dsh-mcp-connector 0.2.75 → 0.2.76

package/CHANGELOG.md

@@ -2,6 +2,21 @@
 
 本项目遵循 [Keep a Changelog](https://keepachangelog.com/zh-CN/1.1.0/)；首个公开版本从 `0.1.0` 开始。
 
+## [0.2.76] - 2026-10-20
+
+### Added / Fixed
+
+- 无凭据市场 stdio 连接可在首次安装及已安装界面设置本地 argsAppend/env/cwd；保留目录来源和连接身份，支持脱敏编辑、快照恢复、失败重试及停用保持。
+- 串行处理首次安装、编辑、停用和断开，防止迟到启动恢复过期状态；持久化与回滚双重失败保留恢复快照并返回安全提示。
+- 修正已安装工具详情将 stdio 错标为远程服务的问题。
+- 不开放 OAuth、凭据绑定、CLI 桥接或完整参数替换。
+
+### Verification and known limitations
+
+- 完整 check（含隔离真实 MCP bridge）：427 passed / 4 skipped / 0 failed；89 个发布文件检查通过。
+- macOS 隔离真实 UI 验证安装、编辑、停用/启用、工具发现、失败重试、快照恢复、脱敏导出及断开。
+- 按维护者明确要求发布。Windows Desktop 实机、完整宿主重启持久化与生产 ToolRuntime UI 调用尚未验收；CI 不等于 Desktop 验收，#146 保持开放。详见 docs/ACCEPTANCE-146-20261020.md。
+
 ## [0.2.75] - 2026-10-17
 
 ### Added

package/README.en.md

@@ -85,7 +85,7 @@ If the plugin helps you connect an MCP server faster, consider [starring the rep
 - Explicit, non-destructive migration from the two earlier Qichacha OAuth plugins, plus active-plugin conflict detection that blocks duplicate server management and credential overwrites.
 
 <!-- catalog-stats:start -->
-As of 2026-10-06, the public Registry publishes 109 connector descriptors. After merging and deduplicating them with the 4 bundled Qichacha cards, the Marketplace exposes 113 cards across 9 business categories. Recommendations remain limited to the four Qichacha cards, PKULaw, and Wind, for 6 featured cards in total. The Registry evolves independently; the badge shown after a client refresh and the live badges above are the authoritative current counts.
+As of 2026-10-17, the public Registry publishes 110 connector descriptors. After merging and deduplicating them with the 4 bundled Qichacha cards, the Marketplace exposes 114 cards across 9 business categories. Recommendations remain limited to the four Qichacha cards, PKULaw, and Wind, for 6 featured cards in total. The Registry evolves independently; the badge shown after a client refresh and the live badges above are the authoritative current counts.
 <!-- catalog-stats:end -->
 
 ## Interface and demo
@@ -225,7 +225,7 @@ npm run dev:ui
 
 Every Registry merge regenerates `catalog-stats.json`; an hourly workflow in this repository synchronizes the Chinese and English product copy plus a local stats snapshot. The static npm README updates with package releases, while the live badges above read the Registry directly and therefore stay current without another npm release.
 
-The current public version is [`dsh-mcp-connector@0.2.75`](https://www.npmjs.com/package/dsh-mcp-connector), with [GitHub Release v0.2.75](https://github.com/duhu2000/dsh-mcp-connector/releases/tag/v0.2.75).
+The current public version is [`dsh-mcp-connector@0.2.76`](https://www.npmjs.com/package/dsh-mcp-connector), with [GitHub Release v0.2.76](https://github.com/duhu2000/dsh-mcp-connector/releases/tag/v0.2.76).
 
 See [CHANGELOG.md](CHANGELOG.md) for version history and [docs/DESKTOP-E2E.md](docs/DESKTOP-E2E.md) for the Desktop release checklist.
 

package/README.md

@@ -73,6 +73,7 @@ dsh plugin --profile web add dsh-mcp-connector
 - 市场 Bearer/API Key 连接器先执行 MCP initialize 连通性与凭据校验，全部 HTTP Server 通过后才持久化凭据并进入“已安装”；stdio 卡片可声明多个本机凭据字段及其环境变量映射。
 - 生命周期管理：连接持久化、重启恢复、启停、断开、OAuth 自动刷新/退避恢复与撤销；同 issuer 卡片共享一次授权，跨进程锁与独立原子 Grant journal 防止 Desktop/Web 并行时重复消耗 Refresh Token。
 - 配置原地编辑：自定义和 JSON 导入连接可在“已安装”中编辑标准化 JSON 并重新连接；敏感值以本机保留标记处理，校验、启动或保存失败时原连接继续可用。
+- 本地参数覆盖（#146，0.2.76）：无凭据市场 stdio 连接支持在首次连接确认框填写“高级本地参数”，以及在已安装列表编辑 `argsAppend`、`env`、`cwd`，不修改目录或连接身份；已有值不回传浏览器，支持快照恢复和清除覆盖。首次连接留空沿用市场参数，已有连接留空保留原覆盖；启动失败保留表单可修改重试。不支持 OAuth、凭据绑定、CLI 桥接或完整参数替换；真实 Desktop/Windows 验收尚未完成。
 - 配置备份：一键复制/下载可再次导入的脱敏 JSON；连接变更前自动保存最多 20 个本机快照，支持预览与原子恢复。凭据、本地路径和 OAuth Grant 不进入导出结果。
 - 连接作用域：新连接可选当前 Workspace 项目或 profile 全局；支持先预览 Server/工具影响，再复制、移动或按 revision 回滚。凭据只存一份，project-only 工具由 DSH Host 强制隔离。
 - 三层治理：Connection、Server、Tool 规则按 Tool > Server > Connection > 默认允许解析；变更先预览、按 revision 提交并可回滚，由 DSH Host 的 schema/lookup/dispatch restriction 与最终执行 Guard 真实生效。
@@ -86,7 +87,7 @@ dsh plugin --profile web add dsh-mcp-connector
 - 对话工具：`mcp_connector_catalog`、`connect`、`configure`、`import_json`、`export_config`、`snapshot`、`install_from_url`、`status`、`scope`、`health_check`、`policy`、`set_enabled`、`session_tools`、`disconnect`、`refresh_catalog`、`publish`、`tools_list`、`tool_search`、`tool_detail`。搜索/详情只做渐进式能力发现，不执行目标 MCP 工具。
 
 <!-- catalog-stats:start -->
-截至 2026-10-06，公共 Registry 已发布 109 条连接器描述；与随包的 4 张企查查卡片合并去重后，市场页可浏览 113 张卡片，覆盖企业数据、金融投资、法律合规、开发工具、办公协作、调研分析、设计创意、效率工具、其他 9 类。推荐位严格保留 4 张企查查卡片、北大法宝和 Wind，共 6 张；其他连接器按业务分类展示。Registry 可独立持续更新，实际数量以客户端刷新后的市场页签徽标和上方实时统计徽标为准。
+截至 2026-10-17，公共 Registry 已发布 110 条连接器描述；与随包的 4 张企查查卡片合并去重后，市场页可浏览 114 张卡片，覆盖企业数据、金融投资、法律合规、开发工具、办公协作、调研分析、设计创意、效率工具、其他 9 类。推荐位严格保留 4 张企查查卡片、北大法宝和 Wind，共 6 张；其他连接器按业务分类展示。Registry 可独立持续更新，实际数量以客户端刷新后的市场页签徽标和上方实时统计徽标为准。
 <!-- catalog-stats:end -->
 
 ## 界面与演示
@@ -219,7 +220,7 @@ npm run dev:ui
 
 公共 Registry 每次合并后会生成 `catalog-stats.json`；本仓库的定时工作流每小时同步中英文介绍和统计快照。npm 页面中的静态正文随版本发布更新，上方动态统计徽标则直接读取 Registry，可在不发布新 npm 版本时保持实时数量一致。
 
-当前公开版本为 [`dsh-mcp-connector@0.2.75`](https://www.npmjs.com/package/dsh-mcp-connector)，对应 [GitHub Release v0.2.75](https://github.com/duhu2000/dsh-mcp-connector/releases/tag/v0.2.75)。
+当前公开版本为 [`dsh-mcp-connector@0.2.76`](https://www.npmjs.com/package/dsh-mcp-connector)，对应 [GitHub Release v0.2.76](https://github.com/duhu2000/dsh-mcp-connector/releases/tag/v0.2.76)。
 
 版本能力与变更记录见 [CHANGELOG.md](CHANGELOG.md)。
 Desktop 发版回归见 [docs/DESKTOP-E2E.md](docs/DESKTOP-E2E.md)。

package/docs/DESKTOP-E2E.md

@@ -13,7 +13,7 @@ npm run dev:ui
 
 1. 完全退出并重启 DSH Desktop；展开/收起侧栏，入口始终在“新会话”下、“工作区”上且不重复。
 2. 切换工作区、新建会话、重建侧栏后入口仍存在；目标 slot 缺失时 footer 降级可点击。
-3. 打开市场，验证中英文切换、系统深浅主题、Tab 顺序、Escape 关闭与焦点回到触发按钮。
+3. 打开市场，验证中文单语言（无 EN 切换按钮）、系统深浅主题、Tab 顺序、Escape 关闭与焦点回到触发按钮。
 4. 点击未连接卡片可查看详情；点击已连接卡片可读实时工具、搜索并每次再加载 50 条。
 5. “添加连接”依次验证手动、JSON、市场卡片；JSON 示例/粘贴可缩进格式化，错误 URL/JSON/凭据得到可行动提示。
 6. Bearer/API Key 型市场卡片先填错误凭据：弹框内应显示鉴权/网络分类错误，不得进入「已安装」；再填正确凭据，只有卡片下所有 Server 均通过 initialize 校验后才批量安装。
@@ -21,7 +21,26 @@ npm run dev:ui
 8. OAuth：授权回调、重启恢复、停用/启用、断开撤销；二级弹框蒙层与关闭按钮清晰。
 9. 旧插件迁移先预览，明确确认后复制；旧凭据仍保留，新连接验证后再手工停用旧插件。
 
-## 不自动执行的项目
+## 专项验收与人工确认边界
+
+### 本地参数覆盖（#146，0.2.76；Desktop 验收待完成）
+
+传输层隔离验收可使用本机已安装的 Host 代码，无需修改用户 profile。将下面路径换成实际 DSH 安装目录中的 `package.json`（必须能解析 `@deepseek-ai/dsh-mcp-client` 与 `@deepseek-ai/cordis`）：
+
+```bash
+DSH_HOST_INTEGRATION_ANCHOR=/absolute/path/to/dsh/package.json node --test test/local-overrides-host.test.mjs
+```
+
+不设置此变量时该测试跳过；显式指定的 Host 不可解析时应失败。测试使用真实 Cordis 生命周期与 MCP 客户端/stdio 子进程，工具注册表是隔离测试容器，不加载实际 Host profile、存储或凭据。仅启动仓库自有无网络测试服务器，验证初次启动失败、修正 `argsAppend/env/cwd` 后工具发现与无害调用、带启动保护的进程恢复、清除覆盖后恢复原始启动行为及进程回收。临时工作目录包含空格，参数含中文和 shell 特殊字符。
+
+该证据不等同于完整 Desktop 验收，仍需在隔离 profile 完成：
+
+- 首次连接确认框高级参数输入，失败后表单保留、修正重试；已有连接留空保留覆盖。
+- 已安装列表编辑、敏感值保留标记往返、清除覆盖和快照恢复。
+- 重启后参数实际生效、停用连接不启动；市场改为凭据型后旧覆盖不再自动启动。
+- Windows Desktop 的含空格可执行文件路径、目录与工具调用；Windows CI 不能代替桌面宿主验收。
+
+不得将此草案直接安装进现有正常工作 profile，也不得用真实付费工具替代无害调用验收。
 
 ### 面板浏览状态恢复（#135）
 

package/lib/connection-backup.js

@@ -5,6 +5,8 @@
  * 先经过本模块转换，避免 Token、Header/env 值与本地路径进入对话或 Web API。
  */
 
+import { effectiveLocalRecord } from './local-overrides.js';
+
 export const REDACTED_VALUE = '<REDACTED:REENTER>';
 export const REDACTED_LOCAL_VALUE = '<REDACTED:LOCAL_VALUE>';
 export const REDACTED_EXPORT_FORMAT = 'dsh-mcp-connector.redacted';
@@ -48,6 +50,7 @@ function portableName(record) {
 }
 
 function exportPortableConnection(record) {
+  record = effectiveLocalRecord(record);
   const redactedFields = [];
   const base = {
     name: portableName(record),

package/lib/index.js

@@ -35,6 +35,7 @@ import {
   editableConnectionConfiguration,
   normalizeConnectionReconfiguration,
 } from './connection-editor.js';
+import { supportsLocalOverrides, editableLocalOverrides, normalizeLocalOverrides } from './local-overrides.js';
 import { discoverServerMetadata, refreshAccessToken, revokeRefreshToken, extractTokenResources } from './oauth.js';
 import { provision, disable, remove, entryIdFor } from './mcp-provision.js';
 import { classifyConnectionError, validateConnectionRecords } from './mcp-validation.js';
@@ -692,6 +693,7 @@ export async function apply(ctx, config) {
   }
 
   async function provisionUntilReady(record, original, { strictStartup = true } = {}) {
+    if (record.localOverrides && !canEditLocalOverrides(record)) throw new Error('当前市场配置不再允许本地参数覆盖，请先清除覆盖');
     if (!strictStartup) {
       return provision(ctx, config, record, grantMap(), { failOnStartupError: false });
     }
@@ -712,7 +714,9 @@ export async function apply(ctx, config) {
       if (error === timeoutError) {
         // loader 可能仍在等待 SDK 请求；它最终成功时必须恢复旧条目/移除新条目，绝不迟到落库。
         task.then(
-          () => restoreProvisionedEntry(record, original).catch((rollbackError) => {
+          // A later disable, disconnect or edit may already own this key.
+          // Reconcile after queued mutations, using the record at execution time.
+          () => queueConnectionAction(record.key, () => restoreProvisionedEntry(record, state.connections.get(record.key))).catch((rollbackError) => {
             logger.error(`late startup rollback "${record.key}" failed: ${rollbackError.message}`);
           }),
           () => {},
@@ -737,6 +741,14 @@ export async function apply(ctx, config) {
     return failures;
   }
 
+  function canEditLocalOverrides(record) {
+    if (!supportsLocalOverrides(record)) return false;
+    const descriptor = state.merged.find((item) => item.id === record.connectorId);
+    const server = descriptor?.servers?.find((item) => item.serverKey === record.serverKey);
+    return descriptor?.auth?.mode === 'none' && server?.transport === 'stdio'
+      && !server.oauthTokenEnv && !Object.keys(server.credentialBindings ?? {}).length;
+  }
+
   async function commitConnectionRecords(records, { strictStartup = true } = {}) {
     const originals = new Map(records.map((record) => [record.key, state.connections.get(record.key)]));
     const staged = records.map((record) => {
@@ -752,9 +764,10 @@ export async function apply(ctx, config) {
         provisioned.push(record);
       }
     } catch (error) {
-      await rollbackProvisionedRecords(provisioned, originals);
+      const rollbackErrors = await rollbackProvisionedRecords(provisioned, originals);
       const wrapped = new Error(`MCP Server "${activeRecord?.serverName ?? activeRecord?.key ?? 'unknown'}" 未完成启动`, { cause: error });
       wrapped.connectionRecord = activeRecord;
+      wrapped.rollbackErrors = rollbackErrors;
       throw wrapped;
     }
 
@@ -770,7 +783,7 @@ export async function apply(ctx, config) {
           logger.error(`connection storage rollback "${record.key}" failed: ${rollbackError.message}`);
         }
       }
-      const wrapped = new Error('连接记录持久化失败，已回滚 Host 条目', { cause: error });
+      const wrapped = new Error(rollbackErrors.length ? '连接记录持久化失败，自动回滚未完成' : '连接记录持久化失败，已回滚 Host 条目', { cause: error });
       wrapped.connectionRecord = activeRecord;
       wrapped.rollbackErrors = rollbackErrors;
       throw wrapped;
@@ -809,7 +822,12 @@ export async function apply(ctx, config) {
       const committed = await commitConnectionRecords(records, options);
       return { committed, snapshot };
     } catch (error) {
-      await discardConnectionSnapshot(snapshot);
+      if (error.rollbackErrors?.length) {
+        // Do not destroy the last known configuration when recovery itself fails.
+        error.recoverySnapshotId = snapshot?.key ?? null;
+      } else {
+        await discardConnectionSnapshot(snapshot);
+      }
       throw error;
     }
   }
@@ -1951,6 +1969,10 @@ export async function apply(ctx, config) {
     async connect(connectorId, serverKey, signal, scopeInput = {}) {
       const connector = state.merged.find((d) => d.id === connectorId);
       if (!connector) return { ok: false, message: `连接器 "${connectorId}" 不存在（可先 mcp_connector_refresh_catalog 或 mcp_connector_catalog 查看）` };
+      const hasLocalOverrides = scopeInput?.localOverrides !== undefined;
+      if (hasLocalOverrides && connector.auth.mode !== 'none') {
+        return { ok: false, message: '本地参数仅支持无凭据的市场 stdio 连接，不可覆盖授权配置' };
+      }
       let requestedScope;
       const explicitScope = scopeInput?.scope !== undefined;
       try {
@@ -2101,6 +2123,15 @@ export async function apply(ctx, config) {
           createdAt: Date.now(),
           updatedAt: Date.now(),
         };
+        if (hasLocalOverrides) {
+          if (!canEditLocalOverrides(record)) return { ok: false, message: '当前连接不支持本地参数覆盖' };
+          try {
+            const existing = state.connections.get(record.key);
+            record.localOverrides = normalizeLocalOverrides({ ...record, localOverrides: existing?.localOverrides }, scopeInput.localOverrides);
+          } catch (error) {
+            return { ok: false, message: error.message };
+          }
+        }
         const validation = await validateConnectionRecords([record], { timeoutMs: config.requestTimeoutMs });
         if (!validation.ok) return { ...validation, detail: { connectorId: connector.id, ...validation.detail } };
         try {
@@ -2108,6 +2139,7 @@ export async function apply(ctx, config) {
           cacheHealth(connector.id, [committed], readinessResults([committed], validation.detail.results));
           return { ok: true, message: `已连接 "${connector.name}"（${scopeLabel(connectionScopes.binding(committed.key), workspaceNames())}）`, detail: { key: committed.key, snapshotId: snapshot?.key ?? null, scopeRevision, scopeRollbackRevision } };
         } catch (error) {
+          if (hasLocalOverrides) return { ok: false, message: '连接启动或保存失败，已尝试恢复原配置；请检查本机 Host 日志与连接状态后重试' };
           return connectionSetupFailure(error);
         }
       }
@@ -2370,6 +2402,8 @@ export async function apply(ctx, config) {
           kind: record.kind,
           canRename: connectionDisplayNameEditable(record),
           canEditConfiguration: connectionConfigurationEditable(record),
+          canEditLocalOverrides: canEditLocalOverrides(record),
+          hasLocalOverrides: Boolean(record.localOverrides),
           serverName: record.serverName,
           url: record.url,
           transport: record.transport,
@@ -2612,6 +2646,37 @@ export async function apply(ctx, config) {
       }
     },
 
+    async editableLocalOverrides(key) {
+      const record = state.connections.get(key);
+      if (!record || !canEditLocalOverrides(record)) return { ok: false, message: '仅无凭据的市场 stdio 连接支持本地参数覆盖' };
+      return { ok: true, detail: { json: editableLocalOverrides(record) } };
+    },
+
+    async applyLocalOverrides(key, json, reset = false) {
+      const current = state.connections.get(key);
+      if (!current || (!canEditLocalOverrides(current) && !(reset === true && current.localOverrides))) {
+        return { ok: false, message: '当前连接不支持本地参数覆盖' };
+      }
+      let localOverrides;
+      try { localOverrides = reset === true ? undefined : normalizeLocalOverrides(current, json); }
+      catch (error) { return { ok: false, message: error.message }; }
+      try {
+        const next = { ...current, localOverrides, updatedAt: Date.now() };
+        const { snapshot } = await commitWithSnapshot([next], 'local-overrides');
+        return { ok: true, message: reset === true ? '已清除本地覆盖，恢复市场参数' : '已保存本地参数覆盖；启用的连接已重新加载', detail: { key, snapshotId: snapshot?.key ?? null } };
+      } catch (error) {
+        // Startup/storage errors may contain command arguments or env values.
+        if (error.rollbackErrors?.length) return {
+          ok: false,
+          message: error.recoverySnapshotId
+            ? '本地参数更新失败且自动回滚未完成，已保留操作前快照；请修复本机存储或启动问题后，从配置快照恢复并核对连接状态'
+            : '本地参数更新失败且自动回滚未完成；请检查本机存储、Host 日志与连接状态',
+          detail: { recoveryRequired: true, snapshotId: error.recoverySnapshotId ?? null },
+        };
+        return { ok: false, message: '本地参数更新失败，已尝试恢复原配置；请检查本机 Host 日志与连接状态' };
+      }
+    },
+
     async reconfigureConnection(key, json) {
       const current = state.connections.get(key);
       if (!current) return { ok: false, message: `连接 "${key}" 不存在` };
@@ -3340,6 +3405,10 @@ export async function apply(ctx, config) {
   }
   for (const [key, record] of state.connections) {
     if (record.enabled !== false) {
+      if (record.localOverrides && !canEditLocalOverrides(record)) {
+        logger.warn(`skip provision "${key}" at startup: 当前市场配置不再允许本地参数覆盖，请先清除覆盖`);
+        continue;
+      }
       const failure = grantFailure(record);
       if (failure) {
         logger.warn(`skip provision "${key}" at startup: ${failure.message}`);
@@ -3416,19 +3485,32 @@ export async function apply(ctx, config) {
   }
   // Serialize same-record actions: a delayed reconnect must never reactivate a
   // connection the user has subsequently disabled or disconnected.
-  const connectionActions = new Set(['reconnect', 'setEnabled', 'disconnect', 'reconfigureConnection', 'renameConnection', 'setInjectionMode']);
+  const connectionActions = new Set(['reconnect', 'setEnabled', 'disconnect', 'reconfigureConnection', 'applyLocalOverrides', 'renameConnection', 'setInjectionMode']);
   const connectionQueues = new Map();
+  async function queueConnectionAction(key, action) {
+    const previous = connectionQueues.get(key) ?? Promise.resolve();
+    const pending = previous.catch(() => {}).then(action);
+    connectionQueues.set(key, pending);
+    try { return await pending; }
+    finally { if (connectionQueues.get(key) === pending) connectionQueues.delete(key); }
+  }
   for (const name of connectionActions) {
     const action = api[name];
-    api[name] = async (key, ...args) => {
-      const previous = connectionQueues.get(key) ?? Promise.resolve();
-      const pending = previous.catch(() => {}).then(() => action.call(api, key, ...args));
-      connectionQueues.set(key, pending);
-      try { return await pending; }
-      finally { if (connectionQueues.get(key) === pending) connectionQueues.delete(key); }
-    };
-  }
-  const discoveryMutations = new Set(['connect', 'configure', 'importJson', 'installFromUrl', 'reconfigureConnection', 'setEnabled', 'reconnect', 'restoreSnapshot', 'migrateLegacy']);
+    api[name] = (key, ...args) => queueConnectionAction(key, () => action.call(api, key, ...args));
+  }
+  // First-time stdio installation must share the edit/disable/disconnect queue.
+  // Otherwise a delayed install can overwrite a newer overlay or resurrect a removed entry.
+  // OAuth retains its independent shared-authorization deduplication path.
+  const connectAction = api.connect;
+  api.connect = (connectorId, serverKey, ...args) => {
+    const connector = state.merged.find((item) => item.id === connectorId);
+    const server = connector?.servers.find((item) => item.serverKey === serverKey) ?? connector?.servers[0];
+    const run = () => connectAction.call(api, connectorId, serverKey, ...args);
+    return connector?.auth.mode === 'none' && server?.transport === 'stdio'
+      ? queueConnectionAction(`${connector.id}-${server.serverKey}`, run)
+      : run();
+  };
+  const discoveryMutations = new Set(['connect', 'configure', 'importJson', 'installFromUrl', 'reconfigureConnection', 'applyLocalOverrides', 'setEnabled', 'reconnect', 'restoreSnapshot', 'migrateLegacy']);
   const discoveryApi = new Proxy(api, { get(target, property) {
     const value = target[property];
     if (!discoveryMutations.has(property)) return value;

package/lib/local-overrides.js

@@ -0,0 +1,63 @@
+/** Local-only overlay for credential-free catalog stdio entries. */
+import { z } from 'zod';
+import { CUSTOM_CONNECTOR_ID, JSON_CONNECTOR_ID } from './constants.js';
+// Do not import connection-editor: it depends on schema via the JSON parser.
+const KEEP_EXISTING_VALUE = '<KEEP_EXISTING>';
+const forbiddenEnv = new Set(['__proto__', 'constructor', 'prototype', 'ELECTRON_RUN_AS_NODE']);
+
+export const localOverridesSchema = z.object({
+  argsAppend: z.array(z.string().max(8192)).max(128).optional(),
+  env: z.custom((value) => value && typeof value === 'object' && !Array.isArray(value)
+    && !Object.keys(value).some((key) => forbiddenEnv.has(key)))
+    .pipe(z.record(z.string().regex(/^[A-Za-z_][A-Za-z0-9_]*$/), z.string().max(8192))).optional(),
+  cwd: z.string().max(8192).optional(),
+}).strict();
+
+export function supportsLocalOverrides(record) {
+  return record?.transport === 'stdio' && ![CUSTOM_CONNECTOR_ID, JSON_CONNECTOR_ID, 'dingtalk'].includes(record.connectorId)
+    && Boolean(record.connectorId) && !record.auth && !record.oauthTokenEnv;
+}
+
+export function editableLocalOverrides(record) {
+  if (!supportsLocalOverrides(record)) throw new Error('当前仅支持无凭据的市场 stdio 连接；OAuth/凭据型/CLI 桥接连接不可覆盖');
+  const values = record.localOverrides ?? {};
+  return JSON.stringify({
+    argsAppend: values.argsAppend?.length ? [KEEP_EXISTING_VALUE] : [],
+    env: Object.fromEntries(Object.keys(values.env ?? {}).map((key) => [key, KEEP_EXISTING_VALUE])),
+    cwd: values.cwd ? KEEP_EXISTING_VALUE : '',
+  }, null, 2);
+}
+
+export function normalizeLocalOverrides(record, input) {
+  if (!supportsLocalOverrides(record)) throw new Error('当前连接不支持本地参数覆盖');
+  let raw;
+  try { raw = typeof input === 'string' ? JSON.parse(input) : input; }
+  catch { throw new Error('本地参数必须是合法 JSON'); }
+  const parsed = localOverridesSchema.safeParse(raw);
+  if (!parsed.success) throw new Error('本地参数仅允许 argsAppend 字符串数组、env 字符串对象及 cwd 字符串');
+  const value = parsed.data;
+  const previous = record.localOverrides ?? {};
+  if (value.argsAppend?.length === 1 && value.argsAppend[0] === KEEP_EXISTING_VALUE) value.argsAppend = [...(previous.argsAppend ?? [])];
+  if (value.cwd === KEEP_EXISTING_VALUE) value.cwd = previous.cwd ?? '';
+  for (const [key, entry] of Object.entries(value.env ?? {})) {
+    if (['__proto__', 'constructor', 'prototype', 'ELECTRON_RUN_AS_NODE'].includes(key)) throw new Error('包含不允许覆盖的环境变量名');
+    if (entry === KEEP_EXISTING_VALUE) {
+      if (!Object.hasOwn(previous.env ?? {}, key)) throw new Error('环境变量不存在可保留的原值');
+      value.env[key] = previous.env[key];
+    }
+  }
+  if (value.argsAppend?.includes(KEEP_EXISTING_VALUE)) throw new Error('argsAppend 保留标记必须单独使用');
+  if ([...(value.argsAppend ?? []), ...Object.values(value.env ?? {}), value.cwd ?? ''].some((entry) => entry.includes('\0'))) throw new Error('本地参数不可包含空字符');
+  return value;
+}
+
+export function effectiveLocalRecord(record) {
+  if (!record.localOverrides) return record;
+  const overlay = normalizeLocalOverrides(record, record.localOverrides);
+  return {
+    ...record,
+    args: [...(record.args ?? []), ...(overlay.argsAppend ?? [])],
+    env: { ...(record.env ?? {}), ...(overlay.env ?? {}) },
+    cwd: overlay.cwd || record.cwd,
+  };
+}

package/lib/mcp-provision.js

@@ -4,6 +4,7 @@
  */
 
 import { cliBridgeArgs } from './cli-providers.js';
+import { effectiveLocalRecord } from './local-overrides.js';
 import { fileURLToPath } from 'node:url';
 
 const STDIO_STARTUP_GUARD = fileURLToPath(new URL('./stdio-startup-guard.js', import.meta.url));
@@ -39,6 +40,7 @@ export function authHeaders(record, grants) {
 }
 
 export function buildEntryConfig(record, grants, { failOnStartupError = false, startupRequestTimeoutMs } = {}) {
+  record = effectiveLocalRecord(record);
   if (record.transport === 'stdio') {
     const env = { ...(record.env ?? {}) };
     if (record.auth?.mode === 'oauth' && record.oauthTokenEnv) {

package/lib/schema.js

@@ -4,6 +4,7 @@
  */
 import { z } from 'zod';
 import { assertConnectionUrl, isPrivateNetworkHost } from './util.js';
+import { localOverridesSchema, normalizeLocalOverrides } from './local-overrides.js';
 
 /** 连接器目录里单个 MCP server 的描述 */
 export const serverRefSchema = z.object({
@@ -101,6 +102,7 @@ export const connectorDescriptorSchema = z.object({
 
 /** 用户本机连接实例 */
 export const connectionRecordSchema = z.object({
+  localOverrides: localOverridesSchema.optional(),
   key: z.string().min(1),
   connectorId: z.string().min(1),
   kind: z.enum(['oauth', 'manual', 'json']),
@@ -345,6 +347,7 @@ export function normalizeConnectionRecord(raw) {
     throw new Error(`invalid connection record: ${issues}`);
   }
   const data = parsed.data;
+  if (data.localOverrides) data.localOverrides = normalizeLocalOverrides(data, data.localOverrides);
   const transport = data.transport === 'sse' ? 'streamable-http' : data.transport;
   if (transport === 'stdio' && !data.command) {
     throw new Error('invalid connection record: transport=stdio 时 command 必填');

package/lib/status-events.js

@@ -5,6 +5,7 @@ const DEFAULT_EVENT_TYPES = new Map([
   ['installFromUrl', 'connections'],
   ['renameConnection', 'connections'],
   ['reconfigureConnection', 'connections'],
+  ['applyLocalOverrides', 'connections'],
   ['setEnabled', 'connections'],
   ['reconnect', 'connections'],
   ['setInjectionMode', 'connections'],

package/lib/tool-catalog-cache.js

@@ -84,7 +84,7 @@ export function connectionToolCacheSignature(record) {
   const identity = record?.transport === 'stdio'
     ? [record.transport, record.serverName, record.command, record.args ?? [], record.cwd ?? '']
     : [record?.transport, record?.serverName, record?.url ?? ''];
-  return createHash('sha256').update(JSON.stringify(identity)).digest('hex');
+  return createHash('sha256').update(JSON.stringify(record?.localOverrides ? [identity, record.localOverrides] : identity)).digest('hex');
 }
 
 export function createToolCatalogRecord(record, tools, now = Date.now()) {

package/lib/web.js

@@ -52,6 +52,8 @@ const API_WHITELIST = new Map([
   ['renameConnection', (api, p) => api.renameConnection(p?.key, p?.name)],
   ['editableConnectionConfig', (api, p) => api.editableConnectionConfig(p?.key)],
   ['reconfigureConnection', (api, p) => api.reconfigureConnection(p?.key, p?.json)],
+  ['editableLocalOverrides', (api, p) => api.editableLocalOverrides(p?.key)],
+  ['applyLocalOverrides', (api, p) => api.applyLocalOverrides(p?.key, p?.json, p?.reset)],
   ['disconnect', (api, p) => api.disconnect(p?.key)],
   ['setEnabled', (api, p) => api.setEnabled(p?.key, p?.enabled !== false)],
   ['reconnect', (api, p) => api.reconnect(p?.key)],

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-mcp-connector",
-  "version": "0.2.75",
+  "version": "0.2.76",
   "description": "DeepSeek Harness MCP Connector: connect servers, search tools across active connections, and troubleshoot discovery. Includes a continuously updated catalog; supports OAuth 2.0 PKCE, API keys, Streamable HTTP/stdio, and mcpServers JSON import.",
   "type": "module",
   "main": "lib/index.js",

package/ui/index.html

@@ -543,6 +543,7 @@
     configure: 145_000,
     importJson: 145_000,
     reconfigureConnection: 145_000,
+    applyLocalOverrides: 145_000,
     installFromUrl: 145_000,
     setEnabled: 130_000,
     setInjectionMode: 30_000,
@@ -1572,6 +1573,7 @@
         <span class="slider"></span>
       </label>
       ${canEditConfiguration ? `<button class="btn ghost" type="button" onclick="window.__mcp.openEditor('${key}')">编辑配置</button>` : ''}
+      ${r.canEditLocalOverrides ? `<button class="btn ghost" type="button" onclick="window.__mcp.openLocalEditor('${key}')">本地参数</button>` : r.hasLocalOverrides ? `<button class="btn ghost" type="button" onclick="window.__mcp.submitLocalOverrides('${key}', true)">清除本地参数</button>` : ''}
       ${canRename ? `<button class="btn ghost" type="button" onclick="window.__mcp.openRename('${key}')">重命名</button>` : ''}
       ${enabled ? `<button class="btn ghost" type="button" onclick="window.__mcp.showConnectionTools('${key}')">工具</button>` : ''}
       ${enabled && r.connectionState !== 'healthy' ? `<button class="btn ghost" type="button" title="重新建立 Host 侧条目并复检：不改配置、凭据、范围或注入模式" onclick="window.__mcp.reconnect('${key}')">重新连接</button>` : ''}
@@ -1669,11 +1671,15 @@
   function openConnectScope(connectorId) {
     const connector = marketItems[connectorId];
     if (!connector) return;
+    const server = connector.servers?.[0];
+    const allowLocalParameters = connector.authMode === 'none' && connectorId !== 'dingtalk'
+      && server?.transport === 'stdio' && !server.oauthTokenEnv && !Object.keys(server.credentialBindings || {}).length;
     openModal(`连接 ${connector.name}`, `
       <input id="scope-connector-id" type="hidden" value="${esc(connectorId)}" />
       <div class="form-note">${connectionLabels(connector).map(esc).join(' · ')}${connector.credentialDescription ? `<p>${esc(connector.credentialDescription)}</p>` : ''}${connectorId === 'dingtalk' ? '<p>企业尚未开放 CLI 或您无法取得授权？可以取消，等待管理员处理，无需反复登录或重启。一键授权也不能绕过企业政策。本版本不会自动发起登录；工具注册不代表已获得全部业务权限。</p>' : ''}</div>
       <div class="form-note"><strong>选择连接影响范围</strong>连接配置与凭据仍只保存一份；项目范围会由 Host 在工具可见性和执行层强制隔离。</div>
       ${scopeFieldHtml()}
+      ${allowLocalParameters ? '<details><summary>高级：首次连接前设置本地参数（可选）</summary><label for="initial-local-overrides">本地参数 JSON</label><textarea id="initial-local-overrides" rows="6" spellcheck="false" placeholder=\'{"argsAppend":[],"env":{},"cwd":""}\'></textarea><div class="field-help">留空使用市场参数（已有连接保留原覆盖）。argsAppend 追加命令参数，env 合并环境变量，cwd 设置工作目录；仅保存在本机。可用于指定浏览器路径或代理。参数可能扩大本地访问权限，请仅填写可信内容；启动失败时保留表单供修改重试。</div></details>' : ''}
       <div class="inline-error" id="modal-error" tabindex="-1"></div>
       <div class="m-actions"><button class="btn ghost" type="button" onclick="window.__mcp.closeModal()">取消</button><button class="btn" type="button" onclick="window.__mcp.confirmConnect()">确认连接</button></div>`);
   }
@@ -1720,6 +1726,20 @@
       <div class="m-actions"><button class="btn ghost" type="button" onclick="window.__mcp.closeModal()">取消</button><button class="btn" type="button" onclick="window.__mcp.submitReconfigure('${esc(key)}')">${action}</button></div>`);
   }
 
+  async function openLocalEditor(key) {
+    const item = installedItems.find((candidate) => candidate.key === key);
+    if (!item) return;
+    const result = await call('editableLocalOverrides', { key });
+    if (!result.ok) { showToast(result.message, false); return; }
+    openModal(`本地参数 · ${item.name}`, `
+      <div class="form-note"><strong>仅覆盖本机，无需修改市场目录</strong><code>argsAppend</code> 追加到市场参数末尾；<code>env</code> 合并环境变量；<code>cwd</code> 设置工作目录。命令、连接身份与市场默认值保持不变。参数可能扩大本地访问权限，请仅填写可信内容。</div>
+      <label for="local-overrides-json">本地参数 JSON</label>
+      <textarea id="local-overrides-json" rows="12" spellcheck="false">${esc(result.detail?.json || '')}</textarea>
+      <div class="field-help"><code>&lt;KEEP_EXISTING&gt;</code> 保留本机已有值；删除字段清除该项覆盖。保存会创建快照并重新加载已启用连接，停用连接保持停用；不代表工具调用已验收。</div>
+      <div class="inline-error" id="modal-error" tabindex="-1"></div>
+      <div class="m-actions"><button class="btn ghost" type="button" onclick="window.__mcp.closeModal()">取消</button><button class="btn ghost" type="button" onclick="window.__mcp.submitLocalOverrides('${esc(key)}', true)">恢复市场参数</button><button class="btn" type="button" onclick="window.__mcp.submitLocalOverrides('${esc(key)}')">保存本地参数</button></div>`);
+  }
+
   function openAddConnection(mode = 'json', preset = {}) {
     const server = (preset.servers || [{}])[0] || {};
     if (mode === 'manual' && preset.id && ['bearer', 'api-key'].includes(preset.authMode)) {
@@ -1831,8 +1851,9 @@
       try { scopeParams = selectedScopeParams(); }
       catch (error) { showModalError(error.message); return; }
       const timeoutMs = marketItems[connectorId]?.authMode === 'oauth2-pkce' ? 310_000 : undefined;
+      const localOverrides = $('#initial-local-overrides')?.value.trim();
       setModalBusy(true, '正在连接…');
-      const r = await call('connect', { connectorId, ...scopeParams }, { timeoutMs });
+      const r = await call('connect', { connectorId, ...scopeParams, ...(localOverrides ? { localOverrides } : {}) }, { timeoutMs });
       setModalBusy(false);
       showToast(r.message, r.ok);
       if (!r.ok) showModalError(r.message);
@@ -1850,6 +1871,18 @@
     openScope(key) { openScopeManager(key); },
     openRename(key) { openRenameConnection(key); },
     async openEditor(key) { await openConnectionEditor(key); },
+    async openLocalEditor(key) { await openLocalEditor(key); },
+    async submitLocalOverrides(key, reset = false) {
+      if (reset && !await confirmDialog({ title: '恢复市场参数', message: '清除本机追加参数、环境变量和工作目录覆盖；已启用连接将重新加载。', confirmLabel: '恢复' })) return;
+      const json = $('#local-overrides-json')?.value || '{}';
+      setModalBusy(true, '正在更新本地参数…');
+      const result = await call('applyLocalOverrides', { key, json, reset });
+      setModalBusy(false);
+      if (!result.ok) { showToast(result.message, false); showModalError(result.message); return; }
+      closeModal();
+      showToast(result.message, true);
+      await loadInstalled();
+    },
     formatEditJson() {
       const input = $('#edit-connection-json');
       if (!input) return;
@@ -2173,6 +2206,7 @@
       await window.__mcp.showDetail(record.connectorId, {
         id: record.connectorId, connectionKey: key, name: record.name, icon: '🔌',
         authMode: record.authMode, connected: [record], connectionState: record.connectionState,
+        servers: [{ transport: record.transport }],
         description: '本机连接的工具发现与参数详情；不会执行工具。',
       });
     },