Server-only on purpose: the subprocess-spawning Win32 path (CreateProcessW with a hidden window + pipe capture) must not land in the client binary, where antivirus heuristics would flag it.
source not stored for this graph (policy: none)
no test coverage detected