Module process 

Worker-only child ownership. Cancellation signals a private Unix process group promptly; only its owner may revoke the capability and reap the PID.

Structs

CapturePolicy

Bounds and stdin handling for one capture.

CommandOutput

OwnedProcess

Owns both the child and the cancellation capability. Never put this in editor state: Drop may wait, so it belongs exclusively to a worker stack.

Enums

CaptureError

Why a capture did not produce output. capture folds these back into the historical Failure spellings; richer callers (remote exec) match on them directly.

StdinPolicy

What capture does with the child’s stdin.

Functions

capture

At most 64 KiB per pipe, 30 seconds, stdin from /dev/null. No terminal input/output is inherited.

capture_with

Run one command to completion under explicit bounds. The child runs in its own process group owned by OwnedProcess; cancellation SIGKILLs it, the deadline kills it, and both pipes are drained concurrently with bounded retention.