@ljwei-stak/dsh-model-router 0.18.0 → 0.18.2

package/.dsh-plugin/official-tools-remote-service.mjs

@@ -179,13 +179,25 @@ export class OfficialToolsRemoteService extends TypertRemoteService {
       executionCapabilities: officialToolExecutionCapabilities(),
       executionReadiness,
       hostVersion: HOST_PLUGIN_VERSION,
-      install: installSummary(),
+      install: this.installSettings().install,
     }
   }
 
+  /** Refresh saved methods and commands without spawning CLIs or checking downloads. */
+  installSettings() {
+    const error = this.services?.installSettingsError?.()
+    if (error) throw new Error(`官方工具安装设置无效：${error}`)
+    const install = installSummary()
+    // The saved input can contain Host-only home/environment expansions. Keep
+    // it separate from the resolved directory used by the actual command.
+    install.requestedInstallDir = this.services?.installRequestedDirectory?.() ?? install.installDir
+    return { install, hostVersion: HOST_PLUGIN_VERSION }
+  }
+
   /** Start one serialized fixed-registry install; return immediately for UI polling. */
   async installTool(request) {
     return settled(async () => {
+      this.installSettings()
       await ensureNpmPrefixOnPath()
       return { accepted: true, job: startInstall(request.tool, { method: request.method }) }
     })
@@ -197,6 +209,7 @@ export class OfficialToolsRemoteService extends TypertRemoteService {
    */
   async uninstallTool(request) {
     return settled(async () => {
+      this.installSettings()
       await ensureNpmPrefixOnPath()
       return { accepted: true, job: startUninstall(request.tool, { method: request.method }) }
     })
@@ -205,6 +218,7 @@ export class OfficialToolsRemoteService extends TypertRemoteService {
   /** Reinstall the tool even when it already reports the latest version. */
   async repairTool(request) {
     return settled(async () => {
+      this.installSettings()
       await ensureNpmPrefixOnPath()
       return { accepted: true, job: startRepair(request.tool, { method: request.method }) }
     })

package/.dsh-plugin/shared/official-tool-executor.mjs

@@ -345,7 +345,7 @@ function nodeVersion(entry, pattern = /^v(\d+\.\d+\.\d+)/) {
   })
 }
 
-async function findNodeExecutable(workspace, minimum = [22, 19, 0], acceptedVersion = () => true) {
+export async function findNodeExecutable(workspace, minimum = [22, 19, 0], acceptedVersion = () => true) {
   await ensureNpmPrefixOnPath()
   const candidates = [process.execPath, ...pathDirectories().map(directory => join(directory, IS_WINDOWS ? 'node.exe' : 'node'))]
   for (const candidate of candidates) {
@@ -676,17 +676,17 @@ export function harnessSandboxBlocker(toolId, platform = process.platform) {
 /** Check the actual trusted launch entry without starting an account call. */
 export async function officialToolReadiness(toolId, workspace = process.cwd(), selectionOptions = {}) {
   const tool = getOfficialTool(toolId)
-  if (!tool) return { id: String(toolId), ready: false, reason: '工具不在固定官方注册表中。' }
+  if (!tool) return { id: String(toolId), supported: false, ready: false, reason: '工具不在固定官方注册表中。' }
   const capability = CAPABILITIES[tool.id]
-  if (!capability?.supported) return { id: tool.id, ready: false, reason: capability?.reason ?? '当前平台不支持托管执行。' }
+  if (!capability?.supported) return { id: tool.id, supported: false, ready: false, reason: capability?.reason ?? '当前平台不支持托管执行。' }
   try {
     const directory = await checkedWorkspace(workspace)
     const spec = await launchSpec(tool.id, directory, capability.modes[0], null, undefined, selectionOptions)
     return spec.unsupported
-      ? { id: tool.id, ready: false, reason: spec.unsupported }
-      : { id: tool.id, ready: true, source: spec.source, modes: capability.modes }
+      ? { id: tool.id, supported: true, ready: false, reason: spec.unsupported }
+      : { id: tool.id, supported: true, ready: true, source: spec.source, modes: capability.modes }
   } catch (error) {
-    return { id: tool.id, ready: false, reason: String(error?.message ?? error).slice(0, 300) }
+    return { id: tool.id, supported: true, ready: false, reason: String(error?.message ?? error).slice(0, 300) }
   }
 }
 

package/.dsh-plugin/shared/official-tool-registry.mjs

@@ -45,7 +45,7 @@ function scriptMethod(id, label, {
   shell, scriptUrl, verify, installArg = [], env = [], platforms,
   supportsInstallDir = false, installDirEnv = '', installDirSuffix = '',
   defaultScriptInstallDir, defaultScriptInstallDirEnv, scriptBinaryNames,
-  registryEnv, installDirSubdir, uninstallUnsupportedReason, scriptFallbackUrls,
+  registryEnv, installDirSubdir, legacySharedInstallDir = false, sharedDefaultBin = false, uninstallUnsupportedReason, scriptFallbackUrls,
 }) {
   return Object.freeze({
     id,
@@ -64,6 +64,8 @@ function scriptMethod(id, label, {
     installDirEnv,
     installDirSuffix,
     ...(installDirSubdir ? { installDirSubdir } : {}),
+    ...(legacySharedInstallDir ? { legacySharedInstallDir: true } : {}),
+    ...(sharedDefaultBin ? { sharedDefaultBin: true } : {}),
     ...(uninstallUnsupportedReason ? { uninstallUnsupportedReason } : {}),
     ...(defaultScriptInstallDir ? { defaultScriptInstallDir } : {}),
     ...(defaultScriptInstallDirEnv ? { defaultScriptInstallDirEnv } : {}),
@@ -96,6 +98,7 @@ export const OFFICIAL_TOOLS = Object.freeze([
         shell: 'bash', scriptUrl: 'https://code.kimi.com/kimi-code/install.sh',
         platforms: ['linux', 'darwin'], supportsInstallDir: true,
         installDirEnv: 'KIMI_INSTALL_DIR', installDirSuffix: 'bin',
+        installDirSubdir: 'kimi-code', legacySharedInstallDir: true,
         env: ['KIMI_INSTALL_DIR'],
         scriptBinaryNames: ['kimi'],
         verify: Object.freeze({ mustInclude: ['kimi-code', 'code.kimi.com/kimi-code'] }),
@@ -104,6 +107,7 @@ export const OFFICIAL_TOOLS = Object.freeze([
         shell: 'powershell', scriptUrl: 'https://code.kimi.com/kimi-code/install.ps1',
         platforms: ['win32'], supportsInstallDir: true,
         installDirEnv: 'KIMI_INSTALL_DIR', installDirSuffix: 'bin',
+        installDirSubdir: 'kimi-code', legacySharedInstallDir: true,
         env: ['KIMI_INSTALL_DIR'],
         scriptBinaryNames: ['kimi.exe'],
         verify: Object.freeze({ mustInclude: ['kimi-code', 'code.kimi.com/kimi-code'] }),
@@ -135,6 +139,7 @@ export const OFFICIAL_TOOLS = Object.freeze([
         scriptFallbackUrls: ['https://downloads.claude.ai/claude-code-releases/bootstrap.sh'],
         platforms: ['linux', 'darwin'],
         scriptBinaryNames: ['claude'],
+        sharedDefaultBin: true,
         verify: Object.freeze({ mustInclude: ['downloads.claude.ai/claude-code-releases', 'manifest.json'] }),
       }),
       scriptMethod('script-powershell', 'irm | iex', {
@@ -142,6 +147,7 @@ export const OFFICIAL_TOOLS = Object.freeze([
         scriptFallbackUrls: ['https://downloads.claude.ai/claude-code-releases/bootstrap.ps1'],
         platforms: ['win32'],
         scriptBinaryNames: ['claude.exe'],
+        sharedDefaultBin: true,
         verify: Object.freeze({ mustInclude: ['downloads.claude.ai/claude-code-releases', 'manifest.json'] }),
       }),
     ]),
@@ -167,6 +173,8 @@ export const OFFICIAL_TOOLS = Object.freeze([
         shell: 'sh', scriptUrl: 'https://chatgpt.com/codex/install.sh',
         platforms: ['linux', 'darwin'], supportsInstallDir: true,
         installDirEnv: 'CODEX_INSTALL_DIR', env: ['CODEX_INSTALL_DIR'],
+        installDirSubdir: 'codex/bin', legacySharedInstallDir: true,
+        sharedDefaultBin: true,
         scriptBinaryNames: ['codex'],
         verify: Object.freeze({ mustInclude: ['releases.openai.com/codex', 'CODEX_INSTALL_DIR'] }),
       }),
@@ -210,6 +218,7 @@ export const OFFICIAL_TOOLS = Object.freeze([
         shell: 'bash', scriptUrl: 'https://filecdn.minimax.chat/public/install.sh',
         platforms: ['linux', 'darwin'], supportsInstallDir: true,
         installDirEnv: 'MCODE_INSTALL_DIR', installDirSuffix: 'bin',
+        installDirSubdir: 'minimax-code', legacySharedInstallDir: true,
         registryEnv: 'MCODE_NPM_REGISTRY', env: ['MCODE_INSTALL_DIR', 'MCODE_NPM_REGISTRY'],
         verify: Object.freeze({ mustInclude: ['MiniMax Code CLI', '@minimax-ai/code'] }),
       }),
@@ -217,6 +226,7 @@ export const OFFICIAL_TOOLS = Object.freeze([
         shell: 'powershell', scriptUrl: 'https://filecdn.minimax.chat/public/install.ps1',
         platforms: ['win32'], supportsInstallDir: true,
         installDirEnv: 'MCODE_INSTALL_DIR',
+        installDirSubdir: 'minimax-code', legacySharedInstallDir: true,
         registryEnv: 'MCODE_NPM_REGISTRY', env: ['MCODE_INSTALL_DIR', 'MCODE_NPM_REGISTRY'],
         defaultScriptInstallDir: '.minimax-code',
         scriptBinaryNames: ['mcode.cmd', 'mcode.ps1', 'mcode-tools.cmd', 'mcode-tools.ps1'],
@@ -250,6 +260,7 @@ export const OFFICIAL_TOOLS = Object.freeze([
         shell: 'powershell', scriptUrl: 'https://mimo.xiaomi.com/install.ps1',
         platforms: ['win32'], supportsInstallDir: true,
         installDirEnv: 'MIMOCODE_INSTALL_DIR', env: ['MIMOCODE_INSTALL_DIR'],
+        installDirSubdir: 'mimo-code', legacySharedInstallDir: true,
         scriptBinaryNames: ['mimo.exe'],
         verify: Object.freeze({ mustInclude: ['mimo.xiaomi.com', '.mimocode'] }),
       }),
@@ -276,6 +287,7 @@ export const OFFICIAL_TOOLS = Object.freeze([
         shell: 'bash', scriptUrl: 'https://x.ai/cli/install.sh',
         platforms: ['linux', 'darwin'], supportsInstallDir: true,
         installDirEnv: 'GROK_BIN_DIR', env: ['GROK_BIN_DIR'],
+        installDirSubdir: 'grok-build', legacySharedInstallDir: true,
         scriptBinaryNames: ['grok', 'agent'],
         verify: Object.freeze({ mustInclude: ['Grok CLI installer', 'x.ai/cli'] }),
       }),
@@ -283,6 +295,7 @@ export const OFFICIAL_TOOLS = Object.freeze([
         shell: 'powershell', scriptUrl: 'https://x.ai/cli/install.ps1',
         platforms: ['win32'], supportsInstallDir: true,
         installDirEnv: 'GROK_BIN_DIR', env: ['GROK_BIN_DIR'],
+        installDirSubdir: 'grok-build', legacySharedInstallDir: true,
         scriptBinaryNames: ['grok.exe', 'agent.exe', 'grove.exe', 'grove-fsmonitor.exe', 'grove-credential.exe'],
         verify: Object.freeze({ mustInclude: ['Grok CLI installer', 'x.ai/cli'] }),
       }),
@@ -365,6 +378,9 @@ export const OFFICIAL_TOOLS = Object.freeze([
         installArg: ['--install-dir'],
         env: ['STEP_INSTALL_DIR', 'STEP_RELEASE_BASE_URL'],
         supportsInstallDir: true,
+        // The installer replaces its runtime directories, including the entire
+        // node_modules tree on Windows. It must own a dedicated directory.
+        installDirSubdir: 'stepcode', legacySharedInstallDir: true,
         verify: Object.freeze({
           mustInclude: ['static-openapi.stepfun.com', 'stepcode installer'],
           mustNotInclude: ['anomalyco/opencode'],
@@ -377,6 +393,7 @@ export const OFFICIAL_TOOLS = Object.freeze([
         installArg: ['-InstallDir'],
         env: ['STEP_INSTALL_DIR', 'STEP_RELEASE_BASE_URL'],
         supportsInstallDir: true,
+        installDirSubdir: 'stepcode', legacySharedInstallDir: true,
         verify: Object.freeze({
           mustInclude: ['static-openapi.stepfun.com', 'stepcode'],
           mustNotInclude: ['anomalyco/opencode'],

package/.dsh-plugin/shared/official-tools-remote.mjs

@@ -193,6 +193,7 @@ const jsonParameter = (name, codec) => Object.freeze({ name, wire: name, source:
 
 export const OFFICIAL_TOOLS_REMOTE_DESCRIPTORS = Object.freeze([
   descriptor('list', [], listResultCodec),
+  descriptor('installSettings', [], anyObjectCodec('OfficialInstallSettings')),
   descriptor('installTool', [jsonParameter('request', toolActionCodec)], installResultCodec),
   descriptor('uninstallTool', [jsonParameter('request', toolActionCodec)], installResultCodec),
   descriptor('repairTool', [jsonParameter('request', toolActionCodec)], installResultCodec),

package/.dsh-plugin/shared/official-tools-runtime.mjs

@@ -26,6 +26,7 @@ import {
 import {
   expandInstallDir,
   resolveInstallLocation,
+  resolveLegacyScriptLocation,
   resolveInstallPlan,
   resolveUninstallPlan,
 } from './tool-install-preferences.mjs'
@@ -56,7 +57,7 @@ export const CLAUDE_UPDATE_ARGS = Object.freeze(['update'])
 
 /**
  * Host-side install preferences (install directory, npm source, per-tool method
- * and script source). Refreshed from plugin config on every apply, so a client
+ * and script source). Refreshed on apply and live config updates, so a client
  * can only ever pick a method id — these addresses never arrive over the wire.
  */
 let preferences = { installDir: '', registry: '', methods: {}, scriptUrls: {}, allowScriptInstall: true }
@@ -308,16 +309,22 @@ async function fetchOfficialMiniMaxInstaller(signal) {
 }
 
 export function minimaxOfficialInstallDir(selectedPreferences = {}, home = homedir(), existingRoot = '') {
-  return selectedPreferences.installDir || existingRoot || join(home, '.minimax-code')
+  return selectedPreferences.installDir
+    ? resolveInstallPlan(getOfficialTool('minimax-code'), 'script-powershell', selectedPreferences, { platform: 'win32', home }).installDir
+    : existingRoot || join(home, '.minimax-code')
 }
 
 /** Keep a discovered native installation in place when its legacy updater runs. */
 export function miniMaxFallbackPlan(selectedPreferences, beforeProbe, prefix, options = currentInstallOptions()) {
   const installDir = minimaxOfficialInstallDir(selectedPreferences, options.home,
     beforeProbe?.installed ? beforeProbe.installDir : '')
-  const executionPreferences = { ...selectedPreferences, installDir,
+  const executionPreferences = { ...selectedPreferences,
     methods: { ...selectedPreferences.methods, 'minimax-code': 'script-powershell' } }
-  return { plan: resolveInstallPlan(getOfficialTool('minimax-code'), 'script-powershell', executionPreferences, options), executionPreferences }
+  const plan = resolveInstallPlan(getOfficialTool('minimax-code'), 'script-powershell', selectedPreferences, options)
+  // installDir is already the discovered exclusive native root or the resolved
+  // child of the configured base. Never reinterpret it as another shared base.
+  return { plan: { ...plan, installDir, binDir: installDir,
+    env: { ...plan.env, MCODE_INSTALL_DIR: installDir } }, executionPreferences }
 }
 
 async function runOfficialMiniMaxInstaller(job, { reason } = {}) {
@@ -330,6 +337,7 @@ async function runOfficialMiniMaxInstaller(job, { reason } = {}) {
     pushLine(job, reason || '— npm 原生依赖未就绪；改用 MiniMax 官方 Windows 安装脚本（安装最新版）—')
     const { plan, executionPreferences } = miniMaxFallbackPlan(job.preferences, job.beforeProbe, '')
     const installDir = plan.installDir
+    await assertVendorInstallDirectory(job.tool, plan, job.preferences)
     await mkdir(installDir, { recursive: true })
     prefixRoot = await realpath(installDir)
     const script = await fetchOfficialMiniMaxInstaller(job.controller.signal)
@@ -354,6 +362,7 @@ async function runOfficialMiniMaxInstaller(job, { reason } = {}) {
       + 'Import-Module -Name $env:MODEL_ROUTER_UTILITY_MODULE -ErrorAction Stop; '
       + '& $env:MODEL_ROUTER_MINIMAX_INSTALL_SCRIPT'
     job.phase = 'installing'
+    await assertVendorInstallDirectory(job.tool, plan, job.preferences)
     const outcome = await runCapture(powershell,
       ['-NoProfile', '-NonInteractive', '-ExecutionPolicy', 'Bypass', '-Command', command], {
         timeoutMs: INSTALL_TIMEOUT_MS, signal: job.controller.signal,
@@ -378,7 +387,7 @@ async function runOfficialMiniMaxInstaller(job, { reason } = {}) {
     probeCache.delete(job.tool.id)
     const probe = await probeToolWith(job.tool, defaultRunner, { preferences: executionPreferences, plan, cacheMs: 0 })
     job.postInstallProbe = probe
-    const readiness = await trustedExecutionReadiness(job.tool.id, { preferences: executionPreferences })
+    const readiness = await trustedExecutionReadiness(job.tool.id, { preferences: executionPreferences, plan })
     if (!probe.installed || !readiness.ready) {
       throw new Error(`官方安装器完成，但执行入口未通过 npm registry 摘要核验：${readiness.reason ?? probe.detail}`)
     }
@@ -516,6 +525,95 @@ export function vendorScriptInvocation(plan, scriptPath) {
   return { file: plan.shell === 'sh' ? 'sh' : 'bash', args: [scriptPath, ...directoryArgs] }
 }
 
+/** Resolve an existing ancestor too, so a missing child under a junction is checked. */
+async function canonicalInstallPath(path) {
+  let current = resolve(path)
+  const suffix = []
+  for (;;) {
+    try { return join(await realpath(current), ...suffix) }
+    catch (error) {
+      if (error.code !== 'ENOENT') throw error
+      const parent = dirname(current)
+      if (parent === current) throw error
+      suffix.unshift(current.slice(parent.length).replace(/^[\\/]+/, ''))
+      current = parent
+    }
+  }
+}
+
+/** A vendor owns its target; its cleanup must never touch a shared npm prefix. */
+export async function assertVendorInstallDirectory(tool, plan, selectedPreferences = {}, options = currentInstallOptions()) {
+  const directory = plan.installDir || plan.binDir
+  if (!directory) throw new Error('官方脚本安装目录无法确定，已停止安装。')
+  const canonical = await canonicalInstallPath(directory)
+  if (canonical.split(/[\\/]+/).some(part => ['node_modules', '.pnpm'].includes(part.toLowerCase()))) {
+    throw new Error('官方脚本不能写入 npm/pnpm 的包目录或共享存储目录。')
+  }
+  if (canonical === dirname(canonical) || canonical === await canonicalInstallPath(homedir())) {
+    throw new Error('官方脚本不能在磁盘根目录或用户主目录中执行。')
+  }
+  let codexOwnedRelease = false
+  if (tool.id === 'codex' && plan.shell === 'powershell') {
+    // The official Windows script keeps releases under the user's existing
+    // CODEX_HOME. CODEX_INSTALL_DIR selects only the visible bin junction.
+    // Respect that documented layout without redirecting the user's config.
+    const codexHome = options.env?.CODEX_HOME || join(options.home || homedir(), '.codex')
+    const homeRoot = await canonicalInstallPath(codexHome)
+    const releases = join(homeRoot, 'packages', 'standalone', 'releases')
+    const member = relative(releases, canonical)
+    const expectedVisible = !selectedPreferences.installDir || resolve(directory) === resolve(join(selectedPreferences.installDir, plan.method.installDirSubdir))
+    codexOwnedRelease = Boolean(expectedVisible && member && member !== '..' && !member.startsWith(`..${sep}`) && !isAbsolute(member))
+  }
+  if (selectedPreferences.installDir && plan.method?.supportsInstallDir) {
+    const base = await canonicalInstallPath(selectedPreferences.installDir)
+    const child = relative(base, canonical)
+    if (!codexOwnedRelease && (!child || child === '..' || child.startsWith(`..${sep}`) || isAbsolute(child))) {
+      throw new Error('官方脚本必须使用统一安装根目录下的工具专属子目录；已拒绝覆盖共享目录。')
+    }
+    const owner = plan.method.installDirSubdir?.split(/[\\/]+/)[0]
+    const ownedRoot = owner ? join(base, owner) : null
+    const ownedChild = ownedRoot ? relative(ownedRoot, canonical) : '..'
+    if (!codexOwnedRelease && (ownedChild === '..' || ownedChild.startsWith(`..${sep}`) || isAbsolute(ownedChild))) {
+      throw new Error('官方脚本的目录联接必须留在本工具专属目录中，不能指向其他工具。')
+    }
+  }
+  // These fixed/default bin installers replace only their own launcher, not
+  // another CLI's runtime directory. Sharing ~/.local/bin is intentional.
+  if (plan.method?.sharedDefaultBin && (!selectedPreferences.installDir || !plan.method.supportsInstallDir)) return
+  const targetStat = await stat(directory).catch(error => {
+    if (error.code === 'ENOENT') return null
+    throw error
+  })
+  if (targetStat && !targetStat.isDirectory()) throw new Error('官方脚本安装目标不是目录。')
+  const packageText = await readFile(join(directory, 'package.json'), 'utf8').catch(error => {
+    if (error.code === 'ENOENT') return null
+    throw error
+  })
+  if (packageText) {
+    let name
+    try { name = JSON.parse(packageText).name } catch { throw new Error('安装目录已有无法核验归属的 package.json，已停止运行官方脚本。') }
+    const ownPackage = tool.package || (tool.id === 'stepcode' ? '@step-harness/coding-agent' : '')
+    if (!name || name !== ownPackage) throw new Error('安装目录已有其他工具或项目的 package.json，已停止运行官方脚本。')
+  }
+  for (const other of OFFICIAL_TOOLS) {
+    if (other.id === tool.id) continue
+    const commandDirectories = [...new Set([directory, plan.binDir].filter(Boolean))]
+    const candidates = commandDirectories.flatMap(dir => (other.probeExecutables ?? []).flatMap(name =>
+      [name, `${name}.exe`, `${name}.cmd`, `${name}.ps1`].map(file => join(dir, file))))
+    if (other.package) {
+      candidates.push(join(directory, 'node_modules', ...other.package.split('/'), 'package.json'))
+      candidates.push(join(directory, 'lib', 'node_modules', ...other.package.split('/'), 'package.json'))
+    }
+    for (const path of candidates) {
+      const found = await stat(path).catch(error => {
+        if (error.code === 'ENOENT' || error.code === 'ENOTDIR') return null
+        throw error
+      })
+      if (found?.isFile()) throw new Error(`安装目录中已有 ${other.label} 的文件，已拒绝运行可能替换其资源的官方脚本。请使用独立目录。`)
+    }
+  }
+}
+
 /**
  * Install one tool from its vendor script: download, verify, stage, run the
  * staged copy. The binary lands in a directory the plugin appends to its own
@@ -527,6 +625,7 @@ async function runVendorScriptInstallJob(job, plan) {
   let staging = null
   try {
     job.phase = 'preflight'
+    await assertVendorInstallDirectory(job.tool, plan, job.preferences)
     const before = await probeToolWith(job.tool, defaultRunner, { plan, preferences: job.preferences, cacheMs: 0 })
     job.beforeProbe = before
     const latestBefore = before.installed ? await latestVersions.lookup(job.tool, { fresh: true }).catch(() => null) : null
@@ -548,6 +647,7 @@ async function runVendorScriptInstallJob(job, plan) {
     await writeFile(scriptPath, isPowerShell ? `\uFEFF${source}` : source, 'utf8')
     const invocation = vendorScriptInvocation(plan, scriptPath)
     job.phase = 'installing'
+    await assertVendorInstallDirectory(job.tool, plan, job.preferences)
     pushLine(job, `$ ${plan.label}${invocation.args.length > 1 ? ` ${invocation.args.slice(1).join(' ')}` : ''}`)
     const outcome = await runCapture(invocation.file, invocation.args, {
       timeoutMs: INSTALL_TIMEOUT_MS,
@@ -827,6 +927,22 @@ async function probeUncached(tool, runner, { selectedPreferences, plan, fileExis
           bannerLine: banner.split('\n').find(Boolean)?.slice(0, 200) ?? '' }
       }
     }
+    const legacy = resolveLegacyScriptLocation(tool, selectedPlan.method, selectedPreferences, currentInstallOptions())
+    if (legacy) {
+      for (const executable of tool.probeExecutables) {
+        const names = IS_WINDOWS ? [`${executable}.exe`, `${executable}.cmd`, executable] : [executable]
+        for (const name of names) {
+          const target = join(legacy.dir, name)
+          if (!(await fileExists(target))) continue
+          // Discovery is read-only. The old root can never satisfy a new job's
+          // target probe or become a script update/uninstall destination.
+          return { id: tool.id, installed: false, version: null, status: 'legacy-install',
+            installDir: selectedPlan.installDir, binDir: selectedPlan.binDir,
+            legacyExecutablePath: target,
+            detail: `发现旧共享目录中的 ${tool.label}：${target}。请安装到独立目录 ${selectedPlan.installDir}；旧文件会保留，不能用旧目录覆盖其他工具。` }
+        }
+      }
+    }
     return { id: tool.id, installed: false, version: null, status: 'not-installed',
       installDir: selectedPlan.installDir, binDir: selectedPlan.binDir,
       detail: `未在所选安装目录 ${selectedPlan.binDir} 中找到官方命令。` }
@@ -1006,6 +1122,7 @@ function jobView(job) {
     exitCode: job.exitCode,
     timedOut: job.timedOut,
     error: job.error,
+    executionReadiness: job.executionReadiness ?? null,
     outputTail: [...job.outputTail],
     outputTruncated: job.outputTruncated,
     postInstallProbe: job.postInstallProbe,
@@ -1272,8 +1389,10 @@ export function installEnvironment(plan, base = process.env) {
   return env
 }
 
-/** Mark the job succeeded only when the fresh probe is installed, ready, and not still older. */
-async function finishVerifiedInstall(job, probe) {
+/** Installation and version must pass; verify execution only where an adapter supports it. */
+export async function finishVerifiedInstall(job, probe, {
+  lookupLatest = tool => latestVersions.lookup(tool), readinessFor = trustedExecutionReadiness,
+} = {}) {
   job.postInstallProbe = probe
   if (job.cancelRequested) { markCancelled(job); return true }
   if (!probe.installed) {
@@ -1282,14 +1401,15 @@ async function finishVerifiedInstall(job, probe) {
     job.error = `安装命令已完成，但重探测失败：${probe.detail}`
     return true
   }
-  const latest = await latestVersions.lookup(job.tool).catch(() => null)
+  const latest = await lookupLatest(job.tool).catch(() => null)
   if (latest?.version && versionStillOlder(probe.version, latest.version)) {
     failBecauseStillOlder(job, probe, latest.version)
     return true
   }
-  const readiness = await trustedExecutionReadiness(job.tool.id, { preferences: job.preferences, plan: job.plan })
+  const readiness = await readinessFor(job.tool.id, { preferences: job.preferences, plan: job.plan })
+  job.executionReadiness = readiness
   if (job.cancelRequested) { markCancelled(job); return true }
-  if (!readiness.ready) {
+  if (!readiness.ready && readiness.supported !== false) {
     if (IS_WINDOWS && job.tool.id === 'minimax-code' && !job.configured) {
       await runOfficialMiniMaxInstaller(job)
       return true
@@ -1300,8 +1420,11 @@ async function finishVerifiedInstall(job, probe) {
     return true
   }
   job.status = 'succeeded'
+  job.error = null
   job.finishedAt = new Date().toISOString()
-  pushLine(job, `— 已安装 ${job.tool.label} ${probe.version ?? ''}，官方执行入口已核验（新版本未经插件测试）—`)
+  pushLine(job, readiness.supported === false
+    ? `— 已安装 ${job.tool.label} ${probe.version ?? ''}，版本探测已通过；受限执行未启用：${readiness.reason} —`
+    : `— 已安装 ${job.tool.label} ${probe.version ?? ''}，官方执行入口已核验（新版本未经插件测试）—`)
   return true
 }
 
@@ -1378,11 +1501,13 @@ async function runInstallJob(installPlan, job) {
       // exactly the case the user pressed 修复 for.
       if (job.repair) {
         pushLine(job, `— ${job.tool.label} ${before.version} 已是最新版本，按修复流程重新安装 —`)
-      } else if (readiness.ready || !CAPABILITY_REPAIRABLE.has(job.tool.id)) {
+      } else if (readiness.ready || readiness.supported === false || !CAPABILITY_REPAIRABLE.has(job.tool.id)) {
         job.status = 'succeeded'
         job.finishedAt = new Date().toISOString()
         job.postInstallProbe = before
+        job.executionReadiness = readiness
         pushLine(job, `— ${job.tool.label} ${before.version} 已是最新版本，无需重复安装 —`)
+        if (readiness.supported === false) pushLine(job, `— 受限执行未启用：${readiness.reason} —`)
         return
       } else {
         pushLine(job, `— 已是最新版本 ${before.version}，但执行入口未就绪：${readiness.reason}；重新安装修复 —`)

package/.dsh-plugin/shared/task-executors.mjs

@@ -14,8 +14,11 @@
 import { spawn } from 'node:child_process'
 import { StringDecoder } from 'node:string_decoder'
 import { realpath, stat } from 'node:fs/promises'
-import { isAbsolute, win32 } from 'node:path'
+import { dirname, isAbsolute, join, relative, sep, win32 } from 'node:path'
 import { toolForProvider } from './official-tool-registry.mjs'
+import { findGlobalPackageEntries, findNodeExecutable, officialToolEntrySelection } from './official-tool-executor.mjs'
+import { installedModuleRoots } from './vendor-mimo-grok-adapter.mjs'
+import { CODE_FILE, npmAttestor } from './npm-attestation.mjs'
 import { normalizeExecutionPreference } from './model-profiles.mjs'
 import { BILLING_MODE_LABEL, billingPlan, detectQuotaExhaustion, vendorKey } from './subscription-billing.mjs'
 
@@ -666,6 +669,45 @@ function officialSuccess({ route, adapter, preference, answer, exitCode, version
   }
 }
 
+/** Gemini's Windows npm shim cannot be spawned without a shell; use its selected package bin. */
+export async function resolvePortableToolLaunch(adapter, workspace, {
+  selection = adapter?.id === 'gemini' ? officialToolEntrySelection('gemini') : null,
+  findEntries = findGlobalPackageEntries, findNode = findNodeExecutable, attestor = npmAttestor,
+} = {}) {
+  if (adapter?.id !== 'gemini') return { file: adapter.executable, args: [] }
+  const entries = await findEntries('@google/gemini-cli', 'gemini', 'dist/index.js', workspace, { selection })
+  const found = entries[0]
+  if (!found) return { reason: '未在所选安装目录中找到 @google/gemini-cli 的 gemini 入口；已回退模型目录 API。' }
+  const inside = (root, entry) => {
+    const part = relative(root, entry)
+    return part !== '' && part !== '..' && !part.startsWith(`..${sep}`) && !isAbsolute(part)
+  }
+  const roots = Array.isArray(selection?.plan?.packageModuleRoots) ? selection.plan.packageModuleRoots
+    : await installedModuleRoots(selection?.directories ?? [], { manager: selection?.plan?.manager })
+  const prefix = selection?.plan?.installDir ? await realpath(selection.plan.installDir).catch(() => null) : null
+  if (selection?.plan?.installDir && !prefix) return { reason: 'Gemini 所选安装根无法确认，已拒绝启动并回退模型目录 API。' }
+  let contained = false
+  for (const declared of roots) {
+    const boundary = await realpath(declared).catch(() => null)
+    const parent = await realpath(dirname(declared)).catch(() => null)
+    if (!boundary || !parent || !inside(parent, boundary) || (prefix && !inside(prefix, boundary))) continue
+    if (inside(boundary, found.packageRoot) && inside(found.packageRoot, found.entry)
+      && !inside(workspace, found.packageRoot) && found.packageRoot !== workspace) { contained = true; break }
+  }
+  if (!contained) return { reason: 'Gemini 包或入口离开了所选安装目录的包存储树，已拒绝启动并回退模型目录 API。' }
+  // The manifest controls bin/import resolution, so attest it as well as all
+  // package code. Checking name/version or a signed Node alone is insufficient.
+  const include = new RegExp(`${CODE_FILE.source}|(?:^|/)package\\.json$`, 'i')
+  const checked = await attestor.matchesPackage(found.packageRoot, '@google/gemini-cli', found.version, include)
+  if (!checked.ok) return { reason: `Gemini 安装文件未通过官方 npm 摘要核验：${checked.reason}；已回退模型目录 API。` }
+  const member = relative(found.packageRoot, found.entry).split(sep).join('/')
+  const entryChecked = await attestor.matches(found.entry, '@google/gemini-cli', found.version, member)
+  if (!entryChecked.ok) return { reason: `Gemini 入口未通过官方 npm 摘要核验：${entryChecked.reason}；已回退模型目录 API。` }
+  const node = await findNode(workspace, [20, 0, 0])
+  if (!node) return { reason: '未找到工作区外的 Node.js 20+ 可执行文件；已回退模型目录 API。' }
+  return { file: node, args: [found.entry], version: found.version, source: 'official-npm-registry-attested' }
+}
+
 /**
  * Run one assigned model task. `auto` and `official` try the vendor CLI first.
  * `api` skips the CLI. A missing tool or a failed process uses `apiFallback`.
@@ -673,6 +715,7 @@ function officialSuccess({ route, adapter, preference, answer, exitCode, version
 export async function executeAssignedTask({
   route, task, workspace, timeoutMs, signal, credentials = null, spawnImpl = spawn,
   apiFallback, runVerified = null, onChunk = null, skipOfficial = null, stopGraceMs, credentialMode = 'default',
+  resolvePortableLaunch = resolvePortableToolLaunch,
 } = {}) {
   const prompt = checkedTask(task)
   const preference = executionPreference(route)
@@ -734,7 +777,13 @@ export async function executeAssignedTask({
     })
   }
   const { env, secret, credentialSource } = childEnvironment(adapter, credentials, credentialMode)
-  const probe = await captureProcess(spawnImpl, adapter.executable, ['--version'], {
+  let launch
+  try { launch = await resolvePortableLaunch(adapter, cwd) } catch (error) {
+    launch = { reason: `${adapter.label} 的安装入口无法读取：${String(error?.message ?? error).slice(0, 200)}；已回退模型目录 API。` }
+  }
+  if (!launch?.file) return useApi(apiFallback, { route, task: prompt, signal, adapter, preference,
+    reason: launch?.reason ?? `${adapter.label} 未安装或无法启动，已回退模型目录 API。` })
+  const probe = await captureProcess(spawnImpl, launch.file, [...launch.args, '--version'], {
     cwd, env, stdin: '', timeoutMs: Math.min(PROBE_TIMEOUT_MS, timeout), signal, secret,
   })
   if (probe.spawnError || probe.cancelled || probe.timedOut || probe.exitCode !== 0) {
@@ -748,7 +797,7 @@ export async function executeAssignedTask({
     return useApi(apiFallback, { route, task: prompt, signal, adapter, preference, reason })
   }
   const args = adapter.buildArgs(modelId)
-  const run = await captureProcess(spawnImpl, adapter.executable, args, {
+  const run = await captureProcess(spawnImpl, launch.file, [...launch.args, ...args], {
     cwd, env, stdin: prompt, timeoutMs: timeout, signal, onChunk, secret,
     ...(Number.isSafeInteger(stopGraceMs) && stopGraceMs >= 10 && stopGraceMs <= STOP_GRACE_MS ? { stopGraceMs } : {}),
   })

package/.dsh-plugin/shared/tool-install-preferences.mjs

@@ -249,12 +249,17 @@ export function resolveInstallPlan(tool, methodId, preferences = {}, { platform
     const binDir = target
       ? (method.installDirSuffix ? joinPath(target, method.installDirSuffix) : target)
       : vendorScriptDir(tool, { home, env, method })
-    const notices = target ? [] : installDir
+    const notices = target && installDir && method.installDirSubdir
+      ? [`官方脚本在工具专属子目录 ${target} 维护资源，保护统一安装根中的其他工具。`]
+      : target ? [] : installDir
       ? [`${method.label} 无法使用自定义安装目录（官方脚本写死了安装路径），将安装到 ${vendorScriptDir(tool, { home, env, method })}。`]
       : []
     if (method.registryEnv === 'MCODE_NPM_REGISTRY' && preferences.registry && !minimaxScriptRegistry(preferences.registry)) {
       notices.push('MiniMax 官方脚本只接受 https://registry.npmjs.org/ 或 https://registry.npmmirror.com/，本次不改写它的 npm 源。')
     }
+    if (tool.id === 'codex' && method.id === 'script-powershell') {
+      notices.push('Codex Windows 脚本将命令目录联接到用户 Codex 资源目录；统一根控制命令位置，运行资源仍由厂商保存在用户目录。需要所有文件位于统一根时请选 npm/pnpm。')
+    }
     return {
       toolId: tool.id,
       method,
@@ -332,6 +337,20 @@ export function resolveInstallLocation(tool, method, preferences = {}, { home =
   return { kind: 'package-manager', dir: packageManagerBinDir(preferences?.installDir || '', { platform }), installDir: preferences?.installDir || '', binaries: [] }
 }
 
+/**
+ * Read-only compatibility location for scripts installed directly into a
+ * configured shared root before dedicated script directories were introduced.
+ * Never use this result as an install/update target: those installers can
+ * replace a whole runtime tree belonging to another tool.
+ */
+export function resolveLegacyScriptLocation(tool, method, preferences = {}, options = {}) {
+  if (!preferences.installDir || !method?.legacySharedInstallDir || !methodHonoursInstallDir(method)) return null
+  return {
+    ...resolveInstallLocation(tool, { ...method, installDirSubdir: undefined }, preferences, options),
+    legacySharedInstallDir: true,
+  }
+}
+
 function scriptEnv(method, { installDir, scriptUrl, registry }) {
   const env = {}
   if (installDir && method.installDirEnv) env[method.installDirEnv] = installDir

package/CHANGELOG.md

@@ -1,5 +1,24 @@
 # Changelog
 
+## 0.18.2 — 2026-10-12
+
+Stable patch under the npm latest tag. Upgrade and fully restart Harness before using Step install, repair or update.
+
+- Treat the configured install directory as a shared base. Configurable vendor scripts use dedicated tool subdirectories; npm/pnpm retain their existing shared prefix. Step's official installer replaces its entire runtime directories, so passing the shared root could delete every other npm package there.
+- Check script targets before download or execution: refuse shared roots, other tool/project manifests and commands, package stores, and junctions into another tool's tree. Codex's junction within its own release tree and intentional shared default launcher directories remain supported. Legacy script roots are discovered read-only and cannot satisfy or redirect new install jobs.
+- Separate successful version/install verification from unsupported restricted execution capabilities. Gemini, OpenCode and Step can be installed successfully while retaining explicit execution limitations; supported tools still require their original trusted-entry checks.
+- Resolve Windows Gemini through its selected npm/pnpm package bin and a verified Node executable. Check package-tree containment and official registry file digests before launch, and preserve API fallback when the selected copy is missing or fails verification.
+- Add regressions for destructive vendor runtime replacement, shared-prefix sentinels, junctions, legacy discovery, install capability status and Windows Gemini entry selection. Release notes record validation and the original-version recovery performed on the reported machine.
+
+## 0.18.1 — 2026-10-12
+
+Stable patch under the npm latest tag. Fully quit Harness, including the tray or WebUI host process, and restart after upgrading.
+
+- Fix official-tool method selection stuck on saving: configuration persistence no longer waits for CLI inspection, and selectors reflect the acknowledged settings snapshot.
+- Refresh install commands through a lightweight Host endpoint; delayed tool inspections cannot overwrite a newer install preview. Install actions wait for confirmed settings while method selection remains available.
+- Synchronize volatile install settings into Host preferences without requiring plugin reload. Invalid configuration is reported and cannot start an operation with older settings.
+- Add regression coverage using the real settings controller and Loader, plus a mock UI scenario with a hanging tool inspection. Release validation is recorded in the release notes.
+
 ## 0.18.0 — 2026-10-12
 
 Stable minor under the npm latest tag. Fully quit Harness, including the tray or WebUI host process, and restart after upgrading. Existing releases remain unchanged.