fix(monitor): stop leaking Process handles in system_stats

system_stats() backs the status-footer RSS/CPU indicators and is polled
every 2 s from the frontend. It called sys.refresh_all(), which enumerates
every process on the system and OpenProcess-es each one. On a terminal that
constantly spawns short-lived processes, those Process handles leaked
steadily, growing nonpaged pool until the machine ran out of memory and the
UI froze after several hours of uptime.

We only need our own process's RSS + CPU, so scope the refresh to our pid
via refresh_processes(ProcessesToUpdate::Some(&[pid]), true) — matching the
memory-breadcrumb loop. No handle leak, and far cheaper per poll.

Bump version to 1.1.4.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: craig7351

package-lock.json

@@ -1,6 +1,6 @@
 {
   "name": "bookshell",
-  "version": "1.1.3",
+  "version": "1.1.4",
   "description": "BOOKSHELL — SSH terminal for AI agents (Phase 0 prototype)",
   "type": "module",
   "scripts": {

package.json

@@ -33,7 +33,13 @@ pub async fn system_stats() -> Result<SystemStats, String> {
     });
     let mut g = monitor.lock().map_err(|e| format!("lock: {}", e))?;
     let pid = g.pid;
-    g.sys.refresh_all();
+    // Refresh ONLY our own process. refresh_all() enumerates every process on the
+    // system and, on Windows, OpenProcess-es each one. Called every 2 s from the
+    // frontend — on a terminal that constantly spawns short-lived processes — that
+    // leaked Process handles steadily (nonpaged-pool growth → eventual freeze).
+    // We only need our own RSS + CPU, so scope the refresh to our pid.
+    g.sys
+        .refresh_processes(sysinfo::ProcessesToUpdate::Some(&[pid]), true);
     let proc = g.sys.process(pid).ok_or("process not found")?;
     Ok(SystemStats {
         rss_mb: proc.memory() / (1024 * 1024),

src-tauri/src/monitor.rs

@@ -1,7 +1,7 @@
 {
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "BOOKSHELL",
-  "version": "1.1.3",
+  "version": "1.1.4",
   "identifier": "dev.bookshell.app",
   "build": {
     "beforeDevCommand": "npm run dev",