wreq 1.2.12 → 1.2.14

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: dfff227b1aca526697d055128ca828a911403c337796d840e45667554ece669a
-  data.tar.gz: ce36c588548df0a31e769fa54b226561d2e5b84cf0dd681c0102575503803e86
+  metadata.gz: 9d959831cb8e18b4615af45265459779489d427c028879a8730668fd45882ccf
+  data.tar.gz: 1979a1b7207b7655988bad7d7f0b489671d8d2f954950cdc98996616cd20bc74
 SHA512:
-  metadata.gz: 77c99a185649091bc2c537efbdf4490404ef113c250a733ab47c3f49ac574659b455e78a3a77efe2f95ca9739b88b0f8ed6452b51d8583b01de7aaf4d88a1d0c
-  data.tar.gz: df326eb44d85324d981fb9a624f52a87d30871836f093dbde2ecd9c8b7b9b76cb786e8f2c2cd15aed1d2237fe8b9fc33a34803bf74972fb15a1bb9e8296071e5
+  metadata.gz: 685dbec532a27d62840e5dca70888f17ac1da268bf564ccdb1efbc399068df06bcf4e79c3e2db0c4d7d74f534d3a9b435595681708d4bccbbf44d8535889d70f
+  data.tar.gz: ec607cbbc36f30e79792c33fda253ebf2ee0257a19941a18c2f1af1074232932b96f9bc4699f9b4f3a7f61f7496aeb0d618d275873cde01cc0ac8b1db9049529

data/Cargo.lock

@@ -113,7 +113,7 @@ dependencies = [
 [[package]]
 name = "btls"
 version = "0.5.6"
-source = "git+https://github.com/0x676e67/btls?branch=demo%2Fmerge-upstream-boring-20260616#2c1026a045e31454e841f96c6dfb594d5a4e4752"
+source = "git+https://github.com/0x676e67/btls?rev=de7ab84fdb58641a2bdfdf9d8ebd7db1dcf4b29b#de7ab84fdb58641a2bdfdf9d8ebd7db1dcf4b29b"
 dependencies = [
  "bitflags",
  "btls-sys",
@@ -125,7 +125,7 @@ dependencies = [
 [[package]]
 name = "btls-sys"
 version = "0.5.6"
-source = "git+https://github.com/0x676e67/btls?branch=demo%2Fmerge-upstream-boring-20260616#2c1026a045e31454e841f96c6dfb594d5a4e4752"
+source = "git+https://github.com/0x676e67/btls?rev=de7ab84fdb58641a2bdfdf9d8ebd7db1dcf4b29b#de7ab84fdb58641a2bdfdf9d8ebd7db1dcf4b29b"
 dependencies = [
  "bindgen",
  "cmake",
@@ -166,6 +166,15 @@ version = "1.0.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "9330f8b2ff13f34540b44e946ef35111825727b38d33286ef986142615121801"
 
+[[package]]
+name = "chromium-roots"
+version = "0.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "229b200495e6cf4d4b599a1884c30f5af57898604e6c0bd94a217295c0d1df69"
+dependencies = [
+ "rustls-pki-types",
+]
+
 [[package]]
 name = "clang-sys"
 version = "1.9.1"
@@ -1270,9 +1279,9 @@ dependencies = [
 
 [[package]]
 name = "tower-http"
-version = "0.6.11"
+version = "0.7.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4cfcf7e2740e6fc6d4d688b4ef00650406bb94adf4731e43c096c3a19fe40840"
+checksum = "08a05a66a4fdd61cbbe0a1d755ffe0ca6aba159dd4820936a0ff8a8278245b9c"
 dependencies = [
  "async-compression",
  "bitflags",
@@ -1281,6 +1290,7 @@ dependencies = [
  "http",
  "http-body",
  "http-body-util",
+ "percent-encoding",
  "pin-project-lite",
  "tokio",
  "tokio-util",
@@ -1371,15 +1381,6 @@ version = "0.11.1+wasi-snapshot-preview1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "ccf3ec651a847eb01de73ccad15eb7d99f80485de043efb2f370cd654f4ea44b"
 
-[[package]]
-name = "webpki-root-certs"
-version = "1.0.9"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b96554aa2acc8ccdb7e1c9a58a7a68dd5d13bccc69cd124cb09406db612a1c9b"
-dependencies = [
- "rustls-pki-types",
-]
-
 [[package]]
 name = "winapi"
 version = "0.3.9"
@@ -1419,12 +1420,13 @@ dependencies = [
 
 [[package]]
 name = "wreq"
-version = "6.0.0-rc.29"
-source = "git+https://github.com/0x676e67/wreq?rev=12ccf64bb00e79db6eabd4bc3ccf82871d3eb5a5#12ccf64bb00e79db6eabd4bc3ccf82871d3eb5a5"
+version = "0.16.1"
+source = "git+https://github.com/0x676e67/wreq?rev=abd421d16dd48b3c2d7fb812f185eec3c6ec3132#abd421d16dd48b3c2d7fb812f185eec3c6ec3132"
 dependencies = [
  "btls",
  "btls-sys",
  "bytes",
+ "chromium-roots",
  "cookie",
  "encoding_rs",
  "futures-util",
@@ -1451,7 +1453,6 @@ dependencies = [
  "tower",
  "tower-http",
  "url",
- "webpki-root-certs",
  "wreq-proto",
  "wreq-rt",
 ]
@@ -1489,7 +1490,7 @@ dependencies = [
 
 [[package]]
 name = "wreq-ruby"
-version = "1.2.12"
+version = "1.2.14"
 dependencies = [
  "arc-swap",
  "bytes",
@@ -1516,6 +1517,7 @@ name = "wreq-util"
 version = "3.0.0-rc.14"
 dependencies = [
  "brotli",
+ "chromium-roots",
  "flate2",
  "typed-builder",
  "wreq",

data/Cargo.toml

@@ -5,8 +5,8 @@ authors = ["SearchApi <support@searchapi.io>"]
 homepage = "https://github.com/SearchApi/wreq-ruby"
 repository = "https://github.com/SearchApi/wreq-ruby"
 edition = "2024"
-version = "1.2.12"
-rust-version = "1.95"
+version = "1.2.14"
+rust-version = "1.98"
 
 [lib]
 crate-type = ["cdylib"]
@@ -17,7 +17,7 @@ name = "wreq_ruby"
 magnus = { version = "0.8.2", features = ["bytes"] }
 rb-sys = { version = "0.9.128", default-features = false }
 tokio = { version = "1.53.1", features = ["full"] }
-wreq = { version = "6.0.0-rc", features = [
+wreq = { version = "0.16.1", features = [
     "query",
     "form",
     "json",
@@ -65,7 +65,7 @@ strip = true
 
 [patch.crates-io]
 http2 = { git = "https://github.com/0x676e67/http2", rev = "b413a92b2e1fe7e2ea1b7be78e75b872386fdfa0" }
-btls = { git = "https://github.com/0x676e67/btls", branch = "demo/merge-upstream-boring-20260616" }
-btls-sys = { git = "https://github.com/0x676e67/btls", branch = "demo/merge-upstream-boring-20260616" }
-wreq = { git = "https://github.com/0x676e67/wreq", rev = "12ccf64bb00e79db6eabd4bc3ccf82871d3eb5a5" }
+btls = { git = "https://github.com/0x676e67/btls", rev = "de7ab84fdb58641a2bdfdf9d8ebd7db1dcf4b29b" }
+btls-sys = { git = "https://github.com/0x676e67/btls", rev = "de7ab84fdb58641a2bdfdf9d8ebd7db1dcf4b29b" }
+wreq = { git = "https://github.com/0x676e67/wreq", rev = "abd421d16dd48b3c2d7fb812f185eec3c6ec3132" }
 wreq-util = { path = "crates/wreq-util" }

data/README.md

@@ -91,7 +91,7 @@ Most browser device models share identical TLS and HTTP/2 configurations, differ
 
   | **Browser** | **Versions** |
   | ----------- | ------------ |
-  | **Chrome**  | `Chrome100`, `Chrome101`, `Chrome104`, `Chrome105`, `Chrome106`, `Chrome107`, `Chrome108`, `Chrome109`, `Chrome110`, `Chrome114`, `Chrome116`, `Chrome117`, `Chrome118`, `Chrome119`, `Chrome120`, `Chrome123`, `Chrome124`, `Chrome126`, `Chrome127`, `Chrome128`, `Chrome129`, `Chrome130`, `Chrome131`, `Chrome132`, `Chrome133`, `Chrome134`, `Chrome135`, `Chrome136`, `Chrome137`, `Chrome138`, `Chrome139`, `Chrome140`, `Chrome141`, `Chrome142`, `Chrome143`, `Chrome144`, `Chrome145`, `Chrome146`, `Chrome147`, `Chrome148`, `Chrome149`, `Chrome150`, `Chrome151` |
+  | **Chrome**  | `Chrome100`, `Chrome101`, `Chrome104`, `Chrome105`, `Chrome106`, `Chrome107`, `Chrome108`, `Chrome109`, `Chrome110`, `Chrome114`, `Chrome116`, `Chrome117`, `Chrome118`, `Chrome119`, `Chrome120`, `Chrome123`, `Chrome124`, `Chrome126`, `Chrome127`, `Chrome128`, `Chrome129`, `Chrome130`, `Chrome131`, `Chrome132`, `Chrome133`, `Chrome134`, `Chrome135`, `Chrome136`, `Chrome137`, `Chrome138`, `Chrome139`, `Chrome140`, `Chrome141`, `Chrome142`, `Chrome143`, `Chrome144`, `Chrome145`, `Chrome146`, `Chrome147`, `Chrome148`, `Chrome149`, `Chrome150`, `Chrome151`, `Chrome152`, `Chrome153` |
   | **Edge**    | `Edge101`, `Edge122`, `Edge127`, `Edge131`, `Edge134`, `Edge135`, `Edge136`, `Edge137`, `Edge138`, `Edge139`, `Edge140`, `Edge141`, `Edge142`, `Edge143`, `Edge144`, `Edge145`, `Edge146`, `Edge147`, `Edge148` |
   | **Firefox** | `Firefox109`, `Firefox117`, `Firefox128`, `Firefox133`, `Firefox135`, `FirefoxPrivate135`, `FirefoxAndroid135`, `Firefox136`, `FirefoxPrivate136`, `Firefox139`, `Firefox142`, `Firefox143`, `Firefox144`, `Firefox145`, `Firefox146`, `Firefox147`, `Firefox148`, `Firefox149`, `Firefox150`, `Firefox151` |
   | **Safari**  | `Safari15_3`, `Safari15_5`, `Safari15_6_1`, `Safari16`, `Safari16_5`, `Safari17_0`, `Safari17_2_1`, `Safari17_4_1`, `Safari17_5`, `Safari17_6`, `Safari18`, `Safari18_2`, `Safari18_3`, `Safari18_3_1`, `Safari18_5`, `Safari26`, `Safari26_1`, `Safari26_2`, `SafariIos16_5`, `SafariIos17_2`, `SafariIos17_4_1`, `SafariIos18_1_1`, `SafariIos26`, `SafariIos26_2`, `SafariIPad18`, `SafariIPad26`, `SafariIpad26_2` |

data/crates/wreq-util/CHANGELOG.md

@@ -10,6 +10,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ### Added
 
 - *(emulate)* Add Chrome 151 profile.
+- *(emulate)* Add Chrome 152 profile.
+- *(emulate)* Add Chrome 153 profile.
 
 ## [3.0.0-rc.14](https://github.com/0x676e67/wreq-util/compare/v3.0.0-rc.13...v3.0.0-rc.14) - 2026-07-04
 

data/crates/wreq-util/Cargo.toml

@@ -9,7 +9,7 @@ version = "3.0.0-rc.14"
 readme = "README.md"
 license = "Apache-2.0"
 edition = "2024"
-rust-version = "1.85"
+rust-version = "1.98"
 
 [package.metadata.docs.rs]
 all-features = true
@@ -22,14 +22,21 @@ default = ["emulation"]
 tokio-rt = ["wreq/tokio-rt"]
 compio-rt = ["wreq/compio-rt"]
 
-emulation = ["dep:typed-builder", "dep:brotli", "dep:flate2", "dep:zstd"]
+emulation = [
+    "dep:typed-builder",
+    "dep:brotli",
+    "dep:flate2",
+    "dep:zstd",
+    "dep:chromium-roots",
+    "wreq/chromium-roots",
+]
 emulation-serde = ["dep:serde"]
 emulation-compression = []
 
 tower-delay = ["dep:tower", "dep:pin-project-lite", "tokio/time"]
 
 [dependencies]
-wreq = { version = "6.0.0-rc", default-features = false }
+wreq = { version = "0.16.1", default-features = false }
 
 # Optional deps...
 
@@ -38,6 +45,7 @@ tokio = { version = "1.52.1", default-features = false, optional = true }
 tower = { version = "0.5.2", default-features = false, optional = true }
 typed-builder = { version = "0.23.2", optional = true }
 pin-project-lite = { version = "0.2.17", optional = true }
+chromium-roots = { version = "0.1.1", optional = true }
 
 ## Compression algorithms
 brotli = { version = "8.0.2", optional = true }
@@ -45,7 +53,7 @@ flate2 = { version = "1.1.9", optional = true }
 zstd = { version = "0.13.3", optional = true }
 
 [dev-dependencies]
-wreq = "6.0.0-rc"
+wreq = "0.16.1"
 tokio = { version = "1.48.0", features = ["full"] }
 hyper = { version = "1.10.1", default-features = false, features = [
     "http1",

data/crates/wreq-util/src/emulate/macros.rs

@@ -131,6 +131,13 @@ macro_rules! header_chrome_accept_encoding {
         );
         $headers.insert(ACCEPT_LANGUAGE, HeaderValue::from_static("en-US,en;q=0.9"));
     };
+    (zstd_only, $headers:expr) => {
+        #[cfg(feature = "emulation-compression")]
+        $headers.insert(
+            ACCEPT_ENCODING,
+            HeaderValue::from_static("gzip, deflate, br, zstd"),
+        );
+    };
 }
 
 macro_rules! header_firefox_sec_fetch {

data/crates/wreq-util/src/emulate/profile/chrome/header.rs

@@ -72,3 +72,31 @@ pub fn header_initializer_with_zstd_priority(
     );
     headers
 }
+
+pub fn header_initializer_chrome152(
+    sec_ch_ua: &'static str,
+    ua: &'static str,
+    emulation_os: Platform,
+) -> HeaderMap {
+    let mut headers = HeaderMap::new();
+    header_chrome_sec_ch_ua!(
+        headers,
+        sec_ch_ua,
+        emulation_os.platform(),
+        emulation_os.is_mobile()
+    );
+    headers.insert(ACCEPT_LANGUAGE, HeaderValue::from_static("en-US,en;q=0.9"));
+    headers.insert(
+        HeaderName::from_static("upgrade-insecure-requests"),
+        HeaderValue::from_static("1"),
+    );
+    header_chrome_ua!(headers, ua);
+    header_chrome_accept!(headers);
+    header_chrome_sec_fetch!(headers);
+    header_chrome_accept_encoding!(zstd_only, headers);
+    headers.insert(
+        HeaderName::from_static("priority"),
+        HeaderValue::from_static("u=0, i"),
+    );
+    headers
+}

data/crates/wreq-util/src/emulate/profile/chrome/tls.rs

@@ -49,6 +49,17 @@ macro_rules! tls_options {
             .sigalgs_list($sigalgs)
             .alps_use_new_codepoint(true))
     };
+    (9, $curves:expr) => {
+        tls_options!(@build ChromeTlsConfig::builder()
+            .permute_extensions(true)
+            .enable_ech_grease(true)
+            .pre_shared_key(true)
+            .curves($curves)
+            .sigalgs_list(NEW_SIGALGS_LIST)
+            .trust_anchors(CHROME_TRUST_ANCHORS)
+            .grease_sigalgs_enabled(true)
+            .alps_use_new_codepoint(true))
+    };
 }
 
 pub const CURVES_1: &str = join!(":", "X25519", "P-256", "P-384");
@@ -101,6 +112,9 @@ pub const NEW_SIGALGS_LIST: &str = join!(
     "rsa_pkcs1_sha512"
 );
 
+// Encoded IDs and wreq's Chromium root store come from the same root set.
+pub(super) const CHROME_TRUST_ANCHORS: &[u8] = &chromium_roots::encoded_trust_anchor_ids();
+
 pub const CERTIFICATE_COMPRESSORS: &[&'static dyn CertificateCompressor] = &[&BrotliCompressor];
 
 #[derive(TypedBuilder)]
@@ -128,11 +142,17 @@ pub struct ChromeTlsConfig {
 
     #[builder(default = false, setter(into))]
     pre_shared_key: bool,
+
+    #[builder(default, setter(strip_option))]
+    trust_anchors: Option<&'static [u8]>,
+
+    #[builder(default, setter(strip_option))]
+    grease_sigalgs_enabled: Option<bool>,
 }
 
 impl From<ChromeTlsConfig> for TlsOptions {
     fn from(val: ChromeTlsConfig) -> Self {
-        TlsOptions::builder()
+        let builder = TlsOptions::builder()
             .grease_enabled(true)
             .enable_ocsp_stapling(true)
             .enable_signed_cert_timestamps(true)
@@ -147,7 +167,17 @@ impl From<ChromeTlsConfig> for TlsOptions {
             .alps_protocols([val.alps_protos])
             .alps_use_new_codepoint(val.alps_use_new_codepoint)
             .aes_hw_override(true)
-            .certificate_compressors(CERTIFICATE_COMPRESSORS)
-            .build()
+            .certificate_compressors(CERTIFICATE_COMPRESSORS);
+        let builder = if let Some(trust_anchors) = val.trust_anchors {
+            builder.trust_anchors(trust_anchors)
+        } else {
+            builder
+        };
+        let builder = if let Some(enabled) = val.grease_sigalgs_enabled {
+            builder.grease_sigalgs_enabled(enabled)
+        } else {
+            builder
+        };
+        builder.build()
     }
 }

data/crates/wreq-util/src/emulate/profile/chrome.rs

@@ -1862,6 +1862,73 @@ mod_generator!(
     ]
 );
 
+mod_generator!(
+    v152,
+    tls_options!(9, CURVES_3),
+    http2_options!(3),
+    header_initializer_chrome152,
+    [
+        (
+            MacOS,
+            r#""Chromium";v="152", "Not?A_Brand";v="24", "Google Chrome";v="152""#,
+            "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"
+        ),
+        (
+            Linux,
+            r#""Chromium";v="152", "Not?A_Brand";v="24", "Google Chrome";v="152""#,
+            "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"
+        ),
+        (
+            Android,
+            r#""Chromium";v="152", "Not?A_Brand";v="24", "Google Chrome";v="152""#,
+            "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Mobile Safari/537.36"
+        ),
+        (
+            Windows,
+            r#""Chromium";v="152", "Not?A_Brand";v="24", "Google Chrome";v="152""#,
+            "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"
+        ),
+        (
+            IOS,
+            r#""Chromium";v="152", "Not?A_Brand";v="24", "Google Chrome";v="152""#,
+            "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/152.0.0.0 Mobile/15E148 Safari/604.1"
+        )
+    ]
+);
+
+mod_generator!(
+    v153,
+    v152::build_emulation,
+    header_initializer_with_zstd_priority,
+    [
+        (
+            MacOS,
+            r#""Google Chrome";v="153", "Not_A Brand";v="8", "Chromium";v="153""#,
+            "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
+        ),
+        (
+            Linux,
+            r#""Google Chrome";v="153", "Not_A Brand";v="8", "Chromium";v="153""#,
+            "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
+        ),
+        (
+            Android,
+            r#""Google Chrome";v="153", "Not_A Brand";v="8", "Chromium";v="153""#,
+            "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36"
+        ),
+        (
+            Windows,
+            r#""Google Chrome";v="153", "Not_A Brand";v="8", "Chromium";v="153""#,
+            "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
+        ),
+        (
+            IOS,
+            r#""Google Chrome";v="153", "Not_A Brand";v="8", "Chromium";v="153""#,
+            "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/153.0.8010.24 Mobile/15E148 Safari/604.1"
+        )
+    ]
+);
+
 mod_generator!(
     edge143,
     v132::build_emulation,

data/crates/wreq-util/src/emulate.rs

@@ -62,6 +62,8 @@ define_enum!(
     Chrome149 => ("chrome_149", v149::emulation),
     Chrome150 => ("chrome_150", v150::emulation),
     Chrome151 => ("chrome_151", v151::emulation),
+    Chrome152 => ("chrome_152", v152::emulation),
+    Chrome153 => ("chrome_153", v153::emulation),
 
     // Edge versions
     Edge101 => ("edge_101", edge101::emulation),

data/crates/wreq-util/tests/emulate_chrome.rs

@@ -275,3 +275,23 @@ test_emulation!(
     ["t13d1516h2_8daaf6152771_806a8c22fdea"],
     "52d84b11737d980aef856699f885ca86"
 );
+
+test_emulation!(
+    test_chrome152,
+    Emulation::Chrome152,
+    [
+        "t13d1517h2_8daaf6152771_cb7bf5808d99",
+        "t13d1518h2_8daaf6152771_e2d80978ab2e"
+    ],
+    "52d84b11737d980aef856699f885ca86"
+);
+
+test_emulation!(
+    test_chrome153,
+    Emulation::Chrome153,
+    [
+        "t13d1517h2_8daaf6152771_cb7bf5808d99",
+        "t13d1518h2_8daaf6152771_e2d80978ab2e"
+    ],
+    "52d84b11737d980aef856699f885ca86"
+);

data/docs/fork-safety.md

@@ -1,34 +1,51 @@
 # Fork safety
 
-## Why inherited clients are rejected
-
-wreq-ruby uses a process-wide Tokio runtime and connection pool. `fork` copies
-the parent's memory, but only the thread that called `fork` continues in the
-child. Tokio's worker threads are gone, and its inherited tasks, locks, and
-connections are not safe to reuse.
-
-If the parent has already loaded wreq-ruby, native HTTP operations in the child
-raise `Wreq::ForkError`. This applies to new and existing clients, module
-request methods, streaming request bodies, and response methods backed by native
-state. Retrying the operation in the same child raises the same error. Read-only
-response metadata such as status, headers, and captured TLS information remains
-available.
-
-The parent can continue using its clients. When inherited Ruby objects are
-collected in the child, their native runtime state is left for the operating
-system to reclaim when the process exits.
-
-## HTTP work in forked children is unsupported
-
-A process created with `fork` must not start or continue HTTP work through
-wreq-ruby, even when it first loads the extension after the fork. If the parent
-loaded wreq-ruby, native HTTP operations in the child raise `Wreq::ForkError`.
-
-When the extension was not present in the parent, no wreq-ruby state or fork
-marker reaches the child. The extension cannot reliably distinguish that child
-from a newly started process, so this unsupported path cannot guarantee a Ruby
-error and may fail inside platform libraries.
-
-Prefork servers should use an `exec`- or spawn-based worker model when workers
-need wreq-ruby. Requiring the extension again does not reset inherited runtime
-state, and there is no `after_fork!` hook.
+## Prefork checklist
+
+- `require "wreq"` may run in the parent before workers fork.
+- Create each `Wreq::Client`, `Wreq::Jar`, and `Wreq::BodySender` in the worker
+  that will use it.
+- Keep each `Wreq::Response` in the process that received it.
+- Do not start requests or push streaming body data in the parent before workers
+  fork.
+- If the parent must use wreq-ruby first, start workers with `spawn` or `exec`
+  instead of `fork`.
+
+wreq-ruby checks process ownership whenever it exposes guarded native state. It
+does not copy, reset, or rebuild inherited objects.
+
+## Loading before fork
+
+wreq-ruby creates its process-wide Tokio runtime on the first operation that
+needs it. Requiring the gem does not initialize the runtime, so a prefork server
+may load wreq-ruby during boot. Each worker can then create its own runtime on
+its first request without an `after_fork!` hook.
+
+Create clients and other native-backed objects inside the worker. Each client,
+response, body sender, and cookie jar belongs to the process that created it.
+Using an inherited object raises `Wreq::ForkError`, even when the parent never
+started the runtime. wreq-ruby does not rebuild these objects.
+
+## Forking after runtime initialization
+
+Once the parent starts an HTTP operation or otherwise uses the Tokio runtime, a
+forked child must not reuse it. Tokio's worker threads do not survive `fork`, and
+the inherited connection pool may refer to those missing threads.
+
+Operations that need the inherited runtime raise `Wreq::ForkError`. This
+includes requests through new or existing clients, module request methods, and
+streaming request writes. Constructing a new client, body sender, or cookie jar
+does not use the runtime, but runtime-backed operations remain unavailable in
+that child. Retrying them raises the same error.
+
+An inherited `Wreq::Response` cannot be used at all. This includes status,
+headers, socket addresses, TLS information, and body methods. Values copied out
+before the fork, such as a `Wreq::StatusCode` or `Wreq::TlsInfo`, are separate
+objects and do not retain access to the response.
+
+The parent remains usable. Native objects collected in the child do not destroy
+state owned by the parent process.
+
+Use a spawn- or exec-based worker when the parent must perform HTTP work before
+workers start. Requiring the extension again cannot replace an inherited
+runtime.

data/docs/interrupt-handling.md

@@ -84,9 +84,10 @@ to the Ruby-owned thread with the GVL may [`src/rt.rs`](../src/rt.rs) map a
 wreq-owned cancellation to the `Wreq::InterruptError` defined in
 [`src/error.rs`](../src/error.rs).
 
-Keep this conversion centralized in `rt::try_block_on`. Request, response, and
-body operations may call `try_block_on`, but they must not construct their own
-Ruby cancellation exception.
+Keep cancellation conversion centralized in `rt::block_on`. Request, response,
+and body operations may call `block_on`, but they must not construct their own
+Ruby cancellation exception. `block_on` returns a future's native error
+unchanged so the caller can convert it after the GVL has been reacquired.
 
 These forms are forbidden for wreq-owned cancellation: