v0.146.0

Install or update: npm i -g cotal-ai@0.146.0

Restart running Cotal processes and agent sessions to use the new code.

What changed

• Automatic restarts now require proof that the previous seat's local work has ended.
• cotal who and cotal_roster mark a shared name by the same rule a direct message uses, so a session's own row and a lone offline participant no longer carry an instance id.
• The shared listener proof type is ListenerProof, and its target is the store the attempt binds.
• cotal up mints a read-only dashboard credential for a static space, its web.creds, and the web service preset uses it as the --creds default, so cotal service start web starts with no flags.

Every change in full

• Automatic restarts now require proof that the previous seat's local work has ended.

  The built-in PTY runtime cannot prove detached tools have stopped, so it refuses explicit supervise requests before launch. Pi crash recovery and recovery of older supervised records also refuse without authoritative work closure. Ordinary launches remain supported. This is a breaking safety restriction; it does not kill surviving tools or cancel remote effects.

  Runtime adapters can declare supportsWorkClosure and provide each handle's waitForWorkExit. Recovery after a manager crash additionally needs a durable reference and reapWork. Missing, failed or timed-out proof never permits a replacement. Outstanding turns retain their existing deadline semantics rather than receiving a fabricated successful or cancelled result.

• cotal who and cotal_roster mark a shared name by the same rule a direct message uses, so a session's own row and a lone offline participant no longer carry an instance id.

• The shared listener proof type is ListenerProof, and its target is the store the attempt binds.

• cotal up mints a read-only dashboard credential for a static space, its web.creds, and the web service preset uses it as the --creds default, so cotal service start web starts with no flags. doctor auth reports the file, and clean and a space reset remove it.

What's Changed

• test(cli): follow split documentation references by @davidfarah2003 in #5856
• fix(workspace): name the shared listener proof for both attempt kinds by @davidfarah2003 in #5859
• feat(cli): mint the dashboard credential at up and default the web preset to it by @davidfarah2003 in #5863
• fix(core): mark a shared display name by the same rule a direct message uses by @davidfarah2003 in #5864
• fix(manager)!: require local work closure before automatic restart by @davidfarah2003 in #5865
• chore(release): version packages by @davidfarah2003 in #5860

Full Changelog: v0.145.1...v0.146.0