dsh-mcp-connector 0.2.53 → 0.2.54

package/CHANGELOG.md

@@ -4,6 +4,12 @@
 
 ## [Unreleased]
 
+## [0.2.54] - 2026-09-21
+
+### Fixed
+
+- 修复本机安装的未发布同 ID 草案遮蔽公共 Registry 正式卡片的问题。正式卡片及示例 Prompt 在市场可见，显式本机上下架覆盖仍有效；已有连接和授权记录不变（#90）。
+
 ## [0.2.53] - 2026-09-20
 
 ### Fixed

package/README.en.md

@@ -77,7 +77,7 @@ If the plugin helps you connect an MCP server faster, consider [starring the rep
 - Explicit, non-destructive migration from the two earlier Qichacha OAuth plugins, plus active-plugin conflict detection that blocks duplicate server management and credential overwrites.
 
 <!-- catalog-stats:start -->
-As of 2026-09-11, the public Registry publishes 106 connector descriptors. After merging and deduplicating them with the 4 bundled Qichacha cards, the Marketplace exposes 110 cards across 9 business categories. Recommendations remain limited to the four Qichacha cards, PKULaw, and Wind, for 6 featured cards in total. The Registry evolves independently; the badge shown after a client refresh and the live badges above are the authoritative current counts.
+As of 2026-09-20, the public Registry publishes 107 connector descriptors. After merging and deduplicating them with the 4 bundled Qichacha cards, the Marketplace exposes 111 cards across 9 business categories. Recommendations remain limited to the four Qichacha cards, PKULaw, and Wind, for 6 featured cards in total. The Registry evolves independently; the badge shown after a client refresh and the live badges above are the authoritative current counts.
 <!-- catalog-stats:end -->
 
 ## Interface and demo
@@ -190,7 +190,7 @@ npm run dev:ui
 
 Every Registry merge regenerates `catalog-stats.json`; an hourly workflow in this repository synchronizes the Chinese and English product copy plus a local stats snapshot. The static npm README updates with package releases, while the live badges above read the Registry directly and therefore stay current without another npm release.
 
-The current public version is [`dsh-mcp-connector@0.2.53`](https://www.npmjs.com/package/dsh-mcp-connector), with [GitHub Release v0.2.53](https://github.com/duhu2000/dsh-mcp-connector/releases/tag/v0.2.53).
+The current public version is [`dsh-mcp-connector@0.2.54`](https://www.npmjs.com/package/dsh-mcp-connector), with [GitHub Release v0.2.54](https://github.com/duhu2000/dsh-mcp-connector/releases/tag/v0.2.54).
 
 See [CHANGELOG.md](CHANGELOG.md) for version history and [docs/DESKTOP-E2E.md](docs/DESKTOP-E2E.md) for the Desktop release checklist.
 

package/README.md

@@ -78,7 +78,7 @@ dsh plugin --profile web add dsh-mcp-connector
 - 对话工具：`mcp_connector_catalog`、`connect`、`configure`、`import_json`、`export_config`、`snapshot`、`install_from_url`、`status`、`scope`、`health_check`、`policy`、`set_enabled`、`disconnect`、`refresh_catalog`、`publish`、`tools_list`、`tool_search`、`tool_detail`。搜索/详情只做渐进式能力发现，不执行目标 MCP 工具。
 
 <!-- catalog-stats:start -->
-截至 2026-09-11，公共 Registry 已发布 106 条连接器描述；与随包的 4 张企查查卡片合并去重后，市场页可浏览 110 张卡片，覆盖企业数据、金融投资、法律合规、开发工具、办公协作、调研分析、设计创意、效率工具、其他 9 类。推荐位严格保留 4 张企查查卡片、北大法宝和 Wind，共 6 张；其他连接器按业务分类展示。Registry 可独立持续更新，实际数量以客户端刷新后的市场页签徽标和上方实时统计徽标为准。
+截至 2026-09-20，公共 Registry 已发布 107 条连接器描述；与随包的 4 张企查查卡片合并去重后，市场页可浏览 111 张卡片，覆盖企业数据、金融投资、法律合规、开发工具、办公协作、调研分析、设计创意、效率工具、其他 9 类。推荐位严格保留 4 张企查查卡片、北大法宝和 Wind，共 6 张；其他连接器按业务分类展示。Registry 可独立持续更新，实际数量以客户端刷新后的市场页签徽标和上方实时统计徽标为准。
 <!-- catalog-stats:end -->
 
 ## 界面与演示
@@ -185,7 +185,7 @@ npm run dev:ui
 
 公共 Registry 每次合并后会生成 `catalog-stats.json`；本仓库的定时工作流每小时同步中英文介绍和统计快照。npm 页面中的静态正文随版本发布更新，上方动态统计徽标则直接读取 Registry，可在不发布新 npm 版本时保持实时数量一致。
 
-当前公开版本为 [`dsh-mcp-connector@0.2.53`](https://www.npmjs.com/package/dsh-mcp-connector)，对应 [GitHub Release v0.2.53](https://github.com/duhu2000/dsh-mcp-connector/releases/tag/v0.2.53)。
+当前公开版本为 [`dsh-mcp-connector@0.2.54`](https://www.npmjs.com/package/dsh-mcp-connector)，对应 [GitHub Release v0.2.54](https://github.com/duhu2000/dsh-mcp-connector/releases/tag/v0.2.54)。
 
 版本能力与变更记录见 [CHANGELOG.md](CHANGELOG.md)。
 Desktop 发版回归见 [docs/DESKTOP-E2E.md](docs/DESKTOP-E2E.md)。

package/lib/catalog.js

@@ -183,6 +183,12 @@ export async function fetchRemoteCatalogWithFallback(catalogUrl, fallbackUrls =
   throw lastError ?? new Error('catalog fetch failed for all sources');
 }
 
+/** 本机未发布草案不可遮蔽同 id 的正式远程卡片；其他动态卡片仍可覆盖。 */
+export function visibleDynamicDescriptors(remote, dynamic) {
+  const publishedRemoteIds = new Set(remote.filter((d) => d.published !== false).map((d) => d.id));
+  return dynamic.filter((d) => d.published !== false || !publishedRemoteIds.has(d.id));
+}
+
 /** 合并多层来源（sources 为低→高优先级的 descriptor 数组），再应用本地覆盖。 */
 export function mergeCatalog(sources, overrides = new Map()) {
   const merged = new Map();

package/lib/index.js

@@ -26,7 +26,7 @@ import {
 } from './constants.js';
 import { defineConnectorDomain, ConnectionStore, GrantStore, CatalogStore, SnapshotStore, GovernanceStore, ConnectionScopeStore, ToolCatalogStore } from './stores.js';
 import { normalizeConnectorDescriptor, normalizeConnectionRecord } from './schema.js';
-import { loadBundledCatalog, fetchRemoteCatalogWithFallback, mergeCatalog, listCatalog, auditDescriptor, auditRawDescriptor, readLimitedJson } from './catalog.js';
+import { loadBundledCatalog, fetchRemoteCatalogWithFallback, visibleDynamicDescriptors, mergeCatalog, listCatalog, auditDescriptor, auditRawDescriptor, readLimitedJson } from './catalog.js';
 import { describeOAuthAuthorizationError, oauthAuthorize } from './connectors/oauth-connector.js';
 import { buildManualRecord } from './connectors/manual-connector.js';
 import { normalizeJsonImport } from './connectors/json-connector.js';
@@ -231,7 +231,8 @@ export async function apply(ctx, config) {
   async function recomputeMerged() {
     const bundled = loadBundledCatalog();
     const configConnectors = (config.connectors ?? []).map((raw) => auditDescriptor(normalizeConnectorDescriptor(raw)));
-    const sources = [bundled, state.remoteConnectors, configConnectors, [...state.dynamic.values()]];
+    const dynamic = visibleDynamicDescriptors(state.remoteConnectors, [...state.dynamic.values()]);
+    const sources = [bundled, state.remoteConnectors, configConnectors, dynamic];
     state.merged = mergeCatalog(sources, state.overrides);
   }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-mcp-connector",
-  "version": "0.2.53",
+  "version": "0.2.54",
   "description": "DeepSeek Harness MCP Connector: connect servers, search tools across active connections, and troubleshoot discovery. Includes a continuously updated catalog; supports OAuth 2.0 PKCE, API keys, Streamable HTTP/stdio, and mcpServers JSON import.",
   "type": "module",
   "main": "lib/index.js",