From 7652eda80c651b0275b3bfaa6e7f6db48775bbb7 Mon Sep 17 00:00:00 2001
From: joshavant <830519+joshavant@users.noreply.github.com>
Date: Thu, 28 May 2026 14:44:42 -0700
Subject: [PATCH] test(node-host): prove suppression edits bypass auto-review

Co-authored-by: Vincent Koc <25068+vincentkoc@users.noreply.github.com>
Co-authored-by: jesse-merhi <79823012+jesse-merhi@users.noreply.github.com>
---
 src/node-host/invoke-system-run.test.ts | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/src/node-host/invoke-system-run.test.ts b/src/node-host/invoke-system-run.test.ts
index 63b02da47d8..5d5b276a418 100644
--- a/src/node-host/invoke-system-run.test.ts
+++ b/src/node-host/invoke-system-run.test.ts
@@ -682,6 +682,7 @@ describe("handleSystemRunInvoke mac app exec host routing", () => {
 
   it("does not auto-review direct system.run security audit suppression edits", async () => {
     const tmp = createFixtureDir("openclaw-system-run-auto-review-suppression-");
+    const executablePath = createTempExecutable({ dir: tmp, name: "openclaw" });
     setRuntimeConfigSnapshot({
       tools: {
         exec: {
@@ -697,7 +698,7 @@ describe("handleSystemRunInvoke mac app exec host routing", () => {
       }));
       const runCommand = vi.fn(async () => createLocalRunResult("should-not-run"));
       const prepared = buildSystemRunApprovalPlan({
-        command: ["openclaw", "config", "set", "security.audit.suppressions", "[]"],
+        command: [executablePath, "config", "set", "security.audit.suppressions", "[]"],
         cwd: tmp,
       });
       expect(prepared.ok).toBe(true);