fix(auth): guard backup assessment against Windows EPERM/EBUSY

Wrap getActionableNamedBackupRestores in try-catch so a filesystem
error (e.g. antivirus holding a backup file on Windows) skips the
recovery prompt instead of crashing the login flow.

Switch Promise.all to Promise.allSettled in getActionableNamedBackupRestores
so one unreadable backup file does not block assessment of the rest.

Author: ndycode

lib/codex-manager.ts

@@ -4373,9 +4373,17 @@ async function runAuthLogin(): Promise<number> {
 			isInteractiveLoginMenuAvailable();
 		if (canPromptForRecovery) {
 			recoveryPromptAttempted = true;
-			const recoveryState = await getActionableNamedBackupRestores({
-				currentStorage: refreshedStorage,
-			});
+			let recoveryState: Awaited<
+				ReturnType<typeof getActionableNamedBackupRestores>
+			>;
+			try {
+				recoveryState = await getActionableNamedBackupRestores({
+					currentStorage: refreshedStorage,
+				});
+			} catch {
+				// Filesystem error (e.g. Windows EPERM/EBUSY) – skip recovery prompt
+				recoveryState = { assessments: [], totalBackups: 0 };
+			}
 			if (recoveryState.assessments.length > 0) {
 				const displaySettings = await loadDashboardDisplaySettings();
 				applyUiThemeFromDashboardSettings(displaySettings);

lib/storage.ts

@@ -1334,9 +1334,18 @@ export async function getActionableNamedBackupRestores(
 			? await loadAccounts()
 			: options.currentStorage;
 	const assess = options.assess ?? assessNamedBackupRestore;
-	const assessments = await Promise.all(
+	const settled = await Promise.allSettled(
 		backups.map((backup) => assess(backup.name, { currentStorage })),
 	);
+	const assessments = settled
+		.filter(
+			(
+				r,
+			): r is PromiseFulfilledResult<
+				Awaited<ReturnType<typeof assessNamedBackupRestore>>
+			> => r.status === "fulfilled",
+		)
+		.map((r) => r.value);
 
 	const actionable = assessments.filter(
 		(assessment) =>