@ljwei-stak/dsh-model-router 0.14.0-beta.3 → 0.14.0

package/.dsh-plugin/shared/npm-attestation.mjs

@@ -0,0 +1,315 @@
+/**
+ * Registry-attested file digests for unsigned files shipped in official npm
+ * packages (MiMo's mimo.exe, Grok's grok.exe.br, MiniMax's cli.js).
+ *
+ * These vendors do not Authenticode-sign their binaries, so a publisher check
+ * is impossible. Instead of a per-version hash compiled into the plugin, the
+ * expected digest is derived at runtime from the official npm registry for the
+ * exact installed version: the version document (over TLS from
+ * registry.npmjs.org) gives the tarball's sha512 `dist.integrity`; the tarball
+ * (from npm's local cache when present, otherwise downloaded from the same
+ * registry) must match it; the file is then hashed straight out of the tarball.
+ * Installed files must equal those digests. Results are cached per
+ * package@version, so only the first use of a new version needs network.
+ */
+import { createHash } from 'node:crypto'
+import { createReadStream } from 'node:fs'
+import { mkdir, readFile, rename, writeFile } from 'node:fs/promises'
+import { homedir } from 'node:os'
+import { dirname, join } from 'node:path'
+import { Readable } from 'node:stream'
+import { createGunzip } from 'node:zlib'
+import { resolveStateHome } from './router-state.mjs'
+import { NPM_REGISTRY, isReleaseVersion } from './latest-versions.mjs'
+
+const PACKAGE_NAME = /^@[a-z0-9][a-z0-9._-]{0,100}\/[a-z0-9][a-z0-9._-]{0,100}$|^[a-z0-9][a-z0-9._-]{0,100}$/
+const MAX_TARBALL_BYTES = 400_000_000
+const METADATA_TIMEOUT_MS = 15_000
+const TARBALL_TIMEOUT_MS = 180_000
+/** Files that run as code: what the executor must not trust without attestation. */
+export const CODE_FILE = /\.(?:js|cjs|mjs|node|exe|dll|br|wasm)$/i
+
+export function attestationCachePath(env = process.env) {
+  return join(resolveStateHome(env), 'model-router', 'npm-attestations.json')
+}
+
+/** npm's content-addressed cache location for one sha512 integrity string. */
+export function npmCacheContentPath(cacheDir, integrity) {
+  const match = /^sha512-([A-Za-z0-9+/]+={0,2})$/.exec(String(integrity ?? ''))
+  if (!match || !cacheDir) return null
+  const hex = Buffer.from(match[1], 'base64').toString('hex')
+  if (hex.length !== 128) return null
+  return join(cacheDir, '_cacache', 'content-v2', 'sha512', hex.slice(0, 2), hex.slice(2, 4), hex.slice(4))
+}
+
+export function defaultNpmCacheDirectory(env = process.env, platform = process.platform) {
+  const configured = env.npm_config_cache ?? env.NPM_CONFIG_CACHE
+  if (typeof configured === 'string' && configured.trim()) return configured.trim()
+  if (platform === 'win32') return env.LOCALAPPDATA ? join(env.LOCALAPPDATA, 'npm-cache') : null
+  return join(homedir(), '.npm')
+}
+
+/** Parse one 512-byte tar header; returns null for the end-of-archive block. */
+function tarHeader(block) {
+  if (block.every(byte => byte === 0)) return null
+  const field = (start, length) => {
+    const raw = block.subarray(start, start + length)
+    const end = raw.indexOf(0)
+    return raw.subarray(0, end === -1 ? length : end).toString('utf8')
+  }
+  const sizeField = block.subarray(124, 136)
+  let size
+  if (sizeField[0] & 0x80) {
+    size = 0
+    for (let index = 1; index < 12; index += 1) size = size * 256 + sizeField[index]
+  } else {
+    size = Number.parseInt(field(124, 12).trim() || '0', 8)
+  }
+  const magic = field(257, 6)
+  const prefix = magic.startsWith('ustar') ? field(345, 155) : ''
+  const name = field(0, 100)
+  return { name: prefix ? `${prefix}/${name}` : name, size, type: String.fromCharCode(block[156] || 48) }
+}
+
+function paxPath(buffer) {
+  let offset = 0
+  while (offset < buffer.length) {
+    const space = buffer.indexOf(0x20, offset)
+    if (space === -1) break
+    const length = Number.parseInt(buffer.subarray(offset, space).toString('utf8'), 10)
+    if (!Number.isSafeInteger(length) || length <= 0) break
+    const record = buffer.subarray(space + 1, offset + length - 1).toString('utf8')
+    if (record.startsWith('path=')) return record.slice(5)
+    offset += length
+  }
+  return null
+}
+
+/**
+ * Stream a .tgz and return a Map of every regular member below `package/`
+ * (path relative to the package root) to { sha256: 'sha256-<base64>', size }.
+ */
+export async function digestTarMembers(tgzStream) {
+  const gunzip = tgzStream.pipe(createGunzip())
+  const members = new Map()
+  let pending = Buffer.alloc(0)
+  let state = { kind: 'header' }
+  let nextName = null
+  for await (const chunk of gunzip) {
+    pending = pending.length ? Buffer.concat([pending, chunk]) : chunk
+    for (;;) {
+      if (state.kind === 'done') break
+      if (state.kind === 'header') {
+        if (pending.length < 512) break
+        const header = tarHeader(pending.subarray(0, 512))
+        pending = pending.subarray(512)
+        if (!header) { state = { kind: 'done' }; break }
+        const padded = Math.ceil(header.size / 512) * 512
+        const name = nextName ?? header.name
+        nextName = null
+        if (header.type === 'x' || header.type === 'L') {
+          state = { kind: 'meta', type: header.type, remaining: header.size, skip: padded - header.size, parts: [] }
+        } else if (header.type === '0' || header.type === '\0') {
+          state = { kind: 'data', name, remaining: header.size, skip: padded - header.size, hash: createHash('sha256'), size: header.size }
+        } else {
+          state = { kind: 'skip', remaining: padded }
+        }
+        continue
+      }
+      if (state.kind === 'meta' || state.kind === 'data') {
+        if (state.remaining > 0) {
+          if (pending.length === 0) break
+          const take = Math.min(state.remaining, pending.length)
+          const piece = pending.subarray(0, take)
+          if (state.kind === 'meta') state.parts.push(Buffer.from(piece)); else state.hash.update(piece)
+          state.remaining -= take
+          pending = pending.subarray(take)
+          if (state.remaining > 0) break
+        }
+        if (state.kind === 'meta') {
+          const body = Buffer.concat(state.parts)
+          nextName = state.type === 'x' ? paxPath(body) : body.toString('utf8').replace(/\0+$/, '')
+        } else {
+          // npm packs every file under one top-level directory (usually "package/").
+          const relativePath = state.name.replace(/^\.?\/?[^/]+\//, '')
+          if (relativePath && !relativePath.split('/').includes('..')) {
+            members.set(relativePath, { sha256: `sha256-${state.hash.digest('base64')}`, size: state.size })
+          }
+        }
+        state = { kind: 'skip', remaining: state.skip }
+        continue
+      }
+      if (state.kind === 'skip') {
+        const take = Math.min(state.remaining, pending.length)
+        state.remaining -= take
+        pending = pending.subarray(take)
+        if (state.remaining > 0) break
+        state = { kind: 'header' }
+      }
+    }
+    if (state.kind === 'done') break
+  }
+  gunzip.destroy()
+  return members
+}
+
+async function sha512Of(stream) {
+  const hash = createHash('sha512')
+  for await (const chunk of stream) hash.update(chunk)
+  return `sha512-${hash.digest('base64')}`
+}
+
+/** Digest of a local file in the same `sha256-<base64>` form. */
+export async function localFileDigest(path) {
+  const hash = createHash('sha256')
+  let size = 0
+  for await (const chunk of createReadStream(path)) { hash.update(chunk); size += chunk.length }
+  return { sha256: `sha256-${hash.digest('base64')}`, size }
+}
+
+export function createNpmAttestor({
+  fetchImpl = (...args) => globalThis.fetch(...args),
+  cachePath = () => attestationCachePath(),
+  npmCacheDirectory = async () => defaultNpmCacheDirectory(),
+  now = Date.now,
+  persist = true,
+} = {}) {
+  let entries = null
+  const inflight = new Map()
+
+  async function load() {
+    if (entries) return entries
+    entries = {}
+    if (!persist) return entries
+    try {
+      const saved = JSON.parse(await readFile(cachePath(), 'utf8'))
+      if (saved?.entries && typeof saved.entries === 'object') {
+        for (const [key, value] of Object.entries(saved.entries)) {
+          if (value && typeof value.files === 'object' && /^sha512-/.test(value.integrity ?? '')) entries[key] = value
+        }
+      }
+    } catch { /* empty */ }
+    return entries
+  }
+
+  async function save() {
+    if (!persist) return
+    try {
+      const path = cachePath()
+      await mkdir(dirname(path), { recursive: true })
+      const temporary = `${path}.${process.pid}.tmp`
+      await writeFile(temporary, `${JSON.stringify({ version: 1, entries }, null, 2)}\n`, 'utf8')
+      await rename(temporary, path)
+    } catch { /* memory cache still applies */ }
+  }
+
+  async function registryTarball(name, version) {
+    const response = await fetchImpl(`${NPM_REGISTRY}/${name}/${version}`, {
+      headers: { accept: 'application/json' }, signal: AbortSignal.timeout(METADATA_TIMEOUT_MS),
+    })
+    if (!response?.ok) throw new Error(`npm 元数据 HTTP ${response?.status ?? '失败'}`)
+    const document = await response.json()
+    const integrity = document?.dist?.integrity
+    const tarball = document?.dist?.tarball
+    if (document?.name !== name || document?.version !== version || !/^sha512-[A-Za-z0-9+/]+={0,2}$/.test(integrity ?? '')) {
+      throw new Error('npm 元数据缺少 sha512 完整性信息')
+    }
+    const url = new URL(tarball)
+    if (url.protocol !== 'https:' || url.hostname !== 'registry.npmjs.org') throw new Error('npm tarball 不在官方 registry 上')
+    return { integrity, url: url.href }
+  }
+
+  async function verifiedTarballStream({ integrity, url }) {
+    const cached = npmCacheContentPath(await npmCacheDirectory().catch(() => null), integrity)
+    if (cached) {
+      try {
+        if (await sha512Of(createReadStream(cached)) === integrity) return createReadStream(cached)
+      } catch { /* not in npm's cache */ }
+    }
+    const response = await fetchImpl(url, { signal: AbortSignal.timeout(TARBALL_TIMEOUT_MS) })
+    if (!response?.ok || !response.body) throw new Error(`npm tarball HTTP ${response?.status ?? '失败'}`)
+    const chunks = []
+    let length = 0
+    const hash = createHash('sha512')
+    for await (const chunk of Readable.fromWeb(response.body)) {
+      length += chunk.length
+      if (length > MAX_TARBALL_BYTES) throw new Error('npm tarball 超出大小上限')
+      hash.update(chunk)
+      chunks.push(chunk)
+    }
+    if (`sha512-${hash.digest('base64')}` !== integrity) throw new Error('npm tarball 与 registry 完整性值不符')
+    return Readable.from([Buffer.concat(chunks)])
+  }
+
+  /** Every file of name@version → { sha256, size }, attested by the npm registry. */
+  async function attestPackage(name, version) {
+    if (!PACKAGE_NAME.test(String(name)) || !isReleaseVersion(version)) throw new TypeError('无效的 npm 包或版本')
+    const key = `${name}@${version}`
+    const cache = await load()
+    if (cache[key]) return cache[key]
+    if (inflight.has(key)) return inflight.get(key)
+    const pending = (async () => {
+      try {
+        const source = await registryTarball(name, version)
+        const members = await digestTarMembers(await verifiedTarballStream(source))
+        if (members.size === 0) throw new Error(`官方 npm 包 ${key} 为空`)
+        cache[key] = { integrity: source.integrity, attestedAt: now(), files: Object.fromEntries(members) }
+        await save()
+        return cache[key]
+      } finally {
+        inflight.delete(key)
+      }
+    })()
+    inflight.set(key, pending)
+    return pending
+  }
+
+  async function attest(name, version, path) {
+    if (typeof path !== 'string' || !path || path.split('/').includes('..')) throw new TypeError('无效的文件路径')
+    const entry = (await attestPackage(name, version)).files[path]
+    if (!entry) throw new Error(`官方 npm 包 ${name}@${version} 中没有 ${path}`)
+    return entry
+  }
+
+  return {
+    attest,
+    attestPackage,
+    /** Does one local file equal the registry-attested member? Never throws. */
+    async matches(localPath, name, version, path) {
+      try {
+        const expected = await attest(name, version, path)
+        const actual = await localFileDigest(localPath)
+        return actual.size === expected.size && actual.sha256 === expected.sha256
+          ? { ok: true, expected }
+          : { ok: false, reason: `本地文件与官方 npm ${name}@${version} 的 ${path} 摘要不符` }
+      } catch (error) {
+        return { ok: false, reason: String(error?.message ?? error).slice(0, 200) }
+      }
+    },
+    /**
+     * Compare every attested member selected by `include` (default: code files)
+     * with the installed package directory. Missing or different files fail.
+     */
+    async matchesPackage(packageRoot, name, version, include = CODE_FILE) {
+      try {
+        const { files } = await attestPackage(name, version)
+        const selected = Object.entries(files).filter(([path]) => include.test(path))
+        if (selected.length === 0) return { ok: false, reason: `官方 npm 包 ${name}@${version} 没有可核验的代码文件` }
+        for (const [path, expected] of selected) {
+          let actual
+          try { actual = await localFileDigest(join(packageRoot, ...path.split('/'))) }
+          catch { return { ok: false, reason: `已安装的 ${name}@${version} 缺少 ${path}` } }
+          if (actual.size !== expected.size || actual.sha256 !== expected.sha256) {
+            return { ok: false, reason: `已安装的 ${name}@${version} 中 ${path} 与官方 npm 发行文件不符` }
+          }
+        }
+        return { ok: true, files: selected.length }
+      } catch (error) {
+        return { ok: false, reason: String(error?.message ?? error).slice(0, 200) }
+      }
+    },
+    reset() { entries = null; inflight.clear() },
+  }
+}
+
+export const npmAttestor = createNpmAttestor()

package/.dsh-plugin/shared/official-tool-executor.mjs

@@ -14,7 +14,6 @@
  * https://moonshotai.github.io/kimi-code/en/reference/kimi-command.html
  */
 import { spawn } from 'node:child_process'
-import { createHash } from 'node:crypto'
 import { access, readFile, realpath, stat } from 'node:fs/promises'
 import { constants } from 'node:fs'
 import { StringDecoder } from 'node:string_decoder'
@@ -23,6 +22,8 @@ import { getOfficialTool, OFFICIAL_TOOLS } from './official-tool-registry.mjs'
 import { ensureNpmPrefixOnPath } from './official-tools-runtime.mjs'
 import { buildMiniMaxInvocation, createMiniMaxStreamParser } from './vendor-minimax-adapter.mjs'
 import { discoverZCodeBundle } from './zcode-bundle.mjs'
+import { npmAttestor } from './npm-attestation.mjs'
+import { compareReleaseVersions, isReleaseVersion } from './latest-versions.mjs'
 import { resolveMiMoGrokLaunch, createMiMoGrokParser } from './vendor-mimo-grok-adapter.mjs'
 import { emptyOutputError, outputIsEmpty, usageFromEvents, usageFromOutput } from './task-executors.mjs'
 
@@ -36,9 +37,6 @@ const STOP_GRACE_MS = 5_000
 const CLAUDE_MIN_RESTRICTED_VERSION = [2, 1, 259]
 const CLAUDE_SIGNER = 'Anthropic, PBC'
 const CODEX_SIGNER = 'OpenAI OpCo, LLC'
-// SHA-256 of package/cli.js in the official @minimax-ai/code@0.5.5 npm tarball.
-// The Windows installer-managed release carries the exact same entry file.
-const MINIMAX_055_CLI_SHA256 = '8d36dec74e93beddf392459557a7afd8655bcdc874121981608d2c82658814ab'
 const WINDOWS_SYSTEM32 = join(process.env.SystemRoot ?? 'C:\\Windows', 'System32')
 const ENVIRONMENT_KEYS = Object.freeze([
   'PATH', 'Path', 'PATHEXT', 'SystemRoot', 'windir', 'ComSpec',
@@ -201,19 +199,23 @@ async function findGlobalPackageEntries(packageName, binName, expectedBin, works
   return found
 }
 
-/** The official MiniMax Windows installer uses a versioned releases tree rather than npm -g. */
+/**
+ * The official MiniMax Windows installer uses a versioned releases tree rather
+ * than npm -g. Any release named by its `current` file is accepted, but every
+ * code file of that release must equal the official npm tarball of the same
+ * version (MiniMax does not sign its CLI, so the npm registry is the authority).
+ */
 export async function findManagedMiniMaxEntry(workspace,
   directories = pathDirectories().flatMap(directory => [directory, join(directory, '.minimax-code')]),
-  trustedCliSha256 = MINIMAX_055_CLI_SHA256) {
+  attestor = npmAttestor) {
   if (!IS_WINDOWS) return null
-  const version = getOfficialTool('minimax-code').version
   for (const directory of directories) {
     try {
       const root = await realpath(directory)
       if (root === workspace || inside(workspace, root)) continue
       if (!(await stat(join(root, 'mcode.cmd'))).isFile()) continue
-      const current = (await readFile(join(root, 'current'), 'utf8')).trim()
-      if (current !== version) continue
+      const version = (await readFile(join(root, 'current'), 'utf8')).trim()
+      if (!isReleaseVersion(version)) continue
       const releaseRoot = await realpath(join(root, 'releases', version))
       if (!inside(root, releaseRoot)) continue
       const packageRoot = await realpath(join(releaseRoot, 'node_modules', '@minimax-ai', 'code'))
@@ -223,17 +225,22 @@ export async function findManagedMiniMaxEntry(workspace,
         || String(manifest.bin?.mcode).replace(/^\.\//, '') !== 'cli.js') continue
       const entry = await realpath(join(packageRoot, 'cli.js'))
       if (!inside(packageRoot, entry) || !(await stat(entry)).isFile()) continue
-      const digest = createHash('sha256').update(await readFile(entry)).digest('hex')
-      if (digest !== trustedCliSha256) continue
+      const attested = await attestor.matchesPackage(packageRoot, '@minimax-ai/code', version)
+      if (!attested.ok) continue
       const native = await realpath(join(packageRoot, 'node_modules', 'better-sqlite3',
         'build', 'Release', 'better_sqlite3.node'))
       if (!inside(packageRoot, native) || !(await stat(native)).isFile()) continue
-      return { entry, packageRoot, version, source: 'verified-official-windows-installer-bundle' }
+      return { entry, packageRoot, version, source: 'official-windows-installer-npm-attested' }
     } catch { /* inspect the next PATH directory */ }
   }
   return null
 }
 
+/** Newest installed copy first; versions are not pinned. */
+function newestFirst(entries) {
+  return [...entries].sort((left, right) => (compareReleaseVersions(right.version, left.version) ?? 0))
+}
+
 async function findCodexExecutable(workspace) {
   await ensureNpmPrefixOnPath()
   const filename = IS_WINDOWS ? 'codex.exe' : 'codex'
@@ -304,6 +311,17 @@ async function findSignedPackagedCodex(packageRoot, workspace) {
   } catch { return null }
 }
 
+/**
+ * Publisher-only acceptance: a valid Authenticode signature whose signer is the
+ * vendor. No version or file hash is involved, so newer releases are accepted.
+ */
+export function signatureAccepted(signature, expectedSigner) {
+  return signature?.status === 'Valid' && typeof expectedSigner === 'string' && expectedSigner.length > 0
+    && String(signature.subject ?? '').includes(expectedSigner)
+}
+
+export const OFFICIAL_SIGNERS = Object.freeze({ codex: CODEX_SIGNER, 'claude-code': CLAUDE_SIGNER })
+
 /** PATH or package metadata alone is insufficient: verify the Windows EXE publisher. */
 function hasOfficialWindowsSignature(entry, expectedSigner) {
   // Some launch environments inherit a PowerShell module path where the
@@ -342,7 +360,7 @@ function hasOfficialWindowsSignature(entry, expectedSigner) {
       if (code !== 0) { settle(false); return }
       try {
         const signature = JSON.parse(output.trim().replace(/^\uFEFF/, ''))
-        settle(signature.status === 'Valid' && String(signature.subject).includes(expectedSigner))
+        settle(signatureAccepted(signature, expectedSigner))
       } catch { settle(false) }
     })
   })
@@ -402,8 +420,8 @@ async function launchSpec(toolId, workspace, mode, modelId, task = 'Check readin
   if (toolId === 'kimi-code') {
     const tool = getOfficialTool(toolId)
     const entries = await findGlobalPackageEntries(tool.package, 'kimi', 'dist/main.mjs', workspace)
-    const found = entries.find(entry => entry.version === tool.version)
-    if (!found) return { unsupported: `未找到固定版本 ${tool.package}@${tool.version} 的官方入口。` }
+    const found = newestFirst(entries)[0]
+    if (!found) return { unsupported: `未找到官方 npm 包 ${tool.package} 的 kimi 入口（dist/main.mjs）。` }
     const nodeExecutable = await findNodeExecutable(workspace)
     if (!nodeExecutable) return { unsupported: '未找到工作区外的 Node.js 可执行文件。' }
     if (Buffer.byteLength(task, 'utf8') > 16_000) {
@@ -419,9 +437,8 @@ async function launchSpec(toolId, workspace, mode, modelId, task = 'Check readin
   if (toolId === 'minimax-code') {
     const tool = getOfficialTool(toolId)
     const entries = await findGlobalPackageEntries(tool.package, 'mcode', 'cli.js', workspace)
-    const found = entries.find(entry => entry.version === tool.version)
-      ?? await findManagedMiniMaxEntry(workspace)
-    if (!found) return { unsupported: `未找到固定版本 ${tool.package}@${tool.version} 的官方入口。` }
+    const found = newestFirst(entries)[0] ?? await findManagedMiniMaxEntry(workspace)
+    if (!found) return { unsupported: `未找到官方 npm 包 ${tool.package} 的 mcode 入口（cli.js）。` }
     const nodeExecutable = await findNodeExecutable(workspace, [22, 19, 0], version => {
       const major = Number(String(version).split('.')[0])
       return major === 22 || (major >= 24 && major < 27)
@@ -444,7 +461,7 @@ async function launchSpec(toolId, workspace, mode, modelId, task = 'Check readin
   }
   if (toolId === 'zcode') {
     const found = await discoverZCodeBundle()
-    if (!found) return { unsupported: '未找到已签名、版本匹配且 CLI 脚本哈希正确的 ZCode 桌面版。' }
+    if (!found) return { unsupported: '未找到具有智谱有效签名、且 CLI 脚本与首次核验记录一致的 ZCode 桌面版。' }
     const nodeExecutable = await findNodeExecutable(workspace, [24, 14, 0], version =>
       Number(String(version).split('.')[0]) === 24)
     if (!nodeExecutable) return { unsupported: '未找到工作区外的 Node.js 可执行文件。' }
@@ -458,7 +475,7 @@ async function launchSpec(toolId, workspace, mode, modelId, task = 'Check readin
       format: 'zcode-stream-json', source: found.source, stdinTask: false,
       requestedModel: null,
       modelNotice: modelId
-        ? 'ZCode 3.14.3 的 CLI 没有 --model 参数；本次使用 ZCode 已配置的默认模型，不能保证与 Harness 建议模型一致。'
+        ? 'ZCode 的 CLI 没有 --model 参数；本次使用 ZCode 已配置的默认模型，不能保证与 Harness 建议模型一致。'
         : '本次使用 ZCode 已配置的默认模型。',
     }
   }

package/.dsh-plugin/shared/official-tool-registry.mjs

@@ -3,9 +3,12 @@
  * (probe + install) and the Desktop panel (display). Pure data: no Node or
  * browser APIs, so both sides and the test suite import it unchanged.
  *
- * The registry is fail-closed by design: versions and installer sources are
- * pinned to the releases checked for this registry, and clients can only name a
- * registry id — never an arbitrary package or command.
+ * The registry is fail-closed by design: installer sources are fixed (the
+ * official npm registry, the vendor's signed installer) and clients can only
+ * name a registry id — never an arbitrary package or command. Versions are not
+ * pinned: installs take each vendor's latest release (`@latest`), and the
+ * executor trusts entries by publisher signature or registry-attested digest
+ * rather than by version.
  */
 
 export const OFFICIAL_TOOLS = Object.freeze([
@@ -15,9 +18,8 @@ export const OFFICIAL_TOOLS = Object.freeze([
     vendor: 'Moonshot AI',
     purpose: 'Kimi 官方编程 CLI，提供 kimi 命令与 ACP 会话。',
     package: '@moonshot-ai/kimi-code',
-    version: '2.1.1',
     manager: 'npm',
-    installArgs: ['install', '-g', '@moonshot-ai/kimi-code@2.1.1', '--registry=https://registry.npmjs.org/'],
+    installArgs: ['install', '-g', '@moonshot-ai/kimi-code@latest', '--registry=https://registry.npmjs.org/'],
     probeExecutables: ['kimi'],
     probeNote: 'kimi 与旧 Python 版 kimi-cli 同名；请核对可执行文件来源和版本。',
     providerHints: ['moonshot', 'kimi'],
@@ -28,9 +30,8 @@ export const OFFICIAL_TOOLS = Object.freeze([
     vendor: 'Anthropic',
     purpose: 'Anthropic 官方编程 CLI，提供 claude 命令。',
     package: '@anthropic-ai/claude-code',
-    version: '2.1.283',
     manager: 'npm',
-    installArgs: ['install', '-g', '@anthropic-ai/claude-code@2.1.283', '--registry=https://registry.npmjs.org/'],
+    installArgs: ['install', '-g', '@anthropic-ai/claude-code@latest', '--registry=https://registry.npmjs.org/'],
     probeExecutables: ['claude'],
     providerHints: ['anthropic', 'claude'],
   }),
@@ -40,11 +41,10 @@ export const OFFICIAL_TOOLS = Object.freeze([
     vendor: 'OpenAI',
     purpose: 'OpenAI 官方编程 CLI，提供 codex 命令。',
     package: '@openai/codex',
-    version: '0.157.1',
-    installArgs: ['install', '-g', '@openai/codex@0.157.1', '--registry=https://registry.npmjs.org/'],
+    installArgs: ['install', '-g', '@openai/codex@latest', '--registry=https://registry.npmjs.org/'],
     manager: 'npm',
     probeExecutables: ['codex'],
-    probeNote: 'Codex 版本横幅由适配层宽匹配；安装时固定版本。',
+    probeNote: 'Codex 版本横幅由适配层宽匹配；安装时取 npm 最新版。',
     providerHints: ['openai', 'gpt', 'codex'],
   }),
   Object.freeze({
@@ -53,9 +53,8 @@ export const OFFICIAL_TOOLS = Object.freeze([
     vendor: 'MiniMax',
     purpose: 'MiniMax 官方编程 CLI，提供 mcode 命令。',
     package: '@minimax-ai/code',
-    version: '0.5.5',
     manager: 'npm',
-    installArgs: ['install', '-g', '@minimax-ai/code@0.5.5', '--registry=https://registry.npmjs.org/', '--ignore-scripts=false', '--include=optional', '--allow-scripts=@minimax-ai/code,better-sqlite3'],
+    installArgs: ['install', '-g', '@minimax-ai/code@latest', '--registry=https://registry.npmjs.org/', '--ignore-scripts=false', '--include=optional', '--allow-scripts=@minimax-ai/code,better-sqlite3'],
     probeExecutables: ['mcode'],
     providerHints: ['minimax'],
   }),
@@ -65,9 +64,8 @@ export const OFFICIAL_TOOLS = Object.freeze([
     vendor: 'XiaoMi',
     purpose: '小米 MiMo 官方编程 CLI，提供 mimo 命令。',
     package: '@mimo-ai/cli',
-    version: '0.1.15',
     manager: 'npm',
-    installArgs: ['install', '-g', '@mimo-ai/cli@0.1.15', '--registry=https://registry.npmjs.org/'],
+    installArgs: ['install', '-g', '@mimo-ai/cli@latest', '--registry=https://registry.npmjs.org/'],
     probeExecutables: ['mimo'],
     providerHints: ['mimo', 'xiaomi'],
   }),
@@ -77,9 +75,8 @@ export const OFFICIAL_TOOLS = Object.freeze([
     vendor: 'xAI',
     purpose: 'xAI 官方编程 CLI，提供 grok 命令与 ACP 会话。',
     package: '@xai-official/grok',
-    version: '1.0.41',
     manager: 'npm',
-    installArgs: ['install', '-g', '@xai-official/grok@1.0.41', '--registry=https://registry.npmjs.org/'],
+    installArgs: ['install', '-g', '@xai-official/grok@latest', '--registry=https://registry.npmjs.org/'],
     probeExecutables: ['grok'],
     providerHints: ['xai', 'grok'],
   }),
@@ -89,9 +86,8 @@ export const OFFICIAL_TOOLS = Object.freeze([
     vendor: 'Google',
     purpose: 'Google 官方 Gemini CLI，无界面模式使用 gemini -p。',
     package: '@google/gemini-cli',
-    version: '0.62.0',
     manager: 'npm',
-    installArgs: ['install', '-g', '@google/gemini-cli@0.62.0', '--registry=https://registry.npmjs.org/'],
+    installArgs: ['install', '-g', '@google/gemini-cli@latest', '--registry=https://registry.npmjs.org/'],
     probeExecutables: ['gemini'],
     providerHints: ['gemini', 'google'],
     // Headless runs go through the task adapter. The signed sandbox runner does
@@ -103,7 +99,6 @@ export const OFFICIAL_TOOLS = Object.freeze([
     label: 'ZCode',
     vendor: 'Z.ai',
     purpose: '智谱官方 ZCode 桌面版，内含 GLM 编程代理。Windows 安装器可选择 D 盘目录。',
-    version: '3.14.3',
     manager: 'signed-windows-installer',
     installArgs: [],
     probeExecutables: [],