kcode-dev-tools

Session-scoped tool execution for managed Rust libraries, Web libraries, and Rust binaries. The package owns tool argument handling, opened-source leases, complete-source snapshots, backend calls, and safe error translation. The integrating server owns conversation state, model-facing presentation, and authorization. It resolves Kweb objects before passing exact bytes to this package for Web-library attachment or Rust-binary input, and stores binary outputs after calls. Managed Web source and immutable Web publications are configured as separate, disjoint roots.

Web-library snapshots describe opaque assets by path and byte size without placing their bytes or hashes into model context. Asset classification follows the destination filename extension. Rust-library and Rust-binary checks automatically repair rustfmt-fixable layout in disposable validation source. Rust-library validation also provides Chromium for managed Web-library release tests. Its incompatible inner process sandbox is disabled only inside the hardened outer Podman sandbox. Validation retains bounded diagnostics from both process output streams. Rust-binary validation retains both output streams under the same bounded diagnostic contract.