chore: release v0.13.0

[github-actions]

🤖 New release

• ironclaw: 0.12.0 -> 0.13.0 (⚠ API breaking changes)

⚠ ironclaw breaking changes

--- failure constructible_struct_adds_field: externally-constructible struct adds field ---

Description:
A pub struct constructible with a struct literal has a new pub field. Existing struct literals must be updated to include the new field.
        ref: https://doc.rust-lang.org/reference/expressions/struct-expr.html
       impl: https://github.com/obi1kenobi/cargo-semver-checks/tree/v0.46.0/src/lints/constructible_struct_adds_field.ron

Failed in:
  field OutgoingResponse.attachments in /tmp/.tmp6fcSaN/ironclaw/src/channels/channel.rs:83
  field WebhookSchema.signature_key_secret_name in /tmp/.tmp6fcSaN/ironclaw/src/channels/wasm/schema.rs:249
  field HistoryResponse.pending_approval in /tmp/.tmp6fcSaN/ironclaw/src/channels/web/types.rs:79
  field DatabaseConfig.ssl_mode in /tmp/.tmp6fcSaN/ironclaw/src/config/database.rs:95
  field ExtensionInfo.display_name in /tmp/.tmp6fcSaN/ironclaw/src/channels/web/types.rs:371
  field CapabilitiesFile.setup in /tmp/.tmp6fcSaN/ironclaw/src/tools/wasm/capabilities_schema.rs:68
  field CapabilitiesFile.capabilities in /tmp/.tmp6fcSaN/ironclaw/src/tools/wasm/capabilities_schema.rs:77
  field ToolCallInfo.result_preview in /tmp/.tmp6fcSaN/ironclaw/src/channels/web/types.rs:59
  field ToolCallInfo.error in /tmp/.tmp6fcSaN/ironclaw/src/channels/web/types.rs:61
  field InstalledExtension.display_name in /tmp/.tmp6fcSaN/ironclaw/src/extensions/mod.rs:193

--- failure enum_no_repr_variant_discriminant_changed: enum variant had its discriminant change value ---

Description:
The enum's variant had its discriminant value change. This breaks downstream code that used its value via a numeric cast like `as isize`.
        ref: https://doc.rust-lang.org/reference/items/enumerations.html#assigning-discriminant-values
       impl: https://github.com/obi1kenobi/cargo-semver-checks/tree/v0.46.0/src/lints/enum_no_repr_variant_discriminant_changed.ron

Failed in:
  variant Submission::Quit 14 -> 16 in /tmp/.tmp6fcSaN/ironclaw/src/agent/submission.rs:268
  variant Submission::SystemCommand 15 -> 17 in /tmp/.tmp6fcSaN/ironclaw/src/agent/submission.rs:272
  variant Submission::Quit 14 -> 16 in /tmp/.tmp6fcSaN/ironclaw/src/agent/submission.rs:268
  variant Submission::SystemCommand 15 -> 17 in /tmp/.tmp6fcSaN/ironclaw/src/agent/submission.rs:272

--- failure enum_struct_variant_field_added: pub enum struct variant field added ---

Description:
An enum's exhaustive struct variant has a new field, which has to be included when constructing or matching on this variant.
        ref: https://doc.rust-lang.org/reference/attributes/type_system.html#the-non_exhaustive-attribute
       impl: https://github.com/obi1kenobi/cargo-semver-checks/tree/v0.46.0/src/lints/enum_struct_variant_field_added.ron

Failed in:
  field source_dir of variant ExtensionSource::WasmBuildable in /tmp/.tmp6fcSaN/ironclaw/src/extensions/mod.rs:89

--- failure enum_struct_variant_field_missing: pub enum struct variant's field removed or renamed ---

Description:
A publicly-visible enum has a struct variant whose field is no longer available under its prior name. It may have been renamed or removed entirely.
        ref: https://doc.rust-lang.org/cargo/reference/semver.html#item-remove
       impl: https://github.com/obi1kenobi/cargo-semver-checks/tree/v0.46.0/src/lints/enum_struct_variant_field_missing.ron

Failed in:
  field repo_url of variant ExtensionSource::WasmBuildable, previously in file /tmp/.tmp2LUMMd/ironclaw/src/extensions/mod.rs:88

--- failure enum_variant_added: enum variant added on exhaustive enum ---

Description:
A publicly-visible enum without #[non_exhaustive] has a new variant.
        ref: https://doc.rust-lang.org/cargo/reference/semver.html#enum-variant-new
       impl: https://github.com/obi1kenobi/cargo-semver-checks/tree/v0.46.0/src/lints/enum_variant_added.ron

Failed in:
  variant ToolCommand:Setup in /tmp/.tmp6fcSaN/ironclaw/src/cli/tool.rs:104
  variant Submission:JobStatus in /tmp/.tmp6fcSaN/ironclaw/src/agent/submission.rs:256
  variant Submission:JobCancel in /tmp/.tmp6fcSaN/ironclaw/src/agent/submission.rs:262
  variant Submission:JobStatus in /tmp/.tmp6fcSaN/ironclaw/src/agent/submission.rs:256
  variant Submission:JobCancel in /tmp/.tmp6fcSaN/ironclaw/src/agent/submission.rs:262
  variant ExtensionError:FallbackFailed in /tmp/.tmp6fcSaN/ironclaw/src/extensions/mod.rs:249
  variant ChannelSetupError:Cancelled in /tmp/.tmp6fcSaN/ironclaw/src/setup/channels.rs:43

--- failure method_parameter_count_changed: pub method parameter count changed ---

Description:
A publicly-visible method now takes a different number of parameters, not counting the receiver (self) parameter.
        ref: https://doc.rust-lang.org/cargo/reference/semver.html#fn-change-arity
       impl: https://github.com/obi1kenobi/cargo-semver-checks/tree/v0.46.0/src/lints/method_parameter_count_changed.ron

Failed in:
  ironclaw::channels::wasm::WasmChannel::new now takes 6 parameters instead of 5, in /tmp/.tmp6fcSaN/ironclaw/src/channels/wasm/wrapper.rs:694
  ironclaw::tools::ToolRegistry::register_job_tools now takes 8 parameters instead of 7, in /tmp/.tmp6fcSaN/ironclaw/src/tools/registry.rs:294
  ironclaw::prelude::ToolRegistry::register_job_tools now takes 8 parameters instead of 7, in /tmp/.tmp6fcSaN/ironclaw/src/tools/registry.rs:294
  ironclaw::channels::wasm::WasmChannelLoader::new now takes 3 parameters instead of 2, in /tmp/.tmp6fcSaN/ironclaw/src/channels/wasm/loader.rs:32

--- failure trait_method_added: pub trait method added ---

Description:
A non-sealed public trait added a new method without a default implementation, which breaks downstream implementations of the trait
        ref: https://doc.rust-lang.org/cargo/reference/semver.html#trait-new-item-no-default
       impl: https://github.com/obi1kenobi/cargo-semver-checks/tree/v0.46.0/src/lints/trait_method_added.ron

Failed in:
  trait method ironclaw::db::JobStore::list_agent_jobs in file /tmp/.tmp6fcSaN/ironclaw/src/db/mod.rs:178
  trait method ironclaw::db::JobStore::agent_job_summary in file /tmp/.tmp6fcSaN/ironclaw/src/db/mod.rs:179
  trait method ironclaw::db::RoutineStore::list_all_routines in file /tmp/.tmp6fcSaN/ironclaw/src/db/mod.rs:255

Changelog

0.13.0 - 2026-03-02

Added

• (cli) add tool setup command + GitHub setup schema (#438)
• add web_fetch built-in tool (#435)
• (web) DB-backed Jobs tab + scheduler-dispatched local jobs (#436)
• (extensions) add OAuth setup UI for WASM tools + display name labels (#437)
• (bootstrap) auto-detect libsql when ironclaw.db exists (#399)
• (web) slash command autocomplete + /status /list + fix chat input locking (#404)
• (routines) deliver notifications to all installed channels (#398)
• (web) persist tool calls, restore approvals on thread switch, and UI fixes (#382)
• add IRONCLAW_BASE_DIR env var with LazyLock caching (#397)
• feat(signal) attachment upload + message tool (#375)

Fixed

• (channels) add host-based credential injection to WASM channel wrapper (#421)
• pre-validate Cloudflare tunnel token by spawning cloudflared (#446)
• batch of quick fixes (Setup wizard missing Docker auto-start guidance on macOS #417, proposal: Add clippy complexity lints to improve AI-assisted development quality #338, Add structured FallbackFailed error variant for extension install #330, Credential mappings persist after extension removal (no revoke on unregister) #358, No detection of conflicting cloudflared services (brew vs system) #419, memory embeddings warning #344) (#428)
• persist channel activation state across restarts (#432)
• init WASM runtime eagerly regardless of tools directory existence (#401)
• add TLS support for PostgreSQL connections (#363) (#427)
• scan inbound messages for leaked secrets (#433)
• use tailscale funnel --bg for proper tunnel setup (#430)
• normalize secret names to lowercase for case-insensitive matching (#413) (#431)
• persist model name to .env so dotted names survive restart (#426)
• (setup) check cloudflared binary and validate tunnel token (#424)
• (setup) validate PostgreSQL version and pgvector availability before migrations (#423)
• guard zsh compdef call to prevent error before compinit (#422)
• (telegram) remove restart button, validate token on setup (#434)
• web UI routines tab shows all routines regardless of creating channel (#391)
• Discord Ed25519 signature verification and capabilities header alias (#148) (#372)
• prevent duplicate WASM channel activation on startup (#390)

Other

• rename WasmBuildable::repo_url to source_dir (#445)
• Improve --help: add detailed about/examples/color, snapshot test (clo… (#371)
• Add automated QA: schema validator, CI matrix, Docker build, and P1 test coverage (#353)

---

This PR was generated with release-plz.