Feature guide · runtime safety

No terminal flash. No surprise focus trip.

Quiet operation is a process contract, not a promise in the interface.

Behavior

Windows child processes use CREATE_NO_WINDOW and hidden startup information. Startup uses pythonw.exe, shell execution is disabled, headless rooms never switch input desktops, and foreground tools require explicit consent.

Configuration

The GUI can start the API or register user-logon startup. Elevated startup is opt-in. Targeted HWND and AutoHotkey routes are preferred for background input.

Failure modes

• Background-control limitations are reported instead of moving focus silently.
• Missing dependencies return a repair stage and output.
• Human reveal is a distinct instructed handoff with an emergency exit.

Security

Hidden does not mean harmless: native processes still have the user's permissions. Focus guards protect the user's active work; client authorization remains the trusted MCP/API boundary.

Verification

The process and focus suite covers hidden flags, guard defaults, and safety-banner contracts. Live evidence must record foreground HWND before and after representative operations.

Suggested articles

Headless desktops · Electron manual client · Trusted-LAN API