v0.1.1

Fixed

• Shadowed tools silently never registering, leaving sessions on the built-ins: per-agent installation failed with cannot get property "fs" without inject at session-start. The plugin now declares inject = ['tools', 'systemPrompt', 'fs'] and resolves the host fs service from the plugin's own rootCtx (the agent fiber chain does not carry the plugin's inject list).