chore: release v0.16.0

[github-actions]

🤖 New release

• ironclaw: 0.15.0 -> 0.16.0 (⚠ API breaking changes)

⚠ ironclaw breaking changes

--- failure auto_trait_impl_removed: auto trait no longer implemented ---

Description:
A public type has stopped implementing one or more auto traits. This can break downstream code that depends on the traits being implemented.
        ref: https://doc.rust-lang.org/reference/special-types-and-traits.html#auto-traits
       impl: https://github.com/obi1kenobi/cargo-semver-checks/tree/v0.46.0/src/lints/auto_trait_impl_removed.ron

Failed in:
  type JobContext is no longer UnwindSafe, in /tmp/.tmpPTC5yx/ironclaw/src/context/state.rs:99
  type JobContext is no longer RefUnwindSafe, in /tmp/.tmpPTC5yx/ironclaw/src/context/state.rs:99
  type JobContext is no longer UnwindSafe, in /tmp/.tmpPTC5yx/ironclaw/src/context/state.rs:99
  type JobContext is no longer RefUnwindSafe, in /tmp/.tmpPTC5yx/ironclaw/src/context/state.rs:99

--- failure constructible_struct_adds_field: externally-constructible struct adds field ---

Description:
A pub struct constructible with a struct literal has a new pub field. Existing struct literals must be updated to include the new field.
        ref: https://doc.rust-lang.org/reference/expressions/struct-expr.html
       impl: https://github.com/obi1kenobi/cargo-semver-checks/tree/v0.46.0/src/lints/constructible_struct_adds_field.ron

Failed in:
  field StoredWasmTool.wit_version in /tmp/.tmpPTC5yx/ironclaw/src/tools/wasm/storage.rs:103
  field SmartRoutingConfig.domain_keywords in /tmp/.tmpPTC5yx/ironclaw/src/llm/smart_routing.rs:651
  field SmartRoutingConfig.domain_keywords in /tmp/.tmpPTC5yx/ironclaw/src/llm/smart_routing.rs:651
  field StoreToolParams.wit_version in /tmp/.tmpPTC5yx/ironclaw/src/tools/wasm/storage.rs:248
  field AppComponents.recording_handle in /tmp/.tmpPTC5yx/ironclaw/src/app.rs:51
  field WebhookSchema.hmac_secret_name in /tmp/.tmpPTC5yx/ironclaw/src/channels/wasm/schema.rs:304
  field ChannelCapabilitiesFile.version in /tmp/.tmpPTC5yx/ironclaw/src/channels/wasm/schema.rs:56
  field ChannelCapabilitiesFile.wit_version in /tmp/.tmpPTC5yx/ironclaw/src/channels/wasm/schema.rs:60
  field JobContext.http_interceptor in /tmp/.tmpPTC5yx/ironclaw/src/context/state.rs:158
  field JobContext.tool_output_stash in /tmp/.tmpPTC5yx/ironclaw/src/context/state.rs:166
  field JobContext.http_interceptor in /tmp/.tmpPTC5yx/ironclaw/src/context/state.rs:158
  field JobContext.tool_output_stash in /tmp/.tmpPTC5yx/ironclaw/src/context/state.rs:166
  field CapabilitiesFile.version in /tmp/.tmpPTC5yx/ironclaw/src/tools/wasm/capabilities_schema.rs:46
  field CapabilitiesFile.wit_version in /tmp/.tmpPTC5yx/ironclaw/src/tools/wasm/capabilities_schema.rs:50
  field AgentDeps.http_interceptor in /tmp/.tmpPTC5yx/ironclaw/src/agent/agent_loop.rs:79

--- failure enum_variant_added: enum variant added on exhaustive enum ---

Description:
A publicly-visible enum without #[non_exhaustive] has a new variant.
        ref: https://doc.rust-lang.org/cargo/reference/semver.html#enum-variant-new
       impl: https://github.com/obi1kenobi/cargo-semver-checks/tree/v0.46.0/src/lints/enum_variant_added.ron

Failed in:
  variant WasmChannelError:IncompatibleWitVersion in /tmp/.tmpPTC5yx/ironclaw/src/channels/wasm/error.rs:85
  variant WasmLoadError:WitVersionMismatch in /tmp/.tmpPTC5yx/ironclaw/src/tools/wasm/loader.rs:77

--- failure struct_missing: pub struct removed or renamed ---

Description:
A publicly-visible struct cannot be imported by its prior path. A `pub use` may have been removed, or the struct itself may have been renamed or removed entirely.
        ref: https://doc.rust-lang.org/cargo/reference/semver.html#item-remove
       impl: https://github.com/obi1kenobi/cargo-semver-checks/tree/v0.46.0/src/lints/struct_missing.ron

Failed in:
  struct ironclaw::tools::builtin::WebFetchTool, previously in file /tmp/.tmpwcuVfS/ironclaw/src/tools/builtin/web_fetch.rs:58

--- failure struct_pub_field_missing: pub struct's pub field removed or renamed ---

Description:
A publicly-visible struct has at least one public field that is no longer available under its prior name. It may have been renamed or removed entirely.
        ref: https://doc.rust-lang.org/cargo/reference/semver.html#item-remove
       impl: https://github.com/obi1kenobi/cargo-semver-checks/tree/v0.46.0/src/lints/struct_pub_field_missing.ron

Failed in:
  field simple_max_chars of struct SmartRoutingConfig, previously in file /tmp/.tmpwcuVfS/ironclaw/src/llm/smart_routing.rs:39
  field complex_min_chars of struct SmartRoutingConfig, previously in file /tmp/.tmpwcuVfS/ironclaw/src/llm/smart_routing.rs:41
  field simple_max_chars of struct SmartRoutingConfig, previously in file /tmp/.tmpwcuVfS/ironclaw/src/llm/smart_routing.rs:39
  field complex_min_chars of struct SmartRoutingConfig, previously in file /tmp/.tmpwcuVfS/ironclaw/src/llm/smart_routing.rs:41

Changelog

0.16.0 - 2026-03-06

Added

• (e2e) extensions tab tests, CI parallelization, and 3 production bug fixes (#584)
• WASM extension versioning with WIT compat checks (#592)
• Add HMAC-SHA256 webhook signature validation for Slack (#588)
• restart (#531)
• merge http/web_fetch tools, add tool output stash for large responses (#578)
• integrate 13-dimension complexity scorer into smart routing (#529)

Fixed

• (llm) fix reasoning model response parsing bugs (#564) (#580)
• (ci) fix three coverage workflow failures (#597)
• Telegram channel accepts group messages from all users if owner_… (#590)
• (ci) anchor coverage/ gitignore rule to repo root (#591)
• (security) use OsRng for all security-critical key and token generation (#519)
• prevent concurrent memory hygiene passes and Windows file lock errors (#535)
• sort tool_definitions() for deterministic LLM tool ordering (#582)
• (ci) persist all cargo-llvm-cov env vars for E2E coverage (#559)

Other

• (llm) complete response cache — set_model invalidation, stats logging, sync mutex (#290)
• add 29 E2E trace tests for issues test(e2e): add trace tests for agent/worker.rs core execution paths (29% → ~60% coverage) #571-575 (#593)
• add 26 tests for multi-thread safety, db CRUD, concurrency, errors (#442)
• update WASM artifact SHA256 checksums [skip ci] (#560)
• add WIT compatibility tests for WASM extensions (#586)
• Trajectory benchmarks and e2e trace test rig (#553)

---

This PR was generated with release-plz.