From 41eef15cdc477a1a6207b89a65a74bac6f6d4e0f Mon Sep 17 00:00:00 2001
From: Peter Steinberger <steipete@gmail.com>
Date: Mon, 9 Mar 2026 05:24:09 +0000
Subject: [PATCH] test: fix windows secrets runtime ci

---
 src/secrets/runtime.test.ts | 16 ++++++++++++++--
 1 file changed, 14 insertions(+), 2 deletions(-)

diff --git a/src/secrets/runtime.test.ts b/src/secrets/runtime.test.ts
index 00524153b5f..1d395ee4484 100644
--- a/src/secrets/runtime.test.ts
+++ b/src/secrets/runtime.test.ts
@@ -42,6 +42,8 @@ describe("secrets runtime snapshot", () => {
     clearSecretsRuntimeSnapshot();
   });
 
+  const allowInsecureTempSecretFile = process.platform === "win32";
+
   it("resolves env refs for config and auth profiles", async () => {
     const config = asConfig({
       agents: {
@@ -567,7 +569,12 @@ describe("secrets runtime snapshot", () => {
         config: asConfig({
           secrets: {
             providers: {
-              default: { source: "file", path: secretFile, mode: "json" },
+              default: {
+                source: "file",
+                path: secretFile,
+                mode: "json",
+                ...(allowInsecureTempSecretFile ? { allowInsecurePath: true } : {}),
+              },
             },
           },
           models: {
@@ -658,7 +665,12 @@ describe("secrets runtime snapshot", () => {
         config: asConfig({
           secrets: {
             providers: {
-              default: { source: "file", path: secretFile, mode: "json" },
+              default: {
+                source: "file",
+                path: secretFile,
+                mode: "json",
+                ...(allowInsecureTempSecretFile ? { allowInsecurePath: true } : {}),
+              },
             },
           },
           models: {