running-process 4.0.3__tar.gz → 4.1.0__tar.gz

{running_process-4.0.3 → running_process-4.1.0}/Cargo.lock

@@ -79,6 +79,18 @@ version = "1.0.102"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "7f202df86484c868dbad7eaa557ef785d5c66295e41b460ef922eca0723b842c"
 
+[[package]]
+name = "arrayref"
+version = "0.3.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "76a2e8124351fda1ef8aaaa3bbd7ebbcb486bbcd4225aca0aa0d84bb2db8fecb"
+
+[[package]]
+name = "arrayvec"
+version = "0.7.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7c02d123df017efcdfbd739ef81735b36c5ba83ec3c59c80a9d7ecc718f92e50"
+
 [[package]]
 name = "autocfg"
 version = "1.5.0"
@@ -103,6 +115,29 @@ version = "2.11.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "c4512299f36f043ab09a583e57bceb5a5aab7a73db1805848e8fef3c9e8c78b3"
 
+[[package]]
+name = "blake3"
+version = "1.8.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0aa83c34e62843d924f905e0f5c866eb1dd6545fc4d719e803d9ba6030371fce"
+dependencies = [
+ "arrayref",
+ "arrayvec",
+ "cc",
+ "cfg-if",
+ "constant_time_eq",
+ "cpufeatures 0.3.0",
+]
+
+[[package]]
+name = "block-buffer"
+version = "0.10.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3078c7629b62d3f0439517fa394996acacc5cbc91c5a20d8c658e77abd503a71"
+dependencies = [
+ "generic-array",
+]
+
 [[package]]
 name = "bytes"
 version = "1.11.1"
@@ -177,12 +212,36 @@ version = "1.0.5"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "1d07550c9036bf2ae0c684c4297d503f838287c83c53686d05370d0e139ae570"
 
+[[package]]
+name = "constant_time_eq"
+version = "0.4.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3d52eff69cd5e647efe296129160853a42795992097e8af39800e1060caeea9b"
+
 [[package]]
 name = "core-foundation-sys"
 version = "0.8.7"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "773648b94d0e5d620f64f280777445740e61fe701025087ec8b57f45c791888b"
 
+[[package]]
+name = "cpufeatures"
+version = "0.2.17"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "59ed5838eebb26a2bb2e58f6d5b5316989ae9d08bab10e0e6d103e656d1b0280"
+dependencies = [
+ "libc",
+]
+
+[[package]]
+name = "cpufeatures"
+version = "0.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8b2a41393f66f16b0823bb79094d54ac5fbd34ab292ddafb9a0456ac9f87d201"
+dependencies = [
+ "libc",
+]
+
 [[package]]
 name = "crossbeam-deque"
 version = "0.8.6"
@@ -208,6 +267,26 @@ version = "0.8.21"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "d0a5c400df2834b80a4c3327b3aad3a4c4cd4de0629063962b03235697506a28"
 
+[[package]]
+name = "crypto-common"
+version = "0.1.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "78c8292055d1c1df0cce5d180393dc8cce0abec0a7102adb6c7b1eef6016d60a"
+dependencies = [
+ "generic-array",
+ "typenum",
+]
+
+[[package]]
+name = "digest"
+version = "0.10.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9ed9a281f7bc9b7576e61468ba615a66a5c8cfdff42420a70aa82701a3b1e292"
+dependencies = [
+ "block-buffer",
+ "crypto-common",
+]
+
 [[package]]
 name = "dirs"
 version = "6.0.0"
@@ -359,6 +438,16 @@ dependencies = [
  "slab",
 ]
 
+[[package]]
+name = "generic-array"
+version = "0.14.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "85649ca51fd72272d7821adaf274ad91c288277713d9c18820d8499a7ff69e9a"
+dependencies = [
+ "typenum",
+ "version_check",
+]
+
 [[package]]
 name = "getrandom"
 version = "0.2.17"
@@ -873,9 +962,9 @@ dependencies = [
 
 [[package]]
 name = "pyo3"
-version = "0.23.5"
+version = "0.24.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7778bffd85cf38175ac1f545509665d0b9b92a198ca7941f131f85f7a4f9a872"
+checksum = "e5203598f366b11a02b13aa20cab591229ff0a89fd121a308a5df751d5fc9219"
 dependencies = [
  "cfg-if",
  "indoc",
@@ -891,9 +980,9 @@ dependencies = [
 
 [[package]]
 name = "pyo3-build-config"
-version = "0.23.5"
+version = "0.24.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "94f6cbe86ef3bf18998d9df6e0f3fc1050a8c5efa409bf712e661a4366e010fb"
+checksum = "99636d423fa2ca130fa5acde3059308006d46f98caac629418e53f7ebb1e9999"
 dependencies = [
  "once_cell",
  "target-lexicon",
@@ -901,9 +990,9 @@ dependencies = [
 
 [[package]]
 name = "pyo3-ffi"
-version = "0.23.5"
+version = "0.24.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e9f1b4c431c0bb1c8fb0a338709859eed0d030ff6daa34368d3b152a63dfdd8d"
+checksum = "78f9cf92ba9c409279bc3305b5409d90db2d2c22392d443a87df3a1adad59e33"
 dependencies = [
  "libc",
  "pyo3-build-config",
@@ -911,9 +1000,9 @@ dependencies = [
 
 [[package]]
 name = "pyo3-macros"
-version = "0.23.5"
+version = "0.24.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "fbc2201328f63c4710f68abdf653c89d8dbc2858b88c5d88b0ff38a75288a9da"
+checksum = "0b999cb1a6ce21f9a6b147dcf1be9ffedf02e0043aec74dc390f3007047cecd9"
 dependencies = [
  "proc-macro2",
  "pyo3-macros-backend",
@@ -923,9 +1012,9 @@ dependencies = [
 
 [[package]]
 name = "pyo3-macros-backend"
-version = "0.23.5"
+version = "0.24.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "fca6726ad0f3da9c9de093d6f116a93c1a38e417ed73bf138472cf4064f72028"
+checksum = "822ece1c7e1012745607d5cf0bcb2874769f0f7cb34c4cde03b9358eb9ef911a"
 dependencies = [
  "heck",
  "proc-macro2",
@@ -1026,13 +1115,15 @@ checksum = "dc897dd8d9e8bd1ed8cdad82b5966c3e0ecae09fb1907d58efaa013543185d0a"
 
 [[package]]
 name = "running-process"
-version = "4.0.3"
+version = "4.1.0"
 dependencies = [
  "anyhow",
+ "blake3",
  "bytes",
  "clap",
  "dirs",
  "futures-util",
+ "getrandom 0.4.2",
  "interprocess",
  "libc",
  "portable-pty",
@@ -1043,6 +1134,7 @@ dependencies = [
  "rusqlite",
  "serde",
  "serde_json",
+ "sha2",
  "sysinfo",
  "tempfile",
  "test-watchdog",
@@ -1058,7 +1150,7 @@ dependencies = [
 
 [[package]]
 name = "running-process-py"
-version = "4.0.3"
+version = "4.1.0"
 dependencies = [
  "interprocess",
  "libc",
@@ -1187,6 +1279,17 @@ dependencies = [
  "windows-sys 0.61.2",
 ]
 
+[[package]]
+name = "sha2"
+version = "0.10.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a7507d819769d01a365ab707794a4084392c824f54a7a6a7862f8c3d0892b283"
+dependencies = [
+ "cfg-if",
+ "cpufeatures 0.2.17",
+ "digest",
+]
+
 [[package]]
 name = "sharded-slab"
 version = "0.1.7"
@@ -1284,9 +1387,9 @@ dependencies = [
 
 [[package]]
 name = "target-lexicon"
-version = "0.12.16"
+version = "0.13.5"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "61c41af27dd6d1e27b1b16b489db798443478cef1f06a660c96db617ba5de3b1"
+checksum = "adb6935a6f5c20170eeceb1a3835a49e12e19d792f6dd344ccc76a985ca5a6ca"
 
 [[package]]
 name = "tempfile"
@@ -1505,6 +1608,12 @@ dependencies = [
  "tracing-log",
 ]
 
+[[package]]
+name = "typenum"
+version = "1.20.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b6f5e870be6c3b371b77fe0ee0bafb859fa4964b4404c27de1d380043c4dda20"
+
 [[package]]
 name = "unicode-ident"
 version = "1.0.24"

{running_process-4.0.3 → running_process-4.1.0}/Cargo.toml

@@ -3,7 +3,7 @@ resolver = "2"
 members = ["crates/running-process", "crates/running-process-py", "crates/test-watchdog"]
 
 [workspace.package]
-version = "4.0.3"
+version = "4.1.0"
 edition = "2021"
 rust-version = "1.85"
 license = "BSD-3-Clause"
@@ -11,10 +11,16 @@ repository = "https://github.com/zackees/running-process"
 homepage = "https://github.com/zackees/running-process"
 
 [workspace.dependencies]
-pyo3 = { version = "0.23", features = ["abi3-py310"] }
+pyo3 = { version = "0.24", features = ["abi3-py310"] }
 rusqlite = { version = "0.32", features = ["bundled"] }
 thiserror = "2"
 
+# Phase 0 of #228: workspace-wide lints. `disallowed_methods` is wired
+# through `clippy.toml` at the workspace root so every member crate
+# refuses bincode serialization (broker wire stays prost-only).
+[workspace.lints.clippy]
+disallowed_methods = "deny"
+
 [profile.release]
 debug = true
 strip = "none"

{running_process-4.0.3 → running_process-4.1.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: running_process
-Version: 4.0.3
+Version: 4.1.0
 License-File: LICENSE
 Summary: A Rust-backed subprocess wrapper with split stdout/stderr streaming
 Home-Page: https://github.com/zackees/running-process
@@ -18,6 +18,18 @@ Project-URL: Repository, https://github.com/zackees/running-process
 
 `running-process` is what you wished python's subprocess was. Blazing fast, highly concurrent, huge feature list, dead process tracking, pty support. Built in Rust with a thin python api.
 
+## v1 Broker Docs
+
+The v1 broker work is documented as a stable spec alongside the implementation:
+
+- Core spec: [architecture](docs/v1-architecture-overview.md), [frozen commitments](docs/v1-frozen-commitments.md), [pipe naming](docs/v1-pipe-naming.md), [platform behavior](docs/v1-platform-behavior.md), [security model](docs/v1-security-model.md)
+- Schemas: [wire envelope](docs/v1-wire-envelope.md), [cache manifest](docs/v1-cache-manifest.md), [service definition](docs/v1-service-definition.md), [lifecycle events](docs/v1-lifecycle-events.md)
+- Consumer adoption: [dashboard](docs/v1-consumer-adoption-dashboard.md), [clud](docs/consumer-adoption-clud.md), [zccache](docs/consumer-adoption-zccache.md), [soldr](docs/consumer-adoption-soldr.md), [fbuild](docs/consumer-adoption-fbuild.md)
+- Operations: [broker architecture](docs/v1-broker-architecture.md), [admin verbs](docs/v1-admin-verbs.md), [backend lifecycle](docs/v1-backend-lifecycle.md), [handoff optimization](docs/v1-handoff-optimization.md), [observability](docs/v1-observability.md)
+- Rollout: [policy](docs/v1-rollout-policy.md), [escape hatch](docs/v1-escape-hatch.md), [troubleshooting](docs/v1-troubleshooting.md)
+- Examples: [minimal consumer](examples/minimal-consumer/), [release-handles CLI](examples/release-handles-cli/), [custom isolation](examples/custom-isolation/)
+- Contrib service templates: [systemd](contrib/systemd/running-process-broker-v1.service), [launchd](contrib/launchd/com.zackees.running-process-broker-v1.plist), [Windows service installer](contrib/windows-service/install.ps1)
+
 | Platform | Build | Lint | Unit Test | Integration Test |
 |----------|-------|------|-----------|------------------|
 | Linux x86 | [![Build](https://github.com/zackees/running-process/actions/workflows/linux-x86-build.yml/badge.svg)](https://github.com/zackees/running-process/actions/workflows/linux-x86-build.yml) | [![Lint](https://github.com/zackees/running-process/actions/workflows/linux-x86-lint.yml/badge.svg)](https://github.com/zackees/running-process/actions/workflows/linux-x86-lint.yml) | [![Unit Test](https://github.com/zackees/running-process/actions/workflows/linux-x86-unit-test.yml/badge.svg)](https://github.com/zackees/running-process/actions/workflows/linux-x86-unit-test.yml) | [![Integration Test](https://github.com/zackees/running-process/actions/workflows/linux-x86-integration-test.yml/badge.svg)](https://github.com/zackees/running-process/actions/workflows/linux-x86-integration-test.yml) |
@@ -75,6 +87,43 @@ running-process --find-leaks -- python worker.py
 `--find-leaks` tags the wrapped process tree with a unique originator marker and reports any
 descendants still alive after the direct child exits.
 
+## Cleanup Manifests
+
+The `running-process-cleanup` binary reads v1 broker `CacheManifest` files
+without requiring a broker or daemon to be running. Manifests are written in two
+places:
+
+- each daemon cache root: `.running-process-manifest.pb`
+- the central registry: `$XDG_DATA_HOME/running-process/manifests/` on Linux,
+  `~/Library/Application Support/running-process/manifests/` on macOS, and
+  `%APPDATA%\running-process\manifests\` on Windows
+
+Destructive commands are dry-run by default. Add `--confirm` to delete selected
+roots:
+
+```bash
+running-process-cleanup list --json
+running-process-cleanup verify --json
+running-process-cleanup prune --dormant-after 30d
+running-process-cleanup prune --dormant-after 30d --confirm
+running-process-cleanup prune --keep-current --keep-last 2
+running-process-cleanup uninstall zccache --keep-config
+running-process-cleanup instances --json
+```
+
+For GitHub Actions cache restores, run verification after `actions/cache@v4`
+restores daemon state. Manifests from a prior runner boot are reported as stale:
+
+```yaml
+- uses: actions/cache@v4
+  with:
+    path: ~/.local/share/running-process
+    key: running-process-${{ runner.os }}-${{ hashFiles('**/Cargo.lock') }}
+
+- name: Verify restored running-process manifests
+  run: running-process-cleanup verify --json
+```
+
 ## Pipe-backed API
 
 ```python

{running_process-4.0.3 → running_process-4.1.0}/README.md

@@ -4,6 +4,18 @@
 
 `running-process` is what you wished python's subprocess was. Blazing fast, highly concurrent, huge feature list, dead process tracking, pty support. Built in Rust with a thin python api.
 
+## v1 Broker Docs
+
+The v1 broker work is documented as a stable spec alongside the implementation:
+
+- Core spec: [architecture](docs/v1-architecture-overview.md), [frozen commitments](docs/v1-frozen-commitments.md), [pipe naming](docs/v1-pipe-naming.md), [platform behavior](docs/v1-platform-behavior.md), [security model](docs/v1-security-model.md)
+- Schemas: [wire envelope](docs/v1-wire-envelope.md), [cache manifest](docs/v1-cache-manifest.md), [service definition](docs/v1-service-definition.md), [lifecycle events](docs/v1-lifecycle-events.md)
+- Consumer adoption: [dashboard](docs/v1-consumer-adoption-dashboard.md), [clud](docs/consumer-adoption-clud.md), [zccache](docs/consumer-adoption-zccache.md), [soldr](docs/consumer-adoption-soldr.md), [fbuild](docs/consumer-adoption-fbuild.md)
+- Operations: [broker architecture](docs/v1-broker-architecture.md), [admin verbs](docs/v1-admin-verbs.md), [backend lifecycle](docs/v1-backend-lifecycle.md), [handoff optimization](docs/v1-handoff-optimization.md), [observability](docs/v1-observability.md)
+- Rollout: [policy](docs/v1-rollout-policy.md), [escape hatch](docs/v1-escape-hatch.md), [troubleshooting](docs/v1-troubleshooting.md)
+- Examples: [minimal consumer](examples/minimal-consumer/), [release-handles CLI](examples/release-handles-cli/), [custom isolation](examples/custom-isolation/)
+- Contrib service templates: [systemd](contrib/systemd/running-process-broker-v1.service), [launchd](contrib/launchd/com.zackees.running-process-broker-v1.plist), [Windows service installer](contrib/windows-service/install.ps1)
+
 | Platform | Build | Lint | Unit Test | Integration Test |
 |----------|-------|------|-----------|------------------|
 | Linux x86 | [![Build](https://github.com/zackees/running-process/actions/workflows/linux-x86-build.yml/badge.svg)](https://github.com/zackees/running-process/actions/workflows/linux-x86-build.yml) | [![Lint](https://github.com/zackees/running-process/actions/workflows/linux-x86-lint.yml/badge.svg)](https://github.com/zackees/running-process/actions/workflows/linux-x86-lint.yml) | [![Unit Test](https://github.com/zackees/running-process/actions/workflows/linux-x86-unit-test.yml/badge.svg)](https://github.com/zackees/running-process/actions/workflows/linux-x86-unit-test.yml) | [![Integration Test](https://github.com/zackees/running-process/actions/workflows/linux-x86-integration-test.yml/badge.svg)](https://github.com/zackees/running-process/actions/workflows/linux-x86-integration-test.yml) |
@@ -61,6 +73,43 @@ running-process --find-leaks -- python worker.py
 `--find-leaks` tags the wrapped process tree with a unique originator marker and reports any
 descendants still alive after the direct child exits.
 
+## Cleanup Manifests
+
+The `running-process-cleanup` binary reads v1 broker `CacheManifest` files
+without requiring a broker or daemon to be running. Manifests are written in two
+places:
+
+- each daemon cache root: `.running-process-manifest.pb`
+- the central registry: `$XDG_DATA_HOME/running-process/manifests/` on Linux,
+  `~/Library/Application Support/running-process/manifests/` on macOS, and
+  `%APPDATA%\running-process\manifests\` on Windows
+
+Destructive commands are dry-run by default. Add `--confirm` to delete selected
+roots:
+
+```bash
+running-process-cleanup list --json
+running-process-cleanup verify --json
+running-process-cleanup prune --dormant-after 30d
+running-process-cleanup prune --dormant-after 30d --confirm
+running-process-cleanup prune --keep-current --keep-last 2
+running-process-cleanup uninstall zccache --keep-config
+running-process-cleanup instances --json
+```
+
+For GitHub Actions cache restores, run verification after `actions/cache@v4`
+restores daemon state. Manifests from a prior runner boot are reported as stale:
+
+```yaml
+- uses: actions/cache@v4
+  with:
+    path: ~/.local/share/running-process
+    key: running-process-${{ runner.os }}-${{ hashFiles('**/Cargo.lock') }}
+
+- name: Verify restored running-process manifests
+  run: running-process-cleanup verify --json
+```
+
 ## Pipe-backed API
 
 ```python

{running_process-4.0.3 → running_process-4.1.0}/crates/running-process/Cargo.toml

@@ -7,6 +7,12 @@ license.workspace = true
 repository.workspace = true
 homepage.workspace = true
 description = "Subprocess and PTY runtime for the running-process project"
+readme = "README.md"
+
+[lints]
+# Phase 0 of #228: pick up the workspace-wide `disallowed_methods =
+# "deny"` so bincode serialization is rejected at compile time.
+workspace = true
 
 [[bin]]
 # Wave 4 of #165: PM2-style supervisor CLI absorbed from
@@ -31,6 +37,16 @@ required-features = ["daemon"]
 name = "daemon-trampoline"
 path = "src/bin/trampoline.rs"
 
+[[bin]]
+name = "running-process-cleanup"
+path = "src/bin/running-process-cleanup.rs"
+required-features = ["client"]
+
+[[bin]]
+name = "running-process-broker-v1"
+path = "src/bin/running-process-broker-v1.rs"
+required-features = ["daemon"]
+
 [features]
 # Final feature scheme per #165:
 # * `core`   — always-available API (spawn / pty / containment).
@@ -44,7 +60,7 @@ path = "src/bin/trampoline.rs"
 default = ["client"]
 core = []
 telemetry = []
-client = ["dep:prost", "dep:prost-types", "dep:interprocess", "dep:dirs", "dep:anyhow", "dep:clap"]
+client = ["dep:prost", "dep:prost-types", "dep:interprocess", "dep:dirs", "dep:anyhow", "dep:clap", "dep:blake3", "dep:sha2", "dep:getrandom"]
 daemon = [
     "client",
     "interprocess/tokio",
@@ -59,7 +75,7 @@ libc = "0.2"
 portable-pty = "0.9"
 sysinfo = "0.30"
 thiserror = { workspace = true }
-winapi = { version = "0.3", features = ["errhandlingapi", "fileapi", "handleapi", "ioapiset", "jobapi2", "namedpipeapi", "processthreadsapi", "winnt", "minwindef", "windef", "winuser", "consoleapi", "processenv", "synchapi", "winbase", "wincon", "tlhelp32"] }
+winapi = { version = "0.3", features = ["errhandlingapi", "fileapi", "handleapi", "ioapiset", "jobapi2", "namedpipeapi", "processthreadsapi", "winnt", "minwindef", "windef", "winuser", "consoleapi", "processenv", "synchapi", "winbase", "wincon", "tlhelp32", "securitybaseapi", "winerror", "sysinfoapi"] }
 # Wave 4 of #165: client-feature deps. All optional so the always-on
 # `core` API stays a minimal-dep leaf.
 prost = { version = "0.14", optional = true }
@@ -69,6 +85,12 @@ dirs = { version = "6", optional = true }
 # Used by the `runpm` PM2-style supervisor CLI (src/bin/runpm.rs).
 anyhow = { version = "1", optional = true }
 clap = { version = "4", features = ["derive"], optional = true }
+# Phase 1 of #228 (issue #230): broker user-SID hashing in
+# `src/broker/lifecycle/sid.rs`. blake3 is small (no_std-capable,
+# no transitive deps beyond `arrayref`/`arrayvec` and `cc`-built SIMD).
+blake3 = { version = "1", optional = true }
+sha2 = { version = "0.10", optional = true }
+getrandom = { version = "0.4", optional = true }
 # Wave 5 of #165: daemon-feature deps. All optional.
 tokio = { version = "1", features = ["full"], optional = true }
 tokio-util = { version = "0.7", features = ["codec"], optional = true }
@@ -108,11 +130,13 @@ test-watchdog = { path = "../test-watchdog" }
 windows-sys = { version = "0.59", features = [
     "Win32_Foundation",
     "Win32_Security",
+    "Win32_Security_Authorization",
     "Win32_Storage_FileSystem",
     "Win32_System_Console",
     "Win32_System_IO",
     "Win32_System_Memory",
     "Win32_System_Pipes",
+    "Win32_System_Registry",
     "Win32_System_Threading",
     "Win32_System_Diagnostics_Debug",
 ] }

running_process-4.1.0/crates/running-process/README.md

@@ -0,0 +1,54 @@
+# running-process crate
+
+This crate contains the Rust implementation for `running-process`, including
+the v1 broker protocol schemas and lifecycle helpers.
+
+## v1 Broker Specification
+
+Core broker docs:
+
+- [Architecture overview](../../docs/v1-architecture-overview.md)
+- [Frozen commitments](../../docs/v1-frozen-commitments.md)
+- [Pipe naming](../../docs/v1-pipe-naming.md)
+- [Platform behavior](../../docs/v1-platform-behavior.md)
+- [Security model](../../docs/v1-security-model.md)
+
+Schema docs:
+
+- [Wire envelope](../../docs/v1-wire-envelope.md)
+- [Cache manifest](../../docs/v1-cache-manifest.md)
+- [Service definition](../../docs/v1-service-definition.md)
+- [Lifecycle events](../../docs/v1-lifecycle-events.md)
+
+Consumer adoption guides:
+
+- [Dashboard](../../docs/v1-consumer-adoption-dashboard.md)
+- [clud](../../docs/consumer-adoption-clud.md)
+- [zccache](../../docs/consumer-adoption-zccache.md)
+- [soldr](../../docs/consumer-adoption-soldr.md)
+- [fbuild](../../docs/consumer-adoption-fbuild.md)
+
+Operations and rollout docs:
+
+- [Broker internal architecture](../../docs/v1-broker-architecture.md)
+- [Admin verbs](../../docs/v1-admin-verbs.md)
+- [Backend lifecycle](../../docs/v1-backend-lifecycle.md)
+- [Handoff optimization](../../docs/v1-handoff-optimization.md)
+- [Observability](../../docs/v1-observability.md)
+- [Rollout policy](../../docs/v1-rollout-policy.md)
+- [Escape hatch](../../docs/v1-escape-hatch.md)
+- [Troubleshooting](../../docs/v1-troubleshooting.md)
+
+Examples:
+
+- [Minimal consumer](../../examples/minimal-consumer/)
+- [Release-handles CLI](../../examples/release-handles-cli/)
+- [Custom isolation](../../examples/custom-isolation/)
+
+Contrib service templates:
+
+- [systemd user service](../../contrib/systemd/running-process-broker-v1.service)
+- [macOS LaunchAgent](../../contrib/launchd/com.zackees.running-process-broker-v1.plist)
+- [Windows service installer](../../contrib/windows-service/install.ps1)
+
+The authoritative v1 proto files live under `proto/broker_v1/`.

running_process-4.1.0/crates/running-process/build.rs

@@ -0,0 +1,22 @@
+fn main() -> Result<(), Box<dyn std::error::Error>> {
+    // Without these, edits to the .proto don't reliably retrigger
+    // codegen on incremental builds.
+    println!("cargo:rerun-if-changed=proto/daemon.proto");
+    println!("cargo:rerun-if-changed=proto/broker_v1/broker_v1_envelope.proto");
+    println!("cargo:rerun-if-changed=proto/broker_v1/broker_v1_admin.proto");
+    println!("cargo:rerun-if-changed=proto/broker_v1/broker_v1_manifest.proto");
+    println!("cargo:rerun-if-changed=proto/broker_v1/broker_v1_service_def.proto");
+    println!("cargo:rerun-if-changed=build.rs");
+    let file_descriptors = protox::compile(
+        [
+            "proto/daemon.proto",
+            "proto/broker_v1/broker_v1_envelope.proto",
+            "proto/broker_v1/broker_v1_admin.proto",
+            "proto/broker_v1/broker_v1_manifest.proto",
+            "proto/broker_v1/broker_v1_service_def.proto",
+        ],
+        ["proto/"],
+    )?;
+    prost_build::compile_fds(file_descriptors)?;
+    Ok(())
+}

running_process-4.1.0/crates/running-process/proto/broker_v1/broker_v1_admin.proto

@@ -0,0 +1,45 @@
+// running-process v1 broker admin payload schema.
+//
+// Admin frames use Frame.payload_protocol = 0xAD01 and carry AdminRequest or
+// AdminReply in Frame.payload. This file is part of the frozen v1 broker
+// package; breaking changes require a v2 broker.
+
+syntax = "proto3";
+package running_process.broker.v1;
+
+message AdminRequest {
+  AdminVerb verb = 1;
+  bool json = 2;
+  string service_name = 3;   // backend-health
+  string output_path = 4;    // diagnose
+  reserved 10 to 20;
+}
+
+message AdminReply {
+  AdminReplyKind kind = 1;
+  string body = 2;
+  uint32 exit_code = 3;
+  string content_type = 4;
+  reserved 10 to 20;
+}
+
+enum AdminVerb {
+  ADMIN_VERB_UNSPECIFIED = 0;
+  ADMIN_VERB_STATUS = 1;
+  ADMIN_VERB_DUMP = 2;
+  ADMIN_VERB_LIST_INSTANCES = 3;
+  ADMIN_VERB_HEALTHZ = 4;
+  ADMIN_VERB_READYZ = 5;
+  ADMIN_VERB_BACKEND_HEALTH = 6;
+  ADMIN_VERB_CONFIG = 7;
+  ADMIN_VERB_DIAGNOSE = 8;
+  ADMIN_VERB_METRICS = 9;
+  reserved 10 to 20;
+}
+
+enum AdminReplyKind {
+  ADMIN_REPLY_KIND_TEXT = 0;
+  ADMIN_REPLY_KIND_JSON = 1;
+  ADMIN_REPLY_KIND_OPENMETRICS = 2;
+  reserved 10 to 20;
+}