dodo-mcp 1.0.0

package/dist/services/jobs/spool.js

@@ -0,0 +1,112 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import { utf8SafeSlice } from '../../util/bytes.js';
+/**
+ * Bounded on-disk output spool (spec §13): segmented rolling window. Logical
+ * byte offsets grow monotonically; when the cap is exceeded the OLDEST
+ * segment is dropped and `truncatedBeforeOffset` reports the first retained
+ * logical byte. No unbounded RAM, no silent loss.
+ */
+const SEGMENT_BYTES = 1024 * 1024;
+export class SegmentedSpool {
+    dir;
+    stream;
+    maxBytes;
+    segments = [];
+    nextIndex = 0;
+    writtenTotal = 0;
+    closed = false;
+    constructor(dir, stream, maxBytes) {
+        this.dir = dir;
+        this.stream = stream;
+        this.maxBytes = maxBytes;
+        fs.mkdirSync(dir, { recursive: true, mode: 0o700 });
+    }
+    segPath(index) {
+        return path.join(this.dir, `${this.stream}.${index}.log`);
+    }
+    write(chunk) {
+        if (this.closed || chunk.length === 0)
+            return;
+        let cur = this.segments[this.segments.length - 1];
+        if (!cur || cur.bytes >= SEGMENT_BYTES) {
+            cur = { index: this.nextIndex, startOffset: this.writtenTotal, bytes: 0 };
+            this.nextIndex += 1;
+            this.segments.push(cur);
+            fs.writeFileSync(this.segPath(cur.index), Buffer.alloc(0), { mode: 0o600 });
+        }
+        fs.appendFileSync(this.segPath(cur.index), chunk);
+        cur.bytes += chunk.length;
+        this.writtenTotal += chunk.length;
+        // Enforce the cap by dropping oldest whole segments (never the newest).
+        while (this.retainedBytes() > this.maxBytes && this.segments.length > 1) {
+            const oldest = this.segments.shift();
+            try {
+                fs.unlinkSync(this.segPath(oldest.index));
+            }
+            catch {
+                /* ignore */
+            }
+        }
+    }
+    retainedBytes() {
+        return this.segments.reduce((acc, s) => acc + s.bytes, 0);
+    }
+    get totalWritten() {
+        return this.writtenTotal;
+    }
+    get truncatedBeforeOffset() {
+        return this.segments.length > 0 ? this.segments[0].startOffset : this.writtenTotal;
+    }
+    /** Read up to maxBytes starting at a logical offset, UTF-8 safe. */
+    read(offset, maxBytes) {
+        const from = Math.max(offset, this.truncatedBeforeOffset);
+        const chunks = [];
+        let collected = 0;
+        for (const seg of this.segments) {
+            const segEnd = seg.startOffset + seg.bytes;
+            if (segEnd <= from)
+                continue;
+            const segFrom = Math.max(from + collected, seg.startOffset) - seg.startOffset;
+            const want = Math.min(seg.bytes - segFrom, maxBytes - collected);
+            if (want <= 0)
+                break;
+            const fd = fs.openSync(this.segPath(seg.index), 'r');
+            try {
+                const buf = Buffer.alloc(want);
+                const got = fs.readSync(fd, buf, 0, want, segFrom);
+                chunks.push(buf.subarray(0, got));
+                collected += got;
+            }
+            finally {
+                fs.closeSync(fd);
+            }
+            if (collected >= maxBytes)
+                break;
+        }
+        const raw = Buffer.concat(chunks);
+        const { bytes, end } = utf8SafeSlice(raw, 0, raw.length);
+        const nextOffset = from + end;
+        return {
+            content: bytes.toString('utf8'),
+            nextOffset,
+            truncatedBeforeOffset: this.truncatedBeforeOffset,
+            endOfStream: this.closed && nextOffset >= this.writtenTotal,
+        };
+    }
+    close() {
+        this.closed = true;
+    }
+    removeFiles() {
+        for (const seg of this.segments) {
+            try {
+                fs.unlinkSync(this.segPath(seg.index));
+            }
+            catch {
+                /* ignore */
+            }
+        }
+        this.segments = [];
+    }
+}
+//# sourceMappingURL=spool.js.map

package/dist/services/jobs/spool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"spool.js","sourceRoot":"","sources":["../../../src/services/jobs/spool.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD;;;;;GAKG;AACH,MAAM,aAAa,GAAG,IAAI,GAAG,IAAI,CAAC;AAElC,MAAM,OAAO,cAAc;IAON;IACA;IACA;IARX,QAAQ,GAAiE,EAAE,CAAC;IAC5E,SAAS,GAAG,CAAC,CAAC;IACd,YAAY,GAAG,CAAC,CAAC;IACjB,MAAM,GAAG,KAAK,CAAC;IAEvB,YACmB,GAAW,EACX,MAA2B,EAC3B,QAAgB;QAFhB,QAAG,GAAH,GAAG,CAAQ;QACX,WAAM,GAAN,MAAM,CAAqB;QAC3B,aAAQ,GAAR,QAAQ,CAAQ;QAEjC,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACtD,CAAC;IAEO,OAAO,CAAC,KAAa;QAC3B,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,IAAI,KAAK,MAAM,CAAC,CAAC;IAC5D,CAAC;IAED,KAAK,CAAC,KAAa;QACjB,IAAI,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAC9C,IAAI,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAClD,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,IAAI,aAAa,EAAE,CAAC;YACvC,GAAG,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE,WAAW,EAAE,IAAI,CAAC,YAAY,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;YAC1E,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC;YACpB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACxB,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC9E,CAAC;QACD,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC;QAClD,GAAG,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,YAAY,IAAI,KAAK,CAAC,MAAM,CAAC;QAClC,wEAAwE;QACxE,OAAO,IAAI,CAAC,aAAa,EAAE,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxE,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAuB,CAAC;YAC1D,IAAI,CAAC;gBACH,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAC5C,CAAC;YAAC,MAAM,CAAC;gBACP,YAAY;YACd,CAAC;QACH,CAAC;IACH,CAAC;IAEO,aAAa;QACnB,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAC5D,CAAC;IAED,IAAI,YAAY;QACd,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;IAED,IAAI,qBAAqB;QACvB,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAA6B,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC;IAClH,CAAC;IAED,oEAAoE;IACpE,IAAI,CAAC,MAAc,EAAE,QAAgB;QACnC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,qBAAqB,CAAC,CAAC;QAC1D,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,SAAS,GAAG,CAAC,CAAC;QAClB,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAChC,MAAM,MAAM,GAAG,GAAG,CAAC,WAAW,GAAG,GAAG,CAAC,KAAK,CAAC;YAC3C,IAAI,MAAM,IAAI,IAAI;gBAAE,SAAS;YAC7B,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,SAAS,EAAE,GAAG,CAAC,WAAW,CAAC,GAAG,GAAG,CAAC,WAAW,CAAC;YAC9E,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,GAAG,OAAO,EAAE,QAAQ,GAAG,SAAS,CAAC,CAAC;YACjE,IAAI,IAAI,IAAI,CAAC;gBAAE,MAAM;YACrB,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC;YACrD,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC/B,MAAM,GAAG,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;gBACnD,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;gBAClC,SAAS,IAAI,GAAG,CAAC;YACnB,CAAC;oBAAS,CAAC;gBACT,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YACnB,CAAC;YACD,IAAI,SAAS,IAAI,QAAQ;gBAAE,MAAM;QACnC,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAClC,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,aAAa,CAAC,GAAG,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QACzD,MAAM,UAAU,GAAG,IAAI,GAAG,GAAG,CAAC;QAC9B,OAAO;YACL,OAAO,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;YAC/B,UAAU;YACV,qBAAqB,EAAE,IAAI,CAAC,qBAAqB;YACjD,WAAW,EAAE,IAAI,CAAC,MAAM,IAAI,UAAU,IAAI,IAAI,CAAC,YAAY;SAC5D,CAAC;IACJ,CAAC;IAED,KAAK;QACH,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;IACrB,CAAC;IAED,WAAW;QACT,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAChC,IAAI,CAAC;gBACH,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;YACzC,CAAC;YAAC,MAAM,CAAC;gBACP,YAAY;YACd,CAAC;QACH,CAAC;QACD,IAAI,CAAC,QAAQ,GAAG,EAAE,CAAC;IACrB,CAAC;CACF"}

package/dist/services/jobs/windowsSandboxChild.js

@@ -0,0 +1,24 @@
+// Runs INSIDE the SRT sandbox account. Only builtin modules: target arguments
+// are data from a bounded private manifest, never command-shell interpolation.
+import fs from 'node:fs';
+import path from 'node:path';
+import { spawn } from 'node:child_process';
+try {
+    const file = process.argv[2];
+    if (!file || !path.isAbsolute(file))
+        throw new Error('missing sandbox job manifest');
+    const stat = fs.lstatSync(file);
+    if (!stat.isFile() || stat.isSymbolicLink() || stat.nlink !== 1 || stat.size > 256 * 1024)
+        throw new Error('unsafe sandbox job manifest');
+    const value = JSON.parse(fs.readFileSync(file, 'utf8'));
+    if (typeof value.program !== 'string' || !path.isAbsolute(value.program) || typeof value.cwd !== 'string' || !path.isAbsolute(value.cwd) || !Array.isArray(value.args) || value.args.some(a => typeof a !== 'string' || a.includes('\0')))
+        throw new Error('invalid sandbox job');
+    const child = spawn(value.program, value.args, { cwd: value.cwd, env: process.env, shell: false, windowsHide: true, windowsVerbatimArguments: value.windowsVerbatimArguments === true, stdio: 'inherit' });
+    child.once('error', () => { console.error('[dodo] sandbox target could not start'); process.exitCode = 1; });
+    child.once('close', code => { process.exitCode = code ?? 1; });
+}
+catch {
+    console.error('[dodo] sandbox target manifest rejected');
+    process.exitCode = 1;
+}
+//# sourceMappingURL=windowsSandboxChild.js.map

package/dist/services/jobs/windowsSandboxChild.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"windowsSandboxChild.js","sourceRoot":"","sources":["../../../src/services/jobs/windowsSandboxChild.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,+EAA+E;AAC/E,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAE3C,IAAI,CAAC;IACH,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC7B,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IACrF,MAAM,IAAI,GAAG,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,IAAI,CAAC,KAAK,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,GAAG,GAAG,GAAG,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IAC1I,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAA6F,CAAC;IACpJ,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;IAClR,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,IAAgB,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,wBAAwB,EAAE,KAAK,CAAC,wBAAwB,KAAK,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;IACvN,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7G,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACjE,CAAC;AAAC,MAAM,CAAC;IACP,OAAO,CAAC,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAAC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACjF,CAAC"}

package/dist/services/jobs/windowsSandboxWorker.js

@@ -0,0 +1,155 @@
+import fs from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+import { spawn } from 'node:child_process';
+import { fileURLToPath, pathToFileURL } from 'node:url';
+import Database from 'better-sqlite3';
+import { z } from 'zod';
+import { SRT_VERSION, windowsSandboxScratchParent } from '../../platform/windowsSandbox.js';
+import { ensurePrivateDirectory } from '../../platform/privateFs.js';
+import { removeWithRetry } from '../../platform/fsRetry.js';
+import { assertWindowsArgv } from '../../platform/shell.js';
+import { isWithinPath } from '../../platform/pathPolicy.js';
+import { envValue } from '../../platform/system.js';
+import { assertSetupPrivatePaths } from '../../setup/managedTools.js';
+const Request = z.object({
+    runtimeRoot: z.string().min(1), program: z.string().min(1), args: z.array(z.string()).max(128),
+    workspaceRoot: z.string().min(1), writablePaths: z.array(z.string()).max(100),
+    readablePaths: z.array(z.string()).max(100).default([]), privateScript: z.string().optional(),
+    windowsVerbatimArguments: z.boolean().default(false), allowNetwork: z.boolean(), ownerStateDir: z.string().min(1),
+}).strict();
+function existingPath(value) {
+    if (!/^[a-z]:[\\/]/i.test(value) || value.includes('\0'))
+        throw new Error('sandbox paths require local absolute drive paths');
+    const normalized = path.resolve(value), parsed = path.parse(normalized);
+    let current = parsed.root;
+    for (const part of normalized.slice(parsed.root.length).split(path.sep)) {
+        if (!part)
+            continue;
+        current = path.join(current, part);
+        if (fs.lstatSync(current).isSymbolicLink())
+            throw new Error('sandbox path cannot traverse a directory link');
+    }
+    return fs.realpathSync.native(normalized);
+}
+function regular(file, cap = 16 * 1024 * 1024) {
+    const s = fs.lstatSync(file);
+    if (!s.isFile() || s.isSymbolicLink() || s.nlink !== 1 || s.size > cap)
+        throw new Error('sandbox input is not a bounded regular file');
+}
+async function main() {
+    if (process.platform !== 'win32')
+        throw new Error('Windows sandbox worker requires Windows');
+    const raw = process.argv[2] ?? '';
+    if (raw.length > 200000)
+        throw new Error('sandbox request exceeds limit');
+    const request = Request.parse(JSON.parse(Buffer.from(raw, 'base64').toString('utf8')));
+    const root = existingPath(request.workspaceRoot), cwd = existingPath(process.cwd());
+    if (!isWithinPath(root, cwd))
+        throw new Error('sandbox cwd is outside the workspace');
+    const ownerState = existingPath(request.ownerStateDir), runtimeRoot = existingPath(request.runtimeRoot);
+    if (isWithinPath(root, runtimeRoot) || isWithinPath(root, ownerState))
+        throw new Error('sandbox runtime and owner state must be outside the workspace');
+    regular(path.join(runtimeRoot, 'package.json'), 65536);
+    const pkg = JSON.parse(fs.readFileSync(path.join(runtimeRoot, 'package.json'), 'utf8'));
+    if (pkg.name !== '@anthropic-ai/sandbox-runtime' || pkg.version !== SRT_VERSION)
+        throw new Error('sandbox runtime version mismatch');
+    const program = existingPath(request.program);
+    const systemRoot = envValue(process.env, 'SystemRoot');
+    if (systemRoot)
+        process.env['SystemRoot'] = systemRoot;
+    // SRT uses one sandbox SID. Serialize DODO sessions across this OS user's
+    // workspaces/config directories so their temporary ACL grants cannot overlap.
+    // SQLite releases its OS lock on process death; no stale PID is ever killed.
+    const serialDir = path.join(envValue(process.env, 'LOCALAPPDATA') ?? os.homedir(), 'dodo-sandbox-serialization');
+    ensurePrivateDirectory(serialDir);
+    const serialFile = path.join(serialDir, 'execution.db');
+    if (fs.existsSync(serialFile))
+        assertSetupPrivatePaths([serialFile]);
+    const serial = new Database(serialFile, { timeout: 120000 });
+    let stage, runtime;
+    try {
+        serial.exec('BEGIN EXCLUSIVE');
+        runtime = await import(pathToFileURL(path.join(runtimeRoot, 'dist', 'index.js')).href);
+        if (typeof runtime.SandboxManager?.initialize !== 'function' || typeof runtime.SandboxManager.wrapWithSandboxArgv !== 'function')
+            throw new Error('sandbox API contract unavailable');
+        // Do not place the sandbox launcher under the owner's private profile:
+        // srt-sandbox must traverse the parent path before session ACL grants are
+        // useful. ProgramData is a common traversable parent; this random leaf is
+        // immediately made owner-private and granted only for this SRT session.
+        stage = fs.realpathSync.native(fs.mkdtempSync(path.join(windowsSandboxScratchParent(), 'dodo-sandbox-job-')));
+        ensurePrivateDirectory(stage);
+        const childLauncher = path.join(stage, 'launcher.mjs');
+        fs.copyFileSync(fileURLToPath(new URL('./windowsSandboxChild.js', import.meta.url)), childLauncher, fs.constants.COPYFILE_EXCL);
+        let args = request.args;
+        // cmd jobs are deliberately stored in private owner state. Copy ONLY the
+        // current, server-selected command file, rather than granting state access.
+        if (request.privateScript) {
+            const source = existingPath(request.privateScript);
+            const relative = path.relative(ownerState, source).replace(/\\/g, '/');
+            if (!/^jobs\/job_[a-z0-9]+\/command\.(cmd|sh)$/.test(relative))
+                throw new Error('invalid private job source');
+            regular(source);
+            const copy = path.join(stage, path.basename(source));
+            fs.copyFileSync(source, copy, fs.constants.COPYFILE_EXCL);
+            args = args.map(arg => arg.split(source).join(copy).split(source.replace(/\\/g, '/')).join(copy.replace(/\\/g, '/')));
+        }
+        const manifest = path.join(stage, 'command.json');
+        fs.writeFileSync(manifest, JSON.stringify({ program, args, cwd, windowsVerbatimArguments: request.windowsVerbatimArguments }), { flag: 'wx', mode: 0o600 });
+        const writable = [root, ...request.writablePaths.filter(p => fs.existsSync(p)).map(existingPath)];
+        if (writable.some(p => [ownerState, serialDir].some(s => isWithinPath(p, s) || isWithinPath(s, p))))
+            throw new Error('sandbox write grants cannot include owner/control state');
+        const helperDir = path.join(runtimeRoot, 'vendor', 'srt-win', process.arch);
+        const srtWin = existingPath(path.join(helperDir, 'srt-win.exe'));
+        regular(srtWin, 16 * 1024 * 1024);
+        // System programs (cmd.exe, node.exe, Program Files tools) already carry
+        // normal Users read/execute ACLs. Do not try to mutate protected system
+        // directories. Private managed executables need an explicit service-level
+        // readablePaths grant only when that service actually executes them.
+        const readable = [root, stage, ...request.readablePaths.map(existingPath)];
+        if (readable.some(p => p === ownerState || isWithinPath(p, ownerState) || isWithinPath(p, serialDir)))
+            throw new Error('sandbox read grants cannot expose all owner/control state');
+        // SRT performs a live WFP egress denial test before it launches a target.
+        // It also reconciles stale ACL receipts after a killed previous worker.
+        await runtime.SandboxManager.initialize({
+            network: { allowedDomains: request.allowNetwork ? ['*'] : [], deniedDomains: [], allowLocalBinding: false },
+            filesystem: { denyRead: [ownerState, serialDir], denyWrite: [], allowWrite: [...new Set(writable)], allowRead: [...new Set(readable)] },
+            windows: { srtWin: { path: srtWin } },
+        });
+        const wrapped = await runtime.SandboxManager.wrapWithSandboxArgv('DODO_NATIVE_ARGV', { exe: process.execPath, args: [childLauncher, manifest] }, undefined, AbortSignal.timeout(30000), cwd);
+        const [executable, ...brokerArgs] = wrapped.argv;
+        if (!executable || !path.isAbsolute(executable) || isWithinPath(root, executable))
+            throw new Error('sandbox returned an unsafe broker executable');
+        assertWindowsArgv(executable, brokerArgs);
+        process.exitCode = await new Promise((resolve, reject) => {
+            const child = spawn(executable, brokerArgs, { cwd, env: wrapped.env, shell: false, windowsHide: true, stdio: 'inherit' });
+            child.once('error', reject);
+            child.once('close', code => resolve(code ?? 1));
+        });
+    }
+    finally {
+        try {
+            await runtime?.SandboxManager.reset();
+        }
+        catch {
+            process.exitCode = 1;
+            console.error('[dodo] sandbox ACL cleanup failed; inspect runtime recovery before another run');
+        }
+        try {
+            if (stage)
+                removeWithRetry(stage, true);
+        }
+        catch {
+            process.exitCode = 1;
+            console.error('[dodo] sandbox private job cleanup failed');
+        }
+        if (serial.inTransaction)
+            serial.exec('ROLLBACK');
+        serial.close();
+    }
+}
+main().catch(error => {
+    process.exitCode = 1;
+    console.error(`[dodo] Windows sandbox refused execution: ${error instanceof Error ? error.message.slice(0, 500) : 'runtime failure'}`);
+});
+//# sourceMappingURL=windowsSandboxWorker.js.map

package/dist/services/jobs/windowsSandboxWorker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"windowsSandboxWorker.js","sourceRoot":"","sources":["../../../src/services/jobs/windowsSandboxWorker.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACxD,OAAO,QAAQ,MAAM,gBAAgB,CAAC;AACtC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,2BAA2B,EAAE,MAAM,kCAAkC,CAAC;AAC5F,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AACrE,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAC5D,OAAO,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAC;AACpD,OAAO,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AAEtE,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,CAAC;IACvB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAC9F,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAC7E,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7F,wBAAwB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAClH,CAAC,CAAC,MAAM,EAAE,CAAC;AAQZ,SAAS,YAAY,CAAC,KAAa;IACjC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IAC9H,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACxE,IAAI,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC;IAC1B,KAAK,MAAM,IAAI,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACxE,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACnC,IAAI,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,cAAc,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IAC/G,CAAC;IACD,OAAO,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;AAC5C,CAAC;AACD,SAAS,OAAO,CAAC,IAAY,EAAE,GAAG,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI;IACnD,MAAM,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;AACzI,CAAC;AACD,KAAK,UAAU,IAAI;IACjB,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7F,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAClC,IAAI,GAAG,CAAC,MAAM,GAAG,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IAC1E,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACvF,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACpF,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IACtF,MAAM,UAAU,GAAG,YAAY,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,WAAW,GAAG,YAAY,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACxG,IAAI,YAAY,CAAC,IAAI,EAAE,WAAW,CAAC,IAAI,YAAY,CAAC,IAAI,EAAE,UAAU,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;IACxJ,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,EAAE,KAAK,CAAC,CAAC;IACvD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAsC,CAAC;IAC7H,IAAI,GAAG,CAAC,IAAI,KAAK,+BAA+B,IAAI,GAAG,CAAC,OAAO,KAAK,WAAW;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACrI,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9C,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IAAC,IAAI,UAAU;QAAE,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,UAAU,CAAC;IAC/G,0EAA0E;IAC1E,8EAA8E;IAC9E,6EAA6E;IAC7E,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,cAAc,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,4BAA4B,CAAC,CAAC;IACjH,sBAAsB,CAAC,SAAS,CAAC,CAAC;IAClC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;IACxD,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,uBAAuB,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;IACrE,MAAM,MAAM,GAAG,IAAI,QAAQ,CAAC,UAAU,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;IAC7D,IAAI,KAAyB,EAAE,OAA4B,CAAC;IAC5D,IAAI,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAC/B,OAAO,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CAAY,CAAC;QAClG,IAAI,OAAO,OAAO,CAAC,cAAc,EAAE,UAAU,KAAK,UAAU,IAAI,OAAO,OAAO,CAAC,cAAc,CAAC,mBAAmB,KAAK,UAAU;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACtL,uEAAuE;QACvE,0EAA0E;QAC1E,0EAA0E;QAC1E,wEAAwE;QACxE,KAAK,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,2BAA2B,EAAE,EAAE,mBAAmB,CAAC,CAAC,CAAC,CAAC;QAC9G,sBAAsB,CAAC,KAAK,CAAC,CAAC;QAC9B,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;QACvD,EAAE,CAAC,YAAY,CAAC,aAAa,CAAC,IAAI,GAAG,CAAC,0BAA0B,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,aAAa,EAAE,EAAE,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;QAChI,IAAI,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QACxB,yEAAyE;QACzE,4EAA4E;QAC5E,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;YAC1B,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;YACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YACvE,IAAI,CAAC,0CAA0C,CAAC,IAAI,CAAC,QAAQ,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;YAC9G,OAAO,CAAC,MAAM,CAAC,CAAC;YAChB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;YAAC,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;YAChH,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;QACxH,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;QAClD,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,wBAAwB,EAAE,OAAO,CAAC,wBAAwB,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC5J,MAAM,QAAQ,GAAG,CAAC,IAAI,EAAE,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC;QAClG,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;QAChL,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QAC5E,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC,CAAC;QAAC,OAAO,CAAC,MAAM,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC;QACpG,yEAAyE;QACzE,wEAAwE;QACxE,0EAA0E;QAC1E,qEAAqE;QACrE,MAAM,QAAQ,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC;QAC3E,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,UAAU,IAAI,YAAY,CAAC,CAAC,EAAE,UAAU,CAAC,IAAI,YAAY,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;QACpL,0EAA0E;QAC1E,wEAAwE;QACxE,MAAM,OAAO,CAAC,cAAc,CAAC,UAAU,CAAC;YACtC,OAAO,EAAE,EAAE,cAAc,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,iBAAiB,EAAE,KAAK,EAAE;YAC3G,UAAU,EAAE,EAAE,QAAQ,EAAE,CAAC,UAAU,EAAE,SAAS,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE;YACvI,OAAO,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE;SACtC,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,mBAAmB,CAAC,kBAAkB,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,aAAa,EAAE,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC;QAC7L,MAAM,CAAC,UAAU,EAAE,GAAG,UAAU,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;QACjD,IAAI,CAAC,UAAU,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,YAAY,CAAC,IAAI,EAAE,UAAU,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QACnJ,iBAAiB,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;QAC1C,OAAO,CAAC,QAAQ,GAAG,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC/D,MAAM,KAAK,GAAG,KAAK,CAAC,UAAU,EAAE,UAAU,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;YAC1H,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;QAC/E,CAAC,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,IAAI,CAAC;YAAC,MAAM,OAAO,EAAE,cAAc,CAAC,KAAK,EAAE,CAAC;QAAC,CAAC;QAC9C,MAAM,CAAC;YAAC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YAAC,OAAO,CAAC,KAAK,CAAC,gFAAgF,CAAC,CAAC;QAAC,CAAC;QAChI,IAAI,CAAC;YAAC,IAAI,KAAK;gBAAE,eAAe,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAAC,CAAC;QAChD,MAAM,CAAC;YAAC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YAAC,OAAO,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAAC,CAAC;QAC3F,IAAI,MAAM,CAAC,aAAa;YAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAClD,MAAM,CAAC,KAAK,EAAE,CAAC;IACjB,CAAC;AACH,CAAC;AACD,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE;IACnB,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACrB,OAAO,CAAC,KAAK,CAAC,6CAA6C,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,iBAAiB,EAAE,CAAC,CAAC;AACzI,CAAC,CAAC,CAAC"}

package/dist/services/lsp/documentUri.js

@@ -0,0 +1,16 @@
+import { fileURLToPath, pathToFileURL } from 'node:url';
+/** Normalize URI escaping and Windows drive-letter spelling, not path case.
+ * URI identity is only a lookup key; WorkspaceFS remains the access authority. */
+export function documentUri(uri, platform = process.platform) {
+    try {
+        const options = { windows: platform === 'win32' };
+        const normalized = pathToFileURL(fileURLToPath(uri, options), options).href;
+        return platform === 'win32'
+            ? normalized.replace(/^file:\/\/\/([A-Z]):/, (_match, drive) => `file:///${drive.toLowerCase()}:`)
+            : normalized;
+    }
+    catch {
+        return undefined;
+    }
+}
+//# sourceMappingURL=documentUri.js.map

package/dist/services/lsp/documentUri.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"documentUri.js","sourceRoot":"","sources":["../../../src/services/lsp/documentUri.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAExD;kFACkF;AAClF,MAAM,UAAU,WAAW,CAAC,GAAW,EAAE,WAA4B,OAAO,CAAC,QAAQ;IACnF,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,EAAE,OAAO,EAAE,QAAQ,KAAK,OAAO,EAAE,CAAC;QAClD,MAAM,UAAU,GAAG,aAAa,CAAC,aAAa,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC;QAC5E,OAAO,QAAQ,KAAK,OAAO;YACzB,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,sBAAsB,EAAE,CAAC,MAAM,EAAE,KAAa,EAAE,EAAE,CAAC,WAAW,KAAK,CAAC,WAAW,EAAE,GAAG,CAAC;YAC1G,CAAC,CAAC,UAAU,CAAC;IACjB,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,SAAS,CAAC;IAAC,CAAC;AAC/B,CAAC"}