zWorkforce v3.0.3

What's Changed

• Resign latest commit by @cvsz in #52
• Fix release publishing without MSIX signing secrets by @cvsz in #53
• Add manual container publish workflow by @cvsz in #54
• Update setup script for release image by @cvsz in #55
• Prune ZARVIS package boundary by @cvsz in #56
• Harden cross-platform validation by @cvsz in #57
• Fix release without Windows artifacts by @cvsz in #58
• Update GitHub operations documentation by @cvsz in #59
• Update production readiness execution plan by @cvsz in #60
• Update roadmap for current release baseline by @cvsz in #61
• Refresh Markdown documentation links by @cvsz in #62
• Add ProMeta master agent model by @cvsz in #63
• Add ProMeta skills and agent seeds by @cvsz in #64
• Complete ProMeta runtime install flow by @cvsz in #65
• Expose ProMeta install in MCP and dashboard by @cvsz in #66
• refresh zWorkforce WinUI frontend shell and overview by @cvsz in #67
• prepare zWorkforce v3.0.3 production-readiness candidate by @cvsz in #68
• feat: plan Z.A.R.V.I.S. voice, skills and agent upgrade by @cvsz in #69
• feat: add Z.A.R.V.I.S. dashboard push-to-talk by @cvsz in #70
• refactor: share Z.A.R.V.I.S. realtime voice client by @cvsz in #71
• feat(coder): integrate native zWorkforce local coding agent and provider by @cvsz in #72
• chore(deps): bump the npm_and_yarn group across 2 directories with 10 updates by @dependabot[bot] in #75
• feat(zworkforce): apply full skills/agents coverage, zider suite, and studio dashboard redesign by @cvsz in #76
• feat(packages): redesign UI/UX theme styles across zider, zarvis, and studio packages by @cvsz in #77
• style(zider): polish extension sidebar CSS with modern dark tokens and micro-interactions by @cvsz in #78
• chore: organize planning docs and install scripts into subdirectories by @cvsz in #79
• docs: add autonomous hourly completion loop prompts by @cvsz in #80
• docs: reconcile zWorkforce production-readiness plan by @cvsz in #81
• Feat/chore monorepo cleanup by @cvsz in #82
• Feat/workspace context commands by @cvsz in #85
• fix(zider): resolve CodeQL SSRF alert #11 in summarizer service by @cvsz in #86
• fix(planning): resolve merged conflict markers by @cvsz in #87
• fix(security): resolve CodeQL SSRF alert #12 and workflow permissions alert #13 by @cvsz in #88
• feat(workspace): add durable context snapshots and compaction by @cvsz in #89
• feat(workspace): expose authenticated context API by @cvsz in #90
• fix(workspace): reserve context summaries for compact scope by @cvsz in #92
• feat(workspace): add authorized slash command registry by @cvsz in #93
• feat(workspace): add task evidence sidecar projection by @cvsz in #95
• feat(workspace): add durable tenant-scoped workspace grants by @cvsz in #96
• feat(workspace): enforce durable grants on local file tools by @cvsz in #97
• chore(deps): bump uvicorn from 0.52.1 to 0.52.3 in /packages/zarvis/services/zarvis-api by @dependabot[bot] in #94
• feat(sandbox): add probed production process containment by @cvsz in #98
• feat(workspace): add grant-bounded Git worktree adapter core by @cvsz in #99
• docs(router): add OpenRouter and multi-model router roadmap and execution plan by @cvsz in #101
• feat(workspace): bind Git worktrees to tenant grants and audit by @cvsz in #100
• Feat/r12 r13 acp safety upgrades by @cvsz in #103
• feat(workspace): add durable Git worktree lifecycle by @cvsz in #102
• feat(router): add smart model variant slugs and capability resolution by @cvsz in #104
• feat(ui): add slash command autocomplete and server resolution in dispatch console by @cvsz in #105
• feat(engine): add automatic doom-loop detection for repetitive and failing tool cycles by @cvsz in #106
• feat(connectors): add social media and e-commerce provider shop connectors (shopee, tiktok seller, facebook) by @cvsz in #107
• docs(planning): update ROADMAPS and exec plans with R14 universal plugin ecosystem (free-model-first) by @cvsz in #108
• docs(prompts): add Loop E universal plugin & connector automation to prompt registry by @cvsz in #109
• fix(tests): support standalone PYTHONPATH=. execution in test_connectors by @cvsz in #110
• chore(auto): quad-loop e2e cycle 2026-08-17T05:25Z by @cvsz in #111
• chore(auto): quad-loop e2e cycle 2026-08-17T05:32Z — extend all plans to Phase 3+4 by @cvsz in #112
• feat(scripts): automated quad-loop cron runner (every 6h) by @cvsz in #114
• feat(zwf): implement Phase 3 OTLP telemetry and Phase 4 typed agent handoff protocol by @cvsz in #115
• feat(zarvis): implement Phase 1 Gemini Live/Realtime voice engine and Phase 3 VAD tuning by @cvsz in #116
• feat(zeto,zwf): implement Zeto QA/SEO engine and ZWF secure MCP reverse tunnel by @cvsz in #117
• feat(skywork): implement Phase 3 structured citation validator and Phase 4 A2A discovery manifest by @cvsz in #119
• feat(zsp,zwf): implement ZSP real-time timeline collaboration and ZWF ACP protocol server by @cvsz in #120
• feat(zarvis,zred): implement Zarvis multi-language caption overlay and zRed SARIF triage + secret canary by @cvsz in #121
• docs(planning): update master autonomous upgrades roadmap and subsystem completion matrix by @cvsz in #122
• feat(omnibus): implement all remaining phases across Skywork, Zeto, Zider, and ZSP-AITool by @cvsz in #123
• fix(install,zider): support PEP 668 external python env in setup.sh and add build script to zider package.json by @cvsz in #127
• feat(workspace): add explicitly authorized worktree commits by @cvsz in #113
• feat(workspace): implement SW6 governed GitHub PR handoff boundary by @cvsz in #133
• feat(zider): add fail-closed governed browser action contract by @cvsz in #134
• fix(tests): filter upstream StarletteDeprecationWarning on TestClient imports by @cvsz in #136
• fix(zider): fail closed when zWorkforce control plane is unavailable by @cvsz in #135
• feat(zider): add pinned production browser executor boundary by @cvsz in #138
• feat(zider): wire guarded Playwright read-only runtime by @cvsz in #139
• chore(auto): quad-loop cron cycle 2026-08-17T12:30Z by @cvsz in #137
• feat(deploy): rename moopiew-cloudflared.service to core-cloudflared.service by @cvsz in #132
• feat(infra): centralize all Cloudflare Terraform definitions and systemd templates into zworkforce by @cvsz in #131
• feat(deploy): consolidate all Cloudflare tunnel and Caddy ingress manifests under zworkforce/deploy by @cvsz in #130
• feat(zctl): implement targeted build, install, start, stop, restart for all packages by @cvsz in #129
• feat(zider): add Manifest V3 CSP invariant test and context menu test by @cvsz in #128
• feat(zarvis): implement native WinUI 3 background audio capture and global system hotkey VoiceService by @cvsz in #125
• Chore/auto quad loop 2026 08 17 t1830 z by @cvsz in #140
• feat(zctl): expand Go control panel to cover all packages/* directories by @cvsz in #126
• feat(zred,router): implement safety hooks, Solana ledger notary, router telemetry, and edge tunnel client by @cvsz in #124
• feat(zider,zsp): implement Zider context menu & CSP hardening, and ZSP batch export pipeline by @cvsz in #118
• chore(auto): quad-loop cron cycle 2026-08-18T00:30Z by @cvsz in #141
• feat(zider): add durable zWorkforce mutation approval adapter by @cvsz in #142
• feat(zider): execute approved browser click and submit mutations by @cvsz in #143
• feat(zider): revalidate and repin read-only browser redirects by @cvsz in #144
• feat(core): add durable browser side-effect ledger by @cvsz in #145
• feat(browser): wire durable effect API into approved mutations by @cvsz in #146
• feat(browser): add governed artifact uploads by @cvsz in #147
• feat(zider): revalidate redirect hops with canonicalization and scheme guard by @cvsz in #149
• test(api): cover durable browser effect lifecycle contract at the HTTP layer by @cvsz in #150
• feat(zider): propagate task cancellation into durable browser execution by @cvsz in #151
• feat(zider): capture sanitized browser evidence envelope per action by @cvsz in #152
• fix(zider): make browser mutation cancellation fail closed by @cvsz in #148
• SW7-P9: browser E2E security regression matrix by @cvsz in #153
• chore(auto): quad-loop cron cycle 2026-08-18T06:30Z by @cvsz in #154
• docs(release): reconcile v3.0.3 evidence ledger by @cvsz in #155
• docs(release): clarify v3.0.3 release scope authority by @cvsz in #156
• docs(release): normalize subsystem release-scope status by @cvsz in #157
• docs(release): reconcile evidence ledger and stale plan metadata by @cvsz in #158
• docs(release): record applied default-branch ruleset ID 20988030 by @cvsz in #159
• chore(auto): quad-loop cron cycle 2026-08-18T12:30Z by @cvsz in #160
• docs(evidence): reconcile ledger to verified PR #160 head 05e9591 by @cvsz in #161
• docs(evidence): record local compose stack drills (Stages A/B/C/D/E/G) by @cvsz in #162
• docs(evidence): record verified external publication state by @cvsz in #163
• chore(auto): quad-loop cron cycle 2026-08-18T18:30Z by @cvsz in #164
• docs: update Stage D/E with real NVIDIA provider verification and HA status by @cvsz in #165
• feat: add native zknowbase client boundary by @cvsz in #166
• docs(release): classify zknowbase as forward roadmap by @cvsz in #167
• feat: route zknowbase through governed knowledge tools by @cvsz in #168
• feat: automate Cloudflare + Supabase HA production contract by @cvsz in #170
• fix(release): preserve frozen candidate across forward merges by @cvsz in #171
• feat(release): add VM x2 HA and observability evidence gates by @cvsz in #172
• chore: update .gitignore (env secrets, backups, caches) by @cvsz in #174
• chore(deps): bump uvicorn from 0.52.3 to 0.52.4 in /packages/zarvis/services/zarvis-api by @dependabot[bot] in #175
• feat(zloop): integrate bounded loop orchestration bridge by @cvsz in #173
• feat(zarvis): add APEX-inspired agent reasoning HUD by @cvsz in #177
• chore(packages): add zksato and zttshop-php submodules by @cvsz in #176
• ops(zarvis): establish production online gateway contract by @cvsz in #178

Full Changelog: v3.0.2...v3.0.3