From 82017fe94c71780104f0149d4672e6da6e804f5a Mon Sep 17 00:00:00 2001
From: JUN <243035832+lidge-jun@users.noreply.github.com>
Date: Thu, 29 Oct 2026 14:19:35 +0900
Subject: [PATCH] test(windows): resolve the atomic-write fixture root before
 matching cleanup paths

The writer resolves the destination's real parent, and macOS tmpdir() is a symlink, so the unlink fixture never matched and the residual case failed on macOS (dev batch 40819570452).
---
 tests/windows/windows-atomic-write-acl-rearm.test.ts | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/tests/windows/windows-atomic-write-acl-rearm.test.ts b/tests/windows/windows-atomic-write-acl-rearm.test.ts
index 4775e99a43b..258a4425c20 100644
--- a/tests/windows/windows-atomic-write-acl-rearm.test.ts
+++ b/tests/windows/windows-atomic-write-acl-rearm.test.ts
@@ -62,7 +62,9 @@ function runAcl(args: string[]): IcaclsResult {
 }
 
 beforeEach(() => {
-  root = native.mkdtempSync(join(tmpdir(), "ocx-atomic-acl-rearm-"));
+  // The writer resolves the destination's real parent, and macOS tmpdir() is a symlink
+  // (/var -> /private/var); the unlink fixture must match the path the writer actually uses.
+  root = native.realpathSync(native.mkdtempSync(join(tmpdir(), "ocx-atomic-acl-rearm-")));
   native.writeFileSync(join(root, "secret.json"), "previous", "utf8");
   previousTimeout = process.env.OPENCODEX_ACL_TIMEOUT_MS;
   previousVerify = process.env.OPENCODEX_ACL_VERIFY_EXISTING;