running-process 4.0.3__tar.gz → 4.2.0__tar.gz

{running_process-4.0.3 → running_process-4.2.0}/Cargo.lock

@@ -80,10 +80,16 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "7f202df86484c868dbad7eaa557ef785d5c66295e41b460ef922eca0723b842c"
 
 [[package]]
-name = "autocfg"
-version = "1.5.0"
+name = "arrayref"
+version = "0.3.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "76a2e8124351fda1ef8aaaa3bbd7ebbcb486bbcd4225aca0aa0d84bb2db8fecb"
+
+[[package]]
+name = "arrayvec"
+version = "0.7.6"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c08606f8c3cbf4ce6ec8e28fb0014a2c086708fe954eaa885384a6165172e7e8"
+checksum = "7c02d123df017efcdfbd739ef81735b36c5ba83ec3c59c80a9d7ecc718f92e50"
 
 [[package]]
 name = "beef"
@@ -103,6 +109,29 @@ version = "2.11.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "c4512299f36f043ab09a583e57bceb5a5aab7a73db1805848e8fef3c9e8c78b3"
 
+[[package]]
+name = "blake3"
+version = "1.8.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0aa83c34e62843d924f905e0f5c866eb1dd6545fc4d719e803d9ba6030371fce"
+dependencies = [
+ "arrayref",
+ "arrayvec",
+ "cc",
+ "cfg-if",
+ "constant_time_eq",
+ "cpufeatures 0.3.0",
+]
+
+[[package]]
+name = "block-buffer"
+version = "0.10.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3078c7629b62d3f0439517fa394996acacc5cbc91c5a20d8c658e77abd503a71"
+dependencies = [
+ "generic-array",
+]
+
 [[package]]
 name = "bytes"
 version = "1.11.1"
@@ -177,12 +206,36 @@ version = "1.0.5"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "1d07550c9036bf2ae0c684c4297d503f838287c83c53686d05370d0e139ae570"
 
+[[package]]
+name = "constant_time_eq"
+version = "0.4.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3d52eff69cd5e647efe296129160853a42795992097e8af39800e1060caeea9b"
+
 [[package]]
 name = "core-foundation-sys"
 version = "0.8.7"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "773648b94d0e5d620f64f280777445740e61fe701025087ec8b57f45c791888b"
 
+[[package]]
+name = "cpufeatures"
+version = "0.2.17"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "59ed5838eebb26a2bb2e58f6d5b5316989ae9d08bab10e0e6d103e656d1b0280"
+dependencies = [
+ "libc",
+]
+
+[[package]]
+name = "cpufeatures"
+version = "0.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8b2a41393f66f16b0823bb79094d54ac5fbd34ab292ddafb9a0456ac9f87d201"
+dependencies = [
+ "libc",
+]
+
 [[package]]
 name = "crossbeam-deque"
 version = "0.8.6"
@@ -208,6 +261,26 @@ version = "0.8.21"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "d0a5c400df2834b80a4c3327b3aad3a4c4cd4de0629063962b03235697506a28"
 
+[[package]]
+name = "crypto-common"
+version = "0.1.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "78c8292055d1c1df0cce5d180393dc8cce0abec0a7102adb6c7b1eef6016d60a"
+dependencies = [
+ "generic-array",
+ "typenum",
+]
+
+[[package]]
+name = "digest"
+version = "0.10.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9ed9a281f7bc9b7576e61468ba615a66a5c8cfdff42420a70aa82701a3b1e292"
+dependencies = [
+ "block-buffer",
+ "crypto-common",
+]
+
 [[package]]
 name = "dirs"
 version = "6.0.0"
@@ -359,6 +432,16 @@ dependencies = [
  "slab",
 ]
 
+[[package]]
+name = "generic-array"
+version = "0.14.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "85649ca51fd72272d7821adaf274ad91c288277713d9c18820d8499a7ff69e9a"
+dependencies = [
+ "typenum",
+ "version_check",
+]
+
 [[package]]
 name = "getrandom"
 version = "0.2.17"
@@ -440,15 +523,6 @@ dependencies = [
  "serde_core",
 ]
 
-[[package]]
-name = "indoc"
-version = "2.0.7"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "79cf5c93f93228cf8efb3ba362535fb11199ac548a09ce117c9b1adc3030d706"
-dependencies = [
- "rustversion",
-]
-
 [[package]]
 name = "interprocess"
 version = "2.4.2"
@@ -593,15 +667,6 @@ version = "2.8.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "f8ca58f447f06ed17d5fc4043ce1b10dd205e060fb3ce5b979b8ed8e59ff3f79"
 
-[[package]]
-name = "memoffset"
-version = "0.9.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "488016bfae457b036d996092f6cb448677611ce4449e970ceaf42695203f218a"
-dependencies = [
- "autocfg",
-]
-
 [[package]]
 name = "miette"
 version = "7.6.0"
@@ -873,37 +938,32 @@ dependencies = [
 
 [[package]]
 name = "pyo3"
-version = "0.23.5"
+version = "0.29.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7778bffd85cf38175ac1f545509665d0b9b92a198ca7941f131f85f7a4f9a872"
+checksum = "cd274650b21d4bfc26a0a47587962c1edb425f69287324355cd040c3ea66071c"
 dependencies = [
- "cfg-if",
- "indoc",
  "libc",
- "memoffset",
  "once_cell",
  "portable-atomic",
  "pyo3-build-config",
  "pyo3-ffi",
  "pyo3-macros",
- "unindent",
 ]
 
 [[package]]
 name = "pyo3-build-config"
-version = "0.23.5"
+version = "0.29.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "94f6cbe86ef3bf18998d9df6e0f3fc1050a8c5efa409bf712e661a4366e010fb"
+checksum = "c5e2a7d2f0d013342f295c048ad19237add5154a55b1c5a254c0ec93d4109078"
 dependencies = [
- "once_cell",
  "target-lexicon",
 ]
 
 [[package]]
 name = "pyo3-ffi"
-version = "0.23.5"
+version = "0.29.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e9f1b4c431c0bb1c8fb0a338709859eed0d030ff6daa34368d3b152a63dfdd8d"
+checksum = "ca85c467da1bbc8d866eea5deff9cf29ea5f7785054a17da36e65bda9c05845b"
 dependencies = [
  "libc",
  "pyo3-build-config",
@@ -911,9 +971,9 @@ dependencies = [
 
 [[package]]
 name = "pyo3-macros"
-version = "0.23.5"
+version = "0.29.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "fbc2201328f63c4710f68abdf653c89d8dbc2858b88c5d88b0ff38a75288a9da"
+checksum = "9ac53762fd065daa3194dd09337a38bd793a188100fd1a9304c4ab312d901771"
 dependencies = [
  "proc-macro2",
  "pyo3-macros-backend",
@@ -923,13 +983,12 @@ dependencies = [
 
 [[package]]
 name = "pyo3-macros-backend"
-version = "0.23.5"
+version = "0.29.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "fca6726ad0f3da9c9de093d6f116a93c1a38e417ed73bf138472cf4064f72028"
+checksum = "4ca3a1557399783172dc5bf39cfca835157732532cba56b71d2292161e53b362"
 dependencies = [
  "heck",
  "proc-macro2",
- "pyo3-build-config",
  "quote",
  "syn",
 ]
@@ -1026,13 +1085,15 @@ checksum = "dc897dd8d9e8bd1ed8cdad82b5966c3e0ecae09fb1907d58efaa013543185d0a"
 
 [[package]]
 name = "running-process"
-version = "4.0.3"
+version = "4.2.0"
 dependencies = [
  "anyhow",
+ "blake3",
  "bytes",
  "clap",
  "dirs",
  "futures-util",
+ "getrandom 0.4.2",
  "interprocess",
  "libc",
  "portable-pty",
@@ -1043,6 +1104,7 @@ dependencies = [
  "rusqlite",
  "serde",
  "serde_json",
+ "sha2",
  "sysinfo",
  "tempfile",
  "test-watchdog",
@@ -1058,7 +1120,7 @@ dependencies = [
 
 [[package]]
 name = "running-process-py"
-version = "4.0.3"
+version = "4.2.0"
 dependencies = [
  "interprocess",
  "libc",
@@ -1106,12 +1168,6 @@ dependencies = [
  "windows-sys 0.61.2",
 ]
 
-[[package]]
-name = "rustversion"
-version = "1.0.22"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b39cdef0fa800fc44525c84ccb54a029961a8215f9619753635a9c0d2538d46d"
-
 [[package]]
 name = "scopeguard"
 version = "1.2.0"
@@ -1187,6 +1243,17 @@ dependencies = [
  "windows-sys 0.61.2",
 ]
 
+[[package]]
+name = "sha2"
+version = "0.10.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a7507d819769d01a365ab707794a4084392c824f54a7a6a7862f8c3d0892b283"
+dependencies = [
+ "cfg-if",
+ "cpufeatures 0.2.17",
+ "digest",
+]
+
 [[package]]
 name = "sharded-slab"
 version = "0.1.7"
@@ -1284,9 +1351,9 @@ dependencies = [
 
 [[package]]
 name = "target-lexicon"
-version = "0.12.16"
+version = "0.13.5"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "61c41af27dd6d1e27b1b16b489db798443478cef1f06a660c96db617ba5de3b1"
+checksum = "adb6935a6f5c20170eeceb1a3835a49e12e19d792f6dd344ccc76a985ca5a6ca"
 
 [[package]]
 name = "tempfile"
@@ -1304,6 +1371,9 @@ dependencies = [
 [[package]]
 name = "test-watchdog"
 version = "0.0.0"
+dependencies = [
+ "libc",
+]
 
 [[package]]
 name = "testbins"
@@ -1505,6 +1575,12 @@ dependencies = [
  "tracing-log",
 ]
 
+[[package]]
+name = "typenum"
+version = "1.20.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b6f5e870be6c3b371b77fe0ee0bafb859fa4964b4404c27de1d380043c4dda20"
+
 [[package]]
 name = "unicode-ident"
 version = "1.0.24"
@@ -1523,12 +1599,6 @@ version = "0.2.6"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "ebc1c04c71510c7f702b52b7c350734c9ff1295c464a03335b00bb84fc54f853"
 
-[[package]]
-name = "unindent"
-version = "0.2.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7264e107f553ccae879d21fbea1d6724ac785e8c3bfc762137959b5802826ef3"
-
 [[package]]
 name = "utf8parse"
 version = "0.2.2"

{running_process-4.0.3 → running_process-4.2.0}/Cargo.toml

@@ -3,7 +3,7 @@ resolver = "2"
 members = ["crates/running-process", "crates/running-process-py", "crates/test-watchdog"]
 
 [workspace.package]
-version = "4.0.3"
+version = "4.2.0"
 edition = "2021"
 rust-version = "1.85"
 license = "BSD-3-Clause"
@@ -11,10 +11,16 @@ repository = "https://github.com/zackees/running-process"
 homepage = "https://github.com/zackees/running-process"
 
 [workspace.dependencies]
-pyo3 = { version = "0.23", features = ["abi3-py310"] }
+pyo3 = { version = "0.29", features = ["abi3-py310"] }
 rusqlite = { version = "0.32", features = ["bundled"] }
 thiserror = "2"
 
+# Phase 0 of #228: workspace-wide lints. `disallowed_methods` is wired
+# through `clippy.toml` at the workspace root so every member crate
+# refuses bincode serialization (broker wire stays prost-only).
+[workspace.lints.clippy]
+disallowed_methods = "deny"
+
 [profile.release]
 debug = true
 strip = "none"

{running_process-4.0.3 → running_process-4.2.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: running_process
-Version: 4.0.3
+Version: 4.2.0
 License-File: LICENSE
 Summary: A Rust-backed subprocess wrapper with split stdout/stderr streaming
 Home-Page: https://github.com/zackees/running-process
@@ -18,6 +18,18 @@ Project-URL: Repository, https://github.com/zackees/running-process
 
 `running-process` is what you wished python's subprocess was. Blazing fast, highly concurrent, huge feature list, dead process tracking, pty support. Built in Rust with a thin python api.
 
+## v1 Broker Docs
+
+The v1 broker work is documented as a stable spec alongside the implementation:
+
+- Core spec: [architecture](docs/v1-architecture-overview.md), [frozen commitments](docs/v1-frozen-commitments.md), [pipe naming](docs/v1-pipe-naming.md), [platform behavior](docs/v1-platform-behavior.md), [security model](docs/v1-security-model.md)
+- Schemas: [wire envelope](docs/v1-wire-envelope.md), [cache manifest](docs/v1-cache-manifest.md), [service definition](docs/v1-service-definition.md), [lifecycle events](docs/v1-lifecycle-events.md)
+- Consumer adoption: [dashboard](docs/v1-consumer-adoption-dashboard.md), [clud](docs/consumer-adoption-clud.md), [zccache](docs/consumer-adoption-zccache.md), [soldr](docs/consumer-adoption-soldr.md), [fbuild](docs/consumer-adoption-fbuild.md)
+- Operations: [broker architecture](docs/v1-broker-architecture.md), [admin verbs](docs/v1-admin-verbs.md), [backend lifecycle](docs/v1-backend-lifecycle.md), [handoff optimization](docs/v1-handoff-optimization.md), [observability](docs/v1-observability.md)
+- Rollout: [policy](docs/v1-rollout-policy.md), [escape hatch](docs/v1-escape-hatch.md), [troubleshooting](docs/v1-troubleshooting.md)
+- Examples: [minimal consumer](examples/minimal-consumer/), [release-handles CLI](examples/release-handles-cli/), [custom isolation](examples/custom-isolation/)
+- Contrib service templates: [systemd](contrib/systemd/running-process-broker-v1.service), [launchd](contrib/launchd/com.zackees.running-process-broker-v1.plist), [Windows service installer](contrib/windows-service/install.ps1)
+
 | Platform | Build | Lint | Unit Test | Integration Test |
 |----------|-------|------|-----------|------------------|
 | Linux x86 | [![Build](https://github.com/zackees/running-process/actions/workflows/linux-x86-build.yml/badge.svg)](https://github.com/zackees/running-process/actions/workflows/linux-x86-build.yml) | [![Lint](https://github.com/zackees/running-process/actions/workflows/linux-x86-lint.yml/badge.svg)](https://github.com/zackees/running-process/actions/workflows/linux-x86-lint.yml) | [![Unit Test](https://github.com/zackees/running-process/actions/workflows/linux-x86-unit-test.yml/badge.svg)](https://github.com/zackees/running-process/actions/workflows/linux-x86-unit-test.yml) | [![Integration Test](https://github.com/zackees/running-process/actions/workflows/linux-x86-integration-test.yml/badge.svg)](https://github.com/zackees/running-process/actions/workflows/linux-x86-integration-test.yml) |
@@ -75,6 +87,43 @@ running-process --find-leaks -- python worker.py
 `--find-leaks` tags the wrapped process tree with a unique originator marker and reports any
 descendants still alive after the direct child exits.
 
+## Cleanup Manifests
+
+The `running-process-cleanup` binary reads v1 broker `CacheManifest` files
+without requiring a broker or daemon to be running. Manifests are written in two
+places:
+
+- each daemon cache root: `.running-process-manifest.pb`
+- the central registry: `$XDG_DATA_HOME/running-process/manifests/` on Linux,
+  `~/Library/Application Support/running-process/manifests/` on macOS, and
+  `%APPDATA%\running-process\manifests\` on Windows
+
+Destructive commands are dry-run by default. Add `--confirm` to delete selected
+roots:
+
+```bash
+running-process-cleanup list --json
+running-process-cleanup verify --json
+running-process-cleanup prune --dormant-after 30d
+running-process-cleanup prune --dormant-after 30d --confirm
+running-process-cleanup prune --keep-current --keep-last 2
+running-process-cleanup uninstall zccache --keep-config
+running-process-cleanup instances --json
+```
+
+For GitHub Actions cache restores, run verification after `actions/cache@v4`
+restores daemon state. Manifests from a prior runner boot are reported as stale:
+
+```yaml
+- uses: actions/cache@v4
+  with:
+    path: ~/.local/share/running-process
+    key: running-process-${{ runner.os }}-${{ hashFiles('**/Cargo.lock') }}
+
+- name: Verify restored running-process manifests
+  run: running-process-cleanup verify --json
+```
+
 ## Pipe-backed API
 
 ```python

{running_process-4.0.3 → running_process-4.2.0}/README.md

@@ -4,6 +4,18 @@
 
 `running-process` is what you wished python's subprocess was. Blazing fast, highly concurrent, huge feature list, dead process tracking, pty support. Built in Rust with a thin python api.
 
+## v1 Broker Docs
+
+The v1 broker work is documented as a stable spec alongside the implementation:
+
+- Core spec: [architecture](docs/v1-architecture-overview.md), [frozen commitments](docs/v1-frozen-commitments.md), [pipe naming](docs/v1-pipe-naming.md), [platform behavior](docs/v1-platform-behavior.md), [security model](docs/v1-security-model.md)
+- Schemas: [wire envelope](docs/v1-wire-envelope.md), [cache manifest](docs/v1-cache-manifest.md), [service definition](docs/v1-service-definition.md), [lifecycle events](docs/v1-lifecycle-events.md)
+- Consumer adoption: [dashboard](docs/v1-consumer-adoption-dashboard.md), [clud](docs/consumer-adoption-clud.md), [zccache](docs/consumer-adoption-zccache.md), [soldr](docs/consumer-adoption-soldr.md), [fbuild](docs/consumer-adoption-fbuild.md)
+- Operations: [broker architecture](docs/v1-broker-architecture.md), [admin verbs](docs/v1-admin-verbs.md), [backend lifecycle](docs/v1-backend-lifecycle.md), [handoff optimization](docs/v1-handoff-optimization.md), [observability](docs/v1-observability.md)
+- Rollout: [policy](docs/v1-rollout-policy.md), [escape hatch](docs/v1-escape-hatch.md), [troubleshooting](docs/v1-troubleshooting.md)
+- Examples: [minimal consumer](examples/minimal-consumer/), [release-handles CLI](examples/release-handles-cli/), [custom isolation](examples/custom-isolation/)
+- Contrib service templates: [systemd](contrib/systemd/running-process-broker-v1.service), [launchd](contrib/launchd/com.zackees.running-process-broker-v1.plist), [Windows service installer](contrib/windows-service/install.ps1)
+
 | Platform | Build | Lint | Unit Test | Integration Test |
 |----------|-------|------|-----------|------------------|
 | Linux x86 | [![Build](https://github.com/zackees/running-process/actions/workflows/linux-x86-build.yml/badge.svg)](https://github.com/zackees/running-process/actions/workflows/linux-x86-build.yml) | [![Lint](https://github.com/zackees/running-process/actions/workflows/linux-x86-lint.yml/badge.svg)](https://github.com/zackees/running-process/actions/workflows/linux-x86-lint.yml) | [![Unit Test](https://github.com/zackees/running-process/actions/workflows/linux-x86-unit-test.yml/badge.svg)](https://github.com/zackees/running-process/actions/workflows/linux-x86-unit-test.yml) | [![Integration Test](https://github.com/zackees/running-process/actions/workflows/linux-x86-integration-test.yml/badge.svg)](https://github.com/zackees/running-process/actions/workflows/linux-x86-integration-test.yml) |
@@ -61,6 +73,43 @@ running-process --find-leaks -- python worker.py
 `--find-leaks` tags the wrapped process tree with a unique originator marker and reports any
 descendants still alive after the direct child exits.
 
+## Cleanup Manifests
+
+The `running-process-cleanup` binary reads v1 broker `CacheManifest` files
+without requiring a broker or daemon to be running. Manifests are written in two
+places:
+
+- each daemon cache root: `.running-process-manifest.pb`
+- the central registry: `$XDG_DATA_HOME/running-process/manifests/` on Linux,
+  `~/Library/Application Support/running-process/manifests/` on macOS, and
+  `%APPDATA%\running-process\manifests\` on Windows
+
+Destructive commands are dry-run by default. Add `--confirm` to delete selected
+roots:
+
+```bash
+running-process-cleanup list --json
+running-process-cleanup verify --json
+running-process-cleanup prune --dormant-after 30d
+running-process-cleanup prune --dormant-after 30d --confirm
+running-process-cleanup prune --keep-current --keep-last 2
+running-process-cleanup uninstall zccache --keep-config
+running-process-cleanup instances --json
+```
+
+For GitHub Actions cache restores, run verification after `actions/cache@v4`
+restores daemon state. Manifests from a prior runner boot are reported as stale:
+
+```yaml
+- uses: actions/cache@v4
+  with:
+    path: ~/.local/share/running-process
+    key: running-process-${{ runner.os }}-${{ hashFiles('**/Cargo.lock') }}
+
+- name: Verify restored running-process manifests
+  run: running-process-cleanup verify --json
+```
+
 ## Pipe-backed API
 
 ```python

{running_process-4.0.3 → running_process-4.2.0}/crates/running-process/Cargo.toml

@@ -7,6 +7,12 @@ license.workspace = true
 repository.workspace = true
 homepage.workspace = true
 description = "Subprocess and PTY runtime for the running-process project"
+readme = "README.md"
+
+[lints]
+# Phase 0 of #228: pick up the workspace-wide `disallowed_methods =
+# "deny"` so bincode serialization is rejected at compile time.
+workspace = true
 
 [[bin]]
 # Wave 4 of #165: PM2-style supervisor CLI absorbed from
@@ -31,6 +37,24 @@ required-features = ["daemon"]
 name = "daemon-trampoline"
 path = "src/bin/trampoline.rs"
 
+[[bin]]
+name = "running-process-cleanup"
+path = "src/bin/running-process-cleanup.rs"
+required-features = ["client"]
+
+[[bin]]
+name = "running-process-broker-v1"
+path = "src/bin/running-process-broker-v1.rs"
+required-features = ["daemon"]
+
+[[example]]
+# Dev-only evidence harness for #387: deploys the real broker binary plus
+# a separate backend process and measures the opt-in handle-passing
+# handoff against the reconnect fallback. Never shipped; see
+# docs/v1-handoff-optimization.md for the recorded numbers.
+name = "handoff_rollout_evidence"
+required-features = ["client"]
+
 [features]
 # Final feature scheme per #165:
 # * `core`   — always-available API (spawn / pty / containment).
@@ -44,22 +68,40 @@ path = "src/bin/trampoline.rs"
 default = ["client"]
 core = []
 telemetry = []
-client = ["dep:prost", "dep:prost-types", "dep:interprocess", "dep:dirs", "dep:anyhow", "dep:clap"]
+client = ["dep:prost", "dep:prost-types", "dep:interprocess", "dep:dirs", "dep:anyhow", "dep:clap", "dep:blake3", "dep:sha2", "dep:getrandom"]
+# Opt-in async client surface for tokio daemons (#414). Adds async
+# variants of `BackendHandle::probe_with_service` and `FrameClient`
+# on top of the existing blocking surface. The synchronous probe and
+# frame wire is the wire-of-record; the async layer wraps each
+# round-trip in `tokio::task::spawn_blocking` so the caller's task
+# yields the runtime worker thread without us duplicating the v1
+# wire against `AsyncRead`/`AsyncWrite`. That keeps the tokio
+# footprint minimal — only `rt` + `time` are required.
+client-async = [
+    "client",
+    "dep:tokio",
+]
 daemon = [
     "client",
+    "client-async",
     "interprocess/tokio",
     "dep:tokio", "dep:tokio-util", "dep:bytes", "dep:futures-util",
+    "tokio/full",
     "dep:tracing", "dep:tracing-subscriber",
     "dep:rusqlite", "dep:toml",
 ]
 originator-scan = []               # used by running-process-py for cwd-tagging
+# #415: consumer-consumable conformance test kit
+# (`crate::test_support::conformance`). Off by default; consumers opt in
+# from their `dev-dependencies`.
+test-support = ["client"]
 
 [dependencies]
 libc = "0.2"
 portable-pty = "0.9"
 sysinfo = "0.30"
 thiserror = { workspace = true }
-winapi = { version = "0.3", features = ["errhandlingapi", "fileapi", "handleapi", "ioapiset", "jobapi2", "namedpipeapi", "processthreadsapi", "winnt", "minwindef", "windef", "winuser", "consoleapi", "processenv", "synchapi", "winbase", "wincon", "tlhelp32"] }
+winapi = { version = "0.3", features = ["errhandlingapi", "fileapi", "handleapi", "ioapiset", "jobapi2", "namedpipeapi", "processthreadsapi", "winnt", "minwindef", "windef", "winuser", "consoleapi", "processenv", "synchapi", "winbase", "wincon", "tlhelp32", "securitybaseapi", "winerror", "sysinfoapi"] }
 # Wave 4 of #165: client-feature deps. All optional so the always-on
 # `core` API stays a minimal-dep leaf.
 prost = { version = "0.14", optional = true }
@@ -69,8 +111,19 @@ dirs = { version = "6", optional = true }
 # Used by the `runpm` PM2-style supervisor CLI (src/bin/runpm.rs).
 anyhow = { version = "1", optional = true }
 clap = { version = "4", features = ["derive"], optional = true }
+# Phase 1 of #228 (issue #230): broker user-SID hashing in
+# `src/broker/lifecycle/sid.rs`. blake3 is small (no_std-capable,
+# no transitive deps beyond `arrayref`/`arrayvec` and `cc`-built SIMD).
+blake3 = { version = "1", optional = true }
+sha2 = { version = "0.10", optional = true }
+getrandom = { version = "0.4", optional = true }
 # Wave 5 of #165: daemon-feature deps. All optional.
-tokio = { version = "1", features = ["full"], optional = true }
+# tokio: `client-async` (#414) only needs the `rt` (spawn_blocking)
+# and `time` (`tokio::time::timeout`) features; the `daemon` feature
+# layers `tokio/full` on top below. Cargo unifies feature sets, so
+# any consumer enabling both ends up with the daemon footprint
+# exactly as before.
+tokio = { version = "1", default-features = false, features = ["rt", "time"], optional = true }
 tokio-util = { version = "0.7", features = ["codec"], optional = true }
 bytes = { version = "1", optional = true }
 futures-util = { version = "0.3", features = ["sink"], optional = true }
@@ -94,6 +147,9 @@ prost-build = "0.14"
 protox = "0.9"
 
 [dev-dependencies]
+# Platform-default service-definition dir tests (#386) assert against
+# the same `dirs` resolution the loader uses, not hardcoded strings.
+dirs = "6"
 serde_json = "1"
 tempfile = "3"
 test-watchdog = { path = "../test-watchdog" }
@@ -108,11 +164,13 @@ test-watchdog = { path = "../test-watchdog" }
 windows-sys = { version = "0.59", features = [
     "Win32_Foundation",
     "Win32_Security",
+    "Win32_Security_Authorization",
     "Win32_Storage_FileSystem",
     "Win32_System_Console",
     "Win32_System_IO",
     "Win32_System_Memory",
     "Win32_System_Pipes",
+    "Win32_System_Registry",
     "Win32_System_Threading",
     "Win32_System_Diagnostics_Debug",
 ] }