The capability family spans the canonical executor seam, its implementations, the shared shell environment, and the model-facing tools. All are product packages.

Package	Role	ctx key
`bash/`	Defines the executor contract shared by implementations and consumers.	`ctx.bash`
`bash-local/`	Executes commands through the local `subprocess` service.	(registers `ctx.bash`)
`bash-sandbox/`	Applies the configured `sandbox` backend before local execution.	(registers `ctx.bash`)
`pwsh-local/`	Executes PowerShell commands with Windows-specific process behavior.	(registers `ctx.bash`)
`bash-env/`	Provides the managed `DSH_*` environment shared by shell tools.	`ctx.bashEnv`
`tool-bash/`	Exposes Bash execution and background-task integration to the model.	(registers on `ctx.tools`)
`tool-pwsh/`	Exposes PowerShell execution to the model.	(registers on `ctx.tools`)

A leaf cordis.yml selects one executor implementation and the model-facing tools it needs. A sandboxed composition also selects a ctx.sandbox provider; the ACP example shows one complete wiring.