PyPI - running-process - Versions diffs - 4.0.2__tar.gz → 4.1.0__tar.gz - Mend

running-process 4.0.2tar.gz → 4.1.0tar.gz

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (345) hide show

{running_process-4.0.2 → running_process-4.1.0}/Cargo.lock RENAMED Viewed

@@ -79,6 +79,18 @@ version = "1.0.102"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "7f202df86484c868dbad7eaa557ef785d5c66295e41b460ef922eca0723b842c"
+[[package]]
+name = "arrayref"
+version = "0.3.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "76a2e8124351fda1ef8aaaa3bbd7ebbcb486bbcd4225aca0aa0d84bb2db8fecb"
+[[package]]
+name = "arrayvec"
+version = "0.7.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7c02d123df017efcdfbd739ef81735b36c5ba83ec3c59c80a9d7ecc718f92e50"
 [[package]]
 name = "autocfg"
 version = "1.5.0"
@@ -103,6 +115,29 @@ version = "2.11.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "c4512299f36f043ab09a583e57bceb5a5aab7a73db1805848e8fef3c9e8c78b3"
+[[package]]
+name = "blake3"
+version = "1.8.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0aa83c34e62843d924f905e0f5c866eb1dd6545fc4d719e803d9ba6030371fce"
+dependencies = [
+ "arrayref",
+ "arrayvec",
+ "cc",
+ "cfg-if",
+ "constant_time_eq",
+ "cpufeatures 0.3.0",
+]
+[[package]]
+name = "block-buffer"
+version = "0.10.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3078c7629b62d3f0439517fa394996acacc5cbc91c5a20d8c658e77abd503a71"
+dependencies = [
+ "generic-array",
+]
 [[package]]
 name = "bytes"
 version = "1.11.1"
@@ -177,12 +212,36 @@ version = "1.0.5"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "1d07550c9036bf2ae0c684c4297d503f838287c83c53686d05370d0e139ae570"
+[[package]]
+name = "constant_time_eq"
+version = "0.4.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3d52eff69cd5e647efe296129160853a42795992097e8af39800e1060caeea9b"
 [[package]]
 name = "core-foundation-sys"
 version = "0.8.7"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "773648b94d0e5d620f64f280777445740e61fe701025087ec8b57f45c791888b"
+[[package]]
+name = "cpufeatures"
+version = "0.2.17"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "59ed5838eebb26a2bb2e58f6d5b5316989ae9d08bab10e0e6d103e656d1b0280"
+dependencies = [
+ "libc",
+]
+[[package]]
+name = "cpufeatures"
+version = "0.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8b2a41393f66f16b0823bb79094d54ac5fbd34ab292ddafb9a0456ac9f87d201"
+dependencies = [
+ "libc",
+]
 [[package]]
 name = "crossbeam-deque"
 version = "0.8.6"
@@ -208,6 +267,26 @@ version = "0.8.21"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "d0a5c400df2834b80a4c3327b3aad3a4c4cd4de0629063962b03235697506a28"
+[[package]]
+name = "crypto-common"
+version = "0.1.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "78c8292055d1c1df0cce5d180393dc8cce0abec0a7102adb6c7b1eef6016d60a"
+dependencies = [
+ "generic-array",
+ "typenum",
+]
+[[package]]
+name = "digest"
+version = "0.10.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9ed9a281f7bc9b7576e61468ba615a66a5c8cfdff42420a70aa82701a3b1e292"
+dependencies = [
+ "block-buffer",
+ "crypto-common",
+]
 [[package]]
 name = "dirs"
 version = "6.0.0"
@@ -359,6 +438,16 @@ dependencies = [
  "slab",
 ]
+[[package]]
+name = "generic-array"
+version = "0.14.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "85649ca51fd72272d7821adaf274ad91c288277713d9c18820d8499a7ff69e9a"
+dependencies = [
+ "typenum",
+ "version_check",
+]
 [[package]]
 name = "getrandom"
 version = "0.2.17"
@@ -873,9 +962,9 @@ dependencies = [
 [[package]]
 name = "pyo3"
-version = "0.23.5"
+version = "0.24.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7778bffd85cf38175ac1f545509665d0b9b92a198ca7941f131f85f7a4f9a872"
+checksum = "e5203598f366b11a02b13aa20cab591229ff0a89fd121a308a5df751d5fc9219"
 dependencies = [
  "cfg-if",
  "indoc",
@@ -891,9 +980,9 @@ dependencies = [
 [[package]]
 name = "pyo3-build-config"
-version = "0.23.5"
+version = "0.24.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "94f6cbe86ef3bf18998d9df6e0f3fc1050a8c5efa409bf712e661a4366e010fb"
+checksum = "99636d423fa2ca130fa5acde3059308006d46f98caac629418e53f7ebb1e9999"
 dependencies = [
  "once_cell",
  "target-lexicon",
@@ -901,9 +990,9 @@ dependencies = [
 [[package]]
 name = "pyo3-ffi"
-version = "0.23.5"
+version = "0.24.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e9f1b4c431c0bb1c8fb0a338709859eed0d030ff6daa34368d3b152a63dfdd8d"
+checksum = "78f9cf92ba9c409279bc3305b5409d90db2d2c22392d443a87df3a1adad59e33"
 dependencies = [
  "libc",
  "pyo3-build-config",
@@ -911,9 +1000,9 @@ dependencies = [
 [[package]]
 name = "pyo3-macros"
-version = "0.23.5"
+version = "0.24.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "fbc2201328f63c4710f68abdf653c89d8dbc2858b88c5d88b0ff38a75288a9da"
+checksum = "0b999cb1a6ce21f9a6b147dcf1be9ffedf02e0043aec74dc390f3007047cecd9"
 dependencies = [
  "proc-macro2",
  "pyo3-macros-backend",
@@ -923,9 +1012,9 @@ dependencies = [
 [[package]]
 name = "pyo3-macros-backend"
-version = "0.23.5"
+version = "0.24.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "fca6726ad0f3da9c9de093d6f116a93c1a38e417ed73bf138472cf4064f72028"
+checksum = "822ece1c7e1012745607d5cf0bcb2874769f0f7cb34c4cde03b9358eb9ef911a"
 dependencies = [
  "heck",
  "proc-macro2",
@@ -1026,13 +1115,15 @@ checksum = "dc897dd8d9e8bd1ed8cdad82b5966c3e0ecae09fb1907d58efaa013543185d0a"
 [[package]]
 name = "running-process"
-version = "4.0.2"
+version = "4.1.0"
 dependencies = [
  "anyhow",
+ "blake3",
  "bytes",
  "clap",
  "dirs",
  "futures-util",
+ "getrandom 0.4.2",
  "interprocess",
  "libc",
  "portable-pty",
@@ -1043,6 +1134,7 @@ dependencies = [
  "rusqlite",
  "serde",
  "serde_json",
+ "sha2",
  "sysinfo",
  "tempfile",
  "test-watchdog",
@@ -1058,7 +1150,7 @@ dependencies = [
 [[package]]
 name = "running-process-py"
-version = "4.0.2"
+version = "4.1.0"
 dependencies = [
  "interprocess",
  "libc",
@@ -1187,6 +1279,17 @@ dependencies = [
  "windows-sys 0.61.2",
 ]
+[[package]]
+name = "sha2"
+version = "0.10.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a7507d819769d01a365ab707794a4084392c824f54a7a6a7862f8c3d0892b283"
+dependencies = [
+ "cfg-if",
+ "cpufeatures 0.2.17",
+ "digest",
+]
 [[package]]
 name = "sharded-slab"
 version = "0.1.7"
@@ -1284,9 +1387,9 @@ dependencies = [
 [[package]]
 name = "target-lexicon"
-version = "0.12.16"
+version = "0.13.5"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "61c41af27dd6d1e27b1b16b489db798443478cef1f06a660c96db617ba5de3b1"
+checksum = "adb6935a6f5c20170eeceb1a3835a49e12e19d792f6dd344ccc76a985ca5a6ca"
 [[package]]
 name = "tempfile"
@@ -1505,6 +1608,12 @@ dependencies = [
  "tracing-log",
 ]
+[[package]]
+name = "typenum"
+version = "1.20.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b6f5e870be6c3b371b77fe0ee0bafb859fa4964b4404c27de1d380043c4dda20"
 [[package]]
 name = "unicode-ident"
 version = "1.0.24"

{running_process-4.0.2 → running_process-4.1.0}/Cargo.toml RENAMED Viewed

@@ -3,7 +3,7 @@ resolver = "2"
 members = ["crates/running-process", "crates/running-process-py", "crates/test-watchdog"]
 [workspace.package]
-version = "4.0.2"
+version = "4.1.0"
 edition = "2021"
 rust-version = "1.85"
 license = "BSD-3-Clause"
@@ -11,10 +11,16 @@ repository = "https://github.com/zackees/running-process"
 homepage = "https://github.com/zackees/running-process"
 [workspace.dependencies]
-pyo3 = { version = "0.23", features = ["abi3-py310"] }
+pyo3 = { version = "0.24", features = ["abi3-py310"] }
 rusqlite = { version = "0.32", features = ["bundled"] }
 thiserror = "2"
+# Phase 0 of #228: workspace-wide lints. `disallowed_methods` is wired
+# through `clippy.toml` at the workspace root so every member crate
+# refuses bincode serialization (broker wire stays prost-only).
+[workspace.lints.clippy]
+disallowed_methods = "deny"
 [profile.release]
 debug = true
 strip = "none"

{running_process-4.0.2 → running_process-4.1.0}/PKG-INFO RENAMED Viewed

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: running_process
-Version: 4.0.2
+Version: 4.1.0
 License-File: LICENSE
 Summary: A Rust-backed subprocess wrapper with split stdout/stderr streaming
 Home-Page: https://github.com/zackees/running-process
@@ -18,6 +18,18 @@ Project-URL: Repository, https://github.com/zackees/running-process
 `running-process` is what you wished python's subprocess was. Blazing fast, highly concurrent, huge feature list, dead process tracking, pty support. Built in Rust with a thin python api.
+## v1 Broker Docs
+The v1 broker work is documented as a stable spec alongside the implementation:
+- Core spec: [architecture](docs/v1-architecture-overview.md), [frozen commitments](docs/v1-frozen-commitments.md), [pipe naming](docs/v1-pipe-naming.md), [platform behavior](docs/v1-platform-behavior.md), [security model](docs/v1-security-model.md)
+- Schemas: [wire envelope](docs/v1-wire-envelope.md), [cache manifest](docs/v1-cache-manifest.md), [service definition](docs/v1-service-definition.md), [lifecycle events](docs/v1-lifecycle-events.md)
+- Consumer adoption: [dashboard](docs/v1-consumer-adoption-dashboard.md), [clud](docs/consumer-adoption-clud.md), [zccache](docs/consumer-adoption-zccache.md), [soldr](docs/consumer-adoption-soldr.md), [fbuild](docs/consumer-adoption-fbuild.md)
+- Operations: [broker architecture](docs/v1-broker-architecture.md), [admin verbs](docs/v1-admin-verbs.md), [backend lifecycle](docs/v1-backend-lifecycle.md), [handoff optimization](docs/v1-handoff-optimization.md), [observability](docs/v1-observability.md)
+- Rollout: [policy](docs/v1-rollout-policy.md), [escape hatch](docs/v1-escape-hatch.md), [troubleshooting](docs/v1-troubleshooting.md)
+- Examples: [minimal consumer](examples/minimal-consumer/), [release-handles CLI](examples/release-handles-cli/), [custom isolation](examples/custom-isolation/)
+- Contrib service templates: [systemd](contrib/systemd/running-process-broker-v1.service), [launchd](contrib/launchd/com.zackees.running-process-broker-v1.plist), [Windows service installer](contrib/windows-service/install.ps1)
 | Platform | Build | Lint | Unit Test | Integration Test |
 |----------|-------|------|-----------|------------------|
 | Linux x86 | [![Build](https://github.com/zackees/running-process/actions/workflows/linux-x86-build.yml/badge.svg)](https://github.com/zackees/running-process/actions/workflows/linux-x86-build.yml) | [![Lint](https://github.com/zackees/running-process/actions/workflows/linux-x86-lint.yml/badge.svg)](https://github.com/zackees/running-process/actions/workflows/linux-x86-lint.yml) | [![Unit Test](https://github.com/zackees/running-process/actions/workflows/linux-x86-unit-test.yml/badge.svg)](https://github.com/zackees/running-process/actions/workflows/linux-x86-unit-test.yml) | [![Integration Test](https://github.com/zackees/running-process/actions/workflows/linux-x86-integration-test.yml/badge.svg)](https://github.com/zackees/running-process/actions/workflows/linux-x86-integration-test.yml) |
@@ -47,6 +59,22 @@ On those platforms, `RunningProcess.pseudo_terminal(...)`, `wait_for_expect(...)
 `Pty.is_available()` remains as a compatibility shim and only reports `False` on unsupported platforms.
+## Terminal Graphics Capabilities
+Rust callers can inspect terminal graphics support with
+`running_process::current_terminal_capabilities()` or the pure
+`running_process::detect_terminal_capabilities(...)` helper. The result reports
+Sixel, Kitty graphics, and iTerm2 `File=` image support as structured
+capability records with `status`, `evidence`, `source`, and `risks` metadata.
+The detector intentionally distinguishes terminal hosts from shells. `cmd.exe`,
+PowerShell, Git Bash, bash, zsh, and fish are command interpreters; they do not
+prove graphics support. The terminal host or multiplexer does: Windows
+Terminal, xterm, foot, Konsole, WezTerm, Kitty, iTerm2, tmux, GNU screen, and
+similar programs provide the relevant evidence. Weak aliases such as
+`TERM=xterm-256color` are reported as unknown unless a live probe or stronger
+host signal confirms support.
 ## CLI Helpers
 The package installs a `running-process` wrapper CLI for supervised command execution:
@@ -59,6 +87,43 @@ running-process --find-leaks -- python worker.py
 `--find-leaks` tags the wrapped process tree with a unique originator marker and reports any
 descendants still alive after the direct child exits.
+## Cleanup Manifests
+The `running-process-cleanup` binary reads v1 broker `CacheManifest` files
+without requiring a broker or daemon to be running. Manifests are written in two
+places:
+- each daemon cache root: `.running-process-manifest.pb`
+- the central registry: `$XDG_DATA_HOME/running-process/manifests/` on Linux,
+  `~/Library/Application Support/running-process/manifests/` on macOS, and
+  `%APPDATA%\running-process\manifests\` on Windows
+Destructive commands are dry-run by default. Add `--confirm` to delete selected
+roots:
+```bash
+running-process-cleanup list --json
+running-process-cleanup verify --json
+running-process-cleanup prune --dormant-after 30d
+running-process-cleanup prune --dormant-after 30d --confirm
+running-process-cleanup prune --keep-current --keep-last 2
+running-process-cleanup uninstall zccache --keep-config
+running-process-cleanup instances --json
+```
+For GitHub Actions cache restores, run verification after `actions/cache@v4`
+restores daemon state. Manifests from a prior runner boot are reported as stale:
+```yaml
+- uses: actions/cache@v4
+  with:
+    path: ~/.local/share/running-process
+    key: running-process-${{ runner.os }}-${{ hashFiles('**/Cargo.lock') }}
+- name: Verify restored running-process manifests
+  run: running-process-cleanup verify --json
+```
 ## Pipe-backed API
 ```python

{running_process-4.0.2 → running_process-4.1.0}/README.md RENAMED Viewed

@@ -4,6 +4,18 @@
 `running-process` is what you wished python's subprocess was. Blazing fast, highly concurrent, huge feature list, dead process tracking, pty support. Built in Rust with a thin python api.
+## v1 Broker Docs
+The v1 broker work is documented as a stable spec alongside the implementation:
+- Core spec: [architecture](docs/v1-architecture-overview.md), [frozen commitments](docs/v1-frozen-commitments.md), [pipe naming](docs/v1-pipe-naming.md), [platform behavior](docs/v1-platform-behavior.md), [security model](docs/v1-security-model.md)
+- Schemas: [wire envelope](docs/v1-wire-envelope.md), [cache manifest](docs/v1-cache-manifest.md), [service definition](docs/v1-service-definition.md), [lifecycle events](docs/v1-lifecycle-events.md)
+- Consumer adoption: [dashboard](docs/v1-consumer-adoption-dashboard.md), [clud](docs/consumer-adoption-clud.md), [zccache](docs/consumer-adoption-zccache.md), [soldr](docs/consumer-adoption-soldr.md), [fbuild](docs/consumer-adoption-fbuild.md)
+- Operations: [broker architecture](docs/v1-broker-architecture.md), [admin verbs](docs/v1-admin-verbs.md), [backend lifecycle](docs/v1-backend-lifecycle.md), [handoff optimization](docs/v1-handoff-optimization.md), [observability](docs/v1-observability.md)
+- Rollout: [policy](docs/v1-rollout-policy.md), [escape hatch](docs/v1-escape-hatch.md), [troubleshooting](docs/v1-troubleshooting.md)
+- Examples: [minimal consumer](examples/minimal-consumer/), [release-handles CLI](examples/release-handles-cli/), [custom isolation](examples/custom-isolation/)
+- Contrib service templates: [systemd](contrib/systemd/running-process-broker-v1.service), [launchd](contrib/launchd/com.zackees.running-process-broker-v1.plist), [Windows service installer](contrib/windows-service/install.ps1)
 | Platform | Build | Lint | Unit Test | Integration Test |
 |----------|-------|------|-----------|------------------|
 | Linux x86 | [![Build](https://github.com/zackees/running-process/actions/workflows/linux-x86-build.yml/badge.svg)](https://github.com/zackees/running-process/actions/workflows/linux-x86-build.yml) | [![Lint](https://github.com/zackees/running-process/actions/workflows/linux-x86-lint.yml/badge.svg)](https://github.com/zackees/running-process/actions/workflows/linux-x86-lint.yml) | [![Unit Test](https://github.com/zackees/running-process/actions/workflows/linux-x86-unit-test.yml/badge.svg)](https://github.com/zackees/running-process/actions/workflows/linux-x86-unit-test.yml) | [![Integration Test](https://github.com/zackees/running-process/actions/workflows/linux-x86-integration-test.yml/badge.svg)](https://github.com/zackees/running-process/actions/workflows/linux-x86-integration-test.yml) |
@@ -33,6 +45,22 @@ On those platforms, `RunningProcess.pseudo_terminal(...)`, `wait_for_expect(...)
 `Pty.is_available()` remains as a compatibility shim and only reports `False` on unsupported platforms.
+## Terminal Graphics Capabilities
+Rust callers can inspect terminal graphics support with
+`running_process::current_terminal_capabilities()` or the pure
+`running_process::detect_terminal_capabilities(...)` helper. The result reports
+Sixel, Kitty graphics, and iTerm2 `File=` image support as structured
+capability records with `status`, `evidence`, `source`, and `risks` metadata.
+The detector intentionally distinguishes terminal hosts from shells. `cmd.exe`,
+PowerShell, Git Bash, bash, zsh, and fish are command interpreters; they do not
+prove graphics support. The terminal host or multiplexer does: Windows
+Terminal, xterm, foot, Konsole, WezTerm, Kitty, iTerm2, tmux, GNU screen, and
+similar programs provide the relevant evidence. Weak aliases such as
+`TERM=xterm-256color` are reported as unknown unless a live probe or stronger
+host signal confirms support.
 ## CLI Helpers
 The package installs a `running-process` wrapper CLI for supervised command execution:
@@ -45,6 +73,43 @@ running-process --find-leaks -- python worker.py
 `--find-leaks` tags the wrapped process tree with a unique originator marker and reports any
 descendants still alive after the direct child exits.
+## Cleanup Manifests
+The `running-process-cleanup` binary reads v1 broker `CacheManifest` files
+without requiring a broker or daemon to be running. Manifests are written in two
+places:
+- each daemon cache root: `.running-process-manifest.pb`
+- the central registry: `$XDG_DATA_HOME/running-process/manifests/` on Linux,
+  `~/Library/Application Support/running-process/manifests/` on macOS, and
+  `%APPDATA%\running-process\manifests\` on Windows
+Destructive commands are dry-run by default. Add `--confirm` to delete selected
+roots:
+```bash
+running-process-cleanup list --json
+running-process-cleanup verify --json
+running-process-cleanup prune --dormant-after 30d
+running-process-cleanup prune --dormant-after 30d --confirm
+running-process-cleanup prune --keep-current --keep-last 2
+running-process-cleanup uninstall zccache --keep-config
+running-process-cleanup instances --json
+```
+For GitHub Actions cache restores, run verification after `actions/cache@v4`
+restores daemon state. Manifests from a prior runner boot are reported as stale:
+```yaml
+- uses: actions/cache@v4
+  with:
+    path: ~/.local/share/running-process
+    key: running-process-${{ runner.os }}-${{ hashFiles('**/Cargo.lock') }}
+- name: Verify restored running-process manifests
+  run: running-process-cleanup verify --json
+```
 ## Pipe-backed API
 ```python

{running_process-4.0.2 → running_process-4.1.0}/crates/running-process/Cargo.toml RENAMED Viewed

@@ -7,6 +7,12 @@ license.workspace = true
 repository.workspace = true
 homepage.workspace = true
 description = "Subprocess and PTY runtime for the running-process project"
+readme = "README.md"
+[lints]
+# Phase 0 of #228: pick up the workspace-wide `disallowed_methods =
+# "deny"` so bincode serialization is rejected at compile time.
+workspace = true
 [[bin]]
 # Wave 4 of #165: PM2-style supervisor CLI absorbed from
@@ -31,6 +37,16 @@ required-features = ["daemon"]
 name = "daemon-trampoline"
 path = "src/bin/trampoline.rs"
+[[bin]]
+name = "running-process-cleanup"
+path = "src/bin/running-process-cleanup.rs"
+required-features = ["client"]
+[[bin]]
+name = "running-process-broker-v1"
+path = "src/bin/running-process-broker-v1.rs"
+required-features = ["daemon"]
 [features]
 # Final feature scheme per #165:
 # * `core`   — always-available API (spawn / pty / containment).
@@ -44,7 +60,7 @@ path = "src/bin/trampoline.rs"
 default = ["client"]
 core = []
 telemetry = []
-client = ["dep:prost", "dep:prost-types", "dep:interprocess", "dep:dirs", "dep:anyhow", "dep:clap"]
+client = ["dep:prost", "dep:prost-types", "dep:interprocess", "dep:dirs", "dep:anyhow", "dep:clap", "dep:blake3", "dep:sha2", "dep:getrandom"]
 daemon = [
     "client",
     "interprocess/tokio",
@@ -59,7 +75,7 @@ libc = "0.2"
 portable-pty = "0.9"
 sysinfo = "0.30"
 thiserror = { workspace = true }
-winapi = { version = "0.3", features = ["errhandlingapi", "fileapi", "handleapi", "ioapiset", "jobapi2", "namedpipeapi", "processthreadsapi", "winnt", "minwindef", "windef", "winuser", "consoleapi", "processenv", "synchapi", "winbase", "wincon", "tlhelp32"] }
+winapi = { version = "0.3", features = ["errhandlingapi", "fileapi", "handleapi", "ioapiset", "jobapi2", "namedpipeapi", "processthreadsapi", "winnt", "minwindef", "windef", "winuser", "consoleapi", "processenv", "synchapi", "winbase", "wincon", "tlhelp32", "securitybaseapi", "winerror", "sysinfoapi"] }
 # Wave 4 of #165: client-feature deps. All optional so the always-on
 # `core` API stays a minimal-dep leaf.
 prost = { version = "0.14", optional = true }
@@ -69,6 +85,12 @@ dirs = { version = "6", optional = true }
 # Used by the `runpm` PM2-style supervisor CLI (src/bin/runpm.rs).
 anyhow = { version = "1", optional = true }
 clap = { version = "4", features = ["derive"], optional = true }
+# Phase 1 of #228 (issue #230): broker user-SID hashing in
+# `src/broker/lifecycle/sid.rs`. blake3 is small (no_std-capable,
+# no transitive deps beyond `arrayref`/`arrayvec` and `cc`-built SIMD).
+blake3 = { version = "1", optional = true }
+sha2 = { version = "0.10", optional = true }
+getrandom = { version = "0.4", optional = true }
 # Wave 5 of #165: daemon-feature deps. All optional.
 tokio = { version = "1", features = ["full"], optional = true }
 tokio-util = { version = "0.7", features = ["codec"], optional = true }
@@ -108,11 +130,13 @@ test-watchdog = { path = "../test-watchdog" }
 windows-sys = { version = "0.59", features = [
     "Win32_Foundation",
     "Win32_Security",
+    "Win32_Security_Authorization",
     "Win32_Storage_FileSystem",
     "Win32_System_Console",
     "Win32_System_IO",
     "Win32_System_Memory",
     "Win32_System_Pipes",
+    "Win32_System_Registry",
     "Win32_System_Threading",
     "Win32_System_Diagnostics_Debug",
 ] }

running_process-4.1.0/crates/running-process/README.md ADDED Viewed

@@ -0,0 +1,54 @@
+# running-process crate
+This crate contains the Rust implementation for `running-process`, including
+the v1 broker protocol schemas and lifecycle helpers.
+## v1 Broker Specification
+Core broker docs:
+- [Architecture overview](../../docs/v1-architecture-overview.md)
+- [Frozen commitments](../../docs/v1-frozen-commitments.md)
+- [Pipe naming](../../docs/v1-pipe-naming.md)
+- [Platform behavior](../../docs/v1-platform-behavior.md)
+- [Security model](../../docs/v1-security-model.md)
+Schema docs:
+- [Wire envelope](../../docs/v1-wire-envelope.md)
+- [Cache manifest](../../docs/v1-cache-manifest.md)
+- [Service definition](../../docs/v1-service-definition.md)
+- [Lifecycle events](../../docs/v1-lifecycle-events.md)
+Consumer adoption guides:
+- [Dashboard](../../docs/v1-consumer-adoption-dashboard.md)
+- [clud](../../docs/consumer-adoption-clud.md)
+- [zccache](../../docs/consumer-adoption-zccache.md)
+- [soldr](../../docs/consumer-adoption-soldr.md)
+- [fbuild](../../docs/consumer-adoption-fbuild.md)
+Operations and rollout docs:
+- [Broker internal architecture](../../docs/v1-broker-architecture.md)
+- [Admin verbs](../../docs/v1-admin-verbs.md)
+- [Backend lifecycle](../../docs/v1-backend-lifecycle.md)
+- [Handoff optimization](../../docs/v1-handoff-optimization.md)
+- [Observability](../../docs/v1-observability.md)
+- [Rollout policy](../../docs/v1-rollout-policy.md)
+- [Escape hatch](../../docs/v1-escape-hatch.md)
+- [Troubleshooting](../../docs/v1-troubleshooting.md)
+Examples:
+- [Minimal consumer](../../examples/minimal-consumer/)
+- [Release-handles CLI](../../examples/release-handles-cli/)
+- [Custom isolation](../../examples/custom-isolation/)
+Contrib service templates:
+- [systemd user service](../../contrib/systemd/running-process-broker-v1.service)
+- [macOS LaunchAgent](../../contrib/launchd/com.zackees.running-process-broker-v1.plist)
+- [Windows service installer](../../contrib/windows-service/install.ps1)
+The authoritative v1 proto files live under `proto/broker_v1/`.

running_process-4.1.0/crates/running-process/build.rs ADDED Viewed

@@ -0,0 +1,22 @@
+fn main() -> Result<(), Box<dyn std::error::Error>> {
+    // Without these, edits to the .proto don't reliably retrigger
+    // codegen on incremental builds.
+    println!("cargo:rerun-if-changed=proto/daemon.proto");
+    println!("cargo:rerun-if-changed=proto/broker_v1/broker_v1_envelope.proto");
+    println!("cargo:rerun-if-changed=proto/broker_v1/broker_v1_admin.proto");
+    println!("cargo:rerun-if-changed=proto/broker_v1/broker_v1_manifest.proto");
+    println!("cargo:rerun-if-changed=proto/broker_v1/broker_v1_service_def.proto");
+    println!("cargo:rerun-if-changed=build.rs");
+    let file_descriptors = protox::compile(
+        [
+            "proto/daemon.proto",
+            "proto/broker_v1/broker_v1_envelope.proto",
+            "proto/broker_v1/broker_v1_admin.proto",
+            "proto/broker_v1/broker_v1_manifest.proto",
+            "proto/broker_v1/broker_v1_service_def.proto",
+        ],
+        ["proto/"],
+    )?;
+    prost_build::compile_fds(file_descriptors)?;
+    Ok(())
+}

running_process-4.1.0/crates/running-process/proto/broker_v1/broker_v1_admin.proto ADDED Viewed

@@ -0,0 +1,45 @@
+// running-process v1 broker admin payload schema.
+//
+// Admin frames use Frame.payload_protocol = 0xAD01 and carry AdminRequest or
+// AdminReply in Frame.payload. This file is part of the frozen v1 broker
+// package; breaking changes require a v2 broker.
+syntax = "proto3";
+package running_process.broker.v1;
+message AdminRequest {
+  AdminVerb verb = 1;
+  bool json = 2;
+  string service_name = 3;   // backend-health
+  string output_path = 4;    // diagnose
+  reserved 10 to 20;
+}
+message AdminReply {
+  AdminReplyKind kind = 1;
+  string body = 2;
+  uint32 exit_code = 3;
+  string content_type = 4;
+  reserved 10 to 20;
+}
+enum AdminVerb {
+  ADMIN_VERB_UNSPECIFIED = 0;
+  ADMIN_VERB_STATUS = 1;
+  ADMIN_VERB_DUMP = 2;
+  ADMIN_VERB_LIST_INSTANCES = 3;
+  ADMIN_VERB_HEALTHZ = 4;
+  ADMIN_VERB_READYZ = 5;
+  ADMIN_VERB_BACKEND_HEALTH = 6;
+  ADMIN_VERB_CONFIG = 7;
+  ADMIN_VERB_DIAGNOSE = 8;
+  ADMIN_VERB_METRICS = 9;
+  reserved 10 to 20;
+}
+enum AdminReplyKind {
+  ADMIN_REPLY_KIND_TEXT = 0;
+  ADMIN_REPLY_KIND_JSON = 1;
+  ADMIN_REPLY_KIND_OPENMETRICS = 2;
+  reserved 10 to 20;
+}

running-process 4.0.2__tar.gz → 4.1.0__tar.gz

running-process 4.0.2tar.gz → 4.1.0tar.gz