Skip to content

Digital Employee v0.3.0

Choose a tag to compare

@PeterGuy326 PeterGuy326 released this 07 Aug 01:52
· 108 commits to main since this release
5fc08a7

v0.3.0

This release adds the publisher-owned Runner execution boundary and hardens the npm release gates.

Highlights

  • Cross-repository digital-employee.runner-protocol.v1 contract with Ed25519 task/receipt envelopes
  • Deterministic employee-package digests and per-run sealed local snapshots
  • Required replay-guard port, signed-renewal lease state, and one-shot Runner executor
  • Hardened npm release gates: real root and core tarballs with package-specific verification
  • Split root and core OIDC publish jobs for independent publishability

Security

  • Qoder assistant text buffered and scrubbed to prevent credential leakage across stream chunks
  • Credential-bearing tool identifiers and keys rejected; schema-bound structured output fails closed

Full changelog: https://github.com/fullstack-ai-infra/digital-employee/blob/main/CHANGELOG.md