* fix(win32): hide the console window for agent-browser and git helpers
W1 routed most child processes through `runProcess`, which always sets
`windowsHide`. Six call sites still spawn directly, so each one opens a real
console window on Windows: it flashes and steals foreground. For the git status
poll, that is once per poll (#10488).
A ratchet now scans every file that imports `child_process` and fails on a call
without the flag. Its allowlist starts at the 76 files that still offend and can
only shrink — it doubles as the worklist for routing them through the chokepoint,
which is where the flag stops being a per-call-site decision at all.
Diagnosed in #14589; the SSH and cookie-import sites it also covered are already
fixed on main by the W1 migration.
Co-authored-by: OrcaWin <orcawin@users.noreply.github.com>
* test(wsl): stop the exec-mode guard scanning historical release checkouts
The cross-version e2e lane checks whole past releases out under
`tests/e2e/.cross-version-checkouts/`. The guard walked into them, so on any
machine that had run that lane it reported 21 offenders -- every one a copy of
shipped code we cannot edit -- and failed. Skip dot-directories; the >500-file
vacuity assertion still holds.
---------
Co-authored-by: OrcaWin <orcawin@users.noreply.github.com>