feat(mcp)!: Add an in-process tool server

.config/jp/tools/src/bash_tests.rs

@@ -563,78 +563,3 @@ fn a_successful_run_still_reports_its_exit_code() {
          <status>0</status>\n</CommandOutput>\n```"
     );
 }
-
-/// The install script's whole point: a base image without python gets it, and
-/// the built image is what the commands then run in.
-///
-/// Also covers the `USER` round-trip — the script installs as root, and
-/// `python3 -c` runs as `nonroot` afterwards, which only works if the restore
-/// resolved to a user the base image actually defines.
-///
-/// Needs a container runtime and network access for the package install.
-/// The first run builds; later runs hit the cached tag and take about as long
-/// as any other call.
-#[test]
-#[ignore = "builds a real image"]
-fn an_install_script_adds_a_tool_the_base_image_lacks() {
-    let dir = workspace();
-    let plan = Plan {
-        image: DEFAULT_IMAGE.to_owned(),
-        install: Some(Install {
-            script: "apk add --no-cache python3".to_owned(),
-            run_as: DEFAULT_RUN_AS.to_owned(),
-        }),
-        mounts: vec![],
-        envs: vec![],
-        script: "set -euo pipefail\npython3 -c 'print(1 + 1)'\nid -un\n".to_owned(),
-    };
-    let runtime = detect().expect("a container runtime must be installed");
-
-    let content = execute(dir.path(), runtime, &plan, &DuctProcessRunner)
-        .unwrap()
-        .unwrap_content();
-
-    assert_eq!(
-        content,
-        "```xml\n<CommandOutput>\n  <stdout>2\nnonroot</stdout>\n  \
-         <status>0</status>\n</CommandOutput>\n```"
-    );
-}
-
-/// Read-only mounts are what keep this tool from being able to replace the
-/// workspace-editing tools, so it is worth proving against a real runtime: a
-/// runtime that ignored `:ro` would drop the guarantee silently.
-///
-/// Runs against [`DEFAULT_IMAGE`], so it also covers the two things about an
-/// image that this tool depends on: that `bash` is present, and that no
-/// `ENTRYPOINT` swallows the `bash -c` invocation.
-///
-/// Needs a container runtime that is allowed to share the temp directory
-/// (Docker Desktop restricts which host paths it will bind-mount).
-#[test]
-#[ignore = "starts a real container"]
-fn a_mounted_path_is_read_only_in_the_container() {
-    let dir = workspace();
-    let plan = Plan {
-        image: DEFAULT_IMAGE.to_owned(),
-        install: None,
-        mounts: vec![(
-            dir.path().join("crates").canonicalize_utf8().unwrap(),
-            "/workspace/crates".to_owned(),
-        )],
-        envs: vec![],
-        script: "set -euo pipefail\necho written > /workspace/crates/lib.rs\n".to_owned(),
-    };
-    let runtime = detect().expect("a container runtime must be installed");
-
-    let content = execute(dir.path(), runtime, &plan, &DuctProcessRunner)
-        .unwrap()
-        .unwrap_content();
-
-    // Under `set -e` bash exits 1 when the redirect cannot open the file.
-    assert!(content.contains("<status>1</status>"), "got: {content}");
-    assert_eq!(
-        std::fs::read_to_string(dir.path().join("crates/lib.rs")).unwrap(),
-        ""
-    );
-}

.config/supply-chain/audits.toml

@@ -26,6 +26,11 @@ who = "Jean Mertz <git@jeanmertz.com>"
 criteria = "safe-to-deploy"
 version = "0.7.3"
 
+[[audits.chacha20]]
+who = "Jean Mertz <git@jeanmertz.com>"
+criteria = "safe-to-deploy"
+delta = "0.10.0 -> 0.10.2"
+
 [[audits.comfy-table]]
 who = "Jean Mertz <git@jeanmertz.com>"
 criteria = "safe-to-deploy"
@@ -46,6 +51,11 @@ who = "Jean Mertz <git@jeanmertz.com>"
 criteria = "safe-to-deploy"
 delta = "0.2.14 -> 0.3.5"
 
+[[audits.cpufeatures]]
+who = "Jean Mertz <git@jeanmertz.com>"
+criteria = "safe-to-deploy"
+delta = "0.3.0 -> 0.3.1"
+
 [[audits.datetime_literal]]
 who = "Jean Mertz <git@jeanmertz.com>"
 criteria = "safe-to-deploy"
@@ -81,6 +91,11 @@ who = "Jean Mertz <git@jeanmertz.com>"
 criteria = "safe-to-deploy"
 version = "0.1.5"
 
+[[audits.getrandom]]
+who = "Jean Mertz <git@jeanmertz.com>"
+criteria = "safe-to-deploy"
+delta = "0.4.2 -> 0.4.3"
+
 [[audits.hashlink]]
 who = "Jean Mertz <git@jeanmertz.com>"
 criteria = "safe-to-deploy"
@@ -196,6 +211,11 @@ who = "Jean Mertz <git@jeanmertz.com>"
 criteria = "safe-to-deploy"
 delta = "0.39.2 -> 0.41.0"
 
+[[audits.r-efi]]
+who = "Jean Mertz <git@jeanmertz.com>"
+criteria = "safe-to-deploy"
+delta = "5.3.0 -> 6.0.0"
+
 [[audits.ra-ap-rustc_lexer]]
 who = "Jean Mertz <git@jeanmertz.com>"
 criteria = "safe-to-deploy"
@@ -206,6 +226,16 @@ who = "Jean Mertz <git@jeanmertz.com>"
 criteria = "safe-to-deploy"
 delta = "0.9.4 -> 0.9.5"
 
+[[audits.rand]]
+who = "Jean Mertz <git@jeanmertz.com>"
+criteria = "safe-to-deploy"
+delta = "0.10.1 -> 0.10.2"
+
+[[audits.rand_core]]
+who = "Jean Mertz <git@jeanmertz.com>"
+criteria = "safe-to-deploy"
+delta = "0.10.0 -> 0.10.1"
+
 [[audits.rand_xorshift]]
 who = "Jean Mertz <git@jeanmertz.com>"
 criteria = "safe-to-deploy"
@@ -261,6 +291,11 @@ who = "Jean Mertz <git@jeanmertz.com>"
 criteria = "safe-to-deploy"
 delta = "0.23.35 -> 0.23.37"
 
+[[audits.rustls]]
+who = "Jean Mertz <git@jeanmertz.com>"
+criteria = "safe-to-deploy"
+delta = "0.23.35 -> 0.23.45"
+
 [[audits.rustls-webpki]]
 who = "Jean Mertz <git@jeanmertz.com>"
 criteria = "safe-to-deploy"
@@ -271,6 +306,11 @@ who = "Jean Mertz <git@jeanmertz.com>"
 criteria = "safe-to-deploy"
 delta = "0.103.10 -> 0.103.12"
 
+[[audits.rustls-webpki]]
+who = "Jean Mertz <git@jeanmertz.com>"
+criteria = "safe-to-deploy"
+delta = "0.103.13 -> 0.103.15"
+
 [[audits.ruzstd]]
 who = "Jean Mertz <git@jeanmertz.com>"
 criteria = "safe-to-deploy"
@@ -321,6 +361,11 @@ who = "Jean Mertz <git@jeanmertz.com>"
 criteria = "safe-to-deploy"
 version = "0.5.2"
 
+[[audits.sse-stream]]
+who = "Jean Mertz <git@jeanmertz.com>"
+criteria = "safe-to-deploy"
+version = "0.2.6"
+
 [[audits.string_cache]]
 who = "Jean Mertz <git@jeanmertz.com>"
 criteria = "safe-to-deploy"
@@ -533,6 +578,12 @@ trusted-publisher = "github:rust-lang/cc-rs"
 start = "2025-09-01"
 end = "2027-03-04"
 
+[[trusted.chacha20]]
+criteria = "safe-to-deploy"
+trusted-publisher = "github:RustCrypto/stream-ciphers"
+start = "2026-02-06"
+end = "2027-09-23"
+
 [[trusted.clap]]
 criteria = "safe-to-deploy"
 user-id = 6743 # Ed Page (epage)
@@ -575,6 +626,12 @@ user-id = 696 # Nick Fitzgerald (fitzgen)
 start = "2019-07-30"
 end = "2027-08-19"
 
+[[trusted.cpufeatures]]
+criteria = "safe-to-deploy"
+user-id = 267 # Tony Arcieri (tarcieri)
+start = "2021-04-26"
+end = "2027-09-23"
+
 [[trusted.dtoa]]
 criteria = "safe-to-deploy"
 user-id = 3618 # David Tolnay (dtolnay)
@@ -923,6 +980,18 @@ user-id = 3618 # David Tolnay (dtolnay)
 start = "2019-04-09"
 end = "2027-02-13"
 
+[[trusted.rand]]
+criteria = "safe-to-deploy"
+trusted-publisher = "github:rust-random/rand"
+start = "2026-01-26"
+end = "2027-09-23"
+
+[[trusted.rand_core]]
+criteria = "safe-to-deploy"
+trusted-publisher = "github:rust-random/rand_core"
+start = "2026-01-20"
+end = "2027-09-23"
+
 [[trusted.ref-cast]]
 criteria = "safe-to-deploy"
 user-id = 3618 # David Tolnay (dtolnay)

.config/supply-chain/config.toml

@@ -153,10 +153,6 @@ criteria = "safe-to-deploy"
 version = "0.10.1"
 criteria = "safe-to-deploy"
 
-[[exemptions.cpufeatures]]
-version = "0.2.17"
-criteria = "safe-to-deploy"
-
 [[exemptions.crc32fast]]
 version = "1.5.0"
 criteria = "safe-to-deploy"

.config/supply-chain/imports.lock

@@ -130,6 +130,11 @@ version = "1.2.56"
 when = "2026-02-13"
 trusted-publisher = "github:rust-lang/cc-rs"
 
+[[publisher.chacha20]]
+version = "0.10.2"
+when = "2026-08-27"
+trusted-publisher = "github:RustCrypto/stream-ciphers"
+
 [[publisher.clap]]
 version = "4.5.48"
 when = "2025-09-19"
@@ -179,6 +184,20 @@ user-id = 696
 user-login = "fitzgen"
 user-name = "Nick Fitzgerald"
 
+[[publisher.cpufeatures]]
+version = "0.2.17"
+when = "2025-01-25"
+user-id = 267
+user-login = "tarcieri"
+user-name = "Tony Arcieri"
+
+[[publisher.cpufeatures]]
+version = "0.3.1"
+when = "2026-08-26"
+user-id = 267
+user-login = "tarcieri"
+user-name = "Tony Arcieri"
+
 [[publisher.dtoa]]
 version = "1.0.11"
 when = "2025-12-27"
@@ -552,6 +571,16 @@ user-id = 3618
 user-login = "dtolnay"
 user-name = "David Tolnay"
 
+[[publisher.rand]]
+version = "0.10.2"
+when = "2026-07-02"
+trusted-publisher = "github:rust-random/rand"
+
+[[publisher.rand_core]]
+version = "0.10.1"
+when = "2026-04-13"
+trusted-publisher = "github:rust-random/rand_core"
+
 [[publisher.ref-cast]]
 version = "1.0.24"
 when = "2025-03-03"
@@ -651,8 +680,8 @@ user-login = "dtolnay"
 user-name = "David Tolnay"
 
 [[publisher.serde_json]]
-version = "1.0.149"
-when = "2026-01-06"
+version = "1.0.151"
+when = "2026-07-20"
 user-id = 3618
 user-login = "dtolnay"
 user-name = "David Tolnay"
@@ -1425,6 +1454,12 @@ who = "Pat Hickey <pat@moreproductive.org>"
 criteria = "safe-to-deploy"
 delta = "0.3.28 -> 0.3.31"
 
+[[audits.bytecode-alliance.audits.getrandom]]
+who = "Alex Crichton <alex@alexcrichton.com>"
+criteria = "safe-to-deploy"
+delta = "0.4.1 -> 0.4.2"
+notes = "Nothing awry in this update, standard updates for some platforms and other misc things."
+
 [[audits.bytecode-alliance.audits.gimli]]
 who = "Alex Crichton <alex@alexcrichton.com>"
 criteria = "safe-to-deploy"
@@ -1599,28 +1634,12 @@ who = "Alex Crichton <alex@alexcrichton.com>"
 criteria = "safe-to-deploy"
 delta = "0.1.21 -> 0.1.24"
 
-[[audits.bytecode-alliance.audits.rustls]]
-who = "Alex Crichton <alex@alexcrichton.com>"
-criteria = "safe-to-deploy"
-delta = "0.23.37 -> 0.23.45"
-notes = """
-A relatively large update, but no new `unsafe` and nothing awry here. Lots of
-protocol/etc updates which I'm not personally an expert within but the rustls
-maintainers are relatively well trusted as well.
-"""
-
 [[audits.bytecode-alliance.audits.rustls-webpki]]
 who = "Alex Crichton <alex@alexcrichton.com>"
 criteria = "safe-to-deploy"
 delta = "0.103.12 -> 0.103.13"
 notes = "Minor fixes for the bug being fixed in this release, nothing awry."
 
-[[audits.bytecode-alliance.audits.rustls-webpki]]
-who = "Alex Crichton <alex@alexcrichton.com>"
-criteria = "safe-to-deploy"
-delta = "0.103.13 -> 0.103.15"
-notes = "Minor updates and feature shufflings."
-
 [[audits.bytecode-alliance.audits.sha1]]
 who = "Andrew Brown <andrew.brown@intel.com>"
 criteria = "safe-to-deploy"
@@ -2732,6 +2751,16 @@ who = "J.C. Jones <jc@divviup.org>"
 criteria = "safe-to-deploy"
 delta = "1.0.1 -> 1.0.3"
 
+[[audits.isrg.audits.getrandom]]
+who = "David Cook <dcook@divviup.org>"
+criteria = "safe-to-deploy"
+delta = "0.3.4 -> 0.4.0"
+
+[[audits.isrg.audits.getrandom]]
+who = "David Cook <dcook@divviup.org>"
+criteria = "safe-to-deploy"
+delta = "0.4.0 -> 0.4.1"
+
 [[audits.isrg.audits.libbz2-rs-sys]]
 who = "Ameer Ghani <inahga@divviup.org>"
 criteria = "safe-to-deploy"