dsh-mcp-connector 0.2.74 → 0.2.76

package/CHANGELOG.md

@@ -2,6 +2,35 @@
 
 本项目遵循 [Keep a Changelog](https://keepachangelog.com/zh-CN/1.1.0/)；首个公开版本从 `0.1.0` 开始。
 
+## [0.2.76] - 2026-10-20
+
+### Added / Fixed
+
+- 无凭据市场 stdio 连接可在首次安装及已安装界面设置本地 argsAppend/env/cwd；保留目录来源和连接身份，支持脱敏编辑、快照恢复、失败重试及停用保持。
+- 串行处理首次安装、编辑、停用和断开，防止迟到启动恢复过期状态；持久化与回滚双重失败保留恢复快照并返回安全提示。
+- 修正已安装工具详情将 stdio 错标为远程服务的问题。
+- 不开放 OAuth、凭据绑定、CLI 桥接或完整参数替换。
+
+### Verification and known limitations
+
+- 完整 check（含隔离真实 MCP bridge）：427 passed / 4 skipped / 0 failed；89 个发布文件检查通过。
+- macOS 隔离真实 UI 验证安装、编辑、停用/启用、工具发现、失败重试、快照恢复、脱敏导出及断开。
+- 按维护者明确要求发布。Windows Desktop 实机、完整宿主重启持久化与生产 ToolRuntime UI 调用尚未验收；CI 不等于 Desktop 验收，#146 保持开放。详见 docs/ACCEPTANCE-146-20261020.md。
+
+## [0.2.75] - 2026-10-17
+
+### Added
+
+- 可选 `compactManagementTools` 精简管理工具模式（#161）：开启后将 25 个管理工具收敛为只读发现与原有会话管理两个入口；图形界面功能不变。默认关闭以兼容旧工具名，修改后需重载插件。
+- 统一发现入口仅允许目录、状态、缓存搜索与详情四种操作，保留工作区参数与原有渲染，不提供通用工具调用、凭据变更或授权代理。业务工具可见性、会话确认和 Host 审批沿用原机制。
+- 教程相对 inline Markdown 链接与图片检查（#159 / #156），覆盖 Windows 路径、代码片段排除、标题与括号文件名、越界及不存在的目标；纳入 `npm run check`。不宣称覆盖引用式链接、HTML 或完整 CommonMark。
+
+### Verification scope
+
+- 本地完整 `npm run check`：408 项通过、4 项条件跳过、0 失败；88 个发布文件通过白名单与凭据/本机路径扫描。跳过项不计作通过。
+- 新增工具数量、schema 大小、严格分派、结果渲染、参数拒绝、会话上下文、卸载清理和图形 API 集成回归。#163 与 #159 已通过 Node 20/22/24、Windows 和 Zod 4.1.8 CI。真实 DSH Web/Desktop 开关重载及模型调用验收仍需单独完成；#161 保留打开，精简模式默认关闭。
+- #146 本地参数覆盖、#105 Schema 变化提醒、#83 钉钉授权等开发草案不包含在本次发布中；旧企查查凭据不做自动迁移。
+
 ## [0.2.74] - 2026-10-16
 
 ### Added

package/README.en.md

@@ -85,7 +85,7 @@ If the plugin helps you connect an MCP server faster, consider [starring the rep
 - Explicit, non-destructive migration from the two earlier Qichacha OAuth plugins, plus active-plugin conflict detection that blocks duplicate server management and credential overwrites.
 
 <!-- catalog-stats:start -->
-As of 2026-10-06, the public Registry publishes 109 connector descriptors. After merging and deduplicating them with the 4 bundled Qichacha cards, the Marketplace exposes 113 cards across 9 business categories. Recommendations remain limited to the four Qichacha cards, PKULaw, and Wind, for 6 featured cards in total. The Registry evolves independently; the badge shown after a client refresh and the live badges above are the authoritative current counts.
+As of 2026-10-17, the public Registry publishes 110 connector descriptors. After merging and deduplicating them with the 4 bundled Qichacha cards, the Marketplace exposes 114 cards across 9 business categories. Recommendations remain limited to the four Qichacha cards, PKULaw, and Wind, for 6 featured cards in total. The Registry evolves independently; the badge shown after a client refresh and the live badges above are the authoritative current counts.
 <!-- catalog-stats:end -->
 
 ## Interface and demo
@@ -167,6 +167,7 @@ The default bundle configuration is in `cordis.patch.yml`:
     refreshSkewMs: 300000
     openBrowser: true
     showSidebarEntry: true
+    compactManagementTools: false
     frameAncestors: ['self']
 ```
 
@@ -178,6 +179,15 @@ The proxy variables must be present in the running DSH process. After changing t
 
 `showSidebarEntry` defaults to `true`. Users can override it from the DSH plugin configuration page; turning it off hides only the shortcut and does not disable the connector, connected MCP servers, or tools.
 
+`compactManagementTools` defaults to `false` for backward compatibility. Set it to `true` in the plugin configuration and reload the plugin (or restart DSH) to expose only two management tools at the next inference boundary:
+
+- `mcp_connector_discover`: fixed read-only actions `catalog`, `status`, `search` (requires `query`), and `detail` (requires `toolName`). Example: `{"action":"search","query":"weather","limit":5}`.
+- `mcp_connector_session_tools`: unchanged session activation, confirmation and TTL behavior.
+
+Use the connector UI for connection setup, authorization, import, editing, snapshots and migration. There is no arbitrary execution proxy or automatic management-tool loading. Keep this option `false` for conversation-only deployments or workflows that depend on legacy tool names. Set it back to `false` and reload to restore those names; do not run duplicate plugin instances.
+
+This setting does not hide downstream business tools, disable connections, migrate credentials, change workspace/governance rules or bypass Host approval. Use the existing session injection mode for downstream tool visibility. Reduced tool count/schema size is not a measured token or cost saving.
+
 `frameAncestors` defaults to `['self']`: the CSP of the panel page (`/mcp-connector/ui/`) only allows same-origin embedding, which is the existing behaviour and is not relaxed by default. When a desktop shell (Tauri/Electron) embeds the panel, the ancestor origin differs from the panel origin, so the browser blocks it with `Framing '...' violates the following Content Security Policy directive: "frame-ancestors 'self'"` and the panel renders blank. Deployers must opt in explicitly:
 
 ```yaml
@@ -215,7 +225,7 @@ npm run dev:ui
 
 Every Registry merge regenerates `catalog-stats.json`; an hourly workflow in this repository synchronizes the Chinese and English product copy plus a local stats snapshot. The static npm README updates with package releases, while the live badges above read the Registry directly and therefore stay current without another npm release.
 
-The current public version is [`dsh-mcp-connector@0.2.74`](https://www.npmjs.com/package/dsh-mcp-connector), with [GitHub Release v0.2.74](https://github.com/duhu2000/dsh-mcp-connector/releases/tag/v0.2.74).
+The current public version is [`dsh-mcp-connector@0.2.76`](https://www.npmjs.com/package/dsh-mcp-connector), with [GitHub Release v0.2.76](https://github.com/duhu2000/dsh-mcp-connector/releases/tag/v0.2.76).
 
 See [CHANGELOG.md](CHANGELOG.md) for version history and [docs/DESKTOP-E2E.md](docs/DESKTOP-E2E.md) for the Desktop release checklist.
 

package/README.md

@@ -73,6 +73,7 @@ dsh plugin --profile web add dsh-mcp-connector
 - 市场 Bearer/API Key 连接器先执行 MCP initialize 连通性与凭据校验，全部 HTTP Server 通过后才持久化凭据并进入“已安装”；stdio 卡片可声明多个本机凭据字段及其环境变量映射。
 - 生命周期管理：连接持久化、重启恢复、启停、断开、OAuth 自动刷新/退避恢复与撤销；同 issuer 卡片共享一次授权，跨进程锁与独立原子 Grant journal 防止 Desktop/Web 并行时重复消耗 Refresh Token。
 - 配置原地编辑：自定义和 JSON 导入连接可在“已安装”中编辑标准化 JSON 并重新连接；敏感值以本机保留标记处理，校验、启动或保存失败时原连接继续可用。
+- 本地参数覆盖（#146，0.2.76）：无凭据市场 stdio 连接支持在首次连接确认框填写“高级本地参数”，以及在已安装列表编辑 `argsAppend`、`env`、`cwd`，不修改目录或连接身份；已有值不回传浏览器，支持快照恢复和清除覆盖。首次连接留空沿用市场参数，已有连接留空保留原覆盖；启动失败保留表单可修改重试。不支持 OAuth、凭据绑定、CLI 桥接或完整参数替换；真实 Desktop/Windows 验收尚未完成。
 - 配置备份：一键复制/下载可再次导入的脱敏 JSON；连接变更前自动保存最多 20 个本机快照，支持预览与原子恢复。凭据、本地路径和 OAuth Grant 不进入导出结果。
 - 连接作用域：新连接可选当前 Workspace 项目或 profile 全局；支持先预览 Server/工具影响，再复制、移动或按 revision 回滚。凭据只存一份，project-only 工具由 DSH Host 强制隔离。
 - 三层治理：Connection、Server、Tool 规则按 Tool > Server > Connection > 默认允许解析；变更先预览、按 revision 提交并可回滚，由 DSH Host 的 schema/lookup/dispatch restriction 与最终执行 Guard 真实生效。
@@ -86,7 +87,7 @@ dsh plugin --profile web add dsh-mcp-connector
 - 对话工具：`mcp_connector_catalog`、`connect`、`configure`、`import_json`、`export_config`、`snapshot`、`install_from_url`、`status`、`scope`、`health_check`、`policy`、`set_enabled`、`session_tools`、`disconnect`、`refresh_catalog`、`publish`、`tools_list`、`tool_search`、`tool_detail`。搜索/详情只做渐进式能力发现，不执行目标 MCP 工具。
 
 <!-- catalog-stats:start -->
-截至 2026-10-06，公共 Registry 已发布 109 条连接器描述；与随包的 4 张企查查卡片合并去重后，市场页可浏览 113 张卡片，覆盖企业数据、金融投资、法律合规、开发工具、办公协作、调研分析、设计创意、效率工具、其他 9 类。推荐位严格保留 4 张企查查卡片、北大法宝和 Wind，共 6 张；其他连接器按业务分类展示。Registry 可独立持续更新，实际数量以客户端刷新后的市场页签徽标和上方实时统计徽标为准。
+截至 2026-10-17，公共 Registry 已发布 110 条连接器描述；与随包的 4 张企查查卡片合并去重后，市场页可浏览 114 张卡片，覆盖企业数据、金融投资、法律合规、开发工具、办公协作、调研分析、设计创意、效率工具、其他 9 类。推荐位严格保留 4 张企查查卡片、北大法宝和 Wind，共 6 张；其他连接器按业务分类展示。Registry 可独立持续更新，实际数量以客户端刷新后的市场页签徽标和上方实时统计徽标为准。
 <!-- catalog-stats:end -->
 
 ## 界面与演示
@@ -162,6 +163,7 @@ Bundle 默认配置位于 `cordis.patch.yml`：
     refreshSkewMs: 300000
     openBrowser: true
     showSidebarEntry: true
+    compactManagementTools: false
     frameAncestors: ['self']
 ```
 
@@ -173,6 +175,14 @@ Bundle 默认配置位于 `cordis.patch.yml`：
 
 `showSidebarEntry` 默认为 `true`。用户可在 DSH 插件配置页覆盖该值；关闭后只隐藏侧边栏快捷入口，不停用连接器、已连接 MCP Server 或工具。
 
+`compactManagementTools` 默认为 `false`，兼容原有对话管理工具。希望降低管理工具上下文开销时，可在插件配置中设为 `true` 并重载插件（必要时重启 DSH），下一次推理使用新工具集：
+
+- 只注册 `mcp_connector_discover`（市场、连接状态、缓存工具搜索/详情）和 `mcp_connector_session_tools`（原有会话工具可见性管理）两个入口。
+- 连接、授权、编辑、导入、快照、迁移等管理操作使用 **MCP连接器界面**；精简模式没有任意工具执行代理，也不自动加载全部管理工具。纯对话部署或依赖旧工具名的自动化应保持 `false`。
+- 此开关不减少已连接服务的业务工具数量，不停用连接、不迁移凭据、不修改作用域/治理规则。业务工具需要按需可见时，仍使用原有“按会话启用”。会话确认、TTL 与 Host 审批保持不变。
+- 例如发现入口可用 `{"action":"search","query":"天气","limit":5}`；查询连接状态可用 `{"action":"status"}`。详情使用 `action=detail` 和必填 `toolName`，市场搜索使用 `action=catalog` 与可选 `keyword`。
+- 设回 `false` 并重载插件可恢复旧管理工具名；不要同时运行两份插件。工具数量和 schema 大小的减少不等于实测 token 或费用节省。
+
 `frameAncestors` 默认为 `['self']`，即面板页面（`/mcp-connector/ui/`）的 CSP 只允许同源页面内嵌，是既有行为，不做任何放宽。在桌面壳（Tauri/Electron）里把面板嵌进壳窗口时，祖先源与面板自身不同源，浏览器会以 `Framing '...' violates the following Content Security Policy directive: "frame-ancestors 'self'"` 拦截并导致面板白屏；此时需要由部署方/用户显式追加外壳源：
 
 ```yaml
@@ -210,7 +220,7 @@ npm run dev:ui
 
 公共 Registry 每次合并后会生成 `catalog-stats.json`；本仓库的定时工作流每小时同步中英文介绍和统计快照。npm 页面中的静态正文随版本发布更新，上方动态统计徽标则直接读取 Registry，可在不发布新 npm 版本时保持实时数量一致。
 
-当前公开版本为 [`dsh-mcp-connector@0.2.74`](https://www.npmjs.com/package/dsh-mcp-connector)，对应 [GitHub Release v0.2.74](https://github.com/duhu2000/dsh-mcp-connector/releases/tag/v0.2.74)。
+当前公开版本为 [`dsh-mcp-connector@0.2.76`](https://www.npmjs.com/package/dsh-mcp-connector)，对应 [GitHub Release v0.2.76](https://github.com/duhu2000/dsh-mcp-connector/releases/tag/v0.2.76)。
 
 版本能力与变更记录见 [CHANGELOG.md](CHANGELOG.md)。
 Desktop 发版回归见 [docs/DESKTOP-E2E.md](docs/DESKTOP-E2E.md)。

package/cordis.patch.yml

@@ -11,6 +11,9 @@
         refreshSkewMs: 300000
         openBrowser: true
         showSidebarEntry: true
+        # true：仅注册发现与会话两个管理入口；完整连接配置仍在界面操作。
+        # 保持 false 兼容已有对话/自动化；更改后重载插件。
+        compactManagementTools: false
         # 面板 CSP frame-ancestors 白名单：默认仅同源可嵌入。
         # 桌面壳（Tauri/Electron）内嵌面板时需显式追加外壳源，
         # 例如 ['self', 'http://tauri.localhost', 'tauri://localhost']。

package/docs/DESKTOP-E2E.md

@@ -13,7 +13,7 @@ npm run dev:ui
 
 1. 完全退出并重启 DSH Desktop；展开/收起侧栏，入口始终在“新会话”下、“工作区”上且不重复。
 2. 切换工作区、新建会话、重建侧栏后入口仍存在；目标 slot 缺失时 footer 降级可点击。
-3. 打开市场，验证中英文切换、系统深浅主题、Tab 顺序、Escape 关闭与焦点回到触发按钮。
+3. 打开市场，验证中文单语言（无 EN 切换按钮）、系统深浅主题、Tab 顺序、Escape 关闭与焦点回到触发按钮。
 4. 点击未连接卡片可查看详情；点击已连接卡片可读实时工具、搜索并每次再加载 50 条。
 5. “添加连接”依次验证手动、JSON、市场卡片；JSON 示例/粘贴可缩进格式化，错误 URL/JSON/凭据得到可行动提示。
 6. Bearer/API Key 型市场卡片先填错误凭据：弹框内应显示鉴权/网络分类错误，不得进入「已安装」；再填正确凭据，只有卡片下所有 Server 均通过 initialize 校验后才批量安装。
@@ -21,7 +21,26 @@ npm run dev:ui
 8. OAuth：授权回调、重启恢复、停用/启用、断开撤销；二级弹框蒙层与关闭按钮清晰。
 9. 旧插件迁移先预览，明确确认后复制；旧凭据仍保留，新连接验证后再手工停用旧插件。
 
-## 不自动执行的项目
+## 专项验收与人工确认边界
+
+### 本地参数覆盖（#146，0.2.76；Desktop 验收待完成）
+
+传输层隔离验收可使用本机已安装的 Host 代码，无需修改用户 profile。将下面路径换成实际 DSH 安装目录中的 `package.json`（必须能解析 `@deepseek-ai/dsh-mcp-client` 与 `@deepseek-ai/cordis`）：
+
+```bash
+DSH_HOST_INTEGRATION_ANCHOR=/absolute/path/to/dsh/package.json node --test test/local-overrides-host.test.mjs
+```
+
+不设置此变量时该测试跳过；显式指定的 Host 不可解析时应失败。测试使用真实 Cordis 生命周期与 MCP 客户端/stdio 子进程，工具注册表是隔离测试容器，不加载实际 Host profile、存储或凭据。仅启动仓库自有无网络测试服务器，验证初次启动失败、修正 `argsAppend/env/cwd` 后工具发现与无害调用、带启动保护的进程恢复、清除覆盖后恢复原始启动行为及进程回收。临时工作目录包含空格，参数含中文和 shell 特殊字符。
+
+该证据不等同于完整 Desktop 验收，仍需在隔离 profile 完成：
+
+- 首次连接确认框高级参数输入，失败后表单保留、修正重试；已有连接留空保留覆盖。
+- 已安装列表编辑、敏感值保留标记往返、清除覆盖和快照恢复。
+- 重启后参数实际生效、停用连接不启动；市场改为凭据型后旧覆盖不再自动启动。
+- Windows Desktop 的含空格可执行文件路径、目录与工具调用；Windows CI 不能代替桌面宿主验收。
+
+不得将此草案直接安装进现有正常工作 profile，也不得用真实付费工具替代无害调用验收。
 
 ### 面板浏览状态恢复（#135）
 

package/lib/connection-backup.js

@@ -5,6 +5,8 @@
  * 先经过本模块转换，避免 Token、Header/env 值与本地路径进入对话或 Web API。
  */
 
+import { effectiveLocalRecord } from './local-overrides.js';
+
 export const REDACTED_VALUE = '<REDACTED:REENTER>';
 export const REDACTED_LOCAL_VALUE = '<REDACTED:LOCAL_VALUE>';
 export const REDACTED_EXPORT_FORMAT = 'dsh-mcp-connector.redacted';
@@ -48,6 +50,7 @@ function portableName(record) {
 }
 
 function exportPortableConnection(record) {
+  record = effectiveLocalRecord(record);
   const redactedFields = [];
   const base = {
     name: portableName(record),

package/lib/index.js

@@ -35,6 +35,7 @@ import {
   editableConnectionConfiguration,
   normalizeConnectionReconfiguration,
 } from './connection-editor.js';
+import { supportsLocalOverrides, editableLocalOverrides, normalizeLocalOverrides } from './local-overrides.js';
 import { discoverServerMetadata, refreshAccessToken, revokeRefreshToken, extractTokenResources } from './oauth.js';
 import { provision, disable, remove, entryIdFor } from './mcp-provision.js';
 import { classifyConnectionError, validateConnectionRecords } from './mcp-validation.js';
@@ -125,6 +126,8 @@ export const Config = z.object({
   account: z.string().default(DEFAULT_ACCOUNT),
   /** 是否在 DSH 主侧边栏显示 MCP连接器快捷入口 */
   showSidebarEntry: z.boolean().default(true),
+  /** 精简对话管理工具为发现入口 + 会话入口；旧配置默认保留全量工具。修改后重载插件。 */
+  compactManagementTools: z.boolean().default(false),
   /**
    * 图形化市场面板（/mcp-connector/ui/）的 CSP `frame-ancestors` 白名单。
    *
@@ -690,6 +693,7 @@ export async function apply(ctx, config) {
   }
 
   async function provisionUntilReady(record, original, { strictStartup = true } = {}) {
+    if (record.localOverrides && !canEditLocalOverrides(record)) throw new Error('当前市场配置不再允许本地参数覆盖，请先清除覆盖');
     if (!strictStartup) {
       return provision(ctx, config, record, grantMap(), { failOnStartupError: false });
     }
@@ -710,7 +714,9 @@ export async function apply(ctx, config) {
       if (error === timeoutError) {
         // loader 可能仍在等待 SDK 请求；它最终成功时必须恢复旧条目/移除新条目，绝不迟到落库。
         task.then(
-          () => restoreProvisionedEntry(record, original).catch((rollbackError) => {
+          // A later disable, disconnect or edit may already own this key.
+          // Reconcile after queued mutations, using the record at execution time.
+          () => queueConnectionAction(record.key, () => restoreProvisionedEntry(record, state.connections.get(record.key))).catch((rollbackError) => {
             logger.error(`late startup rollback "${record.key}" failed: ${rollbackError.message}`);
           }),
           () => {},
@@ -735,6 +741,14 @@ export async function apply(ctx, config) {
     return failures;
   }
 
+  function canEditLocalOverrides(record) {
+    if (!supportsLocalOverrides(record)) return false;
+    const descriptor = state.merged.find((item) => item.id === record.connectorId);
+    const server = descriptor?.servers?.find((item) => item.serverKey === record.serverKey);
+    return descriptor?.auth?.mode === 'none' && server?.transport === 'stdio'
+      && !server.oauthTokenEnv && !Object.keys(server.credentialBindings ?? {}).length;
+  }
+
   async function commitConnectionRecords(records, { strictStartup = true } = {}) {
     const originals = new Map(records.map((record) => [record.key, state.connections.get(record.key)]));
     const staged = records.map((record) => {
@@ -750,9 +764,10 @@ export async function apply(ctx, config) {
         provisioned.push(record);
       }
     } catch (error) {
-      await rollbackProvisionedRecords(provisioned, originals);
+      const rollbackErrors = await rollbackProvisionedRecords(provisioned, originals);
       const wrapped = new Error(`MCP Server "${activeRecord?.serverName ?? activeRecord?.key ?? 'unknown'}" 未完成启动`, { cause: error });
       wrapped.connectionRecord = activeRecord;
+      wrapped.rollbackErrors = rollbackErrors;
       throw wrapped;
     }
 
@@ -768,7 +783,7 @@ export async function apply(ctx, config) {
           logger.error(`connection storage rollback "${record.key}" failed: ${rollbackError.message}`);
         }
       }
-      const wrapped = new Error('连接记录持久化失败，已回滚 Host 条目', { cause: error });
+      const wrapped = new Error(rollbackErrors.length ? '连接记录持久化失败，自动回滚未完成' : '连接记录持久化失败，已回滚 Host 条目', { cause: error });
       wrapped.connectionRecord = activeRecord;
       wrapped.rollbackErrors = rollbackErrors;
       throw wrapped;
@@ -807,7 +822,12 @@ export async function apply(ctx, config) {
       const committed = await commitConnectionRecords(records, options);
       return { committed, snapshot };
     } catch (error) {
-      await discardConnectionSnapshot(snapshot);
+      if (error.rollbackErrors?.length) {
+        // Do not destroy the last known configuration when recovery itself fails.
+        error.recoverySnapshotId = snapshot?.key ?? null;
+      } else {
+        await discardConnectionSnapshot(snapshot);
+      }
       throw error;
     }
   }
@@ -1949,6 +1969,10 @@ export async function apply(ctx, config) {
     async connect(connectorId, serverKey, signal, scopeInput = {}) {
       const connector = state.merged.find((d) => d.id === connectorId);
       if (!connector) return { ok: false, message: `连接器 "${connectorId}" 不存在（可先 mcp_connector_refresh_catalog 或 mcp_connector_catalog 查看）` };
+      const hasLocalOverrides = scopeInput?.localOverrides !== undefined;
+      if (hasLocalOverrides && connector.auth.mode !== 'none') {
+        return { ok: false, message: '本地参数仅支持无凭据的市场 stdio 连接，不可覆盖授权配置' };
+      }
       let requestedScope;
       const explicitScope = scopeInput?.scope !== undefined;
       try {
@@ -2099,6 +2123,15 @@ export async function apply(ctx, config) {
           createdAt: Date.now(),
           updatedAt: Date.now(),
         };
+        if (hasLocalOverrides) {
+          if (!canEditLocalOverrides(record)) return { ok: false, message: '当前连接不支持本地参数覆盖' };
+          try {
+            const existing = state.connections.get(record.key);
+            record.localOverrides = normalizeLocalOverrides({ ...record, localOverrides: existing?.localOverrides }, scopeInput.localOverrides);
+          } catch (error) {
+            return { ok: false, message: error.message };
+          }
+        }
         const validation = await validateConnectionRecords([record], { timeoutMs: config.requestTimeoutMs });
         if (!validation.ok) return { ...validation, detail: { connectorId: connector.id, ...validation.detail } };
         try {
@@ -2106,6 +2139,7 @@ export async function apply(ctx, config) {
           cacheHealth(connector.id, [committed], readinessResults([committed], validation.detail.results));
           return { ok: true, message: `已连接 "${connector.name}"（${scopeLabel(connectionScopes.binding(committed.key), workspaceNames())}）`, detail: { key: committed.key, snapshotId: snapshot?.key ?? null, scopeRevision, scopeRollbackRevision } };
         } catch (error) {
+          if (hasLocalOverrides) return { ok: false, message: '连接启动或保存失败，已尝试恢复原配置；请检查本机 Host 日志与连接状态后重试' };
           return connectionSetupFailure(error);
         }
       }
@@ -2368,6 +2402,8 @@ export async function apply(ctx, config) {
           kind: record.kind,
           canRename: connectionDisplayNameEditable(record),
           canEditConfiguration: connectionConfigurationEditable(record),
+          canEditLocalOverrides: canEditLocalOverrides(record),
+          hasLocalOverrides: Boolean(record.localOverrides),
           serverName: record.serverName,
           url: record.url,
           transport: record.transport,
@@ -2610,6 +2646,37 @@ export async function apply(ctx, config) {
       }
     },
 
+    async editableLocalOverrides(key) {
+      const record = state.connections.get(key);
+      if (!record || !canEditLocalOverrides(record)) return { ok: false, message: '仅无凭据的市场 stdio 连接支持本地参数覆盖' };
+      return { ok: true, detail: { json: editableLocalOverrides(record) } };
+    },
+
+    async applyLocalOverrides(key, json, reset = false) {
+      const current = state.connections.get(key);
+      if (!current || (!canEditLocalOverrides(current) && !(reset === true && current.localOverrides))) {
+        return { ok: false, message: '当前连接不支持本地参数覆盖' };
+      }
+      let localOverrides;
+      try { localOverrides = reset === true ? undefined : normalizeLocalOverrides(current, json); }
+      catch (error) { return { ok: false, message: error.message }; }
+      try {
+        const next = { ...current, localOverrides, updatedAt: Date.now() };
+        const { snapshot } = await commitWithSnapshot([next], 'local-overrides');
+        return { ok: true, message: reset === true ? '已清除本地覆盖，恢复市场参数' : '已保存本地参数覆盖；启用的连接已重新加载', detail: { key, snapshotId: snapshot?.key ?? null } };
+      } catch (error) {
+        // Startup/storage errors may contain command arguments or env values.
+        if (error.rollbackErrors?.length) return {
+          ok: false,
+          message: error.recoverySnapshotId
+            ? '本地参数更新失败且自动回滚未完成，已保留操作前快照；请修复本机存储或启动问题后，从配置快照恢复并核对连接状态'
+            : '本地参数更新失败且自动回滚未完成；请检查本机存储、Host 日志与连接状态',
+          detail: { recoveryRequired: true, snapshotId: error.recoverySnapshotId ?? null },
+        };
+        return { ok: false, message: '本地参数更新失败，已尝试恢复原配置；请检查本机 Host 日志与连接状态' };
+      }
+    },
+
     async reconfigureConnection(key, json) {
       const current = state.connections.get(key);
       if (!current) return { ok: false, message: `连接 "${key}" 不存在` };
@@ -3338,6 +3405,10 @@ export async function apply(ctx, config) {
   }
   for (const [key, record] of state.connections) {
     if (record.enabled !== false) {
+      if (record.localOverrides && !canEditLocalOverrides(record)) {
+        logger.warn(`skip provision "${key}" at startup: 当前市场配置不再允许本地参数覆盖，请先清除覆盖`);
+        continue;
+      }
       const failure = grantFailure(record);
       if (failure) {
         logger.warn(`skip provision "${key}" at startup: ${failure.message}`);
@@ -3414,19 +3485,32 @@ export async function apply(ctx, config) {
   }
   // Serialize same-record actions: a delayed reconnect must never reactivate a
   // connection the user has subsequently disabled or disconnected.
-  const connectionActions = new Set(['reconnect', 'setEnabled', 'disconnect', 'reconfigureConnection', 'renameConnection', 'setInjectionMode']);
+  const connectionActions = new Set(['reconnect', 'setEnabled', 'disconnect', 'reconfigureConnection', 'applyLocalOverrides', 'renameConnection', 'setInjectionMode']);
   const connectionQueues = new Map();
+  async function queueConnectionAction(key, action) {
+    const previous = connectionQueues.get(key) ?? Promise.resolve();
+    const pending = previous.catch(() => {}).then(action);
+    connectionQueues.set(key, pending);
+    try { return await pending; }
+    finally { if (connectionQueues.get(key) === pending) connectionQueues.delete(key); }
+  }
   for (const name of connectionActions) {
     const action = api[name];
-    api[name] = async (key, ...args) => {
-      const previous = connectionQueues.get(key) ?? Promise.resolve();
-      const pending = previous.catch(() => {}).then(() => action.call(api, key, ...args));
-      connectionQueues.set(key, pending);
-      try { return await pending; }
-      finally { if (connectionQueues.get(key) === pending) connectionQueues.delete(key); }
-    };
-  }
-  const discoveryMutations = new Set(['connect', 'configure', 'importJson', 'installFromUrl', 'reconfigureConnection', 'setEnabled', 'reconnect', 'restoreSnapshot', 'migrateLegacy']);
+    api[name] = (key, ...args) => queueConnectionAction(key, () => action.call(api, key, ...args));
+  }
+  // First-time stdio installation must share the edit/disable/disconnect queue.
+  // Otherwise a delayed install can overwrite a newer overlay or resurrect a removed entry.
+  // OAuth retains its independent shared-authorization deduplication path.
+  const connectAction = api.connect;
+  api.connect = (connectorId, serverKey, ...args) => {
+    const connector = state.merged.find((item) => item.id === connectorId);
+    const server = connector?.servers.find((item) => item.serverKey === serverKey) ?? connector?.servers[0];
+    const run = () => connectAction.call(api, connectorId, serverKey, ...args);
+    return connector?.auth.mode === 'none' && server?.transport === 'stdio'
+      ? queueConnectionAction(`${connector.id}-${server.serverKey}`, run)
+      : run();
+  };
+  const discoveryMutations = new Set(['connect', 'configure', 'importJson', 'installFromUrl', 'reconfigureConnection', 'applyLocalOverrides', 'setEnabled', 'reconnect', 'restoreSnapshot', 'migrateLegacy']);
   const discoveryApi = new Proxy(api, { get(target, property) {
     const value = target[property];
     if (!discoveryMutations.has(property)) return value;
@@ -3442,7 +3526,7 @@ export async function apply(ctx, config) {
     if (statusEvents.clients.size > 0) scheduleDiscovery();
   }, 30_000);
   discoveryInterval.unref?.();
-  const disposeTools = registerTools(ctx, observableApi);
+  const disposeTools = registerTools(ctx, observableApi, { compact: config.compactManagementTools === true });
 
   /* ───────────────────────── web 半区（图形化市场）──────────────────────── */
   // webServer + 新版 webStartup 或旧版 webRuntime；纯对话部署不挂载 HTTP 路由。

package/lib/local-overrides.js

@@ -0,0 +1,63 @@
+/** Local-only overlay for credential-free catalog stdio entries. */
+import { z } from 'zod';
+import { CUSTOM_CONNECTOR_ID, JSON_CONNECTOR_ID } from './constants.js';
+// Do not import connection-editor: it depends on schema via the JSON parser.
+const KEEP_EXISTING_VALUE = '<KEEP_EXISTING>';
+const forbiddenEnv = new Set(['__proto__', 'constructor', 'prototype', 'ELECTRON_RUN_AS_NODE']);
+
+export const localOverridesSchema = z.object({
+  argsAppend: z.array(z.string().max(8192)).max(128).optional(),
+  env: z.custom((value) => value && typeof value === 'object' && !Array.isArray(value)
+    && !Object.keys(value).some((key) => forbiddenEnv.has(key)))
+    .pipe(z.record(z.string().regex(/^[A-Za-z_][A-Za-z0-9_]*$/), z.string().max(8192))).optional(),
+  cwd: z.string().max(8192).optional(),
+}).strict();
+
+export function supportsLocalOverrides(record) {
+  return record?.transport === 'stdio' && ![CUSTOM_CONNECTOR_ID, JSON_CONNECTOR_ID, 'dingtalk'].includes(record.connectorId)
+    && Boolean(record.connectorId) && !record.auth && !record.oauthTokenEnv;
+}
+
+export function editableLocalOverrides(record) {
+  if (!supportsLocalOverrides(record)) throw new Error('当前仅支持无凭据的市场 stdio 连接；OAuth/凭据型/CLI 桥接连接不可覆盖');
+  const values = record.localOverrides ?? {};
+  return JSON.stringify({
+    argsAppend: values.argsAppend?.length ? [KEEP_EXISTING_VALUE] : [],
+    env: Object.fromEntries(Object.keys(values.env ?? {}).map((key) => [key, KEEP_EXISTING_VALUE])),
+    cwd: values.cwd ? KEEP_EXISTING_VALUE : '',
+  }, null, 2);
+}
+
+export function normalizeLocalOverrides(record, input) {
+  if (!supportsLocalOverrides(record)) throw new Error('当前连接不支持本地参数覆盖');
+  let raw;
+  try { raw = typeof input === 'string' ? JSON.parse(input) : input; }
+  catch { throw new Error('本地参数必须是合法 JSON'); }
+  const parsed = localOverridesSchema.safeParse(raw);
+  if (!parsed.success) throw new Error('本地参数仅允许 argsAppend 字符串数组、env 字符串对象及 cwd 字符串');
+  const value = parsed.data;
+  const previous = record.localOverrides ?? {};
+  if (value.argsAppend?.length === 1 && value.argsAppend[0] === KEEP_EXISTING_VALUE) value.argsAppend = [...(previous.argsAppend ?? [])];
+  if (value.cwd === KEEP_EXISTING_VALUE) value.cwd = previous.cwd ?? '';
+  for (const [key, entry] of Object.entries(value.env ?? {})) {
+    if (['__proto__', 'constructor', 'prototype', 'ELECTRON_RUN_AS_NODE'].includes(key)) throw new Error('包含不允许覆盖的环境变量名');
+    if (entry === KEEP_EXISTING_VALUE) {
+      if (!Object.hasOwn(previous.env ?? {}, key)) throw new Error('环境变量不存在可保留的原值');
+      value.env[key] = previous.env[key];
+    }
+  }
+  if (value.argsAppend?.includes(KEEP_EXISTING_VALUE)) throw new Error('argsAppend 保留标记必须单独使用');
+  if ([...(value.argsAppend ?? []), ...Object.values(value.env ?? {}), value.cwd ?? ''].some((entry) => entry.includes('\0'))) throw new Error('本地参数不可包含空字符');
+  return value;
+}
+
+export function effectiveLocalRecord(record) {
+  if (!record.localOverrides) return record;
+  const overlay = normalizeLocalOverrides(record, record.localOverrides);
+  return {
+    ...record,
+    args: [...(record.args ?? []), ...(overlay.argsAppend ?? [])],
+    env: { ...(record.env ?? {}), ...(overlay.env ?? {}) },
+    cwd: overlay.cwd || record.cwd,
+  };
+}

package/lib/mcp-provision.js

@@ -4,6 +4,7 @@
  */
 
 import { cliBridgeArgs } from './cli-providers.js';
+import { effectiveLocalRecord } from './local-overrides.js';
 import { fileURLToPath } from 'node:url';
 
 const STDIO_STARTUP_GUARD = fileURLToPath(new URL('./stdio-startup-guard.js', import.meta.url));
@@ -39,6 +40,7 @@ export function authHeaders(record, grants) {
 }
 
 export function buildEntryConfig(record, grants, { failOnStartupError = false, startupRequestTimeoutMs } = {}) {
+  record = effectiveLocalRecord(record);
   if (record.transport === 'stdio') {
     const env = { ...(record.env ?? {}) };
     if (record.auth?.mode === 'oauth' && record.oauthTokenEnv) {

package/lib/schema.js

@@ -4,6 +4,7 @@
  */
 import { z } from 'zod';
 import { assertConnectionUrl, isPrivateNetworkHost } from './util.js';
+import { localOverridesSchema, normalizeLocalOverrides } from './local-overrides.js';
 
 /** 连接器目录里单个 MCP server 的描述 */
 export const serverRefSchema = z.object({
@@ -101,6 +102,7 @@ export const connectorDescriptorSchema = z.object({
 
 /** 用户本机连接实例 */
 export const connectionRecordSchema = z.object({
+  localOverrides: localOverridesSchema.optional(),
   key: z.string().min(1),
   connectorId: z.string().min(1),
   kind: z.enum(['oauth', 'manual', 'json']),
@@ -345,6 +347,7 @@ export function normalizeConnectionRecord(raw) {
     throw new Error(`invalid connection record: ${issues}`);
   }
   const data = parsed.data;
+  if (data.localOverrides) data.localOverrides = normalizeLocalOverrides(data, data.localOverrides);
   const transport = data.transport === 'sse' ? 'streamable-http' : data.transport;
   if (transport === 'stdio' && !data.command) {
     throw new Error('invalid connection record: transport=stdio 时 command 必填');

package/lib/status-events.js

@@ -5,6 +5,7 @@ const DEFAULT_EVENT_TYPES = new Map([
   ['installFromUrl', 'connections'],
   ['renameConnection', 'connections'],
   ['reconfigureConnection', 'connections'],
+  ['applyLocalOverrides', 'connections'],
   ['setEnabled', 'connections'],
   ['reconnect', 'connections'],
   ['setInjectionMode', 'connections'],

package/lib/tool-catalog-cache.js

@@ -84,7 +84,7 @@ export function connectionToolCacheSignature(record) {
   const identity = record?.transport === 'stdio'
     ? [record.transport, record.serverName, record.command, record.args ?? [], record.cwd ?? '']
     : [record?.transport, record?.serverName, record?.url ?? ''];
-  return createHash('sha256').update(JSON.stringify(identity)).digest('hex');
+  return createHash('sha256').update(JSON.stringify(record?.localOverrides ? [identity, record.localOverrides] : identity)).digest('hex');
 }
 
 export function createToolCatalogRecord(record, tools, now = Date.now()) {

package/lib/tools.js

@@ -169,14 +169,14 @@ export function toLossless(value, seen = new Set()) {
   return output;
 }
 
-export function registerTools(ctx, api) {
-  const disposers = [];
-  const reg = (def) => disposers.push(ctx.tools.register({
+export function registerTools(ctx, api, { compact = false } = {}) {
+  const definitions = [];
+  const reg = (def) => definitions.push({
     ...def,
     async execute(args, exec) {
       return toLossless(await def.execute(args, exec));
     },
-  }));
+  });
 
   reg({
     name: 'mcp_connector_catalog',
@@ -758,7 +758,76 @@ export function registerTools(ctx, api) {
     },
   });
 
+  // Keep the original definitions intact: no generic executor, direct API
+  // bypass, or change to Host dispatch/approval for downstream MCP tools.
+  const selected = compact === true
+    ? [createDiscoveryTool(definitions), definitions.find((def) => def.name === 'mcp_connector_session_tools')]
+    : definitions;
+  const disposers = [];
+  try {
+    for (const def of selected) disposers.push(ctx.tools.register(def));
+  } catch (error) {
+    for (const dispose of disposers.reverse()) dispose();
+    throw error;
+  }
   return () => {
     for (const dispose of disposers) dispose();
   };
 }
+
+/** Fixed read-only routes, never an arbitrary tool name or API method. */
+function createDiscoveryTool(definitions) {
+  const routes = Object.fromEntries([
+    ['catalog', 'mcp_connector_catalog'],
+    ['status', 'mcp_connector_status'],
+    ['search', 'mcp_connector_tool_search'],
+    ['detail', 'mcp_connector_tool_detail'],
+  ].map(([action, name]) => [action, definitions.find((def) => def.name === name)]));
+  const failure = (message) => ({ ok: false, message });
+  return {
+    name: 'mcp_connector_discover',
+    description: 'MCP连接器只读发现：catalog 查市场，status 查连接状态，search 搜索已连接服务的缓存工具，detail 查缓存参数。' +
+      '不会连接、配置或执行业务工具。连接/授权/编辑/迁移请使用「MCP连接器」界面；' +
+      '按会话启用的业务工具使用 mcp_connector_session_tools。其他业务调用仍走 Host 原生工具及审批。',
+    parameters: {
+      type: 'object',
+      properties: {
+        action: { type: 'string', enum: Object.keys(routes), description: 'catalog 使用 keyword/category；status 可选 workspaceId；search 必填 query；detail 必填 toolName。仅传当前操作支持的参数。' },
+        ...Object.assign({}, ...Object.values(routes).map((def) => def.parameters.properties)),
+      },
+      required: ['action'],
+      additionalProperties: false,
+    },
+    output: {
+      schema: RESULT_SCHEMA,
+      render(args, value) {
+        const route = Object.hasOwn(routes, value.discoveryAction) ? routes[value.discoveryAction] : null;
+        return route ? route.output.render(args, value) : resultOutput.render(args, value);
+      },
+    },
+    async execute(input) {
+      if (!input || typeof input !== 'object' || Array.isArray(input) ||
+          typeof input.action !== 'string' || !Object.hasOwn(routes, input.action)) {
+        return failure('action 必须是 catalog、status、search 或 detail');
+      }
+      const { action, ...args } = input;
+      const route = routes[action];
+      // The union-shaped public object cannot express action-specific required
+      // fields without provider-incompatible top-level unions. Check them here
+      // before invoking any route; do not reflect arbitrary input or secrets.
+      for (const key of route.parameters.required ?? []) {
+        if (typeof args[key] !== 'string' || !args[key].trim()) return failure(`${action} 缺少必填参数 ${key}`);
+      }
+      for (const [key, value] of Object.entries(args)) {
+        if (!Object.hasOwn(route.parameters.properties, key)) return failure('包含当前 action 不支持的参数');
+        const schema = route.parameters.properties[key];
+        if (typeof value !== schema.type || (schema.type === 'number' &&
+            (!Number.isFinite(value) || value < schema.minimum || value > schema.maximum))) {
+          return failure(`${action} 参数 ${key} 类型或范围不正确`);
+        }
+      }
+      const result = await route.execute(args);
+      return toLossless({ ...result, discoveryAction: action });
+    },
+  };
+}

package/lib/web.js

@@ -52,6 +52,8 @@ const API_WHITELIST = new Map([
   ['renameConnection', (api, p) => api.renameConnection(p?.key, p?.name)],
   ['editableConnectionConfig', (api, p) => api.editableConnectionConfig(p?.key)],
   ['reconfigureConnection', (api, p) => api.reconfigureConnection(p?.key, p?.json)],
+  ['editableLocalOverrides', (api, p) => api.editableLocalOverrides(p?.key)],
+  ['applyLocalOverrides', (api, p) => api.applyLocalOverrides(p?.key, p?.json, p?.reset)],
   ['disconnect', (api, p) => api.disconnect(p?.key)],
   ['setEnabled', (api, p) => api.setEnabled(p?.key, p?.enabled !== false)],
   ['reconnect', (api, p) => api.reconnect(p?.key)],

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-mcp-connector",
-  "version": "0.2.74",
+  "version": "0.2.76",
   "description": "DeepSeek Harness MCP Connector: connect servers, search tools across active connections, and troubleshoot discovery. Includes a continuously updated catalog; supports OAuth 2.0 PKCE, API keys, Streamable HTTP/stdio, and mcpServers JSON import.",
   "type": "module",
   "main": "lib/index.js",
@@ -46,7 +46,7 @@
   ],
   "scripts": {
     "test": "node --test",
-    "lint": "node --check lib/discovery-policy.js && node --check lib/index.js && node --check lib/web.js && node --check lib/client.js && node --check lib/settings.js && node --check lib/version-status.js && node --check lib/schema.js && node --check lib/catalog.js && node --check lib/prompts.js && node --check lib/probe.js && node --check lib/diagnostics.js && node --check lib/connection-backup.js && node --check lib/connection-editor.js && node --check lib/connection-scopes.js && node --check lib/governance.js && node --check lib/session-injection.js && node --check lib/tool-catalog-cache.js && node --check lib/status-events.js && node --check lib/mcp-validation.js && node --check lib/mcp-http.js && node --check lib/migration.js && node --check lib/stores.js && node --check lib/grant-journal.js && node --check lib/oauth.js && node --check lib/grant-lifecycle.js && node --check lib/callback-server.js && node --check lib/mcp-provision.js && node --check lib/stdio-startup-guard.js && node --check lib/cli-providers.js && node --check lib/util.js && node --check lib/constants.js && node --check lib/tools.js && node --check lib/connectors/oauth-connector.js && node --check lib/connectors/manual-connector.js && node --check lib/connectors/json-connector.js && node --check scripts/probe-connector.mjs && node --check scripts/cli-bridge.mjs && node --check scripts/build-registry.mjs && node --check scripts/ui-harness.mjs && node --check scripts/check-market-registration.mjs && node --check scripts/check-distribution-sync.mjs && node --check scripts/check-readme-version.mjs && node --check scripts/check-first-use-docs.mjs && node --check scripts/check-marketing-metadata.mjs && node --check scripts/check-storefront-screenshots.mjs && node --check scripts/sync-registry-stats.mjs && node --check scripts/verify-pack.mjs",
+    "lint": "node --check lib/discovery-policy.js && node --check lib/index.js && node --check lib/web.js && node --check lib/client.js && node --check lib/settings.js && node --check lib/version-status.js && node --check lib/schema.js && node --check lib/catalog.js && node --check lib/prompts.js && node --check lib/probe.js && node --check lib/diagnostics.js && node --check lib/connection-backup.js && node --check lib/connection-editor.js && node --check lib/connection-scopes.js && node --check lib/governance.js && node --check lib/session-injection.js && node --check lib/tool-catalog-cache.js && node --check lib/status-events.js && node --check lib/mcp-validation.js && node --check lib/mcp-http.js && node --check lib/migration.js && node --check lib/stores.js && node --check lib/grant-journal.js && node --check lib/oauth.js && node --check lib/grant-lifecycle.js && node --check lib/callback-server.js && node --check lib/mcp-provision.js && node --check lib/stdio-startup-guard.js && node --check lib/cli-providers.js && node --check lib/util.js && node --check lib/constants.js && node --check lib/tools.js && node --check lib/connectors/oauth-connector.js && node --check lib/connectors/manual-connector.js && node --check lib/connectors/json-connector.js && node --check scripts/probe-connector.mjs && node --check scripts/cli-bridge.mjs && node --check scripts/build-registry.mjs && node --check scripts/ui-harness.mjs && node --check scripts/check-market-registration.mjs && node --check scripts/check-distribution-sync.mjs && node --check scripts/check-readme-version.mjs && node --check scripts/check-first-use-docs.mjs && node --check scripts/check-marketing-metadata.mjs && node --check scripts/check-storefront-screenshots.mjs && node --check scripts/sync-registry-stats.mjs && node --check scripts/verify-pack.mjs && node --check scripts/check-tutorial-links.mjs",
     "registry:build": "node scripts/build-registry.mjs",
     "registry:validate": "node scripts/probe-connector.mjs catalog/catalog.json --validate-only",
     "dev:ui": "node scripts/ui-harness.mjs",
@@ -61,7 +61,8 @@
     "marketing:check:live": "node scripts/check-marketing-metadata.mjs --live",
     "storefront:check": "node scripts/check-storefront-screenshots.mjs",
     "verify-pack": "node scripts/verify-pack.mjs",
-    "check": "npm run lint && npm run docs:check && npm run docs:first-use:check && npm run marketing:check && npm run storefront:check && npm test && npm run verify-pack",
+    "docs:tutorial-links:check": "node scripts/check-tutorial-links.mjs",
+    "check": "npm run lint && npm run docs:check && npm run docs:first-use:check && npm run marketing:check && npm run storefront:check && npm test && npm run verify-pack && npm run docs:tutorial-links:check",
     "prepublishOnly": "npm run check"
   },
   "keywords": [

package/ui/index.html

@@ -543,6 +543,7 @@
     configure: 145_000,
     importJson: 145_000,
     reconfigureConnection: 145_000,
+    applyLocalOverrides: 145_000,
     installFromUrl: 145_000,
     setEnabled: 130_000,
     setInjectionMode: 30_000,
@@ -1572,6 +1573,7 @@
         <span class="slider"></span>
       </label>
       ${canEditConfiguration ? `<button class="btn ghost" type="button" onclick="window.__mcp.openEditor('${key}')">编辑配置</button>` : ''}
+      ${r.canEditLocalOverrides ? `<button class="btn ghost" type="button" onclick="window.__mcp.openLocalEditor('${key}')">本地参数</button>` : r.hasLocalOverrides ? `<button class="btn ghost" type="button" onclick="window.__mcp.submitLocalOverrides('${key}', true)">清除本地参数</button>` : ''}
       ${canRename ? `<button class="btn ghost" type="button" onclick="window.__mcp.openRename('${key}')">重命名</button>` : ''}
       ${enabled ? `<button class="btn ghost" type="button" onclick="window.__mcp.showConnectionTools('${key}')">工具</button>` : ''}
       ${enabled && r.connectionState !== 'healthy' ? `<button class="btn ghost" type="button" title="重新建立 Host 侧条目并复检：不改配置、凭据、范围或注入模式" onclick="window.__mcp.reconnect('${key}')">重新连接</button>` : ''}
@@ -1669,11 +1671,15 @@
   function openConnectScope(connectorId) {
     const connector = marketItems[connectorId];
     if (!connector) return;
+    const server = connector.servers?.[0];
+    const allowLocalParameters = connector.authMode === 'none' && connectorId !== 'dingtalk'
+      && server?.transport === 'stdio' && !server.oauthTokenEnv && !Object.keys(server.credentialBindings || {}).length;
     openModal(`连接 ${connector.name}`, `
       <input id="scope-connector-id" type="hidden" value="${esc(connectorId)}" />
       <div class="form-note">${connectionLabels(connector).map(esc).join(' · ')}${connector.credentialDescription ? `<p>${esc(connector.credentialDescription)}</p>` : ''}${connectorId === 'dingtalk' ? '<p>企业尚未开放 CLI 或您无法取得授权？可以取消，等待管理员处理，无需反复登录或重启。一键授权也不能绕过企业政策。本版本不会自动发起登录；工具注册不代表已获得全部业务权限。</p>' : ''}</div>
       <div class="form-note"><strong>选择连接影响范围</strong>连接配置与凭据仍只保存一份；项目范围会由 Host 在工具可见性和执行层强制隔离。</div>
       ${scopeFieldHtml()}
+      ${allowLocalParameters ? '<details><summary>高级：首次连接前设置本地参数（可选）</summary><label for="initial-local-overrides">本地参数 JSON</label><textarea id="initial-local-overrides" rows="6" spellcheck="false" placeholder=\'{"argsAppend":[],"env":{},"cwd":""}\'></textarea><div class="field-help">留空使用市场参数（已有连接保留原覆盖）。argsAppend 追加命令参数，env 合并环境变量，cwd 设置工作目录；仅保存在本机。可用于指定浏览器路径或代理。参数可能扩大本地访问权限，请仅填写可信内容；启动失败时保留表单供修改重试。</div></details>' : ''}
       <div class="inline-error" id="modal-error" tabindex="-1"></div>
       <div class="m-actions"><button class="btn ghost" type="button" onclick="window.__mcp.closeModal()">取消</button><button class="btn" type="button" onclick="window.__mcp.confirmConnect()">确认连接</button></div>`);
   }
@@ -1720,6 +1726,20 @@
       <div class="m-actions"><button class="btn ghost" type="button" onclick="window.__mcp.closeModal()">取消</button><button class="btn" type="button" onclick="window.__mcp.submitReconfigure('${esc(key)}')">${action}</button></div>`);
   }
 
+  async function openLocalEditor(key) {
+    const item = installedItems.find((candidate) => candidate.key === key);
+    if (!item) return;
+    const result = await call('editableLocalOverrides', { key });
+    if (!result.ok) { showToast(result.message, false); return; }
+    openModal(`本地参数 · ${item.name}`, `
+      <div class="form-note"><strong>仅覆盖本机，无需修改市场目录</strong><code>argsAppend</code> 追加到市场参数末尾；<code>env</code> 合并环境变量；<code>cwd</code> 设置工作目录。命令、连接身份与市场默认值保持不变。参数可能扩大本地访问权限，请仅填写可信内容。</div>
+      <label for="local-overrides-json">本地参数 JSON</label>
+      <textarea id="local-overrides-json" rows="12" spellcheck="false">${esc(result.detail?.json || '')}</textarea>
+      <div class="field-help"><code>&lt;KEEP_EXISTING&gt;</code> 保留本机已有值；删除字段清除该项覆盖。保存会创建快照并重新加载已启用连接，停用连接保持停用；不代表工具调用已验收。</div>
+      <div class="inline-error" id="modal-error" tabindex="-1"></div>
+      <div class="m-actions"><button class="btn ghost" type="button" onclick="window.__mcp.closeModal()">取消</button><button class="btn ghost" type="button" onclick="window.__mcp.submitLocalOverrides('${esc(key)}', true)">恢复市场参数</button><button class="btn" type="button" onclick="window.__mcp.submitLocalOverrides('${esc(key)}')">保存本地参数</button></div>`);
+  }
+
   function openAddConnection(mode = 'json', preset = {}) {
     const server = (preset.servers || [{}])[0] || {};
     if (mode === 'manual' && preset.id && ['bearer', 'api-key'].includes(preset.authMode)) {
@@ -1831,8 +1851,9 @@
       try { scopeParams = selectedScopeParams(); }
       catch (error) { showModalError(error.message); return; }
       const timeoutMs = marketItems[connectorId]?.authMode === 'oauth2-pkce' ? 310_000 : undefined;
+      const localOverrides = $('#initial-local-overrides')?.value.trim();
       setModalBusy(true, '正在连接…');
-      const r = await call('connect', { connectorId, ...scopeParams }, { timeoutMs });
+      const r = await call('connect', { connectorId, ...scopeParams, ...(localOverrides ? { localOverrides } : {}) }, { timeoutMs });
       setModalBusy(false);
       showToast(r.message, r.ok);
       if (!r.ok) showModalError(r.message);
@@ -1850,6 +1871,18 @@
     openScope(key) { openScopeManager(key); },
     openRename(key) { openRenameConnection(key); },
     async openEditor(key) { await openConnectionEditor(key); },
+    async openLocalEditor(key) { await openLocalEditor(key); },
+    async submitLocalOverrides(key, reset = false) {
+      if (reset && !await confirmDialog({ title: '恢复市场参数', message: '清除本机追加参数、环境变量和工作目录覆盖；已启用连接将重新加载。', confirmLabel: '恢复' })) return;
+      const json = $('#local-overrides-json')?.value || '{}';
+      setModalBusy(true, '正在更新本地参数…');
+      const result = await call('applyLocalOverrides', { key, json, reset });
+      setModalBusy(false);
+      if (!result.ok) { showToast(result.message, false); showModalError(result.message); return; }
+      closeModal();
+      showToast(result.message, true);
+      await loadInstalled();
+    },
     formatEditJson() {
       const input = $('#edit-connection-json');
       if (!input) return;
@@ -2173,6 +2206,7 @@
       await window.__mcp.showDetail(record.connectorId, {
         id: record.connectorId, connectionKey: key, name: record.name, icon: '🔌',
         authMode: record.authMode, connected: [record], connectionState: record.connectionState,
+        servers: [{ transport: record.transport }],
         description: '本机连接的工具发现与参数详情；不会执行工具。',
       });
     },