@ljwei-stak/model-router-galgame 0.8.0 → 0.9.0

package/.dsh-plugin/index.mjs

@@ -2,6 +2,7 @@ import z from '@deepseek-ai/schemastery'
 import { defineTool } from '@deepseek-ai/dsh-tools'
 import { DEFAULT_ROUTER_SETTINGS } from './shared/router.mjs'
 import { createPlanFromRoutes } from './shared/harness-plan.mjs'
+import { applyModelProfiles, parseModelProfilesJson } from './shared/model-profiles.mjs'
 import { registerOfficialToolsRemote } from './official-tools-remote-service.mjs'
 import {
   getOfficialTool,
@@ -26,6 +27,7 @@ export const inject = ['commands', 'llm', 'tools', 'typert', 'sandboxPolicy', 's
 export const Config = z.object({
   budgetUsd: z.number().min(0).max(1_000_000).default(DEFAULT_ROUTER_SETTINGS.budgetUsd).volatile(),
   maxConsultOutputChars: z.number().step(1).min(500).max(50_000).default(12_000).volatile(),
+  modelProfilesJson: z.string().max(32_000).default('[]').volatile(),
 })
 
 const JSON_OUTPUT = {
@@ -67,6 +69,11 @@ function routeKey(route) {
   return `${route.provider}\u0000${route.model}`
 }
 
+function configuredRoutesWithProfiles(routes, config) {
+  const profiles = parseModelProfilesJson(valueOf(config, 'modelProfilesJson', '[]'))
+  return applyModelProfiles(routes, profiles)
+}
+
 function uniqueStrings(values) {
   return [...new Set(values.map(text).filter(Boolean))]
 }
@@ -118,12 +125,13 @@ export async function createRoutePlan(ctx, task, config = {}, options = {}) {
   const mode = options.mode === 'team' ? 'team' : 'single'
   const configuredBudget = valueOf(config, 'budgetUsd', DEFAULT_ROUTER_SETTINGS.budgetUsd)
   const budgetUsd = Math.max(0, finiteNumber(options.budgetUsd, finiteNumber(configuredBudget, 0)))
-  const [availableRoutes, installed] = await Promise.all([
+  const [discoveredRoutes, installed] = await Promise.all([
     discoverConfiguredRoutes(ctx, options.signal),
     options.skipToolProbe === true
       ? Promise.resolve(Array.isArray(options.installedToolIds) ? options.installedToolIds : [])
       : installedToolIds(),
   ])
+  const availableRoutes = configuredRoutesWithProfiles(discoveredRoutes, config)
   const readiness = options.skipToolProbe === true ? []
     : await Promise.all(installed.map(id => officialToolReadiness(id, options.workspace ?? process.cwd())))
   const executable = new Set(Array.isArray(options.runnableToolIds)
@@ -228,6 +236,25 @@ function chooseConsultRoute(plan, routes, agent) {
   return routes.find(differs) ?? preferred ?? routes[0]
 }
 
+/** Manual package > manual tool > saved route mapping > CLI default. */
+export function resolveTeamCliModelBindings(plan, routes, requested = {}) {
+  if (!requested || typeof requested !== 'object' || Array.isArray(requested)) {
+    throw new Error('cliModelsJson 必须是以工作包或官方工具 ID 为键的 JSON 对象')
+  }
+  const byRoute = new Map(routes.map(route => [routeKey(route), route]))
+  const bindings = Object.create(null)
+  for (const item of plan.team.workPackages) {
+    const toolId = toolForProvider(item.recommendedProvider)?.id
+    const profile = byRoute.get(`${item.recommendedProvider}\u0000${item.recommendedModel}`)
+    if (profile?.cliModel && toolId !== 'zcode') bindings[item.id] = profile.cliModel
+    if (Object.hasOwn(requested, toolId)) bindings[item.id] = requested[toolId]
+    if (Object.hasOwn(requested, item.id)) bindings[item.id] = requested[item.id]
+  }
+  // Keep the supplied keys so the runtime can reject unknown tool/package IDs.
+  return { ...bindings, ...Object.fromEntries(Object.entries(requested)
+    .filter(([key]) => !Object.hasOwn(bindings, key))) }
+}
+
 function commandText(plan) {
   const selected = plan.selected ? `${plan.selected.provider}/${plan.selected.model}` : '没有可用路线'
   const channel = plan.executionChannel === 'official-cli'
@@ -236,7 +263,7 @@ function commandText(plan) {
   return [
     `推荐路线：${selected}`,
     `复杂度：${plan.complexity.band}；任务类型：${plan.taskType}`,
-    `执行渠道：${channel}；估算成本：$${plan.estimatedCost.toFixed(6)}（仅估算）`,
+    `执行渠道：${channel}；估算成本：${plan.estimatedCost === null ? '价格资料不足' : `$${plan.estimatedCost.toFixed(6)}（仅估算）`}`,
     `工作包：${plan.subtasks.map(item => `${item.name} → ${item.recommendedProvider}/${item.recommended}`).join('；')}`,
     plan.team.handoff,
   ].join('\n')
@@ -295,7 +322,7 @@ export function apply(ctx, config = {}) {
   }))
   ctx.tools.register(defineTool({
     name: 'model_router_plan',
-    description: 'Recommend configured Harness model routes for a task and optionally produce work packages for official Agent Teams. Costs are local estimates.',
+    description: 'Analyze task difficulty, recommend only configured Harness model routes, and optionally split compound work into dependent packages. Cost estimates require user-supplied USD prices for the exact routes.',
     parameters: {
       task: { type: 'string', required: true, description: 'Task to analyze.' },
       mode: { type: 'string', enum: ['single', 'team'], description: 'Use team to produce Agent Teams work packages.' },
@@ -469,9 +496,12 @@ function registerOfficialToolModels(ctx, config) {
         if (!text(args.provider) || !text(args.model)) throw new Error('provider 和 model 必须同时提供')
         const tool = toolForProvider(args.provider)
         if (tool?.id !== args.tool) throw new Error('所选模型供应商与官方 CLI 工具不匹配')
-        const routes = await discoverConfiguredRoutes(ctx, exec.signal)
-        if (!routes.some(route => route.provider === args.provider && route.model === args.model)) throw new Error('所选 provider/model 不在官方模型目录中')
-        modelId = args.tool === 'claude-code' || args.tool === 'codex' ? args.model : null
+        const routes = configuredRoutesWithProfiles(await discoverConfiguredRoutes(ctx, exec.signal), config)
+        const route = routes.find(item => item.provider === args.provider && item.model === args.model)
+        if (!route) throw new Error('所选 provider/model 不在官方模型目录中')
+        modelId = route.cliModel && args.tool !== 'zcode'
+          ? route.cliModel
+          : args.tool === 'claude-code' || args.tool === 'codex' ? args.model : null
       }
       if (text(args.cliModel)) {
         if (!text(args.provider) || !text(args.model)) throw new Error('cliModel 需要同时提供已配置的 provider 和 model 路线')
@@ -499,7 +529,8 @@ function registerOfficialToolModels(ctx, config) {
       const { cwd, root, sandboxMode } = await sessionWorkspace(ctx, exec)
       const mode = args.mode === 'workspace-write' ? 'workspace-write' : 'read-only'
       if (mode === 'workspace-write' && sandboxMode === 'read-only') throw new Error('当前 Harness 会话为只读模式，不能请求可编辑团队执行')
-      const [routes, installed] = await Promise.all([discoverConfiguredRoutes(ctx, exec.signal), installedToolIds()])
+      const [discoveredRoutes, installed] = await Promise.all([discoverConfiguredRoutes(ctx, exec.signal), installedToolIds()])
+      const routes = configuredRoutesWithProfiles(discoveredRoutes, config)
       const readiness = await Promise.all(installed.map(id => officialToolReadiness(id, cwd)))
       const supported = new Set(readiness.filter(item => item.ready).map(item => item.id))
       const capabilities = new Map(officialToolExecutionCapabilities().map(item => [item.id, item]))
@@ -524,10 +555,11 @@ function registerOfficialToolModels(ctx, config) {
         try { cliModels = JSON.parse(bindingsText) }
         catch { throw new Error('cliModelsJson 不是有效的 JSON 对象') }
       }
+      cliModels = resolveTeamCliModelBindings(plan, executableRoutes, cliModels ?? {})
       const execution = await runOfficialTeam({ plan, task: args.task, workspace: cwd,
         allowedRoot: root, mode, installedIds: installed, cliModels, signal: exec.signal, sandbox: ctx.sandbox })
       return jsonValue({ plan, execution,
-        modelNotice: '团队向 Claude/Codex 请求 Harness 推荐模型 ID；其他厂商默认使用 CLI 已配置模型。cliModelsJson 可按工具或工作包指定准确 CLI 模型名。实际模型须以各厂商记录核对。',
+        modelNotice: '已配置 cliModel 的路线按工作包传给官方 CLI；Claude/Codex 在未配置映射时请求 Harness 模型 ID。其他厂商无映射时使用 CLI 默认模型。多数 CLI 尚不返回可核验的实际模型 ID，须以厂商运行记录核对。',
         billingNotice: 'budgetUsd 仅影响估算与路由，无法限制官方 CLI 账号实际费用。' })
     },
   }))

package/.dsh-plugin/official-tools-remote-service.mjs

@@ -40,7 +40,7 @@ export class OfficialToolsRemoteService extends TypertRemoteService {
   }
 
   /** Start one serialized fixed-registry install; return immediately for UI polling. */
-  async install(toolId) {
+  async installTool(toolId) {
     try {
       await ensureNpmPrefixOnPath()
       return { accepted: true, job: startInstall(toolId) }

package/.dsh-plugin/shared/harness-plan.mjs

@@ -44,7 +44,10 @@ function annotate(channel) {
  * by the Desktop panel. Model discovery stays on the official side of each
  * runtime and only the public provider/model directory crosses this boundary.
  */
-export function createPlanFromRoutes(task, availableRoutes, { mode = 'single', budgetUsd = 0, installedToolIds = [], runnableToolIds = [] } = {}) {
+export function createPlanFromRoutes(task, availableRoutes, {
+  mode = 'single', budgetUsd = 0, installedToolIds = [], runnableToolIds = [],
+  pricing = {}, liveBench = null, cacheReadRatio = 0, cacheWriteRatio = 0,
+} = {}) {
   const taskText = clean(task)
   if (!taskText) throw new Error('task must contain text')
   const selectedMode = mode === 'team' ? 'team' : 'single'
@@ -57,16 +60,15 @@ export function createPlanFromRoutes(task, availableRoutes, { mode = 'single', b
     return channelCache.get(key)
   }
   const needsImage = detectTaskTypes(taskText).includes('vision')
-  const eligibleRoutes = needsImage
-    ? routes.filter(route => !Array.isArray(route.inputModalities)
-      || route.inputModalities.length === 0
-      || route.inputModalities.includes('image'))
-    : routes
   const plan = buildPlan({
     text: taskText,
-    available: eligibleRoutes,
+    available: routes,
     mode: selectedMode,
     budgetUsd: Math.max(0, Number.isFinite(budgetUsd) ? budgetUsd : 0),
+    pricing,
+    liveBench,
+    cacheReadRatio,
+    cacheWriteRatio,
   })
   const selectedChannel = plan.selected ? channelOf(plan.selected.provider) : null
   return {
@@ -75,24 +77,37 @@ export function createPlanFromRoutes(task, availableRoutes, { mode = 'single', b
     availableRoutes: routes,
     ...(selectedChannel ? annotate(selectedChannel) : {}),
     availabilityNotice: '模型目录列出的路线尚未验证当前凭据和网络；实际可用性以官方适配器调用结果为准。',
-    pricingNotice: '费用是本地估算，不是供应商账单，也不是硬性支出上限。',
-    modalityNotice: needsImage && eligibleRoutes.length < routes.length
-      ? '图像任务已排除明确声明不接受图像输入的模型；未声明能力的模型仍需人工验证。'
+    pricingNotice: plan.estimatedCost === null
+      ? '部分路线尚未配置该供应商的美元输入/输出单价，无法计算可靠的总费用与节省比例；请在模型价格设置中补齐。'
+      : '费用按已提供的美元单价和估计 token 数计算，不是供应商账单，也不是硬性支出上限。',
+    qualityNotice: plan.optimization.qualityEvidenceComplete
+      ? '模型质量使用已提供评分或基准数据估计，仍需实际任务验证。'
+      : '部分模型质量缺少可核验评分；目录启发式只供选择参考，质量门槛和节省比例无法保证。',
+    modalityNotice: needsImage
+      ? plan.unassignableTasks.length > 0
+        ? '图像工作包没有可确认支持图像输入的路线，当前计划无法完整分配；请在官方模型目录配置支持图像的模型。'
+        : routes.some(route => !Array.isArray(route.inputModalities) || route.inputModalities.length === 0)
+          ? '图像工作包只分给已声明图像能力或未声明输入能力的模型；未声明能力的模型仍需实际验证。其他文本工作包可继续使用经济型文本模型。'
+          : '图像工作包只分给明确支持图像输入的模型；其他文本工作包可继续使用经济型文本模型。'
       : null,
     toolNotice: '执行渠道按官方工具注册表和已核验适配器标注：official-cli 表示该厂商官方 CLI 已安装且可托管执行；harness-llm 表示通过官方模型目录调用。可在工作台查看安装与执行支持状态。',
     team: {
       requested: selectedMode === 'team',
       recommended: selectedMode === 'team' && plan.complexity.band === 'complex' && plan.subtasks.length > 1,
       handoff: '可在官方会话调用 model_router_team_execute 托管执行当前平台支持的官方 CLI 工作包；官方 Agent Teams 可协作管理任务，但成员模型由宿主配置，不能直接按本计划逐个切换。',
-      workPackages: plan.subtasks.map(item => ({
+      workPackages: plan.subtasks.map((item, index) => ({
         id: item.id,
         name: item.name,
         ...(item.objective ? { objective: item.objective } : {}),
         type: item.type,
         purpose: item.purpose,
+        difficulty: item.difficulty,
+        qualitySource: item.qualitySource,
+        pricingSource: item.pricingSource,
         dependsOn: item.dependsOn,
         recommendedProvider: item.recommendedProvider,
         recommendedModel: item.recommended,
+        estimatedCost: plan.costBreakdown[index]?.estimatedCost ?? null,
         ...item.recommendedReasoningEffort ? { recommendedReasoningEffort: item.recommendedReasoningEffort } : {},
         ...annotate(channelOf(item.recommendedProvider)),
         verificationChecklist: item.purpose === 'synthesis'

package/.dsh-plugin/shared/model-profiles.mjs

@@ -0,0 +1,101 @@
+/**
+ * Optional, user supplied information for exact routes in the Harness model
+ * directory. Harness does not publish prices or comparative quality scores.
+ * This file never accepts credentials, endpoints, packages or shell commands.
+ */
+import { toolForProvider } from './official-tool-registry.mjs'
+const MAX_TEXT = 32_000
+const MAX_PROFILES = 200
+const id = value => typeof value === 'string' ? value.trim() : ''
+
+function nonnegative(value, label) {
+  if (typeof value !== 'number' || !Number.isFinite(value) || value < 0 || value > 1_000_000) {
+    throw new Error(`${label} 必须是 0 到 1000000 之间的有限数字`)
+  }
+  return value
+}
+
+function normalizeProfile(entry, index) {
+  const label = `第 ${index + 1} 个模型`
+  if (!entry || typeof entry !== 'object' || Array.isArray(entry)) throw new Error(`${label} 必须是对象`)
+  const allowed = new Set(['provider', 'model', 'quality', 'pricing', 'specialties', 'cliModel'])
+  const unknown = Object.keys(entry).find(key => !allowed.has(key))
+  if (unknown) throw new Error(`${label} 含不支持的字段 ${unknown}；不要在这里填写密钥或命令`)
+  const provider = id(entry.provider)
+  const model = id(entry.model)
+  if (!provider || !model || provider.length > 160 || model.length > 240) {
+    throw new Error(`${label} 需要模型目录中的准确 provider 和 model`)
+  }
+  const profile = { provider, model }
+  if (entry.quality !== undefined) {
+    const value = nonnegative(entry.quality, `${label} 的 quality`)
+    if (value > 100) throw new Error(`${label} 的 quality 应在 0 到 100 之间`)
+    profile.quality = value / 100
+  }
+  if (entry.pricing !== undefined) {
+    const prices = entry.pricing
+    if (!prices || typeof prices !== 'object' || Array.isArray(prices)) throw new Error(`${label} 的 pricing 必须是对象`)
+    const priceFields = new Set(['input', 'output', 'cacheRead', 'cacheWrite', 'currency'])
+    const unknownPrice = Object.keys(prices).find(key => !priceFields.has(key))
+    if (unknownPrice) throw new Error(`${label} 的 pricing 含不支持的字段 ${unknownPrice}`)
+    if (prices.currency !== undefined && prices.currency !== 'USD') throw new Error(`${label} 的价格币种目前仅支持 USD`)
+    profile.pricing = {
+      input: nonnegative(prices.input, `${label} 的输入单价`),
+      output: nonnegative(prices.output, `${label} 的输出单价`),
+      currency: 'USD',
+    }
+    if (prices.cacheRead !== undefined) profile.pricing.cacheRead = nonnegative(prices.cacheRead, `${label} 的缓存读取单价`)
+    if (prices.cacheWrite !== undefined) profile.pricing.cacheWrite = nonnegative(prices.cacheWrite, `${label} 的缓存写入单价`)
+  }
+  if (entry.specialties !== undefined) {
+    if (!Array.isArray(entry.specialties) || entry.specialties.length > 16
+      || entry.specialties.some(value => !/^[a-z][a-z0-9-]{0,39}$/.test(value))) {
+      throw new Error(`${label} 的 specialties 必须是至多 16 个英文任务标签`)
+    }
+    profile.specialties = [...new Set(entry.specialties)]
+  }
+  if (entry.cliModel !== undefined) {
+    const cliModel = id(entry.cliModel)
+    if (!/^[A-Za-z0-9][A-Za-z0-9._:/-]{0,119}$/.test(cliModel)) throw new Error(`${label} 的 cliModel 无效`)
+    if (toolForProvider(provider)?.id === 'zcode') throw new Error(`${label} 对应的 ZCode CLI 暂不支持逐次切换模型`)
+    profile.cliModel = cliModel
+  }
+  if (Object.keys(profile).length === 2) throw new Error(`${label} 至少提供 quality、pricing、specialties 或 cliModel 之一`)
+  return profile
+}
+
+/** Parse a settings field; an empty value intentionally means no overrides. */
+export function parseModelProfilesJson(value) {
+  const source = value == null || value === '' ? '[]' : value
+  if (typeof source !== 'string' || source.length > MAX_TEXT) throw new Error('模型价格与能力配置超过 32000 字符上限')
+  let input
+  try { input = JSON.parse(source) } catch { throw new Error('模型价格与能力配置不是有效的 JSON') }
+  if (!Array.isArray(input) || input.length > MAX_PROFILES) throw new Error('模型价格与能力配置必须是最多 200 项的 JSON 数组')
+  const profiles = input.map(normalizeProfile)
+  const seen = new Set()
+  for (const profile of profiles) {
+    const key = `${profile.provider}\0${profile.model}`
+    if (seen.has(key)) throw new Error(`模型 ${profile.provider}/${profile.model} 重复配置`)
+    seen.add(key)
+  }
+  return profiles
+}
+
+/** Apply metadata only to exact routes actually returned by Harness. */
+export function applyModelProfiles(routes, profiles) {
+  const input = Array.isArray(routes) ? routes : []
+  const values = typeof profiles === 'string' ? parseModelProfilesJson(profiles) : profiles
+  if (!Array.isArray(values)) throw new Error('模型配置必须是数组')
+  const byKey = new Map(values.map(profile => [`${profile.provider}\0${profile.model}`, profile]))
+  return input.map(route => {
+    const profile = byKey.get(`${route.provider}\0${route.model}`)
+    if (!profile) return route
+    return {
+      ...route,
+      ...(profile.quality === undefined ? {} : { quality: profile.quality, qualitySource: 'user' }),
+      ...(profile.pricing === undefined ? {} : { pricing: { ...profile.pricing }, pricingSource: 'user' }),
+      ...(profile.specialties === undefined ? {} : { specialties: [...profile.specialties] }),
+      ...(profile.cliModel === undefined ? {} : { cliModel: profile.cliModel }),
+    }
+  })
+}

package/.dsh-plugin/shared/official-team-runtime.mjs

@@ -207,6 +207,18 @@ function teamCliModel(item, cliModels) {
     ? item.recommendedModel : null
 }
 
+function reportedCliModel(toolId, value) {
+  if (typeof value === 'string' && value.trim()) return value.trim()
+  // MiniMax's verified exec.result.model is a structured selection, while
+  // its --model argument is one provider/model string.
+  if (toolId === 'minimax-code' && value && typeof value === 'object'
+    && typeof value.providerId === 'string' && value.providerId
+    && typeof value.modelId === 'string' && value.modelId) {
+    return `${value.providerId}/${value.modelId}`
+  }
+  return null
+}
+
 function packagePrompt(task, item, completed) {
   const dependencies = item.dependsOn.map(id => completed.find(result => result.id === id)).filter(Boolean)
   const directions = {
@@ -250,7 +262,7 @@ export function executableTeamPackages(plan, installedIds = [], mode = 'read-onl
 }
 
 /** Sequential execution preserves DAG dependencies and avoids edit conflicts. */
-export async function runOfficialTeam({ plan, task, workspace, allowedRoot, mode = 'read-only', installedIds = [], cliModels, signal, sandbox }) {
+export async function runOfficialTeam({ plan, task, workspace, allowedRoot, mode = 'read-only', installedIds = [], cliModels, signal, sandbox, runtime }) {
   const { assigned, blocking } = executableTeamPackages(plan, installedIds, mode)
   if (assigned.length === 0) return { status: 'blocked', blocking: [{ reason: '计划没有工作包。' }], results: [] }
   if (blocking.length > 0) return { status: 'blocked', blocking, results: [] }
@@ -258,7 +270,11 @@ export async function runOfficialTeam({ plan, task, workspace, allowedRoot, mode
   const configuredCliModels = checkedTeamCliModels(cliModels, assigned)
   const source = await canonicalDirectory(workspace)
   if (typeof sandbox?.confine !== 'function') return { status: 'blocked', blocking: [{ reason: '官方 Harness 进程沙箱不可用。' }], results: [] }
-  const readiness = await Promise.all([...new Set(assigned.map(item => item.toolId))].map(id => officialToolReadiness(id, source)))
+  // The Host passes no runtime override. Tests can inject inert CLI adapters to
+  // exercise assignment, stopping, and Git integration without provider accounts.
+  const readinessCheck = runtime?.readiness ?? officialToolReadiness
+  const runTool = runtime?.runTool ?? runOfficialTool
+  const readiness = await Promise.all([...new Set(assigned.map(item => item.toolId))].map(id => readinessCheck(id, source)))
   const unready = readiness.filter(item => !item.ready)
   if (unready.length > 0) return { status: 'blocked', blocking: unready.map(item => ({ toolId: item.id, reason: item.reason })), results: [] }
   const isolated = mode === 'workspace-write' ? await isolatedWorktree(source, signal, allowedRoot) : null
@@ -267,7 +283,7 @@ export async function runOfficialTeam({ plan, task, workspace, allowedRoot, mode
   for (const item of assigned) {
     if (signal?.aborted) return { status: 'cancelled', workspace: runWorkspace, results: completed }
     const cliModel = teamCliModel(item, configuredCliModels)
-    const result = await runOfficialTool({
+    const result = await runTool({
       toolId: item.toolId,
       modelId: cliModel,
       task: packagePrompt(task, item, completed),
@@ -277,18 +293,24 @@ export async function runOfficialTeam({ plan, task, workspace, allowedRoot, mode
       sandbox,
       signal,
     })
+    const reportedModel = reportedCliModel(item.toolId, result.reportedModel)
+    const modelMismatch = result.status === 'succeeded' && cliModel && reportedModel
+      && cliModel !== reportedModel
+    const packageStatus = modelMismatch ? 'model-mismatch' : result.status
     completed.push({ id: item.id, name: item.name,
       ...(item.objective ? { objective: item.objective } : {}), provider: item.recommendedProvider,
       recommendedModel: item.recommendedModel, toolId: item.toolId,
       requestedCliModel: result.requestedModel ?? null,
-      actualModel: result.reportedModel ?? null,
-      modelNotice: result.modelNotice ?? (!cliModel
+      actualModel: reportedModel,
+      modelNotice: modelMismatch
+        ? `官方 CLI 回报模型 ${reportedModel}，与本包指定的 ${cliModel} 不一致；后续工作包已停止。`
+        : result.modelNotice ?? (!cliModel
         ? 'Harness 推荐模型 ID 未经此厂商 CLI 验证；本包使用厂商 CLI 已配置的默认模型。'
-        : result.reportedModel ? null : '该 CLI 未返回可核验的实际模型 ID；请以厂商运行记录核对。'),
-      status: result.status, finalText: result.finalText ?? '',
-      error: result.error ?? result.reason ?? null,
+        : reportedModel ? null : '该 CLI 未返回可核验的实际模型 ID；请以厂商运行记录核对。'),
+      status: packageStatus, finalText: result.finalText ?? '',
+      error: modelMismatch ? '官方 CLI 实际模型与指定模型不一致。' : result.error ?? result.reason ?? null,
       outputTail: result.status === 'succeeded' ? null : result.stderrTail ?? result.stdoutTail ?? null })
-    if (result.status !== 'succeeded') return { status: 'incomplete', workspace: runWorkspace, results: completed }
+    if (packageStatus !== 'succeeded') return { status: 'incomplete', workspace: runWorkspace, results: completed }
   }
   if (!isolated) return { status: 'cli-completed', workspace: runWorkspace, results: completed,
     notice: '只读模式已收集各工作包结果；模型输出仍需人工验收。' }

package/.dsh-plugin/shared/official-tool-executor.mjs

@@ -14,6 +14,7 @@
  * https://moonshotai.github.io/kimi-code/en/reference/kimi-command.html
  */
 import { spawn } from 'node:child_process'
+import { createHash } from 'node:crypto'
 import { access, readFile, realpath, stat } from 'node:fs/promises'
 import { constants } from 'node:fs'
 import { StringDecoder } from 'node:string_decoder'
@@ -34,6 +35,9 @@ const STOP_GRACE_MS = 5_000
 const CLAUDE_MIN_RESTRICTED_VERSION = [2, 1, 259]
 const CLAUDE_SIGNER = 'Anthropic, PBC'
 const CODEX_SIGNER = 'OpenAI OpCo, LLC'
+// SHA-256 of package/cli.js in the official @minimax-ai/code@0.5.5 npm tarball.
+// The Windows installer-managed release carries the exact same entry file.
+const MINIMAX_055_CLI_SHA256 = '8d36dec74e93beddf392459557a7afd8655bcdc874121981608d2c82658814ab'
 const WINDOWS_SYSTEM32 = join(process.env.SystemRoot ?? 'C:\\Windows', 'System32')
 const ENVIRONMENT_KEYS = Object.freeze([
   'PATH', 'Path', 'PATHEXT', 'SystemRoot', 'windir', 'ComSpec',
@@ -187,6 +191,39 @@ async function findGlobalPackageEntries(packageName, binName, expectedBin, works
   return found
 }
 
+/** The official MiniMax Windows installer uses a versioned releases tree rather than npm -g. */
+export async function findManagedMiniMaxEntry(workspace,
+  directories = pathDirectories().flatMap(directory => [directory, join(directory, '.minimax-code')]),
+  trustedCliSha256 = MINIMAX_055_CLI_SHA256) {
+  if (!IS_WINDOWS) return null
+  const version = getOfficialTool('minimax-code').version
+  for (const directory of directories) {
+    try {
+      const root = await realpath(directory)
+      if (root === workspace || inside(workspace, root)) continue
+      if (!(await stat(join(root, 'mcode.cmd'))).isFile()) continue
+      const current = (await readFile(join(root, 'current'), 'utf8')).trim()
+      if (current !== version) continue
+      const releaseRoot = await realpath(join(root, 'releases', version))
+      if (!inside(root, releaseRoot)) continue
+      const packageRoot = await realpath(join(releaseRoot, 'node_modules', '@minimax-ai', 'code'))
+      if (!inside(releaseRoot, packageRoot)) continue
+      const manifest = JSON.parse(await readFile(join(packageRoot, 'package.json'), 'utf8'))
+      if (manifest.name !== '@minimax-ai/code' || manifest.version !== version
+        || String(manifest.bin?.mcode).replace(/^\.\//, '') !== 'cli.js') continue
+      const entry = await realpath(join(packageRoot, 'cli.js'))
+      if (!inside(packageRoot, entry) || !(await stat(entry)).isFile()) continue
+      const digest = createHash('sha256').update(await readFile(entry)).digest('hex')
+      if (digest !== trustedCliSha256) continue
+      const native = await realpath(join(packageRoot, 'node_modules', 'better-sqlite3',
+        'build', 'Release', 'better_sqlite3.node'))
+      if (!inside(packageRoot, native) || !(await stat(native)).isFile()) continue
+      return { entry, packageRoot, version, source: 'verified-official-windows-installer-bundle' }
+    } catch { /* inspect the next PATH directory */ }
+  }
+  return null
+}
+
 async function findCodexExecutable(workspace) {
   await ensureNpmPrefixOnPath()
   const filename = IS_WINDOWS ? 'codex.exe' : 'codex'
@@ -259,7 +296,14 @@ async function findSignedPackagedCodex(packageRoot, workspace) {
 
 /** PATH or package metadata alone is insufficient: verify the Windows EXE publisher. */
 function hasOfficialWindowsSignature(entry, expectedSigner) {
-  const script = '$s=Get-AuthenticodeSignature -LiteralPath $env:MODEL_ROUTER_VERIFY_PATH; '
+  // Some launch environments inherit a PowerShell module path where the
+  // built-in Security module does not autoload. Import its fixed system path
+  // explicitly, and fail closed if that import or the signature check fails.
+  const modulePath = join(WINDOWS_SYSTEM32, 'WindowsPowerShell', 'v1.0', 'Modules',
+    'Microsoft.PowerShell.Security', 'Microsoft.PowerShell.Security.psd1')
+  const script = '$ErrorActionPreference="Stop"; '
+    + 'Import-Module -Name $env:MODEL_ROUTER_SECURITY_MODULE -ErrorAction Stop; '
+    + '$s=Get-AuthenticodeSignature -LiteralPath $env:MODEL_ROUTER_VERIFY_PATH; '
     + '@{status=[string]$s.Status;subject=[string]$s.SignerCertificate.Subject} | ConvertTo-Json -Compress'
   const powershell = join(WINDOWS_SYSTEM32, 'WindowsPowerShell', 'v1.0', 'powershell.exe')
   return new Promise(resolveSignature => {
@@ -269,7 +313,8 @@ function hasOfficialWindowsSignature(entry, expectedSigner) {
         shell: false,
         windowsHide: true,
         stdio: ['ignore', 'pipe', 'ignore'],
-        env: { ...process.env, MODEL_ROUTER_VERIFY_PATH: entry },
+        env: { ...process.env, MODEL_ROUTER_VERIFY_PATH: entry,
+          MODEL_ROUTER_SECURITY_MODULE: modulePath },
       })
     } catch { resolveSignature(false); return }
     let output = ''
@@ -369,6 +414,7 @@ async function launchSpec(toolId, workspace, mode, modelId, task = 'Check readin
     const tool = getOfficialTool(toolId)
     const entries = await findGlobalPackageEntries(tool.package, 'mcode', 'cli.js', workspace)
     const found = entries.find(entry => entry.version === tool.version)
+      ?? await findManagedMiniMaxEntry(workspace)
     if (!found) return { unsupported: `未找到固定版本 ${tool.package}@${tool.version} 的官方入口。` }
     const nodeExecutable = await findNodeExecutable(workspace, [22, 19, 0], version => {
       const major = Number(String(version).split('.')[0])
@@ -378,10 +424,10 @@ async function launchSpec(toolId, workspace, mode, modelId, task = 'Check readin
     if (modelId && !modelId.includes('/')) {
       return { unsupported: 'MiniMax CLI 要求 provider/model；当前模型目录 ID 不能直接传入，请在 MiniMax 中配置别名。' }
     }
-    return buildMiniMaxInvocation({
+    return { ...buildMiniMaxInvocation({
       nodeExecutable, cliEntry: found.entry, workspace, mode,
       modelReference: modelId, permission: mode === 'workspace-write' ? 'full' : 'smart',
-    })
+    }), source: found.source }
   }
   if (toolId === 'mimo-code' || toolId === 'grok-build') {
     try {

package/.dsh-plugin/shared/official-tools-remote.mjs

@@ -115,7 +115,7 @@ const galRequestIdParameter = Object.freeze({
 
 export const OFFICIAL_TOOLS_REMOTE_DESCRIPTORS = Object.freeze([
   descriptor('list', [], listResultCodec),
-  descriptor('install', [toolIdParameter], installResultCodec),
+  descriptor('installTool', [toolIdParameter], installResultCodec),
   descriptor('cancel', [toolIdParameter], installResultCodec),
   descriptor('status', [toolIdParameter], statusResultCodec),
   descriptor('galReply', [galRequestParameter], galResultCodec),