diff --git a/scripts/test-free-shards.ts b/scripts/test-free-shards.ts
index 9407c83d..915778cf 100755
--- a/scripts/test-free-shards.ts
+++ b/scripts/test-free-shards.ts
@@ -84,6 +84,13 @@ const WINDOWS_FRAGILE_PATTERNS: Array<{ pattern: RegExp; reason: string }> = [
   // BROWSE_HEADLESS_SKIP=1 to skip the browser launch but still need a working
   // server, which they don't get on Windows.
   { pattern: /BROWSE_HEADLESS_SKIP|spawn\(\[['"]bun['"],\s*['"]run['"]/, reason: 'spawns the browse server subprocess (Bun-driven path is Windows-broken)' },
+  // Tests that read browse/src/sidebar-agent.ts — deleted in v1.14.0.0
+  // sidebar refactor (replaced by sidepanel-terminal.js). 10 security tests
+  // still reference it and fail on import. They've been broken on every
+  // platform since v1.14, but Bun on macOS/Linux reports the failure as a
+  // module-load error (exit 0) while Bun on Windows treats it as a hard
+  // fail (exit 1). Tracked as a follow-up: update or delete these tests.
+  { pattern: /['"]sidebar-agent\.ts['"]|src\/sidebar-agent['"]/, reason: 'reads deleted browse/src/sidebar-agent.ts (pre-existing breakage from v1.14.0.0 sidebar refactor)' },
 ];
 
 // Explicit known-Windows-incompatible test files that don't fit a regex