dsh-mcp-connector 0.2.38 → 0.2.39

package/CHANGELOG.md

@@ -4,6 +4,17 @@
 
 ## [Unreleased]
 
+## [0.2.39] - 2026-09-08
+
+### Fixed
+
+- 从“设置 → 插件 → 插件配置”快捷打开 MCP连接器时，将连接器弹框 Portal 到页面根层并显示在设置弹框之上；关闭后仍返回原设置位置。
+- MCP连接器位于设置弹框上方时会优先处理 Escape，只关闭最上层连接器弹框，不连带关闭底层设置弹框。
+
+### Verification
+
+- 206 项自动测试、lint、版本/营销元数据/商店截图门禁和 npm 发布包白名单/敏感内容扫描全部通过；新增覆盖连接器弹框根层 Portal、层级与嵌套弹框 Escape 行为。
+
 ## [0.2.38] - 2026-09-08
 
 ### Added
@@ -596,7 +607,8 @@
 - 外部 URL 与导入 Header 执行安全校验。
 - iframe 消息校验同源和消息来源。
 
-[Unreleased]: https://github.com/duhu2000/dsh-mcp-connector/compare/v0.2.38...HEAD
+[Unreleased]: https://github.com/duhu2000/dsh-mcp-connector/compare/v0.2.39...HEAD
+[0.2.39]: https://github.com/duhu2000/dsh-mcp-connector/compare/v0.2.38...v0.2.39
 [0.2.38]: https://github.com/duhu2000/dsh-mcp-connector/compare/v0.2.37...v0.2.38
 [0.2.37]: https://github.com/duhu2000/dsh-mcp-connector/compare/v0.2.36...v0.2.37
 [0.2.36]: https://github.com/duhu2000/dsh-mcp-connector/compare/v0.2.35...v0.2.36

package/README.en.md

@@ -175,7 +175,7 @@ npm run dev:ui
 
 Every Registry merge regenerates `catalog-stats.json`; an hourly workflow in this repository synchronizes the Chinese and English product copy plus a local stats snapshot. The static npm README updates with package releases, while the live badges above read the Registry directly and therefore stay current without another npm release.
 
-The current public version is [`dsh-mcp-connector@0.2.38`](https://www.npmjs.com/package/dsh-mcp-connector), with [GitHub Release v0.2.38](https://github.com/duhu2000/dsh-mcp-connector/releases/tag/v0.2.38).
+The current public version is [`dsh-mcp-connector@0.2.39`](https://www.npmjs.com/package/dsh-mcp-connector), with [GitHub Release v0.2.39](https://github.com/duhu2000/dsh-mcp-connector/releases/tag/v0.2.39).
 
 See [CHANGELOG.md](CHANGELOG.md) for version history and [docs/DESKTOP-E2E.md](docs/DESKTOP-E2E.md) for the Desktop release checklist.
 

package/README.md

@@ -171,7 +171,7 @@ npm run dev:ui
 
 公共 Registry 每次合并后会生成 `catalog-stats.json`；本仓库的定时工作流每小时同步中英文介绍和统计快照。npm 页面中的静态正文随版本发布更新，上方动态统计徽标则直接读取 Registry，可在不发布新 npm 版本时保持实时数量一致。
 
-当前公开版本为 [`dsh-mcp-connector@0.2.38`](https://www.npmjs.com/package/dsh-mcp-connector)，对应 [GitHub Release v0.2.38](https://github.com/duhu2000/dsh-mcp-connector/releases/tag/v0.2.38)。
+当前公开版本为 [`dsh-mcp-connector@0.2.39`](https://www.npmjs.com/package/dsh-mcp-connector)，对应 [GitHub Release v0.2.39](https://github.com/duhu2000/dsh-mcp-connector/releases/tag/v0.2.39)。
 
 版本能力与变更记录见 [CHANGELOG.md](CHANGELOG.md)。
 Desktop 发版回归见 [docs/DESKTOP-E2E.md](docs/DESKTOP-E2E.md)。

package/lib/client.js

@@ -25,6 +25,7 @@ window.__ModuleLoader__.load({
 		const PLUGIN_PACKAGE_NAME = "dsh-mcp-connector";
 		const CONNECTOR_SETTINGS_NAMESPACE = "mcp-connector";
 		const SHOW_SIDEBAR_ENTRY_FIELD = "showSidebarEntry";
+		const CONNECTOR_MODAL_Z_INDEX = 1100;
 		const UPDATE_PROVIDER_OPERATION_POLL_MS = 1e3;
 		const UPDATE_PROVIDER_ADAPTERS = Object.freeze([
 			createHttpUpdateProviderAdapter({
@@ -1204,10 +1205,17 @@ window.__ModuleLoader__.load({
 				if (!open) return void 0;
 				const opener = document.activeElement;
 				closeRef.current?.focus?.();
-				const onKeyDown = (event) => { if (event.key === "Escape") actions.close(); };
-				window.addEventListener("keydown", onKeyDown);
+				const onKeyDown = (event) => {
+					if (event.key !== "Escape") return;
+					event.preventDefault();
+					event.stopPropagation();
+					actions.close();
+				};
+				// Capture at window before the underlying Settings dialog receives
+				// Escape on document; only the topmost connector dialog should close.
+				window.addEventListener("keydown", onKeyDown, true);
 				return () => {
-					window.removeEventListener("keydown", onKeyDown);
+					window.removeEventListener("keydown", onKeyDown, true);
 					if (opener?.isConnected !== false) opener?.focus?.();
 				};
 			}, [open, actions]);
@@ -1475,7 +1483,7 @@ window.__ModuleLoader__.load({
 				});
 			};
 			const src = window.location.origin + "/mcp-connector/ui/";
-			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+			const modal = /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 				style: {
 					position: "fixed",
 					inset: 0,
@@ -1483,7 +1491,7 @@ window.__ModuleLoader__.load({
 					display: "flex",
 					alignItems: "center",
 					justifyContent: "center",
-					zIndex: 1000
+					zIndex: CONNECTOR_MODAL_Z_INDEX
 				},
 				onClick: (event) => { if (event.target === event.currentTarget) actions.close(); },
 				children: [
@@ -1573,6 +1581,14 @@ window.__ModuleLoader__.load({
 					})
 				]
 			});
+			// shell.overlay lives inside a z-index:20 stacking context, while DSH
+			// Settings is a root-level z-index:1000 modal. Portal to body so the
+			// quick-open action can reliably place this dialog above Settings.
+			if (document.body !== null && document.body !== void 0
+				&& typeof react_dom.createPortal === "function") {
+				return react_dom.createPortal(modal, document.body);
+			}
+			return modal;
 		}
 
 		/** 左栏入口按钮：使用 DSH Button 组件，与社区插件市场一致。 */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-mcp-connector",
-  "version": "0.2.38",
+  "version": "0.2.39",
   "description": "DeepSeek Harness MCP Connector and MCP Server marketplace with over one hundred MCP connectors, continuously updated. Discover, authorize, and manage connections in one place; supports OAuth 2.0 PKCE, API keys, stdio/HTTP, mcpServers JSON import, and tool and prompt discovery. Maintained by Qichacha/QCC.",
   "type": "module",
   "main": "lib/index.js",