dsh-mcp-connector 0.2.65 → 0.2.67

package/CHANGELOG.md

@@ -4,6 +4,28 @@
 
 ## [Unreleased]
 
+## [0.2.67] - 2026-10-06
+
+### Fixed
+
+- 面板标题图标与侧栏入口统一为继承 `currentColor` 的单色 SVG，并补充对字面 emoji、Unicode 转义和直接码点的回归检查，修复 #118 后遗漏的面板标题彩色图标（#122、#123）。
+- 为重启恢复的 stdio MCP 连接增加有界的 `server/discover`、`initialize` 与首次 `tools/list` 分页请求；超时后关闭自有 transport 并回收进程树，避免单个异常 Server 阻塞 DSH Host，同时不禁用已保存连接，也不改变用户主动连接或 HTTP 连接流程（#125）。
+
+### Verification
+
+- 在最新 `main` 合并态通过 326 项测试（323 通过、3 项环境性跳过、0 失败）、Node 20/22/24、Windows、Zod 4.1.8、PR 安装包与发布文件白名单校验。
+
+## [0.2.66] - 2026-10-03
+
+### Changed
+
+- 侧栏“MCP连接器”入口由平台相关的彩色 emoji 改为继承 `currentColor` 的单色线性 SVG，与 DSH 宿主导航的尺寸、线性风格和深浅主题保持一致（#117）。
+- 同步无凭据 UI harness 和入口文档，图标保持 `aria-hidden`，不改变“MCP连接器”的无障碍名称。
+
+### Verification
+
+- 新增侧栏图标回归测试；在当前 `main` 合并态通过 309 项测试、Node 20/22/24、Windows、Zod 4.1.8 与 PR 安装包校验。
+
 ## [0.2.65] - 2026-10-03
 
 ### Added

package/README.en.md

@@ -85,7 +85,7 @@ If the plugin helps you connect an MCP server faster, consider [starring the rep
 - Explicit, non-destructive migration from the two earlier Qichacha OAuth plugins, plus active-plugin conflict detection that blocks duplicate server management and credential overwrites.
 
 <!-- catalog-stats:start -->
-As of 2026-09-30, the public Registry publishes 107 connector descriptors. After merging and deduplicating them with the 4 bundled Qichacha cards, the Marketplace exposes 111 cards across 9 business categories. Recommendations remain limited to the four Qichacha cards, PKULaw, and Wind, for 6 featured cards in total. The Registry evolves independently; the badge shown after a client refresh and the live badges above are the authoritative current counts.
+As of 2026-10-05, the public Registry publishes 108 connector descriptors. After merging and deduplicating them with the 4 bundled Qichacha cards, the Marketplace exposes 112 cards across 9 business categories. Recommendations remain limited to the four Qichacha cards, PKULaw, and Wind, for 6 featured cards in total. The Registry evolves independently; the badge shown after a client refresh and the live badges above are the authoritative current counts.
 <!-- catalog-stats:end -->
 
 ## Interface and demo
@@ -202,7 +202,7 @@ npm run dev:ui
 
 Every Registry merge regenerates `catalog-stats.json`; an hourly workflow in this repository synchronizes the Chinese and English product copy plus a local stats snapshot. The static npm README updates with package releases, while the live badges above read the Registry directly and therefore stay current without another npm release.
 
-The current public version is [`dsh-mcp-connector@0.2.65`](https://www.npmjs.com/package/dsh-mcp-connector), with [GitHub Release v0.2.65](https://github.com/duhu2000/dsh-mcp-connector/releases/tag/v0.2.65).
+The current public version is [`dsh-mcp-connector@0.2.67`](https://www.npmjs.com/package/dsh-mcp-connector), with [GitHub Release v0.2.67](https://github.com/duhu2000/dsh-mcp-connector/releases/tag/v0.2.67).
 
 See [CHANGELOG.md](CHANGELOG.md) for version history and [docs/DESKTOP-E2E.md](docs/DESKTOP-E2E.md) for the Desktop release checklist.
 
@@ -213,7 +213,8 @@ See [CHANGELOG.md](CHANGELOG.md) for version history and [docs/DESKTOP-E2E.md](d
 - Unchecked or Host-unobservable connections are reported as `unknown`, never as healthy. Health history and last-success timestamps are currently process-local.
 - External URLs use HTTPS by default, and HTTP is allowed for loopback development. A user-created connection may explicitly opt in to plaintext HTTP for literal RFC1918 IPv4 or RFC4193 IPv6 ULA addresses; hostnames, public HTTP, link-local addresses, and cloud metadata addresses remain blocked.
 - Remote descriptors and catalogs are limited to 2 MiB, Web API requests to 1 MiB, and imported JSON is scanned for credential fields before normalization.
-- Streamable HTTP and stdio are supported end to end. Legacy `sse` entries are normalized to Streamable HTTP. The connector passes stdio `command/args/env/cwd` to `@deepseek-ai/dsh-mcp-client` instead of reimplementing process transport.
+- Streamable HTTP and stdio are supported end to end. Legacy `sse` entries are normalized to Streamable HTTP. Restored stdio connections run their original command through a transparent startup guard; persisted records, environment and working directory remain unchanged. Tool registration and execution still belong to `@deepseek-ai/dsh-mcp-client`.
+- On restoration, `server/discover`, `initialize` and initial `tools/list` requests (including pagination) use `requestTimeoutMs`, capped at 15 seconds per request. A timeout closes that connection and its child processes rather than blocking Host startup. Connections stay enabled; requests after initial discovery keep the Host deadline.
 - Official CLIs that are not MCP servers can be exposed through a separate [controlled CLI Provider](docs/CLI-PROVIDERS.md). Only code-reviewed commands and arguments are available; the initial DingTalk `dws` provider is read-only.
 - stdio starts a local process. Import or connect only trusted commands and packages. Catalog descriptors may declare `credentialFields` and `credentialBindings`, but may never contain actual token/secret values; user input is injected only into the local Host process environment.
 - OAuth DCR client secrets share the same local-only boundary as access and refresh tokens and are omitted from catalog/status responses and logs.

package/README.md

@@ -36,7 +36,7 @@ OAuth 是否可用取决于服务商的客户端注册、账号权限与授权
 dsh plugin --profile web add dsh-mcp-connector
 ```
 
-安装或升级后完全重启 DeepSeek Harness Desktop 或 `dsh web`，然后打开左侧「🧩 MCP连接器」；也可从“设置 → 插件 → 插件配置 → MCP连接器”直接打开。
+安装或升级后完全重启 DeepSeek Harness Desktop 或 `dsh web`，然后打开左侧「MCP连接器」；也可从“设置 → 插件 → 插件配置 → MCP连接器”直接打开。
 
 首次使用建议依次确认：连接已保存且范围正确 → “工具”页能找到预期工具与来源 → 在正常 DSH 会话中通过 Host 审批链完成一次服务商许可的只读调用。缓存可见不等于当前服务可调用。
 
@@ -86,7 +86,7 @@ dsh plugin --profile web add dsh-mcp-connector
 - 对话工具：`mcp_connector_catalog`、`connect`、`configure`、`import_json`、`export_config`、`snapshot`、`install_from_url`、`status`、`scope`、`health_check`、`policy`、`set_enabled`、`session_tools`、`disconnect`、`refresh_catalog`、`publish`、`tools_list`、`tool_search`、`tool_detail`。搜索/详情只做渐进式能力发现，不执行目标 MCP 工具。
 
 <!-- catalog-stats:start -->
-截至 2026-09-30，公共 Registry 已发布 107 条连接器描述；与随包的 4 张企查查卡片合并去重后，市场页可浏览 111 张卡片，覆盖企业数据、金融投资、法律合规、开发工具、办公协作、调研分析、设计创意、效率工具、其他 9 类。推荐位严格保留 4 张企查查卡片、北大法宝和 Wind，共 6 张；其他连接器按业务分类展示。Registry 可独立持续更新，实际数量以客户端刷新后的市场页签徽标和上方实时统计徽标为准。
+截至 2026-10-05，公共 Registry 已发布 108 条连接器描述；与随包的 4 张企查查卡片合并去重后，市场页可浏览 112 张卡片，覆盖企业数据、金融投资、法律合规、开发工具、办公协作、调研分析、设计创意、效率工具、其他 9 类。推荐位严格保留 4 张企查查卡片、北大法宝和 Wind，共 6 张；其他连接器按业务分类展示。Registry 可独立持续更新，实际数量以客户端刷新后的市场页签徽标和上方实时统计徽标为准。
 <!-- catalog-stats:end -->
 
 ## 界面与演示
@@ -121,7 +121,7 @@ bash <(curl -fsSL https://raw.githubusercontent.com/duhu2000/dsh-mcp-connector/m
 
 ## 使用
 
-1. 点击左侧“🧩 MCP连接器”，或从“设置 → 插件 → 插件配置 → MCP连接器”点击“打开 MCP连接器”。
+1. 点击左侧“MCP连接器”，或从“设置 → 插件 → 插件配置 → MCP连接器”点击“打开 MCP连接器”。
 2. 在市场中选择连接器，确认“当前项目”或“所有项目（全局）”，再完成授权或配置。
 3. 打开卡片详情，可点击示例 Prompt 的发送按钮，在当前工作区创建/复用空白会话并写入草稿。
 4. 在“已安装”或对话工具中查看、停用、恢复或断开连接。
@@ -197,7 +197,7 @@ npm run dev:ui
 
 公共 Registry 每次合并后会生成 `catalog-stats.json`；本仓库的定时工作流每小时同步中英文介绍和统计快照。npm 页面中的静态正文随版本发布更新，上方动态统计徽标则直接读取 Registry，可在不发布新 npm 版本时保持实时数量一致。
 
-当前公开版本为 [`dsh-mcp-connector@0.2.65`](https://www.npmjs.com/package/dsh-mcp-connector)，对应 [GitHub Release v0.2.65](https://github.com/duhu2000/dsh-mcp-connector/releases/tag/v0.2.65)。
+当前公开版本为 [`dsh-mcp-connector@0.2.67`](https://www.npmjs.com/package/dsh-mcp-connector)，对应 [GitHub Release v0.2.67](https://github.com/duhu2000/dsh-mcp-connector/releases/tag/v0.2.67)。
 
 版本能力与变更记录见 [CHANGELOG.md](CHANGELOG.md)。
 Desktop 发版回归见 [docs/DESKTOP-E2E.md](docs/DESKTOP-E2E.md)。
@@ -212,7 +212,8 @@ stdio 传输的架构、透传边界与安全约束见 [docs/STDIO-SUPPORT.md](d
 - 未检查或 Host 状态不可见时显示“状态未知”，不会冒充健康；健康摘要与最近成功时间当前只保留在插件进程内。
 - 外部 URL 默认仅允许 HTTPS，HTTP 默认仅允许回环地址。用户自建连接可在明确风险确认后放行 RFC1918 IPv4 / RFC4193 IPv6 ULA 字面量；域名、公网 HTTP、链路本地与云元数据地址仍拒绝。
 - 远程目录/描述响应限制 2 MiB，Web API 请求限制 1 MiB；原始 JSON 在归一化前扫描凭据字段。
-- 完整覆盖 Streamable HTTP 与 stdio；旧 `sse` 配置在导入/恢复时归一为 Streamable HTTP。stdio 的 `command/args/env/cwd` 原样交给 `@deepseek-ai/dsh-mcp-client`，插件本身不重复实现进程传输。
+- 完整覆盖 Streamable HTTP 与 stdio；旧 `sse` 配置在导入/恢复时归一为 Streamable HTTP。重启恢复 stdio 连接时使用透明的启动保护进程包装原命令，`env/cwd` 与持久化记录保持不变；工具注册和正式执行仍由 `@deepseek-ai/dsh-mcp-client` 负责。
+- 恢复连接的 `server/discover`、`initialize` 与首次 `tools/list`（含分页）按 `requestTimeoutMs` 限时，最长每次 15 秒；超时结束该连接的子进程，而不是让可选 MCP 卡住 Host 启动。连接保持启用，首次发现完成后的请求仍使用 Host 原有超时。
 - 对本身不是 MCP Server 的官方 CLI，使用独立的[受控 CLI Provider](docs/CLI-PROVIDERS.md)桥接为 stdio MCP；只允许代码登记的命令与参数，首个钉钉 `dws` Provider 仅开放只读能力。
 - stdio 会启动本机进程：仅导入或连接可信命令/软件包。市场目录只能用 `credentialFields` + `credentialBindings` 声明输入与 env 映射，不得携带真实 token/secret；用户填写值只写入本机连接记录并交给 Host。
 - OAuth DCR 的 `client_secret` 与 Access/Refresh Token 采用相同的本机存储边界，不会进入市场 API、状态输出或日志。

package/docs/STDIO-SUPPORT.md

@@ -8,6 +8,9 @@
 > **就绪语义加固（2026-08-26）**：用户主动连接时显式启用 `failOnStartupError`，必须等待 Host 完成首次 `initialize + tools/list` 后才持久化；健康检查与详情页改读 Host 实际注册的 `mcp__<serverName>__*` 工具。启动失败、进程退出或超时不再提前显示“已连接”。依赖默认值仍为 `false`，下文对应代码仅作为依赖能力说明。
 > 状态：已完成（v0.2.12）
 
+> **启动恢复保护（2026-10-04）**：`failOnStartupError: false` 只控制连接失败是否抛错，并不让官方客户端跳过首次连接等待；动态客户端 fiber 仍参加 Host 的启动屏障。恢复已保存的 stdio 连接时，provisioning 包装原命令并为 `server/discover`、`initialize` 与首次 `tools/list`（含全部分页）设置 `requestTimeoutMs`、最多 15 秒的逐请求截止时间。超时关闭 transport 并清理所属子进程树，不改变记录的启用状态、凭据、命令、环境或工作目录。不能仅对 `loader.create()` 使用 `Promise.race`，否则未完成的 fiber 仍会阻塞 loader。首次发现结束后的列表/工具执行，以及用户主动连接时的 `startupTimeoutMs` 语义保持原样。
+>
+> 默认保护进程透明转发协议，**不**强制把现代服务器降级为旧协议。独立运行保护脚本时，可为已确认只支持 `initialize` 的服务器显式传入 `--legacy`，在一次性 discovery probe 中本地返回 `-32601` 而不启动真正的服务器。此选项不是默认恢复策略。
 ---
 
 ## 一、背景与目标

package/docs/USER-GUIDE.md

@@ -47,7 +47,7 @@ dsh web
 
 重启后，可以用以下任一方式打开：
 
-- 在 DSH 左侧主导航点击“🧩 MCP连接器”。入口通常位于“新会话”下方、工作区/会话列表上方；如果当前 DSH 版本没有对应的公开插槽，入口会回退到左侧底部。
+- 在 DSH 左侧主导航点击“MCP连接器”。入口通常位于“新会话”下方、工作区/会话列表上方；如果当前 DSH 版本没有对应的公开插槽，入口会回退到左侧底部。
 - 打开“设置 → 插件 → 插件配置 → MCP连接器”，展开卡片并点击“打开 MCP连接器”。该按钮直接复用同一个连接器弹框，不要求侧边栏入口可见；关闭弹框后仍回到设置页。
 
 如需腾出侧边栏空间，可在同一配置卡片关闭“在侧边栏显示 MCP连接器”。该偏好作用于当前 DSH profile，并在重启后保留；它只隐藏快捷入口，不停用插件、已连接 MCP Server 或工具。隐藏后可以随时从该配置卡片直接打开连接器，或重新开启入口。旧版 DSH 没有 Settings 能力时，插件保持入口可见，不会因设置功能进入 Safe Mode。

package/docs/tutorials/JSON-MIGRATION.md

@@ -13,7 +13,7 @@
 
 ## 导入一个最小示例
 
-打开左侧“🧩 MCP连接器”（或“设置 → 插件 → 插件配置 → MCP连接器 → 打开 MCP连接器”），点击“＋ 添加连接 → 导入 JSON”，在本机粘贴：
+打开左侧“MCP连接器”（或“设置 → 插件 → 插件配置 → MCP连接器 → 打开 MCP连接器”），点击“＋ 添加连接 → 导入 JSON”，在本机粘贴：
 
 ```json
 {

package/docs/tutorials/README.md

@@ -12,7 +12,7 @@
 dsh plugin --profile web add dsh-mcp-connector
 ```
 
-安装或升级后，只重启你正在使用的宿主：DSH Desktop 需完全退出应用后重新打开；`dsh web` 需停止原进程后重新启动。打开左侧“🧩 MCP连接器”；若侧边栏入口已隐藏，从“设置 → 插件 → 插件配置 → MCP连接器”点击“打开 MCP连接器”。自定义过 profile 布局的部署应以其宿主配置为准。
+安装或升级后，只重启你正在使用的宿主：DSH Desktop 需完全退出应用后重新打开；`dsh web` 需停止原进程后重新启动。打开左侧“MCP连接器”；若侧边栏入口已隐藏，从“设置 → 插件 → 插件配置 → MCP连接器”点击“打开 MCP连接器”。自定义过 profile 布局的部署应以其宿主配置为准。
 
 ## 2. 只选一条连接路径
 

package/docs/tutorials/TOOL-SEARCH-RECOVERY.md

@@ -6,7 +6,7 @@
 
 ## 先定位正确的工具
 
-1. 在 DSH 选中目标 Workspace，再打开“🧩 MCP连接器 → 工具”。未选 Workspace 时仅能看到全局连接；项目连接不会越界显示。
+1. 在 DSH 选中目标 Workspace，再打开“MCP连接器 → 工具”。未选 Workspace 时仅能看到全局连接；项目连接不会越界显示。
 2. 输入工具名或描述中的关键词。精确工具名优先；同名结果仍需核对连接、服务和来源。
 3. 使用“连接”“服务”“发现状态”筛选。若结果为空，先清除筛选，再确认连接已启用、范围正确且至少成功发现过一次。
 4. 点击“参数详情”：先看类型、必填、枚举和可展开的嵌套摘要；复杂规则可打开“原始 Schema（安全缓存）”。它仍经过安全裁剪和容量限制，不是服务端完整原文。

package/lib/client.js

@@ -91,8 +91,13 @@ window.__ModuleLoader__.load({
 	flex: 0 0 20px;
 	width: 20px;
 	height: 20px;
-	font-size: 18px;
-	line-height: 1;
+	color: inherit;
+}
+
+.mcpConnectorLauncherIcon > svg {
+	display: block;
+	width: 18px;
+	height: 18px;
 }
 
 .mcpConnectorLauncherLabel {
@@ -142,6 +147,16 @@ window.__ModuleLoader__.load({
 .mcpConnectorMarketPanel { background: #ffffff; color: #111827; }
 .mcpConnectorMarketHeader { border-color: #e5e7eb; }
 .mcpConnectorMarketTitle { color: #111827; }
+.mcpConnectorMarketIcon {
+	display: inline-flex;
+	align-items: center;
+	color: inherit;
+}
+.mcpConnectorMarketIcon > svg {
+	display: block;
+	width: 18px;
+	height: 18px;
+}
 .mcpConnectorVersion {
 	color: #6b7280;
 	background: #f3f4f6;
@@ -1596,7 +1611,21 @@ window.__ModuleLoader__.load({
 									/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 									style: { display: "flex", alignItems: "center", gap: 10, flexWrap: "wrap", minWidth: 0, flex: 1 },
 										children: [
-											/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { style: { fontSize: 22 }, children: "\u{1F9E9}" }),
+											/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+												className: "mcpConnectorMarketIcon",
+												"aria-hidden": true,
+												children: (0, react_jsx_runtime.jsxs)("svg", {
+													viewBox: "0 0 16 16",
+													fill: "none",
+													"aria-hidden": "true",
+													children: [
+														(0, react_jsx_runtime.jsx)("path", { d: "M6 2V4.5", stroke: "currentColor", strokeLinecap: "round" }),
+														(0, react_jsx_runtime.jsx)("path", { d: "M10 2V4.5", stroke: "currentColor", strokeLinecap: "round" }),
+														(0, react_jsx_runtime.jsx)("path", { d: "M3.5 4.5H12.5V8.25C12.5 10.7353 10.4853 12.75 8 12.75C5.51472 12.75 3.5 10.7353 3.5 8.25V4.5Z", stroke: "currentColor", strokeLinejoin: "round" }),
+														(0, react_jsx_runtime.jsx)("path", { d: "M8 12.75V14.5", stroke: "currentColor", strokeLinecap: "round" })
+													]
+												})
+											}),
 											/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { id: "mcp-connector-market-title", className: "mcpConnectorMarketTitle", style: { fontSize: 18, fontWeight: 600 }, children: "MCP连接器" }),
 											/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
 												className: "mcpConnectorVersion",
@@ -1716,7 +1745,21 @@ window.__ModuleLoader__.load({
 				"aria-expanded": open,
 				onClick: () => { try { actions.open(); } catch (error) { console.error('[mcp-connector] open failed:', error); } },
 				children: [
-					(0, react_jsx_runtime.jsx)("span", { className: "mcpConnectorLauncherIcon", "aria-hidden": true, children: "🧩" }),
+					(0, react_jsx_runtime.jsx)("span", {
+						className: "mcpConnectorLauncherIcon",
+						"aria-hidden": true,
+						children: (0, react_jsx_runtime.jsxs)("svg", {
+							viewBox: "0 0 16 16",
+							fill: "none",
+							"aria-hidden": "true",
+							children: [
+								(0, react_jsx_runtime.jsx)("path", { d: "M6 2V4.5", stroke: "currentColor", strokeLinecap: "round" }),
+								(0, react_jsx_runtime.jsx)("path", { d: "M10 2V4.5", stroke: "currentColor", strokeLinecap: "round" }),
+								(0, react_jsx_runtime.jsx)("path", { d: "M3.5 4.5H12.5V8.25C12.5 10.7353 10.4853 12.75 8 12.75C5.51472 12.75 3.5 10.7353 3.5 8.25V4.5Z", stroke: "currentColor", strokeLinejoin: "round" }),
+								(0, react_jsx_runtime.jsx)("path", { d: "M8 12.75V14.5", stroke: "currentColor", strokeLinecap: "round" })
+							]
+						})
+					}),
 					wide ? (0, react_jsx_runtime.jsx)("span", { className: "mcpConnectorLauncherLabel", children: "MCP连接器" }) : null
 				]
 			});

package/lib/index.js

@@ -3254,7 +3254,11 @@ export async function apply(ctx, config) {
         logger.warn(`skip provision "${key}" at startup: ${failure.message}`);
         continue;
       }
-      await provision(ctx, config, record, grantMap()).catch((error) => {
+      // Optional MCPs still participate in the Host loader's startup barrier.
+      // Bound their stdio bootstrap RPCs at the transport, not with Promise.race
+      // around loader.create(): an abandoned fiber would remain pending there.
+      const startupRequestTimeoutMs = Math.max(100, Math.min(DEFAULT_REQUEST_TIMEOUT_MS, Math.trunc(Number(config.requestTimeoutMs) || DEFAULT_REQUEST_TIMEOUT_MS)));
+      await provision(ctx, config, record, grantMap(), { startupRequestTimeoutMs }).catch((error) => {
         logger.warn(`provision "${key}" failed: ${error.message}`);
       });
     }

package/lib/mcp-provision.js

@@ -4,6 +4,9 @@
  */
 
 import { cliBridgeArgs } from './cli-providers.js';
+import { fileURLToPath } from 'node:url';
+
+const STDIO_STARTUP_GUARD = fileURLToPath(new URL('./stdio-startup-guard.js', import.meta.url));
 
 export function entryIdFor(config, record) {
   return `${config.entryPrefix}-${record.key}`;
@@ -26,18 +29,23 @@ export function authHeaders(record, grants) {
   return headers;
 }
 
-export function buildEntryConfig(record, grants, { failOnStartupError = false } = {}) {
+export function buildEntryConfig(record, grants, { failOnStartupError = false, startupRequestTimeoutMs } = {}) {
   if (record.transport === 'stdio') {
     const env = { ...(record.env ?? {}) };
     if (record.auth?.mode === 'oauth' && record.oauthTokenEnv) {
       const grant = record.auth.grantKey ? grants.get(record.auth.grantKey) : null;
       if (grant?.accessToken) env[record.oauthTokenEnv] = `Bearer ${grant.accessToken}`;
     }
+    const guarded = startupRequestTimeoutMs !== undefined;
+    if (guarded && (!Number.isSafeInteger(startupRequestTimeoutMs) || startupRequestTimeoutMs < 100 || startupRequestTimeoutMs > 2_147_483_647)) {
+      throw new RangeError('stdio startup request timeout must be an integer between 100 and 2147483647 ms');
+    }
+    const args = cliBridgeArgs(record);
     return {
       transport: 'stdio',
       serverName: record.serverName,
-      command: record.command,
-      args: cliBridgeArgs(record),
+      command: guarded ? process.execPath : record.command,
+      args: guarded ? [STDIO_STARTUP_GUARD, '--timeout-ms', String(startupRequestTimeoutMs), '--', record.command, ...args] : args,
       env,
       cwd: record.cwd || process.cwd(),
       failOnStartupError,
@@ -62,9 +70,9 @@ function hasEntry(ctx, id) {
 }
 
 /** 创建或更新一条 mcp-client 条目（幂等；serverName 不变则工具名不变） */
-export async function provision(ctx, config, record, grants, { failOnStartupError = false } = {}) {
+export async function provision(ctx, config, record, grants, { failOnStartupError = false, startupRequestTimeoutMs } = {}) {
   const id = entryIdFor(config, record);
-  const entryConfig = buildEntryConfig(record, grants, { failOnStartupError });
+  const entryConfig = buildEntryConfig(record, grants, { failOnStartupError, startupRequestTimeoutMs });
   const disabled = record.enabled === false;
   if (hasEntry(ctx, id)) {
     const existing = ctx.loader.resolve(id);

package/lib/stdio-startup-guard.js

@@ -0,0 +1,116 @@
+// stdout is reserved for MCP JSON-RPC. No payloads or credentials are logged.
+// Derived from the proven legacy stdio adapter: transparent unless --legacy
+// is explicitly requested for a known initialize-era server.
+import { spawn } from 'node:child_process';
+import { createInterface } from 'node:readline';
+
+const argv = process.argv.slice(2);
+const separator = argv.indexOf('--');
+const timeoutMs = Number(argv[1]);
+const legacy = argv[2] === '--legacy';
+if (argv[0] !== '--timeout-ms' || separator !== (legacy ? 3 : 2)
+    || !Number.isSafeInteger(timeoutMs) || timeoutMs < 100 || timeoutMs > 2_147_483_647 || !argv[separator + 1]) {
+  process.stderr.write('[mcp-stdio-startup] Invalid invocation\n');
+  process.exit(2);
+}
+const command = argv[separator + 1];
+const args = argv.slice(separator + 2);
+const startupMethods = new Set(['server/discover', 'initialize', 'tools/list']);
+let child;
+let stopping = false;
+let discovered = false;
+let killer;
+let closeTimer;
+const pending = new Map();
+const write = (message) => process.stdout.write(`${JSON.stringify(message)}\n`);
+
+function clearPending() {
+  for (const { timer } of pending.values()) clearTimeout(timer);
+  pending.clear();
+}
+
+function forceStop() {
+  if (!child) return;
+  if (process.platform === 'win32') {
+    // Capture the tree while its root is alive; do not wait for a parent to
+    // exit and leave unaddressable descendants behind.
+    if (child.exitCode !== null || killer) return;
+    killer = spawn('taskkill.exe', ['/PID', String(child.pid), '/T', '/F'], { stdio: 'ignore', windowsHide: true });
+    killer.on('error', () => child.kill('SIGKILL'));
+    killer.on('close', () => { killer = undefined; if (child.exitCode !== null) process.exit(process.exitCode ?? 0); });
+  } else {
+    try { process.kill(-child.pid, 'SIGKILL'); } catch { child.kill('SIGKILL'); }
+  }
+}
+
+function stop(reason, code = 0) {
+  if (stopping) return;
+  stopping = true;
+  clearPending();
+  if (reason) process.stderr.write(`[mcp-stdio-startup] ${reason}\n`);
+  process.exitCode = code;
+  if (!child || child.exitCode !== null) process.exit(code);
+  if (process.platform === 'win32') forceStop();
+  else child.stdin.end();
+  closeTimer = setTimeout(forceStop, 300);
+  // A broken descendant must not retain the transport indefinitely.
+  setTimeout(() => process.exit(code), 2500).unref();
+}
+
+function launch() {
+  child = spawn(command, args, {
+    cwd: process.cwd(), env: process.env,
+    stdio: ['pipe', 'pipe', 'inherit'], windowsHide: true,
+    detached: process.platform !== 'win32',
+  });
+  child.on('error', () => stop('Server launch failed', 1));
+  child.stdin.on('error', () => stop('Server input closed', 1));
+  const output = createInterface({ input: child.stdout, crlfDelay: Infinity });
+  output.on('line', (line) => {
+    try {
+      const message = JSON.parse(line);
+      if (Object.hasOwn(message, 'id') && !message.method) {
+        const request = pending.get(message.id);
+        if (request) {
+          clearTimeout(request.timer);
+          pending.delete(message.id);
+          if (request.method === 'tools/list' && !message.error && !message.result?.nextCursor) {
+            discovered = true;
+            clearPending();
+          }
+        }
+      }
+    } catch { /* The SDK reports non-protocol stdout, without leaking it here. */ }
+    if (!stopping) process.stdout.write(`${line}\n`);
+  });
+  child.on('close', (code) => {
+    clearPending();
+    clearTimeout(closeTimer);
+    // A parent may exit on EOF while descendants remain in its process group.
+    if (process.platform !== 'win32') forceStop();
+    if (!killer) process.exit(stopping ? (process.exitCode ?? 0) : (code ?? 1));
+  });
+}
+
+process.stdout.on('error', () => stop(undefined, 0));
+process.on('SIGTERM', () => stop(undefined, 0));
+process.on('SIGINT', () => stop(undefined, 0));
+const input = createInterface({ input: process.stdin, crlfDelay: Infinity });
+input.on('close', () => stop(undefined, 0));
+input.on('line', (line) => {
+  if (stopping || !line.trim()) return;
+  let message;
+  try { message = JSON.parse(line); } catch { stop('Invalid JSON-RPC input', 1); return; }
+  if (legacy && message.method === 'server/discover' && Object.hasOwn(message, 'id')) {
+    write({ jsonrpc: '2.0', id: message.id, error: { code: -32601, message: 'Legacy MCP server: use initialize' } });
+    return;
+  }
+  if (!child) launch();
+  if (stopping) return;
+  if (!discovered && startupMethods.has(message.method) && Object.hasOwn(message, 'id')) {
+    clearTimeout(pending.get(message.id)?.timer);
+    const timer = setTimeout(() => stop(`${message.method} exceeded ${timeoutMs}ms; stopped server`, 1), timeoutMs);
+    pending.set(message.id, { method: message.method, timer });
+  }
+  child.stdin.write(`${line}\n`);
+});

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-mcp-connector",
-  "version": "0.2.65",
+  "version": "0.2.67",
   "description": "DeepSeek Harness MCP Connector: connect servers, search tools across active connections, and troubleshoot discovery. Includes a continuously updated catalog; supports OAuth 2.0 PKCE, API keys, Streamable HTTP/stdio, and mcpServers JSON import.",
   "type": "module",
   "main": "lib/index.js",
@@ -46,7 +46,7 @@
   ],
   "scripts": {
     "test": "node --test",
-    "lint": "node --check lib/discovery-policy.js && node --check lib/index.js && node --check lib/web.js && node --check lib/client.js && node --check lib/settings.js && node --check lib/version-status.js && node --check lib/schema.js && node --check lib/catalog.js && node --check lib/prompts.js && node --check lib/probe.js && node --check lib/diagnostics.js && node --check lib/connection-backup.js && node --check lib/connection-editor.js && node --check lib/connection-scopes.js && node --check lib/governance.js && node --check lib/session-injection.js && node --check lib/tool-catalog-cache.js && node --check lib/status-events.js && node --check lib/mcp-validation.js && node --check lib/mcp-http.js && node --check lib/migration.js && node --check lib/stores.js && node --check lib/grant-journal.js && node --check lib/oauth.js && node --check lib/grant-lifecycle.js && node --check lib/callback-server.js && node --check lib/mcp-provision.js && node --check lib/cli-providers.js && node --check lib/util.js && node --check lib/constants.js && node --check lib/tools.js && node --check lib/connectors/oauth-connector.js && node --check lib/connectors/manual-connector.js && node --check lib/connectors/json-connector.js && node --check scripts/probe-connector.mjs && node --check scripts/cli-bridge.mjs && node --check scripts/build-registry.mjs && node --check scripts/ui-harness.mjs && node --check scripts/check-market-registration.mjs && node --check scripts/check-distribution-sync.mjs && node --check scripts/check-readme-version.mjs && node --check scripts/check-first-use-docs.mjs && node --check scripts/check-marketing-metadata.mjs && node --check scripts/check-storefront-screenshots.mjs && node --check scripts/sync-registry-stats.mjs && node --check scripts/verify-pack.mjs",
+    "lint": "node --check lib/discovery-policy.js && node --check lib/index.js && node --check lib/web.js && node --check lib/client.js && node --check lib/settings.js && node --check lib/version-status.js && node --check lib/schema.js && node --check lib/catalog.js && node --check lib/prompts.js && node --check lib/probe.js && node --check lib/diagnostics.js && node --check lib/connection-backup.js && node --check lib/connection-editor.js && node --check lib/connection-scopes.js && node --check lib/governance.js && node --check lib/session-injection.js && node --check lib/tool-catalog-cache.js && node --check lib/status-events.js && node --check lib/mcp-validation.js && node --check lib/mcp-http.js && node --check lib/migration.js && node --check lib/stores.js && node --check lib/grant-journal.js && node --check lib/oauth.js && node --check lib/grant-lifecycle.js && node --check lib/callback-server.js && node --check lib/mcp-provision.js && node --check lib/stdio-startup-guard.js && node --check lib/cli-providers.js && node --check lib/util.js && node --check lib/constants.js && node --check lib/tools.js && node --check lib/connectors/oauth-connector.js && node --check lib/connectors/manual-connector.js && node --check lib/connectors/json-connector.js && node --check scripts/probe-connector.mjs && node --check scripts/cli-bridge.mjs && node --check scripts/build-registry.mjs && node --check scripts/ui-harness.mjs && node --check scripts/check-market-registration.mjs && node --check scripts/check-distribution-sync.mjs && node --check scripts/check-readme-version.mjs && node --check scripts/check-first-use-docs.mjs && node --check scripts/check-marketing-metadata.mjs && node --check scripts/check-storefront-screenshots.mjs && node --check scripts/sync-registry-stats.mjs && node --check scripts/verify-pack.mjs",
     "registry:build": "node scripts/build-registry.mjs",
     "registry:validate": "node scripts/probe-connector.mjs catalog/catalog.json --validate-only",
     "dev:ui": "node scripts/ui-harness.mjs",

package/scripts/ui-harness.mjs

@@ -151,7 +151,7 @@ function captureShell() {
 </head>
 <body>
   <section class="capture-panel" aria-label="MCP连接器产品面板">
-    <header class="capture-header"><span aria-hidden="true">🧩</span><span class="capture-title">MCP连接器</span><span class="capture-version">v${packageJson.version}</span><span class="capture-state">无凭据 Mock</span></header>
+    <header class="capture-header"><svg aria-hidden="true" width="18" height="18" viewBox="0 0 16 16" fill="none"><path d="M6 2V4.5" stroke="currentColor" stroke-linecap="round"/><path d="M10 2V4.5" stroke="currentColor" stroke-linecap="round"/><path d="M3.5 4.5H12.5V8.25C12.5 10.7353 10.4853 12.75 8 12.75C5.51472 12.75 3.5 10.7353 3.5 8.25V4.5Z" stroke="currentColor" stroke-linejoin="round"/><path d="M8 12.75V14.5" stroke="currentColor" stroke-linecap="round"/></svg><span class="capture-title">MCP连接器</span><span class="capture-version">v${packageJson.version}</span><span class="capture-state">无凭据 Mock</span></header>
     <iframe src="/mcp-connector/ui/" title="MCP连接器"></iframe>
   </section>
   <script>

package/ui/index.html

@@ -67,7 +67,6 @@
     flex-shrink: 0;
   }
   header .logo { font-size: 18px; font-weight: 700; display: flex; align-items: center; gap: 8px; color: var(--text); }
-  header .logo .puzzle { font-size: 22px; }
   .tabs { display: flex; gap: 0; background: var(--bg); padding: 3px; border-radius: 10px; }
   .tabs button {
     display: inline-flex; align-items: center; gap: 5px;