chore: release v0.2.16

[onsails]

🤖 New release

• right-agent: 0.2.15 -> 0.2.16
• right-bot: 0.2.15 -> 0.2.16
• right: 0.2.15 -> 0.2.16
• right-agent-config: 0.2.15 -> 0.2.16
• right-config: 0.2.15 -> 0.2.16
• right-db: 0.2.15 -> 0.2.16
• right-mcp: 0.2.15 -> 0.2.16
• right-process: 0.2.15 -> 0.2.16
• right-openshell: 0.2.15 -> 0.2.16
• right-platform-knobs: 0.2.15 -> 0.2.16
• right-runtime-state: 0.2.15 -> 0.2.16
• right-codegen: 0.2.15 -> 0.2.16
• right-prompt-safety: 0.2.15 -> 0.2.16
• right-memory: 0.2.15 -> 0.2.16
• right-stt: 0.2.15 -> 0.2.16
• right-ui: 0.2.15 -> 0.2.16
• right-lifecycle: 0.2.15 -> 0.2.16
• right-dashboard: 0.2.15 -> 0.2.16
• right-platform-store: 0.2.15 -> 0.2.16

Changelog

right

[0.2.16] - 2026-05-25

• The Telegram Mini App dashboard ships its v2 surface — overview, activity log, health, identity, skills inventory, usage spend charts (daily/weekly/monthly), and learning metrics in a single fullscreen app. Learned skills can be pinned or unpinned from the Skills tab to protect them from automatic curator transitions.
• The skill-learning pipeline is rebuilt: a Haiku prefilter classifies each conversation as Skip, PatchExisting, or CreateNew, directing a probe-writer that can actually create or patch skills after suitable turns. The curator gains a multi-signal trigger — cost spike against a 14-day P50 baseline, accumulated skill changes, or a 168-hour time fallback — and all skill lifecycle state (provenance, use counters, active/stale/archived status, pin flag) moves to SQLite. The right config wizard gains prompts for the new prefilter, probe-writer, and curator knobs.
• The bundled right-composio skill now loads before every Composio tool call. It was listed as available but never triggered across 1,060 sessions, causing 300–500K token context bloat per session (~$700/week wasted on cache writes).
• When the bot stops, active foreground turns are handed off to the background instead of dropped. Cron job interruptions are persisted to the database, and pending deliveries are flushed before exit.
• Users see an immediate "working" indicator in Telegram as soon as the agent receives a prompt. When replying to a specific message, the quoted text is forwarded to the agent.
• CLI tools installed in the sandbox via npm globals or other user installers are now reliably on PATH for all Claude invocations, including background and review runs. Environment setup uses atomic writes to prevent races with concurrent sessions.
• MCP OAuth refresh requests are cancelled when a server reconnects, closing a stale-token race. Token input parsing now correctly distinguishes API keys containing colons (e.g. sk_live_abc:def) from Header: value entries.

---

This PR was generated with release-plz.

[Copilot]

Pull request overview

This release PR bumps the Rust workspace and lockfile packages from 0.2.15 to 0.2.16 and prepends the generated release notes for v0.2.16.

Changes:

• Updated the workspace package version to 0.2.16.
• Refreshed Cargo.lock package versions for all workspace crates.
• Added the v0.2.16 changelog entry.

Reviewed changes

Copilot reviewed 2 out of 3 changed files in this pull request and generated no comments.

File	Description
CHANGELOG.md	Adds the generated v0.2.16 release notes.
Cargo.toml	Bumps the shared workspace version to 0.2.16.
Cargo.lock	Updates workspace package lockfile versions to 0.2.16.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.