Implement tool execution subsystem

- Create tool execution module for subprocess spawning
- Implement command validation to prevent shell injection
- Use subprocess list invocation (no shell)
- Add comprehensive tests for tool execution
- Handle errors and timeouts properly
- Add timeout management with configurable durations
- Implement command whitelist (npx, python, node, cargo)
- Prevent absolute paths and directory traversal
- Detect shell metacharacters in commands and arguments
- Support parallel execution of multiple commands
- Add 43 comprehensive unit tests (all passing)
- Achieve >75% test coverage

Closes #519

Author: Auto Merge Bot

orchestrator/Cargo.toml

@@ -46,6 +46,9 @@ tower-http = { version = "0.6", features = ["trace"] }
 rand = "0.9.2"
 fastrand = "2.0"
 
+# Async runtime
+futures = "0.3"
+
 # Firecracker HTTP client
 hyper = { version = "1.0", features = ["full"] }
 hyper-util = { version = "0.1", features = ["full"] }
@@ -81,9 +84,6 @@ criterion = "0.8"
 # Temporary file management for tests
 tempfile = "3.10"
 
-# Async runtime for tests
-futures = "0.3"
-
 # System resource monitoring
 sysinfo = "0.38"
 

orchestrator/src/lib.rs

@@ -10,5 +10,6 @@ pub mod mcp_command;
 pub mod metrics;
 pub mod metrics_server;
 pub mod rate_limit;
+pub mod tools;
 pub mod vm;
 pub mod webhooks;