# Files that still import node:child_process directly instead of going through
# src/shared/child-process/run-process.ts.
#
# This list is a RATCHET: entries may only be removed. Adding one means a new
# spawn site is deciding console visibility, argument quoting and .cmd handling
# for itself -- the gap that produced stolen keyboard focus (#14543, #10488) and
# mangled agent prompts (#8793, #11374, #6694).
#
# Migrating a file means replacing its spawn/execFile calls with
# runProcess/spawnProcess and deleting its line here.
#
# browser-route-egress-electron-launch.ts, browser-route-persisted-worker-electron-process.ts
# and system-ssh-dynamic-forward-process.ts need spawn options ProcessSpec cannot express:
# `detached: true` for a process-group kill, a synchronous taskkill, and an stdio shape other
# than all-pipes (a long-lived `ssh -N` must not be handed a stdin pipe nobody closes).
# Migrating them means teaching run-process.ts those options first.
# codex-app-server-posix-supervisor.ts requires child_process only inside its
# dependency-free POSIX supervisor script, never in Orca's process.
#
# The src/main/git/command-runner/* entries are the seven spawn sites that used
# to live in the single line src/main/git/runner.ts; splitting that file moved
# them, it did not add any.
#
# daemon-launched-child.ts holds daemon-init.ts's fork() site; splitting that
# file moved the import, it did not add one.
#
# Likewise the agent-browser-bridge-* and ipc/filesystem/* entries: splitting
# agent-browser-bridge.ts and ipc/filesystem.ts moved these imports, it did not
# add any. Only -execution.ts and -raw-process.ts spawn, and both already pass
# windowsHide; the other four import ChildProcess as a type only.
src/cli/handlers/account.ts
src/cli/handlers/core.ts
src/cli/handlers/interactive-login-interruption.ts
src/cli/handlers/skills.ts
src/cli/runtime/launch.ts
src/cli/runtime/serve-update-supervisor.ts
src/main/agent-hooks/managed-hook-owner-identity.ts
src/main/agent-hooks/managed-hook-runtime.ts
src/main/agent-hooks/wsl-hook-relay-launch.ts
src/main/agent-hooks/wsl-hook-relay-link.ts
src/main/agent-hooks/wsl-hook-relay-manager.ts
src/main/agent-hooks/wsl-hook-relay-sentinel.ts
src/main/ai-vault/session-scanner-service-client-state.ts
src/main/ai-vault/session-scanner-service-client.ts
src/main/ai-vault/session-scanner-service-spawn.ts
src/main/ai-vault/session-scanner-service-test-child.ts
src/main/app-icon.ts
src/main/automations/precheck-runner.ts
src/main/browser/agent-browser-bridge-execution.ts
src/main/browser/agent-browser-bridge-raw-process.ts
src/main/browser/agent-browser-bridge-state.ts
src/main/browser/agent-browser-bridge-types.ts
src/main/browser/browser-route-egress-electron-launch.ts
src/main/browser/browser-route-persisted-worker-electron-process.ts
src/main/claude-accounts/keychain.ts
src/main/codex-accounts/legacy-wsl-runtime-auth-drain-recovery-script-harness.ts
src/main/codex-accounts/legacy-wsl-runtime-auth-drain-script-harness.ts
src/main/codex-accounts/legacy-wsl-runtime-auth-drain-script-interference-shims.ts
src/main/codex-accounts/service.ts
src/main/codex/codex-app-server-posix-supervisor.ts
src/main/codex/codex-app-server-session.ts
src/main/codex/codex-state-db-backfill-recovery.ts
src/main/codex/codex-wsl-hook-install-plan.ts
src/main/computer/desktop-script-provider-bridge.ts
src/main/computer/macos-computer-use-permission-status.ts
src/main/computer/macos-computer-use-permissions.ts
src/main/computer/macos-native-provider-transport.ts
src/main/computer/sidecar-client.ts
src/main/daemon/daemon-bash-wrapper-osc133-fixture.ts
src/main/daemon/daemon-launched-child.ts
src/main/daemon/daemon-process-identity-query.ts
src/main/daemon/daemon-process-inspection.ts
src/main/daemon/daemon-process-start-time.ts
src/main/emulator/android/android-avd-boot.ts
src/main/emulator/android/android-command-runner.ts
src/main/emulator/android/scrcpy-stream-session.ts
src/main/emulator/serve-sim-helper-processes.ts
src/main/emulator/serve-sim-runtime-materializer.ts
src/main/emulator/simctl-simulator-devices.ts
src/main/emulator/simulator-app-visibility.ts
src/main/external-editor-launch.ts
src/main/git/command-runner/exec-file-capture.ts
src/main/git/command-runner/git-exec-file.ts
src/main/git/command-runner/git-spawn.ts
src/main/git/command-runner/git-stream-stdout.ts
src/main/git/command-runner/spawn-command-capture.ts
src/main/git/command-runner/spawned-command-tree-kill.ts
src/main/git/command-runner/wsl-aware-spawn.ts
src/main/git/wsl-git-read-environment.ts
src/main/github/gh-utils.ts
src/main/hooks.ts
src/main/ipc/app.ts
src/main/ipc/developer-permissions.ts
src/main/ipc/filesystem-list-files-git-fallback.ts
src/main/ipc/filesystem-list-files.ts
src/main/ipc/filesystem-watcher-wsl.ts
src/main/ipc/filesystem/filesystem-handler-context.ts
src/main/ipc/filesystem/filesystem-search-handlers.ts
src/main/ipc/local-network-connection-test.ts
src/main/ipc/macos-keyboard-layout-snapshot.ts
src/main/ipc/notebook.ts
src/main/ipc/notification-authorization-status.ts
src/main/ipc/parcel-watcher-cancellation-restart.ts
src/main/ipc/parcel-watcher-cancellation-tracker.ts
src/main/ipc/parcel-watcher-child-launch.ts
src/main/ipc/parcel-watcher-child-messaging.ts
src/main/ipc/parcel-watcher-child-recovery.ts
src/main/ipc/parcel-watcher-child-termination.ts
src/main/ipc/parcel-watcher-host-subscriptions.ts
src/main/ipc/parcel-watcher-pending-cancellation.ts
src/main/ipc/parcel-watcher-process-supervisor.ts
src/main/ipc/parcel-watcher-supervisor-disposal.ts
src/main/ipc/parcel-watcher-supervisor-message.ts
src/main/ipc/parcel-watcher-supervisor-subscribe.ts
src/main/ipc/preflight-command-exec.ts
src/main/ipc/repos/repo-clone-lifecycle.ts
src/main/ipc/worktree-apfs-clone.ts
src/main/ipc/wsl-watcher-process-exit.ts
src/main/linux-lid-sleep-assertion.ts
src/main/local-builds/local-build-candidate.ts
src/main/macos-system-sleep-assertion.ts
src/main/macos-tcc-prompt-watch.ts
src/main/memory/collector.ts
src/main/native-chat/wsl-transcript-fs-process-slot.ts
src/main/native-chat/wsl-transcript-fs-process-spawn.ts
src/main/network/macos-system-resolver-health.ts
src/main/network/macos-tailscale-dns-diagnostic.ts
src/main/pi/agent-status-wsl-curl-source.ts
src/main/plugins/plugin-host-process.ts
src/main/ports/port-scan-command-execution.ts
src/main/providers/macos-login-session-pty-probe.ts
src/main/providers/process-cwd.ts
src/main/providers/windows-console-attached-processes.ts
src/main/pty-descendant-termination.ts
src/main/pty/posix-pty-foreground-group.ts
src/main/pty/posix-pty-process-groups.ts
src/main/pty/windows-environment-path.ts
src/main/rate-limits/codex-fetcher.ts
src/main/rate-limits/gemini-cli-oauth-extractor.ts
src/main/runtime/tls-certificate.ts
src/main/runtime/windows-default-route-interfaces.ts
src/main/runtime/windows-mobile-firewall.ts
src/main/skills/skill-update-run.ts
src/main/ssh/ssh-connection.ts
src/main/ssh/ssh-proxy-command.ts
src/main/ssh/ssh-remote-cli-host-passthrough.ts
src/main/ssh/system-ssh-command.ts
src/main/ssh/system-ssh-dynamic-forward-process.ts
src/main/ssh/system-ssh-file-transfer.ts
src/main/ssh/system-ssh-forward-process.ts
src/main/ssh/system-ssh-operation-lifecycle.ts
src/main/startup/ensure-virtual-display.ts
src/main/startup/hydrate-shell-path.ts
src/main/startup/windows-install-dir-acl-probe.ts
src/main/startup/windows-user-data-acl.ts
src/main/win32-utils.ts
src/main/window/clipboard-ipc-handlers.ts
src/main/windows-process-tree-kill.ts
src/main/workspace-space-analysis.ts
src/main/wsl-availability.ts
src/main/wsl-unc-delete.ts
src/main/wsl.ts
src/main/zsh-startup-hook-pty-harness.ts
src/relay/agent-exec-handler.ts
src/relay/ai-vault-service-client-state.ts
src/relay/ai-vault-service-client.ts
src/relay/ai-vault-service-spawn.ts
src/relay/external-automations-handler.ts
src/relay/fs-handler-git-fallback.ts
src/relay/fs-handler-list-files.ts
src/relay/fs-handler-utils.ts
src/relay/fs-list-files-fallback-chain.ts
src/relay/git-handler.ts
src/relay/git-stdout-stream.ts
src/relay/preflight-handler.ts
src/relay/pty-shell-utils.ts
src/relay/subprocess-tree-termination.ts
src/relay/workspace-space-scan.ts
src/shared/ephemeral-vm-recipe-process.ts
src/shared/ephemeral-vm-recipe-runner.ts
src/shared/fish-binary-requirement.ts
src/shared/process-table-snapshot-reader.ts
src/shared/pty-slave-line-discipline-echo.ts
src/shared/ripgrep-process-availability.ts
src/shared/shell-process-readiness.ts
