@alipay/alipay-aipay 1.7.2 → 1.7.4

package/skill-pre/references/normal/scripts/auth_runtime_runner.mjs

@@ -1,6 +1,9 @@
 #!/usr/bin/env node
 
-import { spawnSync } from 'node:child_process';
+import { spawnSync as nativeSpawn } from 'node:child_process';
+const { spawnSync } = process.platform === 'win32'
+  ? await import('./windows/execution.mjs')
+  : { spawnSync: nativeSpawn };
 import process from 'node:process';
 
 const internalPrefix = 'ALIPAY_AIPAY_INTERNAL:';

package/skill-pre/references/normal/scripts/common.sh

@@ -5,6 +5,10 @@
 # 调用前置: 无
 #=============================================================================
 
+case "$(uname -s)" in
+  MINGW*|MSYS*) source "$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)/windows/shell_helpers.sh" || exit 78 ;;
+esac
+
 case "${HOME:-}" in
   /*)
     user_bin="$HOME/.local/bin"
@@ -39,6 +43,9 @@ ALIPAY_AIPAY_LOCAL_CONFIG_PERMISSION_EXIT_CODE=77
 ALIPAY_AIPAY_LOCAL_CONFIG_ACCESS_CONFIRMED=false
 
 alipay_cli_credentials_dir() {
+  case "$(uname -s)" in
+    MINGW*|MSYS*) cygpath -u "$ALIPAY_WINDOWS_CREDENTIALS_DIR"; return $? ;;
+  esac
   case "${HOME:-}" in
     /*) [ "$HOME" != "/" ] || return "$ALIPAY_CLI_LOCAL_STATE_PERMISSION_EXIT_CODE" ;;
     *) return "$ALIPAY_CLI_LOCAL_STATE_PERMISSION_EXIT_CODE" ;;
@@ -47,6 +54,9 @@ alipay_cli_credentials_dir() {
 }
 
 alipay_cli_logs_dir() {
+  case "$(uname -s)" in
+    MINGW*|MSYS*) cygpath -u "$ALIPAY_WINDOWS_LOGS_DIR"; return $? ;;
+  esac
   local data_home="${XDG_DATA_HOME:-}"
   if [ -z "$data_home" ]; then
     case "${HOME:-}" in
@@ -67,7 +77,7 @@ alipay_cli_has_local_state_permission_error() {
   [ -n "$raw" ] || return 1
 
   permission_pattern='permission denied|operation not permitted|(^|[^[:alnum:]_])(EACCES|EPERM)([^[:alnum:]_]|$)'
-  private_state_pattern='poll_state\.enc\.tmp|session\.enc|\.alipay-cli[/\\]credentials|alipay-cli[/\\]logs'
+  private_state_pattern='poll_state\.enc\.tmp|session\.enc|\.alipay-cli[/\\]credentials|alipay-cli[/\\](data[/\\])?logs'
   local_state_failure_pattern='写入临时文件失败|删除凭据文件失败|can.?t rename log file'
 
   printf '%s' "$raw" | grep -qiE "$local_state_failure_pattern" && return 0

package/skill-pre/references/normal/scripts/onboarding_discovery_runner.mjs

@@ -1,6 +1,9 @@
 #!/usr/bin/env node
 
-import { spawn } from 'node:child_process';
+import { spawn as nativeSpawn } from 'node:child_process';
+const { spawn } = process.platform === 'win32'
+  ? await import('./windows/execution.mjs')
+  : { spawn: nativeSpawn };
 import path from 'node:path';
 import process from 'node:process';
 import { fileURLToPath } from 'node:url';

package/skill-pre/references/normal/scripts/onboarding_message_runner.mjs

@@ -1,5 +1,9 @@
 #!/usr/bin/env node
 
+import fs from 'node:fs';
+const windowsRouting = process.platform === 'win32' ? await import('./windows/routing.mjs') : null;
+let windowsMccCatalog;
+
 import { createHash } from 'node:crypto';
 import path from 'node:path';
 import process from 'node:process';
@@ -156,6 +160,7 @@ async function readStdin() {
 }
 
 function runPlatformEntry(args = {}) {
+  if (windowsRouting && windowsRouting.onboardingRoute() === 'READY') return '';
   if (!isWindowsPlatform()) return '';
   const runContext = currentRunContext();
   if (runContext?.terminal) {
@@ -305,6 +310,10 @@ function mccCandidateFromRecord(record, productType = '', mccRunContext = captur
 }
 
 function dynamicMccRecordsFromCatalog(rawCatalog) {
+  if (windowsRouting && rawCatalog === '@windows-stdin') {
+    windowsMccCatalog ??= fs.readFileSync(0, 'utf8');
+    rawCatalog = windowsMccCatalog;
+  }
   let catalog;
   try {
     catalog = typeof rawCatalog === 'string' ? JSON.parse(rawCatalog) : rawCatalog;
@@ -1332,7 +1341,7 @@ export async function runOnboardingMessageCli(argv = process.argv) {
   if (command === 'platform-entry') {
     const message = runPlatformEntry(args);
     if (message) console.log(message);
-    return;
+    return windowsRouting ? (message ? 'LEGACY' : 'READY') : undefined;
   }
   if (command === 'product-clarify') {
     console.log(runProductClarify());

package/skill-pre/references/normal/scripts/onboarding_recovery_runner.mjs

@@ -1,6 +1,9 @@
 #!/usr/bin/env node
 
-import { spawnSync } from 'node:child_process';
+import { spawnSync as nativeSpawn } from 'node:child_process';
+const { spawnSync } = process.platform === 'win32'
+  ? await import('./windows/execution.mjs')
+  : { spawnSync: nativeSpawn };
 import path from 'node:path';
 import process from 'node:process';
 import { fileURLToPath } from 'node:url';

package/skill-pre/references/normal/scripts/open_official_url.sh

@@ -6,6 +6,12 @@ KIND="${1:-}"
 IFS= read -r URL || URL=""
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 POLICY_FILE="${SCRIPT_DIR}/../json/policy-rules.json"
+case "$(uname -s)" in
+  MINGW*|MSYS*)
+    source "$SCRIPT_DIR/windows/shell_helpers.sh" || exit 78
+    POLICY_FILE=$(cygpath -m "$POLICY_FILE") || exit 78
+    ;;
+esac
 
 case "$KIND" in authorization|public-key-confirmation) ;; *) echo "OPEN_FAILED"; exit 1 ;; esac
 command -v node >/dev/null 2>&1 || { echo "OPEN_FAILED"; exit 1; }
@@ -18,8 +24,10 @@ const policy = JSON.parse(fs.readFileSync(policyFile, "utf8"));
 if (/[\u0000-\u0020\u007f`()\[\]<>|]/.test(raw)) process.exit(1);
 let url;
 try { url = new URL(raw); } catch { process.exit(1); }
-const allowed = policy.temporaryUrlAllowlist[kind === "authorization" ? "authorization" : "publicKeyConfirmation"];
-if (!allowed || url.protocol !== "https:" || url.hostname !== allowed.host || url.pathname !== allowed.path || url.username || url.password || url.port || url.hash) process.exit(1);
+const entries = policy.temporaryUrlAllowlist[kind === "authorization" ? "authorization" : "publicKeyConfirmation"];
+const allowed = (Array.isArray(entries) ? entries : [entries]).find((entry) =>
+  entry && url.hostname === entry.host && url.pathname === entry.path);
+if (!allowed || url.protocol !== "https:" || url.username || url.password || url.port || url.hash) process.exit(1);
 if (kind === "authorization") {
   const required = allowed.requiredQueryParams;
   const optional = allowed.optionalQueryParams;

package/skill-pre/references/normal/scripts/preview_runtime.mjs

@@ -108,6 +108,36 @@ export function openLocalKeygen({ platform = runtimePlatform(), env = process.en
   }
 }
 
+// Match complete declarations, never an affirmative substring inside a denial,
+// question, condition, quotation, or a description of somebody else's choice.
+export function parsePreviewConsent(value) {
+  if (typeof value !== 'string') return null;
+  let text = value.normalize('NFKC').trim();
+  text = text.replace(/^【([^【】]+)】([。.!！;；]*)$/u, '$1$2');
+  if (!text || /[?？]|吗|么|嘛|是否|能否|可否|如果|假如|除非|前提|只要|也许|可能|不确定|考虑|再说|行吧|随便|或者|还是|先.*再/u.test(text)) return null;
+  const clauses = text.split(/[,，。.!！;；\n]|但是|不过|但/u).map(part => part.replace(/\s+/gu, '')).filter(Boolean);
+  const subject = '(?:我(?:们)?(?:明确)?|本人)?';
+  const actor = '(?:你们|你|支付宝|本Skill|Skill)?';
+  const action = '(?:采集|收集|记录)(?:(?:并|和|及)(?:上报|上传|使用))?';
+  const object = '(?:(?:我的|我们的|本次|当前)?(?:会话|对话|聊天)(?:信息|内容|记录|数据)?)?';
+  const allow = new RegExp(`^${subject}(?:同意|允许|授权|接受|可以)${actor}${action}${object}$`, 'u');
+  const deny = new RegExp(`^${subject}(?:不同意|不允许|不授权|不接受|不希望|不想|不愿意|不需要|不要|不用|无需|拒绝|禁止|停止|别|不)${actor}${action}${object}$`, 'u');
+  let grant = false;
+  let refusal = false;
+  let confirm = false;
+  for (const clause of clauses) {
+    const part = clause.replace(/^请/u, '');
+    if (deny.test(part) || /^(?:我)?(?:仅|只)(?:使用|用)(?:内测版Skill|内测版|服务)$/u.test(part)) refusal = true;
+    else if (allow.test(part)) grant = true;
+    else if (/^(?:我)?确认$/u.test(part)) confirm = true;
+    else if (/^(?:我)?(?:希望)?继续使用(?:内测版Skill|内测版|服务)$/u.test(part)) continue;
+    else return null;
+  }
+  if (grant && refusal) return null;
+  if (refusal) return 'DENIED';
+  return grant || confirm ? 'GRANTED' : null;
+}
+
 export function runPreviewCli(argv = process.argv) {
   const action = argv[2];
   if (action === 'consent') {
@@ -120,10 +150,10 @@ export function runPreviewCli(argv = process.argv) {
     }
     if (!args.get('--input-id')) throw new Error('preview consent 缺少 --input-id');
     // A generic business confirmation (1/OK/继续) is not consent to collection.
-    const reply = (args.get('--reply') || '').trim().replace(/[。！!]+$/u, '');
-    const decision = reply === '确认' ? 'GRANTED' : reply === '仅使用服务' ? 'DENIED' : null;
+    const decision = parsePreviewConsent(args.get('--reply'));
     if (!decision) {
       process.stderr.write(`${internalPrefix}PREVIEW_DECISION=UNCONFIRMED\n`);
+      deliver('preview.consent.clarify');
       return;
     }
     const saved = setConversationConsent({ decision, inputId: args.get('--input-id') });

package/skill-pre/references/normal/scripts/python_script_runner.mjs

@@ -7,6 +7,8 @@ import process from 'node:process';
 import { fileURLToPath } from 'node:url';
 
 import { isWindowsPlatform } from './platform_compat.mjs';
+import { runWindowsPython } from './windows/python-execution.mjs';
+import { findWindowsPython } from './windows/python-runtime.mjs';
 
 const scriptDir = path.dirname(fileURLToPath(import.meta.url));
 const allowedScript = path.resolve(scriptDir, '../../integration/modules/scripts/local_402_sandbox_pay.py');
@@ -17,6 +19,7 @@ function commandRuns(command, args) {
 }
 
 function resolvePython() {
+  if (isWindowsPlatform()) return findWindowsPython();
   const candidates = isWindowsPlatform()
     ? [
         { command: 'py', prefix: ['-3'] },
@@ -40,10 +43,12 @@ export function runPythonScriptCli(argv = process.argv) {
 
   const python = resolvePython();
   if (!python) throw new Error('未找到可用的 Python 3 运行时');
-  const result = spawnSync(python.command, [...python.prefix, resolvedScript, ...argv.slice(3)], {
-    stdio: 'inherit',
-    shell: false
-  });
+  const result = isWindowsPlatform()
+    ? runWindowsPython(python, resolvedScript, argv.slice(3))
+    : spawnSync(python.command, [...python.prefix, resolvedScript, ...argv.slice(3)], {
+        stdio: 'inherit',
+        shell: false
+      });
   if (result.error) throw result.error;
   process.exitCode = Number.isInteger(result.status) ? result.status : 1;
 }

package/skill-pre/references/normal/scripts/render_customer_message.mjs

@@ -343,8 +343,10 @@ function validateUrl(value, policy, urlKind, expected = {}) {
   } catch {
     throw new Error('officialTemporaryUrl 不是合法 URL');
   }
-  const allowed = policy.temporaryUrlAllowlist[urlKind];
-  if (!allowed || parsed.protocol !== 'https:' || parsed.hostname !== allowed.host || parsed.pathname !== allowed.path || parsed.username || parsed.password || parsed.port || parsed.hash) {
+  const entries = policy.temporaryUrlAllowlist[urlKind];
+  const allowed = (Array.isArray(entries) ? entries : [entries]).find((entry) =>
+    entry && parsed.hostname === entry.host && parsed.pathname === entry.path);
+  if (!allowed || parsed.protocol !== 'https:' || parsed.username || parsed.password || parsed.port || parsed.hash) {
     throw new Error(`officialTemporaryUrl 不符合 ${urlKind} allowlist`);
   }
   if (urlKind === 'authorization') {

package/skill-pre/references/normal/scripts/runtime.mjs

@@ -1,6 +1,9 @@
 #!/usr/bin/env node
 
-import { spawnSync } from 'node:child_process';
+import { spawnSync as nativeSpawn } from 'node:child_process';
+const { spawnSync } = process.platform === 'win32'
+  ? await import('./windows/execution.mjs')
+  : { spawnSync: nativeSpawn };
 import path from 'node:path';
 import process from 'node:process';
 import { fileURLToPath } from 'node:url';
@@ -8,6 +11,16 @@ import { fileURLToPath } from 'node:url';
 import { applyTelemetrySession, currentRunContext, startTelemetryRun } from './telemetry.mjs';
 import { applyAgentPlatform } from './agent_platform.mjs';
 
+const windowsRouting = process.platform === 'win32' ? await import('./windows/routing.mjs') : null;
+
+// A user-local Node bootstrap may not be on the host's PATH. Its bundled npm/npx
+// and child Node commands must use the same verified runtime for this process.
+if (process.platform === 'win32') {
+  const entry = Object.entries(process.env).find(([key]) => key.toLowerCase() === 'path');
+  for (const key of Object.keys(process.env)) if (key.toLowerCase() === 'path') delete process.env[key];
+  process.env.PATH = [path.dirname(process.execPath), entry?.[1] || ''].join(path.delimiter);
+}
+
 const scriptDir = path.dirname(fileURLToPath(import.meta.url));
 const referencesDir = path.resolve(scriptDir, '../..');
 const flowDirs = Object.freeze({
@@ -41,6 +54,7 @@ const nodeEntrypoints = Object.freeze({
 });
 
 export const runtimeDomains = Object.freeze([
+  ...(process.platform === 'win32' ? ['windows-entry'] : []),
   'self-update',
   'integration-bootstrap',
   'onboarding-bootstrap',
@@ -56,12 +70,18 @@ function cliArgv(args) {
 }
 
 function runShell(script, cwd, args) {
+  const captureWindowsSandbox = process.platform === 'win32' && path.basename(script) === 'sandbox_config.sh';
   const result = spawnSync('bash', [script, ...args], {
     cwd,
     env: process.env,
-    stdio: 'inherit',
+    stdio: captureWindowsSandbox ? 'pipe' : 'inherit',
+    ...(captureWindowsSandbox ? {encoding: 'utf8'} : {}),
     shell: false
   });
+  if (captureWindowsSandbox) {
+    if (result.stdout) process.stdout.write(result.stdout);
+    if (result.stderr) process.stderr.write(result.stderr);
+  }
   if (result.error) throw result.error;
   process.exitCode = Number.isInteger(result.status) ? result.status : 1;
 }
@@ -186,9 +206,9 @@ async function runOnboardingBootstrap(args) {
   await startTelemetryRun(rootIntent, productType);
   const { runOnboardingMessageCli } = await import('./onboarding_message_runner.mjs');
   const platformEntryArgs = ['platform-entry'];
-  await runOnboardingMessageCli(cliArgv(platformEntryArgs));
+  const route = await runOnboardingMessageCli(cliArgv(platformEntryArgs));
   const { isWindowsPlatform } = await import('./platform_compat.mjs');
-  if (isWindowsPlatform()) return;
+  if (isWindowsPlatform() && route !== 'READY') return;
   const { runFlowCli } = await import('./flow_loader.mjs');
   runFlowCli(cliArgv(['onboarding', 'entry']));
 }
@@ -203,6 +223,18 @@ async function runOnboardingExecuteReady(args) {
 }
 
 async function dispatch(domain, args) {
+  if (windowsRouting) {
+    if (domain === 'windows-entry') return windowsRouting.runWindowsEntry(args);
+    if (['sandbox', 'mcc', 'auth', 'screenshots', 'special-license', 'sign', 'service', 'app',
+      'onboarding-discovery', 'onboarding-recovery', 'onboarding-execute-ready'].includes(domain)) {
+      windowsRouting.requireBusinessEnvironment();
+    }
+    if (domain === 'env' && ['prepare', 'prepare-jq', 'retry'].includes(args[0])) {
+      const { runEnvironment } = await import('./windows/prepare.mjs');
+      process.exitCode = runEnvironment(args);
+      return;
+    }
+  }
   if (domain === 'integration-bootstrap') return runIntegrationBootstrap(args);
   if (domain === 'onboarding-bootstrap') return runOnboardingBootstrap(args);
   if (domain === 'onboarding-execute-ready') return runOnboardingExecuteReady(args);
@@ -223,6 +255,11 @@ async function dispatch(domain, args) {
     return;
   }
   if (domain === 'env') {
+    if (process.platform === 'win32' && ['check-python', 'prepare-python'].includes(args[0])) {
+      const { runPythonEnvironment } = await import('./windows/python-runtime.mjs');
+      process.exitCode = await runPythonEnvironment(args);
+      return;
+    }
     if (args[0] === 'refresh-alipay-cli') {
       if (args.length !== 1) throw new Error('用法: runtime.mjs env refresh-alipay-cli');
       const { runAlipayCliRefreshCli } = await import('./alipay_cli_refresh.mjs');
@@ -259,9 +296,16 @@ async function dispatch(domain, args) {
 export async function runRuntimeCli(argv = process.argv) {
   const domain = argv[2] || '';
   try {
-    await dispatch(domain, applyTelemetryContext(domain, applyTelemetrySession(applyAgentPlatform(argv.slice(3)))));
+    const received = applyTelemetrySession(applyAgentPlatform(argv.slice(3)));
+    const routed = windowsRouting ? windowsRouting.consumeRoute(received) : {args: received};
+    if (routed.route) process.env.ALIPAY_AIPAY_WINDOWS_ROUTE = routed.route;
+    await dispatch(domain, applyTelemetryContext(domain, routed.args));
   } catch (error) {
-    runtimeError(domain, error);
+    if (windowsRouting && error.reason) {
+      const { report } = await import('./windows/preflight.mjs');
+      report(error);
+      process.stderr.write('ALIPAY_AIPAY_INTERNAL:WINDOWS_BUSINESS_BLOCKED=ENVIRONMENT_UNAVAILABLE\n');
+    } else runtimeError(domain, error);
     process.exitCode = domain === 'self-update' ? 0 : 1;
   }
 }

package/skill-pre/references/normal/scripts/telemetry.mjs

@@ -1,3 +1,7 @@
+
+const windowsProtect = process.platform === 'win32'
+  ? (await import('./windows/acl.mjs')).protect
+  : null;
 import crypto from 'node:crypto';
 import fs from 'node:fs';
 import https from 'node:https';
@@ -364,6 +368,11 @@ export function telemetryStoragePaths(env = process.env) {
 }
 
 function ensurePrivateDir(dir) {
+  if (windowsProtect) {
+    fs.mkdirSync(dir, { recursive: true });
+    windowsProtect(dir);
+    return;
+  }
   fs.mkdirSync(dir, { recursive: true, mode: 0o700 });
   try {
     fs.chmodSync(dir, 0o700);

package/skill-pre/references/normal/scripts/windows/acl-native.mjs

@@ -0,0 +1,3 @@
+import {protect} from './acl.mjs';
+try { if(process.argv.length!==3)throw new Error('ACL target required');protect(process.argv[2]); }
+catch(e){process.stderr.write('ALIPAY_AIPAY_INTERNAL:WINDOWS_ACL_ERROR='+(e.reason||'ACL_FAILED')+'\n');process.exitCode=78;}

package/skill-pre/references/normal/scripts/windows/acl.mjs

@@ -0,0 +1,41 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import {spawnSync} from 'node:child_process';
+
+export function fail(reason, dependency = '') { throw Object.assign(new Error(reason), {reason, dependency}); }
+export function run(command,args,options={}) {
+  return spawnSync(command,args,{encoding:'utf8',windowsHide:true,shell:false,timeout:15000,maxBuffer:4*1024*1024,...options});
+}
+export function powershell() {
+  const root=process.env.SystemRoot || 'C:\\Windows';
+  const command=path.join(root,'System32/WindowsPowerShell/v1.0/powershell.exe');
+  if(!fs.existsSync(command)) fail('DEPENDENCY_MISSING','PowerShell');
+  return command;
+}
+export function psEnv(env=process.env) {
+  return Object.fromEntries(Object.entries(env).filter(([k])=>k.toLowerCase()!=='psmodulepath'));
+}
+export function protect(target) {
+  if(fs.lstatSync(target).isSymbolicLink()||path.resolve(target)===path.parse(target).root)fail('ACL_FAILED','unsafe target');
+  const system=path.join(process.env.SystemRoot||'C:/Windows','System32');
+  const who=run(path.join(system,'whoami.exe'),['/user','/fo','csv','/nh']);
+  const sid=who.stdout?.match(/S-1-5-[0-9-]+/)?.[0];if(who.status!==0||!sid)fail('ACL_FAILED');
+  const env={...psEnv(),ALIPAY_WINDOWS_ACL_TARGET:path.resolve(target)};
+  // Native icacls changes permissions; PowerShell only reads ACL metadata.
+  // No .ps1 execution, ExecutionPolicy override, elevation, or policy mutation.
+  const inspect=()=>{
+    const r=run(powershell(),['-NoProfile','-NonInteractive','-Command',
+      '$ErrorActionPreference="Stop"; $p=$env:ALIPAY_WINDOWS_ACL_TARGET; $d=New-Object IO.DriveInfo([IO.Path]::GetPathRoot($p)); if($d.DriveFormat -ne "NTFS"){exit 2}; $a=Get-Acl -LiteralPath $p; @{protected=$a.AreAccessRulesProtected;rules=@($a.GetAccessRules($true,$true,[Security.Principal.SecurityIdentifier]) | ForEach-Object { @{sid=$_.IdentityReference.Value;type=[string]$_.AccessControlType;rights=[int]$_.FileSystemRights} })} | ConvertTo-Json -Depth 4 -Compress'],{env});
+    if(r.status!==0)fail('ACL_FAILED','NTFS');try{return JSON.parse(r.stdout);}catch{fail('ACL_FAILED');}
+  };
+  const allowed=[sid,'S-1-5-18','S-1-5-32-544'];inspect();
+  const inherited=fs.statSync(target).isDirectory()?'(OI)(CI)F':'F';
+  const args=[target,'/inheritance:r','/grant:r',...allowed.map(s=>'*'+s+':'+inherited)];
+  if(run(path.join(system,'icacls.exe'),args).status!==0)fail('ACL_FAILED','grant');
+  const remove=[...new Set(inspect().rules.filter(r=>!allowed.includes(r.sid)||r.type!=='Allow').map(r=>r.sid))];
+  for(const s of remove)if(run(path.join(system,'icacls.exe'),[target,'/remove','*'+s]).status!==0)fail('ACL_FAILED','remove');
+  // Reapply after removing any explicit deny ACE for an allowed identity.
+  if(remove.length&&run(path.join(system,'icacls.exe'),args).status!==0)fail('ACL_FAILED','regrant');
+  const after=inspect();
+  if(!after.protected||after.rules.some(r=>!allowed.includes(r.sid)||r.type!=='Allow')||!after.rules.some(r=>r.sid===sid&&(r.rights&2032127)===2032127))fail('ACL_FAILED','readback');
+}

package/skill-pre/references/normal/scripts/windows/bin/alipay-cli

@@ -0,0 +1,4 @@
+#!/usr/bin/env bash
+# Real CLI forwarding entry for original `env ... alipay-cli` call sites.
+set -eu
+exec "$ALIPAY_WINDOWS_NODE" "$ALIPAY_WINDOWS_CLI_RUNNER" "$@"

package/skill-pre/references/normal/scripts/windows/bootstrap-node.ps1

@@ -0,0 +1,140 @@
+param([ValidateSet('check', 'prepare', 'repair')][string]$Mode = 'check')
+
+# The only pre-Node entry. No runtime/business dispatch, telemetry, elevation,
+# ExecutionPolicy override, or persistent PATH change belongs in this script.
+function Invoke-NodeProbe([string]$Executable) {
+    if (-not (Test-Path -LiteralPath $Executable -PathType Leaf)) { return $null }
+    $process = New-Object System.Diagnostics.Process
+    try {
+        $process.StartInfo.FileName = $Executable
+        $process.StartInfo.Arguments = '-p "JSON.stringify({version:process.versions.node,platform:process.platform,arch:process.arch,executable:process.execPath})"'
+        $process.StartInfo.UseShellExecute = $false
+        $process.StartInfo.CreateNoWindow = $true
+        $process.StartInfo.RedirectStandardOutput = $true
+        $process.StartInfo.RedirectStandardError = $true
+        if (-not $process.Start()) { return $null }
+        $stdout = $process.StandardOutput.ReadToEndAsync()
+        $stderr = $process.StandardError.ReadToEndAsync()
+        if (-not $process.WaitForExit(5000)) { $process.Kill(); return $null }
+        if ($process.ExitCode -ne 0) { return $null }
+        $value = $stdout.Result | ConvertFrom-Json -ErrorAction Stop
+        if ($value.platform -ne 'win32' -or $value.arch -ne 'x64' -or
+            $value.version -notmatch '^([0-9]+)\.[0-9]+\.[0-9]+$' -or [int]$Matches[1] -lt 18 -or
+            -not [IO.Path]::IsPathRooted($value.executable)) { return $null }
+        return $value
+    } catch { return $null } finally { $process.Dispose() }
+}
+
+function Find-LocalNode([string]$Root) {
+    $candidates = @()
+    $candidates += @(Get-Command node.exe -CommandType Application -All -ErrorAction SilentlyContinue | ForEach-Object { $_.Source })
+    foreach ($directory in @($env:ProgramFiles, $env:LOCALAPPDATA)) {
+        if ($directory) {
+            $candidates += (Join-Path $directory 'nodejs/node.exe')
+            $candidates += (Join-Path $directory 'Programs/nodejs/node.exe')
+        }
+    }
+    if ($env:NVM_SYMLINK) { $candidates += (Join-Path $env:NVM_SYMLINK 'node.exe') }
+    if (Test-Path -LiteralPath $Root -PathType Container) {
+        $candidates += @(Get-ChildItem -LiteralPath $Root -Directory -Filter 'node-*' -ErrorAction SilentlyContinue |
+            ForEach-Object { Get-ChildItem -LiteralPath $_.FullName -Directory -Filter 'node-v*-win-x64' -ErrorAction SilentlyContinue } |
+            ForEach-Object { Join-Path $_.FullName 'node.exe' })
+    }
+    foreach ($candidate in @($candidates | Select-Object -Unique)) {
+        $found = Invoke-NodeProbe $candidate
+        if ($null -ne $found) { return $found }
+    }
+    return $null
+}
+
+function Receive-NodeFile([string]$Uri, [string]$Destination) {
+    # URLs are constructed only from the official index and a validated version.
+    [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12
+    $ProgressPreference = 'SilentlyContinue'
+    try { Invoke-WebRequest -UseBasicParsing -Uri $Uri -OutFile $Destination -TimeoutSec 60 -ErrorAction Stop | Out-Null }
+    catch { throw 'DOWNLOAD_FAILED' }
+}
+
+function Install-UserNode([string]$Root) {
+    $staging = Join-Path $Root ('node-' + [Guid]::NewGuid().ToString('N'))
+    New-Item -ItemType Directory -Path $staging -ErrorAction Stop | Out-Null
+    $complete = $false
+    try {
+        $indexFile = Join-Path $staging 'index.json'
+        Receive-NodeFile 'https://nodejs.org/dist/index.json' $indexFile
+        $releases = @(Get-Content -LiteralPath $indexFile -Raw | ConvertFrom-Json)
+        $release = $releases | Where-Object {
+            $_.lts -is [string] -and $_.lts.Length -gt 0 -and $_.version -match '^v[0-9]+\.[0-9]+\.[0-9]+$' -and
+            [version]$_.version.Substring(1) -ge [version]'18.0.0' -and $_.files -contains 'win-x64-zip'
+        } | Sort-Object { [version]$_.version.Substring(1) } -Descending | Select-Object -First 1
+        if ($null -eq $release) { throw 'NO_LTS_ASSET' }
+        $name = 'node-' + $release.version + '-win-x64'
+        $zipName = $name + '.zip'
+        $base = 'https://nodejs.org/dist/' + $release.version + '/'
+        $checksums = Join-Path $staging 'SHASUMS256.txt'
+        Receive-NodeFile ($base + 'SHASUMS256.txt') $checksums
+        $pattern = '^([0-9a-fA-F]{64})\s+' + [regex]::Escape($zipName) + '$'
+        $lines = @(Get-Content -LiteralPath $checksums | Where-Object { $_ -match $pattern })
+        if ($lines.Count -ne 1 -or $lines[0] -notmatch $pattern) { throw 'INTEGRITY_FAILED' }
+        $expected = $Matches[1]
+        $archive = Join-Path $staging $zipName
+        Receive-NodeFile ($base + $zipName) $archive
+        if ((Get-FileHash -LiteralPath $archive -Algorithm SHA256).Hash -ine $expected) { throw 'INTEGRITY_FAILED' }
+        Add-Type -AssemblyName System.IO.Compression.FileSystem
+        [IO.Compression.ZipFile]::ExtractToDirectory($archive, $staging)
+        $node = Invoke-NodeProbe (Join-Path $staging ($name + '/node.exe'))
+        if ($null -eq $node -or $node.version -ne $release.version.Substring(1)) { throw 'VERIFY_FAILED' }
+        Remove-Item -LiteralPath $indexFile, $checksums, $archive -Force
+        $complete = $true
+        return $node
+    } finally {
+        if (-not $complete) { Remove-Item -LiteralPath $staging -Recurse -Force -ErrorAction SilentlyContinue }
+    }
+}
+
+function Invoke-NodeBootstrap([string]$Action, [string]$Root) {
+    $found = Find-LocalNode $Root
+    if ($null -ne $found) { return @{status='READY'; nodePath=$found.executable; version=$found.version} }
+    if ($Action -eq 'check') { return @{status='NEEDS_SETUP'; reason='NODE_MISSING_OR_UNSUPPORTED'} }
+    New-Item -ItemType Directory -Path $Root -Force -ErrorAction Stop | Out-Null
+    if ((Get-Item -LiteralPath $Root).Attributes -band [IO.FileAttributes]::ReparsePoint) { throw 'UNSAFE_DIRECTORY' }
+    $lock = $null
+    try {
+        try { $lock = [IO.File]::Open((Join-Path $Root 'node.lock'), 'OpenOrCreate', 'ReadWrite', 'None') }
+        catch { throw 'ENVIRONMENT_BUSY' }
+        $stateFile = Join-Path $Root 'node-environment.json'
+        $state = @{prepareAttempts=0; repairAttempts=0}
+        if (Test-Path -LiteralPath $stateFile) {
+            try {
+                $loaded = Get-Content -LiteralPath $stateFile -Raw | ConvertFrom-Json
+                foreach ($key in @('prepareAttempts', 'repairAttempts')) {
+                    if ($loaded.$key -isnot [int] -and $loaded.$key -isnot [long]) { throw 'invalid' }
+                    if ($loaded.$key -lt 0) { throw 'invalid' }
+                    $state[$key] = $loaded.$key
+                }
+            } catch { throw 'ENVIRONMENT_STATE_INVALID' }
+        }
+        if (($Action -eq 'repair' -and $state.repairAttempts -ge 1) -or
+            ($Action -eq 'prepare' -and ($state.prepareAttempts -ge 1 -or $state.repairAttempts -ge 1))) { throw 'RETRY_BUDGET_EXHAUSTED' }
+        $state.prepareAttempts++
+        if ($Action -eq 'repair') { $state.repairAttempts++ }
+        [IO.File]::WriteAllText($stateFile, ($state | ConvertTo-Json -Compress))
+        $found = Install-UserNode $Root
+        return @{status='READY'; nodePath=$found.executable; version=$found.version}
+    } finally { if ($null -ne $lock) { $lock.Dispose() } }
+}
+
+if ($MyInvocation.InvocationName -ne '.') {
+    $ErrorActionPreference = 'Stop'
+    try {
+        $architecture = if ($env:PROCESSOR_ARCHITEW6432) { $env:PROCESSOR_ARCHITEW6432 } else { $env:PROCESSOR_ARCHITECTURE }
+        if ($env:OS -ne 'Windows_NT' -or $architecture -ne 'AMD64' -or -not $env:LOCALAPPDATA) { throw 'UNSUPPORTED_PLATFORM' }
+        $result = Invoke-NodeBootstrap $Mode (Join-Path $env:LOCALAPPDATA 'alipay-aipay-pre/bootstrap')
+    } catch {
+        $reason = [string]$_.Exception.Message
+        if ($reason -notmatch '^(DOWNLOAD_FAILED|NO_LTS_ASSET|INTEGRITY_FAILED|VERIFY_FAILED|UNSAFE_DIRECTORY|ENVIRONMENT_BUSY|ENVIRONMENT_STATE_INVALID|RETRY_BUDGET_EXHAUSTED|UNSUPPORTED_PLATFORM)$') { $reason = 'SETUP_FAILED' }
+        $result = @{status='BLOCKED'; reason=$reason}
+    }
+    [Console]::Error.WriteLine('ALIPAY_AIPAY_INTERNAL:NODE_BOOTSTRAP=' + ($result | ConvertTo-Json -Compress))
+    if ($result.status -ne 'READY') { exit 78 }
+}

package/skill-pre/references/normal/scripts/windows/cli-install.mjs

@@ -0,0 +1,51 @@
+import path from 'node:path';
+import os from 'node:os';
+import {spawnSync} from 'node:child_process';
+
+export const installCommand = String.raw`
+$ErrorActionPreference = 'Stop'
+$env:ALIPAY_CLI_BIN = "$HOME\.local\bin"
+$env:ALIPAY_CLI_SKIP_VERIFY = 'true'
+try {
+  Invoke-RestMethod -UseBasicParsing -Uri 'https://opengw.alipay.com/alipaycli/install_ps1' -TimeoutSec 20 -ErrorAction Stop | Invoke-Expression
+  if ($global:LASTEXITCODE -ne 0) { exit 1 }
+} catch {
+  $code = $_.Exception.Data['InstallerExitCode']
+  if ($code -in @(3, 4, 5)) { exit ([int]$code) }
+  if ($_.Exception -is [System.Net.WebException]) { exit 3 }
+  if ($_.Exception -is [System.UnauthorizedAccessException]) { exit 4 }
+  exit 1
+}
+`;
+
+export function refreshWindowsCli({env = process.env, home = os.homedir(), run = spawnSync} = {}) {
+  const childEnv = {...env};
+  // Keep business context and installer overrides out of the official install.
+  for (const key of Object.keys(childEnv)) {
+    if (['PLATFORM', 'PLATFORM_ID', 'PRODUCT', 'ALIPAYCLI_BIZ_INFO', 'PSMODULEPATH',
+      'ALIPAY_CLI_BIN', 'ALIPAY_CLI_SKIP_VERIFY', 'ALIPAY_CLI_VERSION',
+      'ALIPAY_CLI_CHANNEL', 'ALIPAY_CLI_MANIFEST_URL',
+      'ALIPAY_CLI_AFTS_MANIFEST_BASE'].includes(key.toUpperCase())) delete childEnv[key];
+  }
+  const command = path.win32.join(env.SystemRoot || 'C:\\Windows', 'System32/WindowsPowerShell/v1.0/powershell.exe');
+  const options = {env: childEnv, encoding: 'utf8', shell: false, windowsHide: true,
+    maxBuffer: 30 * 1024 * 1024, timeout: 60000};
+  try {
+    const result = run(command, ['-NoProfile', '-NonInteractive', '-Command', installCommand], options);
+    const output = `${result.stdout || ''}\n${result.stderr || ''}\n${result.error?.message || ''}`;
+    if (result.error || result.status !== 0) {
+      if (result.status === 3) return 'RETRY_WITH_NETWORK';
+      if (result.status === 4) return 'RETRY_WITH_LOCAL_FS_PERMISSION';
+      if (result.status === 5) return 'VERIFY_FAILED';
+      if (result.error?.code === 'ETIMEDOUT' ||
+          /could not resolve|failed to connect|connection (?:refused|reset)|timed? out|timeout|network|socket|tls|ssl|ENOTFOUND|ECONNREFUSED|EAI_AGAIN/iu.test(output)) return 'RETRY_WITH_NETWORK';
+      if (/permission denied|operation not permitted|EACCES|EPERM|access denied/iu.test(output)) return 'RETRY_WITH_LOCAL_FS_PERMISSION';
+      return 'FAILED';
+    }
+    const verify = run(path.join(home, '.local', 'bin', 'alipay-cli.exe'), ['version'],
+      {...options, stdio: 'ignore', timeout: 5000});
+    return !verify.error && verify.status === 0 ? 'READY' : 'VERIFY_FAILED';
+  } catch {
+    return 'FAILED';
+  }
+}

package/skill-pre/references/normal/scripts/windows/cli-process.mjs

@@ -0,0 +1,11 @@
+import {spawnSync} from 'node:child_process';
+import {ensureReady} from './preflight.mjs';
+try {
+  const {cli,env}=ensureReady();
+  const args=process.argv.slice(2);
+  if(args[0]==='file'&&args[1]==='upload'&&/^\/[a-zA-Z]\//.test(args[2]||''))args[2]=args[2][1]+':'+args[2].slice(2);
+  if(args.reduce((n,a)=>n+a.length+3,0)>28000)throw new Error('COMMAND_LINE_TOO_LONG');
+  const r=spawnSync(cli,args,{env,stdio:'inherit',windowsHide:true,shell:false,timeout:60000});
+  if(r.error)process.stderr.write('ALIPAY_AIPAY_INTERNAL:WINDOWS_CLI_ERROR='+r.error.code+'; result may be unknown; do not replay writes\n');
+  process.exitCode=r.status??124;
+}catch(e){process.stderr.write('ALIPAY_AIPAY_INTERNAL:WINDOWS_CLI_ERROR='+e.message+'\n');process.exitCode=78;}