Digital Employee v0.3.0
v0.3.0
This release adds the publisher-owned Runner execution boundary and hardens the npm release gates.
Highlights
- Cross-repository
digital-employee.runner-protocol.v1contract with Ed25519 task/receipt envelopes - Deterministic employee-package digests and per-run sealed local snapshots
- Required replay-guard port, signed-renewal lease state, and one-shot Runner executor
- Hardened npm release gates: real root and core tarballs with package-specific verification
- Split root and core OIDC publish jobs for independent publishability
Security
- Qoder assistant text buffered and scrubbed to prevent credential leakage across stream chunks
- Credential-bearing tool identifiers and keys rejected; schema-bound structured output fails closed
Full changelog: https://github.com/fullstack-ai-infra/digital-employee/blob/main/CHANGELOG.md