chore(deps): rmcp 2.1 + aes-gcm 0.11 with full vet coverage, SEP-2577 confinement, exemption burn-down

Cargo.toml

@@ -235,7 +235,7 @@ thiserror = "2.0.18"
 anyhow = "1.0.103"
 
 # ───── MCP (Model Context Protocol) ─────
-rmcp = { version = "1.8.0", features = ["server", "transport-io", "macros"] }
+rmcp = { version = "2.1.0", features = ["server", "transport-io", "macros"] }
 schemars = "1.2.1"
 
 # ───── HTTP / Tower (for MCP Streamable HTTP gateway) ─────
@@ -258,7 +258,7 @@ clap = { version = "4.6.1", features = [
   "unicode",
   "wrap_help",
 ] }
-indicatif = "0.18.4"
+indicatif = "0.18.6"
 devicons = "0.6.12"
 # ANSI terminal colouring.  Used by the `uffs-ci-pipeline` tool; kept at
 # workspace scope so a future UI surface that wants colored output inherits
@@ -328,8 +328,8 @@ num_cpus = "1.17.0"
 uuid = { version = "1.23.4", features = ["v4"] }
 
 # ───── Security / Crypto ─────
-aes-gcm = "0.10"
-rand = "0.10.1"
+aes-gcm = "0.11.0"
+rand = "0.10.2"
 rand_chacha = "0.10.0"
 security-framework = "3.7.0"
 

crates/uffs-broker/src/broker/service.rs

@@ -45,7 +45,10 @@ fn wide(text: &str) -> Vec<u16> {
 /// stderr-only message comes out empty (as seen on a failed `sc create`).
 #[cfg(windows)]
 fn sc_output(output: &std::process::Output) -> String {
+    // AUDIT-OK(bytes): operator-facing diagnostic text only — the combined
+    // output is formatted into an error message, never parsed or matched.
     let stdout = String::from_utf8_lossy(&output.stdout);
+    // AUDIT-OK(bytes): same display-only argument as stdout above.
     let stderr = String::from_utf8_lossy(&output.stderr);
     format!("{} {}", stdout.trim(), stderr.trim())
         .trim()

crates/uffs-cli/src/commands/uninstall/sweep.rs

@@ -200,9 +200,13 @@ fn probe_version_bounded(path: &Path) -> ProbeOutcome {
     let Ok(output) = child.wait_with_output() else {
         return ProbeOutcome::None;
     };
+    // AUDIT-OK(bytes): ASCII version-token extraction from a probed binary's
+    // output. A lossy decode cannot fabricate a `MAJOR.MINOR.PATCH` token
+    // (U+FFFD is not a digit), only fail to yield one -> "legacy" label.
     let mut text = String::from_utf8_lossy(&output.stdout).into_owned();
     if text.trim().is_empty() {
         // Some tools print `--version` to stderr; fall back to it.
+        // AUDIT-OK(bytes): same ASCII-token argument as stdout above.
         text = String::from_utf8_lossy(&output.stderr).into_owned();
     }
     crate::commands::update::binaries::parse_version(&text)
@@ -397,7 +401,10 @@ fn payload_paths(payload: uffs_client::protocol::response::SearchPayload) -> Vec
         Payload::ShmemBlob(path) => {
             let mut buf: Vec<u8> = Vec::new();
             if uffs_client::shmem::stream_paths_blob_into(Path::new(&path), &mut buf).is_ok() {
-                blob_lines_to_paths(&String::from_utf8_lossy(&buf))
+                // Strict parse: these paths feed the EXTRA delete list, so a
+                // corrupt blob is rejected outright rather than risking a
+                // lossy-mangled path. The daemon always emits valid UTF-8.
+                core::str::from_utf8(&buf).map_or_else(|_| Vec::new(), blob_lines_to_paths)
             } else {
                 Vec::new()
             }

crates/uffs-cli/src/commands/update/acquire.rs

@@ -91,7 +91,10 @@ pub(super) fn latest_version() -> Option<String> {
     if !output.status.success() {
         return None;
     }
-    String::from_utf8_lossy(&output.stdout)
+    // Strict parse: the helper is our own binary emitting ASCII `latest=`
+    // lines; non-UTF-8 output means something is wrong -> treat as no answer.
+    core::str::from_utf8(&output.stdout)
+        .ok()?
         .lines()
         .find_map(|line| line.strip_prefix("latest="))
         .map(|tag| tag.trim().to_owned())