@ljwei-stak/dsh-model-router 0.17.0 → 0.17.1

package/.dsh-plugin/shared/official-tools-runtime.mjs

@@ -23,6 +23,7 @@ import {
   OFFICIAL_TOOLS,
 } from './official-tool-registry.mjs'
 import {
+  minimaxScriptRegistry,
   resolveInstallLocation,
   resolveInstallPlan,
   resolveUninstallPlan,
@@ -39,7 +40,9 @@ const OUTPUT_LINE_CAP = 120
 const IS_WINDOWS = process.platform === 'win32'
 const CREATE_NO_WINDOW = 0x0800_0000
 const MINIMAX_INSTALLER_URL = 'https://filecdn.minimax.chat/public/install.ps1'
-const MAX_INSTALLER_BYTES = 200_000
+// Codex's Windows installer is already ~70KB and MiniMax's is ~57KB. 1MiB still
+// rejects an HTML error page or a substituted archive.
+const MAX_INSTALLER_BYTES = 1_048_576
 /** Windows ships where.exe in System32; POSIX which is ubiquitous. */
 const LOCATOR = IS_WINDOWS ? 'where' : 'which'
 /** Cached probe results keep plan generation fast; installs invalidate them. */
@@ -128,11 +131,16 @@ export function staleInstallMessage(label, installedVersion, latestVersion) {
  * Which updater to run. `order` is compareReleaseVersions(installed, latest):
  * -1 older, 0 same, 1 newer, null when either version is unknown.
  */
-export function officialUpdatePlan({ toolId, installed, order, platform }) {
+export function officialUpdatePlan({ toolId, installed, order, platform, methodId }) {
   if (installed && order === 1) return 'refuse-downgrade'
   if (installed && order === 0) return 'already-current'
   if (installed && order === -1 && toolId === 'claude-code') return 'claude-update-then-registry'
   if (installed && (order === -1 || order === null) && toolId === 'minimax-code' && platform === 'win32') {
+    // npm/pnpm is the method the user picked, so that command runs first. The
+    // official Windows installer stays the fallback when that copy does not
+    // advance, and it is the direct plan when no package manager was named
+    // (the historical one-click update of an official-layout install).
+    if (methodId === 'npm' || methodId === 'pnpm') return 'registry-install'
     return 'minimax-official-installer'
   }
   return 'registry-install'
@@ -237,20 +245,62 @@ function runCapture(executable, args, { timeoutMs, onOutput, useShell = false, s
   })
 }
 
+/**
+ * Decode installer bytes the way a terminal would. The MiniMax CDN serves the
+ * PowerShell script as `application/octet-stream` UTF-8; a UTF-16 copy (BOM or
+ * null-padded) is the same script and must not be rejected as a mismatch.
+ */
+export function installerScriptText(source) {
+  return decodeProcessOutput(Buffer.isBuffer(source) ? source : Buffer.from(source ?? '')).replace(/^\uFEFF/, '')
+}
+
+/**
+ * An HTML/XML document is not an installer. PowerShell comment-based help
+ * starts with `<#`, which is not a tag: the published MiniMax, Kimi and MiMo
+ * Windows scripts all open that way. Treating every leading `<` as HTML
+ * rejected those official scripts.
+ */
+export function isMarkupDocument(text) {
+  const head = String(text ?? '').replace(/^\uFEFF/, '').trimStart()
+  if (!head.startsWith('<')) return false
+  if (head.startsWith('<#')) return false
+  return /^<(?:!|\?|[A-Za-z])/.test(head)
+}
+
+const MINIMAX_INSTALLER_MARKERS = Object.freeze(['@minimax-ai/code', 'MCODE_INSTALL_DIR', 'MiniMax Code'])
+
 /**
  * MiniMax's official Windows installer script is run as published (it installs
- * `@minimax-ai/code@latest`). Only structural sanity is checked: it must be the
- * MiniMax Code installer, not an HTML error page or another script.
+ * `@minimax-ai/code@latest`). Structural checks only: the vendor's own markers,
+ * and a refusal of HTML/XML. Content-Type is not consulted — the CDN labels
+ * the real script `application/octet-stream`.
  */
 export function officialMiniMaxInstaller(source) {
-  const bytes = Buffer.isBuffer(source) ? source : Buffer.from(source)
-  const text = bytes.toString('utf8').replace(/^\uFEFF/, '')
-  if (!text.includes('@minimax-ai/code') || /^\s*</.test(text)) {
-    throw new Error('下载内容不是 MiniMax Code 官方 Windows 安装脚本，已拒绝执行。')
+  const text = installerScriptText(source)
+  if (!text.trim()) throw new Error('下载内容为空，已拒绝执行。')
+  if (isMarkupDocument(text)) {
+    throw new Error('下载内容不是 MiniMax Code 官方 Windows 安装脚本（收到 HTML 页面），已拒绝执行。')
+  }
+  const missing = MINIMAX_INSTALLER_MARKERS.filter(marker => !text.includes(marker))
+  if (missing.length) {
+    throw new Error(`下载内容不是 MiniMax Code 官方 Windows 安装脚本（缺少 ${missing.join('、')}），已拒绝执行。`)
   }
   return text
 }
 
+/**
+ * Directory the Windows installer must use. A configured path wins. Otherwise
+ * an already-installed official layout is updated in place. With neither, the
+ * vendor default is `%USERPROFILE%\.minimax-code` — not the npm prefix.
+ */
+export function minimaxOfficialInstallDir(preferences = {}, home = homedir(), existingRoot = '') {
+  const configured = String(preferences?.installDir ?? '').trim()
+  if (configured) return configured
+  const existing = String(existingRoot ?? '').trim()
+  if (existing) return existing
+  return join(home, '.minimax-code')
+}
+
 async function fetchOfficialMiniMaxInstaller(signal) {
   const response = await fetch(MINIMAX_INSTALLER_URL, {
     signal: signal ? AbortSignal.any([signal, AbortSignal.timeout(30_000)]) : AbortSignal.timeout(30_000),
@@ -266,30 +316,50 @@ async function fetchOfficialMiniMaxInstaller(signal) {
   return officialMiniMaxInstaller(Buffer.concat(chunks))
 }
 
+async function existingMiniMaxInstallRoot() {
+  const paths = (process.env.PATH ?? '').split(IS_WINDOWS ? ';' : ':').filter(Boolean)
+  const candidates = []
+  for (const directory of paths) candidates.push(directory, join(directory, '.minimax-code'))
+  candidates.push(join(homedir(), '.minimax-code'))
+  const seen = new Set()
+  for (const directory of candidates) {
+    const key = directory.toLowerCase()
+    if (seen.has(key)) continue
+    seen.add(key)
+    try {
+      if (!(await stat(join(directory, 'mcode.cmd'))).isFile()) continue
+      if (!(await stat(join(directory, 'current'))).isFile()) continue
+      return await realpath(directory)
+    } catch { /* try the next candidate */ }
+  }
+  return ''
+}
+
 async function runOfficialMiniMaxInstaller(job, { reason } = {}) {
   let staging = null
-  let prefixRoot = null
+  let stagingParent = null
   try {
     job.finishedAt = null
     job.error = null
     job.phase = 'downloading-and-verifying'
     pushLine(job, reason || '— npm 原生依赖未就绪；改用 MiniMax 官方 Windows 安装脚本（安装最新版）—')
-    const prefixResult = await runCapture('npm', ['config', 'get', 'prefix'], {
-      timeoutMs: 5_000, useShell: true, signal: job.controller.signal,
-    })
-    const rawPrefix = prefixResult.stdout.trim().replace(/^\\\\\?\\/, '')
-    if (!prefixResult.ok || !isAbsolute(rawPrefix)) throw new Error('无法确定 npm 全局安装目录。')
-    await mkdir(rawPrefix, { recursive: true })
-    prefixRoot = await realpath(rawPrefix)
+    const existingRoot = preferences.installDir ? '' : await existingMiniMaxInstallRoot()
+    const installDir = minimaxOfficialInstallDir(preferences, homedir(), existingRoot)
+    pushLine(job, preferences.installDir
+      ? `— 使用已配置的安装目录：${installDir} —`
+      : existingRoot
+        ? `— 未配置统一安装目录，沿用已安装的官方目录：${installDir} —`
+        : `— 未配置统一安装目录，使用 MiniMax 官方默认位置：${installDir} —`)
+    await mkdir(installDir, { recursive: true })
+    stagingParent = await realpath(installDir)
     const script = await fetchOfficialMiniMaxInstaller(job.controller.signal)
-    staging = await mkdtemp(join(prefixRoot, '.model-router-minimax-installer-'))
+    staging = await mkdtemp(join(stagingParent, '.model-router-minimax-installer-'))
     const scriptPath = join(staging, 'install.ps1')
     const tempPath = join(staging, 'temp')
     await mkdir(tempPath)
     // Windows PowerShell 5 reads a BOM-less .ps1 using the system ANSI page.
     // The upstream installer contains Unicode art, so write a UTF-8 BOM.
     await writeFile(scriptPath, `\uFEFF${script}`, 'utf8')
-    const installDir = join(prefixRoot, '.minimax-code')
     const powershell = join(process.env.SystemRoot ?? 'C:\\Windows', 'System32',
       'WindowsPowerShell', 'v1.0', 'powershell.exe')
     const utilityModule = join(process.env.SystemRoot ?? 'C:\\Windows', 'System32',
@@ -299,13 +369,17 @@ async function runOfficialMiniMaxInstaller(job, { reason } = {}) {
       + 'Import-Module -Name $env:MODEL_ROUTER_UTILITY_MODULE -ErrorAction Stop; '
       + '& $env:MODEL_ROUTER_MINIMAX_INSTALL_SCRIPT'
     job.phase = 'installing'
+    const scriptRegistry = minimaxScriptRegistry(preferences.registry || 'https://registry.npmjs.org/')
+    if (!scriptRegistry && preferences.registry) {
+      pushLine(job, '— MiniMax 官方脚本不接受当前 npm 源，本次使用脚本自己的默认源 —')
+    }
     const outcome = await runCapture(powershell,
       ['-NoProfile', '-NonInteractive', '-ExecutionPolicy', 'Bypass', '-Command', command], {
         timeoutMs: INSTALL_TIMEOUT_MS, signal: job.controller.signal,
         env: { ...process.env, MCODE_INSTALL_DIR: installDir,
-          MCODE_NO_MODIFY_PATH: '1', MCODE_DOWNLOAD_MIRROR: 'global',
-          MCODE_NPM_REGISTRY: 'https://registry.npmjs.org/',
-          npm_config_cache: join(prefixRoot, '.model-router-npm-cache'),
+          MCODE_NO_MODIFY_PATH: '1',
+          ...(scriptRegistry ? { MCODE_NPM_REGISTRY: scriptRegistry } : {}),
+          npm_config_cache: join(staging, 'npm-cache'),
           TEMP: tempPath, TMP: tempPath,
           MODEL_ROUTER_UTILITY_MODULE: utilityModule,
           MODEL_ROUTER_MINIMAX_INSTALL_SCRIPT: scriptPath },
@@ -319,8 +393,7 @@ async function runOfficialMiniMaxInstaller(job, { reason } = {}) {
     if (!outcome.ok) throw new Error(outcome.timedOut
       ? '官方安装脚本超时并已终止。'
       : `官方安装脚本退出码 ${outcome.code ?? '信号终止'}。${outcome.stderr.split('\n').find(Boolean)?.slice(0, 180) ?? ''}`)
-    const currentPath = process.env.PATH ?? ''
-    if (!currentPath.split(';').includes(installDir)) process.env.PATH = `${currentPath};${installDir}`
+    appendToProcessPath(installDir)
     job.phase = 'verifying'
     probeCache.delete(job.tool.id)
     const probe = await probeToolWith(job.tool, defaultRunner)
@@ -342,9 +415,9 @@ async function runOfficialMiniMaxInstaller(job, { reason } = {}) {
     job.error = `MiniMax 官方安装兜底失败：${String(error?.message ?? error).slice(0, 300)}`
     job.finishedAt = new Date().toISOString()
   } finally {
-    if (staging && prefixRoot) {
-      const part = relative(prefixRoot, staging)
-      if (part.startsWith('.model-router-minimax-installer-') && !part.includes(sep)) {
+    if (staging && stagingParent) {
+      const part = relative(stagingParent, staging)
+      if (part.startsWith('.model-router-minimax-installer-') && !part.includes(sep) && !part.startsWith('..')) {
         await rm(staging, { recursive: true, force: true }).catch(() => {})
       }
     }
@@ -359,10 +432,9 @@ async function runOfficialMiniMaxInstaller(job, { reason } = {}) {
  * different program.
  */
 export function verifiedVendorScript(source, verify = {}) {
-  const bytes = Buffer.isBuffer(source) ? source : Buffer.from(source)
-  const text = bytes.toString('utf8').replace(/^\uFEFF/, '')
+  const text = installerScriptText(source)
   if (!text.trim()) throw new Error('下载内容为空，已拒绝执行。')
-  if (/^\s*</.test(text)) throw new Error('下载内容不是安装脚本（收到 HTML 页面），已拒绝执行。')
+  if (isMarkupDocument(text)) throw new Error('下载内容不是安装脚本（收到 HTML 页面），已拒绝执行。')
   // Check "wrong vendor" first: a mirror that substituted another installer is
   // a different diagnosis from a truncated download, and the clearer one.
   const foreign = (verify.mustNotInclude ?? []).filter(marker => text.includes(marker))
@@ -441,7 +513,13 @@ async function runVendorScriptInstallJob(job, plan) {
         : `官方安装脚本退出码 ${outcome.code ?? '信号终止'}。${String(outcome.stderr ?? '').split('\n').find(Boolean)?.slice(0, 200) ?? ''}`)
     }
     const location = resolveInstallLocation(job.tool, plan.method, preferences, currentInstallOptions())
-    if (location?.dir) appendToProcessPath(location.dir)
+    if (location?.dir) {
+      appendToProcessPath(location.dir)
+      for (const relative of location.relatives ?? []) {
+        const folder = String(relative).split(/[\\/]/).slice(0, -1).filter(Boolean).join(sep)
+        if (folder) appendToProcessPath(join(location.dir, folder))
+      }
+    }
     job.phase = 'verifying'
     probeCache.delete(job.tool.id)
     const probe = await probeToolWith(job.tool, defaultRunner, { cacheMs: 0 })
@@ -473,6 +551,15 @@ async function runVendorScriptInstallJob(job, plan) {
  * the file must sit inside that tool's install directory, and it can never be a
  * home directory or a filesystem root.
  */
+/** One relative path under an install directory. `..` never leaves that directory. */
+export function scriptBinaryCandidate(installDir, relative) {
+  const parts = String(relative ?? '').split(/[\\/]/).filter(Boolean)
+  if (parts.length === 0 || parts.some(part => part === '.' || part === '..')) {
+    throw new Error('拒绝删除安装目录之外的文件。')
+  }
+  return join(installDir, ...parts)
+}
+
 export function checkedRemovableFile(candidate, { allowedNames, installDir, home = homedir() }) {
   const target = resolve(candidate)
   const base = target.split(sep).pop() ?? ''
@@ -502,8 +589,9 @@ async function runVendorScriptUninstallJob(job, plan) {
     job.phase = 'removing'
     const location = resolveInstallLocation(job.tool, plan.method, preferences, currentInstallOptions())
     const removed = []
-    for (const binary of location?.binaries ?? []) {
-      const candidate = join(location.dir, binary)
+    const relatives = location?.relatives?.length ? location.relatives : (location?.binaries ?? [])
+    for (const relative of relatives) {
+      const candidate = scriptBinaryCandidate(location.dir, relative)
       // checkedRemovableFile re-checks the basename, the install directory and
       // the root/home guards even though every part came from the registry.
       const target = checkedRemovableFile(candidate, {
@@ -624,9 +712,18 @@ async function probeUncached(tool, runner) {
   if (tool.id === 'minimax-code' && IS_WINDOWS) {
     // The official Windows installer keeps mcode under a versioned releases
     // directory. A partial npm install can leave a broken shim earlier on PATH;
-    // prefer the checksum-verified installer release in that case.
+    // prefer the checksum-verified installer release in that case. Also look at
+    // the configured directory and the vendor default, which may not be on PATH
+    // yet when the installer was told not to edit the user PATH.
     const { findManagedMiniMaxEntry } = await import('./official-tool-executor.mjs')
-    const managed = await findManagedMiniMaxEntry(process.cwd())
+    const directed = minimaxOfficialInstallDir(preferences, homedir())
+    // The configured directory is the copy updates write, so it wins over an
+    // older install that happens to sit earlier on PATH.
+    let managed = preferences.installDir
+      ? await findManagedMiniMaxEntry(process.cwd(), [directed, join(directed, '.minimax-code')])
+      : null
+    if (!managed) managed = await findManagedMiniMaxEntry(process.cwd())
+    if (!managed) managed = await findManagedMiniMaxEntry(process.cwd(), [directed, join(directed, '.minimax-code')])
     if (managed) return { id: tool.id, installed: true, version: managed.version,
       status: 'installed', detail: '已按官方 npm registry 摘要核验 MiniMax 官方 Windows 安装器中的 CLI 文件。',
       bannerLine: `MiniMax Code ${managed.version}` }
@@ -686,15 +783,17 @@ export const defaultRunner = (executable, args, options = {}) =>
 let prefixPromise = null
 
 /** Add one directory to this process's PATH unless it is already there. */
-function appendToProcessPath(directory) {
+function appendToProcessPath(directory, { includeBin = true } = {}) {
   const target = String(directory ?? '').trim()
   if (!target || !isAbsolute(target)) return
   const separator = IS_WINDOWS ? ';' : ':'
   const current = process.env.PATH ?? ''
-  if (current.split(separator).some(entry => entry.toLowerCase() === target.toLowerCase())) return
-  process.env.PATH = current ? `${current}${separator}${target}` : target
-  // POSIX package managers put global binaries in <prefix>/bin.
-  if (!IS_WINDOWS) appendToProcessPath(join(target, 'bin'))
+  if (!current.split(separator).some(entry => entry.toLowerCase() === target.toLowerCase())) {
+    process.env.PATH = current ? `${current}${separator}${target}` : target
+  }
+  // POSIX package managers put global binaries in <prefix>/bin. One level only:
+  // recursing would append bin/bin/bin until the process runs out of memory.
+  if (includeBin && !IS_WINDOWS) appendToProcessPath(join(target, 'bin'), { includeBin: false })
 }
 
 /**
@@ -728,6 +827,14 @@ export function ensureNpmPrefixOnPath() {
       // A --prefix install lands outside the npm prefix, so it needs its own
       // PATH entry or every later probe reports the tool as missing.
       try { appendToProcessPath(preferences.installDir) } catch { /* environment stays untouched */ }
+      // Vendor script defaults, so a one-click install that did not edit the
+      // user PATH is still visible to the next probe in this process.
+      for (const relative of [
+        '.minimax-code', '.local/bin', '.kimi-code/bin', '.grok/bin', '.mimocode/bin',
+        '.opencode/bin', '.stepcode/bin', 'AppData/Local/Programs/OpenAI/Codex/bin',
+      ]) {
+        try { appendToProcessPath(join(homedir(), ...relative.split('/'))) } catch { /* skip */ }
+      }
     })()
   }
   return prefixPromise
@@ -841,9 +948,12 @@ function beginJob(tool, { operation, methodId, command, installDir = '', run })
 export function planCommandLine(plan, operation = 'install') {
   if (plan.kind === 'script') {
     const piped = plan.shell === 'powershell' ? `irm ${plan.scriptUrl} | iex` : `curl -fsSL ${plan.scriptUrl} | bash`
-    return operation === 'uninstall'
-      ? `删除 ${plan.dir} 下的 ${(plan.binaries ?? []).join('、') || '可执行文件'}`
-      : `${piped}${plan.installDir ? ` ${plan.installArg} ${plan.installDir}` : ''}`
+    if (operation === 'uninstall') {
+      return `删除 ${plan.dir} 下的 ${(plan.binaries ?? []).join('、') || '可执行文件'}`
+    }
+    if (plan.installDir && plan.installArg?.[0]) return `${piped} ${plan.installArg[0]} ${plan.installDir}`
+    if (plan.installDir && plan.installDirEnv) return `${piped}（${plan.installDirEnv}=${plan.installDir}）`
+    return piped
   }
   return `${plan.manager} ${plan.args.join(' ')}`
 }
@@ -1089,6 +1199,7 @@ async function runInstallJob(manager, args, job) {
     installed: before.installed === true,
     order,
     platform: process.platform,
+    methodId: job.methodId,
   })
   let triedClaudeUpdate = false
   if (plan === 'claude-update-then-registry') {

package/.dsh-plugin/shared/tool-install-preferences.mjs

@@ -141,14 +141,18 @@ export function parseInstallPreferences(config = {}, { tools = [] } = {}) {
 }
 
 /** Where a script install puts the binary: the user's directory, else the vendor default. */
-export function scriptInstallDir(tool, preferences, { home = '' } = {}) {
-  if (!tool?.defaultScriptInstallDir) return ''
-  return preferences?.installDir || vendorScriptDir(tool, { home })
+export function scriptInstallDir(tool, preferences, { home = '', method = null } = {}) {
+  if (!vendorScriptRelative(tool, method)) return ''
+  return preferences?.installDir || vendorScriptDir(tool, { home, method })
+}
+
+function vendorScriptRelative(tool, method) {
+  return String(method?.defaultInstallDir || tool?.defaultScriptInstallDir || '')
 }
 
 /** The location the vendor script uses on its own, ignoring any configured directory. */
-export function vendorScriptDir(tool, { home = '' } = {}) {
-  return joinPath(home, ...String(tool?.defaultScriptInstallDir ?? '').split('/').filter(Boolean))
+export function vendorScriptDir(tool, { home = '', method = null } = {}) {
+  return joinPath(home, ...vendorScriptRelative(tool, method).split('/').filter(Boolean))
 }
 
 /** argv for a package-manager method, honouring the configured registry and prefix. */
@@ -176,7 +180,15 @@ function baseUrlOf(scriptUrl) {
 function pickMethod(tool, methodId, preferences, platform) {
   const requested = methodId ?? preferences?.methods?.[tool.id]
   if (!requested) {
-    return installMethodsFor(tool).find(method => !installMethodBlockReason(method, platform)) ?? defaultInstallMethod(tool)
+    const available = installMethodsFor(tool).filter(method => !installMethodBlockReason(method, platform))
+    // An installed Windows MiniMax lives in the official installer layout.
+    // npm does not move that copy, so the unpinned one-click update is the
+    // vendor PowerShell script. Pinning npm or pnpm still runs that manager.
+    if (platform === 'win32' && tool?.id === 'minimax-code' && preferences?.allowScriptInstall !== false) {
+      const powershell = available.find(method => method.id === 'script-powershell')
+      if (powershell) return powershell
+    }
+    return available[0] ?? defaultInstallMethod(tool)
   }
   // A named method is never silently swapped. If the tool does not declare it,
   // or it does not run here, the caller gets the reason instead of a surprise.
@@ -207,7 +219,14 @@ export function resolveInstallPlan(tool, methodId, preferences = {}, { platform
   const installDir = preferences?.installDir || ''
   if (method.kind === 'script') {
     const scriptUrl = preferences?.scriptUrls?.[tool.id] || method.scriptUrl
-    const target = methodHonoursInstallDir(method) ? scriptInstallDir(tool, preferences, { home }) : ''
+    const target = methodHonoursInstallDir(method) ? scriptInstallDir(tool, preferences, { home, method }) : ''
+    const notices = []
+    if (!target && installDir) {
+      notices.push(`${method.label} 无法使用自定义安装目录（官方脚本写死了安装路径），将安装到 ${vendorScriptDir(tool, { home, method })}。`)
+    }
+    if (method.env?.includes('MCODE_NPM_REGISTRY') && preferences?.registry && !minimaxScriptRegistry(preferences.registry)) {
+      notices.push('MiniMax 官方脚本只接受 https://registry.npmjs.org/ 或 https://registry.npmmirror.com/，本次不改写它的 npm 源。')
+    }
     return {
       toolId: tool.id,
       method,
@@ -218,11 +237,11 @@ export function resolveInstallPlan(tool, methodId, preferences = {}, { platform
       scriptUrl,
       verify: method.verify,
       installArg: method.installArgs,
+      installDirEnv: method.installDirEnv || (method.env?.includes('STEP_INSTALL_DIR') ? 'STEP_INSTALL_DIR' : ''),
       installDir: target,
-      env: scriptEnv(method, { installDir: target, scriptUrl }),
-      notices: target ? [] : installDir
-        ? [`${method.label} 无法使用自定义安装目录（官方脚本写死了安装路径），将安装到 ${vendorScriptDir(tool, { home })}。`]
-        : [],
+      relatives: scriptRelatives(tool, method),
+      env: scriptEnv(method, { installDir: target, scriptUrl, registry: preferences?.registry }),
+      notices,
     }
   }
   return {
@@ -267,6 +286,16 @@ export function resolveUninstallPlan(tool, methodId, preferences = {}, options =
   }
 }
 
+/** Paths under the install directory that an uninstall may delete. No `..`. */
+export function scriptRelatives(tool, method) {
+  const listed = method?.binaryRelatives?.length
+    ? method.binaryRelatives
+    : tool?.scriptBinaryRelatives?.length
+      ? tool.scriptBinaryRelatives
+      : tool?.scriptBinaryNames
+  return [...(listed ?? [])]
+}
+
 /** Where the tool's binary lives, so a later uninstall can find it. */
 export function resolveInstallLocation(tool, method, preferences = {}, { home = '' } = {}) {
   if (!method) return null
@@ -274,21 +303,44 @@ export function resolveInstallLocation(tool, method, preferences = {}, { home =
     // A method that cannot honour the configured directory always lands in the
     // vendor's own location, whatever the user typed.
     const dir = methodHonoursInstallDir(method)
-      ? scriptInstallDir(tool, preferences, { home })
-      : vendorScriptDir(tool, { home })
-    return { kind: 'script', dir, binaries: [...(tool.scriptBinaryNames ?? [])] }
+      ? scriptInstallDir(tool, preferences, { home, method })
+      : vendorScriptDir(tool, { home, method })
+    return {
+      kind: 'script',
+      dir,
+      binaries: [...(tool.scriptBinaryNames ?? [])],
+      relatives: scriptRelatives(tool, method),
+    }
   }
-  return { kind: 'package-manager', dir: preferences?.installDir || '', binaries: [] }
+  return { kind: 'package-manager', dir: preferences?.installDir || '', binaries: [], relatives: [] }
 }
 
-function scriptEnv(method, { installDir, scriptUrl }) {
+/** MiniMax's installer rejects every registry except these two. */
+const MINIMAX_SCRIPT_REGISTRIES = new Set([
+  'https://registry.npmjs.org/',
+  'https://registry.npmmirror.com/',
+])
+
+export function minimaxScriptRegistry(registry) {
+  const value = String(registry ?? '').trim()
+  if (!value) return ''
+  const normalized = value.endsWith('/') ? value : `${value}/`
+  return MINIMAX_SCRIPT_REGISTRIES.has(normalized) ? normalized : ''
+}
+
+function scriptEnv(method, { installDir, scriptUrl, registry }) {
   const env = {}
-  if (installDir && method.env?.includes('STEP_INSTALL_DIR')) env.STEP_INSTALL_DIR = installDir
+  const dirEnv = method.installDirEnv || (method.env?.includes('STEP_INSTALL_DIR') ? 'STEP_INSTALL_DIR' : '')
+  if (installDir && dirEnv) env[dirEnv] = installDir
   // The step installers read their release base from this variable, so a mirror
   // URL also moves the binaries and the checksum manifest, not just the script.
   if (method.env?.includes('STEP_RELEASE_BASE_URL') && scriptUrl) {
     const base = baseUrlOf(scriptUrl)
     if (base) env.STEP_RELEASE_BASE_URL = base
   }
+  if (method.env?.includes('MCODE_NPM_REGISTRY')) {
+    const allowed = minimaxScriptRegistry(registry)
+    if (allowed) env.MCODE_NPM_REGISTRY = allowed
+  }
   return env
 }

package/CHANGELOG.md

@@ -1,5 +1,16 @@
 # Changelog
 
+## Unreleased
+
+## 0.17.1 — 2026-10-11
+
+Stable patch under the npm `latest` tag. Fully quit Harness, including the tray or WebUI host process, and restart after upgrading so the Host reloads. Existing 0.17.0 artifacts remain unchanged.
+
+- **MiniMax Windows one-click update accepts the official installer again.** The published `install.ps1` opens with PowerShell comment-based help (`<#`), and the sanity check treated every leading `<` as an HTML page, so the real script was refused before it ran. HTML and XML documents are still refused. UTF-8/UTF-16 BOMs are decoded first. Content-Type is not used: the CDN serves the script as `application/octet-stream`. A download that is empty, HTML, or missing `@minimax-ai/code`, `MCODE_INSTALL_DIR` and `MiniMax Code` still fails with the missing piece named.
+- **Official script installers are selectable.** Claude Code, Codex, MiniMax, Kimi, MiMo and Grok now offer the vendor `curl | bash` / `irm | iex` installer next to npm and pnpm, on the platforms that script supports. Gemini stays on npm/pnpm. ZCode stays the signed desktop installer. One-click install, repair and uninstall run the method shown on the row. MiniMax on Windows defaults to `irm | iex` (that is the copy npm does not update); pinning npm or pnpm runs that manager instead, and still falls back to the official script if the probed version does not advance.
+- **Updates use the configured install directory.** npm/pnpm keep `--prefix`. Scripts that document a directory variable (`MCODE_INSTALL_DIR`, `CODEX_INSTALL_DIR`, `KIMI_INSTALL_DIR`, `GROK_BIN_DIR`, `MIMOCODE_INSTALL_DIR`, Step Code's flag) receive that path. The MiniMax Windows fallback no longer substitutes the npm prefix: a configured directory wins, otherwise an existing official layout is updated in place, otherwise `%USERPROFILE%\.minimax-code`. Scripts that hardcode a path (Claude, OpenCode, MiMo on Unix) say so on the row.
+- Windows validation for this patch: MiniMax `irm | iex` against a configured install directory completed with `mcode.cmd` present and version 0.6.8; the false “not an official Windows install script” refusal did not recur on main tip `1162f276`.
+
 ## 0.17.0 — 2026-10-11
 
 Stable minor under the npm `latest` tag. Fully quit Harness, including the tray or WebUI host process, and restart after upgrading so the Host reloads. Existing 0.16.4 artifacts remain unchanged.
@@ -144,7 +155,7 @@ Prerelease for DeepSeek Harness Desktop 0.2.0-rc.1 / 0.2.0-rc.2, published under
 
 ### Package renamed
 - The npm package is now **`@ljwei-stak/dsh-model-router`**. The last version under the old name `@ljwei-stak/model-router-galgame` is 0.13.0, with the same content as `@ljwei-stak/dsh-model-router@0.13.0`; the old name will get no further updates. Upgrade by removing the old plugin and adding the new one; do not install both.
-- The profile entry id, panel id, settings namespace and Cordis plugin name stay `model-router-galgame`, and state stays in `~/.dsh/model-router/`, so saved settings and run history carry over. See [MIGRATION.md](MIGRATION.md).
+- The profile entry id, panel id, settings namespace and Cordis plugin name stay `model-router-galgame`, and state stays in `~/.dsh/model-router/`, so saved settings and run history carry over. See [MIGRATION.md](docs/archive/MIGRATION.md).
 
 ### Official CLI execution (PR #1)
 - Assigned work packages run through the official vendor CLIs (Claude Code, Codex, Gemini CLI, Kimi Code, MiniMax Code, MiMo Code, Grok Build) with headless adapters; failures fall back to the Harness model catalog API.

package/README.md

@@ -18,7 +18,7 @@ Current version: **0.16.4** (`@ljwei-stak/dsh-model-router`). Its declared host
 
 **0.15.0 changes:** a four-tab workbench with routing advice directly below task planning, protection against stale execution previews, preserved spending totals across history pruning and retries, and a standalone mock UI preview for source development.
 
-[简体中文](README.zh.md) · [Workbench guide (Chinese)](docs/WORKBENCH_USER_GUIDE.zh.md) · [Installation guide (Chinese)](INSTALLATION_GUIDE.zh.md) · [Migration](MIGRATION.md) · [Changelog](CHANGELOG.md)
+[简体中文](README.zh.md) · [Workbench guide (Chinese)](docs/WORKBENCH_USER_GUIDE.zh.md) · [Installation guide (Chinese)](docs/INSTALLATION_GUIDE.zh.md) · [Migration](docs/archive/MIGRATION.md) · [Changelog](CHANGELOG.md)
 
 For self-testing, follow the [desktop acceptance and quality–cost experiment steps (Chinese)](docs/ROUTING_SELFTEST_STEPS.zh.md). Start with an 18-question, three-model pilot and an explicit spending limit. Offline helpers do not collect answers or call models; first-stage selection replay is distinct from end-to-end team execution.
 
@@ -57,7 +57,7 @@ You can instead install a local `.tgz` archive or its extracted inner `package`
 
 The old name `@ljwei-stak/model-router-galgame` ended at 0.13.0. Remove that plugin entry while retaining your profile/application data, then add `@ljwei-stak/dsh-model-router@0.16.4`. Do not keep both entries installed: they share the internal plugin id `model-router-galgame` and tool names. The retained id lets existing router settings and history carry over.
 
-For the combined 0.11.x package, back up the profile and export the GAL saves you want to preserve before upgrading. Story playback, artwork, music and saves now belong to the independent `@ljwei-stak/dsh-galgame` package. The detailed save limitations are in [MIGRATION.md](MIGRATION.md).
+For the combined 0.11.x package, back up the profile and export the GAL saves you want to preserve before upgrading. Story playback, artwork, music and saves now belong to the independent `@ljwei-stak/dsh-galgame` package. The detailed save limitations are in [MIGRATION.md](docs/archive/MIGRATION.md).
 
 ## Use the workbench
 

package/README.zh.md

@@ -18,7 +18,7 @@
 
 **0.15.0 更新**：工作台分为四页，路由建议紧接任务规划展示；执行输入变化时丢弃旧预览；裁剪历史或重试后仍保留费用累计；源码开发新增独立模拟 UI 预览。
 
-[English](README.md) · [工作台完整指南](docs/WORKBENCH_USER_GUIDE.zh.md) · [安装与验证](INSTALLATION_GUIDE.zh.md) · [迁移说明](MIGRATION.md) · [更新记录](CHANGELOG.md)
+[English](README.md) · [工作台完整指南](docs/WORKBENCH_USER_GUIDE.zh.md) · [安装与验证](docs/INSTALLATION_GUIDE.zh.md) · [迁移说明](docs/archive/MIGRATION.md) · [更新记录](CHANGELOG.md)
 
 需要自行实测时，按[安装验收与质量—成本实验步骤](docs/ROUTING_SELFTEST_STEPS.zh.md)先完成桌面检查和 18 题×3 模型小样，再决定正式样本与费用上限。方案区分首包选模投影和实际团队执行；配套离线入口不采集、不调用模型，真实收益仍待验证。
 
@@ -57,7 +57,7 @@
 
 `@ljwei-stak/model-router-galgame` 的最后版本为 0.13.0。保留 profile 与应用数据，移除旧插件条目，再添加 `@ljwei-stak/dsh-model-router@0.16.4`。不要同时安装两个包：它们共用内部插件 id `model-router-galgame` 与工具名；id 保留使已有路由设置和执行历史能够延续。
 
-从 0.11.x 合并版迁移时，先备份 profile 并导出希望保留的 GAL 进度。剧情、立绘、音乐、自由模式和存档属于独立 `@ljwei-stak/dsh-galgame` 插件。导出范围及同 profile 迁移的限制见 [MIGRATION.md](MIGRATION.md)。
+从 0.11.x 合并版迁移时，先备份 profile 并导出希望保留的 GAL 进度。剧情、立绘、音乐、自由模式和存档属于独立 `@ljwei-stak/dsh-galgame` 插件。导出范围及同 profile 迁移的限制见 [MIGRATION.md](docs/archive/MIGRATION.md)。
 
 ## 工作台的四个页面
 

package/{INSTALLATION_GUIDE.zh.md → docs/INSTALLATION_GUIDE.zh.md}

@@ -4,7 +4,7 @@
 
 当前路由正式版为 **0.16.4**。本版修复 PATH 探测丢输出：没有安装日志回调时，`where` 和 `--version` 的 stdout 仍会保留，已安装的 CLI 不再被报成未安装。0.16.3 的命令行参数修复、0.16.2 的更新按钮修复和 0.16.1 的反馈缓存仍然保留。公开数据默认关闭；主观偏好调整不改变公共能力评分或质量门槛。源码开发可使用独立模拟 UI 预览；安装时选择下方精确版本。
 
-[路由 README](README.zh.md) · [迁移说明](MIGRATION.md) · [独立 GAL README](https://github.com/Alice-Marx/deepseek-harness-galgame#readme)
+[路由 README](../README.zh.md) · [迁移说明](archive/MIGRATION.md) · [独立 GAL README](https://github.com/Alice-Marx/deepseek-harness-galgame#readme)
 
 ## 1. 选择需要的插件
 
@@ -93,15 +93,15 @@ GAL 核心只包含**《回声之城·正篇》**与**《旧城迁移篇：未
 7. 在**预算与安全**查看每日/月度预算、订阅失败策略及可读/写边界；**持续反馈与本地偏好**可设置学习启停、半衰期、收缩强度和调整上限，**动态公共数据**需自行启用。官方工具终端不经过 Harness 沙箱，继承用户登录环境，需单独确认启动。
 8. 需要 CLI 修改文件时进入官方会话、选择工作区，明确请求 `model_router_tool_run` 或 `model_router_team_execute` 的 `workspace-write` 模式。可编辑托管执行要求干净 Git 仓库、宿主审批和进程沙箱。`model_router_execute` 用于只读路由执行，`model_router_consult` 用于模型 API 意见。
 
-完整教程见[工作台使用指南](docs/WORKBENCH_USER_GUIDE.zh.md)；路线算法、订阅与数据保存说明见[README](README.zh.md)。
+完整教程见[工作台使用指南](WORKBENCH_USER_GUIDE.zh.md)；路线算法、订阅与数据保存说明见[README](../README.zh.md)。
 
 在成功结果上点 👍 / 👎，再次点已选评价可撤回。评价按准确路线和任务类型形成时间衰减、向零收缩的**主观偏好效用**，默认最大幅度 ±0.04，可配置到不超过 ±0.1；不抬高客观能力分或公共质量门槛。模型复核不视作人工评价，模型侧评分工具需要用户审批；本版不发起付费探索。
 
-学习范围是同一个本地 **DSH_HOME** 共享的最近 **200 次运行**，不是多账号隔离或无限长期记忆。“从现在重新学习”只让旧结果不再参与学习，不删除执行记录和费用累计。动态价格只读取用户指定的公开、严格结构化、按官方文档策展的 USD/百万 token 固定费率快照；不是自动抓取所有厂商价目表，复杂阶梯/时段计费不能强行折成该格式。人工单价优先；公开数据默认关闭，详情见[动态数据与持续反馈说明](docs/ROUTING_ADAPTIVE_LEARNING.zh.md)。
+学习范围是同一个本地 **DSH_HOME** 共享的最近 **200 次运行**，不是多账号隔离或无限长期记忆。“从现在重新学习”只让旧结果不再参与学习，不删除执行记录和费用累计。动态价格只读取用户指定的公开、严格结构化、按官方文档策展的 USD/百万 token 固定费率快照；不是自动抓取所有厂商价目表，复杂阶梯/时段计费不能强行折成该格式。人工单价优先；公开数据默认关闭，详情见[动态数据与持续反馈说明](ROUTING_ADAPTIVE_LEARNING.zh.md)。
 
-注册表包含 Kimi、Claude、Codex、MiniMax、MiMo、Grok、Gemini 和 ZCode。Claude、Codex、MiMo、Grok 支持单工具/团队只读或可编辑执行；Kimi、MiniMax、ZCode 仅支持获批的可编辑托管执行。Gemini 有路由无界面适配器，不进入单工具/团队托管执行器。详见[官方工具与托管模式](README.zh.md#官方工具与托管模式)。CLI 模型名可能不同于 Harness 目录；多数 CLI 不提供可核验的实际模型 ID，要看厂商记录与账单。
+注册表包含 Kimi、Claude、Codex、MiniMax、MiMo、Grok、Gemini 和 ZCode。Claude、Codex、MiMo、Grok 支持单工具/团队只读或可编辑执行；Kimi、MiniMax、ZCode 仅支持获批的可编辑托管执行。Gemini 有路由无界面适配器，不进入单工具/团队托管执行器。详见[官方工具与托管模式](../README.zh.md#官方工具与托管模式)。CLI 模型名可能不同于 Harness 目录；多数 CLI 不提供可核验的实际模型 ID，要看厂商记录与账单。
 
-安装使用固定官方 npm 包的 `@latest` 或 ZCode 签名安装器。希望 npm 工具安装在非 C 盘时，先按自己的空间规划配置全局前缀；Grok 数据目录与登录应使用一致的 `GROK_HOME`。MiniMax Windows 原生依赖失败时，从固定官方 HTTPS 来源下载最新版安装脚本，仅检查大小和基本内容结构后原样执行，**没有锁定该安装脚本的哈希**。安装后的 MiniMax CLI 代码另按已安装版本的官方 npm tarball 摘要核验。MiMo/Grok 同样使用官方 npm 内容证明；适用的 Claude/Codex/ZCode Windows 入口验证发布者签名，ZCode 内置脚本还有每个签名构建的首次信任摘要检查。具体规则见[执行器](.dsh-plugin/shared/official-tool-executor.mjs)和[npm 内容核验](.dsh-plugin/shared/npm-attestation.mjs)。
+安装使用固定官方来源：npm/pnpm 的 `@latest`，厂商发布的 `curl | bash` / `irm | iex` 脚本（Claude、Codex、MiniMax、Kimi、MiMo、Grok、OpenCode、Step Code，按平台显示），或 ZCode 签名安装器。在**官方工具**里为每个工具选择方式，并填写统一安装目录；一键安装和更新都使用这一选择。npm/pnpm 会带上 `--prefix`。支持目录的脚本把该路径传给厂商自己的变量（MiniMax 是 `MCODE_INSTALL_DIR`）。写死路径的脚本会在该行写明实际落点。未填写目录时，MiniMax Windows 更新使用已有官方目录，否则使用 `%USERPROFILE%\.minimax-code`，不再改放到 npm 全局前缀。Grok 数据目录与登录应使用一致的 `GROK_HOME`。MiniMax Windows 原生依赖失败时，从固定官方 HTTPS 来源下载最新版安装脚本，检查大小、UTF-8/UTF-16 文本和厂商标记后原样执行（PowerShell 的 `<#` 说明头不是 HTML），**没有锁定该安装脚本的哈希**。安装后的 MiniMax CLI 代码另按已安装版本的官方 npm tarball 摘要核验。MiMo/Grok 同样使用官方 npm 内容证明；适用的 Claude/Codex/ZCode Windows 入口验证发布者签名，ZCode 内置脚本还有每个签名构建的首次信任摘要检查。具体规则见[执行器](../.dsh-plugin/shared/official-tool-executor.mjs)和[npm 内容核验](../.dsh-plugin/shared/npm-attestation.mjs)。
 
 ## 6. GAL 第一次使用
 
@@ -125,7 +125,7 @@ GAL 核心只包含**《回声之城·正篇》**与**《旧城迁移篇：未
 | 动态公开数据 | 默认关闭；自行启用后核对快照版本、校验时间及失败/过期状态；人工单价仍优先。 |
 | 可编辑执行 | 在干净测试仓库核对审批、隔离工作区、补丁整合、厂商实际模型与计费。 |
 
-历史 0.15.0 的自动测试验证为 220 项通过、3 项 Windows 平台跳过；组件 UI 预览检查使用模拟数据。**0.16.4 的发布验证见[更新记录](CHANGELOG.md)**，不把模拟公开源/模型流和组件预览当作真实付费调用或 Harness Desktop 端到端验收；上表中的实际安装、账号和工作区检查仍需在使用环境中完成。
+历史 0.15.0 的自动测试验证为 220 项通过、3 项 Windows 平台跳过；组件 UI 预览检查使用模拟数据。**0.16.4 的发布验证见[更新记录](../CHANGELOG.md)**，不把模拟公开源/模型流和组件预览当作真实付费调用或 Harness Desktop 端到端验收；上表中的实际安装、账号和工作区检查仍需在使用环境中完成。
 
 ## 8. 开发者从完整源码构建
 
@@ -145,4 +145,4 @@ pnpm 10 没有 `pnpm peers check`；使用严格依赖安装。客户端修改
 
 ## 历史兼容提醒
 
-合并版 **0.11.1 / 0.11.0** 声明 rc.1 与 rc.2；**0.10.2** 是未发布的本地兼容修复。已发布 **0.10.1** 仅声明 rc.1，rc.2 拒绝安装是 peer 依赖问题，换镜像不能修复；**0.8.0** 使用 0.1.7-rc.2 依赖，不用于当前宿主。历史 Git 标签和安装包保留，详见[更新记录](CHANGELOG.md)和[迁移说明](MIGRATION.md)。
+合并版 **0.11.1 / 0.11.0** 声明 rc.1 与 rc.2；**0.10.2** 是未发布的本地兼容修复。已发布 **0.10.1** 仅声明 rc.1，rc.2 拒绝安装是 peer 依赖问题，换镜像不能修复；**0.8.0** 使用 0.1.7-rc.2 依赖，不用于当前宿主。历史 Git 标签和安装包保留，详见[更新记录](../CHANGELOG.md)和[迁移说明](archive/MIGRATION.md)。

package/docs/WORKBENCH_USER_GUIDE.zh.md

@@ -1,6 +1,6 @@
 # 模型路由工作台：配置、规划与实际执行
 
-适用版本：正式版 `@ljwei-stak/dsh-model-router@0.16.0`；声明兼容 DeepSeek Harness Desktop `0.2.0-rc.1 / 0.2.0-rc.2`。安装与开发见[中文 README](../README.zh.md)，旧包迁移见[迁移说明](../MIGRATION.md)。
+适用版本：正式版 `@ljwei-stak/dsh-model-router@0.16.0`；声明兼容 DeepSeek Harness Desktop `0.2.0-rc.1 / 0.2.0-rc.2`。安装与开发见[中文 README](../README.zh.md)，旧包迁移见[迁移说明](archive/MIGRATION.md)。
 
 0.15.0 新增四页布局、规划后直接展示路由建议、执行输入变化时丢弃旧预览，以及历史裁剪和重试后的费用累计保留。源码中的独立 UI 预览使用模拟数据，用于组件检查，不代表真实账号调用或桌面端到端验收。
 

package/{MIGRATION.md → docs/archive/MIGRATION.md}

@@ -50,4 +50,4 @@
 | 剧情与自由对话 | 独立 GAL 管理故事、立绘、音乐、设置和存档；自由模式经宿主模型服务调用，可能计费。 |
 | 更新 | 通过官方插件管理器分别安装各自的新版本；路由正式版发布在 npm `latest`（预发布版在 `next`），推荐精确版本。 |
 
-登录、厂商实际模型和账单仍由账号持有人验收。完整步骤与安装后的检查见 [INSTALLATION_GUIDE.zh.md](INSTALLATION_GUIDE.zh.md)，GAL 播放器教程见[独立仓库](https://github.com/Alice-Marx/deepseek-harness-galgame#readme)。
+登录、厂商实际模型和账单仍由账号持有人验收。完整步骤与安装后的检查见 [INSTALLATION_GUIDE.zh.md](../INSTALLATION_GUIDE.zh.md)，GAL 播放器教程见[独立仓库](https://github.com/Alice-Marx/deepseek-harness-galgame#readme)。