build(trace): bump cctrace pin to 0.16.0

- tunnel-by-default capture scope: external hosts (npm, apt, gh) pass
  through as opaque byte-counted tunnels instead of being decrypted and
  stored — fixes the trace-bloat field report (52MB npm tarball, 45%
  external traffic in a 121MB trace)
- no forged certs for non-first-party hosts: apt/java/cert-pinning
  tools no longer risk TLS failure through the proxy
- binary-safe response capture; first-party capture unchanged
- verified: 0.16.0 compiles clean via the Dockerfile recipe
  (bun build --compile src/cli.ts), --no-open and -- grammar intact

Close #432

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

Author: lroolle

Dockerfile

@@ -230,7 +230,7 @@ RUN --mount=type=cache,target=/home/deva/.npm,uid=${DEVA_UID},gid=${DEVA_GID},sh
 
 # cctrace moves fast: own ARG + layer, declared here so a pin bump
 # rebuilds only this layer, not the npm agent layer above.
-ARG CCTRACE_VERSION=0.11.0
+ARG CCTRACE_VERSION=0.16.0
 LABEL org.opencontainers.image.cctrace_version=${CCTRACE_VERSION}
 
 RUN --mount=type=cache,target=/home/deva/.npm,uid=${DEVA_UID},gid=${DEVA_GID},sharing=locked \

Dockerfile.rust

@@ -147,7 +147,7 @@ RUN --mount=type=cache,target=/home/deva/.npm,uid=${DEVA_UID},gid=${DEVA_GID},sh
 
 # cctrace moves fast: own ARG + layer, declared last among the tool layers
 # so a pin bump rebuilds only this, not npm tooling or playwright above.
-ARG CCTRACE_VERSION=0.11.0
+ARG CCTRACE_VERSION=0.16.0
 LABEL org.opencontainers.image.cctrace_version=${CCTRACE_VERSION}
 
 RUN --mount=type=cache,target=/home/deva/.npm,uid=${DEVA_UID},gid=${DEVA_GID},sharing=locked \

Makefile

@@ -31,7 +31,7 @@ DELTA_VERSION ?= 0.19.2
 TMUX_VERSION ?= 3.6a
 TMUX_SHA256 ?= b6d8d9c76585db8ef5fa00d4931902fa4b8cbe8166f528f44fc403961a3f3759
 CLAUDE_CODE_VERSION ?= 2.1.143
-CCTRACE_VERSION ?= 0.11.0
+CCTRACE_VERSION ?= 0.16.0
 CODEX_VERSION ?= 0.131.0
 GEMINI_CLI_VERSION ?= 0.42.0
 GROK_CLI_VERSION ?= 0.2.93

versions.env

@@ -9,7 +9,7 @@ TMUX_VERSION=3.6a
 TMUX_SHA256=b6d8d9c76585db8ef5fa00d4931902fa4b8cbe8166f528f44fc403961a3f3759
 
 CLAUDE_CODE_VERSION=2.1.143
-CCTRACE_VERSION=0.11.0
+CCTRACE_VERSION=0.16.0
 CODEX_VERSION=0.131.0
 GEMINI_CLI_VERSION=0.42.0
 GROK_CLI_VERSION=0.2.93