dsh-mcp-connector 0.2.1 → 0.2.2

package/CHANGELOG.md

@@ -4,6 +4,18 @@
 
 ## [Unreleased]
 
+## [0.2.2] - 2026-08-21
+
+### Added
+
+- 新增英文版 README，便于国际用户了解安装、连接方式、市场目录和发布流程。
+
+### Changed
+
+- 产品名称和介绍统一为通用 MCP Connector Marketplace；企查查作为项目发起方、维护方和首批连接器提供方，不限定可接入厂商。
+- 重构 npm 关键词，保留 DSH、Cordis、MCP、OAuth/PKCE 和企查查检索入口，并补充 `dsh-plugin`、`mcp-client`、`oauth2`、`enterprise-data`。
+- 更新市场注册移交文档、测试数量和 awesome-dsh-plugin 注册描述，移除易过期的工具与 Prompt 数量。
+
 ## [0.2.1] - 2026-08-21
 
 ### Added
@@ -80,7 +92,8 @@
 - 外部 URL 与导入 Header 执行安全校验。
 - iframe 消息校验同源和消息来源。
 
-[Unreleased]: https://github.com/duhu2000/dsh-mcp-connector/compare/v0.2.1...HEAD
+[Unreleased]: https://github.com/duhu2000/dsh-mcp-connector/compare/v0.2.2...HEAD
+[0.2.2]: https://github.com/duhu2000/dsh-mcp-connector/compare/v0.2.1...v0.2.2
 [0.2.1]: https://github.com/duhu2000/dsh-mcp-connector/compare/v0.2.0...v0.2.1
 [0.2.0]: https://github.com/duhu2000/dsh-mcp-connector/compare/v0.1.0...v0.2.0
 [0.1.0]: https://github.com/duhu2000/dsh-mcp-connector/releases/tag/v0.1.0

package/README.en.md

@@ -0,0 +1,103 @@
+# MCP Connector Marketplace for DeepSeek Harness
+
+> A general-purpose MCP connector marketplace initiated and maintained by the Qichacha team
+
+Browse and install MCP connectors from different providers in DeepSeek Harness Desktop. Connect through OAuth, API key/URL configuration, JSON import, or a connector descriptor URL; discover tools, start a new conversation from an example prompt, and manage installed connections.
+
+[简体中文](README.md)
+
+[![CI](https://github.com/duhu2000/dsh-mcp-connector/actions/workflows/ci.yml/badge.svg)](https://github.com/duhu2000/dsh-mcp-connector/actions/workflows/ci.yml)
+[![npm](https://img.shields.io/npm/v/dsh-mcp-connector.svg)](https://www.npmjs.com/package/dsh-mcp-connector)
+[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](LICENSE)
+
+## Features
+
+- A primary sidebar entry below New Conversation and above workspaces/conversations, with a public footer-slot fallback for incompatible DSH DOM versions.
+- Searchable Marketplace and Installed views with connection status and catalog refresh.
+- OAuth 2.0 Authorization Code with PKCE, API key/Bearer/unauthenticated URL configuration, and `mcpServers` JSON import.
+- Installation from a credential-free connector descriptor URL.
+- Credential and MCP initialize validation before API-key connectors are saved as installed.
+- Dynamic tool discovery grouped by MCP server, including descriptions, search, batched rendering, and an independent scroll region.
+- Curated prompt templates that can open a DSH conversation and prefill its draft; missing variables are requested before the prompt is sent.
+- Persistent connection lifecycle management: restore on restart, enable/disable, disconnect, refresh OAuth tokens, and revoke authorization.
+- Built-in, remote, and local catalogs with `published` and `featured` controls.
+- A standalone remote Registry, allowing new marketplace cards to appear after refresh without publishing a new npm version.
+- Explicit, non-destructive migration of authorization from the two earlier Qichacha OAuth plugins.
+
+The first four bundled cards are Qichacha connectors. The public catalog also includes PKULaw and Wind connectors; the architecture is provider-neutral.
+
+## Installation
+
+Requirements: DeepSeek Harness Desktop or web profile, and Node.js 20 or later.
+
+```bash
+dsh plugin --profile web add dsh-mcp-connector
+```
+
+Or use the installer:
+
+```bash
+bash <(curl -fsSL https://raw.githubusercontent.com/duhu2000/dsh-mcp-connector/main/install.sh)
+```
+
+Fully quit and restart DeepSeek Harness Desktop after installation or upgrade.
+
+## Usage
+
+1. Select **MCP Connector** in the primary sidebar.
+2. Choose a connector in Marketplace and complete authorization or configuration.
+3. Open its details to inspect tools or send an example prompt to a new conversation draft.
+4. Use Installed or the conversation tools to enable, disable, inspect, or disconnect a connection.
+
+Connected tools are exposed to the model with the `mcp__<serverName>__*` prefix.
+
+## Connector catalog
+
+The package contains a bundled fallback catalog. By default, it refreshes from the public [dsh-mcp-connector-registry](https://github.com/duhu2000/dsh-mcp-connector-registry); cached or bundled data remains available if the remote registry cannot be reached.
+
+The public connector registration process and descriptor requirements are documented in [docs/MARKET-REGISTRATION.md](docs/MARKET-REGISTRATION.md).
+
+## Configuration
+
+The default bundle configuration is in `cordis.patch.yml`:
+
+```yaml
+- id: mcp-connector
+  name: dsh-mcp-connector
+  config:
+    catalogUrl: 'https://raw.githubusercontent.com/duhu2000/dsh-mcp-connector-registry/main/catalog.json'
+    persistSecrets: true
+    entryPrefix: mcp
+    refreshSkewMs: 300000
+    openBrowser: true
+```
+
+Set `catalogUrl` to an empty string for an explicitly offline/private setup.
+
+## Development and release checks
+
+```bash
+npm run check
+npm run registry:build
+npm run registry:validate
+npm run dev:ui
+```
+
+`npm run check` performs syntax checks, automated tests, and an npm package allowlist/sensitive-content audit. Tags matching `v*` trigger GitHub Actions; the tag must match `package.json`. npm releases use Trusted Publishing through GitHub OIDC and do not require a long-lived `NPM_TOKEN`.
+
+The current public version is [`dsh-mcp-connector@0.2.2`](https://www.npmjs.com/package/dsh-mcp-connector), with [GitHub Release v0.2.2](https://github.com/duhu2000/dsh-mcp-connector/releases/tag/v0.2.2).
+
+See [CHANGELOG.md](CHANGELOG.md) for version history and [docs/DESKTOP-E2E.md](docs/DESKTOP-E2E.md) for the Desktop release checklist.
+
+## Security and limitations
+
+- Credentials are stored only in the DSH storage domain and are not written to the catalog, Git repository, or conversation history.
+- Failed API key/token validation is not persisted; authentication, timeout, DNS, and TLS/network errors are reported separately.
+- External URLs must use HTTPS; HTTP is allowed only for loopback development.
+- Remote descriptors and catalogs are limited to 2 MiB, Web API requests to 1 MiB, and imported JSON is scanned for credential fields before normalization.
+- Streamable HTTP is the primary transport with SSE compatibility. stdio entries are explicitly skipped.
+- The primary sidebar placement uses the stable DSH `data-slot` marker and falls back to the footer if that marker is removed.
+
+## License
+
+MIT

package/README.md

@@ -1,6 +1,10 @@
-# MCP连接器（DeepSeek Harness 插件）
+# MCP 连接器市场（DeepSeek Harness 插件）
 
-在 DeepSeek Harness Desktop 中提供类似 WorkBuddy 的 MCP 连接器市场与连接管理：浏览连接器、OAuth 授权、查看工具、快速发起对话，并管理已安装连接。
+> 通用 MCP Connector Marketplace，由企查查团队发起并维护
+
+在 DeepSeek Harness Desktop 中浏览和安装不同厂商的 MCP 连接器，通过 OAuth、API Key/URL 或 JSON 接入服务，发现工具、使用示例 Prompt 发起新会话，并管理已安装连接。
+
+[English](README.en.md)
 
 [![CI](https://github.com/duhu2000/dsh-mcp-connector/actions/workflows/ci.yml/badge.svg)](https://github.com/duhu2000/dsh-mcp-connector/actions/workflows/ci.yml)
 [![npm](https://img.shields.io/npm/v/dsh-mcp-connector.svg)](https://www.npmjs.com/package/dsh-mcp-connector)
@@ -77,7 +81,7 @@ npm run dev:ui
 
 `check` 执行语法检查、自动测试和 npm 发布包白名单校验；`dev:ui` 启动不含真实凭据的本地 mock 市场。CI 使用 `--legacy-peer-deps` 安装显式测试依赖，DSH 运行期 peer 仍由 Host 提供。`v*` Tag 会触发 GitHub Actions；Tag 必须与 `package.json` 版本一致。Release 通过 npm Trusted Publishing (GitHub OIDC) 发布，不依赖长期 `NPM_TOKEN`。
 
-当前公开版本为 [`dsh-mcp-connector@0.2.0`](https://www.npmjs.com/package/dsh-mcp-connector)，对应 [GitHub Release v0.2.0](https://github.com/duhu2000/dsh-mcp-connector/releases/tag/v0.2.0)。
+当前公开版本为 [`dsh-mcp-connector@0.2.2`](https://www.npmjs.com/package/dsh-mcp-connector)，对应 [GitHub Release v0.2.2](https://github.com/duhu2000/dsh-mcp-connector/releases/tag/v0.2.2)。
 
 版本能力与变更记录见 [CHANGELOG.md](CHANGELOG.md)。
 Desktop 发版回归见 [docs/DESKTOP-E2E.md](docs/DESKTOP-E2E.md)。

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "dsh-mcp-connector",
-  "version": "0.2.1",
-  "description": "DeepSeek Harness 插件：MCP连接器 —— 连接器目录与上架、通用 OAuth / 自定义 / JSON 三通道连接外部 MCP Server / MCP Connector marketplace & connection manager",
+  "version": "0.2.2",
+  "description": "General-purpose MCP Connector Marketplace for DeepSeek Harness with OAuth 2.0 PKCE, API key/URL, JSON import, tool discovery, prompt templates, and connection management.",
   "type": "module",
   "main": "lib/index.js",
   "exports": {
@@ -21,6 +21,7 @@
     "docs/MARKET-REGISTRATION.md",
     "cordis.patch.yml",
     "README.md",
+    "README.en.md",
     "CHANGELOG.md",
     "LICENSE",
     "install.sh",
@@ -41,12 +42,22 @@
   "keywords": [
     "deepseek-harness",
     "dsh",
+    "dsh-plugin",
     "cordis",
     "mcp",
+    "mcp-client",
+    "mcp-connector",
     "connector",
+    "marketplace",
     "oauth",
+    "oauth2",
     "pkce",
-    "marketplace"
+    "json-import",
+    "enterprise-data",
+    "qichacha",
+    "qcc",
+    "tools",
+    "prompts"
   ],
   "license": "MIT",
   "publishConfig": {