v0.9.4

One fix, to the fallback the automation bridge takes when $TMPDIR is too deep
to hold a socket: it could not bind at all on macOS, and on Linux it reached
for a permission change on /tmp that was never its to make.

Fixed

Automation

• The short /tmp fallback tried to make /tmp itself owner-only. The
  bridge drops to /tmp/tka-<pid> when $TMPDIR would overflow sun_path,
  and then tightened that path's parent. On macOS it could therefore never
  bind: /tmp is a symlink, which the check rejects by design, the target
  not being what it would be protecting. On Linux the same call chmods a
  1777 /tmp to 0700 — EPERM for a normal user, and a silent success,
  for every other process on the machine, for one running as root. Only the
  bridge's own descriptor directory is tightened now; the per-process socket
  directory underneath is still created 0700.

Full Changelog: v0.9.3...v0.9.4