fix: ci

packages/host/apiproxy/src/native-command.ts

@@ -0,0 +1,38 @@
+/** Shared no-shell `execFile` runner for native host dialogs and openers. */
+
+import { execFile } from 'node:child_process'
+
+/** Testable command boundary; native implementations never invoke a shell. */
+export type NativeCommandRunner = (
+  command: string,
+  args: readonly string[],
+  signal: AbortSignal,
+) => Promise<{ stdout: string; stderr: string }>
+
+/**
+ * Run a host command with utf8 stdio, abort propagation, and Windows hide.
+ * @param command - executable path or PATH name.
+ * @param args - argv (never a shell string).
+ * @param signal - caller/connection lifetime; abort terminates the child.
+ * @returns captured stdout/stderr on exit 0.
+ */
+export const runNativeCommand: NativeCommandRunner = (command, args, signal) =>
+  new Promise((resolve, reject) => {
+    execFile(
+      command,
+      [...args],
+      { encoding: 'utf8', signal, windowsHide: true },
+      (error, stdout, stderr) => {
+        if (error !== null) {
+          const failure = Object.assign(new Error(error.message, { cause: error }), {
+            code: error.code,
+            stdout,
+            stderr,
+          })
+          reject(failure)
+          return
+        }
+        resolve({ stdout, stderr })
+      },
+    )
+  })

packages/host/apiproxy/src/native-directory-picker.ts

@@ -1,13 +1,9 @@
 /** Cross-platform native single-directory picker used by the local GUI carrier. */
 
-import { execFile } from 'node:child_process'
+import { runNativeCommand, type NativeCommandRunner } from './native-command.ts'
 
 /** Testable command boundary; native implementations never invoke a shell. */
-export type DirectoryPickerRunner = (
-  command: string,
-  args: readonly string[],
-  signal: AbortSignal,
-) => Promise<{ stdout: string; stderr: string }>
+export type DirectoryPickerRunner = NativeCommandRunner
 
 /** Injectable platform facts for deterministic adapter tests. */
 export interface DirectoryPickerInternals {
@@ -15,27 +11,6 @@ export interface DirectoryPickerInternals {
   run?: DirectoryPickerRunner
 }
 
-const runCommand: DirectoryPickerRunner = (command, args, signal) =>
-  new Promise((resolve, reject) => {
-    execFile(
-      command,
-      [...args],
-      { encoding: 'utf8', signal, windowsHide: true },
-      (error, stdout, stderr) => {
-        if (error !== null) {
-          const failure = Object.assign(new Error(error.message, { cause: error }), {
-            code: error.code,
-            stdout,
-            stderr,
-          })
-          reject(failure)
-          return
-        }
-        resolve({ stdout, stderr })
-      },
-    )
-  })
-
 function outputPath(stdout: string): string | null {
   const path = stdout.replace(/[\r\n]+$/, '')
   return path === '' ? null : path
@@ -72,7 +47,7 @@ export async function pickNativeDirectory(
   internals: DirectoryPickerInternals = {},
 ): Promise<string | null> {
   const platform = internals.platform ?? process.platform
-  const run = internals.run ?? runCommand
+  const run = internals.run ?? runNativeCommand
 
   if (platform === 'darwin') {
     try {

packages/host/apiproxy/src/native-path-opener.ts

@@ -1,13 +1,9 @@
 /** Cross-platform open-with-default-application used by the local GUI carrier. */
 
-import { execFile } from 'node:child_process'
+import { runNativeCommand, type NativeCommandRunner } from './native-command.ts'
 
 /** Testable command boundary; native implementations never invoke a shell. */
-export type PathOpenerRunner = (
-  command: string,
-  args: readonly string[],
-  signal: AbortSignal,
-) => Promise<{ stdout: string; stderr: string }>
+export type PathOpenerRunner = NativeCommandRunner
 
 /** Injectable platform facts for deterministic adapter tests. */
 export interface PathOpenerInternals {
@@ -15,27 +11,6 @@ export interface PathOpenerInternals {
   run?: PathOpenerRunner
 }
 
-const runCommand: PathOpenerRunner = (command, args, signal) =>
-  new Promise((resolve, reject) => {
-    execFile(
-      command,
-      [...args],
-      { encoding: 'utf8', signal, windowsHide: true },
-      (error, stdout, stderr) => {
-        if (error !== null) {
-          const failure = Object.assign(new Error(error.message, { cause: error }), {
-            code: error.code,
-            stdout,
-            stderr,
-          })
-          reject(failure)
-          return
-        }
-        resolve({ stdout, stderr })
-      },
-    )
-  })
-
 /** PowerShell single-quoted literal (doubles embedded quotes). */
 function powershellLiteral(path: string): string {
   return `'${path.replace(/'/g, "''")}'`
@@ -53,7 +28,7 @@ export async function openNativePath(
   internals: PathOpenerInternals = {},
 ): Promise<void> {
   const platform = internals.platform ?? process.platform
-  const run = internals.run ?? runCommand
+  const run = internals.run ?? runNativeCommand
 
   if (platform === 'darwin') {
     await run('open', [path], signal)

packages/host/apiproxy/tests/fetch-carrier.spec.ts

@@ -208,6 +208,18 @@ describe('unary round trip (handler ⇄ client, no network)', () => {
     expect(response.result).toEqual({ ok: true, value: { path: '/tmp/project' } })
   })
 
+  it('round-trips host.openPath through the wire form', async () => {
+    const api = fakeApi()
+    let opened: string | undefined
+    api.host.openPath = async (request) => {
+      opened = request.payload.path
+      return { rpcId: request.rpcId, result: { ok: true, value: { opened: true as const } } }
+    }
+    const response = await client(api).host.openPath({ path: '/tmp/a.txt' })
+    expect(opened).toBe('/tmp/a.txt')
+    expect(response.result).toEqual({ ok: true, value: { opened: true } })
+  })
+
   it('round-trips command.list / command.execute / skill.list through the wire form', async () => {
     const c = client()
     const list = await c.commands.list({ sessionId: 's' as never })

packages/host/apiproxy/tests/native-path-opener.spec.ts

@@ -47,7 +47,18 @@ describe('native path opener', () => {
       .rejects.toThrow('unsupported on freebsd')
   })
 
-  it('runs the default command adapter without a shell', async () => {
+  it('uses the current process platform when no platform override is supplied', async () => {
+    const run = vi.fn<PathOpenerRunner>(async () => ({ stdout: '', stderr: '' }))
+    await openNativePath('/tmp/platform-default.txt', signal(), { run })
+    const expected = process.platform === 'win32'
+      ? 'powershell.exe'
+      : process.platform === 'linux'
+        ? 'xdg-open'
+        : 'open'
+    expect(run.mock.calls[0]?.[0]).toBe(expected)
+  })
+
+  it('runs the default command adapter without a shell and preserves command failures', async () => {
     execFileMock.mockImplementationOnce((_command, _args, _options, callback) => {
       callback(null, '', '')
     })
@@ -58,5 +69,14 @@ describe('native path opener', () => {
     expect(options.encoding).toBe('utf8')
     expect(options.windowsHide).toBe(true)
     expect(options.signal).toBeInstanceOf(AbortSignal)
+
+    const commandError = Object.assign(new Error('open failed'), { code: 1 })
+    execFileMock.mockImplementationOnce((_command, _args, _options, callback) => {
+      callback(commandError, 'partial output', 'failure details')
+    })
+    await expect(openNativePath('/tmp/missing.txt', signal(), { platform: 'darwin' })).rejects.toMatchObject({
+      message: 'open failed', cause: commandError, code: 1,
+      stdout: 'partial output', stderr: 'failure details',
+    })
   })
 })