test: require blocking Windows compatibility coverage

Author: Jia-Ethan

tests/test_release_artifacts.py

@@ -619,7 +619,7 @@ def test_builder_rejects_missing_file_and_incomplete_mit_notice(
         release_builder.build_release(TAG, license_repo, tmp_path / "license-assets")
 
 
-def test_ci_uses_full_tag_checkout_and_only_claims_supported_platforms():
+def test_ci_uses_full_tag_checkout_and_blocking_windows_matrix():
     workflow = (REPO_ROOT / ".github" / "workflows" / "tests.yml").read_text(
         encoding="utf-8"
     )
@@ -633,9 +633,15 @@ def test_ci_uses_full_tag_checkout_and_only_claims_supported_platforms():
     assert '"pytest==8.4.2"' in workflow
     assert 'python-version == \'3.9\'' in workflow
     assert 'python-version == \'3.8\'' not in workflow
-    assert "windows-2025" not in workflow
+    assert "windows-2025" in workflow
+    assert '"3.10"' in workflow
+    assert '"3.14"' in workflow
     assert "continue-on-error" not in workflow
     assert "Windows experimental atomic no-replace probe passed" not in workflow
+    windows_job = workflow.split("\n  windows:", 1)[1].split("\n  quality:", 1)[0]
+    assert "runs-on: windows-2025" in windows_job
+    assert "python -m py_compile codex-instruct.py" in windows_job
+    assert "python -m pytest -p no:cacheprovider -q tests" in windows_job
     quality_job = workflow.split("\n  quality:", 1)[1]
     assert "fetch-depth: 0" in quality_job
     assert "fetch-tags: true" in quality_job

tests/test_windows_filesystem.py

@@ -176,6 +176,15 @@ def test_operation_directories_are_identity_deduplicated_and_stably_sorted(tmp_p
     assert {item.path for item in normalized} == {first.resolve(), second.resolve()}
 
 
+@pytest.mark.parametrize(
+    "name",
+    ["CON", "prn.md", "AUX", "nul.txt", "COM1", "lpt9.md"],
+)
+def test_windows_reserved_device_names_are_rejected(name):
+    with pytest.raises(ValueError, match="reserved"):
+        codex_instruct.normalize_md_name(name)
+
+
 def test_directory_lock_excludes_second_process_without_sleep(tmp_path):
     codex_dir = _make_codex_dir(tmp_path, "lock target")
     worker = """
@@ -220,6 +229,75 @@ def checkpoint(name):
     assert stdout == "directory-lock-acquired\n"
 
 
+def test_process_termination_releases_directory_lock(tmp_path):
+    codex_dir = _make_codex_dir(tmp_path, "terminated lock")
+    holder = """
+import importlib.util
+import sys
+from pathlib import Path
+
+module_path = Path(sys.argv[1])
+target = sys.argv[2]
+spec = importlib.util.spec_from_file_location("keysmith_lock_holder", module_path)
+module = importlib.util.module_from_spec(spec)
+sys.modules[spec.name] = module
+spec.loader.exec_module(module)
+
+def checkpoint(name):
+    if name == "directory-lock-acquired":
+        print(name, flush=True)
+
+module._FILESYSTEM_CHECKPOINT_HOOK = checkpoint
+with module._DirectoryLockSet([target]):
+    sys.stdin.buffer.read(1)
+"""
+    process = subprocess.Popen(
+        [sys.executable, "-c", holder, str(MODULE_PATH), str(codex_dir)],
+        stdin=subprocess.PIPE,
+        stdout=subprocess.PIPE,
+        stderr=subprocess.PIPE,
+        text=True,
+    )
+    assert process.stdout is not None
+    assert process.stdout.readline() == "directory-lock-acquired\n"
+    process.kill()
+    process.communicate(timeout=10)
+
+    worker = subprocess.run(
+        [
+            sys.executable,
+            "-c",
+            (
+                "import importlib.util,sys; from pathlib import Path; "
+                "p=Path(sys.argv[1]); s=importlib.util.spec_from_file_location('m',p); "
+                "m=importlib.util.module_from_spec(s); sys.modules[s.name]=m; "
+                "s.loader.exec_module(m); "
+                "lock=m._DirectoryLockSet([sys.argv[2]]); lock.__enter__(); "
+                "print('acquired'); lock.__exit__(None,None,None)"
+            ),
+            str(MODULE_PATH),
+            str(codex_dir),
+        ],
+        text=True,
+        capture_output=True,
+        timeout=10,
+    )
+    assert worker.returncode == 0, worker.stderr
+    assert worker.stdout == "acquired\n"
+
+
+@pytest.mark.skipif(os.name != "nt", reason="Windows case-insensitive identity contract")
+def test_windows_case_aliases_are_identity_deduplicated(tmp_path):
+    directory = _make_codex_dir(tmp_path, "CaseAlias")
+    alias = Path(str(directory).swapcase())
+
+    normalized = codex_instruct._normalize_operation_directories(
+        [str(directory), str(alias)]
+    )
+
+    assert len(normalized) == 1
+
+
 @pytest.mark.skipif(os.name != "nt", reason="Windows native ACL contract")
 def test_windows_private_file_and_directory_acl(tmp_path):
     directory = tmp_path / "private 中文"