From a406045f2f60e5b0ffa44c5709acac91cddfbdde Mon Sep 17 00:00:00 2001
From: Peter Steinberger <steipete@gmail.com>
Date: Thu, 2 Apr 2026 16:59:01 +0100
Subject: [PATCH] test: accept Windows exec approval denial path

---
 src/node-host/invoke-system-run.test.ts | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/src/node-host/invoke-system-run.test.ts b/src/node-host/invoke-system-run.test.ts
index a0b96b0334e..839b0d44d76 100644
--- a/src/node-host/invoke-system-run.test.ts
+++ b/src/node-host/invoke-system-run.test.ts
@@ -1415,7 +1415,11 @@ describe("handleSystemRunInvoke mac app exec host routing", () => {
 
             expect(malicious.runCommand).not.toHaveBeenCalled();
             expectInvokeErrorMessage(malicious.sendInvokeResult, {
-              message: "awk inline program requires explicit approval in strictInlineEval mode",
+              message:
+                process.platform === "win32"
+                  ? "SYSTEM_RUN_DENIED: approval required"
+                  : "awk inline program requires explicit approval in strictInlineEval mode",
+              exact: process.platform === "win32",
             });
           } finally {
             fs.rmSync(tempDir, { recursive: true, force: true });