@ljwei-stak/dsh-model-router 0.18.2 → 0.20.0

package/docs/releases/0.20.0-validation.md

@@ -0,0 +1,26 @@
+# 0.20.0 validation — 2026-10-15
+
+This release was developed against DeepSeek Harness Desktop 0.2.0-rc.2 on Windows. Declared rc.1 compatibility is not a claim of a second real host run.
+
+## Real executions
+
+- **Workbench execution:** the real desktop profile's authenticated preview/start RPC selected `official-team`, `workspace-write`, and explicitly confirmed `cli-native`. Claude read a small repository fixture, created a JSON file, ran a Python validation command and completed. The source repository received the Git patch; independent file readback matched the expected values. This was one work package, not a multi-agent team result.
+- **Cross-vendor dependency:** the installed production team runtime ran a predeclared Claude analysis package followed by a MiniMax delivery package consuming its result. No mock CLI adapters were injected. Both used their existing vendor configuration. MiniMax read the fixture, wrote the handoff JSON and reported a successful PowerShell JSON check. The patch was integrated and independently read back. This second check directly invoked the installed runtime; it was not a workbench UI automation or an automatic-routing comparison. Ledger recording used the same checkout function with its development peers, since standalone import of the Desktop entry lacks host-provided peers.
+- Both successful checks retained CLI defaults. The MiniMax result reported `minimax/MiniMax-M3`; Claude's actual model remained unknown in the saved records. Recommendation IDs are not proof of backend identity.
+- The successful calls reported API amounts of $0.1381192 and $0.1157288. MiniMax supplied token usage under a subscription login, with no verified reference price. Earlier attempts with missing usage/prices remain unknown; $0.253848 is a known subtotal, not the batch's reconciled supplier bill.
+
+## Failures that shaped the fix
+
+- Original terminal execution and managed execution differed in model arguments, environment, writable state and tool restrictions. Catalog IDs are now passed only through explicit CLI model mappings.
+- The Windows ACL backend rejected worktree initialization on a source drive lacking WRITE_OWNER, before any CLI started. A no-model SDK probe reproduced that failure and succeeded in private user temporary storage. A real confined-write and cross-drive patch integration probe passed after relocating Windows worktrees.
+- MiniMax then reached its CLI but could not write its original state directory. The SDK also limits libuv pipe creation by confined descendant processes, affecting some shell and MCP paths. Additional filesystem grants alone do not restore normal vendor behavior.
+- The explicit `cli-native` option uses current user permissions outside Harness's process sandbox, retains Git worktree integration checks, and always requires its own confirmation. It is never an automatic response to a failed restricted run. Existing restricted records keep their environment when retried.
+- A Claude restricted-environment attempt reported gateway 529 errors with a complete zero-usage/zero-cost terminal result. Codex attempts failed connection checks. These failures remain recorded rather than being silently replaced by API calls.
+
+## Scope and limits
+
+Default execution remains Harness-restricted. Claude read-only disables shell, skills and existing MCP, and ignores user settings. Editable native execution offers normal vendor tools under user permissions; the worktree collects changes and is not an OS security boundary. Configured external MCP services may have their own effects.
+
+The successful experiments exercised file and shell tools, dependency context, and patch integration. They do not establish that every vendor, model, skill or MCP service works. Codex network execution, remote MCP effects, and statistical quality–cost improvements remain unverified. Raw experiments, credentials, machine paths and screenshots stay in the private local archive.
+
+Automated validation covers confirmation gates, stale previews, selected installation entries, native package trust, default-model behavior, partial/failed accounting, exceptions, retries, and Git isolation/integration. Final test totals are recorded in the release notes.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ljwei-stak/dsh-model-router",
-  "version": "0.18.2",
+  "version": "0.20.0",
   "type": "module",
   "description": "Model Router for official DeepSeek Harness Desktop: cost-aware task routing, dependent work packages and official vendor CLI discovery, installation and execution. GAL is available separately as @ljwei-stak/dsh-galgame.",
   "repository": {
@@ -91,7 +91,8 @@
     "docs/archive/MIGRATION.md",
     "LICENSE",
     "CHANGELOG.md",
-    "docs/assets/router-only-0.12.0.png"
+    "docs/assets/router-only-0.12.0.png",
+    "docs/releases/0.20.0-validation.md"
   ],
   "scripts": {
     "build:client": "node scripts/build-client.mjs",
@@ -103,7 +104,7 @@
     "experiment:routing-summary": "node scripts/summarize-routing-search.mjs",
     "experiment:routing-adaptive": "node scripts/adaptive-routing-study.mjs",
     "audit:livebench": "node scripts/livebench-aggregate-audit.mjs",
-    "test": "node --test tests/adaptive-*.test.mjs tests/dynamic-data.test.mjs tests/router.test.mjs tests/routing-optimizer.test.mjs tests/routing-evaluation.test.mjs tests/routing-paired-statistics.test.mjs tests/routing-selftest-tools.test.mjs tests/livebench-aggregate-audit.test.mjs tests/livebench-prior-study.test.mjs tests/routing-search-experiment.test.mjs tests/routing-regression-study.test.mjs tests/routing-search-summary.test.mjs tests/harness-*.test.mjs tests/official-tools.test.mjs tests/official-team-runtime.test.mjs tests/model-profiles.test.mjs tests/model-profile-editor.test.mjs tests/tool-install-state.test.mjs tests/tool-install-sdk-ui.test.mjs tests/vendor-adapters.test.mjs tests/desktop-compat.test.mjs tests/plugin-split.test.mjs tests/install-settings-host.test.mjs tests/task-executors.test.mjs tests/tool-install-preferences.test.mjs tests/roadmap.test.mjs tests/insights-state.test.mjs tests/billing-team-ledger.test.mjs tests/subscription-billing.test.mjs tests/subscription-host.test.mjs tests/test-pass-regressions.test.mjs tests/roadmap-gaps.test.mjs tests/cordis-inject.test.mjs tests/cli-terminal.test.mjs tests/cli-terminal-gateway.test.mjs tests/latest-versions.test.mjs tests/vendor-installer-validation.test.mjs tests/install-entry-selection.test.mjs tests/script-directory-safety.test.mjs",
+    "test": "node --test tests/adaptive-*.test.mjs tests/dynamic-data.test.mjs tests/router.test.mjs tests/routing-optimizer.test.mjs tests/routing-evaluation.test.mjs tests/routing-paired-statistics.test.mjs tests/routing-selftest-tools.test.mjs tests/livebench-aggregate-audit.test.mjs tests/livebench-prior-study.test.mjs tests/routing-search-experiment.test.mjs tests/routing-regression-study.test.mjs tests/routing-search-summary.test.mjs tests/harness-*.test.mjs tests/official-tools.test.mjs tests/official-tool-result.test.mjs tests/native-environment.test.mjs tests/native-entry-trust.test.mjs tests/tool-failure-ledger.test.mjs tests/official-team-runtime.test.mjs tests/model-profiles.test.mjs tests/model-profile-editor.test.mjs tests/tool-install-state.test.mjs tests/tool-install-sdk-ui.test.mjs tests/vendor-adapters.test.mjs tests/desktop-compat.test.mjs tests/plugin-split.test.mjs tests/install-settings-host.test.mjs tests/task-executors.test.mjs tests/tool-install-preferences.test.mjs tests/roadmap.test.mjs tests/insights-state.test.mjs tests/billing-team-ledger.test.mjs tests/subscription-billing.test.mjs tests/subscription-host.test.mjs tests/test-pass-regressions.test.mjs tests/roadmap-gaps.test.mjs tests/cordis-inject.test.mjs tests/cli-terminal.test.mjs tests/cli-terminal-gateway.test.mjs tests/latest-versions.test.mjs tests/vendor-installer-validation.test.mjs tests/install-entry-selection.test.mjs tests/script-directory-safety.test.mjs tests/zcode-config.test.mjs tests/zcode-runtime.test.mjs",
     "prepack": "node scripts/prepack.mjs",
     "pack:local": "npm pack --pack-destination dist"
   },