# kcode-dev-tools
Session-scoped tool execution for managed Rust libraries, Web libraries, and
Rust binaries. The package owns tool argument handling, opened-source leases,
complete-source snapshots, backend calls, and safe error translation. The
integrating server owns conversation state, model-facing presentation, and
authorization. It resolves Kweb objects before passing exact bytes to this
package for Web-library attachment or Rust-binary input, and stores binary
outputs after calls. Managed Web source and immutable Web publications are
configured as separate, disjoint roots.
Web-library snapshots describe opaque assets by path and byte size without
placing their bytes or hashes into model context. Asset classification follows
the destination filename extension. Rust-library and Rust-binary checks
automatically repair rustfmt-fixable layout in disposable validation source.
Rust-library validation also provides Chromium for managed Web-library release
tests. Its incompatible inner process sandbox is disabled only inside the
hardened outer Podman sandbox. Validation retains bounded diagnostics from both
process output streams.
Rust-binary validation retains both output streams under the same bounded
diagnostic contract.