[Brooooooklyn]

Problem

main CI fails on test (windows-latest, 2/2) on every push since #384:

dev-trigger-secret-guard.test.ts > still serves other files under .void
AssertionError: expected 403 to be 200

The test is not flaky. It never passed on Windows. #384 added it, and PRs only run Windows CI with the test: windows label.

Cause

tmpdir() on the Windows runner = C:\Users\RUNNER~1\AppData\Local\Temp   (8.3 short name)
        │
        ▼
realpathSync (JS)  ── keeps RUNNER~1 ──►  test root
        │
GET /.void/routes.d.ts
        │
        ├─ Void guard: no secret path → next()
        └─ Vite static step → isFileLoadingAllowed()
                 if (isWindows && looksLikeWindowsShortNamePath(path)) return false
                 → 403

Vite 8.3 refuses every file under a short-name path on Windows. This is Vite's own rule. The Void guard is correct: all the 404 cases in the file pass on Windows.

What this PR changes

realpathSync(tmp)  →  realpathSync.native(tmp)
C:\Users\RUNNER~1\…     C:\Users\runneradmin\…

realpathSync.native expands the short name. plugin-env-schema.ts already uses it for the same reason, and its tests pass on Windows.

Testing

Check	Result
vp test run packages/void/test/integration/dev-trigger-secret-guard.test.ts (macOS)	15/15 pass
Windows simulation with a RUNNER~1 root	403 before, 200 with the long root
windows-latest CI on this PR (test: windows label)	the real check

🤖 Generated with Claude Code

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-10-08T14:42:35.442898Z	7aa0fe7	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[cloudflare-workers-and-pages]

🚀 Deploying Preview to Cloudflare 🚀

Preview URL: https://fix-dev-secret-guard-windows-temp-root-void-cloud.voidzero-docs.workers.dev (commit 7aa0fe7)

This URL reflects your latest Preview deployment

Preview Deployments by commit

Status	Deployment URL	Commit	Updated (UTC)	See this deployment's details
Build: Success ✅ Deployment: Success ✅ View logs ↗	https://e489cfbe-void-cloud.voidzero-docs.workers.dev	7aa0fe7	2026-10-08T14:42:36.909Z	Visit the dashboard ↗