[ITSGJY]

Summary

Introduce a guarded, Runner-owned project_format lifecycle for explicitly selected Rust and Python source files.

• Resolve a single project recipe and format 1–8 selected files using controlled rustfmt or Ruff stdin/stdout candidate generation.
• Revalidate project scope, source identity and exact bytes, configuration, and the total Job deadline before applying guarded writes.
• Carry authoritative Changed / Unchanged / Unknown mutation evidence through the existing durable Runner Job and observe_jobs continuation.
• Enforce Session write/shell guards, bounded capability and rejection schemas, managed child process lifecycle, and conservative failure classification.

Verification

Focused pre-CI regressions on the integrated feature:

• Runner project formatting: 40 passed; explicit Rust/Python profile deadline: 2 passed.
• Runner Shell Profile compatibility: 21 passed.
• Strict formatter stdin early-exit cases: 2 passed; Ruff syntax-error test: 12 independent consecutive passes.
• Tool contracts: 301 passed; ToolRuntime project-format integration: 17 passed.
• Native search prefix process lifecycle: passed.
• Rust formatting and patch whitespace checks: passed.

The full Linux, Windows, macOS, contract, MCP, and Docker CI matrix passed (18/18): https://github.com/ITSGJY/webcodex/actions/runs/38196748832

Related: yyjeqhc#962

Upstream PR: yyjeqhc#1082