Digital Employee v0.6.0

What's Changed

• docs(verification): pin ledger to the 0.5.0 release evidence by @PeterGuy326 in #204
• feat(contract): turn-envelope v1alpha2 optional conversationRef back-link (#205) by @PeterGuy326 in #206
• feat(engine): permission enforcement on org-permissions.v1 — pre-check, denial evidence, mode consumption, freshness (#159) by @PeterGuy326 in #211
• security(docs): remove non-synthetic public evidence by @PeterGuy326 in #208
• feat(engine): wire memory_recall slot to strict MemoryPort seam (#209) by @PeterGuy326 in #212
• feat(engine+core): strict read-only ContextPort and pinned workbench adapter (#179) by @PeterGuy326 in #213
• chore(release): prepare v0.6.0 (#217) by @PeterGuy326 in #218

Full Changelog: v0.5.0...v0.6.0

Digital Employee v0.5.0

What's Changed

• test(cli): cover deploy orchestration, config safety, and prompts (#70) by @PeterGuy326 in #126
• fix(qoder): tolerate late-init handshake and surface terminal_reason errors by @PeterGuy326 in #128
• fix(qoder): forbid prose around the schema-bound JSON output by @PeterGuy326 in #129
• fix(qoder): repair unescaped quotes in schema-bound model JSON output by @PeterGuy326 in #130
• chore(host): re-audit Codex CLI 0.148.0 for the default-deny contract by @PeterGuy326 in #131
• fix(cli): tolerate transient HTTP readback probe failures during final deploy verification by @PeterGuy326 in #127
• feat(i18n): pin JSON-only locale discovery on the built CLI by @PeterGuy326 in #132
• feat(qualification): earn output_schema evidence through six deterministic vectors (#113 AC-003) by @PeterGuy326 in #133
• feat(adapters): share one synchronous Schema preflight guard across runnable Adapters (#113 AC-002) by @PeterGuy326 in #134
• feat(evidence): harden AC-004 Schema containment and exact-version evidence (#113 AC-004) by @PeterGuy326 in #135
• feat(cli): workspace init prototype with oss-maintainer template (#156) by @PeterGuy326 in #166
• docs(strategy): pivot strategy/roadmap/README to the new mainline by @PeterGuy326 in #167
• feat(engine): built-in execution engine S1 skeleton — turn execution, context assembly, structural fail-closed (#165) by @PeterGuy326 in #168
• feat(engine): loop control — dual-dimension budgets, doom-loop detection, escalation records, per-turn evidence (#165) by @PeterGuy326 in #172
• docs(strategy): pivot strategy/roadmap/README to workspace mainline (#164) by @PeterGuy326 in #170
• feat(org): budget schema, directory-tree org apply, permission boundaries (#157, #159) by @PeterGuy326 in #171
• feat(cli): turn run spawn surface — sealed turn-envelope.v1, NDJSON stream, exit-code semantics (#173) by @PeterGuy326 in #174
• test(deploy-cli): pin spawned-child locale in harness for deterministic prompt assertions (#175) by @PeterGuy326 in #176
• chore(governance): require separated delivery owners in Issue and PR templates (#95) by @PeterGuy326 in #183
• feat(engine): claude-local model port for turn run by @Bindy-lbb in #184
• docs(roadmap): register D5 backlog (codex-aligned session & approval semantics) by @PeterGuy326 in #188
• feat(engine): qoder model port for turn run + zero-Claude runbook (#185) by @PeterGuy326 in #189
• docs(engine): land engine.v1 ↔ codex semantic mapping design reference (#187) by @PeterGuy326 in #190
• feat(engine): approval three-event contract, Option 1 terminal-and-resume (#187) by @PeterGuy326 in #191
• docs(verification): backfill #177 AC-001 Qoder E4-live evidence by @PeterGuy326 in #192
• feat(memory): add strict scoped mem port by @PeterGuy326 in #181
• feat(cli): pendingApproval verdict field on turn-envelope.v1 spawn surface (#193) by @PeterGuy326 in #195
• feat(engine): add explicit single-hop delegation by @PeterGuy326 in #178
• chore(governance): local PR precheck hook delegating to the CI trace gate (#197) by @PeterGuy326 in #199
• feat(contract): hire-request.v1alpha1 hire channel and employee-package identity segment (#194) by @PeterGuy326 in #198
• docs(release): codify version-bump semantics in releasing.md (#200) by @PeterGuy326 in #202
• chore(release): prepare v0.5.0 by @PeterGuy326 in #201

New Contributors

• @Bindy-lbb made their first contribution in #184

Full Changelog: v0.4.0...v0.5.0

Digital Employee v0.4.0

What's Changed

• feat(core): freeze employee-package compatibility semantics and golden vectors by @PeterGuy326 in #57
• feat(core): add Runner authenticated transport port and device-key lifecycle by @PeterGuy326 in #58
• feat: provider-neutral usage evidence semantics by @PeterGuy326 in #59
• feat(runner): ship runner init/doctor/start/status lifecycle by @PeterGuy326 in #61
• feat(distribution): deterministic employee archive, verify/install/rollback lifecycle by @PeterGuy326 in #62
• test(protocol): stabilize Runner protocol golden vectors (#38) by @PeterGuy326 in #66
• test(integration): prove signed task -> Runner -> Host -> signed receipt by @PeterGuy326 in #67
• chore(deps-dev): bump @types/node from 24.3.0 to 26.1.2 by @dependabot[bot] in #63
• chore(deps-dev): bump typescript from 5.9.3 to 7.0.2 by @dependabot[bot] in #64
• feat: write-approval lifecycle engine (#12) by @PeterGuy326 in #68
• feat(cli): interactive deploy command (#70) by @PeterGuy326 in #71
• Add task-intake approval gate (owner confirmation before accepting tasks) by @PeterGuy326 in #72
• feat(cli): agent-native one-link install path by @PeterGuy326 in #73
• fix: reject unknown capability keys in probe validation by @PeterGuy326 in #74
• fix: make exactKeys in component-matrix reject missing keys by @PeterGuy326 in #75
• feat: add corpusDigest field to agent-host vector manifest by @PeterGuy326 in #76
• fix: bound hostVersion length to 256 in qualification record validator by @PeterGuy326 in #80
• feat(core): real-local harness and fixtures for Phase A (#42) by @PeterGuy326 in #81
• fix: correct IPv6 loopback matching in real-local host by @PeterGuy326 in #82
• feat(i18n): make locale system extensible with auto-discovery by @PeterGuy326 in #83
• feat(channel): add WeCom deploy channel by @PeterGuy326 in #84
• feat(channel): add Lark (飞书) channel to deploy command by @PeterGuy326 in #85
• feat(cli): add --help and CLI flags to deploy command by @PeterGuy326 in #87
• refactor: move examples/knowledge to test fixtures by @PeterGuy326 in #88
• fix: make release publication resilient by @PeterGuy326 in #98
• chore: complete standalone core npm bootstrap by @PeterGuy326 in #100
• fix(ci): restore green Node 20/22/24 required checks by @PeterGuy326 in #94
• chore(deps-dev): bump @types/node from 26.1.2 to 26.2.0 by @dependabot[bot] in #111
• chore(governance): enforce requirement acceptance ledgers by @PeterGuy326 in #116
• test(governance): target test-job fetch-depth in CI workflow test by @PeterGuy326 in #121
• feat(host): qualify Qoder structured output by @PeterGuy326 in #117
• research(host): keep Codex 0.147 probe-only after default-deny audit by @PeterGuy326 in #119
• feat(host): harden qualification evidence lifecycle by @PeterGuy326 in #118
• test(host): complete agent-host.v1 corpus ledger by @PeterGuy326 in #115
• fix(distribution): make installed artifacts reproducible by @PeterGuy326 in #96
• feat(i18n): validate catalogs against en.json and harden setLocale errors by @PeterGuy326 in #122
• feat(cli): coordinated package-bound truthful deploy by @PeterGuy326 in #99
• feat(git): make git source sync last-known-good safe (#103) by @PeterGuy326 in #123
• chore(release): prepare v0.4.0 by @PeterGuy326 in #124

New Contributors

• @dependabot[bot] made their first contribution in #63

Full Changelog: v0.3.0...v0.4.0

Digital Employee v0.3.0

v0.3.0

This release adds the publisher-owned Runner execution boundary and hardens the npm release gates.

Highlights

• Cross-repository digital-employee.runner-protocol.v1 contract with Ed25519 task/receipt envelopes
• Deterministic employee-package digests and per-run sealed local snapshots
• Required replay-guard port, signed-renewal lease state, and one-shot Runner executor
• Hardened npm release gates: real root and core tarballs with package-specific verification
• Split root and core OIDC publish jobs for independent publishability

Security

• Qoder assistant text buffered and scrubbed to prevent credential leakage across stream chunks
• Credential-bearing tool identifiers and keys rejected; schema-bound structured output fails closed

Full changelog: https://github.com/fullstack-ai-infra/digital-employee/blob/main/CHANGELOG.md

Digital Employee v0.1.0

What's Changed

• feat: add reusable digital employee runtime by @PeterGuy326 in #1
• chore: automate v0.1.0 releases by @PeterGuy326 in #4

New Contributors

• @PeterGuy326 made their first contribution in #1

Full Changelog: https://github.com/fullstack-ai-infra/digital-employee/commits/v0.1.0