fix(security): scope managed path opening

src/renderer/hooks/useCompanyController.ts

@@ -135,7 +135,12 @@ export function useCompanyController() {
 
   const openPathWithFeedback = useCallback(async (path: string) => {
     const store = useAppStore.getState();
-    try { unwrap(await window.agentCompany.openPath(path)); store.setError(null); }
+    const companyId = store.snapshot?.currentCompanyId;
+    if (!companyId) {
+      store.setError("Select a company before opening a managed path.");
+      return;
+    }
+    try { unwrap(await window.agentCompany.openPath({ companyId, path })); store.setError(null); }
     catch (err) { store.setError(describeDesktopError(err)); }
   }, []);
 

src/renderer/views/sections/OperationsSections.tsx

@@ -159,12 +159,7 @@ export function OperationsSections({ section }: OperationsSectionsProps) {
             }
           }}
           onOpenPath={async (path) => {
-            try {
-              unwrap(await window.agentCompany.openPath(path));
-              setError(null);
-            } catch (error) {
-              setError(describeDesktopError(error));
-            }
+            await openPathWithFeedback(path);
           }}
           onCancelAction={async (actionId) => {
             if (!snapshot?.currentCompanyId) return;