@ljwei-stak/dsh-model-router 0.13.0

package/.dsh-plugin/shared/official-tool-registry.mjs

@@ -0,0 +1,138 @@
+/**
+ * Fixed registry of official model CLI tools, shared by the Host runtime
+ * (probe + install) and the Desktop panel (display). Pure data: no Node or
+ * browser APIs, so both sides and the test suite import it unchanged.
+ *
+ * The registry is fail-closed by design: versions and installer sources are
+ * pinned to the releases checked for this registry, and clients can only name a
+ * registry id — never an arbitrary package or command.
+ */
+
+export const OFFICIAL_TOOLS = Object.freeze([
+  Object.freeze({
+    id: 'kimi-code',
+    label: 'Kimi Code · Node',
+    vendor: 'Moonshot AI',
+    purpose: 'Kimi 官方编程 CLI，提供 kimi 命令与 ACP 会话。',
+    package: '@moonshot-ai/kimi-code',
+    version: '2.1.1',
+    manager: 'npm',
+    installArgs: ['install', '-g', '@moonshot-ai/kimi-code@2.1.1', '--registry=https://registry.npmjs.org/'],
+    probeExecutables: ['kimi'],
+    probeNote: 'kimi 与旧 Python 版 kimi-cli 同名；请核对可执行文件来源和版本。',
+    providerHints: ['moonshot', 'kimi'],
+  }),
+  Object.freeze({
+    id: 'claude-code',
+    label: 'Claude Code',
+    vendor: 'Anthropic',
+    purpose: 'Anthropic 官方编程 CLI，提供 claude 命令。',
+    package: '@anthropic-ai/claude-code',
+    version: '2.1.283',
+    manager: 'npm',
+    installArgs: ['install', '-g', '@anthropic-ai/claude-code@2.1.283', '--registry=https://registry.npmjs.org/'],
+    probeExecutables: ['claude'],
+    providerHints: ['anthropic', 'claude'],
+  }),
+  Object.freeze({
+    id: 'codex',
+    label: 'Codex CLI',
+    vendor: 'OpenAI',
+    purpose: 'OpenAI 官方编程 CLI，提供 codex 命令。',
+    package: '@openai/codex',
+    version: '0.157.1',
+    installArgs: ['install', '-g', '@openai/codex@0.157.1', '--registry=https://registry.npmjs.org/'],
+    manager: 'npm',
+    probeExecutables: ['codex'],
+    probeNote: 'Codex 版本横幅由适配层宽匹配；安装时固定版本。',
+    providerHints: ['openai', 'gpt', 'codex'],
+  }),
+  Object.freeze({
+    id: 'minimax-code',
+    label: 'MiniMax Code',
+    vendor: 'MiniMax',
+    purpose: 'MiniMax 官方编程 CLI，提供 mcode 命令。',
+    package: '@minimax-ai/code',
+    version: '0.5.5',
+    manager: 'npm',
+    installArgs: ['install', '-g', '@minimax-ai/code@0.5.5', '--registry=https://registry.npmjs.org/', '--ignore-scripts=false', '--include=optional', '--allow-scripts=@minimax-ai/code,better-sqlite3'],
+    probeExecutables: ['mcode'],
+    providerHints: ['minimax'],
+  }),
+  Object.freeze({
+    id: 'mimo-code',
+    label: 'MiMo Code',
+    vendor: 'XiaoMi',
+    purpose: '小米 MiMo 官方编程 CLI，提供 mimo 命令。',
+    package: '@mimo-ai/cli',
+    version: '0.1.15',
+    manager: 'npm',
+    installArgs: ['install', '-g', '@mimo-ai/cli@0.1.15', '--registry=https://registry.npmjs.org/'],
+    probeExecutables: ['mimo'],
+    providerHints: ['mimo', 'xiaomi'],
+  }),
+  Object.freeze({
+    id: 'grok-build',
+    label: 'Grok Build',
+    vendor: 'xAI',
+    purpose: 'xAI 官方编程 CLI，提供 grok 命令与 ACP 会话。',
+    package: '@xai-official/grok',
+    version: '1.0.41',
+    manager: 'npm',
+    installArgs: ['install', '-g', '@xai-official/grok@1.0.41', '--registry=https://registry.npmjs.org/'],
+    probeExecutables: ['grok'],
+    providerHints: ['xai', 'grok'],
+  }),
+  Object.freeze({
+    id: 'gemini',
+    label: 'Gemini CLI',
+    vendor: 'Google',
+    purpose: 'Google 官方 Gemini CLI，无界面模式使用 gemini -p。',
+    package: '@google/gemini-cli',
+    version: '0.62.0',
+    manager: 'npm',
+    installArgs: ['install', '-g', '@google/gemini-cli@0.62.0', '--registry=https://registry.npmjs.org/'],
+    probeExecutables: ['gemini'],
+    providerHints: ['gemini', 'google'],
+    // Headless runs go through the task adapter. The signed sandbox runner does
+    // not launch this CLI; a missing or failed process falls back to the API.
+    headlessAdapter: true,
+  }),
+  Object.freeze({
+    id: 'zcode',
+    label: 'ZCode',
+    vendor: 'Z.ai',
+    purpose: '智谱官方 ZCode 桌面版，内含 GLM 编程代理。Windows 安装器可选择 D 盘目录。',
+    version: '3.14.3',
+    manager: 'signed-windows-installer',
+    installArgs: [],
+    probeExecutables: [],
+    probeNote: '检测经过有效签名的 ZCode.exe 和同目录 GLM 资源；桌面安装器需人工选择安装位置。',
+    providerHints: ['zai', 'z.ai', 'zcode', 'glm', 'zhipu', 'bigmodel'],
+  }),
+])
+
+const TOOL_BY_ID = new Map(OFFICIAL_TOOLS.map(tool => [tool.id, tool]))
+
+export function getOfficialTool(id) {
+  return TOOL_BY_ID.get(String(id ?? '').trim()) ?? null
+}
+
+/** Conservative keyword mapping from a catalog provider id/name to a tool. */
+export function toolForProvider(provider) {
+  const value = String(provider ?? '').trim().toLowerCase()
+  if (!value) return null
+  for (const tool of OFFICIAL_TOOLS) {
+    if (tool.providerHints.some(hint => value.includes(hint))) return tool
+  }
+  return null
+}
+
+/** Human-readable install command line for one registry entry. */
+export function installCommandLine(tool) {
+  if (!tool || tool.unsupported) return null
+  if (tool.manager === 'signed-windows-installer') return '打开官方签名安装器（选择安装目录）'
+  return tool.manager === 'npm'
+    ? `npm ${tool.installArgs.join(' ')}`
+    : `${tool.manager} ${tool.installArgs.join(' ')}`
+}

package/.dsh-plugin/shared/official-tools-remote.mjs

@@ -0,0 +1,173 @@
+/**
+ * Narrow Typert Remote contract for the official desktop tool installer.
+ *
+ * The official Client Gateway mounts this contribution with remote.$mount;
+ * the Host Typert registry owns the matching strict descriptors. No endpoint
+ * accepts a command, package name, URL, argument vector, or executable path.
+ */
+import { getOfficialTool } from './official-tool-registry.mjs'
+
+export const OFFICIAL_TOOLS_REMOTE_PACKAGE = '@ljwei-stak/dsh-model-router'
+export const OFFICIAL_TOOLS_REMOTE_NAMESPACE = 'modelRouterOfficialTools'
+
+function strictCodec(typeSymbol, parse) {
+  return Object.freeze({ mode: 'strict', typeSymbol, create: () => ({ parse }) })
+}
+
+function plainObject(value, subject) {
+  if (value === null || typeof value !== 'object' || Array.isArray(value)) {
+    throw new TypeError(`${subject} must be an object`)
+  }
+  return value
+}
+
+const toolIdCodec = strictCodec(`${OFFICIAL_TOOLS_REMOTE_PACKAGE}#OfficialToolId`, value => {
+  if (typeof value !== 'string' || !getOfficialTool(value)) {
+    throw new TypeError('toolId must name a fixed official tool')
+  }
+  return value
+})
+
+const listResultCodec = strictCodec(`${OFFICIAL_TOOLS_REMOTE_PACKAGE}#OfficialToolList`, value => {
+  const result = plainObject(value, 'tool list result')
+  if (!Array.isArray(result.tools)) throw new TypeError('tool list result needs a tools array')
+  return result
+})
+
+const installResultCodec = strictCodec(`${OFFICIAL_TOOLS_REMOTE_PACKAGE}#OfficialToolInstall`, value => {
+  const result = plainObject(value, 'install result')
+  if (typeof result.accepted !== 'boolean') throw new TypeError('install result needs accepted')
+  if (result.accepted && !result.job) throw new TypeError('accepted install needs a job')
+  if (!result.accepted && typeof result.error !== 'string') throw new TypeError('refused install needs an error')
+  return result
+})
+
+const statusResultCodec = strictCodec(`${OFFICIAL_TOOLS_REMOTE_PACKAGE}#OfficialToolStatus`, value => {
+  const result = plainObject(value, 'install status result')
+  if (result.job !== null && (typeof result.job !== 'object' || Array.isArray(result.job))) {
+    throw new TypeError('install status result needs a job or null')
+  }
+  return result
+})
+
+const anyObjectCodec = name => strictCodec(`${OFFICIAL_TOOLS_REMOTE_PACKAGE}#${name}`, value => plainObject(value, name))
+
+const freshCodec = strictCodec(`${OFFICIAL_TOOLS_REMOTE_PACKAGE}#HealthFresh`, value => {
+  if (typeof value !== 'boolean') throw new TypeError('fresh must be a boolean')
+  return value
+})
+
+const idText = (value, subject) => {
+  if (typeof value !== 'string' || !/^[A-Za-z0-9._:-]{1,80}$/.test(value)) throw new TypeError(`${subject} must be a short id`)
+  return value
+}
+
+const optionalRouteText = (value, subject) => {
+  if (value === undefined || value === null || value === '') return undefined
+  if (typeof value !== 'string' || value.length > 240 || value.includes('\0')) throw new TypeError(`${subject} is invalid`)
+  return value
+}
+
+const rateRequestCodec = strictCodec(`${OFFICIAL_TOOLS_REMOTE_PACKAGE}#RateRequest`, value => {
+  const request = plainObject(value, 'rate request')
+  if (!['up', 'down', 'clear'].includes(request.rating)) throw new TypeError('rating must be up, down or clear')
+  return { runId: idText(request.runId, 'runId'), packageId: idText(request.packageId, 'packageId'), rating: request.rating }
+})
+
+const rerunRequestCodec = strictCodec(`${OFFICIAL_TOOLS_REMOTE_PACKAGE}#RerunRequest`, value => {
+  const request = plainObject(value, 'rerun request')
+  const provider = optionalRouteText(request.provider, 'provider')
+  const model = optionalRouteText(request.model, 'model')
+  if (Boolean(provider) !== Boolean(model)) throw new TypeError('provider and model must be supplied together')
+  return {
+    runId: idText(request.runId, 'runId'), packageId: idText(request.packageId, 'packageId'),
+    ...(provider ? { provider, model } : {}),
+    confirmOverBudget: request.confirmOverBudget === true,
+    confirmWrite: request.confirmWrite === true,
+    ...(['api', 'subscription', 'cancel'].includes(request.subscriptionChoice) ? { subscriptionChoice: request.subscriptionChoice } : {}),
+  }
+})
+
+export const RUN_CONFIRMATION_CODES = Object.freeze(['workspace-write', 'rerun-write', 'subscription-api', 'over-budget', 'unsandboxed'])
+const MAX_RUN_TASK_CHARS = 200_000
+
+/**
+ * Workbench "start a run" request. The workspace is a user-typed absolute
+ * directory (validated again on the Host); the run itself is read-only.
+ */
+export function parseRunRequest(value) {
+  const request = plainObject(value, 'run request')
+  if (typeof request.task !== 'string' || !request.task.trim() || request.task.length > MAX_RUN_TASK_CHARS) {
+    throw new TypeError('task must be a non-empty string')
+  }
+  const provider = optionalRouteText(request.provider, 'provider')
+  const model = optionalRouteText(request.model, 'model')
+  if (Boolean(provider) !== Boolean(model)) throw new TypeError('provider and model must be supplied together')
+  const workspace = request.workspace === undefined || request.workspace === null || request.workspace === '' ? undefined : request.workspace
+  if (workspace !== undefined && (typeof workspace !== 'string' || workspace.length > 4_096 || workspace.includes('\0'))) throw new TypeError('workspace is invalid')
+  if (request.budgetUsd !== undefined && (typeof request.budgetUsd !== 'number' || !Number.isFinite(request.budgetUsd) || request.budgetUsd < 0)) {
+    throw new TypeError('budgetUsd must be a non-negative number')
+  }
+  const confirmed = Array.isArray(request.confirmedReasons) ? request.confirmedReasons : []
+  if (confirmed.length > RUN_CONFIRMATION_CODES.length || confirmed.some(code => !RUN_CONFIRMATION_CODES.includes(code))) {
+    throw new TypeError('confirmedReasons contains an unknown reason')
+  }
+  return {
+    task: request.task,
+    ...(provider ? { provider, model } : {}),
+    ...(['single', 'team'].includes(request.planMode) ? { planMode: request.planMode } : {}),
+    ...(['economy', 'balanced', 'quality'].includes(request.preset) ? { preset: request.preset } : {}),
+    ...(request.budgetUsd !== undefined ? { budgetUsd: request.budgetUsd } : {}),
+    ...(workspace ? { workspace } : {}),
+    confirmedReasons: [...new Set(confirmed)],
+  }
+}
+
+const runRequestCodec = strictCodec(`${OFFICIAL_TOOLS_REMOTE_PACKAGE}#RunRequest`, parseRunRequest)
+
+function descriptor(method, parameters, result) {
+  return Object.freeze({
+    id: `${OFFICIAL_TOOLS_REMOTE_PACKAGE}#${OFFICIAL_TOOLS_REMOTE_NAMESPACE}/${method}`,
+    service: OFFICIAL_TOOLS_REMOTE_NAMESPACE,
+    namespace: OFFICIAL_TOOLS_REMOTE_NAMESPACE,
+    method,
+    invocation: { kind: 'direct' },
+    parameters,
+    result,
+  })
+}
+
+const toolIdParameter = Object.freeze({
+  name: 'toolId', wire: 'toolId', source: 'json', codec: toolIdCodec,
+})
+const jsonParameter = (name, codec) => Object.freeze({ name, wire: name, source: 'json', codec })
+
+export const OFFICIAL_TOOLS_REMOTE_DESCRIPTORS = Object.freeze([
+  descriptor('list', [], listResultCodec),
+  descriptor('installTool', [toolIdParameter], installResultCodec),
+  descriptor('cancel', [toolIdParameter], installResultCodec),
+  descriptor('status', [toolIdParameter], statusResultCodec),
+  // Workbench: onboarding health check, run ledger, ratings, step retry, security boundaries.
+  descriptor('health', [jsonParameter('fresh', freshCodec)], anyObjectCodec('HealthReport')),
+  descriptor('completeOnboarding', [], anyObjectCodec('OnboardingState')),
+  descriptor('ledger', [], anyObjectCodec('RunLedger')),
+  descriptor('rateResult', [jsonParameter('request', rateRequestCodec)], anyObjectCodec('RateResult')),
+  descriptor('rerunStep', [jsonParameter('request', rerunRequestCodec)], anyObjectCodec('RerunResult')),
+  descriptor('boundaries', [], anyObjectCodec('SecurityBoundaries')),
+  // Workbench "start a run": plan preview with cost estimate and confirmation reasons, then execute.
+  descriptor('previewRun', [jsonParameter('request', runRequestCodec)], anyObjectCodec('RunPreview')),
+  descriptor('startRun', [jsonParameter('request', runRequestCodec)], anyObjectCodec('RunStarted')),
+])
+
+export const OFFICIAL_TOOLS_CLIENT_REMOTE = Object.freeze({
+  package: OFFICIAL_TOOLS_REMOTE_PACKAGE,
+  descriptors: OFFICIAL_TOOLS_REMOTE_DESCRIPTORS,
+})
+
+export const OFFICIAL_TOOLS_HOST_TYPERT = Object.freeze({
+  package: OFFICIAL_TOOLS_REMOTE_PACKAGE,
+  face: 'host',
+  schemas: [],
+  invocations: OFFICIAL_TOOLS_REMOTE_DESCRIPTORS,
+  model: { services: [], events: [], objects: [] },
+})