From 4b19066cc15dc1c808c4067ab3d2964095368ff9 Mon Sep 17 00:00:00 2001
From: Peter Steinberger <steipete@gmail.com>
Date: Fri, 23 Jan 2026 03:11:41 +0000
Subject: [PATCH] fix: normalize Windows exec allowlist paths

---
 src/infra/exec-approvals.ts | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/src/infra/exec-approvals.ts b/src/infra/exec-approvals.ts
index 524a11d6b..65dc4f024 100644
--- a/src/infra/exec-approvals.ts
+++ b/src/infra/exec-approvals.ts
@@ -409,6 +409,10 @@ export function resolveCommandResolutionFromArgv(
 }
 
 function normalizeMatchTarget(value: string): string {
+  if (process.platform === "win32") {
+    const stripped = value.replace(/^\\\\[?.]\\/, "");
+    return stripped.replace(/\\/g, "/").toLowerCase();
+  }
   return value.replace(/\\\\/g, "/").toLowerCase();
 }