// Package exec exposes the authenticated local Exec transport, its typed action
// catalog, and process authorization lifecycle. Domain files own concrete
// request/result contracts, handlers, and substantial clients. The merged
// runtime catalog is the single discovery source for CLI help and schemas;
// executable built-ins stay behind typed handlers. Signed bearer credentials
// authorize requests before body reads and bind them to one server, agent,
// process generation, and immutable catalog.
package exec
