feat: release SDK 1.2 workflows, tool streams and LSP

API_SUPPORT.json

@@ -1,6 +1,6 @@
 {
   "schemaVersion": 1,
-  "sdkVersion": "1.1.0",
+  "sdkVersion": "1.2.0",
   "releaseStatus": "stable",
   "pluginPeerRange": ">=1.0.0 <2.0.0",
   "policy": "docs/SUPPORT_POLICY.md",
@@ -814,6 +814,36 @@
       ],
       "declarationsSha256": "8a18db17f11049dcaace7bd98aae453b572ed126689f1f88fd4b8c8bd57582c6"
     },
+    {
+      "entry": "./lsp-node",
+      "stability": "stable",
+      "availability": "optional",
+      "environments": [
+        "node"
+      ],
+      "runtimeNames": [
+        "LSP_LIMITS",
+        "createLspBridge",
+        "createLspFrameDecoder",
+        "encodeLspMessage",
+        "lspCapabilityMatrix",
+        "parseLspCapabilityMatrix"
+      ],
+      "declarationNames": [
+        "LSP_LIMITS",
+        "LspBridge",
+        "LspCapabilityMatrix",
+        "LspCloseReceipt",
+        "LspFrameDecoder",
+        "LspInspection",
+        "createLspBridge",
+        "createLspFrameDecoder",
+        "encodeLspMessage",
+        "lspCapabilityMatrix",
+        "parseLspCapabilityMatrix"
+      ],
+      "declarationsSha256": "396e9316a0d718964dbd3ae158e328b5da0320098f1ffc171d1710ea86650e69"
+    },
     {
       "entry": "./package.json",
       "stability": "metadata",
@@ -1002,7 +1032,7 @@
       "declarationNames": [
         "SCHEMAS"
       ],
-      "declarationsSha256": "259961a4a30f11c661bafd71e3e8314012c13d8a179294af09558df5606e580a"
+      "declarationsSha256": "5d1672a66f8d8d5ba8c6acd49e89cbaf13c12585dcedb81f5ec402567d949f65"
     },
     {
       "entry": "./secrets",
@@ -1161,6 +1191,59 @@
       ],
       "declarationsSha256": "3d67f76fc0f5003d57b931d8104079d17e31cf5c30c8369085357377e734440b"
     },
+    {
+      "entry": "./tool-streams",
+      "stability": "stable",
+      "availability": "optional",
+      "environments": [
+        "node",
+        "browser"
+      ],
+      "runtimeNames": [
+        "TOOL_STREAM_LIMITS",
+        "createJobToolEventSink",
+        "createToolStreamParser",
+        "parseToolStreamEvent",
+        "parseTypeScriptDiagnosticLine"
+      ],
+      "declarationNames": [
+        "TOOL_STREAM_LIMITS",
+        "ToolStreamData",
+        "ToolStreamEvent",
+        "ToolStreamParser",
+        "ToolStreamStats",
+        "createJobToolEventSink",
+        "createToolStreamParser",
+        "parseToolStreamEvent",
+        "parseTypeScriptDiagnosticLine"
+      ],
+      "declarationsSha256": "9ae25b6f223e610f183fdeaf7c592d6d6f75d08065fe19ab37c90f227a5b7cb2"
+    },
+    {
+      "entry": "./tool-streams-node",
+      "stability": "stable",
+      "availability": "optional",
+      "environments": [
+        "node"
+      ],
+      "runtimeNames": [
+        "TOOL_RUNNER_LIMITS",
+        "createToolRunner",
+        "hashToolFile",
+        "parseToolRegistration"
+      ],
+      "declarationNames": [
+        "TOOL_RUNNER_LIMITS",
+        "ToolRegistration",
+        "ToolRunReceipt",
+        "ToolRunner",
+        "TrustedProcessDefinition",
+        "createToolRunner",
+        "hashToolFile",
+        "parseToolRegistration"
+      ],
+      "declarationsSha256": "1d605181a25a7dce2b2e667038601cdfeb7a1ae40a5b476ba2de7a8cdb3a6bfb"
+    },
     {
       "entry": "./transfer-queue",
       "stability": "stable",
@@ -1368,6 +1451,117 @@
       ],
       "declarationsSha256": "7027bd158d8e2e105f3999f1137930468dde63d729c999eb6712c2bd69bc40fe"
     },
+    {
+      "entry": "./workflow-cache",
+      "stability": "stable",
+      "availability": "optional",
+      "environments": [
+        "node"
+      ],
+      "runtimeNames": [
+        "WORKFLOW_CACHE_LIMITS",
+        "createMemoryWorkflowCacheStore",
+        "createWorkflowCache",
+        "fingerprintWorkflowInputs",
+        "parseWorkflowCacheEntry",
+        "parseWorkflowFingerprint"
+      ],
+      "declarationNames": [
+        "WORKFLOW_CACHE_LIMITS",
+        "WorkflowCache",
+        "WorkflowCacheEntry",
+        "WorkflowCachePolicy",
+        "WorkflowCacheResult",
+        "WorkflowCacheStore",
+        "WorkflowFingerprint",
+        "WorkflowFingerprintInput",
+        "createMemoryWorkflowCacheStore",
+        "createWorkflowCache",
+        "fingerprintWorkflowInputs",
+        "parseWorkflowCacheEntry",
+        "parseWorkflowFingerprint"
+      ],
+      "declarationsSha256": "32415b84477e4e33fefd80a549a5880b2f508558932045b0bae8c16ed8839ac4"
+    },
+    {
+      "entry": "./workflow-cache-node",
+      "stability": "stable",
+      "availability": "optional",
+      "environments": [
+        "node"
+      ],
+      "runtimeNames": [
+        "createNodeWorkflowCacheStore"
+      ],
+      "declarationNames": [
+        "NodeWorkflowCacheStore",
+        "createNodeWorkflowCacheStore"
+      ],
+      "declarationsSha256": "84dc99a6019529e6462c2006c9b096affb9837ab7876ce502280a15fd61b5c0e"
+    },
+    {
+      "entry": "./workflows",
+      "stability": "stable",
+      "availability": "optional",
+      "environments": [
+        "node"
+      ],
+      "runtimeNames": [
+        "WORKFLOW_LIMITS",
+        "createCommandJobExecutor",
+        "createMemoryWorkflowStore",
+        "createWorkflowRunner",
+        "parseWorkflowDefinition",
+        "parseWorkflowRecord",
+        "prepareWorkflowPlan",
+        "recoverWorkflowRecord"
+      ],
+      "declarationNames": [
+        "WORKFLOW_LIMITS",
+        "WorkflowApproval",
+        "WorkflowAuthorization",
+        "WorkflowBinding",
+        "WorkflowCacheEvidence",
+        "WorkflowCommand",
+        "WorkflowDefinition",
+        "WorkflowExecutor",
+        "WorkflowPlan",
+        "WorkflowRecord",
+        "WorkflowRunner",
+        "WorkflowScope",
+        "WorkflowState",
+        "WorkflowStep",
+        "WorkflowStepRecord",
+        "WorkflowStore",
+        "createCommandJobExecutor",
+        "createMemoryWorkflowStore",
+        "createWorkflowRunner",
+        "parseWorkflowDefinition",
+        "parseWorkflowRecord",
+        "prepareWorkflowPlan",
+        "recoverWorkflowRecord"
+      ],
+      "declarationsSha256": "869ff4713bf1351d08feb14816160e2a0636b88662eebc01fe8b5f2126aabf96"
+    },
+    {
+      "entry": "./workflows-node",
+      "stability": "stable",
+      "availability": "optional",
+      "environments": [
+        "node"
+      ],
+      "runtimeNames": [
+        "createNodeWorkflowStore"
+      ],
+      "declarationNames": [
+        "NodeWorkflowStore",
+        "OwnedStoreCleanup",
+        "OwnedWorkflowStoreInspection",
+        "OwnedWorkflowStoreOptions",
+        "createNodeWorkflowStore"
+      ],
+      "declarationsSha256": "354890d8ee31bca7833f1e422975ffc4e257ac9e990908418ca2bfb0544c6bfc"
+    },
     {
       "entry": "./workspace-client",
       "stability": "stable",

CHANGELOG.md

@@ -1,5 +1,14 @@
 # Changelog
 
+## 1.2.0 — 2026-10-05
+
+- Add bounded command DAGs with typed output bindings, exact plan approval, per-step grants, existing command-job integration and durable CAS checkpoints. Explicit restart recovery and retries create new attempts without automatic replay.
+- Add opt-in deterministic content fingerprints, scoped TTL/LRU caches, single-flight fills, current authorization, hash verification and owned-store recovery. Cache reuse has distinct evidence and no fresh job ID.
+- Add portable JSONL/text stream parsing with fragmented UTF-8, diagnostics/progress/log correlation, backpressure, literal masking and bounded output. The optional Node runner uses fixed operator-pinned tools and direct-child cleanup.
+- Add an optional stdio LSP 3.17 subset: 15 mapped language features, UTF-16 snapshots, cancellation/stale results, versioned diagnostics, conditional edit proposals and explicit unsupported capabilities.
+- Include independent installed workflow/tool/LSP examples, browser stream examples, actual TypeScript 5.9.3 and language-server 5.3.0 checks, seven public exports and eleven schemas. The actual server's unversioned diagnostics remain unsupported.
+- Preserve existing 1.x API/protocol behavior and historical archives. Security audit and vulnerability validation remain deferred; this release does not claim DDS product integration or an execution sandbox.
+
 ## 1.1.0 — 2026-10-05
 
 - Add exact dependency tree locks, deterministic offline bundles, LICENSE/NOTICE inventories and CycloneDX 1.6 SBOMs. Install only into a new directory, without scripts, downloads or permission inheritance.

PUBLIC_SURFACE.json

@@ -31,6 +31,7 @@
     "docs/LANGUAGE_EDITING.md",
     "docs/LICENSING.md",
     "docs/LOCALIZATION.md",
+    "docs/LSP.md",
     "docs/OBSERVATION.md",
     "docs/PROJECTS.md",
     "docs/PROJECT_QUERIES.md",
@@ -45,9 +46,11 @@
     "docs/SETTINGS.md",
     "docs/SUPPORT_POLICY.md",
     "docs/THEMES.md",
+    "docs/TOOL_STREAMS.md",
     "docs/TRANSFER_QUEUE.md",
     "docs/UPLOADS.md",
     "docs/VERIFYING.md",
+    "docs/WORKFLOWS.md",
     "docs/WORKSPACES.md",
     "docs/WORKSPACE_EDITS.md",
     "docs/api.md",
@@ -106,6 +109,8 @@
     "examples/language-editing/LICENSE",
     "examples/language-editing/plugin.mjs",
     "examples/language-editing/run.mjs",
+    "examples/lsp/run.mjs",
+    "examples/lsp/synthetic-server.mjs",
     "examples/project-query/run.mjs",
     "examples/project-session/run.mjs",
     "examples/project-tools/browser.html",
@@ -125,6 +130,9 @@
     "examples/release-verification/README.md",
     "examples/release-verification/run.mjs",
     "examples/stored-artifacts/run.mjs",
+    "examples/tool-streams-browser/browser.html",
+    "examples/tool-streams-browser/browser.mjs",
+    "examples/tool-streams-browser/serve.mjs",
     "examples/transfer-queue/browser.html",
     "examples/transfer-queue/browser.mjs",
     "examples/transfer-queue/host.mjs",
@@ -141,6 +149,11 @@
     "examples/user-workspace/project/design.sv",
     "examples/user-workspace/server.mjs",
     "examples/user-workspace/tool.mjs",
+    "examples/workflow-tools/run.mjs",
+    "examples/workflow-tools/synthetic-tool.mjs",
+    "examples/workflows/fixture.mjs",
+    "examples/workflows/interrupted-child.mjs",
+    "examples/workflows/run.mjs",
     "examples/workspace-edits/LICENSE",
     "examples/workspace-edits/child.mjs",
     "examples/workspace-edits/plugin.mjs",
@@ -191,6 +204,8 @@
     "schemas/language-snippet.schema.json",
     "schemas/locale-catalog.schema.json",
     "schemas/localized-message.schema.json",
+    "schemas/lsp-capability-matrix.schema.json",
+    "schemas/lsp-close-receipt.schema.json",
     "schemas/manifest.schema.json",
     "schemas/memory-job-snapshot.schema.json",
     "schemas/plugin-bundle.schema.json",
@@ -224,8 +239,12 @@
     "schemas/stored-job.schema.json",
     "schemas/test-trace.schema.json",
     "schemas/theme.schema.json",
+    "schemas/tool-registration.schema.json",
+    "schemas/tool-run-receipt.schema.json",
+    "schemas/tool-stream-event.schema.json",
     "schemas/transfer-queue-options.schema.json",
     "schemas/transfer-snapshot.schema.json",
+    "schemas/trusted-process-definition.schema.json",
     "schemas/upload-capabilities.schema.json",
     "schemas/upload-chunk.schema.json",
     "schemas/upload-reference.schema.json",
@@ -234,6 +253,11 @@
     "schemas/upstream-candidate.schema.json",
     "schemas/upstream-manifest.schema.json",
     "schemas/upstream-snapshot.schema.json",
+    "schemas/workflow-cache-entry.schema.json",
+    "schemas/workflow-definition.schema.json",
+    "schemas/workflow-fingerprint.schema.json",
+    "schemas/workflow-plan.schema.json",
+    "schemas/workflow-record.schema.json",
     "schemas/workspace-conditional-file.schema.json",
     "schemas/workspace-edit-preview.schema.json",
     "schemas/workspace-edit-receipt.schema.json",
@@ -320,9 +344,13 @@
     "src/localization-schemas.mjs",
     "src/localization.d.mts",
     "src/localization.mjs",
+    "src/lsp-node.d.mts",
+    "src/lsp-node.mjs",
+    "src/lsp-transport-node.mjs",
     "src/node-project-context.mjs",
     "src/node-store-context.mjs",
     "src/node-workspace-context.mjs",
+    "src/owned-json-store-node.mjs",
     "src/patterns.mjs",
     "src/project-patterns.mjs",
     "src/project-query-node.d.mts",
@@ -364,11 +392,16 @@
     "src/text-edits.mjs",
     "src/themes.d.mts",
     "src/themes.mjs",
+    "src/tool-streams-node.d.mts",
+    "src/tool-streams-node.mjs",
+    "src/tool-streams.d.mts",
+    "src/tool-streams.mjs",
     "src/transfer-queue-contracts.mjs",
     "src/transfer-queue-schemas.mjs",
     "src/transfer-queue.d.mts",
     "src/transfer-queue.mjs",
     "src/transfer-transient.mjs",
+    "src/trusted-process-node.mjs",
     "src/updates-node.d.mts",
     "src/updates-node.mjs",
     "src/updates.d.mts",
@@ -386,6 +419,16 @@
     "src/upstream.d.mts",
     "src/upstream.mjs",
     "src/version.mjs",
+    "src/workflow-cache-node.d.mts",
+    "src/workflow-cache-node.mjs",
+    "src/workflow-cache.d.mts",
+    "src/workflow-cache.mjs",
+    "src/workflow-internals.mjs",
+    "src/workflow-schemas.mjs",
+    "src/workflows-node.d.mts",
+    "src/workflows-node.mjs",
+    "src/workflows.d.mts",
+    "src/workflows.mjs",
     "src/workspace-client.d.mts",
     "src/workspace-client.mjs",
     "src/workspace-edit-contracts.mjs",