[maphew]

First of five v0.6 pull requests (Beads epic mdo-bs3, feature mdo-bs3.1). Correctness before presentation: honest --open failures, standards-correct file URLs, rename-resilient watch mode, and Windows CI that actually runs tests.

Changes

Honest browser-launch failures (mdo-bs3.1.1)

• mdo --open exits 0 only when render AND launch both succeed; on launch failure the error and the surviving rendered path go to stderr.
• An opener that spawns but exits nonzero within 2s (xdg-open with no browser handler; macOS open with no association) is now a failure — spawning is not opening.
• mdo-open waits on its child and mirrors the exit status instead of always reporting success. CREATE_NO_WINDOW is preserved, so no console flash returns.

Standards-correct file URLs (mdo-bs3.1.2)

• dir_to_file_url now delegates to url::Url::from_directory_path (already in the dependency tree via ammonia): correct percent-encoding for spaces, #, %, ?, Unicode, plus Windows drive letters, UNC, and \\?\ prefixes.
• Paths that can't form a valid file URL omit <base href> instead of emitting a broken one.

Rename-resilient watch mode (mdo-bs3.1.3)

• Watches the parent directory and filters events to the target file, so atomic editor saves (temp-file rename) no longer kill the watch.
• Trailing-edge 200ms debounce coalesces save bursts into one render and can't drop the final event; only events for the watched file extend the window, so sibling churn can't starve rendering.
• Watch registration happens before the initial render, closing the lost-save window; failed renders don't end the loop.

Windows CI runs tests (mdo-bs3.1.4)

• The windows job upgrades from cargo check to cargo test --all-targets --all-features --locked.
• Registry install/uninstall split into a pure, unit-tested plan builder + thin reg.exe executor — no test touches the real registry.
• New wrapper integration tests cover argument forwarding and exit-status propagation.

Review

• Orchestrated multi-agent implementation with Fable 5 review of every diff; two defects caught and fixed in review (exit-code truncation to 0, debounce starvation).
• Independent cross-provider review by GPT-5.6 (codex, high reasoning): 7 findings, all triaged; 5 fixed in the final commit, 1 already fixed, 1 accepted as documented limitation (symlinked-input replacement).
• Local gates: fmt, clippy -D warnings, 51 tests green (watch tests triple-run for flake).
• Note: the cfg(windows)-gated code compiles only on Windows CI — this PR's Windows job is its first real compile+run, so watch that check.

🤖 Generated with Claude Code

[kilo-code-bot]

Code Review Summary

Status: No Issues Found | Recommendation: Merge

Files Reviewed (10 files)

• .github/workflows/ci.yml
• Cargo.lock
• Cargo.toml
• src/bin/mdo-open.rs
• src/file_manager.rs
• src/lib.rs
• src/main.rs
• src/windows_setup.rs
• tests/cli.rs
• tests/wrapper.rs

---

_{Reviewed by hy3:free · Input: 72.3K · Output: 2.5K · Cached: 235.9K}