dsh-mcp-connector 0.2.63 → 0.2.64

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/CHANGELOG.md CHANGED
@@ -4,6 +4,17 @@
4
4
 
5
5
  ## [Unreleased]
6
6
 
7
+ ## [0.2.64] - 2026-10-02
8
+
9
+ ### Fixed
10
+
11
+ - 将连接器描述和本机连接记录中的 `env`、`headers`、`credentialBindings` 改为 Zod 显式键/值 record,修复 Host 解析到 Zod 4.1.x 时非空对象触发 `_zod` TypeError、阻断 storage domain 和 DSH 启动的问题(#112)。
12
+ - Zod peer 下限与已验证兼容版本对齐到 `4.1.8`,并增加固定旧版依赖的完整测试门禁,避免常规 CI 只安装最新版而掩盖兼容回归。
13
+
14
+ ### Verification
15
+
16
+ - 新增非空 `env`、`headers`、`credentialBindings` 解析回归;CI 在 Zod 4.1.8 下执行完整测试套件。
17
+
7
18
  ## [0.2.63] - 2026-09-30
8
19
 
9
20
  ### Fixed
package/README.en.md CHANGED
@@ -83,7 +83,7 @@ If the plugin helps you connect an MCP server faster, consider [starring the rep
83
83
  - Explicit, non-destructive migration from the two earlier Qichacha OAuth plugins, plus active-plugin conflict detection that blocks duplicate server management and credential overwrites.
84
84
 
85
85
  <!-- catalog-stats:start -->
86
- As of 2026-09-29, the public Registry publishes 106 connector descriptors. After merging and deduplicating them with the 4 bundled Qichacha cards, the Marketplace exposes 110 cards across 9 business categories. Recommendations remain limited to the four Qichacha cards, PKULaw, and Wind, for 6 featured cards in total. The Registry evolves independently; the badge shown after a client refresh and the live badges above are the authoritative current counts.
86
+ As of 2026-09-30, the public Registry publishes 107 connector descriptors. After merging and deduplicating them with the 4 bundled Qichacha cards, the Marketplace exposes 111 cards across 9 business categories. Recommendations remain limited to the four Qichacha cards, PKULaw, and Wind, for 6 featured cards in total. The Registry evolves independently; the badge shown after a client refresh and the live badges above are the authoritative current counts.
87
87
  <!-- catalog-stats:end -->
88
88
 
89
89
  ## Interface and demo
@@ -198,7 +198,7 @@ npm run dev:ui
198
198
 
199
199
  Every Registry merge regenerates `catalog-stats.json`; an hourly workflow in this repository synchronizes the Chinese and English product copy plus a local stats snapshot. The static npm README updates with package releases, while the live badges above read the Registry directly and therefore stay current without another npm release.
200
200
 
201
- The current public version is [`dsh-mcp-connector@0.2.63`](https://www.npmjs.com/package/dsh-mcp-connector), with [GitHub Release v0.2.63](https://github.com/duhu2000/dsh-mcp-connector/releases/tag/v0.2.63).
201
+ The current public version is [`dsh-mcp-connector@0.2.64`](https://www.npmjs.com/package/dsh-mcp-connector), with [GitHub Release v0.2.64](https://github.com/duhu2000/dsh-mcp-connector/releases/tag/v0.2.64).
202
202
 
203
203
  See [CHANGELOG.md](CHANGELOG.md) for version history and [docs/DESKTOP-E2E.md](docs/DESKTOP-E2E.md) for the Desktop release checklist.
204
204
 
package/README.md CHANGED
@@ -84,7 +84,7 @@ dsh plugin --profile web add dsh-mcp-connector
84
84
  - 对话工具:`mcp_connector_catalog`、`connect`、`configure`、`import_json`、`export_config`、`snapshot`、`install_from_url`、`status`、`scope`、`health_check`、`policy`、`set_enabled`、`disconnect`、`refresh_catalog`、`publish`、`tools_list`、`tool_search`、`tool_detail`。搜索/详情只做渐进式能力发现,不执行目标 MCP 工具。
85
85
 
86
86
  <!-- catalog-stats:start -->
87
- 截至 2026-09-29,公共 Registry 已发布 106 条连接器描述;与随包的 4 张企查查卡片合并去重后,市场页可浏览 110 张卡片,覆盖企业数据、金融投资、法律合规、开发工具、办公协作、调研分析、设计创意、效率工具、其他 9 类。推荐位严格保留 4 张企查查卡片、北大法宝和 Wind,共 6 张;其他连接器按业务分类展示。Registry 可独立持续更新,实际数量以客户端刷新后的市场页签徽标和上方实时统计徽标为准。
87
+ 截至 2026-09-30,公共 Registry 已发布 107 条连接器描述;与随包的 4 张企查查卡片合并去重后,市场页可浏览 111 张卡片,覆盖企业数据、金融投资、法律合规、开发工具、办公协作、调研分析、设计创意、效率工具、其他 9 类。推荐位严格保留 4 张企查查卡片、北大法宝和 Wind,共 6 张;其他连接器按业务分类展示。Registry 可独立持续更新,实际数量以客户端刷新后的市场页签徽标和上方实时统计徽标为准。
88
88
  <!-- catalog-stats:end -->
89
89
 
90
90
  ## 界面与演示
@@ -193,7 +193,7 @@ npm run dev:ui
193
193
 
194
194
  公共 Registry 每次合并后会生成 `catalog-stats.json`;本仓库的定时工作流每小时同步中英文介绍和统计快照。npm 页面中的静态正文随版本发布更新,上方动态统计徽标则直接读取 Registry,可在不发布新 npm 版本时保持实时数量一致。
195
195
 
196
- 当前公开版本为 [`dsh-mcp-connector@0.2.63`](https://www.npmjs.com/package/dsh-mcp-connector),对应 [GitHub Release v0.2.63](https://github.com/duhu2000/dsh-mcp-connector/releases/tag/v0.2.63)。
196
+ 当前公开版本为 [`dsh-mcp-connector@0.2.64`](https://www.npmjs.com/package/dsh-mcp-connector),对应 [GitHub Release v0.2.64](https://github.com/duhu2000/dsh-mcp-connector/releases/tag/v0.2.64)。
197
197
 
198
198
  版本能力与变更记录见 [CHANGELOG.md](CHANGELOG.md)。
199
199
  Desktop 发版回归见 [docs/DESKTOP-E2E.md](docs/DESKTOP-E2E.md)。
package/lib/schema.js CHANGED
@@ -11,14 +11,14 @@ export const serverRefSchema = z.object({
11
11
  url: z.string().min(1).optional(),
12
12
  command: z.string().min(1).optional(),
13
13
  args: z.array(z.string()).optional(),
14
- env: z.record(z.string()).optional(),
15
- credentialBindings: z.record(z.string()).optional(),
14
+ env: z.record(z.string(), z.string()).optional(),
15
+ credentialBindings: z.record(z.string(), z.string()).optional(),
16
16
  oauthResource: z.string().min(1).optional(),
17
17
  oauthTokenEnv: z.string().min(1).optional(),
18
18
  cwd: z.string().optional(),
19
19
  serverName: z.string().min(1),
20
20
  transport: z.enum(['streamable-http', 'sse', 'stdio']).optional(),
21
- headers: z.record(z.string()).optional(),
21
+ headers: z.record(z.string(), z.string()).optional(),
22
22
  });
23
23
 
24
24
  /** 市场凭据输入定义;只描述表单,绝不包含真实值。 */
@@ -111,11 +111,11 @@ export const connectionRecordSchema = z.object({
111
111
  allowInsecurePrivateNetwork: z.boolean().optional(),
112
112
  command: z.string().min(1).optional(),
113
113
  args: z.array(z.string()).optional(),
114
- env: z.record(z.string()).optional(),
114
+ env: z.record(z.string(), z.string()).optional(),
115
115
  oauthTokenEnv: z.string().min(1).optional(),
116
116
  cwd: z.string().optional(),
117
117
  serverName: z.string().min(1),
118
- headers: z.record(z.string()).optional(),
118
+ headers: z.record(z.string(), z.string()).optional(),
119
119
  auth: z
120
120
  .object({
121
121
  mode: z.enum(['oauth', 'bearer', 'api-key']),
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "dsh-mcp-connector",
3
- "version": "0.2.63",
3
+ "version": "0.2.64",
4
4
  "description": "DeepSeek Harness MCP Connector: connect servers, search tools across active connections, and troubleshoot discovery. Includes a continuously updated catalog; supports OAuth 2.0 PKCE, API keys, Streamable HTTP/stdio, and mcpServers JSON import.",
5
5
  "type": "module",
6
6
  "main": "lib/index.js",
@@ -148,7 +148,7 @@
148
148
  "@deepseek-ai/cordis": "^4.0.1",
149
149
  "react": "^18.2.0",
150
150
  "react-dom": "^18.2.0",
151
- "zod": "^4.4.0"
151
+ "zod": ">=4.1.8 <5"
152
152
  },
153
153
  "devDependencies": {
154
154
  "@deepseek-ai/cordis": "^4.0.1",