Milpa Command v0.1.0
The Command-as-atom core of Milpa: one surface-agnostic Operation value object — schema of inputs + handler + metadata — plus the CommandProvider and SurfaceProjector contracts. One operation, N surfaces: CLI, MCP, HTTP, web, TUI.
Modules declare the capabilities they provide and require, expose tools an agent can invoke, and gate mutating actions behind verification. The contract loop that runs through the whole system:
plugin → capability → tool → verification → event → result