ci: restore blocking Windows test matrix

Author: Jia-Ethan

.github/workflows/tests.yml

@@ -52,6 +52,37 @@ jobs:
       - name: Run tests
         run: python -m pytest -p no:cacheprovider -q tests
 
+  windows:
+    name: Windows / Python ${{ matrix.python-version }}
+    runs-on: windows-2025
+    timeout-minutes: 20
+    strategy:
+      fail-fast: false
+      matrix:
+        python-version:
+          - "3.10"
+          - "3.14"
+
+    steps:
+      - name: Check out repository
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+        with:
+          persist-credentials: false
+
+      - name: Set up Python
+        uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6
+        with:
+          python-version: ${{ matrix.python-version }}
+
+      - name: Install test dependency
+        run: python -m pip install "pytest==8.4.2"
+
+      - name: Compile Python source
+        run: python -m py_compile codex-instruct.py
+
+      - name: Run tests
+        run: python -m pytest -p no:cacheprovider -q tests
+
   quality:
     name: Quality / Python 3.14
     runs-on: ubuntu-24.04

codex-instruct.py

@@ -555,6 +555,14 @@ def normalize_md_name(name: str) -> str:
         raise ValueError("--name 不能包含 '..'")
     if not SAFE_NAME_RE.fullmatch(raw):
         raise ValueError("--name 只能包含字母、数字、点、下划线和连字符")
+    windows_stem = raw.split(".", 1)[0].upper()
+    if (
+        windows_stem in {"CON", "PRN", "AUX", "NUL", "CONIN$", "CONOUT$"}
+        or re.fullmatch(r"COM[1-9]", windows_stem)
+        or re.fullmatch(r"LPT[1-9]", windows_stem)
+        or raw.endswith(".")
+    ):
+        raise ValueError("--name uses a Windows reserved device name")
     if raw == LEGACY_MD_FILENAME[:-3]:
         raise ValueError(
             f"--name 保留给旧版迁移，不能使用 {LEGACY_MD_FILENAME[:-3]}"