v0.1.0

First release. Auto-repairs an invalid messages array after a tool-dispatch crash (orphaned tool_calls / tool messages), preventing 400 INVALID_REQUEST session lock-ups.

• Three-layer defense: agent/pre-step prevention, agent/request-error healing, llm/stream sanitizing.
• 40 tests, including real cordis + real Session integration.
• Install: dsh plugin --profile web add github:Leeminjing/dsh-messages-sanitizer