@rightkit/release 0.2.61 → 0.2.63

package/release-state.mjs

@@ -46,14 +46,16 @@ export function commandOutputPortable(cmd, args, { cwd, env = process.env } = {}
   return result.stdout.trim();
 }
 
-export function watchProgress(paths, onProgress) {
+export function watchProgress(paths, onProgress, { maxFallbackWatchers = 128, watchFactory = watch, readDirectory = readdirSync } = {}) {
+  if (!Number.isInteger(maxFallbackWatchers) || maxFallbackWatchers < 1) throw new TypeError("maxFallbackWatchers must be a positive integer");
   const watchers = [];
+  const fallback = { remaining: maxFallbackWatchers };
   for (const candidate of paths) {
     if (!candidate || !existsSync(candidate)) continue;
     try {
-      watchers.push(watch(candidate, { recursive: true }, onProgress));
+      watchers.push(watchFactory(candidate, { recursive: true }, onProgress));
     } catch {
-      try { watchers.push(watch(candidate, onProgress)); } catch { /* output still counts as progress */ }
+      watchDirectoryTree(candidate, onProgress, watchers, fallback, { watchFactory, readDirectory });
     }
   }
   return () => {
@@ -61,6 +63,23 @@ export function watchProgress(paths, onProgress) {
   };
 }
 
+function watchDirectoryTree(root, onProgress, watchers, fallback, { watchFactory = watch, readDirectory = readdirSync } = {}) {
+  const pending = [root];
+  const visited = new Set();
+  while (pending.length) {
+    const directory = pending.pop();
+    if (visited.has(directory)) continue;
+    visited.add(directory);
+    if (fallback.remaining <= 0) return;
+    try { watchers.push(watchFactory(directory, onProgress)); fallback.remaining -= 1; } catch { /* output still counts as progress */ }
+    let entries;
+    try { entries = readDirectory(directory, { withFileTypes: true }); } catch { continue; }
+    for (const entry of entries) {
+      if (entry.isDirectory()) pending.push(path.join(directory, entry.name));
+    }
+  }
+}
+
 export function releaseEnvironment({ root, cacheRoot, platform, architecture, app, cacheKey, kind = "release", appRoot, mode = "legacy", env = process.env }) {
   if (kind !== "release" && kind !== "test") throw new Error(`invalid target kind: ${kind}`);
   if (mode !== "legacy" && mode !== "shared") throw new Error(`invalid cache mode: ${mode}`);
@@ -75,6 +94,11 @@ export function releaseEnvironment({ root, cacheRoot, platform, architecture, ap
       SCCACHE_CACHE_SIZE: `${policy.sccacheMaxBytes / 1024 ** 3}G`,
       SCCACHE_BASEDIRS: [path.resolve(root), path.resolve(appRoot)].join(path.delimiter),
       RUSTC_WRAPPER: "sccache",
+      // Doc-mandated (architecture section 5): a dropped sccache connection must
+      // fall through to plain rustc, not fail the build. Without this, a single
+      // transient server disconnect (seen on Windows as error 10054) kills a
+      // build that would otherwise have compiled fine uncached.
+      SCCACHE_IGNORE_SERVER_IO_ERROR: "1",
       RIGHT_RELEASE_CACHE_OWNER: "rightkit-v2",
     };
   }

package/release-state.test.mjs

@@ -23,20 +23,59 @@ test("progress watcher observes writes in nested Cargo target directories", asyn
   const root = mkdtempSync(path.join(os.tmpdir(), "right-release-watch-"));
   const nested = path.join(root, "release", "build", "openssl");
   mkdirSync(nested, { recursive: true });
+  const readyFile = path.join(root, "watch-ready");
+  const nestedFile = path.join(nested, "object.lib");
+  let resolveReady;
   let resolveProgress;
+  const ready = new Promise((resolve) => { resolveReady = resolve; });
   const progress = new Promise((resolve) => { resolveProgress = resolve; });
-  const close = watchProgress([root], resolveProgress);
+  const close = watchProgress([root], (_eventType, filename) => {
+    const eventName = String(filename ?? "");
+    if (eventName === path.basename(readyFile)) resolveReady();
+    if (eventName.endsWith(path.basename(nestedFile))) resolveProgress();
+  });
   try {
-    await writeFile(path.join(nested, "object.lib"), "progress");
-    await Promise.race([
-      progress,
-      new Promise((_, reject) => setTimeout(() => reject(new Error("nested progress event missing")), 2_000)),
-    ]);
+    await new Promise((resolve) => setTimeout(resolve, 50));
+    await writeFile(readyFile, "ready");
+    await waitForEvent(ready, "watcher readiness event missing");
+    await writeFile(nestedFile, "progress");
+    await waitForEvent(progress, "nested progress event missing");
+  } finally {
+    close();
+  }
+});
+
+test("fallback progress watchers cap open handles when recursive watching is unavailable", () => {
+  const root = mkdtempSync(path.join(os.tmpdir(), "right-release-watch-cap-"));
+  for (let index = 0; index < 10; index += 1) mkdirSync(path.join(root, `dir-${index}`));
+  const opened = [];
+  const close = watchProgress([root], () => {}, {
+    maxFallbackWatchers: 3,
+    watchFactory: (directory, options) => {
+      if (options?.recursive) throw new Error("recursive watch unsupported");
+      opened.push(directory);
+      return { close: () => {} };
+    },
+  });
+  try {
+    assert.equal(opened.length, 3);
   } finally {
     close();
   }
 });
 
+async function waitForEvent(event, message) {
+  let timer;
+  try {
+    await Promise.race([
+      event,
+      new Promise((_, reject) => { timer = setTimeout(() => reject(new Error(message)), 5_000); }),
+    ]);
+  } finally {
+    clearTimeout(timer);
+  }
+}
+
 test("portable command capture resolves Windows command shims", { skip: process.platform !== "win32" }, () => {
   assert.equal(commandOutputPortable("pnpm", ["--version"]), expectedPnpmVersion);
 });
@@ -66,6 +105,9 @@ test("shared release environment is isolated from the app vault", () => {
   assert.match(env.CARGO_HOME, /RightSuite[\\/]release[\\/]cargo-home$/);
   assert.equal(env.RIGHT_RELEASE_CACHE_OWNER, "rightkit-v2");
   assert.equal(env.SCCACHE_CACHE_SIZE, "32G");
+  // A dropped sccache server connection must fall through to plain rustc
+  // instead of failing the build; seen on Windows as a bare error 10054.
+  assert.equal(env.SCCACHE_IGNORE_SERVER_IO_ERROR, "1");
 });
 
 test("shared release environment honors the cache policy override", () => {

package/release.mjs

@@ -12,6 +12,7 @@ import { assertPrimaryReleaseCheckout, dirtyBuildInputs, resolveReleaseBuildInpu
 import { collectPreflight, formatPreflight, preflightFailures } from "./preflight.mjs";
 import { patchTauriBundleType } from "./tauri-bundle-marker.mjs";
 import { verifyNsisEmbeddedBinary } from "./nsis-payload.mjs";
+import { terminateProcessTree } from "./heavy-command.mjs";
 
 const TOOL_ROOT = path.dirname(fileURLToPath(import.meta.url));
 const HARDENING_SCAN = path.resolve(TOOL_ROOT, "hardeningscan.mjs");
@@ -29,6 +30,7 @@ const RIGHTKIT_ALLOWED = buildAllowedVersions(
 const RIGHTKIT_CARGO_ALLOWED = buildAllowedVersions(RIGHTKIT_VERSIONS.cargo, RIGHTKIT_VERSIONS.stagedCargo);
 const FORBIDDEN_RIGHTKIT_SPEC = /^(?:git|file|link|workspace):|github|github\.com/i;
 const WINDOWS_SIGNING_CONTRACT = "windows-raw-exe-authenticode-before-nsis-v1";
+const DEFAULT_NOTARIZATION_TIMEOUT_MS = 30 * 60 * 1000;
 
 const args = process.argv.slice(2);
 const opts = {
@@ -344,7 +346,18 @@ async function runPackageScript(pm, script, cwd) {
 
 async function runCommand(command, root) {
   const cwd = path.resolve(root, command.cwd ?? ".");
-  await run(command.cmd, command.args ?? [], cwd, await commandEnv(command, root), command);
+  await run(command.cmd, command.args ?? [], cwd, await commandEnv(command, root), {
+    ...command,
+    timeoutMs: commandTimeoutMs(command),
+  });
+}
+
+function commandTimeoutMs(command) {
+  if (Object.hasOwn(command, "timeoutMs")) return command.timeoutMs;
+  const tokens = [command.cmd, ...(command.args ?? [])].map((value) => String(value));
+  return command.notarize === true || command.notarization === true || tokens.some((value) => /notari[sz]/i.test(value))
+    ? DEFAULT_NOTARIZATION_TIMEOUT_MS
+    : undefined;
 }
 
 async function validateRightKitPackageContract(root, appName) {
@@ -624,18 +637,5 @@ function processCommandLine(pid) {
 }
 
 function killProcessTree(pid) {
-  if (!pid) return;
-  if (process.platform === "win32") {
-    spawnSync("taskkill", ["/PID", String(pid), "/T", "/F"], { stdio: "ignore" });
-    return;
-  }
-  const children = spawnSync("pgrep", ["-P", String(pid)], { encoding: "utf8" });
-  for (const child of (children.stdout ?? "").split(/\s+/).filter(Boolean)) {
-    killProcessTree(Number(child));
-  }
-  try {
-    process.kill(pid, "SIGKILL");
-  } catch {
-    // already gone
-  }
+  terminateProcessTree(pid);
 }

package/release.test.mjs

@@ -16,7 +16,7 @@ function git(cwd, ...args) {
   return execFileSync("git", args, { cwd, encoding: "utf8", stdio: ["ignore", "pipe", "pipe"] }).trim();
 }
 
-function fixture({ signed = true, publish = false, signingContract = "windows-raw-exe-authenticode-before-nsis-v1", prePackageFiles = ["raw.exe"], packageJson, cargoManifest, cargoConfig, repoCargoConfig, siblingCargoManifest, buildInputs = defaultBuildInputs, platform = "win" } = {}) {
+function fixture({ signed = true, publish = false, signingContract = "windows-raw-exe-authenticode-before-nsis-v1", prePackageFiles = ["raw.exe"], packageJson, packageCommand, cargoManifest, cargoConfig, repoCargoConfig, siblingCargoManifest, buildInputs = defaultBuildInputs, platform = "win" } = {}) {
   const fixtureRoot = mkdtempSync(path.join(os.tmpdir(), "right-release-test-"));
   const dir = repoCargoConfig ? path.join(fixtureRoot, "apps", "fixture") : fixtureRoot;
   mkdirSync(dir, { recursive: true });
@@ -49,7 +49,7 @@ function fixture({ signed = true, publish = false, signingContract = "windows-ra
         [platform]: {
           ...(buildInputs ? { buildInputs } : {}),
           signed,
-          package: { cmd: "node", args: ["-e", "process.exit(0)"] },
+          package: packageCommand ?? { cmd: "node", args: ["-e", "process.exit(0)"] },
           ...(publish ? { publish: { cmd: "node", args: ["publish-update.mjs"] } } : {}),
           artifacts: [],
           ...(platform === "win" ? { signingContract, prePackage: { cmd: "node", args: ["-e", "process.exit(0)"] }, sign: { prePackageFiles, files: ["fixture.exe"] } } : {}),
@@ -159,6 +159,28 @@ test("accepts a tier-neutral internal build", () => {
   assert.doesNotMatch(result.stdout, /RIGHT_RELEASE_TIER=/);
 });
 
+test("notarization commands default to a bounded 30-minute timeout without changing explicit overrides", () => {
+  const defaultResult = runRaw(fixture({
+    platform: "mac",
+    packageCommand: { cmd: "node", args: ["-e", "process.exit(0)", "--notarize"] },
+  }), "--platform", "mac", "--dry-run");
+  assert.equal(defaultResult.status, 0, defaultResult.stderr);
+  assert.match(defaultResult.stdout, /timeout=1800000ms/);
+
+  const explicitResult = runRaw(fixture({
+    platform: "mac",
+    packageCommand: { cmd: "node", args: ["-e", "process.exit(0)", "--notarize"], timeoutMs: 1234 },
+  }), "--platform", "mac", "--dry-run");
+  assert.equal(explicitResult.status, 0, explicitResult.stderr);
+  assert.match(explicitResult.stdout, /timeout=1234ms/);
+});
+
+test("release worker reuses owned process-tree termination for Windows and remote command descendants", () => {
+  const source = readFileSync(release, "utf8");
+  assert.match(source, /import \{ terminateProcessTree \} from "\.\/heavy-command\.mjs"/);
+  assert.match(source, /function killProcessTree\(pid\) \{\s*terminateProcessTree\(pid\);\s*\}/s);
+});
+
 test("accepts patch and exposes it to the signed package command", () => {
   const result = run(fixture(), "--tier=patch");
   assert.equal(result.status, 0, result.stderr);

package/right-suite-contract.test.mjs

@@ -10,6 +10,7 @@ import {
   assertPublishedRightKitCargoDependencies,
   cargoArguments,
   cargoExecutable,
+  isolatedCargoMetadataEnv,
   validateRightKitCargoContract,
 } from "./cargo-contract.mjs";
 import { assertAsrAdapterPair } from "./asr-artifact-adoption.mjs";
@@ -126,7 +127,7 @@ function readCargoManifestContract(manifestPath, label) {
     {
       cwd: path.dirname(manifestPath),
       encoding: "utf8",
-      env: { ...process.env, CARGO_HOME: isolatedCargoHome },
+      env: isolatedCargoMetadataEnv(isolatedCargoHome),
       windowsHide: true,
     },
   );
@@ -462,15 +463,16 @@ test("RightKit exposes one current version manifest", () => {
   assert.deepEqual(versions.stagedNpm, {
     "@rightkit/ax": "0.2.0",
     "@rightkit/git": "0.2.0",
+    "@rightkit/hooks": "0.1.0",
     "@rightkit/legal": "0.3.0",
     "@rightkit/legal-ui": "0.1.1",
     "@rightkit/license": "0.1.6",
-    "@rightkit/release": "0.2.61",
+    "@rightkit/release": "0.2.63",
     "@rightkit/qa": "0.2.0",
   });
   assert.deepEqual(versions.legacyNpm, {
     "@rightkit/legal-ui": ["0.1.0"],
-    "@rightkit/release": ["0.2.22", "0.2.29", "0.2.30", "0.2.31", "0.2.41", "0.2.42", "0.2.43", "0.2.44", "0.2.45", "0.2.46", "0.2.49", "0.2.50", "0.2.51", "0.2.53", "0.2.54", "0.2.55", "0.2.56"],
+    "@rightkit/release": ["0.2.22", "0.2.29", "0.2.30", "0.2.31", "0.2.41", "0.2.42", "0.2.43", "0.2.44", "0.2.45", "0.2.46", "0.2.49", "0.2.50", "0.2.51", "0.2.53", "0.2.54", "0.2.55", "0.2.56", "0.2.61", "0.2.62"],
     "@rightkit/qa": ["0.1.0"],
   });
   assert.ok(
@@ -496,12 +498,26 @@ test("RightKit exposes one current version manifest", () => {
   getCurrentCargoVersionContract();
 });
 
-test("Cargo metadata uses native rustup on Windows", () => {
-  assert.equal(cargoExecutable("win32"), "rustup");
-  assert.deepEqual(cargoArguments(["metadata"], "win32"), ["run", "stable", "cargo", "metadata"]);
+test("Cargo metadata uses managed Cargo directly on Windows", () => {
+  assert.equal(cargoExecutable("win32"), "cargo");
+  assert.deepEqual(cargoArguments(["metadata"], "win32"), ["metadata"]);
   assert.equal(cargoExecutable("darwin"), "cargo");
 });
 
+test("Cargo metadata delegates controlled storage to managed RightKit", () => {
+  const ambient = {
+    CARGO_HOME: "/ambient/cargo",
+    CARGO_TARGET_DIR: "/ambient/target",
+    RIGHTKIT_BUILD_BROKER_SOCKET: "/managed/broker.sock",
+  };
+  assert.deepEqual(isolatedCargoMetadataEnv("/isolated/cargo", ambient), {
+    RIGHTKIT_BUILD_BROKER_SOCKET: "/managed/broker.sock",
+  });
+  assert.deepEqual(isolatedCargoMetadataEnv("/isolated/cargo", { CARGO_HOME: "/ambient/cargo" }), {
+    CARGO_HOME: "/isolated/cargo",
+  });
+});
+
 test("license v2 public vector is identical at every portable consumer boundary", () => {
   const canonical = readFileSync(
     path.join(workspace, "tools/rightkit/crates/rightkit-license/test-vectors/license-v2.json"),

package/rightkit-versions.json

@@ -15,10 +15,11 @@
   "stagedNpm": {
     "@rightkit/ax": "0.2.0",
     "@rightkit/git": "0.2.0",
+    "@rightkit/hooks": "0.1.0",
     "@rightkit/legal": "0.3.0",
     "@rightkit/legal-ui": "0.1.1",
     "@rightkit/license": "0.1.6",
-    "@rightkit/release": "0.2.61",
+    "@rightkit/release": "0.2.63",
     "@rightkit/qa": "0.2.0"
   },
   "legacyNpm": {
@@ -42,7 +43,9 @@
       "0.2.53",
       "0.2.54",
       "0.2.55",
-      "0.2.56"
+      "0.2.56",
+      "0.2.61",
+      "0.2.62"
     ],
     "@rightkit/qa": [
       "0.1.0"

package/standalone-clone-evidence.json

@@ -0,0 +1,32 @@
+{
+  "schemaVersion": 1,
+  "generatedAt": "2026-08-10T04:42:36.444Z",
+  "workRoot": "C:\\Users\\adrds\\AppData\\Local\\Temp\\rightkit-standalone-sBI0iR",
+  "apps": [
+    {
+      "key": "viewright",
+      "remote": "https://github.com/bogusyogi/viewright.git",
+      "appDir": ".",
+      "revision": "21a4171fa8add2d8114bc5f07498b60d7e8eafe5",
+      "packageManager": "pnpm@11.18.0",
+      "clone": {
+        "command": "git clone --depth 1 --single-branch https://github.com/bogusyogi/viewright.git C:\\Users\\adrds\\AppData\\Local\\Temp\\rightkit-standalone-sBI0iR\\viewright",
+        "status": 0,
+        "stdout": "",
+        "stderr": "Cloning into 'C:\\Users\\adrds\\AppData\\Local\\Temp\\rightkit-standalone-sBI0iR\\viewright'...\nUpdating files:  91% (1902/2080)\rUpdating files:  92% (1914/2080)\rUpdating files:  93% (1935/2080)\rUpdating files:  94% (1956/2080)\rUpdating files:  95% (1976/2080)\rUpdating files:  96% (1997/2080)\rUpdating files:  97% (2018/2080)\rUpdating files:  98% (2039/2080)\rUpdating files:  99% (2060/2080)\rUpdating files: 100% (2080/2080)\rUpdating files: 100% (2080/2080), done."
+      },
+      "install": {
+        "command": "C:\\nvm4w\\nodejs\\node.exe C:\\nvm4w\\nodejs\\node_modules\\pnpm\\bin\\pnpm.mjs install --frozen-lockfile",
+        "status": 0,
+        "stdout": "✓ Lockfile passes supply-chain policies (verified 8h ago)\nLockfile is up to date, resolution step is skipped\nProgress: resolved 1, reused 0, downloaded 0, added 0\nPackages: +619\n++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++\nProgress: resolved 619, reused 0, downloaded 0, added 0\nProgress: resolved 619, reused 60, downloaded 0, added 0\nPackages are hard linked from the content-addressable store to the virtual store.\n  Content-addressable store is at: C:\\Users\\adrds\\AppData\\Local\\pnpm\\store\\v11\n  Virtual store is at:             node_modules/.pnpm\nProgress: resolved 619, reused 573, downloaded 7, added 7\nProgress: resolved 619, reused 574, downloaded 9, added 10\nProgress: resolved 619, reused 574, downloaded 22, added 11\nProgress: resolved 619, reused 574, downloaded 23, added 11\nProgress: resolved 619, reused 574, downloaded 26, added 14\nProgress: resolved 619, reused 574, downloaded 30, added 24\nProgress: resolved 619, reused 574, downloaded 31, added 57\nProgress: resolved 619, reused 574, downloaded 34, added 128\nProgress: resolved 619, reused 574, downloaded 38, added 135\nProgress: resolved 619, reused 574, downloaded 38, added 136\nProgress: resolved 619, reused 574, downloaded 39, added 141\nProgress: resolved 619, reused 574, downloaded 39, added 148\nProgress: resolved 619, reused 574, downloaded 39, added 182\nProgress: resolved 619, reused 574, downloaded 40, added 201\nProgress: resolved 619, reused 574, downloaded 41, added 218\nProgress: resolved 619, reused 574, downloaded 41, added 242\nProgress: resolved 619, reused 574, downloaded 42, added 312\nProgress: resolved 619, reused 574, downloaded 42, added 371\nProgress: resolved 619, reused 574, downloaded 42, added 430\nProgress: resolved 619, reused 574, downloaded 42, added 486\nProgress: resolved 619, reused 574, downloaded 43, added 543\nProgress: resolved 619, reused 574, downloaded 43, added 578\nProgress: resolved 619, reused 574, downloaded 44, added 596\nProgress: resolved 619, reused 574, downloaded 44, added 611\nProgress: resolved 619, reused 574, downloaded 44, added 612\nProgress: resolved 619, reused 574, downloaded 44, added 613\nProgress: resolved 619, reused 574, downloaded 44, added 615\nProgress: resolved 619, reused 574, downloaded 44, added 616\nProgress: resolved 619, reused 574, downloaded 44, added 617\nProgress: resolved 619, reused 574, downloaded 44, added 618\nProgress: resolved 619, reused 574, downloaded 45, added 618\nProgress: resolved 619, reused 574, downloaded 45, added 619\nProgress: resolved 619, reused 574, downloaded 45, added 619, done\n\ndependencies:\n+ @codemirror/autocomplete 6.20.3\n+ @codemirror/commands 6.10.4\n+ @codemirror/lang-html 6.4.11\n+ @codemirror/lang-javascript 6.2.5\n+ @codemirror/lang-markdown 6.5.0\n+ @codemirror/language 6.12.4\n+ @codemirror/lint 6.9.7\n+ @codemirror/search 6.7.1\n+ @codemirror/state 6.7.1\n+ @codemirror/view 6.43.6\n+ @eigenpal/docx-editor-agents @eigenpal/docx-editor-agents@file:vendor/docx-editor/packages/agents(react@19.2.7)\n+ @eigenpal/docx-editor-core @eigenpal/docx-editor-core@file:vendor/docx-editor/packages/core(prosemirror-commands@1.7.1)(prosemirror-dropcursor@1.8.2)(prosemirror-history@1.5.0)(prosemirror-keymap@1.2.3)(prosemirror-model@1.25.10)(prosemirror-state@1.4.4)(prosemirror-tables@1.8.5)(prosemirror-transform@1.12.0)(prosemirror-view@1.42.0)\n+ @eigenpal/docx-editor-i18n @eigenpal/docx-editor-i18n@file:vendor/docx-editor/packages/i18n\n+ @eigenpal/docx-editor-react @eigenpal/docx-editor-react@file:vendor/docx-editor/packages/react(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(prosemirror-commands@1.7.1)(prosemirror-dropcursor@1.8.2)(prosemirror-history@1.5.0)(prosemirror-keymap@1.2.3)(prosemirror-model@1.25.10)(prosemirror-state@1.4.4)(prosemirror-tables@1.8.5)(prosemirror-transform@1.12.0)(prosemirror-view@1.42.0)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)\n+ @lezer/highlight 1.2.3\n+ @mdx-js/mdx 3.1.1\n+ @phosphor-icons/react 2.1.10\n+ @radix-ui/react-select 2.3.2\n+ @rightkit/legal-ui 0.1.0\n+ @rightkit/license 0.1.6\n+ @rightkit/logs 0.1.3\n+ @rightkit/tauri 0.1.0\n+ @rightkit/updates 0.2.3\n+ @tauri-apps/api 2.11.1\n+ @tauri-apps/plugin-http 2.5.9\n+ @tauri-apps/plugin-process 2.3.1\n+ @tauri-apps/plugin-updater 2.10.1\n+ clsx 2.1.1\n+ docxtemplater 3.69.0\n+ dompurify 3.4.13\n+ fabric 7.4.0\n+ github-slugger 2.0.0\n+ jszip 3.10.1\n+ katex 0.17.0\n+ mermaid 11.16.1\n+ pdfjs-dist 6.2.108\n+ pizzip 3.2.0\n+ prosemirror-commands 1.7.1\n+ prosemirror-dropcursor 1.8.2\n+ prosemirror-history 1.5.0\n+ prosemirror-keymap 1.2.3\n+ prosemirror-model 1.25.10\n+ prosemirror-state 1.4.4\n+ prosemirror-tables 1.8.5\n+ prosemirror-transform 1.12.0\n+ prosemirror-view 1.42.0\n+ react 19.2.7\n+ react-dom 19.2.7\n+ react-image-crop 11.1.2\n+ rehype-stringify 10.0.1\n+ remark-frontmatter 5.0.0\n+ remark-gfm 4.0.1\n+ remark-math 6.0.0\n+ remark-parse 11.0.0\n+ remark-rehype 11.1.2\n+ remark-smartypants 3.0.2\n+ shiki 4.3.1\n+ sonner 2.0.7\n+ sucrase 3.35.1\n+ unified 11.0.5\n+ xml-js 1.6.11\n+ yaml 2.9.0\n\ndevDependencies:\n+ @biomejs/biome 2.5.3\n+ @rightkit/legal 0.3.0\n+ @rightkit/release 0.2.50\n+ @tailwindcss/vite 4.3.2\n+ @tauri-apps/cli 2.11.4\n+ @testing-library/dom 10.4.1\n+ @testing-library/jest-dom 6.9.1\n+ @testing-library/react 16.3.2\n+ @types/mdast 4.0.4\n+ @types/react 19.2.17\n+ @types/react-dom 19.2.3\n+ @types/ws 8.18.1\n+ @vitejs/plugin-react 6.0.3\n+ happy-dom 20.10.6\n+ jscpd 5.0.12\n+ jsdom 29.1.1\n+ knip 6.25.0\n+ tailwindcss 4.3.2\n+ typescript 6.0.3\n+ vite 8.1.4\n+ vitest 4.1.10\n+ ws 8.21.0\n\nDone in 40.8s using pnpm v11.18.0",
+        "stderr": ""
+      },
+      "doctor": {
+        "command": "C:\\nvm4w\\nodejs\\node.exe C:\\nvm4w\\nodejs\\node_modules\\pnpm\\bin\\pnpm.mjs release:doctor",
+        "status": 0,
+        "stdout": "right-release 0.2.50\nconfig: C:\\Users\\adrds\\AppData\\Local\\Temp\\rightkit-standalone-sBI0iR\\viewright\\right-release.config.mjs\napp: viewright\nplatform: win\ntier: <required for release/publish>\npackageManager: pnpm\nworkdir: C:\\Users\\adrds\\AppData\\Local\\Temp\\rightkit-standalone-sBI0iR\\viewright\nhardeningscan: C:\\Users\\adrds\\AppData\\Local\\Temp\\rightkit-standalone-sBI0iR\\viewright\\node_modules\\.pnpm\\@rightkit+release@0.2.50\\node_modules\\@rightkit\\release\\hardeningscan.mjs\nlegal: C:\\Users\\adrds\\AppData\\Local\\Temp\\rightkit-standalone-sBI0iR\\viewright\\legal\\legal-manifest.json\nlegalAcceptance: viewright-2026-07-17-v3\nlegalManifestSha256: 035ea7cbd040ef001dbdc1385f114c8bb126178fea9a9f705016a726f96a7830\nsign: src-tauri/target/release/bundle/nsis/ViewRight_0.1.60_x64-setup.exe\npreflight:\n  [ok  ] target-bridge: src-tauri/target is ready for the shared cache bridge\n  [ok  ] version: 0.1.60 is free to build\n  [ok  ] windows-sdk: makeappx.exe from SDK 10.0.26100.0\n  [ok  ] signtool: signtool.exe from SDK 10.0.26100.0\n  [ok  ] sccache: sccache 0.17.0\n  [ok  ] disk: 628.7GB free",
+        "stderr": "$ right-release doctor"
+      }
+    }
+  ]
+}

package/target-bridge.mjs

@@ -51,7 +51,7 @@ export function createTargetBridge({
       }
       mkdir(target, { recursive: true });
       if (!entry) {
-        symlink(target, link, platform === "win32" ? "junction" : "dir");
+        symlink(target, link, "dir");
         entry = lstat(link);
         if (!entry.isSymbolicLink()) throw new Error(`RightKit target bridge was not created as a symbolic link: ${link}`);
         if (!sameRealPath(link, target, realpath, platform)) {
@@ -64,7 +64,7 @@ export function createTargetBridge({
           // Stale link from an earlier fingerprint, or one whose cache entry a
           // prune already removed. Both are ours to repoint.
           unlink(link);
-          symlink(target, link, platform === "win32" ? "junction" : "dir");
+          symlink(target, link, "dir");
           entry = lstat(link);
           if (!sameRealPath(link, target, realpath, platform)) {
             throw new Error(`RightKit target bridge did not repoint to the owned shared cache target: ${link}`);

package/target-bridge.test.mjs

@@ -27,6 +27,23 @@ test("removes an invocation-created bridge after success without touching the sh
   assert.equal(readFileSync(path.join(fx.target, "keep.txt"), "utf8"), "shared-cache\n");
 });
 
+test("Windows creates a directory symlink instead of an untrusted junction", () => {
+  const fx = fixture();
+  let requestedType;
+  const bridge = createTargetBridge({
+    ...fx,
+    platform: "win32",
+    symlink(target, link, type) {
+      requestedType = type;
+      symlinkSync(target, link, type);
+    },
+  });
+  bridge.ensure();
+  assert.equal(requestedType, "dir");
+  assert.equal(realpathSync(fx.link), realpathSync(fx.target));
+  bridge.release();
+});
+
 test("removes an invocation-created bridge after the build throws", async () => {
   const fx = fixture();
   const bridge = createTargetBridge(fx);