M10: add optional cross-platform Hot Folder processing service

LICENSES.toml

@@ -16,7 +16,7 @@ sha256 = "cd7032ea33b71427f188e34ffb4aee9d6868a57fd196037c5c8b2be03a2a0352"
 [[document]]
 source = "NOTICE"
 destination = "NOTICE"
-sha256 = "9f854f730719af962cd840529324d089e05e68a30bd245c50e33f96e009b4314"
+sha256 = "fa1175dae1d6ec874df13204697a35b30a92982d2352c945df8f9b7453be2fcc"
 
 [[document]]
 source = "assets/app-icon/LICENSE-document.txt"

NOTICE

@@ -59,6 +59,10 @@ Vendored (vendor/, patched; see vendor/README.md):
 - hayro 0.7.1 — Apache-2.0 OR MIT, Copyright the hayro authors (licence files kept in vendor/hayro).
 - hayro-interpret 0.7.0 — Apache-2.0 OR MIT, Copyright the hayro authors (LICENSE-APACHE, LICENSE-MIT kept in vendor/hayro-interpret).
 
+PaddleOCR PP-OCRv6 and PP-LCNet model weights and recognition dictionary
+Copyright PaddlePaddle / PaddleOCR contributors. Licensed under Apache-2.0.
+Fetched from the authors' pinned releases; see ATTRIBUTION.toml.
+
 Bundled egui font icons
 
 The pinned egui dependency includes egui-icons.ttf, a small subset of John Slegers'

apps/pdfcraft-cli/src/main.rs

@@ -36,8 +36,11 @@ macro_rules! mcp_usage {
     () => {
         "\
 pdfcraft-cli mcp    [--root DIR] [--compact] [--automation-read-root DIR] [--automation-write-root DIR]
+                    [--allow-hot-folder-admin]
                                                            MCP server on stdin/stdout (opt-in)
                                                            --compact lists a core set of tools plus tool_search and tool_call
+                                                           --allow-hot-folder-admin lets the agent install and control the Hot
+                                                           Folder system service and change its stored source credentials
                                                            --automation-read-root / --automation-write-root confine the files the
                                                            agent's tools read (open, combine, import, fonts, certificates…) and
                                                            write (save, export, extract, split, reports…) to DIR, links followed;

apps/pdfcraft-cli/src/options.rs

@@ -122,8 +122,11 @@ pub(crate) const RUN_OPTIONS: &[OptionSpec] = &[
 pub(crate) const UI_OPTIONS: &[OptionSpec] = &[OptionSpec { name: "--control", takes_value: true }, OptionSpec { name: "--out", takes_value: true }];
 
 #[cfg(feature = "mcp")]
-pub(crate) const MCP_OPTIONS: &[OptionSpec] =
-    &[OptionSpec { name: "--root", takes_value: true }, OptionSpec { name: "--compact", takes_value: false }];
+pub(crate) const MCP_OPTIONS: &[OptionSpec] = &[
+    OptionSpec { name: "--root", takes_value: true },
+    OptionSpec { name: "--compact", takes_value: false },
+    OptionSpec { name: "--allow-hot-folder-admin", takes_value: false },
+];
 
 /// The arguments that are not options or their values. Which tokens are values is the spec's
 /// answer: skipping the one after every option made `check-one --edit file.pdf` report "missing

apps/pdfcraft-cli/src/run.rs

@@ -166,7 +166,12 @@ pub(crate) fn mcp(args: &[String]) -> Result<(), CliError> {
     let args = args.as_slice();
     validate_options("mcp", args, MCP_OPTIONS)?;
     let compact = args.iter().any(|a| a == "--compact");
-    let mut auto = automation(args)?;
+    // An agent may install boot services or change stored credentials only when the user says so.
+    let hot_folder_admin = args.iter().any(|a| a == "--allow-hot-folder-admin");
+    let mut auto = automation(args)?.with_hot_folder_admin(hot_folder_admin);
+    if hot_folder_admin {
+        let _ = writeln!(std::io::stderr().lock(), "pdfcraft-cli: Hot Folder administration allowed (system service and source credentials)");
+    }
     if let Some(roots) = roots {
         let show = |root: Option<&Path>| root.map_or_else(|| "none".to_string(), |r| r.display().to_string());
         let _ = writeln!(

apps/pdfcraft-hot-folder/Cargo.toml

@@ -0,0 +1,38 @@
+[package]
+name = "pdfcraft-hot-folder"
+description = "Optional PdfCraft Hot Folder application and background worker"
+version.workspace = true
+edition.workspace = true
+license.workspace = true
+
+[lints]
+workspace = true
+
+[dependencies]
+pdfcraft-engine = { workspace = true }
+pdfcraft-fonts = { workspace = true }
+pdfcraft-hot-folder-service = { path = "../../crates/hot-folder-service", version = "0.16.1" }
+eframe = { workspace = true, features = ["default_fonts", "glow", "accesskit", "wayland", "x11"] }
+egui = { workspace = true }
+# Dropdowns whose menu can grow back while open (the workspace bans craft_ui::ComboBox, egui#5225).
+craft-ui = { workspace = true }
+rfd = { workspace = true }
+serde_json = { workspace = true }
+serde = { workspace = true }
+sys-locale = "0.3"
+chrono = { version = "0.4", default-features = false, features = ["clock"] }
+tempfile = "3"
+zeroize = "1.8"
+
+[target.'cfg(unix)'.dependencies]
+rustix = { version = "1", features = ["process"] }
+
+[target.'cfg(windows)'.dependencies]
+processkit = { version = "3.3.4", default-features = false, features = ["limits", "process-control"] }
+winsafe = { version = "0.0.29", default-features = false, features = ["kernel"] }
+
+[target.'cfg(not(windows))'.dependencies]
+sysinfo = { version = "0.37", default-features = false, features = ["system"] }
+
+[dev-dependencies]
+egui_kittest = { workspace = true, features = ["eframe", "wgpu"] }