[Deps]: containerise and guix the thing fully

[hyperpolymath]

Advisory ID

No response

Affected dependency

guix, stapeln

Affected / fixed versions

No response

Direct or transitive?

Direct dependency

Details / link

Issue 1: [Feature] OCI Containerization & Immutable Runtime Isolation for boj-server
Description Currently, launching boj-server via npx assumes the host environment possesses prerequisite runtimes (such as Deno) in its system PATH. When dependencies are missing, the server crashes with unexpected EOF errors during the MCP initialization handshake.

Proposed Solution

Containerized MCP Execution: Provide an official OCI/Docker image (ghcr.io/hyperpolymath/boj-server:latest) encapsulating Deno, the Idris2 verified kernel, and core execution binaries.
Standardized mcp_config.json: Enable clients to configure the MCP server via docker run rather than npx in
mcp_config.json
, guaranteeing an immutable, locked-down execution environment regardless of the host OS.

Before submitting

• This advisory is PUBLIC — I am not disclosing a non-public vulnerability here.
• I searched existing issues for this advisory.