dsh-m 0.9.12 → 0.9.14

package/README.en.md

@@ -36,7 +36,7 @@ The default registry includes DSH Skins, ModSearch, the Lark / QQ / Weixin / WeC
 
 | View | Capabilities |
 |---|---|
-| **Market** | **Zoned** (0.7.0): **Community** (default landing, the 4,000+ full catalog) and **Curated** (hand-picked primary registry, single page) as two independent zones — each keeps its own category/search/sort/pagination state across tab switches; plus a **Favorites** zone (browser-local bookmarks with delisted-entry detection and one-click cleanup). Community zone: two-row collapsible category chips with sticky collapse, sort switch (downloads/stars/added × asc/desc), windowed pagination (24/48/96 per page), card byline (owner/downloads/stars); clicking a card opens a **detail modal** (superset of the card: download window, screenshot lightbox, capabilities collapsed by default, install command); npm sources pin the latest exact version, GitHub sources pin the release/tag commit |
+| **Market** | **Zoned** (0.7.0): **Community** (default landing, the 4,000+ full catalog) and **Curated** (hand-picked primary registry, single page) as two independent zones — each keeps its own category/search/sort/pagination state across tab switches; plus a **Favorites** zone (browser-local bookmarks with delisted-entry detection and one-click cleanup). Community zone: two-row collapsible category chips with sticky collapse, sort switch (downloads/stars/added × asc/desc), windowed pagination (24/48/96 per page), card byline (owner/downloads/stars); clicking a card opens a **detail modal** (superset of the card: download window, screenshot lightbox, capabilities collapsed by default, install command — the row is hidden on desktop and for installed entries since 0.9.14); npm sources pin the latest exact version, GitHub sources pin the release/tag commit |
 | **Operations** | Install/upgrade/uninstall/toggle all flow through a global operation log (0.7.0): state lives off cards, surviving paging/searching/tab switches; persisted to localStorage and resumed after host reloads (each restored op re-validated "still applies" before executing); benignly-invalidated ops show as a neutral "skipped"; the Installed page gains "Update all (N)" batch queueing |
 | **Installed** | What the current profile (web / desktop, 0.9.0+) actually has, annotated "via market / non-market"; update badges, upgrade, two-step confirm uninstall; 📖 README preview (64KB cap); **live phase badge** (●active / ●failed / ○pending) and a **one-click toggle** (0.4.0: delegates to the official pluginManager service for live application; falls back to file-level edits + restart notice when absent; dsh-m itself and official host lifelines are locked) |
 | **Settings** | Registry address draft with "Force refresh / Validate & apply / Restore default / Download default registry.json"; configured vs active address and status at a glance (shown only when abnormal); community catalog toggle; dsh-m self-update |
@@ -48,6 +48,21 @@ The default registry includes DSH Skins, ModSearch, the Lark / QQ / Weixin / WeC
 
 The restart chain below applies to **Web only** (Desktop takes effect via the official app lifecycle: after installing, quit and reopen the Desktop app — see the 0.9.0 section). After any mutation, the already-open Market and Installed views refresh the profile state together, keeping badges and cards in sync without closing and reopening the marketplace; a "⚡ Restart" banner appears — under systemd, the DSH launcher's `appExit` hook hands the restart back to a unit configured with `Restart=on-failure` or `Restart=always`, avoiding a `systemctl` helper inside the unit cgroup that is about to stop; if `appExit` is unavailable, the fallback uses a manager-owned transient `systemd-run` service and only then a detached helper. The client confirms the replacement by boot id and dismisses the banner, leaving DSH Web's own background connection recovery in control; it does not force a full-page reload during the auth/route handoff. The restart chain has been live-verified on the current DSH Web `0.2.0-rc.2` (2026-10-01): dsh-m probes the unit's `Restart=` policy, hands the stop back via `appExit`, the `status=75/TEMPFAIL` exit is caught by the Restart policy and auto-started, and after recovery the page reconnects in the background with the panel fully functional. Historical scope: the `0.1.5-rc.1` era covered live `/dshm` ping and authenticated `303 → 200` checks; `0.1.2-rc.1` is covered by contract checks plus runtime shape-detection fallback (see the verified array) — with the deployment moved on, no live E2E is chased on retired generations; the transient `systemd-run` fallback only applies to hosts without `appExit` (all supported generations provide it) and stays a documented fallback rather than a release gate; repeated install/uninstall is covered by the profile-transaction test surface (compensation, post-install guard, 813 cases) plus the 0.4.0→0.4.2 consecutive-release evidence. Installs stream live pnpm progress (resolve → download → link → build).
 
+### Changed in 0.9.14 (instant-open quartet + context-aware "Install command" row)
+
+- **Instant-open quartet** — a fix combo for the marketplace spinner that used to show on every panel open:
+  - **SWR (serve-stale-while-revalidate)**: expired TTL no longer blocks on the network — the disk cache is returned immediately as a snapshot (the community zone keeps its honest "cached snapshot" banner; never pretending to be fresh), a background single-flight refreshes it for the next open. "Force refresh" semantics unchanged (always synchronous; community card stays decoupled).
+  - **Route stickiness**: the default two-route chain (GitHub raw → jsDelivr mirror) is ordered by the **last successful route** recorded in the cache — once the mirror has worked it goes first, instead of re-paying the raw timeout on every cold open (~10-20s saved per cold open on CN networks).
+  - **Persistent probe cache**: per-page npm/GitHub latest-version probes now persist to a disk envelope (`latest/`, survives restarts) — no probe replay on the first open after a DSH service restart.
+  - **Client snapshot**: the default first page is cached browser-locally (10-min TTL); opening the panel renders the last response first and refreshes in the background — the spinner now only appears on the very first use (no snapshot yet).
+- **Detail modal "Install command" row is context-aware**:
+  - **Scenario**: the row's derived command hardcodes `dsh plugin --profile web add …`, and community entries' upstream `install` text carries the same web-profile semantics — neither source looks at the current host profile. Copying it on Desktop installs into the web profile (invisible in the current UI); for already-installed entries the command is pure noise (live screenshot evidence: desktop + the dsh-m self entry, `installed` badge and the command on screen together).
+  - **Change**: the row is hidden entirely on desktop and for installed entries; web + not-installed keeps today's behavior (the CLI bootstrap path, same command as Quick start). The sanctioned Desktop path is the modal's own Install button (official pluginManager delegation, ADR 0005 discipline). No "simplify by dropping --profile": the explicit `--profile web` flag is a settled 0.9.0 decision (see the "profile target" section), and a bare `dsh plugin add` has ambiguous default-profile semantics — not simpler, just worse.
+
+### Changed in 0.9.13 — desktop chip hover copy updated (owner decision)
+
+- The old copy "当前 DSH profile：{name}（Desktop 首发仅支持只读市场、安装新包与开关）" was stale after 0.9.8 opened upgrades/uninstall/self-upgrade; per owner decision it now reads "当前生效 Profile" (Active profile).
+
 ### Changed in 0.9.12 — re-issue of 0.9.11
 
 0.9.11 hit a npmjs ghost publish: the OIDC publish was accepted and **staged** (CLI exit 0, provenance published to the transparency log) but never committed into the registry — GET 404, and re-publishing the same version is rejected with 409 `Cannot publish over previously staged version`. After waiting out any propagation, the standard workaround applies: re-issue under a new number. **Content is identical to 0.9.11: settings force-refresh no longer takes down the community catalog card.**

package/README.md

@@ -36,7 +36,7 @@
 
 | 视图 | 能力 |
 |---|---|
-| **市场** | **分区制**（0.7.0）：**社区**（默认落地页，4,000+ 条全量目录）与**精选**（手工策展主清单，单页直出）两个独立分区，各有自己的分类/搜索/排序/分页状态（切 tab 互不重置）；另有**收藏**分区（浏览器本地书签，自动检测下架条目并一键清理）。社区区：分类 chips 两行折叠 + 吸顶收缩、排序（下载量/Star/收录日期 × 升降）、页码窗口化分页（24/48/96 每页）、卡片 byline（作者/下载量/Star）；卡片点开**详情 Modal**（卡片信息超集：下载量窗口三要素、截图灯箱、能力披露默认收起、安装命令）；npm 源锁定最新精确版本，GitHub 源锁定 release/tag 指向的 commit |
+| **市场** | **分区制**（0.7.0）：**社区**（默认落地页，4,000+ 条全量目录）与**精选**（手工策展主清单，单页直出）两个独立分区，各有自己的分类/搜索/排序/分页状态（切 tab 互不重置）；另有**收藏**分区（浏览器本地书签，自动检测下架条目并一键清理）。社区区：分类 chips 两行折叠 + 吸顶收缩、排序（下载量/Star/收录日期 × 升降）、页码窗口化分页（24/48/96 每页）、卡片 byline（作者/下载量/Star）；卡片点开**详情 Modal**（卡片信息超集：下载量窗口三要素、截图灯箱、能力披露默认收起、安装命令（0.9.14 起 desktop 上下文/已安装条目隐藏该折叠行））；npm 源锁定最新精确版本，GitHub 源锁定 release/tag 指向的 commit |
 | **操作记录** | 安装/升级/卸载/开关全部走全局操作记录（0.7.0）：状态不挂卡片，翻页/搜索/切 tab 不丢；localStorage 持久化，宿主重载后自动恢复未完成操作（逐条校验「此刻仍成立才执行」）；良性前提消失以中性「已跳过」呈现；已装页支持「全部更新 (N)」批量入队 |
 | **已装** | 当前 profile（web / desktop，0.9.0 起）实装列表，标注「市场安装 / 非市场安装」；可升级徽标、升级、两段式确认卸载；📖 README 预览（64KB 截断）；**运行相位徽标**（●active / ●failed / ○pending）与**一键开关**（0.4.0：委派官方 pluginManager 服务活体生效，服务缺席时文件级编辑 + 重启提示；dsh-m 自身与官方宿主命脉锁定不可开关） |
 | **设置** | registry 地址草稿 +「强制刷新 / 校验并应用 / 恢复默认 / 下载默认 registry.json」；配置地址、生效来源与状态一目了然（仅异常时提示）；社区目录开关；dsh-m 自更新 |
@@ -48,6 +48,21 @@
 
 以下重启链路仅适用于 **Web**（Desktop 的生效走官方应用生命周期：安装完成后退出并重新打开 Desktop 应用即可，见 0.9.0 节）。安装 / 卸载 / 升级完成后，当前已打开的市场页与已装页会一起重新读取 profile 状态并同步徽标/卡片，不需要关闭后重新打开插件市场；随后出现「⚡ 一键重启」横幅——受 systemd 管理时通过 DSH launcher 的 `appExit` 交给服务的 `Restart` 策略，避免在待停止 unit 的 cgroup 内启动 `systemctl` helper；无 `appExit` 的 systemd 兜底改用 manager-owned transient `systemd-run`，最后才退回 detached-helper。客户端按 boot id 确认新进程已恢复后关闭横幅，交由 DSH Web 自身的后台连接重试恢复页面，不强制整页刷新，避免认证/路由切换期间白屏。重启链路已在当前 DSH Web `0.2.0-rc.2` 实机核验（2026-10-01）：dsh-m 探测 unit `Restart=` 策略后经 `appExit` 交还 systemd，`status=75/TEMPFAIL` 退出由 Restart 策略接住自动拉起，服务恢复后页面后台重连、面板全功能可用。历史口径：`0.1.5-rc.1` 时代已核验 `/dshm` ping 与带认证 `303 → 200`；`0.1.2-rc.1` 按契约核对 + 形态探测兜底收录（verified 数组），部署面演进后不再追旧代 live E2E；transient `systemd-run` 兜底仅适用于无 `appExit` 的宿主（受支持代际均提供 `appExit`），保持设计兜底而非发布门槛；连续安装/卸载由 profile 事务测试面（补偿事务、装后守卫等 813 用例）与 0.4.0→0.4.2 连续发布实证覆盖。安装过程实时显示 pnpm 进度（解析 → 下载 → 链接 → 构建）。
 
+### 0.9.14 变更（市场秒开四件套 + 详情 Modal 安装命令显隐）
+
+- **市场秒开四件套**：针对「每次打开市场必现『加载收录清单中…』」的加速组合拳——
+  - **SWR 先回缓存**：精选清单与社区目录的 TTL 过期不再同步等网络——磁盘缓存存在即**立即返回快照**（社区侧照常显示「缓存快照」横幅，绝不冒充最新），后台单飞自愈，下次打开即新；「强制刷新」按钮语义不变（始终同步强刷，社区卡不连坐）。
+  - **线路粘性**：默认双线路（GitHub 原始文件 → jsDelivr 镜像）按缓存记录的**上次成功线路**排序——镜像成功过就先走镜像，不再每次白等主线路失败（大陆网络实测每次冷打开省 10-20s 等待）。
+  - **探测缓存落盘**：页条目 npm/GitHub 版本探测缓存从纯内存改为磁盘信封（`latest/`，跨重启存活）——DSH 服务重启后首次打开市场不再重放探测。
+  - **客户端快照**：默认首页响应存浏览器本地（10 分钟 TTL），打开面板先渲染上次数据再后台换新——加载 spinner 仅首次使用（无任何快照）出现。
+- **详情 Modal「安装命令」折叠行按上下文显隐**：
+  - **场景**：折叠行命令推导写死 `dsh plugin --profile web add …`，社区条目的上游 install 原文也同为 --profile web 语义——两个来源都不看当前宿主 profile。desktop 上下文里照抄会把包装进 web profile（当前界面看不见）；已安装条目还挂着命令纯属噪音（实机截图实证：desktop + dsh-m 自身条目，`已安装` 徽章与命令同屏）。
+  - **变更**：desktop 上下文与已安装条目**整行隐藏**；web 未安装条目行为不变（CLI bootstrap 路径保留，「30 秒上手」同款命令）。desktop 装机正路是弹窗内「安装」按钮（官方 pluginManager 委派，ADR 0005 纪律）。不做「精简命令去掉 --profile」——显式 `--profile web` 是 0.9.0 拍板的设计（README「profile 目标」节），裸命令的默认 profile 语义含糊，精简反而更差。
+
+### 0.9.13 变更：desktop 角标悬停文案更新（主人拍板）
+
+- 旧文案「当前 DSH profile：{name}（Desktop 首发仅支持只读市场、安装新包与开关）」在 0.9.8 开放升级/卸载/自升级后已过时；按主人拍板改为「**当前生效 Profile**」（en: Active profile）。
+
 ### 0.9.12 变更：0.9.11 的重发
 
 0.9.11 在 npmjs 遭遇幽灵发布：OIDC 发布被受理并 **staged**（CLI exit 0、provenance 已上 Transparency Log），但从未 commit 进注册表——GET 404、同版本重发 409 `Cannot publish over previously staged version`。等待自愈无果后按标准解法换号重发。**内容与 0.9.11 完全一致：设置页「强制刷新」不再连坐社区清单卡。**

package/docs/DESIGN.md

@@ -21,6 +21,7 @@
 - **严格 v1 schema**：顶层只允许 `version/plugins`，条目只允许 `id/name/description/category/tags/source/npm/github/homepage/icon`；未知字段、非法 ID/npm/GitHub/URL、重复 ID/tag、字段超限、`plugins` 超过 1,000 条均拒绝整份清单（不截断、不部分加载）；超过 200 条提示性能边界。
 - **缓存模型**：cache 按 namespace 分目录（Host 与 Agent tools 用 `host/`，独立 CLI 用 `cli/`，互不删除），按带算法版本的 cacheKey 分文件（`CacheFile v2`：原子临时文件 + fsync + rename，0700/0600，symlink 拒写，同 key 进程内写锁）。**候选验证只写候选 cache，绝不 prune 旧源**；settings 写入成功后才 `commitActiveSource`：先原子写 accepted-source metadata（`host/active-source.json`，仅 Host），再清理非当前 custom cache；metadata 失败不 prune、prune 失败保留旧 cache，均只降级为 warning，不撤销已生效的配置。切换后只保留默认缓存与当前 custom 缓存。
 - **统一安全 HTTP**：所有 JSON/text/HEAD 请求共享同一 primitive——手动重定向（每跳校验协议、最多 3 跳、循环检测、signal 传播、返回最终 URL）+ 响应大小上限 + 超时。
+- **秒开缓存语义（0.9.14 SWR）**：`loadRegistry` 与社区获取链的 TTL 过期不再同步等网络——磁盘缓存存在即**先回 stale**（registry `source='default-cache'`、社区 `status='stale'` 既有契约与「缓存快照」横幅），后台**单飞**刷新写回 cache（同 key 进行中复用；不接调用者 signal，后台自愈不被请求 abort 腰斩；`force`/candidate/显式下载三路径不经 SWR）。默认双线路**粘性**：`loadDefaultChain` 读 cache 记录的上次成功 `source` 排序线路（稳定排序，cache 缺失 = 原序，force 同样生效）。社区 bg 自愈是 force flight——**不走同版本短路**（`if (!opts.force)` 守卫），每 TTL 至多全量重拉一次正文（同步路径的短路优化保留）。页条目 latest 探测缓存整体迁入 `latest-cache.ts`：内存 Map + `<cacheRoot>/latest/<ns>.json` 信封 write-through（`latest/` 在 nsDir 之外，规避 `pruneCaches` 顶层 `*.json` 清扫；懒 seed、损坏/版本不符整弃、24h 硬上限淘汰），跨服务重启存活。客户端默认首页响应存 localStorage（10min TTL、双 zone 分键、读侧再过 normalize 收敛）——面板打开先渲染快照后 background 换新。
 - **live 语义**：registry 地址是 live 设置，应用成功即时生效（无需重启）；只有**首次部署新 Host 代码**需要一次用户确认后的 DSH Web 重启。`timeoutMs`/`cacheTtlMin` 亦为 live 读取；agent 框架注册时的静态工具 deadline 不承诺热更新。
 
 ### 2.2 Schema（v1 定稿，严格校验）
@@ -88,7 +89,7 @@
   - 分页：页码窗口化（`1 … n-1 n n+1 … total`，≤7 页全显）+ 页大小 24/48/96 + 筛选变化重置页 1 + 翻页回顶；仅 prev/next 的旧分页退役。
   - 搜索：相关性加权管线——NFKC 归一化 + 中西文边界插空格 + 字段权重（name/npm > owner > 描述 > 分类）+ 命中类型加分 + 按条目缓存归一化结果；输入 250ms debounce + IME composition 全程处理 + draft/已提交 query 分离。
   - 描述 5 行钳制（真实溢出才显示展开钮）；**数据层双语**——描述按 UI 语言取 zh/en（数据现成），UI 完整双语字典列 backlog。
-- **详情 = Modal 且为卡片超集**（「detail 显示少于摘要就是倒退」）：byline / 分类 / 收录日期 / 下载量窗口三要素（计数 + 窗口 + 核对时间）/ 描述全文 / 截图灯箱（←→/Esc、**禁自动轮播**）/ 能力披露 + 红线（**默认收起**）/ 安装命令折叠行 / deprecated 替代链接；精选条目超集另加 verified 与 tags。**安装确认走 Modal**。卡片瘦身：能力披露、截图、安装命令全部迁出卡片（Q44 精神「只在详情层、默认收起」不变，载体升级）。
+- **详情 = Modal 且为卡片超集**（「detail 显示少于摘要就是倒退」）：byline / 分类 / 收录日期 / 下载量窗口三要素（计数 + 窗口 + 核对时间）/ 描述全文 / 截图灯箱（←→/Esc、**禁自动轮播**）/ 能力披露 + 红线（**默认收起**）/ 安装命令折叠行（0.9.14 起按上下文显隐：desktop 上下文与已安装条目整行隐藏——命令两来源恒为 `--profile web` 语义，desktop 装机走弹窗内安装按钮）/ deprecated 替代链接；精选条目超集另加 verified 与 tags。**安装确认走 Modal**。卡片瘦身：能力披露、截图、安装命令全部迁出卡片（Q44 精神「只在详情层、默认收起」不变，载体升级）。
 - **全局操作记录**：每个变更操作一条 record（`queued / running / input=冲突待决 / done / warned / failed`），**状态不挂卡片**——翻页、搜索、切 tab 不丢；**localStorage 持久化队列**，宿主重载恢复时逐条校验「此刻仍成立才执行，否则报告」；覆盖安装、升级、卸载、开关。已装侧跟随一致化：「全部更新 (N)」批量入口 + tab 更新红点 + 卡片视觉与发现侧同体系；组管理、个人备注列 backlog。
 - **收藏**：浏览器 localStorage 本地收藏（不进 profile、不进服务端）；收藏区 stale 条目（目录中已下架）单独提示 + 一键清理。
 - **agent/CLI 契约（允许破坏性变更）**：`dshm_search` 参数改为 `query / category / source('primary'|'community'|'all'，默认 all，与 GUI 分区对齐) / limit(默认 10，clamp 1–80) / offset(真翻页)`；`primary_only` 删除。输出补 `community` 标记与 `downloads/stars`；社区分类直出中文标签（不再回退英文 slug）；工具描述整体重写（真实规模 + 翻页语义，删「registry is curated & small」）。CLI 对齐 `--source / --offset / --limit`，默认 10 条。

package/lib/client.js

@@ -237,6 +237,98 @@ var init_market_state = __esm({
   }
 });
 
+// src/client/market-snapshot.js
+var market_snapshot_exports = {};
+__export(market_snapshot_exports, {
+  MARKET_SNAPSHOT_TTL_MS: () => MARKET_SNAPSHOT_TTL_MS,
+  clearMarketSnapshots: () => clearMarketSnapshots,
+  isDefaultFirstPageQuery: () => isDefaultFirstPageQuery,
+  readMarketSnapshot: () => readMarketSnapshot,
+  snapshotKey: () => snapshotKey,
+  writeMarketSnapshot: () => writeMarketSnapshot
+});
+function snapshotKey(zone) {
+  return `dshm-marketsnap-${zone === "primary" ? "primary" : "community"}`;
+}
+function defaultLimitOf(zone) {
+  return zone === "primary" ? 96 : DEFAULT_PAGE_SIZE;
+}
+function defaultSortOf(zone) {
+  return zone === "community" ? { field: "downloads", dir: "desc" } : null;
+}
+function sameJson(a, b) {
+  return JSON.stringify(a ?? null) === JSON.stringify(b ?? null);
+}
+function isDefaultFirstPageQuery(query, zone) {
+  const q = query && typeof query === "object" ? query : {};
+  if (typeof q.query === "string" ? q.query !== "" : q.query != null) return false;
+  if (q.category != null && q.category !== "") return false;
+  const offset = typeof q.offset === "number" && Number.isFinite(q.offset) ? q.offset : 0;
+  if (offset !== 0) return false;
+  if ((q.limit ?? DEFAULT_PAGE_SIZE) !== defaultLimitOf(zone)) return false;
+  return sameJson(q.sort ?? null, defaultSortOf(zone));
+}
+function readMarketSnapshot(storage, opts = {}) {
+  if (!storage || typeof storage.getItem !== "function") return null;
+  const zone = opts.zone === "primary" ? "primary" : "community";
+  const now = typeof opts.now === "number" ? opts.now : Date.now();
+  const ttlMs = typeof opts.ttlMs === "number" ? opts.ttlMs : MARKET_SNAPSHOT_TTL_MS;
+  let raw = null;
+  try {
+    raw = storage.getItem(snapshotKey(zone));
+  } catch {
+    return null;
+  }
+  if (typeof raw !== "string" || raw === "") return null;
+  let box;
+  try {
+    box = JSON.parse(raw);
+  } catch {
+    return null;
+  }
+  if (!box || typeof box !== "object") return null;
+  if (typeof box.ts !== "number" || !Number.isFinite(box.ts)) return null;
+  if (now - box.ts > ttlMs) return null;
+  const response = box.response;
+  if (!isDefaultFirstPageResponse(response, zone)) return null;
+  return response;
+}
+function writeMarketSnapshot(storage, opts = {}) {
+  if (!storage || typeof storage.setItem !== "function") return;
+  const zone = opts.zone === "primary" ? "primary" : "community";
+  const response = opts.response;
+  if (!isDefaultFirstPageResponse(response, zone)) return;
+  const now = typeof opts.now === "number" ? opts.now : Date.now();
+  try {
+    storage.setItem(snapshotKey(zone), JSON.stringify({ ts: now, response }));
+  } catch {
+  }
+}
+function clearMarketSnapshots(storage) {
+  try {
+    if (!storage || typeof storage.removeItem !== "function") return;
+    storage.removeItem(snapshotKey("community"));
+    storage.removeItem(snapshotKey("primary"));
+  } catch {
+  }
+}
+function isDefaultFirstPageResponse(response, zone) {
+  if (!response || typeof response !== "object" || Array.isArray(response)) return false;
+  if (!Array.isArray(response.items)) return false;
+  if (typeof response.total !== "number" || !Number.isFinite(response.total)) return false;
+  const offset = typeof response.offset === "number" && Number.isFinite(response.offset) ? response.offset : 0;
+  if (offset !== 0) return false;
+  return (response.limit ?? DEFAULT_PAGE_SIZE) === defaultLimitOf(zone);
+}
+var MARKET_SNAPSHOT_TTL_MS;
+var init_market_snapshot = __esm({
+  "src/client/market-snapshot.js"() {
+    "use strict";
+    init_market_state();
+    MARKET_SNAPSHOT_TTL_MS = 10 * 60 * 1e3;
+  }
+});
+
 // src/client/markdown.js
 var markdown_exports = {};
 __export(markdown_exports, {
@@ -1034,6 +1126,22 @@ var init_self_check = __esm({
   }
 });
 
+// src/client/install-cmd.js
+var install_cmd_exports = {};
+__export(install_cmd_exports, {
+  shouldShowInstallCmd: () => shouldShowInstallCmd
+});
+function shouldShowInstallCmd(profileKind, installed) {
+  if (profileKind === "desktop") return false;
+  if (installed === true) return false;
+  return true;
+}
+var init_install_cmd = __esm({
+  "src/client/install-cmd.js"() {
+    "use strict";
+  }
+});
+
 // src/client/main.jsx
 var React = require("react");
 var rd = require("react-dom");
@@ -1042,6 +1150,7 @@ var { useState, useEffect, useLayoutEffect, useCallback, useMemo, useRef } = Rea
 var PLUGIN_ID = "dsh-m";
 var API = "/dshm";
 var { DEFAULT_PAGE_SIZE: DEFAULT_PAGE_SIZE2, MARKET_PAGE_SIZES: MARKET_PAGE_SIZES2, pageItems: pageItems2, createZoneState: createZoneState2, normalizeMarketQuery: normalizeMarketQuery2, resetPageOnFilterChange: resetPageOnFilterChange2, normalizeMarketResponse: normalizeMarketResponse2, registryNotice: registryNotice2, zoneChips: zoneChips2, marketNotice: marketNotice2 } = (init_market_state(), __toCommonJS(market_state_exports));
+var { readMarketSnapshot: readMarketSnapshot2, writeMarketSnapshot: writeMarketSnapshot2, isDefaultFirstPageQuery: isDefaultFirstPageQuery2 } = (init_market_snapshot(), __toCommonJS(market_snapshot_exports));
 var { createMarkdown: createMarkdown2 } = (init_markdown(), __toCommonJS(markdown_exports));
 var { ExtLink, MdImg, renderMarkdown } = createMarkdown2(h);
 var { installedViewModel: installedViewModel2, registrySourceKey: registrySourceKey2 } = (init_installed_view(), __toCommonJS(installed_view_exports));
@@ -1052,6 +1161,7 @@ var { refreshAfterMutation: refreshAfterMutation2 } = (init_view_refresh(), __to
 var { createOperationsStore: createOperationsStore2, restoreRecords: restoreRecords2, createOpsPump: createOpsPump2, opAppliesTo: opAppliesTo2, TERMINAL_CLEARABLE: TERMINAL_CLEARABLE2 } = (init_operations(), __toCommonJS(operations_exports));
 var { createFavoritesStore: createFavoritesStore2, partitionStale: partitionStale2 } = (init_favorites(), __toCommonJS(favorites_exports));
 var { readSelfCheckCache: readSelfCheckCache2, writeSelfCheckCache: writeSelfCheckCache2, clearSelfCheckCache: clearSelfCheckCache2, deriveChipState: deriveChipState2 } = (init_self_check(), __toCommonJS(self_check_exports));
+var { shouldShowInstallCmd: shouldShowInstallCmd2 } = (init_install_cmd(), __toCommonJS(install_cmd_exports));
 var ZH = {
   "market.title": "\u63D2\u4EF6\u5E02\u573A",
   "tab.market": "\u5E02\u573A",
@@ -1293,7 +1403,7 @@ var ZH = {
   "restart.timeout": "\u91CD\u542F\u8D85\u65F6\uFF0C\u8BF7\u624B\u52A8\u68C0\u67E5 dsh web \u670D\u52A1\u72B6\u6001",
   "restart.hint.done": "\u5DF2\u8BF7\u6C42\u91CD\u542F DSH web\uFF08via {via}\uFF09\u3002\u670D\u52A1\u6062\u590D\u540E DSH Web \u4F1A\u5728\u540E\u53F0\u81EA\u52A8\u91CD\u8FDE\u3002",
   "profile.restartHint": "\u53D8\u66F4\u5B8C\u6210\u3002Desktop \u63D2\u4EF6\u7531\u5B98\u65B9\u5E94\u7528\u7BA1\u7406\uFF1A\u8BF7\u9000\u51FA\u5E76\u91CD\u65B0\u6253\u5F00 Desktop \u5E94\u7528\uFF08\u5173\u95ED\u7A97\u53E3\u53EF\u80FD\u53EA\u662F\u9690\u85CF\uFF09\u4EE5\u52A0\u8F7D\u65B0\u72B6\u6001\u3002",
-  "profile.chipTitle": "\u5F53\u524D DSH profile\uFF1A{name}\uFF08Desktop \u9996\u53D1\u4EC5\u652F\u6301\u53EA\u8BFB\u5E02\u573A\u3001\u5B89\u88C5\u65B0\u5305\u4E0E\u5F00\u5173\uFF09",
+  "profile.chipTitle": "\u5F53\u524D\u751F\u6548 Profile",
   "selfupdate.available": "\u53D1\u73B0\u65B0\u7248\u672C v{v}\uFF0C\u70B9\u51FB\u5347\u7EA7",
   "selfupdate.ahead": "\u672C\u5730\u5F00\u53D1\u7248\uFF08\u9886\u5148 npm\uFF1Av{v}\uFF09",
   "selfupdate.checking": "\u68C0\u67E5\u66F4\u65B0\u4E2D\u2026",
@@ -1554,7 +1664,7 @@ var EN = {
   "restart.timeout": "Restart timed out \u2014 check the dsh web service manually",
   "restart.hint.done": "Restart requested (via {via}). DSH Web will reconnect in the background after the service returns.",
   "profile.restartHint": "Changes applied. Desktop plugins are managed by the official app: quit and reopen the Desktop app (closing the window may only hide it) to load the new state.",
-  "profile.chipTitle": "Current DSH profile: {name} (Desktop first release supports read-only market, installing new packages, and toggles)",
+  "profile.chipTitle": "Active profile",
   "selfupdate.available": "New version v{v} available \u2014 click to upgrade",
   "selfupdate.ahead": "Local dev build (ahead of npm: v{v})",
   "selfupdate.checking": "Checking for updates\u2026",
@@ -1873,19 +1983,27 @@ function useAsync(fn, deps) {
 }
 function useMarketData(zone = "community") {
   const [query, setQuery] = useState(() => normalizeMarketQuery2(createZoneState2(zone), zone));
-  const [data, setData] = useState(null);
-  const [loading, setLoading] = useState(true);
+  const [boot] = useState(() => {
+    const snap = readMarketSnapshot2(typeof window !== "undefined" && window.localStorage ? window.localStorage : null, { zone });
+    return snap ? { data: normalizeMarketResponse2(snap), has: true } : { data: null, has: false };
+  });
+  const [data, setData] = useState(boot.data);
+  const [loading, setLoading] = useState(!boot.has);
   const [error, setError] = useState(null);
   const genRef = useRef(0);
   const abortRef = useRef(null);
   const queryRef = useRef(query);
-  const fetchPage = useCallback((nextQuery, force) => {
+  const dataRef = useRef(boot.data);
+  const storage = () => typeof window !== "undefined" && window.localStorage ? window.localStorage : null;
+  const fetchPage = useCallback((nextQuery, force, background = false) => {
     const gen = ++genRef.current;
     abortRef.current?.abort();
     const ac = new AbortController();
     abortRef.current = ac;
-    setLoading(true);
-    setError(null);
+    if (!background || !dataRef.current) {
+      setLoading(true);
+      setError(null);
+    }
     const params = {
       query: nextQuery.query || void 0,
       category: nextQuery.category || void 0,
@@ -1897,10 +2015,14 @@ function useMarketData(zone = "community") {
     };
     return api("market", params, ac.signal).then((raw) => {
       if (genRef.current !== gen || ac.signal.aborted) return;
-      setData(normalizeMarketResponse2(raw));
+      const next = normalizeMarketResponse2(raw);
+      dataRef.current = next;
+      setData(next);
       setLoading(false);
+      if (isDefaultFirstPageQuery2(nextQuery, zone)) writeMarketSnapshot2(storage(), { zone, response: next });
     }).catch((e) => {
       if (genRef.current !== gen || ac.signal.aborted) return;
+      if (background && dataRef.current) return;
       setError(String(e && e.message || e));
       setLoading(false);
     });
@@ -1913,7 +2035,7 @@ function useMarketData(zone = "community") {
   }, [fetchPage]);
   const reload = useCallback((force) => fetchPage(queryRef.current, force), [fetchPage]);
   useEffect(() => {
-    fetchPage(queryRef.current, false);
+    fetchPage(queryRef.current, false, boot.has);
     return () => abortRef.current?.abort();
   }, [fetchPage]);
   return { query, data, loading, error, reload, updateQuery };
@@ -2266,7 +2388,7 @@ function useModalDepth(active) {
     };
   }, [active]);
 }
-function DetailModal({ it, labels, busy, onClose, onInstall }) {
+function DetailModal({ it, labels, busy, onClose, onInstall, profileKind }) {
   useModalDepth(true);
   const shots = it.community === true ? safeScreenshots(it) : [];
   const [lb, setLb] = useState(null);
@@ -2296,6 +2418,7 @@ function DetailModal({ it, labels, busy, onClose, onInstall }) {
     }
   };
   const descFull = browserLang() === "en" && typeof it.descriptionEn === "string" && it.descriptionEn !== "" ? it.descriptionEn : it.description;
+  const showInstallCmd = shouldShowInstallCmd2(profileKind, it.installed === true);
   const kv = (k, v) => h(React.Fragment, { key: k }, h("dt", null, k), h("dd", null, v));
   return h(
     "div",
@@ -2356,7 +2479,7 @@ function DetailModal({ it, labels, busy, onClose, onInstall }) {
           Array.isArray(it.capabilityRedLines) && it.capabilityRedLines.length ? h("div", { className: "dshm-err" }, `${lookup("detail.redlines")}: ${it.capabilityRedLines.join("; ")}`) : null
         ) : h("div", { className: "dshm-hint" }, lookup("detail.capabilities.unscanned"))
       ) : null,
-      h(
+      showInstallCmd ? h(
         "details",
         { className: "dsvm-fold" },
         h("summary", null, lookup("modal.installcmd")),
@@ -2366,7 +2489,7 @@ function DetailModal({ it, labels, busy, onClose, onInstall }) {
           h("code", { className: "dsvm-code" }, installCmd),
           h("button", { className: "dshm-btn sm", onClick: copyCmd }, copied ? lookup("modal.copied") : lookup("modal.copy"))
         )
-      ),
+      ) : null,
       h(
         "div",
         { className: "dsvm-modalactions" },
@@ -2381,7 +2504,7 @@ var ZONE_TABS = [
   { id: "primary", labelKey: "zone.primary" },
   { id: "favorites", labelKey: "zone.favorites" }
 ];
-function MarketTab({ notify, markets, onMutation, ops, favorites }) {
+function MarketTab({ notify, markets, onMutation, ops, favorites, profileKind }) {
   const [zone, setZone] = useState("community");
   const market = zone === "favorites" ? null : markets[zone];
   const { data, loading, error, reload, query, updateQuery } = market || {};
@@ -2559,7 +2682,8 @@ function MarketTab({ notify, markets, onMutation, ops, favorites }) {
         labels: communityLabels(markets.community.data),
         busy: activeInstallTarget === favDetailItem.id,
         onClose: () => setFavDetailItem(null),
-        onInstall: (it2) => doInstall(it2)
+        onInstall: (it2) => doInstall(it2),
+        profileKind
       }) : null
     );
   }
@@ -2716,7 +2840,8 @@ function MarketTab({ notify, markets, onMutation, ops, favorites }) {
       labels: detailLabels,
       busy: activeInstallTarget === detailItem.id,
       onClose: () => setDetailId(null),
-      onInstall: (it2) => doInstall(it2)
+      onInstall: (it2) => doInstall(it2),
+      profileKind
     }) : null
   );
 }
@@ -3660,7 +3785,7 @@ function MarketPanel({ onClose }) {
       h(
         "div",
         { className: "dshm-body" },
-        tab === "market" ? h(MarketTab, { notify, markets, onMutation: refreshViews, ops, favorites }) : null,
+        tab === "market" ? h(MarketTab, { notify, markets, onMutation: refreshViews, ops, favorites, profileKind: profile?.kind ?? null }) : null,
         tab === "installed" ? h(InstalledTab, { notify, installed, onMutation: refreshViews, ops }) : null,
         tab === "settings" ? h(SettingsTab, { notify, onRegistryChanged }) : null,
         h(OperationsPanel, {

package/lib/core/community.js

@@ -220,6 +220,29 @@ async function runChain(cfg, opts, ctrl) {
                 catalog: cached.catalog,
             };
         }
+        if (cached && pin === null) {
+            // 0.9.14 SWR：过期 → 同步回 stale，force flight 后台自愈（force 分支跳过快速路径，天然无递归；
+            // signal 剥离——原请求 abort 不得经 releaseFlight 腰斩后台 flight，与 registry SWR 对齐）
+            const bg = fetchCommunityCatalog(cfg, { ...opts, force: true, signal: undefined })
+                .finally(() => {
+                const i = backgroundRefreshes.indexOf(bg);
+                if (i >= 0)
+                    backgroundRefreshes.splice(i, 1);
+            });
+            backgroundRefreshes.push(bg);
+            void bg.catch(() => undefined);
+            return {
+                state: stateOf({
+                    status: 'stale',
+                    version: cached.meta.version,
+                    checkedAt: cached.meta.checkedAt,
+                    fetchedAt: cached.meta.fetchedAt,
+                    route: cached.meta.route,
+                    count: cached.catalog.plugins.length,
+                }),
+                catalog: cached.catalog,
+            };
+        }
     }
     const errors = [];
     let version = pin;
@@ -433,3 +456,10 @@ export async function getCommunitySummary(primaryEntries, cfg = {}, opts) {
     const outcome = await communityOutcome(task, opts.deadlineAt, primaryEntries);
     return outcome.summary;
 }
+// 0.9.14 SWR：过期触发即登记的后台自愈 flight（waiter 隔离；flight 本体走 fetchCommunityCatalog
+// 的共享 flight 表，此处只留引用供测试钩子等待；.finally 自清）
+const backgroundRefreshes = [];
+/** 测试钩子：等待当前全部后台自愈 flight settle（allSettled，不抛）。 */
+export function _waitForCommunityBackgroundForTests() {
+    return Promise.allSettled([...backgroundRefreshes]);
+}

package/lib/core/latest-cache.js

@@ -0,0 +1,139 @@
+/**
+ * 0.9.14 Task 4a：latest 探测缓存的唯一 owner——内存 Map + 磁盘信封层（write-through）。
+ * 磁盘文件 `<cacheRoot(profile)>/latest/<namespace>.json`：置于 nsDir 之外——registry.ts
+ * pruneCaches 只清扫 `<ns>/` 顶层 *.json（keep 集不含 latest），放 nsDir 内会被每次
+ * registry 刷新成功后的 prune 删除。信封 { version, namespace, entries }；损坏/版本不符
+ * 整文件弃；全部磁盘操作静默失败（缓存是优化不是功能）。Task 4b 由 market.ts 接线
+ * （探测段前 ensureLatestCacheSeeded + writeLatestCache write-through 迁移）。
+ */
+import { mkdir, readFile, rename, writeFile } from 'node:fs/promises';
+import { join } from 'node:path';
+import { WEB_PROFILE, cacheRoot } from './env.js';
+export const LATEST_CACHE_VERSION = 1;
+const latestCache = new Map();
+const LATEST_CACHE_MAX = 5000;
+/** seed 硬上限淘汰窗口：超过 24h 的条目不再灌内存（write/seed 双侧一致） */
+const SEED_MAX_AGE_MS = 24 * 60 * 60_000;
+export function latestCacheKey(namespace, registryKey, item) {
+    const id = item.source === 'npm' && item.npm ? `npm:${item.npm}` : item.github ? `gh:${item.github}` : item.id;
+    return `${namespace}|${registryKey}|${id}`;
+}
+export function readLatestCache(key, ttlMin) {
+    const entry = latestCache.get(key);
+    if (!entry)
+        return null;
+    if (Date.now() - entry.at >= ttlMin * 60_000) {
+        latestCache.delete(key);
+        return null;
+    }
+    return entry.value;
+}
+function latestDir(profile) {
+    return join(cacheRoot(profile), 'latest');
+}
+function latestFile(namespace, profile) {
+    return join(latestDir(profile), `${namespace}.json`);
+}
+let persistChain = Promise.resolve();
+/** 入队时快照单条（key+entry）：flush 晚于内存 reset 也不丢数据；串行链防并发读改写互相覆盖。 */
+function queuePersist(key, namespace, profile, entry) {
+    persistChain = persistChain.then(() => persistEnvelope(key, namespace, profile, entry)).catch(() => undefined);
+}
+async function persistEnvelope(key, namespace, profile, entry) {
+    let entries = {};
+    try {
+        const parsed = JSON.parse(await readFile(latestFile(namespace, profile), 'utf8'));
+        if (parsed && typeof parsed === 'object' &&
+            parsed.version === LATEST_CACHE_VERSION && parsed.namespace === namespace &&
+            parsed.entries && typeof parsed.entries === 'object') {
+            entries = parsed.entries;
+        }
+    }
+    catch {
+        // 无/损坏信封 → 从本条重建（静默）
+    }
+    const floor = Date.now() - SEED_MAX_AGE_MS;
+    for (const k of Object.keys(entries)) {
+        const e = entries[k];
+        if (!e || typeof e !== 'object' || typeof e.at !== 'number' || !Number.isFinite(e.at) || e.at < floor)
+            delete entries[k];
+    }
+    entries[key] = entry;
+    const envelope = { version: LATEST_CACHE_VERSION, namespace, entries };
+    await mkdir(latestDir(profile), { recursive: true });
+    const file = latestFile(namespace, profile);
+    const tmp = `${file}.tmp-${process.pid}-${Date.now()}`;
+    await writeFile(tmp, JSON.stringify(envelope));
+    await rename(tmp, file);
+}
+/** 内存 set + write-through：ns 自 key 首段 `|` 前缀解析定位 `<ns>.json` 信封；profile 缺省 web（0.9.0 双 profile 段约定，调用方可显式传）。 */
+export function writeLatestCache(key, value, profile = WEB_PROFILE) {
+    if (latestCache.size >= LATEST_CACHE_MAX) {
+        const oldest = latestCache.keys().next().value;
+        if (oldest !== undefined)
+            latestCache.delete(oldest);
+    }
+    latestCache.set(key, { at: Date.now(), value });
+    const ns = key.split('|', 1)[0];
+    if (ns !== 'host' && ns !== 'cli')
+        return;
+    const entry = latestCache.get(key);
+    if (!entry)
+        return;
+    queuePersist(key, ns, profile, entry);
+}
+// ---------- 懒 seed（每 (namespace,profile) 记忆化一次） ----------
+const seeded = new Map();
+export async function ensureLatestCacheSeeded(opts = {}) {
+    const namespace = opts.namespace ?? 'host';
+    const profile = opts.profile ?? WEB_PROFILE;
+    const memoKey = `${namespace}§${profile}`;
+    let task = seeded.get(memoKey);
+    if (!task) {
+        task = (async () => {
+            await persistChain.catch(() => undefined); // 先排空 write-through 队列（写→reset→seed 顺序亦确定成立）
+            await seedFromDisk(namespace, profile);
+        })().catch(() => undefined);
+        seeded.set(memoKey, task);
+    }
+    await task;
+}
+async function seedFromDisk(namespace, profile) {
+    let raw;
+    try {
+        raw = await readFile(latestFile(namespace, profile), 'utf8');
+    }
+    catch {
+        return; // 无信封 = 首次运行；静默
+    }
+    let envelope;
+    try {
+        const parsed = JSON.parse(raw);
+        if (!parsed || typeof parsed !== 'object')
+            return;
+        if (parsed.version !== LATEST_CACHE_VERSION || parsed.namespace !== namespace)
+            return;
+        if (!parsed.entries || typeof parsed.entries !== 'object')
+            return;
+        envelope = parsed;
+    }
+    catch {
+        return; // 损坏整文件弃（静默，行为退化为现状探测重放）
+    }
+    const floor = Date.now() - SEED_MAX_AGE_MS;
+    for (const [key, entry] of Object.entries(envelope.entries)) {
+        if (!entry || typeof entry !== 'object')
+            continue;
+        if (typeof entry.at !== 'number' || !Number.isFinite(entry.at) || entry.at < floor)
+            continue;
+        if (!entry.value || typeof entry.value !== 'object')
+            continue;
+        if (!latestCache.has(key))
+            latestCache.set(key, entry);
+    }
+}
+/** 测试钩子：清内存 Map + seed 记忆化（dsh-version.ts resetDshVersionCacheForTest 同款先例）。 */
+export function resetLatestCacheForTest() {
+    latestCache.clear();
+    seeded.clear();
+}

package/lib/core/market.js

@@ -23,6 +23,7 @@ import { adaptCommunityCatalog } from './community-adapter.js';
 import { normalizeSearchText, relevanceScore, tokenizeSearchText } from './search-relevance.js';
 import { GithubBudgetExhaustedError, createGithubRequestBudget, isExactVersion } from './versions.js';
 import { HttpError } from './httpx.js';
+import { ensureLatestCacheSeeded, latestCacheKey, readLatestCache, writeLatestCache } from './latest-cache.js';
 import { verifyInstalledAdditions } from './install-guard.js';
 import { fetchTextLimited } from './httpx.js';
 import { githubLatestTag as defaultGithubLatestTag, isNewerVersion, npmLatest as defaultNpmLatest, npmVersion, } from './versions.js';
@@ -138,30 +139,6 @@ function deadlineRace(task, ms) {
         });
     });
 }
-const latestCache = new Map();
-const LATEST_CACHE_MAX = 5000;
-function latestCacheKey(namespace, registryKey, item) {
-    const id = item.source === 'npm' && item.npm ? `npm:${item.npm}` : item.github ? `gh:${item.github}` : item.id;
-    return `${namespace}|${registryKey}|${id}`;
-}
-function readLatestCache(key, ttlMin) {
-    const entry = latestCache.get(key);
-    if (!entry)
-        return null;
-    if (Date.now() - entry.at >= ttlMin * 60_000) {
-        latestCache.delete(key);
-        return null;
-    }
-    return entry.value;
-}
-function writeLatestCache(key, value) {
-    if (latestCache.size >= LATEST_CACHE_MAX) {
-        const oldest = latestCache.keys().next().value;
-        if (oldest !== undefined)
-            latestCache.delete(oldest);
-    }
-    latestCache.set(key, { at: Date.now(), value });
-}
 function probeTask(item, deps, timeoutMs, signal) {
     if (item.source === 'npm' && item.npm) {
         return deps.npmLatest(item.npm, timeoutMs, signal).then((r) => ({ version: r.version }));
@@ -524,6 +501,8 @@ export async function listMarket(cfg = {}, opts = {}, deps = {}) {
     let latestComplete = true;
     let latestTimedOut = false;
     if (withLatest && items.length > 0) {
+        // 0.9.14：latest 探测缓存已落盘——探测段前装载/排空磁盘信封（重启后零重放）
+        await ensureLatestCacheSeeded({ namespace, profile: opts.profile });
         // 先吃 cache 命中
         const ttlMin = Math.max(0, cfg.cacheTtlMin ?? 60);
         for (const item of items) {
@@ -553,7 +532,7 @@ export async function listMarket(cfg = {}, opts = {}, deps = {}) {
                     const outcome = await probeWithBudget(task, perBudget, signal);
                     if (outcome.ok && outcome.value) {
                         applyProbe(item, outcome.value);
-                        writeLatestCache(latestCacheKey(namespace, loaded.configuredAddress, item), outcome.value);
+                        writeLatestCache(latestCacheKey(namespace, loaded.configuredAddress, item), outcome.value, opts.profile);
                     }
                     else if (outcome.timeout) {
                         item.latestError = '更新检查未完成：超时';
@@ -642,7 +621,9 @@ export async function listInstalledWithMeta(cfg = {}, opts = {}, deps = {}) {
     }
     const registryState = stateOf(loaded);
     matchInstalled(items, community.merged);
-    await probeLatest(items, { merged: community.merged, registryAddress: loaded.configuredAddress, ttlMin: Math.max(0, cfg.cacheTtlMin ?? 60) }, d, { namespace, signal, githubBudget, remaining, timeoutMs: cfg.timeoutMs ?? 20_000 });
+    // 0.9.14：latest 探测缓存已落盘——探测段前装载/排空磁盘信封
+    await ensureLatestCacheSeeded({ namespace, profile: opts.profile });
+    await probeLatest(items, { merged: community.merged, registryAddress: loaded.configuredAddress, ttlMin: Math.max(0, cfg.cacheTtlMin ?? 60) }, d, { namespace, signal, githubBudget, remaining, timeoutMs: cfg.timeoutMs ?? 20_000, profile: opts.profile });
     return { items, others: installed.others, profileDir: installed.profileDir, registryState, community: community.summary };
 }
 /** matching（主+社区合并条目）：命中主条目或社区条目都写 registryId；社区命中再标 community。 */
@@ -662,11 +643,12 @@ function matchInstalled(items, merged) {
 async function probeLatest(items, ctx, d, rt) {
     await mapWithConcurrency(items, LATEST_WORKERS, async (item) => {
         const entry = ctx.merged.find((e) => matchInstalledByEntry(e, [item]));
-        // latest 探测沿用 listMarket 的 TTL cache
+        // latest 探测沿用 listMarket 的 TTL cache；npm-only 条目（不在收录清单的已装包）也走
+        // latestCacheKey 归一格式（0.9.14：否则首段非 host/cli 会被落盘层静默跳过）
         const cacheKey = entry
             ? latestCacheKey(rt.namespace, ctx.registryAddress ?? '', entry)
             : item.source === 'npm'
-                ? `npm-only|${rt.namespace}|npm:${item.pkg}`
+                ? latestCacheKey(rt.namespace, 'npm-only', { source: 'npm', id: item.pkg, npm: item.pkg })
                 : null;
         if (cacheKey) {
             const cached = readLatestCache(cacheKey, ctx.ttlMin);
@@ -695,7 +677,7 @@ async function probeLatest(items, ctx, d, rt) {
                     }
                     if (value) {
                         applyProbe(item, value);
-                        writeLatestCache(cacheKey, value);
+                        writeLatestCache(cacheKey, value, rt.profile);
                     }
                 }
                 catch (err) {

package/lib/core/registry.js

@@ -587,7 +587,13 @@ async function loadDefaultChain(cfg, opts, chain) {
     const errors = [];
     const startedAt = Date.now();
     const routes = opts.defaultRoutes ?? DEFAULT_URLS;
-    for (const candidate of routes) {
+    // 0.9.14 线路粘性：cache 记录的上次成功线路排最前（稳定排序保序；cache 缺失 = 原序）。
+    // 粘性读不判 TTL——过期 cache 的 source 依然是有效线路记忆；force 同样生效。
+    const stickySource = (await readCacheFile(chain.namespace, DEFAULT_CACHE_KEY, chain.profile))?.source;
+    const ordered = stickySource
+        ? [...routes].sort((a, b) => Number(b.source === stickySource) - Number(a.source === stickySource))
+        : routes;
+    for (const candidate of ordered) {
         try {
             const { registry, finalUrl } = await fetchRegistryFromUrl(candidate.url, attemptTimeoutMs(cfg, opts, startedAt), opts.signal);
             const fetchedAt = new Date().toISOString();
@@ -707,17 +713,52 @@ async function loadCustomChain(address, cfg, opts, chain) {
         registry: { version: 1, plugins: [] },
     };
 }
-/** active 读取：default/custom 各自 fallback；网络成功后可在本 namespace 内 prune。 */
+// 0.9.14 SWR：过期 cache 同步先回 stale，网络刷新转入后台单飞（key = namespace§profile§cacheKey；
+// 单飞闭包捕获本次调用的 cfg/opts——含 defaultRoutes 测试缝，signal 除外；.finally 自清）。
+const backgroundFlights = new Map();
+/** 测试钩子：等待当前全部后台刷新单飞 settle（allSettled，不抛）。 */
+export function _waitForRegistryBackgroundForTests() {
+    return Promise.allSettled([...backgroundFlights.values()]);
+}
+/** 后台刷新体：与同步链同款两分支 + ready 后 prune；失败静默（调用方已拿到 stale）。 */
+async function backgroundChain(cfg, opts, address, namespace, profile) {
+    const bgOpts = { ...opts, signal: undefined };
+    if (address.kind === 'default') {
+        const loaded = await loadDefaultChain(cfg, bgOpts, { namespace, profile, includeBundled: true });
+        if (opts.prune !== false && loaded.status === 'ready')
+            await pruneCaches(namespace, null, profile);
+        return;
+    }
+    const loaded = await loadCustomChain(address, cfg, bgOpts, { namespace, allowCacheFallback: true, profile });
+    if (opts.prune !== false && loaded.status === 'ready')
+        await pruneCaches(namespace, address.cacheKey, profile);
+    void loaded;
+}
+/** active 读取：default/custom 各自 fallback；TTL 内直读；过期先回 stale（SWR）+ 后台单飞自愈；force 始终同步强刷；网络成功后可在本 namespace 内 prune。 */
 export async function loadRegistry(cfg = {}, opts = {}) {
     const namespace = opts.namespace ?? 'host';
     const profile = opts.profile ?? WEB_PROFILE;
     const address = parseRegistryAddress(cfg.registryUrl);
     const ttlMin = Math.max(0, cfg.cacheTtlMin ?? 60);
+    const cacheKey = address.kind === 'default' ? DEFAULT_CACHE_KEY : address.cacheKey;
     if (!opts.force) {
-        const cacheKey = address.kind === 'default' ? DEFAULT_CACHE_KEY : address.cacheKey;
         const cached = await readCacheFile(namespace, cacheKey, profile);
-        if (cached && cacheFresh(cached, ttlMin))
+        if (cached) {
+            if (cacheFresh(cached, ttlMin))
+                return loadedFromCacheFile(cached, address.normalized, []);
+            // 0.9.14 SWR：过期 → 同步回 stale；无同 key 单飞才后台起链（不接调用者 signal，失败静默）
+            const flightKey = `${namespace}§${profile}§${cacheKey}`;
+            if (!backgroundFlights.has(flightKey)) {
+                const flight = backgroundChain(cfg, opts, address, namespace, profile)
+                    .catch(() => undefined)
+                    .finally(() => {
+                    if (backgroundFlights.get(flightKey) === flight)
+                        backgroundFlights.delete(flightKey);
+                });
+                backgroundFlights.set(flightKey, flight);
+            }
             return loadedFromCacheFile(cached, address.normalized, []);
+        }
     }
     if (address.kind === 'default') {
         const loaded = await loadDefaultChain(cfg, opts, { namespace, profile, includeBundled: true });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-m",
-  "version": "0.9.12",
+  "version": "0.9.14",
   "description": "可自定义收录清单的 DSH 插件市场：收录、安装、卸载、升级一站完成，附 agent 工具与 dshm CLI。",
   "license": "MIT",
   "type": "module",

package/registry.json

@@ -4,7 +4,7 @@
     {
       "id": "dsh-m",
       "name": "DSH Marketplace",
-      "description": "自定义清单的 DSH 插件市场，收录/安装/卸载/升级；已适配 0.1.5-rc.1 至 0.2.0-rc.1/rc.2 各代，详见仓库。",
+      "description": "自定义清单的 DSH 插件市场，收录/安装/卸载/升级；已适配 DSH 0.2.0-rc.2，支持 web 与 desktop 双 profile，详见仓库。",
       "category": "market",
       "tags": [
         "市场",
@@ -148,16 +148,17 @@
     {
       "id": "dsh-quota-watch",
       "name": "DSH Quota Watch",
-      "description": "侧栏额度监控卡片：显示 GLM Coding Plan 窗口与 Copilot 额度快照，凭据宿主解析，不留存历史；已适配 0.1.7-rc.2，详见仓库。",
+      "description": "GLM 与 Copilot 额度悬浮球：胶囊、详情面板与侧栏卡片，宿主解析凭据，适配 web 与 desktop。",
       "category": "tools",
       "tags": [
         "配额",
-        "监控",
+        "悬浮球",
         "GLM",
         "Copilot"
       ],
       "verified": [
-        "0.1.7-rc.2"
+        "0.1.7-rc.2",
+        "0.1.0"
       ],
       "source": "npm",
       "npm": "@iasiv5/dsh-quota-watch",