Function escape_wide 

pub fn escape_wide(units: &[u16]) -> String

Escape UTF-16 code units (Windows names): valid text passes through (% → %25), unpaired surrogates become %uXXXX. A literal %u in a name escapes to %25u, so the forms never collide. Pure so every host can test it; cfg(windows) wires it to OsStr.