
Security News
PHP Foundation Says Chainguard Broke Security Embargo Ahead of Emergency Patches
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.
@dsh-std/tool
Advanced tools
English | 中文
Runtime discovery contract and local same-process execution seam for model-facing tools.
A Tool resource declares a title, localized titles, and a catalog description. Runtime-owned status reports whether the tool is available or unavailable. An available tool may project its resolved model description and inert JSON Schema parameters; an unavailable tool may explain why it cannot be used.
The static extension records its component and facet owner. Status answers what the active runtime can expose for the current composition. This separation supports progressive disclosure without claiming that every installed tool is active or sending executable validators across endpoints.
An activated facet may publish a ToolHandler beside its Tool resource. The handler resolves a portable executable definition which a same-process adapter can map into its native tool registry. Execution receives host-owned facilities for model capabilities, image validation and attachments, observed workspace reads, policy-checked workspace writes, nested content deferral, and (for an override) delegation to the original tool. These facilities preserve the host's policy and durable-log semantics instead of reimplementing them in a component.
This is deliberately not a cross-runtime invocation protocol: functions and byte buffers remain local to one process. Streaming, approval, tool-call transport, and transcript ownership remain runtime concerns.
v1alpha1 does not define a cross-runtime tool invocation operation; executable handlers are local activation values.FAQs
Unknown package
The npm package @dsh-std/tool receives a total of 0 weekly downloads. As such, @dsh-std/tool popularity was classified as not popular.
We found that @dsh-std/tool demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.

Security News
PHP releases emergency patches for two critical RCE vulnerabilities as agencies urge organizations to take unpatched sites offline.

Threat Research
/Security News
A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker, spreading malware that steals cloud credentials, developer secrets, and AI provider keys.