release: Voice AI authority inheritance in 0.5.9

[dimavrem22]

Executive Summary

This release documents Voice AI authority inheritance and advances every package to 0.5.9.

• Hosted outbound calls omit the authority field unless the caller supplies an override.
• Explicit contact_scoped and yolo values remain supported as per-call overrides.
• Python, TypeScript, Rust, and CLI versions and dependency metadata move in lockstep.

Description

The existing Python, TypeScript, Rust, and CLI serializers already preserve omission of the optional authority field. This change makes that contract explicit in docstrings, command help, READMEs, changelogs, and exact-wire tests: omission inherits the identity’s saved Voice AI authority, while an explicit value overrides one call.

Release metadata moves from 0.5.8 to 0.5.9 across manifests, lockfiles, user-agent constants, and the CLI dependency on @inkbox/sdk. No package has been published.

Reason

Public guidance previously described omission as a fixed contact_scoped default. The API now treats omission as inheritance, so the SDK and CLI must preserve that distinction and describe it accurately.

Decisions

• API shape: Kept all existing methods, flags, enums, and wire names because optional serialization already expresses inheritance correctly.
• Compatibility: Kept missing or null response parsing as contact_scoped so older call records remain readable.
• Release scope: Bumped all four packages to 0.5.9 because this repository releases Python, TypeScript, Rust, and the CLI in lockstep.

Testing

• Python calls.place() and AgentIdentity.place_call(): 971 passed, 3 skipped, 88.60% total coverage; Ruff, lock validation, wheel/sdist build, and Twine checks passed.
• TypeScript calls.place() and AgentIdentity.placeCall(): 992 passed, 3 skipped, 86.48% line coverage; build, consumer bundle verification, and package inspection passed.
• Rust place_hosted*() methods: 213 default-feature tests and 275 all-feature tests passed; formatting, clippy with warnings denied, crate packaging, and publish dry-run passed.
• CLI inkbox phone call --hosted [--authority-mode ...]: 83 passed; build and package inspection passed.
• Final package contents were checked for unintended credential files, environment identifiers, and private repository references.