v0.90.0

Cotal 0.90.0 is out!

Grab it: npm i cotal-ai@0.90.0

Changes in this release

• Add immutable local scoped-Describe receive context and complete-envelope fingerprints, plus an explicit bounded read-only service Describe client contract. Define closed service-authority contracts, provider HTTP client hooks, host control types, registration-bound access and renewal primitives, native service gate approval guards and credential-root access checks, native caller-policy storage, create-only application-service name bindings and caller-capability policy checks. Add focused transport and structural checks and document the read-only serving-grant reader. Native service registration remains unavailable until host lifecycle support is implemented.

  Keep create-only native authority writes closed over deleted key history, including concurrent caller-policy creation and pending service gates.

  Bind service serving-issuance evidence to broker connection coordinates and verify it after the native gate CAS.

  Add a host-only service-callout mint seam with principal attribution, a separate client inbox nonce and an original fixed expiry.

  Bind native service issuance receipts to the registered witness and epcred connection, and retain expired evidence until qualified retirement.

  Compose an optional sealed native service callout with current root authorization, registered serving grants, connection-bound receipts and fixed-expiry encrypted responses. Production registration and lifecycle wiring remain unavailable.

• Refuse ordinary lifecycle mutation and connect paths for immutable service UID custody, including stamped-root retries and activation recovery. Preserve ordinary reservation records and keep service issuance, cancellation and retirement unavailable until their separate authority prerequisites are implemented.

• State in the cotal_run tool's page description that a manager from release 0.88.0 or earlier refuses page mode.

• Add host-only fresh revocation custody and sealed finite leader snapshots for private tool-result prerequisites. Existing stores and lost custody refuse. Runtime clock qualification remains explicitly unavailable, so this does not enable result serving or material issuance.

• Add a package-internal dormant writer for native service custody bootstrap and endpoint-first cancellation. Nothing in the product calls it and it is not exported. It shares closed record shapes with the unchanged active-root reader, acts only under a genuine plane-claim hold re-read before and after each write, and bounds every request by the caller's original deadline. Bootstrap requests after the plan step are also bounded by the root plan's expiry, while cancellation keeps only its own deadline. Bootstrap holds instead of reporting an active root whose expiry its final check observes. It grants no approval, serving, terminal retirement, alias release or rotation.

• Refuse a native service endpoint gate as a session serving gate. The auth session redemption hooks now reject a service-family gate before they return a serving pin or stage any caller or serving ledger row, including a restage whose saved pin was taken while the gate was ordinary.

What's Changed

• docs: correct AGENTS package map and cotal_run page availability by @davidfarah2003 in #4195
• docs: correct publication, manager command and artifact descriptions by @davidfarah2003 in #4196
• docs(agents): add a lane closeout rule by @davidfarah2003 in #4198
• docs: add missing package READMEs and complete connector lists by @davidfarah2003 in #4199
• docs: correct stale README and example facts by @davidfarah2003 in #4200
• test(smoke): match the claim 4 phrase across a space by @davidfarah2003 in #4201
• docs(lang): list spawn cwd and placement in the signature and hash tables by @davidfarah2003 in #4202
• docs(deploy): mark the checkout image build as a known issue by @davidfarah2003 in #4203
• docs: separate channel membership from presence rosters and scope the mention refusal by @davidfarah2003 in #4204
• feat(auth): add unwired service endpoint prerequisites by @davidfarah2003 in #4206
• docs: correct the Hermes range and scope the Claude Code hook table by @davidfarah2003 in #4205
• docs(connector-hermes): update the range comments for Hermes 0.22 by @davidfarah2003 in #4207
• fix(auth): refuse service gates as session serving gates by @davidfarah2003 in #4209
• docs(hermes): describe only the shown custom endpoint setup by @davidfarah2003 in #4208
• docs(config): list the client sentinel in the user-auth state dir by @davidfarah2003 in #4210
• feat(auth): add private tool-result snapshot prerequisites by @davidfarah2003 in #4182
• feat(auth): add dormant native service custody writer by @davidfarah2003 in #4211

Full Changelog: v0.89.0...v0.90.0