dsh-codex-style-computer-use 1.3.0 → 2.0.0

package/lib/core/native-runtime.js

@@ -8,12 +8,34 @@ import { execFileSync } from 'node:child_process'
 
 const hash = bytes => createHash('sha256').update(bytes).digest('hex')
 const fileHash = file => hash(fs.readFileSync(file))
+export const WORKER_PROTOCOL_VERSION = 2
+
+// Identity comes from the exact executable selected for this worker. A custom
+// executable without a verified manifest stays explicitly unverified.
+export function nativeRuntimeIdentity (binary) {
+  let packageVersion = 'unknown'
+  try { packageVersion = JSON.parse(fs.readFileSync(new URL('../../package.json', import.meta.url), 'utf8')).version } catch {}
+  const binaryHash = fileHash(binary)
+  let manifest
+  try { manifest = JSON.parse(fs.readFileSync(`${binary}.json`, 'utf8')) } catch {}
+  const verified = manifest?.format === 1 && manifest?.platform === 'win32' && manifest?.architecture === 'x64' &&
+    /^[a-f0-9]{64}$/.test(manifest?.sourceSha256 || '') && manifest?.binarySha256 === binaryHash
+  const sourceHash = verified ? manifest.sourceSha256 : null
+  return { packageVersion, protocolVersion: WORKER_PROTOCOL_VERSION, sourceHash, binaryHash,
+    buildId: `${packageVersion}:${sourceHash?.slice(0, 16) || 'unverified'}:${binaryHash.slice(0, 16)}`,
+    verified: !!verified }
+}
 const framework = env => path.join(env.SystemRoot || env.windir || 'C:\\Windows', 'Microsoft.NET', 'Framework64', 'v4.0.30319')
 
 export function workerReferences (env = process.env) {
   const gac = path.join(env.SystemRoot || env.windir || 'C:\\Windows', 'Microsoft.NET', 'assembly', 'GAC_MSIL')
   return ['System.dll', 'System.Core.dll', 'System.Drawing.dll', 'System.Web.Extensions.dll', 'System.Windows.Forms.dll',
-    ...['UIAutomationClient', 'UIAutomationTypes', 'WindowsBase'].map(name => path.join(gac, name, 'v4.0_4.0.0.0__31bf3856ad364e35', `${name}.dll`))]
+    ...['UIAutomationClient', 'UIAutomationTypes', 'WindowsBase'].map(name => path.join(gac, name, 'v4.0_4.0.0.0__31bf3856ad364e35', `${name}.dll`)),
+    // Inbox OCR (2026-11-04): the legacy csc cannot compose the split WinMetadata winmds, so the
+    // union Windows.winmd ships inside the package and the WinRT interop pieces come from the OS.
+    path.join(framework(env), 'System.Runtime.dll'),
+    path.join(gac, 'System.Runtime.WindowsRuntime', 'v4.0_4.0.0.0__b77a5c561934e089', 'System.Runtime.WindowsRuntime.dll'),
+    path.join(import.meta.dirname, 'winmd', 'Windows.winmd')]
 }
 
 export function compileNativeBinary (source, output, references, { env = process.env } = {}) {