dsh-m 0.8.5 → 0.9.0

package/README.en.md

@@ -8,11 +8,11 @@
 
 English · [中文](./README.md)
 
-A DeepSeek Harness (DSH) plugin marketplace with a customizable registry: **browse, install, uninstall, upgrade** — all local. Ships as a DSH web plugin: the "Plugin Marketplace" sidebar entry opens a three-view panel, backed by eight `dshm_*` agent tools and the `dshm` CLI.
+A DeepSeek Harness (DSH) plugin marketplace with a customizable registry: **browse, install, uninstall, upgrade** — all local. Ships as a DSH web plugin: the "Plugin Marketplace" sidebar entry opens a three-view panel, backed by eight `dshm_*` agent tools and the `dshm` CLI. The same package installs into **both the Web (`web`) and official Desktop (`desktop`) profiles** (0.9.0+; capability table in the changelog).
 
 <div align="center">
-  <img src="https://raw.githubusercontent.com/iasiv5/dsh-m/main/docs/images/marketplace.webp" alt="Plugin Marketplace panel — Market view: curated card flow with search and category filters" width="100%">
-  <p><sub>The "Plugin Marketplace" panel · Market view: curated cards · search · category filters · one-click install</sub></p>
+  <img src="https://raw.githubusercontent.com/iasiv5/dsh-m/main/docs/images/marketplace.webp" alt="Plugin Marketplace panel — Market view: Community / Curated / Favorites zones, category chips, and plugin cards (verified / installed badges, npm & GitHub detail links)" width="100%">
+  <p><sub>The "Plugin Marketplace" panel · Market view (Community 4,200+ · Curated 23 · Favorites): click a card to install</sub></p>
 </div>
 
 ## Quick start
@@ -38,10 +38,24 @@ The default registry includes DSH Skins, ModSearch, the Lark / QQ / Weixin / WeC
 |---|---|
 | **Market** | **Zoned** (0.7.0): **Community** (default landing, the 4,000+ full catalog) and **Curated** (hand-picked primary registry, single page) as two independent zones — each keeps its own category/search/sort/pagination state across tab switches; plus a **Favorites** zone (browser-local bookmarks with delisted-entry detection and one-click cleanup). Community zone: two-row collapsible category chips with sticky collapse, sort switch (downloads/stars/added × asc/desc), windowed pagination (24/48/96 per page), card byline (owner/downloads/stars); clicking a card opens a **detail modal** (superset of the card: download window, screenshot lightbox, capabilities collapsed by default, install command); npm sources pin the latest exact version, GitHub sources pin the release/tag commit |
 | **Operations** | Install/upgrade/uninstall/toggle all flow through a global operation log (0.7.0): state lives off cards, surviving paging/searching/tab switches; persisted to localStorage and resumed after host reloads (each restored op re-validated "still applies" before executing); benignly-invalidated ops show as a neutral "skipped"; the Installed page gains "Update all (N)" batch queueing |
-| **Installed** | What your web profile actually has, annotated "via market / non-market"; update badges, upgrade, two-step confirm uninstall; 📖 README preview (64KB cap); **live phase badge** (●active / ●failed / ○pending) and a **one-click toggle** (0.4.0: delegates to the official pluginManager service for live application; falls back to file-level edits + restart notice when absent; dsh-m itself and official host lifelines are locked) |
+| **Installed** | What the current profile (web / desktop, 0.9.0+) actually has, annotated "via market / non-market"; update badges, upgrade, two-step confirm uninstall; 📖 README preview (64KB cap); **live phase badge** (●active / ●failed / ○pending) and a **one-click toggle** (0.4.0: delegates to the official pluginManager service for live application; falls back to file-level edits + restart notice when absent; dsh-m itself and official host lifelines are locked) |
 | **Settings** | Registry address draft with "Force refresh / Validate & apply / Restore default / Download default registry.json"; configured vs active address and status at a glance (shown only when abnormal); community catalog toggle; dsh-m self-update |
 
-After any mutation, the already-open Market and Installed views refresh the profile state together, keeping badges and cards in sync without closing and reopening the marketplace; a "⚡ Restart" banner appears — under systemd, the DSH launcher's `appExit` hook hands the restart back to a unit configured with `Restart=on-failure` or `Restart=always`, avoiding a `systemctl` helper inside the unit cgroup that is about to stop; if `appExit` is unavailable, the fallback uses a manager-owned transient `systemd-run` service and only then a detached helper. The client confirms the replacement by boot id and dismisses the banner, leaving DSH Web's own background connection recovery in control; it does not force a full-page reload during the auth/route handoff. The restart chain has been live-verified on the current DSH Web `0.2.0-rc.2` (2026-10-01): dsh-m probes the unit's `Restart=` policy, hands the stop back via `appExit`, the `status=75/TEMPFAIL` exit is caught by the Restart policy and auto-started, and after recovery the page reconnects in the background with the panel fully functional. Historical scope: the `0.1.5-rc.1` era covered live `/dshm` ping and authenticated `303 → 200` checks; `0.1.2-rc.1` is covered by contract checks plus runtime shape-detection fallback (see the verified array) — with the deployment moved on, no live E2E is chased on retired generations; the transient `systemd-run` fallback only applies to hosts without `appExit` (all supported generations provide it) and stays a documented fallback rather than a release gate; repeated install/uninstall is covered by the profile-transaction test surface (compensation, post-install guard, 763 cases) plus the 0.4.0→0.4.2 consecutive-release evidence. Installs stream live pnpm progress (resolve → download → link → build).
+<div align="center">
+  <img src="https://raw.githubusercontent.com/iasiv5/dsh-m/main/docs/images/settings.webp" alt="Settings view — community catalog status card (catalog version / route / entries), curated registry configuration card (address draft with force-refresh / validate & apply / restore default / download), and the About card" width="86%">
+  <p><sub>Settings view · community catalog status, curated registry configuration, and dsh-m self-update</sub></p>
+</div>
+
+The restart chain below applies to **Web only** (Desktop takes effect via the official app lifecycle: after installing, quit and reopen the Desktop app — see the 0.9.0 section). After any mutation, the already-open Market and Installed views refresh the profile state together, keeping badges and cards in sync without closing and reopening the marketplace; a "⚡ Restart" banner appears — under systemd, the DSH launcher's `appExit` hook hands the restart back to a unit configured with `Restart=on-failure` or `Restart=always`, avoiding a `systemctl` helper inside the unit cgroup that is about to stop; if `appExit` is unavailable, the fallback uses a manager-owned transient `systemd-run` service and only then a detached helper. The client confirms the replacement by boot id and dismisses the banner, leaving DSH Web's own background connection recovery in control; it does not force a full-page reload during the auth/route handoff. The restart chain has been live-verified on the current DSH Web `0.2.0-rc.2` (2026-10-01): dsh-m probes the unit's `Restart=` policy, hands the stop back via `appExit`, the `status=75/TEMPFAIL` exit is caught by the Restart policy and auto-started, and after recovery the page reconnects in the background with the panel fully functional. Historical scope: the `0.1.5-rc.1` era covered live `/dshm` ping and authenticated `303 → 200` checks; `0.1.2-rc.1` is covered by contract checks plus runtime shape-detection fallback (see the verified array) — with the deployment moved on, no live E2E is chased on retired generations; the transient `systemd-run` fallback only applies to hosts without `appExit` (all supported generations provide it) and stays a documented fallback rather than a release gate; repeated install/uninstall is covered by the profile-transaction test surface (compensation, post-install guard, 813 cases) plus the 0.4.0→0.4.2 consecutive-release evidence. Installs stream live pnpm progress (resolve → download → link → build).
+
+### New in 0.9.0 — Official Desktop (dual profile) support
+
+- **One package, two profiles**: dsh-m now installs into the official Desktop's `desktop` profile (`~/.dsh/profiles/desktop`) alongside the Web `web` profile; the catalog, panel, and agent tools are shared, and everything manages the host's current profile (official `profileContext` as the single source of truth).
+- **Entrust admission to the host**: every `/dshm` method (including ping and unknown methods) delegates to the official `connection.requestRejection()` before any body is read (trustedHosts / loopback / cross-site / `Origin: null` semantics come from the host); rejected requests consume no body and call no business logic; hosts without the capability fail closed. **Behavior change**: the old home-grown "missing Origin → 403" guard is gone — Origin-less requests from the Desktop bridge are admitted per official semantics, and unauthenticated health probes now follow host trust instead of a blanket 403.
+- **Desktop first-release capability table**: read-only market + **installing new packages** (delegated to the official `pluginManager.installBundle`; integrity, locking, and application phases stay with the official manager) + **toggles** (delegated; structured refusal when the service is absent, never a file-level fallback); **upgrade / uninstall / self-update / one-click restart** return structured 409 refusals with official-entry guidance (no official upgrade API exists; restarts belong to the Electron lifecycle); build scripts retry with the exact official `pendingBuilds` list — never an allow-all.
+- **Per-profile read model and cache**: market installed-badges, the installed list, and README previews only read the current profile; registry / community / accepted-source caches are segmented per profile (web keeps its legacy paths — zero migration, zero clearing); favorites and operation logs stay per browser origin and do not sync between Web and Desktop.
+- **CLI always targets the web profile**: `--profile web` is explicit; `--profile desktop` is rejected with a pointer to the official Desktop plugin management page.
+- **Honest limitations**: Desktop on-device (Win/macOS) E2E has not been run; the `registry.json` verified arrays gain **no** Desktop generation (to be recorded after real testing); dsh-m's file-level post-install guard is skipped on Desktop (app.asar probing blind spot) and replaced by official result checks plus a `listBundles` re-read.
 
 ### Fixed in 0.8.5
 
@@ -156,6 +170,8 @@ dshm restart --yes
 
 When the registry is unavailable, `registry` / `search` / `outdated` print the configured vs active address and exit 1; `list` still shows installed plugins. The CLI uses its own cache namespace and never touches the Web side's.
 
+**Profile target (0.9.0)**: the CLI always acts on the web profile — `--profile web` makes it explicit; `--profile desktop` is rejected outright (Desktop plugin management belongs to the official Desktop plugin management page).
+
 ## Registry
 
 `registry.json` is hand-curated and fetched at runtime in order: **GitHub raw (`@main`) → GitHub mirror (jsDelivr CDN, backup line) → local 60-min TTL cache → bundled snapshot** — listing updates are decoupled from plugin releases. To add or amend a listing, edit `registry.json` and open a PR; CI validates the strict schema, npm/GitHub existence, duplicate ids and URL reachability.
@@ -202,6 +218,9 @@ Release: `npm version patch|minor|major && git push --tags` → OIDC trusted pub
 **1. Why don't GitHub-sourced update hints follow main?**
 Intermediate commits on main can be unstable. dsh-m tracks **releases / tags** only (`releases/latest` first, tags list as fallback) and pins the commit SHA the tag points to.
 
+**1.5 What works on the official Desktop?**
+Desktop (the `desktop` profile) first release supports: browsing the market, **installing new packages**, and plugin toggles; upgrade/uninstall/self-update/one-click restart return structured refusals with official-entry guidance (official plugin management page / Desktop app restart). Installed badges and the installed list reflect only what Desktop itself has installed; favorites and operation logs do not sync with the Web side.
+
 **2. Does uninstalling dsh-m delete my data?**
 No. Only the package reference in the profile is removed (live UI disabled first), and suspected leftover paths are reported to you.
 

package/README.md

@@ -8,11 +8,11 @@
 
 [English](./README.en.md) · 中文
 
-可自定义收录清单（Registry）的 DeepSeek Harness (DSH) 插件市场：**收录 · 安装 · 卸载 · 升级**，全部本机完成。以 DSH web 插件形态运行——侧栏「插件市场」打开三视图面板，同时提供 `dshm_*` agent 工具与 `dshm` CLI。
+可自定义收录清单（Registry）的 DeepSeek Harness (DSH) 插件市场：**收录 · 安装 · 卸载 · 升级**，全部本机完成。以 DSH web 插件形态运行——侧栏「插件市场」打开三视图面板，同时提供 `dshm_*` agent 工具与 `dshm` CLI；同一包装入 **Web（`web`）与官方 Desktop（`desktop`）两个 profile**（0.9.0 起，能力表见变更节）。
 
 <div align="center">
-  <img src="https://raw.githubusercontent.com/iasiv5/dsh-m/main/docs/images/marketplace.webp" alt="侧栏「插件市场」面板——市场视图：收录卡片流、关键词搜索与分类筛选" width="100%">
-  <p><sub>侧栏「插件市场」· 市场视图：收录卡片流 · 搜索 · 分类筛选 · 展开即装</sub></p>
+  <img src="https://raw.githubusercontent.com/iasiv5/dsh-m/main/docs/images/marketplace.webp" alt="侧栏「插件市场」面板——市场视图：社区 / 精选 / 收藏三分区、分类 chips 与插件卡片（已实测 / 已安装徽标、npm 与 GitHub 详情链接）" width="100%">
+  <p><sub>侧栏「插件市场」· 市场视图：社区 4,200+ · 精选 23 · 收藏，卡片即点即装</sub></p>
 </div>
 
 ## 30 秒上手
@@ -38,10 +38,24 @@
 |---|---|
 | **市场** | **分区制**（0.7.0）：**社区**（默认落地页，4,000+ 条全量目录）与**精选**（手工策展主清单，单页直出）两个独立分区，各有自己的分类/搜索/排序/分页状态（切 tab 互不重置）；另有**收藏**分区（浏览器本地书签，自动检测下架条目并一键清理）。社区区：分类 chips 两行折叠 + 吸顶收缩、排序（下载量/Star/收录日期 × 升降）、页码窗口化分页（24/48/96 每页）、卡片 byline（作者/下载量/Star）；卡片点开**详情 Modal**（卡片信息超集：下载量窗口三要素、截图灯箱、能力披露默认收起、安装命令）；npm 源锁定最新精确版本，GitHub 源锁定 release/tag 指向的 commit |
 | **操作记录** | 安装/升级/卸载/开关全部走全局操作记录（0.7.0）：状态不挂卡片，翻页/搜索/切 tab 不丢；localStorage 持久化，宿主重载后自动恢复未完成操作（逐条校验「此刻仍成立才执行」）；良性前提消失以中性「已跳过」呈现；已装页支持「全部更新 (N)」批量入队 |
-| **已装** | web profile 实装列表，标注「市场安装 / 非市场安装」；可升级徽标、升级、两段式确认卸载；📖 README 预览（64KB 截断）；**运行相位徽标**（●active / ●failed / ○pending）与**一键开关**（0.4.0：委派官方 pluginManager 服务活体生效，服务缺席时文件级编辑 + 重启提示；dsh-m 自身与官方宿主命脉锁定不可开关） |
+| **已装** | 当前 profile（web / desktop，0.9.0 起）实装列表，标注「市场安装 / 非市场安装」；可升级徽标、升级、两段式确认卸载；📖 README 预览（64KB 截断）；**运行相位徽标**（●active / ●failed / ○pending）与**一键开关**（0.4.0：委派官方 pluginManager 服务活体生效，服务缺席时文件级编辑 + 重启提示；dsh-m 自身与官方宿主命脉锁定不可开关） |
 | **设置** | registry 地址草稿 +「强制刷新 / 校验并应用 / 恢复默认 / 下载默认 registry.json」；配置地址、生效来源与状态一目了然（仅异常时提示）；社区目录开关；dsh-m 自更新 |
 
-安装 / 卸载 / 升级完成后，当前已打开的市场页与已装页会一起重新读取 profile 状态并同步徽标/卡片，不需要关闭后重新打开插件市场；随后出现「⚡ 一键重启」横幅——受 systemd 管理时通过 DSH launcher 的 `appExit` 交给服务的 `Restart` 策略，避免在待停止 unit 的 cgroup 内启动 `systemctl` helper；无 `appExit` 的 systemd 兜底改用 manager-owned transient `systemd-run`，最后才退回 detached-helper。客户端按 boot id 确认新进程已恢复后关闭横幅，交由 DSH Web 自身的后台连接重试恢复页面，不强制整页刷新，避免认证/路由切换期间白屏。重启链路已在当前 DSH Web `0.2.0-rc.2` 实机核验（2026-10-01）：dsh-m 探测 unit `Restart=` 策略后经 `appExit` 交还 systemd，`status=75/TEMPFAIL` 退出由 Restart 策略接住自动拉起，服务恢复后页面后台重连、面板全功能可用。历史口径：`0.1.5-rc.1` 时代已核验 `/dshm` ping 与带认证 `303 → 200`；`0.1.2-rc.1` 按契约核对 + 形态探测兜底收录（verified 数组），部署面演进后不再追旧代 live E2E；transient `systemd-run` 兜底仅适用于无 `appExit` 的宿主（受支持代际均提供 `appExit`），保持设计兜底而非发布门槛；连续安装/卸载由 profile 事务测试面（补偿事务、装后守卫等 763 用例）与 0.4.0→0.4.2 连续发布实证覆盖。安装过程实时显示 pnpm 进度（解析 → 下载 → 链接 → 构建）。
+<div align="center">
+  <img src="https://raw.githubusercontent.com/iasiv5/dsh-m/main/docs/images/settings.webp" alt="设置视图——社区清单状态卡（目录版本 / 获取线路 / 收录条目）、精选清单配置卡（地址草稿与强制刷新 / 校验并应用 / 恢复默认 / 下载默认清单）与关于卡" width="86%">
+  <p><sub>设置视图 · 社区清单状态、精选清单配置与 dsh-m 自更新</sub></p>
+</div>
+
+以下重启链路仅适用于 **Web**（Desktop 的生效走官方应用生命周期：安装完成后退出并重新打开 Desktop 应用即可，见 0.9.0 节）。安装 / 卸载 / 升级完成后，当前已打开的市场页与已装页会一起重新读取 profile 状态并同步徽标/卡片，不需要关闭后重新打开插件市场；随后出现「⚡ 一键重启」横幅——受 systemd 管理时通过 DSH launcher 的 `appExit` 交给服务的 `Restart` 策略，避免在待停止 unit 的 cgroup 内启动 `systemctl` helper；无 `appExit` 的 systemd 兜底改用 manager-owned transient `systemd-run`，最后才退回 detached-helper。客户端按 boot id 确认新进程已恢复后关闭横幅，交由 DSH Web 自身的后台连接重试恢复页面，不强制整页刷新，避免认证/路由切换期间白屏。重启链路已在当前 DSH Web `0.2.0-rc.2` 实机核验（2026-10-01）：dsh-m 探测 unit `Restart=` 策略后经 `appExit` 交还 systemd，`status=75/TEMPFAIL` 退出由 Restart 策略接住自动拉起，服务恢复后页面后台重连、面板全功能可用。历史口径：`0.1.5-rc.1` 时代已核验 `/dshm` ping 与带认证 `303 → 200`；`0.1.2-rc.1` 按契约核对 + 形态探测兜底收录（verified 数组），部署面演进后不再追旧代 live E2E；transient `systemd-run` 兜底仅适用于无 `appExit` 的宿主（受支持代际均提供 `appExit`），保持设计兜底而非发布门槛；连续安装/卸载由 profile 事务测试面（补偿事务、装后守卫等 813 用例）与 0.4.0→0.4.2 连续发布实证覆盖。安装过程实时显示 pnpm 进度（解析 → 下载 → 链接 → 构建）。
+
+### 0.9.0 新增：官方 Desktop（双 profile）支持
+
+- **同一包、两个 profile**：dsh-m 现在可装入官方 Desktop 的 `desktop` profile（`~/.dsh/profiles/desktop`），与 Web 的 `web` profile 并列；市场目录、面板与 agent 工具同一套，管理对象始终是宿主当前 profile（官方 `profileContext` 单一事实源）。
+- **入口信任检查改委派官方**：`/dshm` 全部 method（含 ping 与未知 method）在读取请求体之前委派官方 `connection.requestRejection()` 判定（trustedHosts / loopback / 跨站 / `Origin: null` 语义随宿主），被拒请求零 body 消耗、零业务调用；宿主缺该能力时 fail-closed 全拒。**行为变化**：旧版自制守卫「缺 Origin 一律 403」不再存在——Desktop 桥合法剥除 Origin 的请求按官方语义放行，无凭据的健康检查探针从「一律 403」变为「按宿主信任判定」。
+- **Desktop 首发能力表**：只读市场 + **安装新包**（委派官方 `pluginManager.installBundle`，完整性/锁/生效相位归官方）+ **开关**（委派官方管理器，服务缺席结构化拒绝、绝不文件级 fallback）；**升级 / 卸载 / dsh-m 自更新 / 一键重启**在 Desktop 结构化拒绝（409，带官方入口指引——官方暂无 upgrade API，重启归 Electron 生命周期）；构建脚本按官方 `pendingBuilds` 名单精确重试，绝不全量放行。
+- **读模型与缓存按 profile 隔离**：市场安装标注、已装列表、README 预览只读当前 profile；registry / 社区清单 / accepted-source 缓存按 profile 分段（web 沿用旧路径，零迁移零清空）；收藏与操作记录按浏览器 origin 各自独立，Web 与 Desktop 不自动同步。
+- **CLI 恒作用于 web profile**：`--profile web` 显式声明；`--profile desktop` 明确拒绝并指引官方 Desktop 插件管理页。
+- **如实声明**：Desktop 实机（Win/macOS）E2E 未跑，`registry.json` verified 数组**不新增** Desktop 代际（实测后按收录纪律补录）；Desktop 下不做 dsh-m 文件级装后守卫（app.asar 打包布局探测盲区），以官方结果判定 + `listBundles` 复读替代。
 
 ### 0.8.5 修复
 
@@ -156,6 +170,8 @@ dshm restart --yes
 
 清单不可用时 `registry` / `search` / `outdated` 打印配置与实际生效地址并退出码 1；`list` 仍列出已装插件。CLI 固定独立缓存命名空间，不影响 Web 端。
 
+**profile 目标（0.9.0）**：CLI 恒作用于 web profile——`--profile web` 为显式声明；`--profile desktop` 直接拒绝（Desktop profile 的插件管理走官方 Desktop 插件管理页）。
+
 ## 收录清单（registry）
 
 `registry.json` 手工 curated，运行时按 **GitHub 原始文件（raw @main）→ GitHub 镜像（jsDelivr CDN，备用线路）→ 本地 60 分钟 TTL 缓存 → 包内快照** 的顺序获取——收录更新与插件发版**解耦**，push 后最多等一个缓存周期（可在设置页强制刷新）。收录 / 修订直接改 `registry.json` 发 PR，CI 自动校验：严格 schema、npm 包与 GitHub 仓库存在性、重复 id、URL 可达性。
@@ -202,6 +218,9 @@ node scripts/validate-registry.mjs
 **1. 为什么 GitHub 来源的更新提示不走 main HEAD？**
 main 上的中间提交可能不稳定。dsh-m 只跟踪 **release / tag**（优先 `releases/latest`，无 release 回退 tags 列表），安装时锁定 tag 指向的 commit SHA。
 
+**1.5 官方 Desktop 上能用哪些功能？**
+Desktop（desktop profile）首发支持：浏览市场、**安装新包**、插件开关；升级/卸载/自更新/一键重启会返回结构化拒绝并指引官方入口（官方插件管理页 / Desktop 应用重启）。市场安装标注、已装列表只反映 Desktop 自己装了什么；与 Web 端的收藏、操作记录互不同步。
+
 **2. 卸载 dsh-m 会删我的数据吗？**
 不会。只移除 profile 中的包引用（卸载前先下线运行中的界面），并把疑似残留路径报告给你。
 

package/docs/DESIGN.md

@@ -119,7 +119,7 @@ npm 安装 / GitHub 安装 / 升级 / 自升级 / 卸载是**同一个事务模
 - **卸载**（事务定序写死）：validate（严格读取：NOT_INSTALLED / NOT_DSH_PLUGIN / PLUGIN_METADATA_UNREADABLE，全部零写入零快照）→ 快照 → live-disable（先让 client bundle 下线，避免 404；回滚时尽力反向）→ 摘除该包补丁条目（`pnpm-workspace.yaml` 顶层 `patchedDependencies` 与 `package.json#pnpm.patchedDependencies`；残留条目会令 pnpm 以 `ERR_PNPM_UNUSED_PATCH` 整单失败，只精确匹配 `pkg` / `pkg@ver`，补丁文件本体保留并计入残留报告）→ remove → verify gone（仍在则回滚）。**不清理插件产生的数据/配置**，但把检测到的疑似残留路径（如 `~/.dsh/<plugin>.json`）列出报告。
 - **升级**：**按需检查**（`dshm_outdated` / `dshm_list` 时实时比对本地版本 vs npm latest / GitHub release，半自动——展示升级计划，确认后执行，即重开一次安装事务）。**不做后台定时器**。
 - **自更新**：dsh-m 对自己同样做版本比对 + 提示升级（设置页呈现）；执行即 `install-npm` 事务（integrity 缺失直接拒绝，不进事务）。
-- **开关（0.4.0，术语见 CONTEXT.md「开关/行覆盖/Bundle 选择/委派降级」）**：已装插件运行状态的可逆切换，**不经 Profile 变更事务**。粒度自动路由——包内补丁层单 insert 行且无配置补丁行 → 行覆盖（`cordis.patch.yml` 保注释 `disabled` 编辑，官方 `writePluginEnabled` 同款语义，启用写显式 `disabled: false`）；多行/不可解析 → Bundle 选择（`dsh.profile.bundles` 数组增删）。写路径委派优先：运行时探测官方 `pluginManager` 服务（`ctx.get`，按存在性不判版本号）→ `setPluginEnabled`/`setBundleEnabled`（白拿保护判定、unaddressable 识别、hmr 活体重组；applied 以复读 `listPlugins()` 为准）；服务缺席降级 loader `entry.update()` 直操作 + 锁内文件编辑（bundle 级恒 restart-required）。**必须持官方同款锁**（`withFileLock(<profile>/package.json)`）防与官方 UI 并发丢更新。架构决策见 [ADR-0001](./adr/0001-delegate-with-fallback-for-plugin-manager.md)。
+- **开关（0.4.0，术语见 GLOSSARY.md「开关/行覆盖/Bundle 选择/委派降级」）**：已装插件运行状态的可逆切换，**不经 Profile 变更事务**。粒度自动路由——包内补丁层单 insert 行且无配置补丁行 → 行覆盖（`cordis.patch.yml` 保注释 `disabled` 编辑，官方 `writePluginEnabled` 同款语义，启用写显式 `disabled: false`）；多行/不可解析 → Bundle 选择（`dsh.profile.bundles` 数组增删）。写路径委派优先：运行时探测官方 `pluginManager` 服务（`ctx.get`，按存在性不判版本号）→ `setPluginEnabled`/`setBundleEnabled`（白拿保护判定、unaddressable 识别、hmr 活体重组；applied 以复读 `listPlugins()` 为准）；服务缺席降级 loader `entry.update()` 直操作 + 锁内文件编辑（bundle 级恒 restart-required）。**必须持官方同款锁**（`withFileLock(<profile>/package.json)`）防与官方 UI 并发丢更新。架构决策见 [ADR-0001](./adr/0001-delegate-with-fallback-for-plugin-manager.md)。
 - **运行相位（0.4.0）**：loader fiber 状态投影（active/failed/pending/loading/unloading；fiber 缺失即已停用），读路径始终自读 loader entries，读路径零服务依赖。
 - **保护名单（0.4.0）**：`dsh-m` 自身 + 逐字镜像官方 `protectedModules` 16 项全集（锚点 `dsh-plugin-manager@0.1.7-rc.2 lib/index.js L1077`；DSH 升级后 diff 官方名单）。作用于**开关与卸载**（保护门为开关路径最先判定，纯名单检查先于在装枚举）；升级不受影响；委派路径信任官方 `readOnlyReason`。
 - **peer 兼容预检（0.4.0）**：install/upgrade 事务外 metadata 阶段，校验 `@deepseek-ai/dsh(-*)` peers 与运行时版本（`workspace:^/~/ *` 视为运行时版本；semver includePrerelease；官方 `evaluatePluginCompatibility` 同语义）。运行时版本解析失败或预检元数据读取失败 → 不拦（如实标注未检）；不兼容 → GUI 弹确认 / agent 回结构化 issue / CLI `--force`；无豁免机制（确认即通道）；GitHub 源明示 `compatSkipped`。

package/lib/cli.js

@@ -138,6 +138,9 @@ const HELP = `dshm — DSH Marketplace（DSH 插件市场：精选策展 + 社
   dshm restart --yes
   注意：变更互斥仅在进程内生效——变更执行期间不要同时从 GUI / Agent 工具发起另一次变更。
 
+profile 目标（0.9.0）：CLI 恒作用于 web profile；--profile web 为显式声明，
+  --profile desktop 会被拒绝——Desktop profile 的插件管理走官方 Desktop 插件管理页。
+
 环境变量：DSHM_REGISTRY_URL（registry 源覆盖）、DSHM_TIMEOUT_MS、DSHM_CACHE_TTL_MIN、DSHM_CACHE_DIR、
   DSHM_COMMUNITY_CATALOG=0（退出社区清单）、DSHM_COMMUNITY_CATALOG_PIN（锁定社区目录版本）
 `;
@@ -166,6 +169,15 @@ async function runCliDispatch(argv, deps, io) {
     };
     const { cmd, flags } = parseArgs(argv);
     const cfg = cliConfig();
+    // 0.9.0 双 profile（ADR-0005）：CLI 是 Web-only 入口（独立进程拿不到宿主 profileContext，
+    // 目标恒为 web profile）；--profile desktop / 其他非 web 值显式拒绝并指引官方入口，
+    // 绝不隐式回落 web（报告 §5.3「不能从不存在的 Desktop 模式推断」）。
+    const profileFlag = typeof flags.profile === 'string' ? flags.profile.trim() : '';
+    if (profileFlag !== '' && profileFlag !== 'web') {
+        err(`错误：dshm CLI 仅作用于 web profile，不支持 --profile ${profileFlag}。`);
+        err('Desktop profile 的插件管理请使用官方 Desktop 的插件管理页（Settings → Plugins），或回到 DSH Web 端使用 dsh-m。');
+        return 1;
+    }
     switch (cmd) {
         case 'help':
         case '--help':

package/lib/client.js

@@ -1219,6 +1219,8 @@ var ZH = {
   "restart.failed": "\u91CD\u542F\u5931\u8D25\uFF1A{err}",
   "restart.timeout": "\u91CD\u542F\u8D85\u65F6\uFF0C\u8BF7\u624B\u52A8\u68C0\u67E5 dsh web \u670D\u52A1\u72B6\u6001",
   "restart.hint.done": "\u5DF2\u8BF7\u6C42\u91CD\u542F DSH web\uFF08via {via}\uFF09\u3002\u670D\u52A1\u6062\u590D\u540E DSH Web \u4F1A\u5728\u540E\u53F0\u81EA\u52A8\u91CD\u8FDE\u3002",
+  "profile.restartHint": "\u53D8\u66F4\u5B8C\u6210\u3002Desktop \u63D2\u4EF6\u7531\u5B98\u65B9\u5E94\u7528\u7BA1\u7406\uFF1A\u8BF7\u9000\u51FA\u5E76\u91CD\u65B0\u6253\u5F00 Desktop \u5E94\u7528\uFF08\u5173\u95ED\u7A97\u53E3\u53EF\u80FD\u53EA\u662F\u9690\u85CF\uFF09\u4EE5\u52A0\u8F7D\u65B0\u72B6\u6001\u3002",
+  "profile.chipTitle": "\u5F53\u524D DSH profile\uFF1A{name}\uFF08Desktop \u9996\u53D1\u4EC5\u652F\u6301\u53EA\u8BFB\u5E02\u573A\u3001\u5B89\u88C5\u65B0\u5305\u4E0E\u5F00\u5173\uFF09",
   "phase.resolving": "\u89E3\u6790\u4F9D\u8D56",
   "phase.downloading": "\u4E0B\u8F7D",
   "phase.linking": "\u94FE\u63A5\u5B89\u88C5",
@@ -1472,6 +1474,8 @@ var EN = {
   "restart.failed": "Restart failed: {err}",
   "restart.timeout": "Restart timed out \u2014 check the dsh web service manually",
   "restart.hint.done": "Restart requested (via {via}). DSH Web will reconnect in the background after the service returns.",
+  "profile.restartHint": "Changes applied. Desktop plugins are managed by the official app: quit and reopen the Desktop app (closing the window may only hide it) to load the new state.",
+  "profile.chipTitle": "Current DSH profile: {name} (Desktop first release supports read-only market, installing new packages, and toggles)",
   "phase.resolving": "Resolving",
   "phase.downloading": "Downloading",
   "phase.linking": "Linking",
@@ -1913,7 +1917,7 @@ function TwoStepButton({ label, confirmLabel, className, onConfirm, disabled })
     arm ? confirmLabel : label
   );
 }
-function RestartBanner({ note, onDone }) {
+function RestartBanner({ note, onDone, desktop }) {
   const [phase, setPhase] = useState("idle");
   const [err, setErr] = useState(null);
   const restart = useCallback(async () => {
@@ -1956,7 +1960,7 @@ function RestartBanner({ note, onDone }) {
       { className: "dshm-banner-text" },
       phase === "restarting" ? lookup("restart.doing") : phase === "waiting" ? lookup("restart.waiting") : err ? lookup("restart.failed", { err }) : note || lookup("banner.done")
     ),
-    phase === "idle" && !err ? h("button", { className: "dshm-btn primary sm", onClick: restart }, lookup("restart.now")) : null,
+    phase === "idle" && !err && !desktop ? h("button", { className: "dshm-btn primary sm", onClick: restart }, lookup("restart.now")) : null,
     phase === "restarting" || phase === "waiting" ? Spin() : null,
     phase === "idle" && err ? h("button", { className: "dshm-btn sm", onClick: () => onDone(false) }, lookup("common.ok")) : null,
     phase === "idle" && !err ? h("button", { className: "dshm-btn sm", onClick: () => onDone(false) }, lookup("common.later")) : null
@@ -3332,10 +3336,13 @@ function MarketPanel({ onClose }) {
     removeIds: useCallback((ids) => setFavList(favStore.removeIds(ids)), [favStore])
   };
   const [pluginVersion, setPluginVersion] = useState(null);
+  const [profile, setProfile] = useState(null);
   useEffect(() => {
     let live = true;
     api("ping").then((r) => {
-      if (live) setPluginVersion(typeof r?.version === "string" && r.version ? r.version : null);
+      if (!live) return;
+      setPluginVersion(typeof r?.version === "string" && r.version ? r.version : null);
+      setProfile(r?.profile && typeof r.profile === "object" ? r.profile : null);
     }).catch(() => {
     });
     return () => {
@@ -3421,8 +3428,12 @@ function MarketPanel({ onClose }) {
   }, [toast]);
   const notify = useCallback(({ kind, text, needsRestart }) => {
     setToast({ kind, text });
-    if (kind === "ok" && needsRestart) setBanner({ text: lookup("banner.done") });
-  }, []);
+    if (kind === "ok" && needsRestart) {
+      setBanner(
+        profile && profile.kind === "desktop" ? { desktop: true, text: lookup("profile.restartHint") } : { text: lookup("banner.done") }
+      );
+    }
+  }, [profile]);
   return h(
     "div",
     { className: full ? "dshm-overlay full" : "dshm-overlay", onClick: onClose },
@@ -3456,6 +3467,7 @@ function MarketPanel({ onClose }) {
         ),
         h("span", { className: "dshm-spacer" }),
         pluginVersion ? h(DshmVersionChip, { version: pluginVersion }) : null,
+        profile && profile.kind !== "web" ? h("span", { className: "dshm-dshchip", title: lookup("profile.chipTitle", { name: profile.name }) }, profile.name) : null,
         // 窗口控制组（0.7.7）：最大化/还原 + 关闭，连体设计（系统化窗口按钮）
         h(
           "div",
@@ -3498,7 +3510,7 @@ function MarketPanel({ onClose }) {
         { className: toast.kind === "err" ? "dshm-banner err" : "dshm-banner" },
         h("span", { className: "dshm-banner-text" }, toast.text)
       ) : null,
-      banner ? h(RestartBanner, { note: banner.text, onDone: () => setBanner(null) }) : null
+      banner ? h(RestartBanner, { note: banner.text, onDone: () => setBanner(null), desktop: banner.desktop === true }) : null
     )
   );
 }

package/lib/core/active-profile.js

@@ -0,0 +1,73 @@
+/**
+ * ActiveProfile（0.9.0 双 profile，ADR-0005）：宿主当前 profile 的单一事实源。
+ *
+ * 事实源是官方 `ctx.get('profileContext')`（@deepseek-ai/dsh-app-boot，仅 dsh 启动的
+ * profile 存在）；缺席（旧宿主 / 测试 / CLI）时降级 fallback = web 推导目录，且 source
+ * 如实标注 'fallback'。kind 决定能力表：desktop 只放行 install/set-enabled；
+ * 未知名一律拒写（报告 §4「对未知 profile 显式拒写」）。不得从页面 Origin、DSH_HOME、
+ * process.cwd() 或文件存在性猜 profile（报告 §4 同业旁证 #655/#744）。
+ */
+import { webProfileDir, WEB_PROFILE } from './env.js';
+/** Desktop 首发能力表（ADR-0005）：只读市场 + 安装新包 + 开关；其余结构化拒绝并指引官方入口。 */
+const DESKTOP_ALLOWED = new Set(['install', 'set-enabled']);
+/** 结构化拒绝的官方入口指引（zh；GUI/工具/HTTP 三入口共用同一文案源）。 */
+export const WRITE_GUIDANCE = {
+    install: '',
+    'set-enabled': '',
+    upgrade: 'Desktop 暂不支持在市场内升级插件：请在官方 Desktop 的插件管理（Settings → Plugins）检查更新，或回到 DSH Web 使用 dsh-m 升级。',
+    uninstall: 'Desktop 暂不支持在市场内卸载插件：请使用官方 Desktop 的插件管理（Settings → Plugins）卸载。',
+    'self-upgrade': 'Desktop 暂不支持 dsh-m 自更新：请在 DSH Web 端执行，或关注官方 Desktop 的插件更新入口。',
+    restart: 'Desktop 不由 dsh-m 重启：请退出并重新打开 Desktop 应用（关闭窗口可能只是隐藏），让新安装的插件生效。',
+};
+export class ProfileUnsupportedError extends Error {
+    code;
+    action;
+    profile;
+    guidance;
+    constructor(action, profile) {
+        const guidance = WRITE_GUIDANCE[action];
+        super(`当前 profile（${profile.name}）不支持该操作（${action}）。${guidance}`);
+        this.name = 'ProfileUnsupportedError';
+        this.code = 'unsupported-on-profile';
+        this.action = action;
+        this.profile = profile.name;
+        this.guidance = guidance;
+    }
+}
+function kindOf(name) {
+    if (name === 'desktop')
+        return 'desktop';
+    if (name === WEB_PROFILE)
+        return 'web';
+    return 'unknown';
+}
+/**
+ * 守卫式解析：宿主注入 profileContext → 事实取宿主；缺席/抛错/畸形 → fallback web。
+ * 在 host 生命周期内只应调用一次（host.ts apply 期），结果作为不可变对象传递。
+ */
+export function resolveActiveProfile(ctx) {
+    let pc;
+    try {
+        const getter = ctx?.get;
+        if (typeof getter === 'function') {
+            pc = getter.call(ctx, 'profileContext');
+        }
+    }
+    catch {
+        pc = undefined;
+    }
+    const name = typeof pc?.name === 'string' && pc.name.trim() !== '' ? pc.name.trim() : undefined;
+    const dir = typeof pc?.dir === 'string' && pc.dir.trim() !== '' ? pc.dir.trim() : undefined;
+    if (pc === undefined || pc === null || name === undefined || dir === undefined) {
+        return { name: WEB_PROFILE, kind: 'web', dir: webProfileDir(), source: 'fallback' };
+    }
+    return { name, kind: kindOf(name), dir, source: 'host' };
+}
+/** 能力表守卫：违反即抛结构化 ProfileUnsupportedError（HTTP 409 / 工具 error result 共用）。 */
+export function assertWriteAllowed(profile, action) {
+    if (profile.kind === 'web')
+        return;
+    if (profile.kind === 'desktop' && DESKTOP_ALLOWED.has(action))
+        return;
+    throw new ProfileUnsupportedError(action, profile);
+}

package/lib/core/community.js

@@ -8,7 +8,7 @@
  */
 import { mkdir, readFile, rm, rename, writeFile } from 'node:fs/promises';
 import { isAbsolute, join, relative } from 'node:path';
-import { cacheDir } from './env.js';
+import { cacheRoot } from './env.js';
 import { decodeUtf8Fatal, fetchBytesLimited, describeFetchFailure } from './httpx.js';
 import { isExactVersion, npmLatest } from './versions.js';
 import { communityOutcome } from './market.js';
@@ -106,8 +106,9 @@ const ROUTE_LABELS = ['jsdelivr', 'npmmirror', 'unpkg'];
 const META_LATEST = 'meta.json';
 const metaPinName = (v) => `meta-pin-${v}.json`;
 const bodyName = (v) => `catalog-${v}.json`;
-function awesomeDir(namespace) {
-    return join(cacheDir(), namespace, 'awesome');
+/** 社区缓存目录（0.9.0 双 profile：web=旧路径，非 web 加 `<root>/<profile>` 段）。 */
+function awesomeDir(namespace, profile = 'web') {
+    return join(cacheRoot(profile), namespace, 'awesome');
 }
 /** 路径 containment：目标必须仍在 dir 内（防御拼接穿越）。 */
 function contained(dir, p) {
@@ -198,7 +199,7 @@ function trimPin(cfg) {
 }
 async function runChain(cfg, opts, ctrl) {
     const namespace = opts.namespace ?? 'host';
-    const dir = awesomeDir(namespace);
+    const dir = awesomeDir(namespace, opts.profile);
     const pin = trimPin(cfg);
     const budgetMs = opts.flightBudgetMs ?? COMMUNITY_CHAIN_BUDGET_MS;
     const startedAt = Date.now();
@@ -341,7 +342,7 @@ function flightKey(opts, pin) {
     const routesSig = opts.routes
         ? `${opts.routes.registryBase ?? ''}|${(opts.routes.fileBases ?? []).join(',')}`
         : 'default';
-    return [ns, pin ?? '', opts.force ? 'force' : 'normal', routesSig].join('§');
+    return [ns, opts.profile ?? 'web', pin ?? '', opts.force ? 'force' : 'normal', routesSig].join('§');
 }
 function abortError() {
     const err = new Error('Aborted');

package/lib/core/env.js

@@ -8,9 +8,21 @@ export function dshHome() {
 export function webProfileDir() {
     return join(dshHome(), 'profiles', WEB_PROFILE);
 }
-/** registry 缓存目录（可被 DSHM_CACHE_DIR 覆盖，便于测试） */
+/**
+ * 缓存根（0.9.0 双 profile，ADR-0005）：web 恒走旧路径（DSHM_CACHE_DIR 或
+ * `$DSH_HOME/dshm/cache`）——不迁移不清空；非 web profile 加同名段
+ * （`<root>/<profile>`），实现 profile 专属缓存互不污染。
+ * 测试经 DSHM_CACHE_DIR 指到临时目录（红线路径与既有用例一致）。
+ */
+export function cacheRoot(profile = WEB_PROFILE) {
+    const base = process.env.DSHM_CACHE_DIR || join(dshHome(), 'dshm', 'cache');
+    if (profile === WEB_PROFILE)
+        return base;
+    return join(base, profile);
+}
+/** registry 缓存目录（可被 DSHM_CACHE_DIR 覆盖，便于测试）。web 语义的历史别名 = cacheRoot('web')。 */
 export function cacheDir() {
-    return process.env.DSHM_CACHE_DIR || join(dshHome(), 'dshm', 'cache');
+    return cacheRoot(WEB_PROFILE);
 }
 /** 安装类操作的超时（毫秒） */
 export function installTimeoutMs() {

package/lib/core/host-api.js

@@ -2,9 +2,10 @@
  * /dshm Host API dispatcher（DESIGN.md §4/§5）：可注入的 method 分发 + 请求防护 +
  * HTTP 状态映射，供 host.ts 与契约测试共用。
  *
- * 解析顺序固定：只接受 POST → JSON Content-Type → 有上限读取并 drain body →
- * 顶层必须是非 null/非数组对象且有 method → `ping` 跳过 guard，否则
- * trustedRestartRequest host-equivalence guard → typed method/业务错误映射 → 其他 500。
+ * 解析顺序固定：宿主信任检查（0.9.0 起委派官方 `connection.requestRejection`，
+ * 全 method 含 ping 与未知 method，任何 body/side effect 之前，fail-closed）→
+ * 只接受 POST → JSON Content-Type → 有上限读取并 drain body →
+ * 顶层必须是非 null/非数组对象且有 method → typed method/业务错误映射 → 其他 500。
  */
 import { BOOT_ID, publicInstallStatus } from './dsh-cli.js';
 import { resolveDshVersion } from './dsh-version.js';
@@ -16,9 +17,11 @@ import { getCommunitySummary } from './community.js';
 import { RegistryConfigError } from './registry-controller.js';
 import { checkRegistryEntries } from './registry-check.js';
 import { CATEGORIES } from './registry.js';
-import { servingPort, scheduleRestart, trustedRestartRequest } from './restart.js';
+import { servingPort, scheduleRestart } from './restart.js';
 import { togglePlugin, ToggleError } from './toggle.js';
 import { IncompatibleError } from './compat-check.js';
+import { ProfileUnsupportedError, assertWriteAllowed } from './active-profile.js';
+import { DesktopOpsError, desktopInstallFromRegistry, desktopToggle } from './profile-ops.js';
 export class BadJsonError extends Error {
 }
 export class BodyTooLargeError extends Error {
@@ -66,7 +69,20 @@ function readBody(req, maxBytes = BODY_MAX_BYTES) {
         });
     });
 }
-async function parseRequest(req) {
+async function parseRequest(req, rejectRequest) {
+    // 宿主信任检查第一位（0.9.0 委派官方 requestRejection）：先于 POST/Content-Type/body——
+    // 被拒请求零 body 消耗、零业务调用（报告 §3.2/§8）。返回 401/403 原样投影。
+    let rejection;
+    try {
+        rejection = rejectRequest(req);
+    }
+    catch {
+        // 宿主检查异常一律 fail-closed，异常细节不外泄（报告 §3.2）
+        rejection = 403;
+    }
+    if (rejection !== undefined) {
+        throw new ApiProtocolError(rejection, rejection === 401 ? '请求未通过宿主认证（未登录或凭据无效）' : '请求未通过宿主信任检查（不可信 Host/Origin 或跨站）');
+    }
     if ((req.method || 'GET').toUpperCase() !== 'POST') {
         throw new ApiProtocolError(405, '只接受 POST');
     }
@@ -91,9 +107,6 @@ async function parseRequest(req) {
     const method = typeof body.method === 'string' ? body.method.trim() : '';
     if (!method)
         throw new BadJsonError('缺少 method');
-    if (method !== 'ping' && !trustedRestartRequest(req)) {
-        throw new ApiProtocolError(403, '拒绝跨源请求');
-    }
     return { method, body };
 }
 function strArg(body, key) {
@@ -139,6 +152,14 @@ function errorStatus(err) {
     }
     if (err instanceof ApiProtocolError)
         return { status: err.status, payload: { ok: false, error: err.message } };
+    if (err instanceof ProfileUnsupportedError) {
+        // 0.9.0：Desktop/未知 profile 的能力表拒绝——结构化 code + 官方入口指引
+        return { status: 409, payload: { ok: false, error: err.message, code: err.code, action: err.action, profile: err.profile, guidance: err.guidance } };
+    }
+    if (err instanceof DesktopOpsError) {
+        // 0.9.0：Desktop adapter 失败（no-manager/install-refused/enable-failed/verify-failed）
+        return { status: 409, payload: { ok: false, error: err.message, code: err.code } };
+    }
     if (err instanceof ToggleError) {
         const status = err.code === 'protected' ? 403 : err.code === 'not-installed' ? 404 : 409;
         return { status, payload: { ok: false, error: err.message, code: err.code } };
@@ -200,8 +221,14 @@ export function createApiDispatcher(ctx) {
         resolveDshVersion: ctx.deps?.resolveDshVersion ?? resolveDshVersion,
         getService: ctx.deps?.getService,
         toggle: ctx.deps?.togglePlugin ?? togglePlugin,
+        desktopInstall: ctx.deps?.desktopInstall ?? desktopInstallFromRegistry,
+        desktopToggle: ctx.deps?.desktopToggle ?? desktopToggle,
     };
     const cfg = () => ctx.controller.config;
+    // 0.9.0：宿主信任检查委派（含 ping 与未知 method，fail-closed）；
+    // profile 为 host 生命周期内不可变对象（host.ts apply 期解析一次）
+    const rejectRequest = ctx.deps?.rejectRequest ?? (() => 403);
+    const profile = ctx.profile;
     // DSH 版本一次性解析，dispatcher 创建即预热（首个 ping 不吃 spawn 回退的延迟）
     const dshVersionP = Promise.resolve()
         .then(() => d.resolveDshVersion())
@@ -210,7 +237,7 @@ export function createApiDispatcher(ctx) {
         const abort = new AbortController();
         res.once('close', () => abort.abort());
         try {
-            const { method, body } = await parseRequest(req);
+            const { method, body } = await parseRequest(req, rejectRequest);
             const signal = abort.signal;
             let payload;
             switch (method) {
@@ -222,6 +249,8 @@ export function createApiDispatcher(ctx) {
                         boot: BOOT_ID,
                         // DSH 运行版本（头部 chip 数据源）；解析失败 → undefined → JSON 序列化时字段缺席
                         dshVersion: (await dshVersionP) ?? undefined,
+                        // 0.9.0 双 profile：GUI/工具展示当前 profile 与能力边界
+                        profile: { name: profile.name, kind: profile.kind, source: profile.source },
                     };
                     break;
                 case 'self-check': {
@@ -238,6 +267,8 @@ export function createApiDispatcher(ctx) {
                     break;
                 }
                 case 'self-upgrade': {
+                    // 0.9.0：Desktop 结构化拒绝（能力表），Web 走既有路径
+                    assertWriteAllowed(profile, 'self-upgrade');
                     // M2 Task 3：self-upgrade 收编 market.selfUpgrade（统一 mutation session + 守卫，直调事务旁路封死）
                     const result = await d.selfUpgrade(ctx.pkg.name, ctx.pkg.version, cfg(), { signal });
                     payload = {
@@ -327,7 +358,8 @@ export function createApiDispatcher(ctx) {
                     const target = strArg(body, 'pkg');
                     if (!target)
                         throw new ApiProtocolError(400, '缺少 pkg');
-                    const result = await readInstalledPluginReadme(target);
+                    // 0.9.0 双 profile：README 只读当前 profile 的 node_modules
+                    const result = await readInstalledPluginReadme(target, profile.dir);
                     payload = { ...result };
                     break;
                 }
@@ -338,6 +370,18 @@ export function createApiDispatcher(ctx) {
                     const id = strArg(body, 'id');
                     if (!id)
                         throw new ApiProtocolError(400, '缺少 id');
+                    // 0.9.0：desktop → 官方 pluginManager 委派（新包）；web → 既有事务
+                    if (profile.kind !== 'web') {
+                        assertWriteAllowed(profile, 'install');
+                        payload = { ...(await d.desktopInstall(id, cfg(), {
+                                version: typeof body.version === 'string' ? body.version : undefined,
+                                forceIncompatible: boolArg(body.forceIncompatible),
+                                namespace: 'host',
+                                profile: profile.name,
+                                signal,
+                            })) };
+                        break;
+                    }
                     const version = typeof body.version === 'string' ? body.version : undefined;
                     const result = await d.installFromRegistry(id, cfg(), {
                         version,
@@ -352,6 +396,8 @@ export function createApiDispatcher(ctx) {
                     const target = strArg(body, 'pkg');
                     if (!target)
                         throw new ApiProtocolError(400, '缺少 pkg');
+                    // 0.9.0：Desktop 结构化拒绝（官方入口指引）
+                    assertWriteAllowed(profile, 'uninstall');
                     const result = await d.uninstallPlugin(target, cfg(), { namespace: 'host', signal });
                     payload = { ...result };
                     break;
@@ -362,6 +408,12 @@ export function createApiDispatcher(ctx) {
                         throw new ApiProtocolError(400, '缺少 pkg');
                     if (typeof body.enabled !== 'boolean')
                         throw new ApiProtocolError(400, '缺少 enabled（必须为 boolean）');
+                    // 0.9.0：desktop → 官方管理器委派（服务缺席结构化拒绝，禁 fallback 文件写）
+                    if (profile.kind !== 'web') {
+                        assertWriteAllowed(profile, 'set-enabled');
+                        payload = { ...(await d.desktopToggle(target, body.enabled, { getService: d.getService, profileDir: profile.dir })) };
+                        break;
+                    }
                     const result = await d.toggle(target, body.enabled, { getService: d.getService });
                     payload = { ...result };
                     break;
@@ -370,6 +422,8 @@ export function createApiDispatcher(ctx) {
                     const target = strArg(body, 'pkg');
                     if (!target)
                         throw new ApiProtocolError(400, '缺少 pkg');
+                    // 0.9.0：Desktop 结构化拒绝（无官方 upgrade API，指引 Settings → Plugins）
+                    assertWriteAllowed(profile, 'upgrade');
                     const result = await d.upgradePlugin(target, cfg(), {
                         forceIncompatible: boolArg(body.forceIncompatible),
                         namespace: 'host',
@@ -379,6 +433,8 @@ export function createApiDispatcher(ctx) {
                     break;
                 }
                 case 'restart': {
+                    // 0.9.0：Desktop 不触发旧 helper（Electron 生命周期归官方；杀子进程=红线）
+                    assertWriteAllowed(profile, 'restart');
                     const result = d.scheduleRestart(servingPort(req));
                     payload = { ...result };
                     break;