). Thanks masonxhuang. - docs: add Caddy to token login epic (`5bb2c21`). Thanks masonxhuang. - chore: refresh Harness baseline to rc.7 (`0c30e11`). Thanks masonxhuang. - docs: plan one-time token login v2 (`9905804`). Thanks masonxhuang. - feat: stabilize installer CLI contract (`6f9f637`). Thanks masonxhuang. - merge: code health governance (`9885c18`). Thanks masonxhuang. - docs: install the CLI globally and document required flags ([#7](https://github.com/hxy91819/dsh-auth/pull/7)). Thanks @hxy91819. - Merge remote-tracking branch 'origin/main' (`7563fb9`). Thanks masonxhuang. - ci: publish verified GitHub releases (`97ba5f7`). Thanks masonxhuang. - ci: add continuous security scans (`595906f`). Thanks masonxhuang. - ci: harden npm 12 release validation (`f089720`). Thanks masonxhuang. - ci: enable Dependabot updates (`842f452`). Thanks masonxhuang. - merge: integrate authentication security audit (`e612bf0`). Thanks masonxhuang. - docs: add npm release runbook (`513c8f4`). Thanks masonxhuang. - test: enforce authentication end-to-end coverage (`6b64ba9`). Thanks masonxhuang. - fix: publish local release tarball (`97deb40`). Thanks masonxhuang. ### Contributors Thanks masonxhuang and @hxy91819 for this release. ## v0.1.13 Initial tagged release. ### Changes - Added the secure one-command installer, managed password reset, session persistence, and renewal. - Added end-to-end coverage for installer, Nginx, browser, and authentication behavior. - Added explicit npm Trusted Publishing through GitHub Actions with provenance.