dsh-mcp-connector 0.2.69 → 0.2.70

package/CHANGELOG.md

@@ -4,6 +4,14 @@
 
 ## [Unreleased]
 
+## [0.2.70] - 2026-10-08
+
+### Fixed
+
+- Windows 启动恢复保护采用 cross-spawn 解析 PATH/PATHEXT 与 npm .cmd shim，修复 npx 连接手动成功但重启失败的问题（#130）。
+- 命令缺失时返回不含命令、参数或凭据的 ENOENT 与 PATH 检查提示。
+- 新增 Windows 真实 .cmd 子进程回归，覆盖带空格路径与特殊字符参数。
+
 ## [0.2.69] - 2026-10-08
 
 ### Changed

package/README.en.md

@@ -202,7 +202,7 @@ npm run dev:ui
 
 Every Registry merge regenerates `catalog-stats.json`; an hourly workflow in this repository synchronizes the Chinese and English product copy plus a local stats snapshot. The static npm README updates with package releases, while the live badges above read the Registry directly and therefore stay current without another npm release.
 
-The current public version is [`dsh-mcp-connector@0.2.69`](https://www.npmjs.com/package/dsh-mcp-connector), with [GitHub Release v0.2.69](https://github.com/duhu2000/dsh-mcp-connector/releases/tag/v0.2.69).
+The current public version is [`dsh-mcp-connector@0.2.70`](https://www.npmjs.com/package/dsh-mcp-connector), with [GitHub Release v0.2.70](https://github.com/duhu2000/dsh-mcp-connector/releases/tag/v0.2.70).
 
 See [CHANGELOG.md](CHANGELOG.md) for version history and [docs/DESKTOP-E2E.md](docs/DESKTOP-E2E.md) for the Desktop release checklist.
 

package/README.md

@@ -197,7 +197,7 @@ npm run dev:ui
 
 公共 Registry 每次合并后会生成 `catalog-stats.json`；本仓库的定时工作流每小时同步中英文介绍和统计快照。npm 页面中的静态正文随版本发布更新，上方动态统计徽标则直接读取 Registry，可在不发布新 npm 版本时保持实时数量一致。
 
-当前公开版本为 [`dsh-mcp-connector@0.2.69`](https://www.npmjs.com/package/dsh-mcp-connector)，对应 [GitHub Release v0.2.69](https://github.com/duhu2000/dsh-mcp-connector/releases/tag/v0.2.69)。
+当前公开版本为 [`dsh-mcp-connector@0.2.70`](https://www.npmjs.com/package/dsh-mcp-connector)，对应 [GitHub Release v0.2.70](https://github.com/duhu2000/dsh-mcp-connector/releases/tag/v0.2.70)。
 
 版本能力与变更记录见 [CHANGELOG.md](CHANGELOG.md)。
 Desktop 发版回归见 [docs/DESKTOP-E2E.md](docs/DESKTOP-E2E.md)。

package/docs/STDIO-SUPPORT.md

@@ -1,5 +1,7 @@
 # stdio 传输支持 —— 设计文档 & 开发实现
 
+> **Windows 命令兼容（0.2.70）**：启动恢复保护使用 cross-spawn 解析 PATH/PATHEXT 中的命令，支持 npx 等 .cmd shim；通常无需将已有配置改成 cmd /c。uvx 需要先安装并位于 DSH 进程的 PATH 中。命令不存在时显示 ENOENT 与 PATH 检查提示，不输出参数或凭据。
+
 > 目标：补齐 stdio（本地进程）传输方式，达到与 WorkBuddy / TraeWork / Qwen Code 三家大厂传输方式全覆盖。
 > 结论：**低成本补齐**——`@deepseek-ai/dsh-mcp-client` 已原生支持 stdio，我们只需在 schema + provisioning 两层「开闸透传」。
 

package/lib/stdio-startup-guard.js

@@ -2,6 +2,7 @@
 // Derived from the proven legacy stdio adapter: transparent unless --legacy
 // is explicitly requested for a known initialize-era server.
 import { spawn } from 'node:child_process';
+import spawnServer from 'cross-spawn';
 import { createInterface } from 'node:readline';
 
 const argv = process.argv.slice(2);
@@ -58,17 +59,37 @@ function stop(reason, code = 0) {
 }
 
 function launch() {
-  child = spawn(command, args, {
+  let launchFailed = false;
+  let protocolSeen = false;
+  let startupStderr = '';
+  const flushStderr = () => {
+    if (!launchFailed && startupStderr) process.stderr.write(startupStderr);
+    startupStderr = '';
+  };
+  child = spawnServer(command, args, {
     cwd: process.cwd(), env: process.env,
-    stdio: ['pipe', 'pipe', 'inherit'], windowsHide: true,
+    stdio: ['pipe', 'pipe', 'pipe'], windowsHide: true,
     detached: process.platform !== 'win32',
   });
-  child.on('error', () => stop('Server launch failed', 1));
+  child.stderr.on('data', (data) => {
+    if (launchFailed) return;
+    if (protocolSeen) process.stderr.write(data);
+    else startupStderr = (startupStderr + data.toString()).slice(-65536);
+  });
+  child.on('error', (error) => {
+    launchFailed = true;
+    startupStderr = '';
+    stop(error.code === 'ENOENT'
+    ? 'Server launch failed (ENOENT): check the executable and PATH on the DSH host'
+    : 'Server launch failed', 1);
+  });
   child.stdin.on('error', () => stop('Server input closed', 1));
   const output = createInterface({ input: child.stdout, crlfDelay: Infinity });
   output.on('line', (line) => {
     try {
       const message = JSON.parse(line);
+      protocolSeen = true;
+      flushStderr();
       if (Object.hasOwn(message, 'id') && !message.method) {
         const request = pending.get(message.id);
         if (request) {
@@ -84,6 +105,7 @@ function launch() {
     if (!stopping) process.stdout.write(`${line}\n`);
   });
   child.on('close', (code) => {
+    flushStderr();
     clearPending();
     clearTimeout(closeTimer);
     // A parent may exit on EOF while descendants remain in its process group.
@@ -113,4 +135,4 @@ input.on('line', (line) => {
     pending.set(message.id, { method: message.method, timer });
   }
   child.stdin.write(`${line}\n`);
-});
+});

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-mcp-connector",
-  "version": "0.2.69",
+  "version": "0.2.70",
   "description": "DeepSeek Harness MCP Connector: connect servers, search tools across active connections, and troubleshoot discovery. Includes a continuously updated catalog; supports OAuth 2.0 PKCE, API keys, Streamable HTTP/stdio, and mcpServers JSON import.",
   "type": "module",
   "main": "lib/index.js",
@@ -151,6 +151,9 @@
     "react-dom": "^18.2.0",
     "zod": ">=4.1.8 <5"
   },
+  "dependencies": {
+    "cross-spawn": "^7.0.6"
+  },
   "devDependencies": {
     "@deepseek-ai/cordis": "^4.0.1",
     "@deepseek-ai/dsh-storage": "^0.1.0-rc.7",