//! # python-exec-mcp
//!
//! An MCP server that provides Python script execution as an alternative to
//! shell/Bash tools for AI agents.
//!
//! ## Motivation
//!
//! Agentic CLI tools typically give LLMs access to Bash via string-based
//! permission rules. This design is structurally fragile — command chaining,
//! prefix-matching bypasses, and platform differences make it hard to prevent
//! unintended shell commands.
//!
//! Since LLMs are already fluent in Python, this crate provides a Python
//! execution path with shell-escape functions (`os.system`, `subprocess`, etc.)
//! structurally removed via a safety preamble.
//!
//! ## What this is NOT
//!
//! This is not a security sandbox. File I/O, network access, and memory are
//! unrestricted by default. For full isolation, use a container or VM.
//! The goal is to eliminate the most common class of agent mistakes:
//! unintended shell command execution.
//!
//! ## Modules
//!
//! - [`executor`] — Python process spawning, safety preamble, timeout handling.
//! - [`mcp`] — MCP server (stdio transport) exposing `execute`, `execute_file`,
//!   and `session_start` tools.

pub mod executor;
pub mod mcp;
