Module process 

Worker-only child ownership. Cancellation signals a private Unix process group promptly; only its owner may revoke the capability and reap the PID.

Structs

CommandOutput

OwnedProcess

Owns both the child and the cancellation capability. Never put this in editor state: Drop may wait, so it belongs exclusively to a worker stack.

Functions

capture

At most 64 KiB per pipe and 30 seconds. No terminal input/output is inherited.