This patch replaces the broken 0.18.2 npm artifact.
Runtime dependencies now use exact package versions instead of workspace protocols. CI and publication verify that these versions match their workspace packages.
The release also updates vitest to 4.1.11. This change removes GHSA-82fw-gwwq-j7x9 from the development dependency audit.
Runtime behavior, the wallet contract, passkey-kit-sdk@0.9.0, and sac-sdk@0.4.4 remain unchanged from 0.18.2.
See CHANGELOG.md for details.