@alipay/alipay-aipay 1.7.3 → 1.7.5

package/skill-pre/references/normal/scripts/open_official_url.sh

@@ -6,6 +6,12 @@ KIND="${1:-}"
 IFS= read -r URL || URL=""
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 POLICY_FILE="${SCRIPT_DIR}/../json/policy-rules.json"
+case "$(uname -s)" in
+  MINGW*|MSYS*)
+    source "$SCRIPT_DIR/windows/shell_helpers.sh" || exit 78
+    POLICY_FILE=$(cygpath -m "$POLICY_FILE") || exit 78
+    ;;
+esac
 
 case "$KIND" in authorization|public-key-confirmation) ;; *) echo "OPEN_FAILED"; exit 1 ;; esac
 command -v node >/dev/null 2>&1 || { echo "OPEN_FAILED"; exit 1; }
@@ -18,8 +24,10 @@ const policy = JSON.parse(fs.readFileSync(policyFile, "utf8"));
 if (/[\u0000-\u0020\u007f`()\[\]<>|]/.test(raw)) process.exit(1);
 let url;
 try { url = new URL(raw); } catch { process.exit(1); }
-const allowed = policy.temporaryUrlAllowlist[kind === "authorization" ? "authorization" : "publicKeyConfirmation"];
-if (!allowed || url.protocol !== "https:" || url.hostname !== allowed.host || url.pathname !== allowed.path || url.username || url.password || url.port || url.hash) process.exit(1);
+const entries = policy.temporaryUrlAllowlist[kind === "authorization" ? "authorization" : "publicKeyConfirmation"];
+const allowed = (Array.isArray(entries) ? entries : [entries]).find((entry) =>
+  entry && url.hostname === entry.host && url.pathname === entry.path);
+if (!allowed || url.protocol !== "https:" || url.username || url.password || url.port || url.hash) process.exit(1);
 if (kind === "authorization") {
   const required = allowed.requiredQueryParams;
   const optional = allowed.optionalQueryParams;

package/skill-pre/references/normal/scripts/python_script_runner.mjs

@@ -7,6 +7,8 @@ import process from 'node:process';
 import { fileURLToPath } from 'node:url';
 
 import { isWindowsPlatform } from './platform_compat.mjs';
+import { runWindowsPython } from './windows/python-execution.mjs';
+import { findWindowsPython } from './windows/python-runtime.mjs';
 
 const scriptDir = path.dirname(fileURLToPath(import.meta.url));
 const allowedScript = path.resolve(scriptDir, '../../integration/modules/scripts/local_402_sandbox_pay.py');
@@ -17,6 +19,7 @@ function commandRuns(command, args) {
 }
 
 function resolvePython() {
+  if (isWindowsPlatform()) return findWindowsPython();
   const candidates = isWindowsPlatform()
     ? [
         { command: 'py', prefix: ['-3'] },
@@ -40,10 +43,12 @@ export function runPythonScriptCli(argv = process.argv) {
 
   const python = resolvePython();
   if (!python) throw new Error('未找到可用的 Python 3 运行时');
-  const result = spawnSync(python.command, [...python.prefix, resolvedScript, ...argv.slice(3)], {
-    stdio: 'inherit',
-    shell: false
-  });
+  const result = isWindowsPlatform()
+    ? runWindowsPython(python, resolvedScript, argv.slice(3))
+    : spawnSync(python.command, [...python.prefix, resolvedScript, ...argv.slice(3)], {
+        stdio: 'inherit',
+        shell: false
+      });
   if (result.error) throw result.error;
   process.exitCode = Number.isInteger(result.status) ? result.status : 1;
 }

package/skill-pre/references/normal/scripts/render_customer_message.mjs

@@ -343,8 +343,10 @@ function validateUrl(value, policy, urlKind, expected = {}) {
   } catch {
     throw new Error('officialTemporaryUrl 不是合法 URL');
   }
-  const allowed = policy.temporaryUrlAllowlist[urlKind];
-  if (!allowed || parsed.protocol !== 'https:' || parsed.hostname !== allowed.host || parsed.pathname !== allowed.path || parsed.username || parsed.password || parsed.port || parsed.hash) {
+  const entries = policy.temporaryUrlAllowlist[urlKind];
+  const allowed = (Array.isArray(entries) ? entries : [entries]).find((entry) =>
+    entry && parsed.hostname === entry.host && parsed.pathname === entry.path);
+  if (!allowed || parsed.protocol !== 'https:' || parsed.username || parsed.password || parsed.port || parsed.hash) {
     throw new Error(`officialTemporaryUrl 不符合 ${urlKind} allowlist`);
   }
   if (urlKind === 'authorization') {

package/skill-pre/references/normal/scripts/runtime.mjs

@@ -1,6 +1,9 @@
 #!/usr/bin/env node
 
-import { spawnSync } from 'node:child_process';
+import { spawnSync as nativeSpawn } from 'node:child_process';
+const { spawnSync } = process.platform === 'win32'
+  ? await import('./windows/execution.mjs')
+  : { spawnSync: nativeSpawn };
 import path from 'node:path';
 import process from 'node:process';
 import { fileURLToPath } from 'node:url';
@@ -8,6 +11,16 @@ import { fileURLToPath } from 'node:url';
 import { applyTelemetrySession, currentRunContext, startTelemetryRun } from './telemetry.mjs';
 import { applyAgentPlatform } from './agent_platform.mjs';
 
+const windowsRouting = process.platform === 'win32' ? await import('./windows/routing.mjs') : null;
+
+// A user-local Node bootstrap may not be on the host's PATH. Its bundled npm/npx
+// and child Node commands must use the same verified runtime for this process.
+if (process.platform === 'win32') {
+  const entry = Object.entries(process.env).find(([key]) => key.toLowerCase() === 'path');
+  for (const key of Object.keys(process.env)) if (key.toLowerCase() === 'path') delete process.env[key];
+  process.env.PATH = [path.dirname(process.execPath), entry?.[1] || ''].join(path.delimiter);
+}
+
 const scriptDir = path.dirname(fileURLToPath(import.meta.url));
 const referencesDir = path.resolve(scriptDir, '../..');
 const flowDirs = Object.freeze({
@@ -41,6 +54,7 @@ const nodeEntrypoints = Object.freeze({
 });
 
 export const runtimeDomains = Object.freeze([
+  ...(process.platform === 'win32' ? ['windows-entry'] : []),
   'self-update',
   'integration-bootstrap',
   'onboarding-bootstrap',
@@ -56,12 +70,18 @@ function cliArgv(args) {
 }
 
 function runShell(script, cwd, args) {
+  const captureWindowsSandbox = process.platform === 'win32' && path.basename(script) === 'sandbox_config.sh';
   const result = spawnSync('bash', [script, ...args], {
     cwd,
     env: process.env,
-    stdio: 'inherit',
+    stdio: captureWindowsSandbox ? 'pipe' : 'inherit',
+    ...(captureWindowsSandbox ? {encoding: 'utf8'} : {}),
     shell: false
   });
+  if (captureWindowsSandbox) {
+    if (result.stdout) process.stdout.write(result.stdout);
+    if (result.stderr) process.stderr.write(result.stderr);
+  }
   if (result.error) throw result.error;
   process.exitCode = Number.isInteger(result.status) ? result.status : 1;
 }
@@ -186,9 +206,9 @@ async function runOnboardingBootstrap(args) {
   await startTelemetryRun(rootIntent, productType);
   const { runOnboardingMessageCli } = await import('./onboarding_message_runner.mjs');
   const platformEntryArgs = ['platform-entry'];
-  await runOnboardingMessageCli(cliArgv(platformEntryArgs));
+  const route = await runOnboardingMessageCli(cliArgv(platformEntryArgs));
   const { isWindowsPlatform } = await import('./platform_compat.mjs');
-  if (isWindowsPlatform()) return;
+  if (isWindowsPlatform() && route !== 'READY') return;
   const { runFlowCli } = await import('./flow_loader.mjs');
   runFlowCli(cliArgv(['onboarding', 'entry']));
 }
@@ -203,6 +223,18 @@ async function runOnboardingExecuteReady(args) {
 }
 
 async function dispatch(domain, args) {
+  if (windowsRouting) {
+    if (domain === 'windows-entry') return windowsRouting.runWindowsEntry(args);
+    if (['sandbox', 'mcc', 'auth', 'screenshots', 'special-license', 'sign', 'service', 'app',
+      'onboarding-discovery', 'onboarding-recovery', 'onboarding-execute-ready'].includes(domain)) {
+      windowsRouting.requireBusinessEnvironment();
+    }
+    if (domain === 'env' && ['prepare', 'prepare-jq', 'retry'].includes(args[0])) {
+      const { runEnvironment } = await import('./windows/prepare.mjs');
+      process.exitCode = runEnvironment(args);
+      return;
+    }
+  }
   if (domain === 'integration-bootstrap') return runIntegrationBootstrap(args);
   if (domain === 'onboarding-bootstrap') return runOnboardingBootstrap(args);
   if (domain === 'onboarding-execute-ready') return runOnboardingExecuteReady(args);
@@ -223,6 +255,11 @@ async function dispatch(domain, args) {
     return;
   }
   if (domain === 'env') {
+    if (process.platform === 'win32' && ['check-python', 'prepare-python'].includes(args[0])) {
+      const { runPythonEnvironment } = await import('./windows/python-runtime.mjs');
+      process.exitCode = await runPythonEnvironment(args);
+      return;
+    }
     if (args[0] === 'refresh-alipay-cli') {
       if (args.length !== 1) throw new Error('用法: runtime.mjs env refresh-alipay-cli');
       const { runAlipayCliRefreshCli } = await import('./alipay_cli_refresh.mjs');
@@ -259,9 +296,16 @@ async function dispatch(domain, args) {
 export async function runRuntimeCli(argv = process.argv) {
   const domain = argv[2] || '';
   try {
-    await dispatch(domain, applyTelemetryContext(domain, applyTelemetrySession(applyAgentPlatform(argv.slice(3)))));
+    const received = applyTelemetrySession(applyAgentPlatform(argv.slice(3)));
+    const routed = windowsRouting ? windowsRouting.consumeRoute(received) : {args: received};
+    if (routed.route) process.env.ALIPAY_AIPAY_WINDOWS_ROUTE = routed.route;
+    await dispatch(domain, applyTelemetryContext(domain, routed.args));
   } catch (error) {
-    runtimeError(domain, error);
+    if (windowsRouting && error.reason) {
+      const { report } = await import('./windows/preflight.mjs');
+      report(error);
+      process.stderr.write('ALIPAY_AIPAY_INTERNAL:WINDOWS_BUSINESS_BLOCKED=ENVIRONMENT_UNAVAILABLE\n');
+    } else runtimeError(domain, error);
     process.exitCode = domain === 'self-update' ? 0 : 1;
   }
 }

package/skill-pre/references/normal/scripts/telemetry.mjs

@@ -1,3 +1,7 @@
+
+const windowsProtect = process.platform === 'win32'
+  ? (await import('./windows/acl.mjs')).protect
+  : null;
 import crypto from 'node:crypto';
 import fs from 'node:fs';
 import https from 'node:https';
@@ -364,6 +368,11 @@ export function telemetryStoragePaths(env = process.env) {
 }
 
 function ensurePrivateDir(dir) {
+  if (windowsProtect) {
+    fs.mkdirSync(dir, { recursive: true });
+    windowsProtect(dir);
+    return;
+  }
   fs.mkdirSync(dir, { recursive: true, mode: 0o700 });
   try {
     fs.chmodSync(dir, 0o700);

package/skill-pre/references/normal/scripts/windows/acl-native.mjs

@@ -0,0 +1,3 @@
+import {protect} from './acl.mjs';
+try { if(process.argv.length!==3)throw new Error('ACL target required');protect(process.argv[2]); }
+catch(e){process.stderr.write('ALIPAY_AIPAY_INTERNAL:WINDOWS_ACL_ERROR='+(e.reason||'ACL_FAILED')+'\n');process.exitCode=78;}

package/skill-pre/references/normal/scripts/windows/acl.mjs

@@ -0,0 +1,41 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import {spawnSync} from 'node:child_process';
+
+export function fail(reason, dependency = '') { throw Object.assign(new Error(reason), {reason, dependency}); }
+export function run(command,args,options={}) {
+  return spawnSync(command,args,{encoding:'utf8',windowsHide:true,shell:false,timeout:15000,maxBuffer:4*1024*1024,...options});
+}
+export function powershell() {
+  const root=process.env.SystemRoot || 'C:\\Windows';
+  const command=path.join(root,'System32/WindowsPowerShell/v1.0/powershell.exe');
+  if(!fs.existsSync(command)) fail('DEPENDENCY_MISSING','PowerShell');
+  return command;
+}
+export function psEnv(env=process.env) {
+  return Object.fromEntries(Object.entries(env).filter(([k])=>k.toLowerCase()!=='psmodulepath'));
+}
+export function protect(target) {
+  if(fs.lstatSync(target).isSymbolicLink()||path.resolve(target)===path.parse(target).root)fail('ACL_FAILED','unsafe target');
+  const system=path.join(process.env.SystemRoot||'C:/Windows','System32');
+  const who=run(path.join(system,'whoami.exe'),['/user','/fo','csv','/nh']);
+  const sid=who.stdout?.match(/S-1-5-[0-9-]+/)?.[0];if(who.status!==0||!sid)fail('ACL_FAILED');
+  const env={...psEnv(),ALIPAY_WINDOWS_ACL_TARGET:path.resolve(target)};
+  // Native icacls changes permissions; PowerShell only reads ACL metadata.
+  // No .ps1 execution, ExecutionPolicy override, elevation, or policy mutation.
+  const inspect=()=>{
+    const r=run(powershell(),['-NoProfile','-NonInteractive','-Command',
+      '$ErrorActionPreference="Stop"; $p=$env:ALIPAY_WINDOWS_ACL_TARGET; $d=New-Object IO.DriveInfo([IO.Path]::GetPathRoot($p)); if($d.DriveFormat -ne "NTFS"){exit 2}; $a=Get-Acl -LiteralPath $p; @{protected=$a.AreAccessRulesProtected;rules=@($a.GetAccessRules($true,$true,[Security.Principal.SecurityIdentifier]) | ForEach-Object { @{sid=$_.IdentityReference.Value;type=[string]$_.AccessControlType;rights=[int]$_.FileSystemRights} })} | ConvertTo-Json -Depth 4 -Compress'],{env});
+    if(r.status!==0)fail('ACL_FAILED','NTFS');try{return JSON.parse(r.stdout);}catch{fail('ACL_FAILED');}
+  };
+  const allowed=[sid,'S-1-5-18','S-1-5-32-544'];inspect();
+  const inherited=fs.statSync(target).isDirectory()?'(OI)(CI)F':'F';
+  const args=[target,'/inheritance:r','/grant:r',...allowed.map(s=>'*'+s+':'+inherited)];
+  if(run(path.join(system,'icacls.exe'),args).status!==0)fail('ACL_FAILED','grant');
+  const remove=[...new Set(inspect().rules.filter(r=>!allowed.includes(r.sid)||r.type!=='Allow').map(r=>r.sid))];
+  for(const s of remove)if(run(path.join(system,'icacls.exe'),[target,'/remove','*'+s]).status!==0)fail('ACL_FAILED','remove');
+  // Reapply after removing any explicit deny ACE for an allowed identity.
+  if(remove.length&&run(path.join(system,'icacls.exe'),args).status!==0)fail('ACL_FAILED','regrant');
+  const after=inspect();
+  if(!after.protected||after.rules.some(r=>!allowed.includes(r.sid)||r.type!=='Allow')||!after.rules.some(r=>r.sid===sid&&(r.rights&2032127)===2032127))fail('ACL_FAILED','readback');
+}

package/skill-pre/references/normal/scripts/windows/bin/alipay-cli

@@ -0,0 +1,4 @@
+#!/usr/bin/env bash
+# Real CLI forwarding entry for original `env ... alipay-cli` call sites.
+set -eu
+exec "$ALIPAY_WINDOWS_NODE" "$ALIPAY_WINDOWS_CLI_RUNNER" "$@"

package/skill-pre/references/normal/scripts/windows/bootstrap-node.ps1

@@ -0,0 +1,140 @@
+param([ValidateSet('check', 'prepare', 'repair')][string]$Mode = 'check')
+
+# The only pre-Node entry. No runtime/business dispatch, telemetry, elevation,
+# ExecutionPolicy override, or persistent PATH change belongs in this script.
+function Invoke-NodeProbe([string]$Executable) {
+    if (-not (Test-Path -LiteralPath $Executable -PathType Leaf)) { return $null }
+    $process = New-Object System.Diagnostics.Process
+    try {
+        $process.StartInfo.FileName = $Executable
+        $process.StartInfo.Arguments = '-p "JSON.stringify({version:process.versions.node,platform:process.platform,arch:process.arch,executable:process.execPath})"'
+        $process.StartInfo.UseShellExecute = $false
+        $process.StartInfo.CreateNoWindow = $true
+        $process.StartInfo.RedirectStandardOutput = $true
+        $process.StartInfo.RedirectStandardError = $true
+        if (-not $process.Start()) { return $null }
+        $stdout = $process.StandardOutput.ReadToEndAsync()
+        $stderr = $process.StandardError.ReadToEndAsync()
+        if (-not $process.WaitForExit(5000)) { $process.Kill(); return $null }
+        if ($process.ExitCode -ne 0) { return $null }
+        $value = $stdout.Result | ConvertFrom-Json -ErrorAction Stop
+        if ($value.platform -ne 'win32' -or $value.arch -ne 'x64' -or
+            $value.version -notmatch '^([0-9]+)\.[0-9]+\.[0-9]+$' -or [int]$Matches[1] -lt 18 -or
+            -not [IO.Path]::IsPathRooted($value.executable)) { return $null }
+        return $value
+    } catch { return $null } finally { $process.Dispose() }
+}
+
+function Find-LocalNode([string]$Root) {
+    $candidates = @()
+    $candidates += @(Get-Command node.exe -CommandType Application -All -ErrorAction SilentlyContinue | ForEach-Object { $_.Source })
+    foreach ($directory in @($env:ProgramFiles, $env:LOCALAPPDATA)) {
+        if ($directory) {
+            $candidates += (Join-Path $directory 'nodejs/node.exe')
+            $candidates += (Join-Path $directory 'Programs/nodejs/node.exe')
+        }
+    }
+    if ($env:NVM_SYMLINK) { $candidates += (Join-Path $env:NVM_SYMLINK 'node.exe') }
+    if (Test-Path -LiteralPath $Root -PathType Container) {
+        $candidates += @(Get-ChildItem -LiteralPath $Root -Directory -Filter 'node-*' -ErrorAction SilentlyContinue |
+            ForEach-Object { Get-ChildItem -LiteralPath $_.FullName -Directory -Filter 'node-v*-win-x64' -ErrorAction SilentlyContinue } |
+            ForEach-Object { Join-Path $_.FullName 'node.exe' })
+    }
+    foreach ($candidate in @($candidates | Select-Object -Unique)) {
+        $found = Invoke-NodeProbe $candidate
+        if ($null -ne $found) { return $found }
+    }
+    return $null
+}
+
+function Receive-NodeFile([string]$Uri, [string]$Destination) {
+    # URLs are constructed only from the official index and a validated version.
+    [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12
+    $ProgressPreference = 'SilentlyContinue'
+    try { Invoke-WebRequest -UseBasicParsing -Uri $Uri -OutFile $Destination -TimeoutSec 60 -ErrorAction Stop | Out-Null }
+    catch { throw 'DOWNLOAD_FAILED' }
+}
+
+function Install-UserNode([string]$Root) {
+    $staging = Join-Path $Root ('node-' + [Guid]::NewGuid().ToString('N'))
+    New-Item -ItemType Directory -Path $staging -ErrorAction Stop | Out-Null
+    $complete = $false
+    try {
+        $indexFile = Join-Path $staging 'index.json'
+        Receive-NodeFile 'https://nodejs.org/dist/index.json' $indexFile
+        $releases = @(Get-Content -LiteralPath $indexFile -Raw | ConvertFrom-Json)
+        $release = $releases | Where-Object {
+            $_.lts -is [string] -and $_.lts.Length -gt 0 -and $_.version -match '^v[0-9]+\.[0-9]+\.[0-9]+$' -and
+            [version]$_.version.Substring(1) -ge [version]'18.0.0' -and $_.files -contains 'win-x64-zip'
+        } | Sort-Object { [version]$_.version.Substring(1) } -Descending | Select-Object -First 1
+        if ($null -eq $release) { throw 'NO_LTS_ASSET' }
+        $name = 'node-' + $release.version + '-win-x64'
+        $zipName = $name + '.zip'
+        $base = 'https://nodejs.org/dist/' + $release.version + '/'
+        $checksums = Join-Path $staging 'SHASUMS256.txt'
+        Receive-NodeFile ($base + 'SHASUMS256.txt') $checksums
+        $pattern = '^([0-9a-fA-F]{64})\s+' + [regex]::Escape($zipName) + '$'
+        $lines = @(Get-Content -LiteralPath $checksums | Where-Object { $_ -match $pattern })
+        if ($lines.Count -ne 1 -or $lines[0] -notmatch $pattern) { throw 'INTEGRITY_FAILED' }
+        $expected = $Matches[1]
+        $archive = Join-Path $staging $zipName
+        Receive-NodeFile ($base + $zipName) $archive
+        if ((Get-FileHash -LiteralPath $archive -Algorithm SHA256).Hash -ine $expected) { throw 'INTEGRITY_FAILED' }
+        Add-Type -AssemblyName System.IO.Compression.FileSystem
+        [IO.Compression.ZipFile]::ExtractToDirectory($archive, $staging)
+        $node = Invoke-NodeProbe (Join-Path $staging ($name + '/node.exe'))
+        if ($null -eq $node -or $node.version -ne $release.version.Substring(1)) { throw 'VERIFY_FAILED' }
+        Remove-Item -LiteralPath $indexFile, $checksums, $archive -Force
+        $complete = $true
+        return $node
+    } finally {
+        if (-not $complete) { Remove-Item -LiteralPath $staging -Recurse -Force -ErrorAction SilentlyContinue }
+    }
+}
+
+function Invoke-NodeBootstrap([string]$Action, [string]$Root) {
+    $found = Find-LocalNode $Root
+    if ($null -ne $found) { return @{status='READY'; nodePath=$found.executable; version=$found.version} }
+    if ($Action -eq 'check') { return @{status='NEEDS_SETUP'; reason='NODE_MISSING_OR_UNSUPPORTED'} }
+    New-Item -ItemType Directory -Path $Root -Force -ErrorAction Stop | Out-Null
+    if ((Get-Item -LiteralPath $Root).Attributes -band [IO.FileAttributes]::ReparsePoint) { throw 'UNSAFE_DIRECTORY' }
+    $lock = $null
+    try {
+        try { $lock = [IO.File]::Open((Join-Path $Root 'node.lock'), 'OpenOrCreate', 'ReadWrite', 'None') }
+        catch { throw 'ENVIRONMENT_BUSY' }
+        $stateFile = Join-Path $Root 'node-environment.json'
+        $state = @{prepareAttempts=0; repairAttempts=0}
+        if (Test-Path -LiteralPath $stateFile) {
+            try {
+                $loaded = Get-Content -LiteralPath $stateFile -Raw | ConvertFrom-Json
+                foreach ($key in @('prepareAttempts', 'repairAttempts')) {
+                    if ($loaded.$key -isnot [int] -and $loaded.$key -isnot [long]) { throw 'invalid' }
+                    if ($loaded.$key -lt 0) { throw 'invalid' }
+                    $state[$key] = $loaded.$key
+                }
+            } catch { throw 'ENVIRONMENT_STATE_INVALID' }
+        }
+        if (($Action -eq 'repair' -and $state.repairAttempts -ge 1) -or
+            ($Action -eq 'prepare' -and ($state.prepareAttempts -ge 1 -or $state.repairAttempts -ge 1))) { throw 'RETRY_BUDGET_EXHAUSTED' }
+        $state.prepareAttempts++
+        if ($Action -eq 'repair') { $state.repairAttempts++ }
+        [IO.File]::WriteAllText($stateFile, ($state | ConvertTo-Json -Compress))
+        $found = Install-UserNode $Root
+        return @{status='READY'; nodePath=$found.executable; version=$found.version}
+    } finally { if ($null -ne $lock) { $lock.Dispose() } }
+}
+
+if ($MyInvocation.InvocationName -ne '.') {
+    $ErrorActionPreference = 'Stop'
+    try {
+        $architecture = if ($env:PROCESSOR_ARCHITEW6432) { $env:PROCESSOR_ARCHITEW6432 } else { $env:PROCESSOR_ARCHITECTURE }
+        if ($env:OS -ne 'Windows_NT' -or $architecture -ne 'AMD64' -or -not $env:LOCALAPPDATA) { throw 'UNSUPPORTED_PLATFORM' }
+        $result = Invoke-NodeBootstrap $Mode (Join-Path $env:LOCALAPPDATA 'alipay-aipay-pre/bootstrap')
+    } catch {
+        $reason = [string]$_.Exception.Message
+        if ($reason -notmatch '^(DOWNLOAD_FAILED|NO_LTS_ASSET|INTEGRITY_FAILED|VERIFY_FAILED|UNSAFE_DIRECTORY|ENVIRONMENT_BUSY|ENVIRONMENT_STATE_INVALID|RETRY_BUDGET_EXHAUSTED|UNSUPPORTED_PLATFORM)$') { $reason = 'SETUP_FAILED' }
+        $result = @{status='BLOCKED'; reason=$reason}
+    }
+    [Console]::Error.WriteLine('ALIPAY_AIPAY_INTERNAL:NODE_BOOTSTRAP=' + ($result | ConvertTo-Json -Compress))
+    if ($result.status -ne 'READY') { exit 78 }
+}

package/skill-pre/references/normal/scripts/windows/cli-install.mjs

@@ -0,0 +1,51 @@
+import path from 'node:path';
+import os from 'node:os';
+import {spawnSync} from 'node:child_process';
+
+export const installCommand = String.raw`
+$ErrorActionPreference = 'Stop'
+$env:ALIPAY_CLI_BIN = "$HOME\.local\bin"
+$env:ALIPAY_CLI_SKIP_VERIFY = 'true'
+try {
+  Invoke-RestMethod -UseBasicParsing -Uri 'https://opengw.alipay.com/alipaycli/install_ps1' -TimeoutSec 20 -ErrorAction Stop | Invoke-Expression
+  if ($global:LASTEXITCODE -ne 0) { exit 1 }
+} catch {
+  $code = $_.Exception.Data['InstallerExitCode']
+  if ($code -in @(3, 4, 5)) { exit ([int]$code) }
+  if ($_.Exception -is [System.Net.WebException]) { exit 3 }
+  if ($_.Exception -is [System.UnauthorizedAccessException]) { exit 4 }
+  exit 1
+}
+`;
+
+export function refreshWindowsCli({env = process.env, home = os.homedir(), run = spawnSync} = {}) {
+  const childEnv = {...env};
+  // Keep business context and installer overrides out of the official install.
+  for (const key of Object.keys(childEnv)) {
+    if (['PLATFORM', 'PLATFORM_ID', 'PRODUCT', 'ALIPAYCLI_BIZ_INFO', 'PSMODULEPATH',
+      'ALIPAY_CLI_BIN', 'ALIPAY_CLI_SKIP_VERIFY', 'ALIPAY_CLI_VERSION',
+      'ALIPAY_CLI_CHANNEL', 'ALIPAY_CLI_MANIFEST_URL',
+      'ALIPAY_CLI_AFTS_MANIFEST_BASE'].includes(key.toUpperCase())) delete childEnv[key];
+  }
+  const command = path.win32.join(env.SystemRoot || 'C:\\Windows', 'System32/WindowsPowerShell/v1.0/powershell.exe');
+  const options = {env: childEnv, encoding: 'utf8', shell: false, windowsHide: true,
+    maxBuffer: 30 * 1024 * 1024, timeout: 60000};
+  try {
+    const result = run(command, ['-NoProfile', '-NonInteractive', '-Command', installCommand], options);
+    const output = `${result.stdout || ''}\n${result.stderr || ''}\n${result.error?.message || ''}`;
+    if (result.error || result.status !== 0) {
+      if (result.status === 3) return 'RETRY_WITH_NETWORK';
+      if (result.status === 4) return 'RETRY_WITH_LOCAL_FS_PERMISSION';
+      if (result.status === 5) return 'VERIFY_FAILED';
+      if (result.error?.code === 'ETIMEDOUT' ||
+          /could not resolve|failed to connect|connection (?:refused|reset)|timed? out|timeout|network|socket|tls|ssl|ENOTFOUND|ECONNREFUSED|EAI_AGAIN/iu.test(output)) return 'RETRY_WITH_NETWORK';
+      if (/permission denied|operation not permitted|EACCES|EPERM|access denied/iu.test(output)) return 'RETRY_WITH_LOCAL_FS_PERMISSION';
+      return 'FAILED';
+    }
+    const verify = run(path.join(home, '.local', 'bin', 'alipay-cli.exe'), ['version'],
+      {...options, stdio: 'ignore', timeout: 5000});
+    return !verify.error && verify.status === 0 ? 'READY' : 'VERIFY_FAILED';
+  } catch {
+    return 'FAILED';
+  }
+}

package/skill-pre/references/normal/scripts/windows/cli-process.mjs

@@ -0,0 +1,11 @@
+import {spawnSync} from 'node:child_process';
+import {ensureReady} from './preflight.mjs';
+try {
+  const {cli,env}=ensureReady();
+  const args=process.argv.slice(2);
+  if(args[0]==='file'&&args[1]==='upload'&&/^\/[a-zA-Z]\//.test(args[2]||''))args[2]=args[2][1]+':'+args[2].slice(2);
+  if(args.reduce((n,a)=>n+a.length+3,0)>28000)throw new Error('COMMAND_LINE_TOO_LONG');
+  const r=spawnSync(cli,args,{env,stdio:'inherit',windowsHide:true,shell:false,timeout:60000});
+  if(r.error)process.stderr.write('ALIPAY_AIPAY_INTERNAL:WINDOWS_CLI_ERROR='+r.error.code+'; result may be unknown; do not replay writes\n');
+  process.exitCode=r.status??124;
+}catch(e){process.stderr.write('ALIPAY_AIPAY_INTERNAL:WINDOWS_CLI_ERROR='+e.message+'\n');process.exitCode=78;}

package/skill-pre/references/normal/scripts/windows/execution.mjs

@@ -0,0 +1,51 @@
+import path from 'node:path';
+import {spawn as nativeSpawn,spawnSync as nativeSpawnSync} from 'node:child_process';
+import {ensureReady,report,fail} from './preflight.mjs';
+
+export function posix(p) {
+  const value=p.replaceAll('\\','/');
+  if(/^[a-zA-Z]:\//.test(value)) return '/'+value[0].toLowerCase()+value.slice(2);
+  if(value.startsWith('//')) fail('UNC_PATH_NOT_IMPLEMENTED');
+  return value;
+}
+export function shellArguments(script,args) {
+  const a=[...args],base=path.win32.basename(script);
+  const positions=base==='sandbox_config.sh'?[a[0]==='summary'?2:1]:
+    base==='upload_screenshots.sh'?[2,3,4]:
+    base==='project_inspector.sh'?(a[0]==='prepare-new'?[1]:a[0]==='scan'?[2]:[]):[];
+  for(const i of positions) if(a[i])a[i]=posix(a[i]);
+  const flags=new Set(['--project-path','--config-path','--file','--home-img','--shop-img','--pay-img','--key-file']);
+  for(let i=0;i<a.length-1;i++)if(flags.has(a[i]))a[i+1]=posix(a[++i]);
+  return [posix(script),...a];
+}
+function invocation(command,args,options) {
+  if(command!=='bash') return {command,args,options};
+  const c=ensureReady();
+  // The caller's business environment wins except adapter-owned execution values.
+  const env={...c.env,...(options.env||{})};
+  for(const k of ['PATH','TEMP','TMP','TMPDIR','NODE_BINARY','MSYS_NO_PATHCONV','MSYS2_ARG_CONV_EXCL'])env[k]=c.env[k];
+  for(const k of Object.keys(c.env))if(k.startsWith('ALIPAY_WINDOWS_'))env[k]=c.env[k];
+  for(const k of Object.keys(env))if(k.toLowerCase()==='path'&&k!=='PATH')delete env[k];
+  delete env.BASH_ENV;delete env.ENV;
+  const mapped=shellArguments(args[0],args.slice(1));
+  if(mapped.reduce((n,s)=>n+String(s).length+3,0)>28000)fail('COMMAND_LINE_TOO_LONG');
+  return {command:c.bash,args:['--noprofile','--norc',...mapped],options:{...options,env,shell:false,windowsHide:true,timeout:options.timeout||180000,maxBuffer:options.maxBuffer||16*1024*1024}};
+}
+export function nativeSandboxMarkers(stderr) {
+  return String(stderr || '').replace(/^(ALIPAY_AIPAY_INTERNAL:SANDBOX_(?:CONFIG|PENDING)_PATH=)\/([a-zA-Z])\/(.*)$/gm,
+    (_, prefix, drive, rest) => `${prefix}${drive.toUpperCase()}:/${rest}`);
+}
+
+export function spawnSync(command,args,options={}) {
+  const i=invocation(command,args,options);
+  const r=nativeSpawnSync(i.command,i.args,i.options);
+  if(command === 'bash' && path.win32.basename(args[0]) === 'sandbox_config.sh' && typeof r.stderr === 'string') {
+    r.stderr = nativeSandboxMarkers(r.stderr);
+  }
+  if(r.error) { report({reason:r.error.code==='ETIMEDOUT'?'EXECUTION_TIMEOUT':'EXECUTION_FAILED'}); }
+  return r;
+}
+export function spawn(command,args,options={}) {
+  const i=invocation(command,args,options);
+  return nativeSpawn(i.command,i.args,i.options);
+}

package/skill-pre/references/normal/scripts/windows/git-discovery.mjs

@@ -0,0 +1,42 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import {run, fail} from './acl.mjs';
+
+export function gitCandidates(env = process.env) {
+  if (env.ALIPAY_GIT_BASH) return [env.ALIPAY_GIT_BASH];
+  const candidates = [
+    path.win32.join(env.ProgramFiles || 'C:/Program Files', 'Git/bin/bash.exe'),
+    ...(env.LOCALAPPDATA ? [path.win32.join(env.LOCALAPPDATA, 'Programs/Git/bin/bash.exe')] : [])
+  ];
+  const search = Object.entries(env).find(([key]) => key.toLowerCase() === 'path')?.[1] || '';
+  for (const directory of search.split(';').filter(p => path.win32.isAbsolute(p))) {
+    candidates.push(path.win32.join(directory, 'bash.exe'));
+    if (['cmd', 'bin'].includes(path.win32.basename(directory).toLowerCase())) {
+      candidates.push(path.win32.join(directory, '../bin/bash.exe'));
+    }
+  }
+  return [...new Set(candidates.map(p => path.win32.normalize(p)))];
+}
+
+export function findGitBash({env = process.env, exists = fs.existsSync, execute = run} = {}) {
+  const cleanEnv = {...env};
+  delete cleanEnv.BASH_ENV; delete cleanEnv.ENV; delete cleanEnv.SHELLOPTS;
+  for (const candidate of gitCandidates(env)) {
+    if (!path.win32.isAbsolute(candidate) || !exists(candidate)) continue;
+    // Require a Git for Windows layout before running bash. System32/WSL bash
+    // and unrelated MSYS installations are not candidates for this adapter.
+    const directory = path.win32.dirname(candidate);
+    const git = path.win32.basename(path.win32.dirname(directory)).toLowerCase() === 'usr'
+      ? path.win32.resolve(directory, '../..') : path.win32.resolve(directory, '..');
+    const bash = path.win32.join(git, 'bin/bash.exe');
+    const gitExe = path.win32.join(git, 'cmd/git.exe');
+    if (![bash, gitExe, path.win32.join(git, 'usr/bin/cygpath.exe')].every(exists)) continue;
+    const version = execute(gitExe, ['--version'], {env: cleanEnv, timeout: 5000});
+    if (version.status !== 0 || !/^git version \d[^\r\n]*\.windows\.\d+/m.test(version.stdout || '')) continue;
+    const probe = execute(bash, ['--noprofile', '--norc', '-c',
+      'case "$(uname -s)" in MINGW*|MSYS*) exit 0;; *) exit 1;; esac'], {env: cleanEnv, timeout: 5000});
+    if (probe.status === 0) return {bash, git};
+  }
+  if (env.ALIPAY_GIT_BASH) fail('NOT_GIT_BASH', 'ALIPAY_GIT_BASH');
+  return null;
+}

package/skill-pre/references/normal/scripts/windows/policy.json

@@ -0,0 +1,13 @@
+{
+  "schemaVersion": 1,
+  "validationCoverage": [],
+  "osVersionAllowlistRequired": false,
+  "automaticSetupRetries": 0,
+  "explicitRepairRetries": 1,
+  "nodeMinimumMajor": 18,
+  "jq": {
+    "version": "1.7.1",
+    "sha256": "7451fbbf37feffb9bf262bd97c54f0da558c63f0748e64152dd87b0a07b6d6ab",
+    "url": "https://github.com/jqlang/jq/releases/download/jq-1.7.1/jq-windows-amd64.exe"
+  }
+}