dsh-mcp-connector 0.2.78 → 0.2.79

package/CHANGELOG.md

@@ -2,6 +2,20 @@
 
 本项目遵循 [Keep a Changelog](https://keepachangelog.com/zh-CN/1.1.0/)；首个公开版本从 `0.1.0` 开始。
 
+## [0.2.79] - 2026-10-24
+
+### Fixed
+
+- #178：治理、项目作用域和会话注入刷新改为轻量名称读取，不再调用 tools.schemas() 深克隆参数，切断 schema 读取副作用引起的延迟事件回路。
+- 默认全局/always 且无 deny 或停用连接时跳过清单读取；项目隔离每轮只读取一次，不按 Agent 数重复。
+- 保留执行 guard、工具增删感知和权限交集；名称读取失败时保留已有限制，不把错误当空清单，也不回退 schema 扫描。
+
+### Compatibility and verification
+
+- 优先使用上游公开 definitions()；已发布旧 Host 通过集中、只读、形状校验的内部 view() 兼容层读取名称。内部接口属于兼容风险，增加 Windows/Linux × Host 0.2.1-rc.2/rc.3 契约门禁；不修改宿主安装。
+- 增加同步、微任务、下一轮事件交付及残余 schema 反馈回路回归。详见 docs/ACCEPTANCE-178-20261024.md。
+- 本次是工具运行时机制修复；报告者 Windows Desktop UI 的原始卡顿与 1.29 亿次调用对照仍需复测，#178 保留跟踪。不包含延期的国际化或其他草案功能。
+
 ## [0.2.78] - 2026-10-22
 
 ### Fixed

package/README.en.md

@@ -225,7 +225,7 @@ npm run dev:ui
 
 Every Registry merge regenerates `catalog-stats.json`; an hourly workflow in this repository synchronizes the Chinese and English product copy plus a local stats snapshot. The static npm README updates with package releases, while the live badges above read the Registry directly and therefore stay current without another npm release.
 
-The current public version is [`dsh-mcp-connector@0.2.78`](https://www.npmjs.com/package/dsh-mcp-connector), with [GitHub Release v0.2.78](https://github.com/duhu2000/dsh-mcp-connector/releases/tag/v0.2.78).
+The current public version is [`dsh-mcp-connector@0.2.79`](https://www.npmjs.com/package/dsh-mcp-connector), with [GitHub Release v0.2.79](https://github.com/duhu2000/dsh-mcp-connector/releases/tag/v0.2.79).
 
 See [CHANGELOG.md](CHANGELOG.md) for version history and [docs/DESKTOP-E2E.md](docs/DESKTOP-E2E.md) for the Desktop release checklist.
 

package/README.md

@@ -220,7 +220,7 @@ npm run dev:ui
 
 公共 Registry 每次合并后会生成 `catalog-stats.json`；本仓库的定时工作流每小时同步中英文介绍和统计快照。npm 页面中的静态正文随版本发布更新，上方动态统计徽标则直接读取 Registry，可在不发布新 npm 版本时保持实时数量一致。
 
-当前公开版本为 [`dsh-mcp-connector@0.2.78`](https://www.npmjs.com/package/dsh-mcp-connector)，对应 [GitHub Release v0.2.78](https://github.com/duhu2000/dsh-mcp-connector/releases/tag/v0.2.78)。
+当前公开版本为 [`dsh-mcp-connector@0.2.79`](https://www.npmjs.com/package/dsh-mcp-connector)，对应 [GitHub Release v0.2.79](https://github.com/duhu2000/dsh-mcp-connector/releases/tag/v0.2.79)。
 
 版本能力与变更记录见 [CHANGELOG.md](CHANGELOG.md)。
 Desktop 发版回归见 [docs/DESKTOP-E2E.md](docs/DESKTOP-E2E.md)。

package/lib/connection-scopes.js

@@ -7,6 +7,8 @@
  * credential.
  */
 
+import { readHostToolNames, supportsHostToolNames } from './host-tool-names.js';
+
 export const CONNECTION_SCOPE_HISTORY_LIMIT = 20;
 export const CONNECTION_SCOPE_TYPES = ['global', 'project'];
 
@@ -280,19 +282,18 @@ export function createHostScopeController(ctx, {
     : null;
 
   function observedPublicNames() {
-    if (typeof ctx.tools?.schemas !== 'function') return [];
     try {
-      return ctx.tools.schemas().map((schema) => schema?.name)
+      return readHostToolNames(ctx.tools)
         .filter((name) => typeof name === 'string' && recordForPublicName(name))
         .sort();
     } catch (error) {
       logger?.warn?.(`scope read Host tools failed: ${error.message}`);
-      return [];
+      return null;
     }
   }
 
-  function installRestriction(agent) {
-    const denied = observedPublicNames().filter((name) => {
+  function installRestriction(agent, observed) {
+    const denied = observed.filter((name) => {
       const record = recordForPublicName(name);
       return record && !visible(record, agent);
     });
@@ -315,15 +316,21 @@ export function createHostScopeController(ctx, {
   let syncing = false;
   function refresh() {
     if (disposed || !agentsMounted) return;
-    // Reading lazy Host schemas or replacing a restriction may synchronously
-    // emit tools/change. Ignore that nested notification: replaying it scans
-    // the same single-threaded state and can otherwise keep the event loop in
-    // a permanent tools/change cycle with plugins that re-register tools.
+    // Ignore synchronous restriction notifications while reconciling. Name-only
+    // reads avoid schema side effects; delayed events still observe real changes.
     if (syncing) return;
     syncing = true;
     try {
       const live = new Set(mountedAgentCtx?.agents?.list?.() ?? []);
-      for (const agent of live) installRestriction(agent);
+      // Global bindings cannot hide tools. When project isolation is needed,
+      // enumerate once per refresh, not once per live Agent.
+      const currentBindings = bindings();
+      const needsRestriction = records().some((record) => (
+        !bindingForConnection(currentBindings, record.key).global
+      ));
+      const observed = live.size && needsRestriction ? observedPublicNames() : [];
+      if (observed === null) return;
+      for (const agent of live) installRestriction(agent, observed);
       for (const agent of restrictions.keys()) if (!live.has(agent)) restrictions.delete(agent);
     } finally {
       syncing = false;
@@ -363,7 +370,7 @@ export function createHostScopeController(ctx, {
     capabilities() {
       return {
         executionGuard: Boolean(disposeGuard),
-        visibilityRestriction: agentsMounted && typeof ctx.tools?.restrict === 'function',
+        visibilityRestriction: agentsMounted && typeof ctx.tools?.restrict === 'function' && supportsHostToolNames(ctx.tools),
         workspaceRegistry: typeof workspaceIdForAgent === 'function',
         restrictedAgents: restrictions.size,
       };

package/lib/governance.js

@@ -5,6 +5,7 @@
  * 连接记录的 lifecycle disabled 是物理下线状态，任何 allow 规则都不能覆盖。
  */
 import { createHash } from 'node:crypto';
+import { readHostToolNames, supportsHostToolNames } from './host-tool-names.js';
 
 export const GOVERNANCE_HISTORY_LIMIT = 20;
 export const GOVERNANCE_SCOPES = ['connection', 'server', 'tool'];
@@ -302,20 +303,23 @@ export function createHostGovernanceController(ctx, { getRules, getRecords, logg
     : null;
 
   function observedPublicNames() {
-    if (typeof ctx.tools?.schemas !== 'function') return [];
     try {
-      return ctx.tools.schemas()
-        .map((schema) => schema?.name)
+      return readHostToolNames(ctx.tools)
         .filter((name) => typeof name === 'string' && targetForPublicName(name))
         .sort();
     } catch (error) {
       logger?.warn?.(`governance read Host tools failed: ${error.message}`);
-      return [];
+      return null;
     }
   }
 
   function deniedObservedNames() {
-    return observedPublicNames().filter((name) => inspect(name)?.policy.effect === 'deny');
+    // The default policy cannot deny anything. Avoid deep-cloning every Host
+    // schema just to prove that the resulting restriction would be empty.
+    // Disabled connections still require enforcement even without a deny rule.
+    if (!records().some((record) => record.enabled === false)
+        && !rules().some((rule) => rule.effect === 'deny')) return [];
+    return observedPublicNames()?.filter((name) => inspect(name)?.policy.effect === 'deny') ?? null;
   }
 
   function installRestriction(agent, denied) {
@@ -338,16 +342,15 @@ export function createHostGovernanceController(ctx, { getRules, getRecords, logg
   let syncing = false;
   function syncRestrictions() {
     if (disposed || !agentsMounted) return;
-    // schemas()/restrict() may synchronously cause another tools/change while
-    // Host plugins materialize lazy schemas or re-register equivalent tools.
-    // JavaScript cannot interleave an unrelated external change in this stack,
-    // so replaying that nested event only scans the same state again and can
-    // form an endless tools/change -> schemas -> tools/change loop.
+    // Restriction installation may synchronously notify the same controller.
+    // Name-only reads below do not materialize schemas; delayed notifications
+    // are harmless rechecks and identical deny sets do not reinstall a mask.
     if (syncing) return;
     syncing = true;
     try {
-      const denied = deniedObservedNames();
       const live = new Set(mountedAgentCtx?.agents?.list?.() ?? []);
+      const denied = live.size ? deniedObservedNames() : [];
+      if (denied === null) return;
       for (const agent of live) installRestriction(agent, denied);
       for (const agent of agentRestrictions.keys()) {
         if (!live.has(agent)) agentRestrictions.delete(agent);
@@ -385,7 +388,7 @@ export function createHostGovernanceController(ctx, { getRules, getRecords, logg
     capabilities() {
       return {
         executionGuard: Boolean(disposeGuard),
-        visibilityRestriction: agentsMounted && typeof ctx.tools?.restrict === 'function',
+        visibilityRestriction: agentsMounted && typeof ctx.tools?.restrict === 'function' && supportsHostToolNames(ctx.tools),
         activeAgents: mountedAgentCtx?.agents?.list?.().length ?? 0,
         restrictedAgents: agentRestrictions.size,
       };

package/lib/host-tool-names.js

@@ -0,0 +1,36 @@
+/**
+ * Name-only Host adapter. Never materialize schemas on the visibility event path.
+ *
+ * Upstream exposes definitions() on main. Published Host 0.1.2-rc.1 and
+ * 0.2.1-rc.2/rc.3 instead expose view() at runtime (private in their typings).
+ * Keep that legacy dependency here, read-only and shape-checked; never patch
+ * the Host or retain its definitions. Pinned real-Host tests cover the bridge.
+ */
+export function supportsHostToolNames(tools) {
+  return typeof tools?.definitions === 'function' || typeof tools?.view === 'function';
+}
+
+export function readHostToolNames(tools) {
+  let names;
+  if (typeof tools?.definitions === 'function') {
+    const definitions = tools.definitions();
+    if (!Array.isArray(definitions)) throw new Error('Host tools.definitions() 返回格式不兼容');
+    names = definitions.map((definition) => definition?.name);
+  } else if (typeof tools?.view === 'function') {
+    const view = tools.view();
+    if (!(view?.visible instanceof Map)
+        || !(view.knownNames instanceof Set)
+        || !(view.restrictableNames instanceof Set)) {
+      throw new Error('Host tools.view() 返回格式不兼容');
+    }
+    names = [...view.visible.keys()];
+  } else {
+    // A schema fallback would reintroduce #178. Callers retain existing masks
+    // on error and their independent execution guards remain active.
+    throw new Error('当前 Host 不支持轻量工具名称读取，无法刷新工具可见性限制');
+  }
+  if (names.some((name) => typeof name !== 'string' || !name)) {
+    throw new Error('Host 工具名称格式不兼容');
+  }
+  return [...new Set(names)].sort();
+}

package/lib/session-injection.js

@@ -7,6 +7,8 @@
  * another conversation or survive a DSH restart.
  */
 
+import { readHostToolNames, supportsHostToolNames } from './host-tool-names.js';
+
 export const INJECTION_MODES = ['always', 'session'];
 export const DEFAULT_SESSION_TOOL_TTL_MINUTES = 30;
 export const MAX_SESSION_TOOL_TTL_MINUTES = 30;
@@ -68,14 +70,13 @@ export function createSessionToolInjectionController(ctx, {
   }
 
   function observedPublicNames() {
-    if (typeof ctx.tools?.schemas !== 'function') return [];
     try {
-      return ctx.tools.schemas().map((schema) => schema?.name)
+      return readHostToolNames(ctx.tools)
         .filter((name) => typeof name === 'string' && recordForPublicName(name))
         .sort();
     } catch (error) {
       logger?.warn?.(`session injection read Host tools failed: ${error.message}`);
-      return [];
+      return null;
     }
   }
 
@@ -165,9 +166,15 @@ export function createSessionToolInjectionController(ctx, {
     if (disposed || !agentsMounted || syncing) return;
     syncing = true;
     try {
-      const observed = observedPublicNames();
-      const observedSet = new Set(observed);
       const live = new Set(mountedAgentCtx?.agents?.list?.() ?? []);
+      // Legacy/default always-on connections need no session visibility mask.
+      // Still reconcile empty masks and purge activations when the mode changes.
+      const needsRestriction = records().some((record) => (
+        record.enabled !== false && normalizeInjectionMode(record.injectionMode) === 'session'
+      ));
+      const observed = live.size && needsRestriction ? observedPublicNames() : [];
+      if (observed === null) return;
+      const observedSet = new Set(observed);
       for (const agent of live) {
         purgeState(agent, observedSet);
         installRestriction(agent, deniedNames(agent, observed));
@@ -223,7 +230,9 @@ export function createSessionToolInjectionController(ctx, {
     if (!isRecordVisible(record, agent)) throw new Error(`连接 "${record.name}" 不属于当前工作区`);
     const requested = uniqueNames(input.publicNames);
     if (requested.length === 0) throw new Error('必须指定至少一个精确 public tool name');
-    const observed = new Set(observedPublicNames());
+    const names = observedPublicNames();
+    if (names === null) throw new Error('Host 工具名称读取失败，暂不能激活工具');
+    const observed = new Set(names);
     for (const publicName of requested) {
       if (!observed.has(publicName)) throw new Error(`Host 尚未观察到工具 "${publicName}"`);
       const owner = recordForPublicName(publicName);
@@ -249,7 +258,9 @@ export function createSessionToolInjectionController(ctx, {
 
   function status(agent) {
     assertAgent(agent);
-    const observed = new Set(observedPublicNames());
+    const names = observedPublicNames();
+    if (names === null) throw new Error('Host 工具名称读取失败，暂不能读取会话工具状态');
+    const observed = new Set(names);
     purgeState(agent, observed);
     const state = stateFor(agent);
     const active = [...(state?.activations ?? new Map()).entries()].map(([publicName, activation]) => ({
@@ -375,7 +386,7 @@ export function createSessionToolInjectionController(ctx, {
   function capabilities() {
     return {
       executionGuard: Boolean(disposeGuard),
-      visibilityRestriction: agentsMounted && typeof ctx.tools?.restrict === 'function',
+      visibilityRestriction: agentsMounted && typeof ctx.tools?.restrict === 'function' && supportsHostToolNames(ctx.tools),
       activeAgents: mountedAgentCtx?.agents?.list?.().length ?? 0,
       restrictedAgents: restrictions.size,
       maxTtlMinutes: MAX_SESSION_TOOL_TTL_MINUTES,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-mcp-connector",
-  "version": "0.2.78",
+  "version": "0.2.79",
   "description": "DeepSeek Harness MCP Connector: connect servers, search tools across active connections, and troubleshoot discovery. Includes a continuously updated catalog; supports OAuth 2.0 PKCE, API keys, Streamable HTTP/stdio, and mcpServers JSON import.",
   "type": "module",
   "main": "lib/index.js",