From 303cbbbb57b81530f00e884263ea41851007bacb Mon Sep 17 00:00:00 2001
From: Neil <4138956+nwparker@users.noreply.github.com>
Date: Thu, 29 Oct 2026 22:10:15 -0700
Subject: [PATCH] refactor(cli): keep the retrying PATH command private to the
 idempotent write (#36237)

---
 src/main/cli/cli-privileged-processes.ts | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/src/main/cli/cli-privileged-processes.ts b/src/main/cli/cli-privileged-processes.ts
index 7c0823f847b..9167f1f8e55 100644
--- a/src/main/cli/cli-privileged-processes.ts
+++ b/src/main/cli/cli-privileged-processes.ts
@@ -26,7 +26,8 @@ export async function writeWindowsUserPath(value: string): Promise<void> {
   ])
 }
 
-export async function runWindowsPathCommand(args: string[]): Promise<string> {
+// Private on purpose: its timeout retry is only safe for the idempotent PATH write above.
+async function runWindowsPathCommand(args: string[]): Promise<string> {
   const run = () =>
     runProcess({ program: 'powershell', args, timeoutMs: WINDOWS_PATH_WRITE_TIMEOUT_MS })
   let result = await run()