Struct Stable 

pub struct Stable {

    pub uid: u32,
    pub cmdline: Option<Box<str>>,
    pub exe: Option<Box<str>>,
    pub cwd: Option<Box<str>>,
    pub session: u32,
    pub pgrp: u32,
    pub tpgid: i64,
    pub tty_dev: i64,
    pub exe_deleted: bool,
    pub cgroup: Option<Box<str>>,
    pub container: Option<Box<str>>,
    pub container_runtime: Option<Box<str>>,
    pub is_kernel_thread: bool,
}

The cached identity of one process.

Fields

uid: u32

cmdline: Option<Box<str>>

exe: Option<Box<str>>

cwd: Option<Box<str>>

The process’s working directory.

Cached alongside exe rather than read per sample: it costs a readlink per process, and it is display-only — nothing sorts or filters on it by default. The cost is one syscall per process per lifetime, not per tick.

session: u32

Login session id.

Cached because it needs a syscall of its own (getsid) on macOS, where proc_bsdinfo does not carry it. Linux reads it from field 4 of /proc/<pid>/stat, which the scan already has, so its value does not come from here — but keeping one field for both platforms means the two backends cannot drift in what SESSION means.

0 is “unknown”, which is what getsid yields for another user’s process (EPERM). It renders -.

pgrp: u32

Process group and the terminal’s foreground group, so a thread row can inherit them instead of re-asking the kernel per thread.

tpgid is -1 when the terminal has no foreground job.

tpgid: i64

tty_dev: i64

The controlling terminal’s device, in the platform’s own encoding.

Linux leaves this 0 because tty_nr arrives in the stat the scan already parses; macOS fills it from e_tdev, since proc_bsdinfo is a separate call per process and the thread pass should not repeat it.

exe_deleted: bool

Whether the executable has been replaced or deleted on disk.

Linux exposes this in the /proc/<pid>/exe symlink target itself: once the file backing a running process is unlinked or replaced, the kernel appends (deleted) to the target. That is the only signal available — comparing mtimes would need the path to still exist, which is exactly what deleting it removes.

Cached with the identity because the flag cannot change without the process’s exe being replaced, and re-reading the link per frame would be thousands of syscalls a second for a value that almost never changes.

cgroup: Option<Box<str>>

The cgroup path, not the raw /proc/<pid>/cgroup line.

container: Option<Box<str>>

The container’s id, and the runtime that owns it.

Cached here rather than recomputed per frame: classification is a few finds over a path, which is cheap once per process and wasteful thousands of times per second.

container_runtime: Option<Box<str>>

is_kernel_thread: bool

Trait Implementations

impl Clone for Stable

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Stable

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for Stable

fn default() -> Self

Returns the “default value” for a type.