v0.1.4

What's Changed

Breaking (CLI): on-demand package fetching is now opt-in. When a package is not installed locally or cached, the CLI exits with an error instead of silently running npm install — pass --install to fetch it on demand.

• On-demand installs now run with --ignore-scripts, so lifecycle scripts of fetched packages never execute
• Unknown CLI options are rejected with usage instead of being ignored
• New README "Security" section documenting the fetch behavior, cache location (~/.cache/agent-readable-ts, override with AGENT_READABLE_CACHE), and script policy

These changes address supply-chain warnings flagged by socket.dev for runtime package downloads.

Full Changelog: v0.1.3...v0.1.4

Full Changelog: v0.1.3...v0.1.4