fix: update rmcp to resolve CVE-2026-42559

Co-Authored-By: Oz <oz-agent@warp.dev>

Author: acarl005

Cargo.lock

@@ -222,6 +222,7 @@ reqwest = { version = "0.12.28", default-features = false, features = [
   "json",
   "macos-system-configuration",
   "rustls-tls-native-roots-no-provider",
+  "rustls-tls-webpki-roots-no-provider",
   "stream",
   "system-proxy",
 ] }
@@ -378,7 +379,7 @@ typed-path = "0.10.0"
 streaming-iterator = "0.1.0"
 derivative = "2.2.0"
 parquet = { version = "55.0.0", features = ["arrow"] }
-rmcp = { git = "https://github.com/warpdotdev/rmcp.git", rev = "c0f65dc441af7d714b9c453ac5e7ef641451abe3" }
+rmcp = { git = "https://github.com/warpdotdev/rmcp.git", rev = "321ab14f67da734a8e0cfa0bfcdee1690663d9dc" }
 
 [profile.release]
 # Use line-tables-only (debug = 1) rather than full debuginfo (debug = 2 /

Cargo.toml

@@ -299,10 +299,10 @@ aws-types = "1"
 
 rmcp = { workspace = true, features = [
     "auth",
-    "transport-streamable-http-client-reqwest",
-    "transport-sse-client-reqwest",
+    "transport-streamable-http-client",
     "transport-child-process",
 ] }
+sse-stream = "0.2"
 notify-debouncer-full.workspace = true
 rquickjs = { workspace = true, optional = true }
 rustls.workspace = true

app/Cargo.toml

@@ -141,10 +141,10 @@ impl CallMCPToolExecutor {
             ActionExecution::new_async(
                 async move {
                     reconnecting_peer
-                        .call_tool(rmcp::model::CallToolRequestParam {
-                            name: name_owned_inner.into(),
-                            arguments: Some(arguments),
-                        })
+                        .call_tool(rmcp::model::CallToolRequestParams::new(
+                            name_owned_inner,
+                            Some(arguments),
+                        ))
                         .await
                 },
                 move |res, ctx| handle_call_tool_result(res, server_output_id, name_clone, ctx),

app/src/ai/blocklist/action_model/execute/call_mcp_tool.rs

@@ -128,7 +128,7 @@ impl ReadMCPResourceExecutor {
             ActionExecution::new_async(
                 async move {
                     reconnecting_peer
-                        .read_resource(rmcp::model::ReadResourceRequestParam { uri })
+                        .read_resource(rmcp::model::ReadResourceRequestParams::new(uri))
                         .await
                 },
                 |res, _ctx| handle_read_resource_result(res),