Traverse v0.13.0 — app commands, host authorities, native publish

[enricopiovesan]

Traverse v0.13.0

Tagged 2026-09-25 (v0.13.0). Published surfaces today: traverse-runtime / traverse-contracts / traverse-embedder / traverse-mcp 0.13.0 on crates.io, traverse-embedder-web@0.13.0 on npm, and the Swift xcframework under the dedicated artifact tag below.

Throughline

Governed app commands and host authorities on the shared runtime.wasm path. Hosts stay UI + WASI/WIT I/O. Capabilities still discover → execute → trace.

Spec 139 — app command / standalone embedder app state machine

• app_command envelopes on embedder-api 1.1.0 (web, Swift, .NET, Kotlin parity).
• Shared cross-host golden for the app state machine; lifecycle events from subscribe().
• Host-connector waits with dual-deadline first-wins; Decision 99 wires invoke.input_from from host_connector_result.<field> (CLI validate rejects unreachable wiring).

Spec 140 — target-neutral host authorities

• Host authorities are WIT-defined and runtime-owned (Decision 97).
• traverse.audio-input adapter package + conformance fixtures; browser and Apple audio-input adapters; audio analysis embedder examples.

Native embedder publication

• Publish workflows for Maven, NuGet, and Swift (Spec 136).
• Swift xcframework: swift-host-v0.13.0 — artifact-only, not the product changelog. Immutable GitHub Releases block attaching that binary to the shared v0.13.0 tag, so it uses the dedicated swift-host-v* namespace (same idea as runtime-wasm-v*).

Hardening

• Decision 100 security updates; bounded RuntimeWasmHost fuel/memory; backup archive member read bounds.
• Web embedder fixes from first-time contributor @DivyamTalwar.

Where to look

• Git tag: https://github.com/traverse-framework/traverse/tree/v0.13.0
  (There is no GitHub Release object named v0.13.0 — that release name was burned by an earlier empty immutable publish. Product notes live here + CHANGELOG / docs/releases/v0.13.0.md as they land on main.)
• Swift binary: https://github.com/traverse-framework/traverse/releases/tag/swift-host-v0.13.0
• Tracking: [Task]: Short notes for swift-host artifact releases + v0.13.0 docs #1551

For agents / readers

If you land on a swift-host-v* or runtime-wasm-v* GitHub Release, treat it as a binary distribution for Package.swift / native hosts — not the product cut.