v0.3.0

Added

• New run --detach flag: start a run and let go. The call re-spawns the CLI
• New wait --run-id <id> [--timeout <duration>] subcommand: block until a run
• New reserved exit code WAIT_TIMEOUT (112), taking the next free slot after
• **Windows: Ctrl-Break, console close, logoff, and system shutdown now end a run
• Unix: SIGTERM and SIGHUP now end a run through the full cancel teardown
• run gained --idle-timeout <duration>, a deadline on child silence for the
• run resource-limit flags --max-memory <size>, --max-processes <n>, and
• Shell completions (bash/zsh/fish/PowerShell/Elvish) and man pages, generated
• docs/integration.md: a consumer/adapter integration guide walking through
• A criterion-based benchmark tier
• run gained --capture-max-bytes <size>, a per-stream ceiling for
• run gained --no-echo, an opt-in that suppresses only the runner's own live
• New prune --dry-run flag: preview a reap without deleting anything.

Changed

• run --timeout 0 and run --idle-timeout 0 are now rejected at parse time
• The JSONL members_snapshot event and the control-plane inspect snapshot now
• The crate is now a thin binary over an internal library target (src/lib.rs,

Fixed

• The control-plane wire protocol now reads its one request/response line under an
• Both interactive terminal-handoff failure paths (a failed foreground-control
• inspect/cancel/kill now open the run registry read-only, like list/
• An orphaned registry .lock file — one with no paired .json record, which

v0.2.2

Added

• run --inherit-stdio for interactive commands that need the runner's stdin,

Fixed

• POSIX inherited-stdio terminal handoff now keeps SIGTTOU ignored while the

v0.2.1

Added

• run --inherit-stdin and run --stdin-file <file> opt-ins. The former shares

v0.2.0

Changed

• ci: drop x86_64-apple-darwin from the release/CI target matrix

v0.1.0

Added

• Initial project skeleton.
• Command-line surface: the run, inspect, cancel, and kill subcommands
• run execution: launches the program shell-free inside a ProcessKit
• run now enforces --timeout and --grace and handles Ctrl-C, all as
• Documented runner exit-code contract (docs/exit-codes.md) that keeps the
• Versioned JSONL event schema (v1): run now writes a stream of lifecycle
• Bounded output capture (--capture-dir <dir>): the child's stdout and stderr are
• Control-plane cancel and kill subcommands: cancel --run-id <id> and
• Fail-closed launcher contract for the orchestrator (CC_PROCESSKIT_RUN): a
• Abrupt runner-death hardening and proof: every spawned command opts into
• Dependencies on processkit (the containment backbone), tokio (its async
• Prebuilt release binaries: the manual release.yml workflow now fans out a
• Machine-readable JSON Schema (draft 2020-12) for the JSONL event contract v1,
• list [--json]: a new subcommand that scans the per-user registry
• prune [--json]: a new subcommand that reaps detectably-dead registry entries —

Changed

• Setup/support failures no longer masquerade as an INTERNAL (104) runner fault.
• The control plane's three clients — inspect, cancel, and kill — all reach a
• run now consumes every flag it parses: --jsonl (the JSONL event stream) and
• Internal: the control plane's client-side scaffolding is de-duplicated. The
• Updated the processkit dependency to 2.3.2 (from 2.3.0). events::abrupt_cleanup_str()

Fixed

• Unix control sockets now use a short owner-only temporary directory instead of