Add process view

user-guide/processes.md

@@ -0,0 +1,38 @@
+# Processes
+
+The **Processes** tab is a live host process monitor backed by Linux `/proc`.
+
+## What you get
+
+- KPI strip: process count, aggregate CPU / RSS / threads, load, zombies  
+- Sortable table with CPU / memory bars, state pills, age, I/O rates  
+- Filters: Running, Hot CPU, Hot mem, I/O, Zombie, User, Kernel  
+- Parent/child **Tree** view  
+- Detail drawer: cmdline, cgroup, exe/cwd, FDs, ctxt switches, sparklines  
+- CSV export · Follow refresh (1s / 2s / 5s) · jump to **Charts** top series  
+
+## Requirements
+
+- Agent on **Linux** with readable `/proc`  
+- Viewer role is enough for `listProcesses`  
+- Historical top charts (`processes.top_*`) default **on** for Linux; set `PEARDATA_PROCESSES=0` to disable  
+
+## Shortcuts
+
+| Key | Action |
+|-----|--------|
+| `/` | Focus search |
+| `R` | Refresh |
+| `F` | Toggle Follow |
+| `T` | Toggle Tree |
+| `Esc` | Clear selection |
+
+## API
+
+- RPC: `listProcesses`  
+- REST: `GET /api/v1|v2|v3/processes?sort=cpu&filter=running&q=nginx`  
+
+## Related
+
+- Charts family `processes` — [CONFIGURATION.md](../docs/CONFIGURATION.md)  
+- Protocol — [PROTOCOL.md](../docs/PROTOCOL.md)