@ljwei-stak/dsh-model-router 0.13.1 → 0.13.3

package/.dsh-plugin/shared/official-tool-executor.mjs

@@ -24,7 +24,7 @@ import { ensureNpmPrefixOnPath } from './official-tools-runtime.mjs'
 import { buildMiniMaxInvocation, createMiniMaxStreamParser } from './vendor-minimax-adapter.mjs'
 import { discoverZCodeBundle } from './zcode-bundle.mjs'
 import { resolveMiMoGrokLaunch, createMiMoGrokParser } from './vendor-mimo-grok-adapter.mjs'
-import { usageFromEvents, usageFromOutput } from './task-executors.mjs'
+import { emptyOutputError, outputIsEmpty, usageFromEvents, usageFromOutput } from './task-executors.mjs'
 
 const IS_WINDOWS = process.platform === 'win32'
 const MAX_TASK_BYTES = 64_000
@@ -394,11 +394,7 @@ async function launchSpec(toolId, workspace, mode, modelId, task = 'Check readin
     if (!found) return { unsupported: '未找到具有 OpenAI 有效签名的 codex.exe。' }
     return {
       file: found.entry,
-      args: [
-        '--ask-for-approval', 'never', 'exec',
-        ...(modelId ? ['--model', modelId] : []),
-        '--sandbox', mode, '--json', '-',
-      ],
+      args: codexExecArgs(mode, modelId),
       format: 'codex-jsonl',
       source: found.source,
     }
@@ -469,6 +465,71 @@ async function launchSpec(toolId, workspace, mode, modelId, task = 'Check readin
   return { unsupported: CAPABILITIES[toolId]?.reason ?? '此官方工具尚无已核验的安全执行适配器。' }
 }
 
+/**
+ * Codex `exec` argv for the signed runner. `--skip-git-repo-check` is required:
+ * without it Codex refuses any workspace that is not a Git repository or a
+ * directory trusted in the user's config ("Not inside a trusted directory and
+ * --skip-git-repo-check was not specified.", exit 1). The workbench lets the user
+ * pick any absolute directory, and read-only runs are still confined by
+ * `--sandbox read-only` and the Harness process sandbox; write runs use an
+ * isolated Git worktree, so the flag changes nothing there.
+ */
+export function codexExecArgs(mode, modelId = null) {
+  return [
+    '--ask-for-approval', 'never', 'exec', '--skip-git-repo-check',
+    ...(modelId ? ['--model', modelId] : []),
+    '--sandbox', mode, '--json', '-',
+  ]
+}
+
+/** Failure text when Codex exits without a successful turn; names the cause when it is known. */
+export function codexIncompleteError(eventCount, stderr = '') {
+  const text = String(stderr ?? '')
+  if (/not inside a trusted directory/i.test(text)) {
+    return 'Codex 拒绝在非 Git 仓库/未信任目录中运行（Not inside a trusted directory）。'
+  }
+  if (!eventCount) {
+    const last = text.split(/\r?\n/u).map(line => line.trim()).filter(Boolean).at(-1)
+    return `Codex 未输出任何 JSON 事件就退出了（未开始回合，没有调用模型）。${last ? `CLI 输出：${last.slice(0, 300)}` : '未收到 CLI 输出。'}`
+  }
+  return 'Codex 未返回完整成功终态和回答。'
+}
+
+/**
+ * Extra environment the Harness sandbox runner itself needs. On Desktop the
+ * runner prefix is `[process.execPath, …/runner.js]` and process.execPath is
+ * the Electron app (DeepSeek Harness.exe). Harness starts such Node-mode
+ * children with ELECTRON_RUN_AS_NODE=1; without it the executable boots the
+ * GUI, loses the single-instance lock and exits 0 with no output, so the
+ * wrapped CLI never runs. The minimal CLI environment must therefore carry it
+ * whenever the confined argv starts with this Electron executable.
+ */
+export function runnerEnvironment(argv0, { execPath = process.execPath, electron = process.versions?.electron, platform = process.platform } = {}) {
+  if (!electron || typeof argv0 !== 'string' || typeof execPath !== 'string') return {}
+  const normalize = value => {
+    const resolved = resolve(value)
+    return platform === 'win32' ? resolved.replace(/\//g, '\\').toLowerCase() : resolved
+  }
+  return normalize(argv0) === normalize(execPath) ? { ELECTRON_RUN_AS_NODE: '1' } : {}
+}
+
+/**
+ * CLIs that cannot start inside the Harness Windows ACL process sandbox.
+ * Codex 0.157 must write CODEX_HOME (~/.codex: app-server state, sessions,
+ * temp aliases) before its first turn; the ACL runner denies every write in
+ * read-only mode and every write outside the workspace in workspace-write, so
+ * Codex exits with "failed to initialize in-process app-server client: Access
+ * is denied (os error 5)". Returning "unsupported" lets a read-only step use
+ * the direct `codex exec --sandbox read-only` launch the user approves as
+ * "unsandboxed CLI", instead of failing every time.
+ */
+export function harnessSandboxBlocker(toolId, platform = process.platform) {
+  if (toolId === 'codex' && platform === 'win32') {
+    return 'Codex 启动时必须写入 CODEX_HOME（~/.codex），Harness 的 Windows 进程沙箱会拒绝这些写入（os error 5）；改用 Codex 自带的只读沙箱直接启动。'
+  }
+  return null
+}
+
 /** Check the actual trusted launch entry without starting an account call. */
 export async function officialToolReadiness(toolId, workspace = process.cwd()) {
   const tool = getOfficialTool(toolId)
@@ -513,7 +574,7 @@ function stopProcessTree(child) {
   }
 }
 
-function captureProcess(spec, task, workspace, signal, timeoutMs, toolId, sessionOnly = false) {
+function captureProcess(spec, task, workspace, signal, timeoutMs, toolId, sessionOnly = false, extraEnv = {}) {
   return new Promise(resolveResult => {
     let child
     try {
@@ -523,7 +584,7 @@ function captureProcess(spec, task, workspace, signal, timeoutMs, toolId, sessio
         windowsHide: true,
         detached: !IS_WINDOWS,
         stdio: ['pipe', 'pipe', 'pipe'],
-        env: executionEnvironment(toolId, { sessionOnly }),
+        env: { ...executionEnvironment(toolId, { sessionOnly }), ...extraEnv },
       })
     } catch (error) {
       resolveResult({ status: 'failed', error: String(error?.message ?? error), exitCode: null })
@@ -538,6 +599,7 @@ function captureProcess(spec, task, workspace, signal, timeoutMs, toolId, sessio
     let outputBytes = 0
     let jsonlBuffer = ''
     let codexUsageLine = ''
+    let codexEvents = 0
     let reportedUsage = null
     let terminal = null
     let failedEvent = false
@@ -601,6 +663,7 @@ function captureProcess(spec, task, workspace, signal, timeoutMs, toolId, sessio
           }
           return
         }
+        codexEvents += 1
         if (event.type === 'turn.completed' && event.usage) codexUsageLine = line
         if (event.type === 'turn.completed' && !failedEvent) terminal = 'completed'
         // Top-level `error` events include transient reconnect notices; only turn.failed is terminal.
@@ -677,6 +740,11 @@ function captureProcess(spec, task, workspace, signal, timeoutMs, toolId, sessio
         settle({ status: stopReason, exitCode: code, exitSignal })
         return
       }
+      if (outputIsEmpty(stdoutTail, stderrTail)) {
+        settle({ status: 'failed', exitCode: code, exitSignal, emptyOutput: true,
+          error: emptyOutputError(getOfficialTool(toolId)?.label ?? toolId, code) })
+        return
+      }
       if (miniMaxParser) {
         const outcome = miniMaxParser.finish(code)
         const reported = usageFromEvents('minimax-result', outcome)
@@ -725,7 +793,7 @@ function captureProcess(spec, task, workspace, signal, timeoutMs, toolId, sessio
         }
         terminal = 'completed'
       } else if (protocolError || terminal !== 'completed' || !finalText.trim()) {
-        settle({ status: 'failed', exitCode: code, error: protocolError ?? 'Codex 未返回完整成功终态和回答。' })
+        settle({ status: 'failed', exitCode: code, error: protocolError ?? codexIncompleteError(codexEvents, stderrTail) })
         return
       }
       if (!reportedUsage && codexUsageLine) reportedUsage = usageFromOutput('codex-jsonl', codexUsageLine)
@@ -765,6 +833,8 @@ export async function runOfficialTool({
   if (executionMode === 'workspace-write') await checkedWriteWorkspace(cwd, isolatedRoot)
   const timeout = checkedTimeout(timeoutMs)
   if (signal?.aborted) return { toolId: tool.id, status: 'cancelled', workspace: cwd }
+  const blocker = harnessSandboxBlocker(tool.id)
+  if (blocker) return { toolId: tool.id, status: 'unsupported', reason: blocker }
   const spec = await launchSpec(tool.id, cwd, executionMode, requestedModel, prompt)
   if (spec.unsupported) return { toolId: tool.id, status: 'unsupported', reason: spec.unsupported }
   if (typeof sandbox?.confine !== 'function') {
@@ -783,7 +853,7 @@ export async function runOfficialTool({
   }
   const startedAt = Date.now()
   const outcome = await captureProcess({ ...spec, file: confined.argv[0], args: confined.argv.slice(1) },
-    prompt, cwd, signal, timeout, tool.id, sessionOnly === true)
+    prompt, cwd, signal, timeout, tool.id, sessionOnly === true, runnerEnvironment(confined.argv[0]))
   return {
     toolId: tool.id,
     mode: executionMode,

package/.dsh-plugin/shared/task-executors.mjs

@@ -254,6 +254,33 @@ function parseClaude(stdout) {
   return { ok: true, answer: result.result }
 }
 
+/** Short CLI name for messages: "Codex CLI" -> "Codex". */
+function shortLabel(label) {
+  return String(label ?? '官方 CLI').replace(/\s+CLI$/u, '')
+}
+
+/**
+ * Explicit failure text when a CLI exited without writing anything to stdout
+ * or stderr (whitespace-only counts as nothing), instead of a generic
+ * "incomplete answer" message that hides that the CLI never produced output.
+ */
+export function emptyOutputError(label, exitCode) {
+  return `${shortLabel(label)} 退出码 ${exitCode ?? '未知'}，无任何输出（stdout 与 stderr 均为空）。`
+}
+
+/** True when neither stream carries anything but whitespace. */
+export function outputIsEmpty(stdout, stderr) {
+  return !String(stdout ?? '').trim() && !String(stderr ?? '').trim()
+}
+
+/** First non-empty diagnostic from a signed-runner result (an empty stderr must not hide stdout). */
+export function verifiedDiagnostic(verified) {
+  for (const value of [verified?.detail, verified?.stderrTail, verified?.stdoutTail]) {
+    if (typeof value === 'string' && value.trim()) return value
+  }
+  return ''
+}
+
 function parseCodex(stdout) {
   let answer = ''
   let completed = false
@@ -695,7 +722,7 @@ export async function executeAssignedTask({
         route, task: prompt, signal, adapter, preference, exitCode: verified.exitCode ?? null,
         timedOut: verified.status === 'timed-out', attempted: true,
         reason: verified.error || verified.reason || '官方 CLI 执行失败，已回退模型目录 API。',
-        detail: redactDiagnostic(verified.detail ?? verified.stderrTail ?? verified.stdoutTail ?? '', childEnvironment(adapter, credentials, credentialMode).secret),
+        detail: redactDiagnostic(verifiedDiagnostic(verified), childEnvironment(adapter, credentials, credentialMode).secret),
         raw: [verified.error, verified.reason, verified.detail, verified.stderrTail, verified.stdoutTail].filter(item => typeof item === 'string').join('\n'),
       })
     }
@@ -738,7 +765,9 @@ export async function executeAssignedTask({
       raw: `${run.stdout.slice(-20_000)}\n${run.stderr.slice(-20_000)}`,
     })
   }
-  const parsed = parseAdapterOutput(adapter.format, run.stdout)
+  const parsed = outputIsEmpty(run.stdout, run.stderr)
+    ? { ok: false, error: emptyOutputError(adapter.label, run.exitCode) }
+    : parseAdapterOutput(adapter.format, run.stdout)
   if (!parsed.ok) {
     return useApi(apiFallback, {
       route, task: prompt, signal, adapter, preference, exitCode: run.exitCode, attempted: true,

package/CHANGELOG.md

@@ -1,5 +1,24 @@
 # Changelog
 
+## 0.13.3 — 2026-10-03
+
+Bug-fix release for DeepSeek Harness Desktop 0.2.0-rc.1 / 0.2.0-rc.2, published under the npm `next` and `latest` tags.
+
+**After updating, quit Harness completely (including the tray icon) and start it again.** A live patch reload does not replace plugin code that the running Host has already imported.
+
+### Fixed
+- On Harness Desktop for Windows, every official CLI run that went through the Harness process sandbox exited 0 with no output, so the step paused with "Codex 未返回完整成功终态和回答" and no model was called. The sandbox runner is started as `DeepSeek Harness.exe …/runner.js`, which needs `ELECTRON_RUN_AS_NODE=1`; the plugin's minimal CLI environment dropped it, so the executable started the desktop app instead, lost the single-instance lock and quit. The runner now gets that variable whenever it is the Electron executable.
+- Codex cannot start inside the Harness Windows sandbox at all: it must write `CODEX_HOME` (`~/.codex`) and the sandbox denies those writes (`failed to initialize in-process app-server client: … (os error 5)`). On Windows, Codex now skips the Harness sandbox and starts directly with its own `--sandbox read-only`. This is the launch the "不经沙箱启动 CLI" confirmation already describes.
+- A CLI that exits without writing anything to stdout or stderr is now reported as such, for example "Codex 退出码 0，无任何输出（stdout 与 stderr 均为空）。", instead of a generic "incomplete answer" message.
+
+## 0.13.2 — 2026-10-03
+
+Bug-fix release for DeepSeek Harness Desktop 0.2.0-rc.1 / 0.2.0-rc.2, published under the npm `next` and `latest` tags.
+
+### Fixed
+- Codex runs through the signed Windows runner failed in any workspace that is not a Git repository (for example a plain project folder chosen in the workbench). The step paused with "Codex 未返回完整成功终态和回答" and no model call was made. Codex 0.157.1 refuses such directories unless `--skip-git-repo-check` is passed (`Not inside a trusted directory and --skip-git-repo-check was not specified.`). The flag was only in the portable adapter; the signed runner now passes it too. Read-only runs stay confined by `--sandbox read-only` and the Harness process sandbox.
+- When Codex exits without a successful turn, the error now names the cause: an untrusted directory, or no JSON events at all (with the last CLI output line). The pause detail no longer comes out empty when stderr is empty but stdout has output.
+
 ## 0.13.1 — 2026-10-03
 
 Bug-fix release for DeepSeek Harness Desktop 0.2.0-rc.1 / 0.2.0-rc.2, published under the npm `next` and `latest` tags.

package/INSTALLATION_GUIDE.zh.md

@@ -8,7 +8,7 @@
 
 | 需求 | 添加插件输入框 | 安装后的入口 |
 | --- | --- | --- |
-| 分析复杂度、按质量和费用选模型、调用官方工具 | `@ljwei-stak/dsh-model-router@0.13.1` | 模型路由 |
+| 分析复杂度、按质量和费用选模型、调用官方工具 | `@ljwei-stak/dsh-model-router@0.13.3` | 模型路由 |
 | 剧情、立绘、音乐、存档、自由对话 | `@ljwei-stak/dsh-galgame@0.1.0` | Gal 模块 |
 | 两者都要 | 分别安装上面两个包 | 模型路由 + Gal 模块 |
 
@@ -22,7 +22,7 @@
 2. 在“包名、GitHub 仓库地址或本地目录路径”输入框填一个完整包名，例如：
 
    ```text
-   @ljwei-stak/dsh-model-router@0.13.1
+   @ljwei-stak/dsh-model-router@0.13.3
    ```
 
    只想安装 GAL 时填写：
@@ -38,7 +38,7 @@
    ```
 
 4. 核对预览的包名、版本和宿主兼容信息，安装并启用。有重启提示时重启桌面程序。
-5. 检查插件详情与侧边栏：路由应为 **0.13.1 / 模型路由**；GAL 应为 **0.1.0 / Gal 模块**。仅装路由时没有 GAL 入口是预期行为。
+5. 检查插件详情与侧边栏：路由应为 **0.13.3 / 模型路由**；GAL 应为 **0.1.0 / Gal 模块**。仅装路由时没有 GAL 入口是预期行为。
 
 普通用户无需 `npm install -g`，该命令不会把插件注册到当前 Harness profile。
 
@@ -46,13 +46,13 @@
 
 进入对应 Release 下载 `.tgz`：
 
-- [模型路由 v0.13.1](https://github.com/Alice-Marx/dsh-model-router/releases/tag/v0.13.1)
+- [模型路由 v0.13.3](https://github.com/Alice-Marx/dsh-model-router/releases/tag/v0.13.3)
 - [独立 GAL v0.1.0](https://github.com/Alice-Marx/deepseek-harness-galgame/releases/tag/v0.1.0)
 
 在“添加插件”填写下载文件的**绝对路径**，例如：
 
 ```text
-D:\Plugins\ljwei-stak-dsh-model-router-0.13.1.tgz
+D:\Plugins\ljwei-stak-dsh-model-router-0.13.3.tgz
 ```
 
 ```text
@@ -62,7 +62,7 @@ D:\Plugins\ljwei-stak-dsh-galgame-0.1.0.tgz
 如附有 `.sha256` 文件，用 PowerShell 计算并比较摘要：
 
 ```powershell
-Get-FileHash -Algorithm SHA256 -LiteralPath 'D:\Plugins\ljwei-stak-dsh-model-router-0.13.1.tgz'
+Get-FileHash -Algorithm SHA256 -LiteralPath 'D:\Plugins\ljwei-stak-dsh-model-router-0.13.3.tgz'
 Get-FileHash -Algorithm SHA256 -LiteralPath 'D:\Plugins\ljwei-stak-dsh-galgame-0.1.0.tgz'
 ```
 
@@ -72,7 +72,7 @@ Get-FileHash -Algorithm SHA256 -LiteralPath 'D:\Plugins\ljwei-stak-dsh-galgame-0
 
 1. 在旧合并插件的 GAL 播放器导出需要保留的剧情进度，并备份整个 Harness profile。每份 JSON 仅保存**当前剧情状态**，不含所有手动槽、设置、已读记录或本地音乐；重要槽位可依次读档再导出。
 2. 在**同一个 profile**安装独立 `@ljwei-stak/dsh-galgame@0.1.0`。
-3. 0.13.0 起包名改为 `@ljwei-stak/dsh-model-router`（旧包名最后版本为 0.13.0，内容相同，之后不再更新）：在插件管理器卸载原 `@ljwei-stak/model-router-galgame`（保留 profile 与应用数据），再添加 `@ljwei-stak/dsh-model-router@0.13.1`。不要两个同时安装（条目 id 与工具名相同）；条目 id 未变，路由设置与执行记录会保留。完成两项更新后再玩剧情，避免同时操作旧合并入口和新入口。
+3. 0.13.0 起包名改为 `@ljwei-stak/dsh-model-router`（旧包名最后版本为 0.13.0，内容相同，之后不再更新）：在插件管理器卸载原 `@ljwei-stak/model-router-galgame`（保留 profile 与应用数据），再添加 `@ljwei-stak/dsh-model-router@0.13.3`。不要两个同时安装（条目 id 与工具名相同）；条目 id 未变，路由设置与执行记录会保留。完成两项更新后再玩剧情，避免同时操作旧合并入口和新入口。
 4. 现在路由与 GAL 各有一个入口。独立 GAL 沿用旧存档 localStorage 键，核对当前进度和三槽；更换 profile 或进度未恢复时，先切换到匹配剧目，再导入 JSON 备份。
 5. 后续分别更新需要的插件；只用路由可以不启用或不安装 GAL。保留 profile 与应用数据，卸载插件时不要清理故事数据。
 
@@ -104,7 +104,7 @@ Claude、Codex、MiMo、Grok 支持只读或可编辑；Kimi、MiniMax、ZCode
 | 检查 | 预期 |
 | --- | --- |
 | 宿主版本 | 0.2.0-rc.1 或 0.2.0-rc.2；包括 `rc` 后缀。 |
-| 路由独立安装 | 0.13.1 详情、模型路由入口、目录和模型档案可用；不出现旧合并 GAL 入口。 |
+| 路由独立安装 | 0.13.3 详情、模型路由入口、目录和模型档案可用；不出现旧合并 GAL 入口。 |
 | GAL 独立安装 | 0.1.0 详情、Gal 模块入口、标题与两部核心剧情可用；不要求安装路由。 |
 | 共同安装 | 两个入口各一份，路由工具和 GAL 播放器均能使用。 |
 | 存档迁移 | 同 profile 可读旧键；跨 profile 用匹配剧目 JSON 导入；旧篇目的数据不覆盖。 |
@@ -116,7 +116,7 @@ Claude、Codex、MiMo、Grok 支持只读或可编辑；Kimi、MiniMax、ZCode
 
 ## 8. 开发者从完整源码构建
 
-路由仓库检出 `v0.13.1`；GAL 仓库检出 `v0.1.0`。使用 Node.js **22.19+** 与 pnpm，各自在根目录运行：
+路由仓库检出 `v0.13.3`；GAL 仓库检出 `v0.1.0`。使用 Node.js **22.19+** 与 pnpm，各自在根目录运行：
 
 ```powershell
 pnpm install --frozen-lockfile

package/MIGRATION.md

@@ -4,14 +4,14 @@
 
 | 插件 | 安装输入 | 所属项目 |
 | --- | --- | --- |
-| 模型路由 | `@ljwei-stak/dsh-model-router@0.13.1`（0.12.0 起独立；0.13.0 起改名） | [路由仓库](https://github.com/Alice-Marx/dsh-model-router)；旧包名 `@ljwei-stak/model-router-galgame` 最后版本为 0.13.0（与新包 0.13.0 内容相同），之后不再更新。 |
+| 模型路由 | `@ljwei-stak/dsh-model-router@0.13.3`（0.12.0 起独立；0.13.0 起改名） | [路由仓库](https://github.com/Alice-Marx/dsh-model-router)；旧包名 `@ljwei-stak/model-router-galgame` 最后版本为 0.13.0（与新包 0.13.0 内容相同），之后不再更新。 |
 | GAL | `@ljwei-stak/dsh-galgame@0.1.0` | [新 GAL 仓库](https://github.com/Alice-Marx/deepseek-harness-galgame)；独立安装与更新。 |
 
 路由 0.12.0 只注册**模型路由**侧边栏入口。剧情引擎、角色美术、音乐、存档与自由模式全部归独立 GAL；两个插件互不依赖。
 
 ## 0.13.0 包名变更
 
-0.13.0 起 npm 包名由 `@ljwei-stak/model-router-galgame` 改为 **`@ljwei-stak/dsh-model-router`**。旧包名的最后版本是 0.13.0（`next`；`latest` 仍为 0.4.32），内容与新包 `@ljwei-stak/dsh-model-router@0.13.1` 相同；旧包名之后不再更新，但不会被弃用或删除。已装旧包 0.13.0 的用户功能不缺，但应按下面步骤换到新包名以获得后续更新。
+0.13.0 起 npm 包名由 `@ljwei-stak/model-router-galgame` 改为 **`@ljwei-stak/dsh-model-router`**。旧包名的最后版本是 0.13.0（`next`；`latest` 仍为 0.4.32），内容与新包 `@ljwei-stak/dsh-model-router@0.13.3` 相同；旧包名之后不再更新，但不会被弃用或删除。已装旧包 0.13.0 的用户功能不缺，但应按下面步骤换到新包名以获得后续更新。
 
 - 插件管理器把两者视为不同的包，不能原地“更新”：先卸载旧包（保留 profile 与应用数据），再添加新包。
 - 不要同时安装：二者使用同一个 profile 条目 id `model-router-galgame` 和相同的 `model_router_*` 工具名。
@@ -22,7 +22,7 @@
 
 1. **升级前备份**：旧 GAL 播放器导出需要保留的进度 JSON，并备份 Harness profile。JSON 保存当前剧情状态，不包含全部槽位、设置、已读记录或音乐；重要手动槽可依次读取后导出。
 2. 在**同一个 Harness profile**安装 `@ljwei-stak/dsh-galgame@0.1.0`。
-3. 在官方插件管理器卸载原包 `@ljwei-stak/model-router-galgame`，再添加 `@ljwei-stak/dsh-model-router@0.13.1`。完成两项安装后再打开剧情，避免并行使用旧合并 GAL 与新 GAL 入口。
+3. 在官方插件管理器卸载原包 `@ljwei-stak/model-router-galgame`，再添加 `@ljwei-stak/dsh-model-router@0.13.3`。完成两项安装后再打开剧情，避免并行使用旧合并 GAL 与新 GAL 入口。
 4. 核对只有一个**模型路由**和一个**Gal 模块**入口。打开独立 GAL 检查当前进度、三槽及设置；同 profile 继续使用原 localStorage 键。
 5. 若使用不同 profile 或没有读到进度，在 GAL 选择匹配剧目，再导入保存的 JSON。导入上限 **2 MB**，确认后替换当前剧情进度。
 

package/README.md

@@ -6,7 +6,7 @@
 
 [简体中文说明](README.zh.md) · [Installation guide (Chinese)](INSTALLATION_GUIDE.zh.md) · [Migration guide](MIGRATION.md) · [GAL repository](https://github.com/Alice-Marx/deepseek-harness-galgame)
 
-> **Host compatibility:** both the router 0.13.1 and GAL 0.1.0 target DeepSeek Harness Desktop **0.2.0-rc.1 and 0.2.0-rc.2**. Use the exact installation versions below. Releases use npm's `next` tag while this host is a prerelease; a bare package name or a moving tag is not a version pin.
+> **Host compatibility:** both the router 0.13.3 and GAL 0.1.0 target DeepSeek Harness Desktop **0.2.0-rc.1 and 0.2.0-rc.2**. Use the exact installation versions below. Releases use npm's `next` tag while this host is a prerelease; a bare package name or a moving tag is not a version pin.
 
 ![Diagram of the local routing plan and official-tool execution](docs/assets/routing-workflow.svg)
 
@@ -35,7 +35,7 @@ In **DeepSeek Harness Desktop → Plugins → Add plugin**, enter one exact pack
 
 | What you want | Installation input | Repository |
 | --- | --- | --- |
-| Model routing and official tools | `@ljwei-stak/dsh-model-router@0.13.1` | [Model Router](https://github.com/Alice-Marx/dsh-model-router) |
+| Model routing and official tools | `@ljwei-stak/dsh-model-router@0.13.3` | [Model Router](https://github.com/Alice-Marx/dsh-model-router) |
 | GAL only, or GAL alongside the router | `@ljwei-stak/dsh-galgame@0.1.0` | [DeepSeek Harness GAL](https://github.com/Alice-Marx/deepseek-harness-galgame) |
 
 For npm installation, select the official **HTTPS** source `https://registry.npmjs.org/` if a mirror has not synchronized the exact version. Install, enable, and restart when prompted. Router details should show **0.13.0** and its sidebar **Model Router**; the separate GAL package adds **Gal Module**. Either package can be installed without the other. Global `npm install -g` does not register a plugin in your Desktop profile.
@@ -45,30 +45,30 @@ For npm installation, select the official **HTTPS** source `https://registry.npm
 The package was renamed in 0.13.0. The old name's last version is also 0.13.0, with identical content, so future updates only come under the new name. The plugin manager cannot update the old entry in place:
 
 1. Remove `@ljwei-stak/model-router-galgame` in the plugin manager (keep profile and application data).
-2. Add `@ljwei-stak/dsh-model-router@0.13.1` and restart when prompted.
+2. Add `@ljwei-stak/dsh-model-router@0.13.3` and restart when prompted.
 3. Do not keep both installed: they share the profile entry id `model-router-galgame` and the `model_router_*` tool names. Because the entry id is unchanged, router settings saved in the profile and the run history in `~/.dsh/model-router/state.json` carry over.
 
 ### Upgrade from the combined 0.11.x plugin
 
 1. Before upgrading, use the old GAL player's **Export save** for each story progress you want to keep, and back up the Harness profile. A JSON export contains the current story state, not all slots, settings, read history, or local audio.
 2. Install `@ljwei-stak/dsh-galgame@0.1.0` in the **same profile**.
-3. Remove the old `@ljwei-stak/model-router-galgame` plugin and add `@ljwei-stak/dsh-model-router@0.13.1` (see above). Finish both installations before continuing play; this removes the old combined GAL entry and leaves one entry from the independent GAL plugin.
+3. Remove the old `@ljwei-stak/model-router-galgame` plugin and add `@ljwei-stak/dsh-model-router@0.13.3` (see above). Finish both installations before continuing play; this removes the old combined GAL entry and leaves one entry from the independent GAL plugin.
 4. Open the new GAL entry and verify your progress. The standalone plugin retains the old localStorage keys in the same profile. For a different profile or a missing state, select the matching story and import the JSON backup.
 
 The standalone GAL core contains **Echo City: Main Saga** and **Old City Migration: The Unfinished Promise**. Previously separated stories remain in their source archive and are not shipped with either core plugin. See [migration notes](MIGRATION.md) for save limitations and older desktop integrations.
 
 ### Install a versioned release archive
 
-Download the `.tgz` attachment from the [router v0.13.0 release](https://github.com/Alice-Marx/dsh-model-router/releases/tag/v0.13.1) or [GAL v0.1.0 release](https://github.com/Alice-Marx/deepseek-harness-galgame/releases/tag/v0.1.0). Enter the downloaded file's absolute path, for example:
+Download the `.tgz` attachment from the [router v0.13.0 release](https://github.com/Alice-Marx/dsh-model-router/releases/tag/v0.13.3) or [GAL v0.1.0 release](https://github.com/Alice-Marx/deepseek-harness-galgame/releases/tag/v0.1.0). Enter the downloaded file's absolute path, for example:
 
 ```text
-D:\Plugins\ljwei-stak-dsh-model-router-0.13.1.tgz
+D:\Plugins\ljwei-stak-dsh-model-router-0.13.3.tgz
 ```
 
 Where a checksum sidecar is supplied, compare it with:
 
 ```powershell
-Get-FileHash -Algorithm SHA256 -LiteralPath 'D:\Plugins\ljwei-stak-dsh-model-router-0.13.1.tgz'
+Get-FileHash -Algorithm SHA256 -LiteralPath 'D:\Plugins\ljwei-stak-dsh-model-router-0.13.3.tgz'
 ```
 
 You can also extract the archive and enter its inner `package` directory, which contains `package.json` and `.dsh-plugin`. The download may be stored on your preferred drive; runtime data location is controlled by the Harness profile. Upgrade through the plugin manager without modifying `app.asar` or bypassing dependency checks.
@@ -77,7 +77,9 @@ You can also extract the archive and enter its inner `package` directory, which
 
 | Version | Intended host | Scope |
 | --- | --- | --- |
-| **Router 0.13.1** | **0.2.0-rc.1 / 0.2.0-rc.2** | Fixes workbench and `model_router_execute` runs failing with `cannot get property "credentials" without inject`. Exact npm version, `@next` or `@latest`. |
+| **Router 0.13.3** | **0.2.0-rc.1 / 0.2.0-rc.2** | Official CLI runs work on Harness Desktop for Windows (sandbox runner environment; Codex uses its own read-only sandbox). Restart Harness fully after updating. Exact npm version, `@next` or `@latest`. |
+| [Router 0.13.2](https://github.com/Alice-Marx/dsh-model-router/releases/tag/v0.13.2) | 0.2.0-rc.1 / 0.2.0-rc.2 | Codex in non-Git workspaces; sandboxed CLI runs on Desktop for Windows still produced no output. |
+| [Router 0.13.1](https://github.com/Alice-Marx/dsh-model-router/releases/tag/v0.13.1) | 0.2.0-rc.1 / 0.2.0-rc.2 | Fixed `cannot get property "credentials" without inject`; Codex refused non-Git workspaces on Windows. |
 | [Router 0.13.0](https://github.com/Alice-Marx/dsh-model-router/releases/tag/v0.13.0) | 0.2.0-rc.1 / 0.2.0-rc.2 | Health check, cost control, subscription-first billing, run history; runs fail in the Harness (fixed in 0.13.1). |
 | **GAL 0.1.0** | **0.2.0-rc.1 / 0.2.0-rc.2** | First standalone GAL package, two core stories. Exact npm version or `@next`. |
 | [Router 0.12.0](https://github.com/Alice-Marx/dsh-model-router/releases/tag/v0.12.0) | 0.2.0-rc.1 / 0.2.0-rc.2 | First independent router release (GAL split out). |

package/README.zh.md

@@ -6,7 +6,7 @@
 
 [English](README.md) · [安装与验证指南](INSTALLATION_GUIDE.zh.md) · [迁移说明](MIGRATION.md) · [独立 GAL 仓库](https://github.com/Alice-Marx/deepseek-harness-galgame)
 
-> **宿主版本：**模型路由 0.13.1 与 GAL 0.1.0 均声明支持 DeepSeek Harness Desktop **0.2.0-rc.1 和 0.2.0-rc.2**。宿主仍是预发布版本，本轮发布使用 npm `next` 标签；推荐精确版本安装，不要依赖裸包名或不断变化的标签。
+> **宿主版本：**模型路由 0.13.3 与 GAL 0.1.0 均声明支持 DeepSeek Harness Desktop **0.2.0-rc.1 和 0.2.0-rc.2**。宿主仍是预发布版本，本轮发布使用 npm `next` 标签；推荐精确版本安装，不要依赖裸包名或不断变化的标签。
 
 ![本地规划、按难度选模型与官方工具执行流程](docs/assets/routing-workflow.svg)
 
@@ -34,12 +34,12 @@
 
 | 安装内容 | 输入框填写 | GitHub 仓库 |
 | --- | --- | --- |
-| 模型路由、模型档案与官方工具 | `@ljwei-stak/dsh-model-router@0.13.1` | [Model Router](https://github.com/Alice-Marx/dsh-model-router) |
+| 模型路由、模型档案与官方工具 | `@ljwei-stak/dsh-model-router@0.13.3` | [Model Router](https://github.com/Alice-Marx/dsh-model-router) |
 | GAL 剧情、自由模式与播放器 | `@ljwei-stak/dsh-galgame@0.1.0` | [DeepSeek Harness GAL](https://github.com/Alice-Marx/deepseek-harness-galgame) |
 
 1. npm 安装源选择官方 **HTTPS** 地址 `https://registry.npmjs.org/`；国内镜像尚未同步时可改用此源或版本化 GitHub 安装包。
 2. 核对安装预览版本与宿主版本，安装并启用；有重启提示时重启。
-3. 路由详情应为 **0.13.1**，侧边栏显示 **模型路由**；独立 GAL 详情应为 **0.1.0**，另显示 **Gal 模块**。
+3. 路由详情应为 **0.13.3**，侧边栏显示 **模型路由**；独立 GAL 详情应为 **0.1.0**，另显示 **Gal 模块**。
 
 普通使用不需要 `npm install -g`：全局 npm 安装不会注册到当前 Harness profile。路由与 GAL 都可以不安装另一插件而运行。
 
@@ -49,30 +49,30 @@
 0.13.0 起包名改为 `@ljwei-stak/dsh-model-router`。旧包名的最后版本同样是 0.13.0，内容相同，之后的更新只发布到新包名。插件管理器无法原地更新旧条目：
 
 1. 在插件管理器卸载 `@ljwei-stak/model-router-galgame`（保留 profile 与应用数据）。
-2. 添加 `@ljwei-stak/dsh-model-router@0.13.1`，按提示重启。
+2. 添加 `@ljwei-stak/dsh-model-router@0.13.3`，按提示重启。
 3. 不要两个同时安装：二者使用相同的 profile 条目 id `model-router-galgame` 和相同的 `model_router_*` 工具名。条目 id 未变，所以 profile 中保存的路由设置以及 `~/.dsh/model-router/state.json` 里的执行记录会保留。
 
 ### 从合并版 0.11.x 升级
 
 1. **先备份**：旧版 GAL 中对需要保留的剧情进度使用“导出存档”，并备份 Harness profile。JSON 仅包含当前剧情状态，不包含全部手动槽、设置、已读记录与本地音乐。
 2. 在**同一个 profile**安装 `@ljwei-stak/dsh-galgame@0.1.0`。
-3. 在插件管理器卸载原 `@ljwei-stak/model-router-galgame`，再添加 `@ljwei-stak/dsh-model-router@0.13.1`（见上文“从旧包名升级”）。完成两项安装后再游玩；旧合并插件的 GAL 入口随路由升级移除，只留下新 GAL 插件的入口。
+3. 在插件管理器卸载原 `@ljwei-stak/model-router-galgame`，再添加 `@ljwei-stak/dsh-model-router@0.13.3`（见上文“从旧包名升级”）。完成两项安装后再游玩；旧合并插件的 GAL 入口随路由升级移除，只留下新 GAL 插件的入口。
 4. 打开独立 GAL 检查进度。它保留原 localStorage 存档键；更换 profile 或没有读到旧进度时，先选择对应剧目，再导入备份 JSON。
 
 独立 GAL 核心只内置**《回声之城·正篇》**和**《旧城迁移篇：未写完的约定》**。此前分出的其他篇目保留在源代码归档，不随这两个核心插件发布。完整迁移步骤见[迁移说明](MIGRATION.md)。
 
 ### 使用 GitHub 安装包
 
-从[路由 v0.13.0 Release](https://github.com/Alice-Marx/dsh-model-router/releases/tag/v0.13.1)或[GAL v0.1.0 Release](https://github.com/Alice-Marx/deepseek-harness-galgame/releases/tag/v0.1.0)下载 `.tgz`，在添加插件输入框填写文件绝对路径，例如：
+从[路由 v0.13.0 Release](https://github.com/Alice-Marx/dsh-model-router/releases/tag/v0.13.3)或[GAL v0.1.0 Release](https://github.com/Alice-Marx/deepseek-harness-galgame/releases/tag/v0.1.0)下载 `.tgz`，在添加插件输入框填写文件绝对路径，例如：
 
 ```text
-D:\Plugins\ljwei-stak-dsh-model-router-0.13.1.tgz
+D:\Plugins\ljwei-stak-dsh-model-router-0.13.3.tgz
 ```
 
 如附有 `.sha256` 校验文件，使用以下命令计算摘要并比较：
 
 ```powershell
-Get-FileHash -Algorithm SHA256 -LiteralPath 'D:\Plugins\ljwei-stak-dsh-model-router-0.13.1.tgz'
+Get-FileHash -Algorithm SHA256 -LiteralPath 'D:\Plugins\ljwei-stak-dsh-model-router-0.13.3.tgz'
 ```
 
 也可解压并填写内层含 `package.json` 和 `.dsh-plugin` 的 `package` 目录。安装包可放到自选磁盘；运行数据位置由宿主 profile 决定。不要改 `app.asar` 或绕过依赖检查。
@@ -81,7 +81,9 @@ Get-FileHash -Algorithm SHA256 -LiteralPath 'D:\Plugins\ljwei-stak-dsh-model-rou
 
 | 版本 | 声明的宿主 | 功能范围 |
 | --- | --- | --- |
-| **模型路由 0.13.1** | **0.2.0-rc.1 / rc.2** | 修复工作台执行与 `model_router_execute` 报错 `cannot get property "credentials" without inject`。推荐精确版本，也可用 `@next` / `@latest`。 |
+| **模型路由 0.13.3** | **0.2.0-rc.1 / rc.2** | 修复 Windows 版 Harness Desktop 中官方 CLI 执行无输出（沙箱启动器环境；Codex 改用自带只读沙箱）。更新后请完全重启 Harness。推荐精确版本，也可用 `@next` / `@latest`。 |
+| [模型路由 0.13.2](https://github.com/Alice-Marx/dsh-model-router/releases/tag/v0.13.2) | 0.2.0-rc.1 / rc.2 | Codex 支持非 Git 工作区；Windows Desktop 中经沙箱的 CLI 执行仍无输出。 |
+| [模型路由 0.13.1](https://github.com/Alice-Marx/dsh-model-router/releases/tag/v0.13.1) | 0.2.0-rc.1 / rc.2 | 修复 `cannot get property "credentials" without inject`；Windows 上 Codex 拒绝非 Git 工作区。 |
 | [模型路由 0.13.0](https://github.com/Alice-Marx/dsh-model-router/releases/tag/v0.13.0) | 0.2.0-rc.1 / rc.2 | 体检、成本控制、订阅优先、执行记录；在 Harness 中执行会失败（0.13.1 已修复）。 |
 | **GAL 0.1.0** | **0.2.0-rc.1 / rc.2** | 独立 GAL 首版，两部核心剧目。推荐精确版本。 |
 | [模型路由 0.12.0](https://github.com/Alice-Marx/dsh-model-router/releases/tag/v0.12.0) | 0.2.0-rc.1 / rc.2 | 首个独立路由版本（GAL 拆出）。 |

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ljwei-stak/dsh-model-router",
-  "version": "0.13.1",
+  "version": "0.13.3",
   "type": "module",
   "description": "Model Router for official DeepSeek Harness Desktop: cost-aware task routing, dependent work packages and official vendor CLI discovery, installation and execution. GAL is available separately as @ljwei-stak/dsh-galgame.",
   "repository": {