dsh-mcp-connector 0.2.77 → 0.2.79

package/CHANGELOG.md

@@ -2,6 +2,32 @@
 
 本项目遵循 [Keep a Changelog](https://keepachangelog.com/zh-CN/1.1.0/)；首个公开版本从 `0.1.0` 开始。
 
+## [0.2.79] - 2026-10-24
+
+### Fixed
+
+- #178：治理、项目作用域和会话注入刷新改为轻量名称读取，不再调用 tools.schemas() 深克隆参数，切断 schema 读取副作用引起的延迟事件回路。
+- 默认全局/always 且无 deny 或停用连接时跳过清单读取；项目隔离每轮只读取一次，不按 Agent 数重复。
+- 保留执行 guard、工具增删感知和权限交集；名称读取失败时保留已有限制，不把错误当空清单，也不回退 schema 扫描。
+
+### Compatibility and verification
+
+- 优先使用上游公开 definitions()；已发布旧 Host 通过集中、只读、形状校验的内部 view() 兼容层读取名称。内部接口属于兼容风险，增加 Windows/Linux × Host 0.2.1-rc.2/rc.3 契约门禁；不修改宿主安装。
+- 增加同步、微任务、下一轮事件交付及残余 schema 反馈回路回归。详见 docs/ACCEPTANCE-178-20261024.md。
+- 本次是工具运行时机制修复；报告者 Windows Desktop UI 的原始卡顿与 1.29 亿次调用对照仍需复测，#178 保留跟踪。不包含延期的国际化或其他草案功能。
+
+## [0.2.78] - 2026-10-22
+
+### Fixed
+
+- 将版本检查 API 的 401、403、404、5xx 和异常 JSON 响应区分为可操作的提示，避免把所有失败笼统显示为插件 API 不可用；不向界面回显代理正文或敏感响应信息。
+- 补充 NAS / 反向代理诊断指引和回归测试，保留 Host/Origin 安全边界。
+
+### Scope
+
+- 本版本改进 #172 的诊断，不宣称已修复或实机验证飞牛 NAS 的部署路由问题；该 Issue 保持开放。
+- 不包含暂缓的国际化 PR #174 或待验收的启动加固 PR #168。
+
 ## [0.2.77] - 2026-10-22
 
 ### Security

package/README.en.md

@@ -225,7 +225,7 @@ npm run dev:ui
 
 Every Registry merge regenerates `catalog-stats.json`; an hourly workflow in this repository synchronizes the Chinese and English product copy plus a local stats snapshot. The static npm README updates with package releases, while the live badges above read the Registry directly and therefore stay current without another npm release.
 
-The current public version is [`dsh-mcp-connector@0.2.77`](https://www.npmjs.com/package/dsh-mcp-connector), with [GitHub Release v0.2.77](https://github.com/duhu2000/dsh-mcp-connector/releases/tag/v0.2.77).
+The current public version is [`dsh-mcp-connector@0.2.79`](https://www.npmjs.com/package/dsh-mcp-connector), with [GitHub Release v0.2.79](https://github.com/duhu2000/dsh-mcp-connector/releases/tag/v0.2.79).
 
 See [CHANGELOG.md](CHANGELOG.md) for version history and [docs/DESKTOP-E2E.md](docs/DESKTOP-E2E.md) for the Desktop release checklist.
 

package/README.md

@@ -220,7 +220,7 @@ npm run dev:ui
 
 公共 Registry 每次合并后会生成 `catalog-stats.json`；本仓库的定时工作流每小时同步中英文介绍和统计快照。npm 页面中的静态正文随版本发布更新，上方动态统计徽标则直接读取 Registry，可在不发布新 npm 版本时保持实时数量一致。
 
-当前公开版本为 [`dsh-mcp-connector@0.2.77`](https://www.npmjs.com/package/dsh-mcp-connector)，对应 [GitHub Release v0.2.77](https://github.com/duhu2000/dsh-mcp-connector/releases/tag/v0.2.77)。
+当前公开版本为 [`dsh-mcp-connector@0.2.79`](https://www.npmjs.com/package/dsh-mcp-connector)，对应 [GitHub Release v0.2.79](https://github.com/duhu2000/dsh-mcp-connector/releases/tag/v0.2.79)。
 
 版本能力与变更记录见 [CHANGELOG.md](CHANGELOG.md)。
 Desktop 发版回归见 [docs/DESKTOP-E2E.md](docs/DESKTOP-E2E.md)。

package/docs/USER-GUIDE.md

@@ -384,6 +384,18 @@ Windows 下 `.cmd` / `.bat` 是脚本包装器，不等同于可直接启动的
 
 修正后重新启动 DSH（如变更了进程环境），在连接详情点击“重新检查”，确认工具发现结果。反馈时只提交版本、脱敏后的诊断代码、退出码和必要日志；不要上传 Token、API Key、完整环境变量或个人路径。
 
+### NAS / 反向代理下版本检查 API 不可用
+
+顶部版本检查失败不等于全部连接器失效，也不等于 npm 故障。先检查浏览器开发者工具中同源 `POST /mcp-connector/api`（`method: versionStatus`）的 HTTP 状态：
+
+- **401**：确认 DSH 登录会话有效，重新登录后重试。
+- **403**：核对宿主声明的可信访问地址（含端口）及代理转发的 Host/Origin；不要关闭校验、信任任意来源或自动放行整个局域网。
+- **404**：检查插件路由是否挂载，反向代理是否正确转发 `/mcp-connector/api`。
+- **5xx**：查看 DSH 和代理服务日志。
+- **200 但不是正确 JSON**：可能返回了登录页或代理兜底页面，检查路由和登录状态。
+
+上述状态只能缩小排查范围，不能单独证明根因。反馈时提供 DSH/插件版本、Docker 或原生部署、IP/域名/反向代理访问方式、HTTP 状态和响应内容类型；保持脱敏后 Host/Origin 的协议与端口关系。不要公开 Token、Cookie、完整 HAR、完整响应正文或个人网络地址。
+
 ### 为什么显示“状态未知”
 
 这表示插件没有足够证据确认健康或失败，常见于 DSH 刚重启、尚未执行健康检查，或当前 Host 无法读取 stdio 工具注册状态。先点击“刷新连接器目录”；若仍为未知，在该连接（或详情页）点“重新连接”重建 Host 侧条目——Host 的 mcp-client 在连续重连失败后会注销工具且不再自发重试，只有重建条目才能恢复。若重建后依旧未知，再根据诊断的 `code` 和建议查看 Host 日志或升级 Host。不要把“状态未知”理解为“已连接”。

package/lib/client.js

@@ -463,15 +463,28 @@ window.__ModuleLoader__.load({
 			return mount;
 		}
 
+		function versionApiFailureMessage(status) {
+			const prefix = "插件版本检查 API 不可用";
+			if (status === 401) return `${prefix}（HTTP 401）：请重新登录 DSH 后重试`;
+			if (status === 403) return `${prefix}（HTTP 403）：请检查 DSH 可信访问地址及反向代理 Host/Origin 配置，不要关闭安全校验`;
+			if (status === 404) return `${prefix}（HTTP 404）：请检查插件路由是否加载，以及反向代理是否转发 /mcp-connector/api`;
+			if (Number.isInteger(status) && status >= 400 && status <= 599) return `${prefix}（HTTP ${status}）：请检查 DSH 服务和反向代理日志`;
+			return `${prefix}：响应格式不正确，请检查登录状态、反向代理和插件版本兼容性`;
+		}
+
 		async function fetchVersionStatus(force = false) {
 			const response = await window.fetch("/mcp-connector/api", {
 				method: "POST",
 				headers: { "content-type": "application/json" },
 				body: JSON.stringify({ method: "versionStatus", params: { force } })
 			});
-			const result = await response.json();
-			if (!response.ok || result.ok !== true || result.detail === void 0) {
-				throw new Error(result.message ?? `HTTP ${response.status}`);
+			// Classify HTTP errors before parsing: a proxy may return an HTML login/error page.
+			if (!response.ok) throw new Error(versionApiFailureMessage(response.status));
+			let result;
+			try { result = await response.json(); }
+			catch { throw new Error(versionApiFailureMessage()); }
+			if (result?.ok !== true || !result.detail || typeof result.detail !== "object" || Array.isArray(result.detail)) {
+				throw new Error(versionApiFailureMessage());
 			}
 			return result.detail;
 		}
@@ -1207,7 +1220,9 @@ window.__ModuleLoader__.load({
 						console.warn("[mcp-connector] plugin update check failed:", error);
 						if (!disposed) {
 							setVersionCheckBusy(false);
-							setVersionCheckFailed("api");
+							// Only expose our fixed diagnostic text; never echo proxy bodies or URLs/tokens.
+							setVersionCheckFailed(error instanceof Error && error.message.startsWith("插件版本检查 API 不可用")
+								? error.message : "插件版本检查 API 请求失败：请检查网络、DSH 服务和反向代理连接");
 							schedule(VERSION_CHECK_RETRY_MS);
 						}
 					});
@@ -1668,7 +1683,7 @@ window.__ModuleLoader__.load({
 											versionCheckFailed && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
 												className: "mcpConnectorUpdateStatus",
 												"data-tone": "error",
-												children: versionCheckFailed === "api" ? "插件 API 不可用，请检查 DSH 宿主兼容性或服务日志" : "暂时无法确认 npm 最新版本，请重试"
+												children: typeof versionCheckFailed === "string" && versionCheckFailed !== "npm" ? versionCheckFailed : "暂时无法确认 npm 最新版本，请重试"
 											}),
 											versionStatus?.releasePending && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
 												className: "mcpConnectorVersion",

package/lib/connection-scopes.js

@@ -7,6 +7,8 @@
  * credential.
  */
 
+import { readHostToolNames, supportsHostToolNames } from './host-tool-names.js';
+
 export const CONNECTION_SCOPE_HISTORY_LIMIT = 20;
 export const CONNECTION_SCOPE_TYPES = ['global', 'project'];
 
@@ -280,19 +282,18 @@ export function createHostScopeController(ctx, {
     : null;
 
   function observedPublicNames() {
-    if (typeof ctx.tools?.schemas !== 'function') return [];
     try {
-      return ctx.tools.schemas().map((schema) => schema?.name)
+      return readHostToolNames(ctx.tools)
         .filter((name) => typeof name === 'string' && recordForPublicName(name))
         .sort();
     } catch (error) {
       logger?.warn?.(`scope read Host tools failed: ${error.message}`);
-      return [];
+      return null;
     }
   }
 
-  function installRestriction(agent) {
-    const denied = observedPublicNames().filter((name) => {
+  function installRestriction(agent, observed) {
+    const denied = observed.filter((name) => {
       const record = recordForPublicName(name);
       return record && !visible(record, agent);
     });
@@ -315,15 +316,21 @@ export function createHostScopeController(ctx, {
   let syncing = false;
   function refresh() {
     if (disposed || !agentsMounted) return;
-    // Reading lazy Host schemas or replacing a restriction may synchronously
-    // emit tools/change. Ignore that nested notification: replaying it scans
-    // the same single-threaded state and can otherwise keep the event loop in
-    // a permanent tools/change cycle with plugins that re-register tools.
+    // Ignore synchronous restriction notifications while reconciling. Name-only
+    // reads avoid schema side effects; delayed events still observe real changes.
     if (syncing) return;
     syncing = true;
     try {
       const live = new Set(mountedAgentCtx?.agents?.list?.() ?? []);
-      for (const agent of live) installRestriction(agent);
+      // Global bindings cannot hide tools. When project isolation is needed,
+      // enumerate once per refresh, not once per live Agent.
+      const currentBindings = bindings();
+      const needsRestriction = records().some((record) => (
+        !bindingForConnection(currentBindings, record.key).global
+      ));
+      const observed = live.size && needsRestriction ? observedPublicNames() : [];
+      if (observed === null) return;
+      for (const agent of live) installRestriction(agent, observed);
       for (const agent of restrictions.keys()) if (!live.has(agent)) restrictions.delete(agent);
     } finally {
       syncing = false;
@@ -363,7 +370,7 @@ export function createHostScopeController(ctx, {
     capabilities() {
       return {
         executionGuard: Boolean(disposeGuard),
-        visibilityRestriction: agentsMounted && typeof ctx.tools?.restrict === 'function',
+        visibilityRestriction: agentsMounted && typeof ctx.tools?.restrict === 'function' && supportsHostToolNames(ctx.tools),
         workspaceRegistry: typeof workspaceIdForAgent === 'function',
         restrictedAgents: restrictions.size,
       };

package/lib/governance.js

@@ -5,6 +5,7 @@
  * 连接记录的 lifecycle disabled 是物理下线状态，任何 allow 规则都不能覆盖。
  */
 import { createHash } from 'node:crypto';
+import { readHostToolNames, supportsHostToolNames } from './host-tool-names.js';
 
 export const GOVERNANCE_HISTORY_LIMIT = 20;
 export const GOVERNANCE_SCOPES = ['connection', 'server', 'tool'];
@@ -302,20 +303,23 @@ export function createHostGovernanceController(ctx, { getRules, getRecords, logg
     : null;
 
   function observedPublicNames() {
-    if (typeof ctx.tools?.schemas !== 'function') return [];
     try {
-      return ctx.tools.schemas()
-        .map((schema) => schema?.name)
+      return readHostToolNames(ctx.tools)
         .filter((name) => typeof name === 'string' && targetForPublicName(name))
         .sort();
     } catch (error) {
       logger?.warn?.(`governance read Host tools failed: ${error.message}`);
-      return [];
+      return null;
     }
   }
 
   function deniedObservedNames() {
-    return observedPublicNames().filter((name) => inspect(name)?.policy.effect === 'deny');
+    // The default policy cannot deny anything. Avoid deep-cloning every Host
+    // schema just to prove that the resulting restriction would be empty.
+    // Disabled connections still require enforcement even without a deny rule.
+    if (!records().some((record) => record.enabled === false)
+        && !rules().some((rule) => rule.effect === 'deny')) return [];
+    return observedPublicNames()?.filter((name) => inspect(name)?.policy.effect === 'deny') ?? null;
   }
 
   function installRestriction(agent, denied) {
@@ -338,16 +342,15 @@ export function createHostGovernanceController(ctx, { getRules, getRecords, logg
   let syncing = false;
   function syncRestrictions() {
     if (disposed || !agentsMounted) return;
-    // schemas()/restrict() may synchronously cause another tools/change while
-    // Host plugins materialize lazy schemas or re-register equivalent tools.
-    // JavaScript cannot interleave an unrelated external change in this stack,
-    // so replaying that nested event only scans the same state again and can
-    // form an endless tools/change -> schemas -> tools/change loop.
+    // Restriction installation may synchronously notify the same controller.
+    // Name-only reads below do not materialize schemas; delayed notifications
+    // are harmless rechecks and identical deny sets do not reinstall a mask.
     if (syncing) return;
     syncing = true;
     try {
-      const denied = deniedObservedNames();
       const live = new Set(mountedAgentCtx?.agents?.list?.() ?? []);
+      const denied = live.size ? deniedObservedNames() : [];
+      if (denied === null) return;
       for (const agent of live) installRestriction(agent, denied);
       for (const agent of agentRestrictions.keys()) {
         if (!live.has(agent)) agentRestrictions.delete(agent);
@@ -385,7 +388,7 @@ export function createHostGovernanceController(ctx, { getRules, getRecords, logg
     capabilities() {
       return {
         executionGuard: Boolean(disposeGuard),
-        visibilityRestriction: agentsMounted && typeof ctx.tools?.restrict === 'function',
+        visibilityRestriction: agentsMounted && typeof ctx.tools?.restrict === 'function' && supportsHostToolNames(ctx.tools),
         activeAgents: mountedAgentCtx?.agents?.list?.().length ?? 0,
         restrictedAgents: agentRestrictions.size,
       };

package/lib/host-tool-names.js

@@ -0,0 +1,36 @@
+/**
+ * Name-only Host adapter. Never materialize schemas on the visibility event path.
+ *
+ * Upstream exposes definitions() on main. Published Host 0.1.2-rc.1 and
+ * 0.2.1-rc.2/rc.3 instead expose view() at runtime (private in their typings).
+ * Keep that legacy dependency here, read-only and shape-checked; never patch
+ * the Host or retain its definitions. Pinned real-Host tests cover the bridge.
+ */
+export function supportsHostToolNames(tools) {
+  return typeof tools?.definitions === 'function' || typeof tools?.view === 'function';
+}
+
+export function readHostToolNames(tools) {
+  let names;
+  if (typeof tools?.definitions === 'function') {
+    const definitions = tools.definitions();
+    if (!Array.isArray(definitions)) throw new Error('Host tools.definitions() 返回格式不兼容');
+    names = definitions.map((definition) => definition?.name);
+  } else if (typeof tools?.view === 'function') {
+    const view = tools.view();
+    if (!(view?.visible instanceof Map)
+        || !(view.knownNames instanceof Set)
+        || !(view.restrictableNames instanceof Set)) {
+      throw new Error('Host tools.view() 返回格式不兼容');
+    }
+    names = [...view.visible.keys()];
+  } else {
+    // A schema fallback would reintroduce #178. Callers retain existing masks
+    // on error and their independent execution guards remain active.
+    throw new Error('当前 Host 不支持轻量工具名称读取，无法刷新工具可见性限制');
+  }
+  if (names.some((name) => typeof name !== 'string' || !name)) {
+    throw new Error('Host 工具名称格式不兼容');
+  }
+  return [...new Set(names)].sort();
+}

package/lib/session-injection.js

@@ -7,6 +7,8 @@
  * another conversation or survive a DSH restart.
  */
 
+import { readHostToolNames, supportsHostToolNames } from './host-tool-names.js';
+
 export const INJECTION_MODES = ['always', 'session'];
 export const DEFAULT_SESSION_TOOL_TTL_MINUTES = 30;
 export const MAX_SESSION_TOOL_TTL_MINUTES = 30;
@@ -68,14 +70,13 @@ export function createSessionToolInjectionController(ctx, {
   }
 
   function observedPublicNames() {
-    if (typeof ctx.tools?.schemas !== 'function') return [];
     try {
-      return ctx.tools.schemas().map((schema) => schema?.name)
+      return readHostToolNames(ctx.tools)
         .filter((name) => typeof name === 'string' && recordForPublicName(name))
         .sort();
     } catch (error) {
       logger?.warn?.(`session injection read Host tools failed: ${error.message}`);
-      return [];
+      return null;
     }
   }
 
@@ -165,9 +166,15 @@ export function createSessionToolInjectionController(ctx, {
     if (disposed || !agentsMounted || syncing) return;
     syncing = true;
     try {
-      const observed = observedPublicNames();
-      const observedSet = new Set(observed);
       const live = new Set(mountedAgentCtx?.agents?.list?.() ?? []);
+      // Legacy/default always-on connections need no session visibility mask.
+      // Still reconcile empty masks and purge activations when the mode changes.
+      const needsRestriction = records().some((record) => (
+        record.enabled !== false && normalizeInjectionMode(record.injectionMode) === 'session'
+      ));
+      const observed = live.size && needsRestriction ? observedPublicNames() : [];
+      if (observed === null) return;
+      const observedSet = new Set(observed);
       for (const agent of live) {
         purgeState(agent, observedSet);
         installRestriction(agent, deniedNames(agent, observed));
@@ -223,7 +230,9 @@ export function createSessionToolInjectionController(ctx, {
     if (!isRecordVisible(record, agent)) throw new Error(`连接 "${record.name}" 不属于当前工作区`);
     const requested = uniqueNames(input.publicNames);
     if (requested.length === 0) throw new Error('必须指定至少一个精确 public tool name');
-    const observed = new Set(observedPublicNames());
+    const names = observedPublicNames();
+    if (names === null) throw new Error('Host 工具名称读取失败，暂不能激活工具');
+    const observed = new Set(names);
     for (const publicName of requested) {
       if (!observed.has(publicName)) throw new Error(`Host 尚未观察到工具 "${publicName}"`);
       const owner = recordForPublicName(publicName);
@@ -249,7 +258,9 @@ export function createSessionToolInjectionController(ctx, {
 
   function status(agent) {
     assertAgent(agent);
-    const observed = new Set(observedPublicNames());
+    const names = observedPublicNames();
+    if (names === null) throw new Error('Host 工具名称读取失败，暂不能读取会话工具状态');
+    const observed = new Set(names);
     purgeState(agent, observed);
     const state = stateFor(agent);
     const active = [...(state?.activations ?? new Map()).entries()].map(([publicName, activation]) => ({
@@ -375,7 +386,7 @@ export function createSessionToolInjectionController(ctx, {
   function capabilities() {
     return {
       executionGuard: Boolean(disposeGuard),
-      visibilityRestriction: agentsMounted && typeof ctx.tools?.restrict === 'function',
+      visibilityRestriction: agentsMounted && typeof ctx.tools?.restrict === 'function' && supportsHostToolNames(ctx.tools),
       activeAgents: mountedAgentCtx?.agents?.list?.().length ?? 0,
       restrictedAgents: restrictions.size,
       maxTtlMinutes: MAX_SESSION_TOOL_TTL_MINUTES,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-mcp-connector",
-  "version": "0.2.77",
+  "version": "0.2.79",
   "description": "DeepSeek Harness MCP Connector: connect servers, search tools across active connections, and troubleshoot discovery. Includes a continuously updated catalog; supports OAuth 2.0 PKCE, API keys, Streamable HTTP/stdio, and mcpServers JSON import.",
   "type": "module",
   "main": "lib/index.js",