From 60f1d1959aa05eb08348c9b32e091e7b074e5692 Mon Sep 17 00:00:00 2001
From: Peter Steinberger <steipete@gmail.com>
Date: Tue, 24 Feb 2026 03:02:32 +0000
Subject: [PATCH] test: stabilize invoke-system-run env-wrapper assertion on
 Windows

---
 src/node-host/invoke-system-run.test.ts | 15 ++++++++++++++-
 1 file changed, 14 insertions(+), 1 deletion(-)

diff --git a/src/node-host/invoke-system-run.test.ts b/src/node-host/invoke-system-run.test.ts
index bffe6c638..410382a5a 100644
--- a/src/node-host/invoke-system-run.test.ts
+++ b/src/node-host/invoke-system-run.test.ts
@@ -120,12 +120,25 @@ describe("handleSystemRunInvoke mac app exec host routing", () => {
     );
   });
 
-  it("runs canonical argv in allowlist mode for transparent env wrappers", async () => {
+  it("handles transparent env wrappers in allowlist mode", async () => {
     const { runCommand, sendInvokeResult } = await runSystemInvoke({
       preferMacAppExecHost: false,
       security: "allowlist",
       command: ["env", "tr", "a", "b"],
     });
+    if (process.platform === "win32") {
+      expect(runCommand).not.toHaveBeenCalled();
+      expect(sendInvokeResult).toHaveBeenCalledWith(
+        expect.objectContaining({
+          ok: false,
+          error: expect.objectContaining({
+            message: expect.stringContaining("allowlist miss"),
+          }),
+        }),
+      );
+      return;
+    }
+
     expect(runCommand).toHaveBeenCalledWith(["tr", "a", "b"], undefined, undefined, undefined);
     expect(sendInvokeResult).toHaveBeenCalledWith(
       expect.objectContaining({