fix(sqlite): build valid read-only file URI on Windows paths

OpenReadOnly used net/url which produced file://C:%5C... URIs that
modernc sqlite rejects on windows-latest. Detect drive-letter paths and
emit file:///C:/...?mode=ro with forward slashes.

Fixes TestIntegration_inspectWeb_API_afterRun on Windows CI.

Co-authored-by: Cursor <cursoragent@cursor.com>

Author: leo-aa88

internal/state/sqlite/readonly.go

@@ -4,8 +4,8 @@ import (
 	"context"
 	"database/sql"
 	"fmt"
-	"net/url"
 	"path/filepath"
+	"strings"
 )
 
 // OpenReadOnly opens an existing SQLite database for read-only queries.
@@ -36,12 +36,29 @@ func OpenReadOnly(ctx context.Context, path string) (*Store, error) {
 	return &Store{db: db}, nil
 }
 
+// readOnlyDSN builds a modernc.org/sqlite file URI with mode=ro.
+// Windows paths use file:///C:/... (forward slashes); net/url.Path is incorrect for drive letters.
 func readOnlyDSN(path string) (string, error) {
-	abs, err := filepath.Abs(filepath.Clean(path))
+	clean := filepath.Clean(path)
+	if win, ok := windowsSQLitePath(clean); ok {
+		return "file:///" + win + "?mode=ro", nil
+	}
+	abs, err := filepath.Abs(clean)
 	if err != nil {
 		return "", fmt.Errorf("sqlite read-only path: %w", err)
 	}
-	// modernc.org/sqlite file URI: mode=ro prevents writes at the VFS layer.
-	u := url.URL{Scheme: "file", Path: abs, RawQuery: "mode=ro"}
-	return u.String(), nil
+	return "file://" + filepath.ToSlash(abs) + "?mode=ro", nil
+}
+
+// windowsSQLitePath reports whether p is a Windows drive path and returns C:/... form.
+func windowsSQLitePath(p string) (string, bool) {
+	if len(p) < 3 || p[1] != ':' {
+		return "", false
+	}
+	if p[2] != '\\' && p[2] != '/' {
+		return "", false
+	}
+	drive := strings.ToUpper(string(p[0])) + ":"
+	rest := strings.TrimPrefix(strings.ReplaceAll(p[2:], `\`, `/`), "/")
+	return drive + "/" + rest, true
 }

internal/state/sqlite/readonly_dsn_test.go

@@ -0,0 +1,31 @@
+package sqlite
+
+import (
+	"strings"
+	"testing"
+)
+
+func TestReadOnlyDSN_unixStyle(t *testing.T) {
+	dsn, err := readOnlyDSN("/tmp/state.db")
+	if err != nil {
+		t.Fatal(err)
+	}
+	if !strings.HasPrefix(dsn, "file://") || !strings.Contains(dsn, "mode=ro") {
+		t.Fatalf("dsn=%q", dsn)
+	}
+	if strings.Contains(dsn, "%5C") {
+		t.Fatalf("unexpected encoding in unix dsn: %q", dsn)
+	}
+}
+
+func TestReadOnlyDSN_windowsDrive(t *testing.T) {
+	// Simulate CI path shape without requiring Windows runtime.
+	dsn, err := readOnlyDSN(`C:\Users\RUNNER~1\AppData\Local\Temp\inspect-web.db`)
+	if err != nil {
+		t.Fatal(err)
+	}
+	wantPrefix := "file:///C:/Users/RUNNER~1/AppData/Local/Temp/inspect-web.db?mode=ro"
+	if dsn != wantPrefix {
+		t.Fatalf("dsn=%q want %q", dsn, wantPrefix)
+	}
+}