dsh-mcp-connector 0.2.37 → 0.2.39

package/CHANGELOG.md

@@ -4,6 +4,33 @@
 
 ## [Unreleased]
 
+## [0.2.39] - 2026-09-08
+
+### Fixed
+
+- 从“设置 → 插件 → 插件配置”快捷打开 MCP连接器时，将连接器弹框 Portal 到页面根层并显示在设置弹框之上；关闭后仍返回原设置位置。
+- MCP连接器位于设置弹框上方时会优先处理 Escape，只关闭最上层连接器弹框，不连带关闭底层设置弹框。
+
+### Verification
+
+- 206 项自动测试、lint、版本/营销元数据/商店截图门禁和 npm 发布包白名单/敏感内容扫描全部通过；新增覆盖连接器弹框根层 Portal、层级与嵌套弹框 Escape 行为。
+
+## [0.2.38] - 2026-09-08
+
+### Added
+
+- 在 `设置 → 插件 → 插件配置` 新增“MCP连接器”卡片，可按当前 DSH profile 显示或隐藏侧边栏入口。
+- 设置卡片新增“打开 MCP连接器”快捷动作；入口隐藏后仍可随时打开、连接和管理 MCP Server，关闭弹框后返回原操作位置。
+
+### Changed
+
+- 侧边栏可见性保存后即时生效；仅隐藏入口，不影响插件、连接、工具、后台刷新或对话内调用。
+- Settings Host 与客户端服务均采用可选注入；旧版 DSH 或服务暂不可用时安全回退为显示侧边栏，避免升级后失去入口。
+
+### Verification
+
+- 205 项自动测试、lint、版本/营销元数据/商店截图门禁和 npm 发布包白名单/敏感内容扫描全部通过；新增覆盖 Host 设置注册、客户端持久化、快捷打开、隐藏态零挂载、键盘焦点恢复和兼容回退。
+
 ## [0.2.37] - 2026-09-06
 
 ### Changed
@@ -580,7 +607,9 @@
 - 外部 URL 与导入 Header 执行安全校验。
 - iframe 消息校验同源和消息来源。
 
-[Unreleased]: https://github.com/duhu2000/dsh-mcp-connector/compare/v0.2.37...HEAD
+[Unreleased]: https://github.com/duhu2000/dsh-mcp-connector/compare/v0.2.39...HEAD
+[0.2.39]: https://github.com/duhu2000/dsh-mcp-connector/compare/v0.2.38...v0.2.39
+[0.2.38]: https://github.com/duhu2000/dsh-mcp-connector/compare/v0.2.37...v0.2.38
 [0.2.37]: https://github.com/duhu2000/dsh-mcp-connector/compare/v0.2.36...v0.2.37
 [0.2.36]: https://github.com/duhu2000/dsh-mcp-connector/compare/v0.2.35...v0.2.36
 [0.2.35]: https://github.com/duhu2000/dsh-mcp-connector/compare/v0.2.34...v0.2.35

package/README.en.md

@@ -26,7 +26,7 @@ Manage MCP connections from different providers in one place inside DeepSeek Har
 dsh plugin --profile web add dsh-mcp-connector
 ```
 
-Fully restart DeepSeek Harness Desktop or `dsh web` after installation or upgrade, then open **MCP Connector** in the primary sidebar.
+Fully restart DeepSeek Harness Desktop or `dsh web` after installation or upgrade, then open **MCP Connector** in the primary sidebar, or open it directly from **Settings → Plugins → Plugin Configuration → MCP Connector**.
 
 ![16-second MCP Connector walkthrough](https://raw.githubusercontent.com/duhu2000/dsh-mcp-connector/main/docs/demo.gif)
 
@@ -49,6 +49,7 @@ If the plugin helps you connect an MCP server faster, consider [starring the rep
 ## Features
 
 - A primary sidebar entry below New Conversation and above workspaces/conversations, with a public footer-slot fallback for incompatible DSH DOM versions.
+- A profile-wide sidebar visibility preference; even when the shortcut is hidden, the existing connector dialog remains available from **Settings → Plugins → Plugin Configuration → MCP Connector**.
 - Searchable Marketplace and Installed views; the default Marketplace groups cards into Featured plus nine business-category sections, previews four cards per section, keeps the category bar visible while scrolling, and shows every card when a single category is selected.
 - OAuth 2.0 Authorization Code with PKCE, including DCR public clients and `client_secret_post` / `client_secret_basic`; API key/Bearer/unauthenticated HTTP configuration, stdio local-process configuration, and `mcpServers` JSON import.
 - Installation from a credential-free connector descriptor URL.
@@ -97,7 +98,7 @@ Run the same command again to upgrade. Fully quit and restart DeepSeek Harness D
 
 ## Usage
 
-1. Select **MCP Connector** in the primary sidebar.
+1. Select **MCP Connector** in the primary sidebar, or choose **Open MCP Connector** from **Settings → Plugins → Plugin Configuration → MCP Connector**.
 2. Choose a connector, confirm **Current project** or **All projects (global)**, and complete authorization or configuration.
 3. Open its details to inspect tools or send an example prompt to a new conversation draft.
 4. Use Installed or the conversation tools to enable, disable, inspect, or disconnect a connection.
@@ -139,10 +140,13 @@ The default bundle configuration is in `cordis.patch.yml`:
     entryPrefix: mcp
     refreshSkewMs: 300000
     openBrowser: true
+    showSidebarEntry: true
 ```
 
 Set `catalogUrl` to an empty string for an explicitly offline/private setup. A custom non-default URL is used as-is and does not fall back to the public registry.
 
+`showSidebarEntry` defaults to `true`. Users can override it from the DSH plugin configuration page; turning it off hides only the shortcut and does not disable the connector, connected MCP servers, or tools.
+
 ## Compatibility and responsibility boundary
 
 | Area | Current boundary |
@@ -171,7 +175,7 @@ npm run dev:ui
 
 Every Registry merge regenerates `catalog-stats.json`; an hourly workflow in this repository synchronizes the Chinese and English product copy plus a local stats snapshot. The static npm README updates with package releases, while the live badges above read the Registry directly and therefore stay current without another npm release.
 
-The current public version is [`dsh-mcp-connector@0.2.37`](https://www.npmjs.com/package/dsh-mcp-connector), with [GitHub Release v0.2.37](https://github.com/duhu2000/dsh-mcp-connector/releases/tag/v0.2.37).
+The current public version is [`dsh-mcp-connector@0.2.39`](https://www.npmjs.com/package/dsh-mcp-connector), with [GitHub Release v0.2.39](https://github.com/duhu2000/dsh-mcp-connector/releases/tag/v0.2.39).
 
 See [CHANGELOG.md](CHANGELOG.md) for version history and [docs/DESKTOP-E2E.md](docs/DESKTOP-E2E.md) for the Desktop release checklist.
 

package/README.md

@@ -26,7 +26,7 @@
 dsh plugin --profile web add dsh-mcp-connector
 ```
 
-安装或升级后完全重启 DeepSeek Harness Desktop 或 `dsh web`，然后打开左侧「🧩 MCP连接器」。
+安装或升级后完全重启 DeepSeek Harness Desktop 或 `dsh web`，然后打开左侧「🧩 MCP连接器」；也可从“设置 → 插件 → 插件配置 → MCP连接器”直接打开。
 
 ![MCP 连接器 16 秒演示](https://raw.githubusercontent.com/duhu2000/dsh-mcp-connector/main/docs/demo.gif)
 
@@ -49,6 +49,7 @@ dsh plugin --profile web add dsh-mcp-connector
 ## 功能
 
 - 左侧主导航入口：目标位置为“新会话”下方、“工作区/会话列表”上方；若 DSH DOM 结构不兼容，自动回退到底部公开插槽。
+- 侧边栏入口可按当前 profile 隐藏；隐藏后仍可从“设置 → 插件 → 插件配置 → MCP连接器”临时打开现有连接器弹框，用完即关。
 - 图形化市场：默认“全部”按推荐与 9 类业务分类分章节展示，每章先展示 4 张并可展开；分类栏固定可见，单分类页展示全部卡片。
 - 图形化添加：手动 HTTP/stdio、`mcpServers` JSON、连接器描述 URL 三种入口，失败时保留表单并给出修复建议。
 - 连接器详情：精选 Prompt 优先展示，点击可带入 DSH 新会话；工具按 Server 分组，支持描述、搜索和独立滚动。
@@ -99,7 +100,7 @@ bash <(curl -fsSL https://raw.githubusercontent.com/duhu2000/dsh-mcp-connector/m
 
 ## 使用
 
-1. 点击左侧“🧩 MCP连接器”。
+1. 点击左侧“🧩 MCP连接器”，或从“设置 → 插件 → 插件配置 → MCP连接器”点击“打开 MCP连接器”。
 2. 在市场中选择连接器，确认“当前项目”或“所有项目（全局）”，再完成授权或配置。
 3. 打开卡片详情，可点击示例 Prompt 的发送按钮，在当前工作区创建/复用空白会话并写入草稿。
 4. 在“已安装”或对话工具中查看、停用、恢复或断开连接。
@@ -135,10 +136,13 @@ Bundle 默认配置位于 `cordis.patch.yml`：
     entryPrefix: mcp
     refreshSkewMs: 300000
     openBrowser: true
+    showSidebarEntry: true
 ```
 
 `catalogUrl` 默认通过 jsDelivr CDN 读取公共 [dsh-mcp-connector-registry](https://github.com/duhu2000/dsh-mcp-connector-registry)，支持 ETag/TTL 缓存；主源失败时自动尝试 GitHub raw 备用源，再回退到上次缓存或随包内置目录。jsDelivr 的分支 URL 可能存在缓存延迟，因此 Registry 合并后的新卡片不保证秒级出现。需要离线/私有模式时可将 `catalogUrl` 显式设为空字符串；显式配置其他目录 URL 时不会自动切换到公共备用源。
 
+`showSidebarEntry` 默认为 `true`。用户可在 DSH 插件配置页覆盖该值；关闭后只隐藏侧边栏快捷入口，不停用连接器、已连接 MCP Server 或工具。
+
 ## 兼容性与责任边界
 
 | 项目 | 当前边界 |
@@ -167,7 +171,7 @@ npm run dev:ui
 
 公共 Registry 每次合并后会生成 `catalog-stats.json`；本仓库的定时工作流每小时同步中英文介绍和统计快照。npm 页面中的静态正文随版本发布更新，上方动态统计徽标则直接读取 Registry，可在不发布新 npm 版本时保持实时数量一致。
 
-当前公开版本为 [`dsh-mcp-connector@0.2.37`](https://www.npmjs.com/package/dsh-mcp-connector)，对应 [GitHub Release v0.2.37](https://github.com/duhu2000/dsh-mcp-connector/releases/tag/v0.2.37)。
+当前公开版本为 [`dsh-mcp-connector@0.2.39`](https://www.npmjs.com/package/dsh-mcp-connector)，对应 [GitHub Release v0.2.39](https://github.com/duhu2000/dsh-mcp-connector/releases/tag/v0.2.39)。
 
 版本能力与变更记录见 [CHANGELOG.md](CHANGELOG.md)。
 Desktop 发版回归见 [docs/DESKTOP-E2E.md](docs/DESKTOP-E2E.md)。

package/cordis.patch.yml

@@ -10,3 +10,4 @@
         entryPrefix: 'mcp'
         refreshSkewMs: 300000
         openBrowser: true
+        showSidebarEntry: true

package/docs/USER-GUIDE.md

@@ -34,7 +34,12 @@ dsh web
 
 ## 2. 打开 MCP连接器
 
-重启后，在 DSH 左侧主导航点击“🧩 MCP连接器”。入口通常位于“新会话”下方、工作区/会话列表上方；如果当前 DSH 版本没有对应的公开插槽，入口会回退到左侧底部。
+重启后，可以用以下任一方式打开：
+
+- 在 DSH 左侧主导航点击“🧩 MCP连接器”。入口通常位于“新会话”下方、工作区/会话列表上方；如果当前 DSH 版本没有对应的公开插槽，入口会回退到左侧底部。
+- 打开“设置 → 插件 → 插件配置 → MCP连接器”，展开卡片并点击“打开 MCP连接器”。该按钮直接复用同一个连接器弹框，不要求侧边栏入口可见；关闭弹框后仍回到设置页。
+
+如需腾出侧边栏空间，可在同一配置卡片关闭“在侧边栏显示 MCP连接器”。该偏好作用于当前 DSH profile，并在重启后保留；它只隐藏快捷入口，不停用插件、已连接 MCP Server 或工具。隐藏后可以随时从该配置卡片直接打开连接器，或重新开启入口。旧版 DSH 没有 Settings 能力时，插件保持入口可见，不会因设置功能进入 Safe Mode。
 
 页面顶部提供：
 

package/lib/client.js

@@ -23,6 +23,9 @@ window.__ModuleLoader__.load({
 		const VERSION_CHECK_RETRY_MS = 5 * 60 * 1e3;
 		const NPM_PACKAGE_URL = "https://www.npmjs.com/package/dsh-mcp-connector";
 		const PLUGIN_PACKAGE_NAME = "dsh-mcp-connector";
+		const CONNECTOR_SETTINGS_NAMESPACE = "mcp-connector";
+		const SHOW_SIDEBAR_ENTRY_FIELD = "showSidebarEntry";
+		const CONNECTOR_MODAL_Z_INDEX = 1100;
 		const UPDATE_PROVIDER_OPERATION_POLL_MS = 1e3;
 		const UPDATE_PROVIDER_ADAPTERS = Object.freeze([
 			createHttpUpdateProviderAdapter({
@@ -110,6 +113,9 @@ window.__ModuleLoader__.load({
 .mcpConnectorTopEntry[data-wide="false"] .mcpConnectorLauncher {
 	margin: 0 0 8px;
 }
+`;
+		const OVERLAY_STYLE_ID = "dsh-mcp-connector-overlay";
+		const overlayCss = `
 
 .mcpConnectorMarketPanel { background: #ffffff; color: #111827; }
 .mcpConnectorMarketHeader { border-color: #e5e7eb; }
@@ -218,19 +224,189 @@ window.__ModuleLoader__.load({
 	.mcpConnectorMarketClose:hover,
 	.mcpConnectorMarketClose:focus-visible { background: #30343d !important; color: #ffffff; }
 }
+`;
+		const SETTINGS_STYLE_ID = "dsh-mcp-connector-settings";
+		const settingsCss = `
+.mcpConnectorSettingsCard {
+	border: 1px solid var(--dsw-alias-border-l2, rgba(127, 127, 127, 0.28));
+	background: var(--dsw-alias-bg-layer-3, transparent);
+	border-radius: 12px;
+	list-style: none;
+}
+.mcpConnectorSettingsCard[data-open="true"] {
+	background: var(--dsw-alias-bg-layer-2, rgba(127, 127, 127, 0.06));
+	border-color: var(--dsw-alias-label-dimmed, rgba(127, 127, 127, 0.5));
+}
+.mcpConnectorSettingsHeader {
+	appearance: none;
+	display: flex;
+	align-items: center;
+	gap: 12px;
+	width: 100%;
+	padding: 14px 16px;
+	border: 0;
+	border-radius: 12px;
+	color: inherit;
+	background: transparent;
+	font: inherit;
+	text-align: left;
+	cursor: pointer;
+}
+.mcpConnectorSettingsHeader:focus-visible,
+.mcpConnectorSettingsButton:focus-visible,
+.mcpConnectorSettingsSwitch:focus-visible {
+	outline: 2px solid var(--dsw-alias-brand-primary, currentColor);
+	outline-offset: 2px;
+}
+.mcpConnectorSettingsHeadText {
+	display: flex;
+	flex: 1;
+	flex-direction: column;
+	gap: 4px;
+	min-width: 0;
+}
+.mcpConnectorSettingsName {
+	color: var(--dsw-alias-label-primary, inherit);
+	font-size: 15px;
+	font-weight: 600;
+	line-height: 1.4;
+}
+.mcpConnectorSettingsDescription,
+.mcpConnectorSettingsHint,
+.mcpConnectorSettingsState {
+	color: var(--dsw-alias-label-tertiary, rgba(127, 127, 127, 0.9));
+	font-size: 13px;
+	line-height: 1.5;
+}
+.mcpConnectorSettingsChevron {
+	flex: none;
+	color: var(--dsw-alias-label-tertiary, currentColor);
+	font-size: 16px;
+	transition: transform 0.16s;
+}
+.mcpConnectorSettingsCard[data-open="true"] .mcpConnectorSettingsChevron {
+	transform: rotate(180deg);
+}
+.mcpConnectorSettingsBody {
+	margin: 0 16px;
+	padding: 14px 0 10px;
+	border-top: 1px solid var(--dsw-alias-border-l2, rgba(127, 127, 127, 0.28));
+}
+.mcpConnectorSettingsRow {
+	display: grid;
+	grid-template-columns: minmax(0, 1fr) auto;
+	align-items: center;
+	gap: 18px;
+}
+.mcpConnectorSettingsLabel {
+	display: block;
+	color: var(--dsw-alias-label-primary, inherit);
+	font-size: 14px;
+	font-weight: 600;
+}
+.mcpConnectorSettingsHint {
+	display: block;
+	margin-top: 5px;
+}
+.mcpConnectorSettingsSwitch {
+	position: relative;
+	appearance: none;
+	width: 42px;
+	height: 24px;
+	margin: 0;
+	border: 0;
+	border-radius: 999px;
+	background: var(--dsw-alias-fill-secondary, rgba(127, 127, 127, 0.35));
+	cursor: pointer;
+	transition: background 0.16s;
+}
+.mcpConnectorSettingsSwitch::after {
+	position: absolute;
+	top: 3px;
+	left: 3px;
+	width: 18px;
+	height: 18px;
+	border-radius: 50%;
+	background: #ffffff;
+	box-shadow: 0 1px 3px rgba(0, 0, 0, 0.28);
+	content: "";
+	transition: transform 0.16s;
+}
+.mcpConnectorSettingsSwitch:checked {
+	background: var(--dsw-alias-state-success, #16a34a);
+}
+.mcpConnectorSettingsSwitch:checked::after {
+	transform: translateX(18px);
+}
+.mcpConnectorSettingsSwitch:disabled {
+	cursor: default;
+	opacity: 0.55;
+}
+.mcpConnectorSettingsFooter {
+	display: flex;
+	align-items: center;
+	flex-wrap: wrap;
+	gap: 8px;
+	margin-top: 14px;
+	padding-top: 12px;
+	border-top: 1px solid var(--dsw-alias-border-l2, rgba(127, 127, 127, 0.28));
+}
+.mcpConnectorSettingsState {
+	flex: 1 1 210px;
+	margin: 0;
+}
+.mcpConnectorSettingsState[data-tone="error"] {
+	color: var(--dsw-alias-label-error, #b91c1c);
+}
+.mcpConnectorSettingsButton {
+	appearance: none;
+	padding: 6px 12px;
+	border: 1px solid var(--dsw-alias-border-l2, rgba(127, 127, 127, 0.28));
+	border-radius: 8px;
+	color: var(--dsw-alias-label-secondary, inherit);
+	background: transparent;
+	font: inherit;
+	font-size: 13px;
+	cursor: pointer;
+}
+.mcpConnectorSettingsButton[data-primary="true"] {
+	border-color: transparent;
+	color: var(--dsw-alias-bg-layer-3, #ffffff);
+	background: var(--dsw-alias-label-primary, #111827);
+}
+.mcpConnectorSettingsButton:disabled {
+	cursor: default;
+	opacity: 0.45;
+}
+@media (max-width: 520px) {
+	.mcpConnectorSettingsRow { grid-template-columns: 1fr; }
+	.mcpConnectorSettingsFooter .mcpConnectorSettingsButton { flex: 1 1 140px; }
+}
 `;
 		const SIDEBAR_WORKSPACES_SELECTOR = '[data-slot="sidebar.workspaces"]';
 		const TOP_MOUNT_SELECTOR = '[data-mcp-connector-top-mount="true"]';
 
-		function installSidebarStyles() {
-			if (document.querySelector(`style[data-plugin="${SIDEBAR_STYLE_ID}"]`) !== null) return () => {};
+		function installStyles(id, css) {
+			if (document.querySelector(`style[data-plugin="${id}"]`) !== null) return () => {};
 			const style = document.createElement("style");
-			style.dataset.plugin = SIDEBAR_STYLE_ID;
-			style.textContent = sidebarCss;
+			style.dataset.plugin = id;
+			style.textContent = css;
 			document.head.append(style);
 			return () => { style.remove(); };
 		}
 
+		function installSidebarStyles() {
+			return installStyles(SIDEBAR_STYLE_ID, sidebarCss);
+		}
+
+		function installOverlayStyles() {
+			return installStyles(OVERLAY_STYLE_ID, overlayCss);
+		}
+
+		function installSettingsStyles() {
+			return installStyles(SETTINGS_STYLE_ID, settingsCss);
+		}
+
 		/**
 		 * DSH rc.7 没有公开的「新会话与工作区之间」插槽。插件仍注册在公开的
 		 * footer list slot 中保证生命周期与降级可用，再把实际按钮 Portal 到
@@ -548,17 +724,24 @@ window.__ModuleLoader__.load({
 		 * 包名或客户端模块到达顺序让整个 Desktop 进入 Safe Mode。
 		 */
 		function createMarketViewStore() {
+			let sidebarVisible = true;
+			const liveActions = new Set();
 			const spec = {
-				init: () => ({ open: false, detailOpen: false }),
+				init: () => ({ open: false, detailOpen: false, sidebarVisible }),
 				actions: {
 					open: (draft) => { draft.open = true; },
 					close: (draft) => { draft.open = false; draft.detailOpen = false; },
 					detailOpened: (draft) => { draft.detailOpen = true; },
-					detailClosed: (draft) => { draft.detailOpen = false; }
+					detailClosed: (draft) => { draft.detailOpen = false; },
+					setSidebarVisible: (draft, visible) => { draft.sidebarVisible = visible !== false; }
 				}
 			};
 			return {
 				spec,
+				syncSidebarVisible(visible) {
+					sidebarVisible = visible !== false;
+					for (const actions of liveActions) actions.setSidebarVisible(sidebarVisible);
+				},
 				create() {
 					let state = spec.init();
 					const listeners = new Set();
@@ -571,6 +754,7 @@ window.__ModuleLoader__.load({
 							for (const listener of listeners) listener();
 						};
 					}
+					liveActions.add(actions);
 					return {
 						actions,
 						getSnapshot: () => state,
@@ -578,12 +762,216 @@ window.__ModuleLoader__.load({
 							listeners.add(listener);
 							return () => { listeners.delete(listener); };
 						},
-						clearPersisted() {}
+						clearPersisted() {
+							liveActions.delete(actions);
+							listeners.clear();
+						}
 					};
 				}
 			};
 		}
 
+		function resolveSidebarVisible(snapshot) {
+			return snapshot?.status === "ready"
+				? snapshot.value?.[SHOW_SIDEBAR_ENTRY_FIELD] !== false
+				: true;
+		}
+
+		function connectorSettingsCopy() {
+			const language = document.documentElement?.lang || window.navigator?.language || "zh";
+			if (String(language).toLowerCase().startsWith("en")) {
+				return {
+					title: "MCP Connector",
+					description: "Control how the MCP Connector is opened.",
+					show: "Show MCP Connector in the sidebar",
+					hint: "Turning this off only hides the shortcut. Connected MCP servers and tools remain available.",
+					visible: "The sidebar shortcut is visible.",
+					hidden: "The shortcut is hidden. You can still open MCP Connector here.",
+					readOnly: "This settings page is read-only.",
+					saving: "Saving…",
+					failed: "The setting was not saved. Please try again.",
+					reset: "Reset",
+					open: "Open MCP Connector",
+					expand: "Expand MCP Connector settings",
+					collapse: "Collapse MCP Connector settings"
+				};
+			}
+			return {
+				title: "MCP连接器",
+				description: "控制侧边栏入口和快捷打开方式。",
+				show: "在侧边栏显示 MCP连接器",
+				hint: "关闭后只隐藏入口，不影响已连接的 MCP Server 和工具。",
+				visible: "侧边栏入口当前显示。",
+				hidden: "入口已隐藏，仍可从这里打开 MCP连接器。",
+				readOnly: "当前设置页只读。",
+				saving: "正在保存…",
+				failed: "设置未保存，请重试。",
+				reset: "恢复默认",
+				open: "打开 MCP连接器",
+				expand: "展开 MCP连接器设置",
+				collapse: "收起 MCP连接器设置"
+			};
+		}
+
+		function ConnectorSettingsCard(props) {
+			const { settingsScope, actions } = props;
+			const copy = connectorSettingsCopy();
+			const snapshot = (0, react.useSyncExternalStore)(
+				(listener) => settingsScope.subscribe(listener),
+				() => settingsScope.getSnapshot()
+			);
+			const [open, setOpen] = (0, react.useState)(false);
+			const [saving, setSaving] = (0, react.useState)(false);
+			const [failed, setFailed] = (0, react.useState)(false);
+			if (snapshot.status !== "ready") return null;
+			const visible = resolveSidebarVisible(snapshot);
+			const writable = snapshot.writable === true;
+			const overridden = snapshot.user !== null
+				&& typeof snapshot.user === "object"
+				&& Object.prototype.hasOwnProperty.call(snapshot.user, SHOW_SIDEBAR_ENTRY_FIELD);
+
+			const save = async (next) => {
+				setSaving(true);
+				setFailed(false);
+				try {
+					await settingsScope.set(SHOW_SIDEBAR_ENTRY_FIELD, next);
+					const confirmed = settingsScope.getSnapshot();
+					setFailed(confirmed.status !== "ready" || resolveSidebarVisible(confirmed) !== next);
+				} catch (error) {
+					console.error("[mcp-connector] sidebar setting update failed:", error);
+					setFailed(true);
+				} finally {
+					setSaving(false);
+				}
+			};
+
+			const reset = async () => {
+				setSaving(true);
+				setFailed(false);
+				try {
+					await settingsScope.unset(SHOW_SIDEBAR_ENTRY_FIELD);
+					const confirmed = settingsScope.getSnapshot();
+					const stillOverridden = confirmed.user !== null
+						&& typeof confirmed.user === "object"
+						&& Object.prototype.hasOwnProperty.call(confirmed.user, SHOW_SIDEBAR_ENTRY_FIELD);
+					setFailed(confirmed.status !== "ready" || stillOverridden);
+				} catch (error) {
+					console.error("[mcp-connector] sidebar setting reset failed:", error);
+					setFailed(true);
+				} finally {
+					setSaving(false);
+				}
+			};
+
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("li", {
+				className: "mcpConnectorSettingsCard",
+				"data-open": open,
+				children: [
+					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("button", {
+						type: "button",
+						className: "mcpConnectorSettingsHeader",
+						"aria-expanded": open,
+						"aria-label": open ? copy.collapse : copy.expand,
+						onClick: () => { setOpen(!open); },
+						children: [
+							/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
+								className: "mcpConnectorSettingsHeadText",
+								children: [
+									/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { className: "mcpConnectorSettingsName", children: copy.title }),
+									/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { className: "mcpConnectorSettingsDescription", children: copy.description })
+								]
+							}),
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { className: "mcpConnectorSettingsChevron", "aria-hidden": true, children: "⌄" })
+						]
+					}),
+					open ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+						className: "mcpConnectorSettingsBody",
+						children: [
+							/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+								className: "mcpConnectorSettingsRow",
+								children: [
+									/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("label", {
+										htmlFor: "mcp-connector-show-sidebar-entry",
+										children: [
+											/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { className: "mcpConnectorSettingsLabel", children: copy.show }),
+											/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { className: "mcpConnectorSettingsHint", children: copy.hint })
+										]
+									}),
+									/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+										id: "mcp-connector-show-sidebar-entry",
+										className: "mcpConnectorSettingsSwitch",
+										type: "checkbox",
+										role: "switch",
+										"aria-checked": visible,
+										checked: visible,
+										disabled: !writable || saving,
+										onChange: (event) => { void save(event.target.checked); }
+									})
+								]
+							}),
+							/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+								className: "mcpConnectorSettingsFooter",
+								children: [
+									/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+										className: "mcpConnectorSettingsState",
+										"data-tone": failed ? "error" : "normal",
+										role: failed ? "alert" : "status",
+										children: failed ? copy.failed : saving ? copy.saving : !writable ? copy.readOnly : visible ? copy.visible : copy.hidden
+									}),
+									/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+										type: "button",
+										className: "mcpConnectorSettingsButton",
+										disabled: !writable || saving || !overridden,
+										onClick: () => { void reset(); },
+										children: copy.reset
+									}),
+									/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+										type: "button",
+										className: "mcpConnectorSettingsButton",
+										"data-primary": true,
+										"aria-haspopup": "dialog",
+										onClick: () => { actions.open(); },
+										children: copy.open
+									})
+								]
+							})
+						]
+					}) : null
+				]
+			});
+		}
+
+		function installClientSettings(ctx, marketView) {
+			if (typeof ctx.inject !== "function") return;
+			ctx.inject(["settingsScope"], (settingsCtx) => {
+				const settingsScope = settingsCtx.settingsScope.bind({
+					namespace: CONNECTOR_SETTINGS_NAMESPACE,
+					decode(value) {
+						if (typeof value !== "object" || value === null || Array.isArray(value)) return void 0;
+						return typeof value[SHOW_SIDEBAR_ENTRY_FIELD] === "boolean"
+							? { [SHOW_SIDEBAR_ENTRY_FIELD]: value[SHOW_SIDEBAR_ENTRY_FIELD] }
+							: void 0;
+					}
+				});
+				settingsCtx.effect(() => {
+					const sync = () => { marketView.syncSidebarVisible(resolveSidebarVisible(settingsScope.getSnapshot())); };
+					sync();
+					const unsubscribe = settingsScope.subscribe(sync);
+					return () => {
+						unsubscribe();
+						marketView.syncSidebarVisible(true);
+					};
+				}, "mcp-connector: sidebar visibility setting");
+				settingsCtx.effect(() => installSettingsStyles(), "mcp-connector: settings styles");
+				settingsCtx.slots.inject("settings.plugin.item", () => settingsCtx.slots.register({
+					name: "settings.plugin.item",
+					key: CONNECTOR_SETTINGS_NAMESPACE,
+					store: marketView,
+					inject: () => ({ settingsScope })
+				}, ConnectorSettingsCard));
+			});
+		}
+
 		/**
 		 * 用 DSH 自身的工作区/会话/输入机把示例 Prompt 带入新会话。
 		 * connectWorkspace 与 DSH 的「新会话」按钮同源：优先复用当前工作区的
@@ -815,10 +1203,21 @@ window.__ModuleLoader__.load({
 			}, [open, updateOperation?.operationId, updateProviderSelection?.provider?.id, expectedUpdateVersion]);
 			(0, react.useEffect)(() => {
 				if (!open) return void 0;
+				const opener = document.activeElement;
 				closeRef.current?.focus?.();
-				const onKeyDown = (event) => { if (event.key === "Escape") actions.close(); };
-				window.addEventListener("keydown", onKeyDown);
-				return () => { window.removeEventListener("keydown", onKeyDown); };
+				const onKeyDown = (event) => {
+					if (event.key !== "Escape") return;
+					event.preventDefault();
+					event.stopPropagation();
+					actions.close();
+				};
+				// Capture at window before the underlying Settings dialog receives
+				// Escape on document; only the topmost connector dialog should close.
+				window.addEventListener("keydown", onKeyDown, true);
+				return () => {
+					window.removeEventListener("keydown", onKeyDown, true);
+					if (opener?.isConnected !== false) opener?.focus?.();
+				};
 			}, [open, actions]);
 			if (!open) return null;
 			const updateRunning = updateStarting || updateOperation !== null && ["queued", "running"].includes(updateOperation.state);
@@ -1084,7 +1483,7 @@ window.__ModuleLoader__.load({
 				});
 			};
 			const src = window.location.origin + "/mcp-connector/ui/";
-			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+			const modal = /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 				style: {
 					position: "fixed",
 					inset: 0,
@@ -1092,7 +1491,7 @@ window.__ModuleLoader__.load({
 					display: "flex",
 					alignItems: "center",
 					justifyContent: "center",
-					zIndex: 1000
+					zIndex: CONNECTOR_MODAL_Z_INDEX
 				},
 				onClick: (event) => { if (event.target === event.currentTarget) actions.close(); },
 				children: [
@@ -1182,14 +1581,28 @@ window.__ModuleLoader__.load({
 					})
 				]
 			});
+			// shell.overlay lives inside a z-index:20 stacking context, while DSH
+			// Settings is a root-level z-index:1000 modal. Portal to body so the
+			// quick-open action can reliably place this dialog above Settings.
+			if (document.body !== null && document.body !== void 0
+				&& typeof react_dom.createPortal === "function") {
+				return react_dom.createPortal(modal, document.body);
+			}
+			return modal;
 		}
 
 		/** 左栏入口按钮：使用 DSH Button 组件，与社区插件市场一致。 */
 		function SidebarEntry(props) {
 			const { wide, useStore, actions } = props;
 			const open = useStore((state) => state.open);
+			const visible = useStore((state) => state.sidebarVisible !== false);
 			const [topMount, setTopMount] = (0, react.useState)(null);
 			(0, react.useEffect)(() => {
+				if (!visible) {
+					setTopMount(null);
+					return void 0;
+				}
+				const removeStyles = installSidebarStyles();
 				let disposed = false;
 				const ownedMounts = new Set();
 				const syncMount = () => {
@@ -1208,8 +1621,10 @@ window.__ModuleLoader__.load({
 					disposed = true;
 					observer?.disconnect();
 					for (const mount of ownedMounts) mount.remove();
+					removeStyles();
 				};
-			}, []);
+			}, [visible]);
+			if (!visible) return null;
 			const launcher = /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
 				type: "button",
 				className: "mcpConnectorLauncher",
@@ -1232,7 +1647,8 @@ window.__ModuleLoader__.load({
 			console.log('[mcp-connector] client apply() called');
 			try {
 				const marketView = createMarketViewStore();
-				ctx.effect(() => installSidebarStyles(), "mcp-connector: sidebar styles");
+				ctx.effect(() => installOverlayStyles(), "mcp-connector: overlay styles");
+				installClientSettings(ctx, marketView);
 
 				// 弹框：注册到 shell.overlay（类似社区插件市场）
 				ctx.slots.inject("shell.overlay", () => {

package/lib/index.js

@@ -62,6 +62,7 @@ import {
   scopeLabel,
   scopeTargets,
 } from './connection-scopes.js';
+import { installConnectorSettings } from './settings.js';
 
 export const name = 'mcp-connector';
 
@@ -105,9 +106,12 @@ export const Config = z.object({
   openBrowser: z.boolean().default(true),
   /** 授权账号标识（预留多账号） */
   account: z.string().default(DEFAULT_ACCOUNT),
+  /** 是否在 DSH 主侧边栏显示 MCP连接器快捷入口 */
+  showSidebarEntry: z.boolean().default(true),
 });
 
 export async function apply(ctx, config) {
+  installConnectorSettings(ctx, config);
   const logger = ctx.logger('mcp-connector');
   const versionStatusService = createVersionStatusService({
     timeoutMs: config.requestTimeoutMs,

package/lib/settings.js

@@ -0,0 +1,24 @@
+import z from '@deepseek-ai/schemastery';
+
+export const CONNECTOR_SETTINGS_NAMESPACE = 'mcp-connector';
+export const SHOW_SIDEBAR_ENTRY_FIELD = 'showSidebarEntry';
+
+export const ConnectorSettings = z.object({
+  [SHOW_SIDEBAR_ENTRY_FIELD]: z.boolean().default(true),
+});
+
+/**
+ * Register the connector's user-facing settings only while a Settings provider
+ * is present. The provider owns persistence; older DSH hosts keep the composed
+ * config and continue loading the connector normally.
+ */
+export function installConnectorSettings(ctx, config = {}) {
+  if (typeof ctx.inject !== 'function') return;
+  ctx.inject(['settings'], (settingsCtx) => {
+    settingsCtx.settings.register(CONNECTOR_SETTINGS_NAMESPACE, ConnectorSettings, {
+      base: {
+        [SHOW_SIDEBAR_ENTRY_FIELD]: config[SHOW_SIDEBAR_ENTRY_FIELD] !== false,
+      },
+    });
+  });
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-mcp-connector",
-  "version": "0.2.37",
+  "version": "0.2.39",
   "description": "DeepSeek Harness MCP Connector and MCP Server marketplace with over one hundred MCP connectors, continuously updated. Discover, authorize, and manage connections in one place; supports OAuth 2.0 PKCE, API keys, stdio/HTTP, mcpServers JSON import, and tool and prompt discovery. Maintained by Qichacha/QCC.",
   "type": "module",
   "main": "lib/index.js",
@@ -41,7 +41,7 @@
   ],
   "scripts": {
     "test": "node --test",
-    "lint": "node --check lib/index.js && node --check lib/web.js && node --check lib/client.js && node --check lib/version-status.js && node --check lib/schema.js && node --check lib/catalog.js && node --check lib/prompts.js && node --check lib/probe.js && node --check lib/diagnostics.js && node --check lib/connection-backup.js && node --check lib/connection-scopes.js && node --check lib/governance.js && node --check lib/mcp-validation.js && node --check lib/mcp-http.js && node --check lib/migration.js && node --check lib/stores.js && node --check lib/grant-journal.js && node --check lib/oauth.js && node --check lib/grant-lifecycle.js && node --check lib/callback-server.js && node --check lib/mcp-provision.js && node --check lib/util.js && node --check lib/constants.js && node --check lib/tools.js && node --check lib/connectors/oauth-connector.js && node --check lib/connectors/manual-connector.js && node --check lib/connectors/json-connector.js && node --check scripts/probe-connector.mjs && node --check scripts/build-registry.mjs && node --check scripts/ui-harness.mjs && node --check scripts/check-market-registration.mjs && node --check scripts/check-readme-version.mjs && node --check scripts/check-marketing-metadata.mjs && node --check scripts/check-storefront-screenshots.mjs && node --check scripts/sync-registry-stats.mjs && node --check scripts/verify-pack.mjs",
+    "lint": "node --check lib/index.js && node --check lib/web.js && node --check lib/client.js && node --check lib/settings.js && node --check lib/version-status.js && node --check lib/schema.js && node --check lib/catalog.js && node --check lib/prompts.js && node --check lib/probe.js && node --check lib/diagnostics.js && node --check lib/connection-backup.js && node --check lib/connection-scopes.js && node --check lib/governance.js && node --check lib/mcp-validation.js && node --check lib/mcp-http.js && node --check lib/migration.js && node --check lib/stores.js && node --check lib/grant-journal.js && node --check lib/oauth.js && node --check lib/grant-lifecycle.js && node --check lib/callback-server.js && node --check lib/mcp-provision.js && node --check lib/util.js && node --check lib/constants.js && node --check lib/tools.js && node --check lib/connectors/oauth-connector.js && node --check lib/connectors/manual-connector.js && node --check lib/connectors/json-connector.js && node --check scripts/probe-connector.mjs && node --check scripts/build-registry.mjs && node --check scripts/ui-harness.mjs && node --check scripts/check-market-registration.mjs && node --check scripts/check-readme-version.mjs && node --check scripts/check-marketing-metadata.mjs && node --check scripts/check-storefront-screenshots.mjs && node --check scripts/sync-registry-stats.mjs && node --check scripts/verify-pack.mjs",
     "registry:build": "node scripts/build-registry.mjs",
     "registry:validate": "node scripts/probe-connector.mjs catalog/catalog.json --validate-only",
     "dev:ui": "node scripts/ui-harness.mjs",