Ships everything accumulated since 0.16.0: the executor stdin channel and
message-never-in-argv fixes, -- positional guards, process-group kills and
bounded drain across all runners, the hub ref pinning, protocol hygiene
(from_user, on_partial role, version diagnostics), and the new
malformed-input robustness for the Python executors (parse_event no longer
crashes the runner; permission requests emit a wire-valid input object).
The Go SDK ships separately (sdk/go/v*).