Session-scoped tool execution for managed Rust libraries, Web libraries, and
Rust binaries. The package owns tool argument handling, opened-source leases,
complete-source snapshots, backend calls, and safe error translation. The
integrating server owns conversation state, model-facing presentation, and
authorization.