feat: release SDK 1.2 workflows, tool streams and LSP

[hkimw]

SDK consumers can now compose approved command jobs into bounded workflows, reuse deterministic results and connect operator-owned tools and language servers through public contracts. The 1.2.0 release adds DAG validation, per-step grants, durable CAS checkpoints and explicit new-attempt recovery; scoped content fingerprints, TTL/LRU cache and incremental execution; portable bounded output parsing plus a fixed Node process runner; and an optional stdio LSP 3.17 bridge covering 15 SDK language features.

Seven optional exports include TypeScript declarations, eleven schemas and independent installed examples. The tool-output parser works in the browser; workflow/cache/process/LSP execution is Node-only. Synthetic tools are SDK-authored and redistributable. Actual checks use TypeScript 5.9.3 and the community language server 5.3.0 as development dependencies, leaving the SDK with zero runtime dependencies. Unversioned server diagnostics, socket transports, dynamic capabilities and server commands remain explicitly unsupported. DDS application integration is separate.

Validation:

• Local full check: 519 tests, public inventory, all declarations, schema drift and independent packed consumers passed.
• New workflow example verifies actual command jobs, cache hits, incremental invalidation, failed dependency blocking, killed-child checkpoint recovery and explicit retry without replay.
• Actual compiler TS2322 and eight real language-server features passed; all fifteen mapped features passed against an independent synthetic server.
• Browser UTF-8 fragments, masking, progress/diagnostics, unknown/final lines and cancellation passed.
• Independent JSON Schema 2020-12 validation passed for all 107 schemas and eleven runtime fixture contracts. Combined-workload performance/resource guard passed.

Security audit and vulnerability validation remain deferred under the owner's instruction. Functional contract tests and stable API status do not imply security audit or DDS product acceptance.