Provides contracts for persistent Workdir identity and Worker-bound operation sessions. Handles local, HTTP, and External providers through shared scope and capability boundaries. Providers own materialization and deletion; caller Tools do not take over those responsibilities.

Reference index

[WorkdirSession] — provider operation and close boundaries.
[WorkdirSessionRouter] — aliases, connection generations, and detach coordination.
[WorkdirToolBroker] — scope delegation and write leases for child sessions.
[checkout] — identity-validated operations and search coordinates.
[external] / [http] — typed transport, unknown outcomes, and denial reasons.
[workspace] — inventory projection without host information.