dsh-m 0.9.86 → 0.9.88

package/CHANGELOG.md

@@ -8,6 +8,20 @@ The full release history of dsh-m, maintained bilingually: **Chinese first, Engl
 
 ## 中文
 
+### 0.9.88 特性：面板三区 resize——尺寸记忆 + 就地生长（ADR-0021）+ 验收三修
+
+- **需求（2026-10-15）**：市场面板「920px 浏览卡片太挤、全屏又太大」的真实档位空洞 + 桌面窗口本能手势（下意识移向边缘想 resize）。`/grill-with-docs` 两轮锁定设计：三区手柄（右/下/右下角）、就地生长锚定、尺寸记忆全套；实施计划经独立评审 Agent 三轮对抗审核（计划 11 条 + 执行 2 条全闭环，含两条方法论沉淀：`treeShaking:false` 下「bundle 标识符缺席」类预言必假、esbuild 默认 charset=ascii 下中文 bundle 锚必假）。
+- **方案（ADR-0021）**：① 纯逻辑 `window-resize.js`——`clampSize`（下限 640×460、视口−8px 边距、`.abs` 形态 origin 第二钳保右/下缘不破边距、视口小于下限退化）+ 尺寸记忆存取（与位置记忆逐字对称）；② 手势状态机逐条镜像 ADR-0017（rAF 帧内写/手势帧零 setState/setPointerCapture/主键门卫/多指守卫/卸载清理）；③ 热区 6/8px 边 + 14×14 角，cursor 即全部供性，全屏/窄视口/触摸四重豁免；④ reclamp 升维：先夹尺寸、后夹位置。
+- **主人实测三修（同版）**：头部两行重排断点 600→720（resize min 640 落入两行区，标题/seg 零折行）；详情弹窗中段包进 `modalbody`（README 任意展开后 ✕ 与「安装」双端常驻）；设置网格三列门控由 `.full` 改容器宽 ≥1100（还原态拉宽同样升三列，顺带修正小视口全屏强塞三列旧账）。
+- **实验记录**：tab 切换淡入当日实现当日被主人否决，整体回滚（字节级干净，评审复核在案）。
+- **验证**：全量 1496 测试（+24：纯逻辑 18 + 冒烟 3 + 三修源锚 3）、typecheck 零错误；CDP 量化矩阵 14 格全过（列数阈值 640→1/920→2/1140→3/1500→4、钳位下限 640×460 与上限、视口缩小双夹紧、720 断点、modalbody、coarse 豁免）；Performance CDP 实测与 Windows 壳冒烟按计划延后（前者有代码级保证：手势帧零 setState）。验收记录（诚实口径）：dsh-workspace `01_docs/research/2026-10-15-dshm-panel-resize-sweep-record.md`。
+
+### 0.9.87 性能：热路径四连——已装枚举并行化 + patchRows 按需采集 + 收藏 stale 批量化 + 设置页社区 summary 接入 L2
+
+- **问题（2026-10-15 架构走查 + 独立复核）**：市场查询热路径上仍有三处重复支付——① `listInstalledPlugins` 逐依赖**串行**双文件读（package.json + cordis.patch.yml），每次查询/翻页/每次防抖搜索提交都全量重跑（14 依赖实测 ~11ms，占暖缓存查询近半预算）；② 收藏分区 stale 检测对**每个收藏发一整条 market 查询**（≤8 并发扇出）：回答一个布尔值却付全管线（枚举+社区+4445 条评分+排序+分页），20 收藏 ≈ 3 批 × 全管线；且旧路径存在 curatedFirst 挤出边界误判——primary 域同词命中 ≥8 条时 id-exact 社区条目被前置挤出前 8，**误判 stale**；③ 设置页 registry 方法背后的 `getCommunitySummary` 走无 memo 的全量 adapt+merge（~4400 条，每次打开 ~10-50ms CPU），而同身份的 L2 物化代（ADR-0016）近在咫尺。
+- **方案（热路径四连）**：① 枚举并行化——每依赖分类独立无跨依赖状态，`Promise.all` 保序折叠（输出仍按依赖键字典序），新增可选 `{ patchRows: false }`：市场热路径不再付每插件 ~0.55ms 的 YAML CST 解析（patchRows 仅 enablement/toggle 消费，已装页路径保持缺省采集；退出时**省略字段**而非伪造 `readable:false`）；② 批量 id 存在性——core 新增 `existingMarketIds`（三不原则：不枚举已装/不探测 latest/不分页；merged 域原始 id Set 判定，与旧搜索扇出除 curatedFirst 边界外逐点一致，该边界上属**修复**）、host 新 method `market-ids-exist`（ids ≤500 校验 400）、客户端单发批量 + 失败保守全 stale；③ `getCommunitySummary` 改道 `mergedOutcome`（同身份免 adapt+merge，「summary 永不入代」保持；registry 传 `snap.loaded` 整体，namespace/profile 显式缺省与改道前缓存路径逐字节同路——保 parity 优先于共享代的自觉取舍）；④ `toMarketItem` 逐页线性扫描改每查询一次已装索引（byPkg/byName/byGithub 三域 first-wins + min-ord，与 `matchInstalledByEntry` 逐点等价，随机 fuzz 640 条零不一致），`GITHUB_SPEC_RE` 导出为单一事实源。
+- **验证**：1472 项测试全绿（净增 7 例：枚举排序钉住/patchRows 退出对照/FP5 匹配等价四路径/existingMarketIds 四例含 L2 命中钉与 curatedFirst 边界钉/host method 正常+400/C3 源串锚迁移）、typecheck 零错误；实测（保守口径）：枚举市场路径 10.55ms → 2.08ms（5.1×）、`listMarket` cache-only 端到端中位 ~28ms → 5-7ms、`existingMarketIds`(20 id) 2.52ms/次；两份实施计划均经独立评审 Agent 多轮对齐（FP1/FP5 两轮零保留通过；FP2/FP3+发版两轮 7+1 条意见全闭环）。
+
 ### 0.9.86 性能：packument 访问器——registry 元数据属主模块，登记网络腿出锁（钢人 C2 / ADR-0019）
 
 - **问题（钢人报告 C2 节）**：「registry 元数据」没有 owning module——登记（Register）只为读一个发布时戳，却在官方文件锁内发起 8MiB 级全量 packument 网络取（npmjs 首腿 5s 超时 + 生效源备腿至 12s），镜像机器装机的白等直接计入关键路径；B3 预热再经无缓存通道把同一全量取付第二次；三 adapter 各自取、各自缓存（或没有）。
@@ -609,6 +623,20 @@ The full release history of dsh-m, maintained bilingually: **Chinese first, Engl
 
 ## English
 
+### Feature in 0.9.88 — three-zone panel resize: size memory + grow-in-place (ADR-0021) + acceptance fixes
+
+- **Need (2026-10-15)**: a real gap between "cramped at 920px" and "overkill fullscreen", plus the instinctive desktop gesture of grabbing window edges. Design locked via two grill rounds: three handles (right/bottom/bottom-right), grow-in-place anchoring, full size memory; the implementation plan survived three independent adversarial review rounds (11 plan + 2 execution issues all closed, including two methodology findings: bundle-absence predictions are structurally false under `treeShaking:false`, and CJK bundle anchors are false under esbuild's default ascii charset).
+- **Approach (ADR-0021)**: ① DOM-free `window-resize.js` — `clampSize` (min 640×460, viewport−8px margins, an origin second clamp keeping right/bottom edges inside margins for the freely-positioned form, degraded bounds on tiny viewports) + size-memory storage symmetric to position memory; ② gesture state machine mirrors ADR-0017 (rAF-batched writes, zero setState in gesture frames, setPointerCapture, primary-button guard, multi-pointer guard, unmount cleanup); ③ hot zones 6/8px edges + 14×14 corner, cursor-only affordance, four exemptions (fullscreen / narrow viewport / touch / scrollbar trade-off); ④ reclamp upgraded to size-first-then-position.
+- **Acceptance fixes from live testing (same release)**: head two-row breakpoint 600→720 (min-width 640 no longer crushes the title); detail modal middle wrapped in `modalbody` (✕ and Install stay pinned however far the README expands); settings 3-column gate switched from `.full` to container ≥1100px (a widened restored panel now gets three columns too).
+- **Experiment record**: a tab-switch fade was implemented and rejected by the owner the same day, fully reverted (byte-identical, reviewer-verified).
+- **Verification**: 1496 tests green (+24), typecheck clean; CDP quantified matrix 14/14 cells passed (column thresholds 640→1/920→2/1140→3/1500→4, lower/upper clamping, dual reclamp on viewport shrink, 720 breakpoint, modalbody, coarse-pointer exemption); Performance CDP measurement and Windows shell smoke deferred per plan (the former backed by a code-level guarantee: zero setState in gesture frames). Honest acceptance record: dsh-workspace `01_docs/research/2026-10-15-dshm-panel-resize-sweep-record.md`.
+
+### Performance in 0.9.87 — hot-path quartet: parallel installed enumeration, on-demand patchRows, batched favorites stale check, settings community summary via L2
+
+- **Problem (2026-10-15 architecture walk + independent audit)**: three recurring costs remained on the market-query hot path - (1) `listInstalledPlugins` read each dependency's two files (package.json + cordis.patch.yml) **strictly serially**, re-running in full on every query / page turn / debounced search commit (~11ms for 14 deps, nearly half the warm-cache query budget); (2) the favorites stale check fired **one full market query per favorite** (fan-out of 8): a single boolean answer paid the entire pipeline (enumeration + community + scoring 4,445 entries + sort + paging), 20 favorites ≈ 3 batches × full pipeline; the old path also had a curatedFirst squeeze-out false-stale edge - with ≥8 primary same-token hits the id-exact community entry got pushed past the page-8 window; (3) the settings-page registry method's `getCommunitySummary` ran an unmemoized full adapt+merge (~4,400 entries, ~10-50ms CPU per open) while the same-identity L2 materialized generation (ADR-0016) sat one function away.
+- **Fix (hot-path quartet)**: (1) parallel enumeration - per-dependency classification is independent, `Promise.all` folds in key order (output stays sorted by dependency key); new opt-out `{ patchRows: false }` spares the market path the ~0.55ms/plugin YAML CST parse (patchRows is only consumed by enablement/toggle, which keep the default; opting out **omits the field** instead of faking `readable:false`); (2) batch id-existence - new core `existingMarketIds` (three no's: no installed enumeration / no latest probing / no paging; raw-id Set membership over the merged domain, pointwise identical to the old search fan-out except the curatedFirst edge, where it is a **fix**), new host method `market-ids-exist` (ids ≤500, 400 on malformed), client sends one batch call and falls back to all-stale on error; (3) `getCommunitySummary` now routes through `mergedOutcome` (same identity skips adapt+merge; "summary never enters the generation" preserved; receives the whole `snap.loaded`, explicit namespace/profile defaults byte-identical to the pre-change cache paths - a deliberate parity-over-generation-sharing trade-off); (4) `toMarketItem`'s per-page linear scan became a once-per-query installed index (byPkg/byName/byGithub first-wins + min-ord, pointwise equal to `matchInstalledByEntry`, zero mismatches over a 640-entry random fuzz), with `GITHUB_SPEC_RE` exported as the single source of truth.
+- **Verification**: 1,472 tests green (+7: enumeration ordering pin / patchRows opt-out contrast / FP5 four-path match equivalence / four existingMarketIds cases incl. L2-hit and curatedFirst-edge pins / host method ok+400 / migrated C3 source anchor), typecheck clean; measured (conservative baseline): market-path enumeration 10.55ms → 2.08ms (5.1×), `listMarket` cache-only end-to-end median ~28ms → 5-7ms, `existingMarketIds` (20 ids) 2.52ms/call; both implementation plans aligned over multiple independent review rounds (FP1/FP5 two rounds, zero reservations; FP2/FP3+release two rounds, 7+1 findings all closed).
+
 ### Performance in 0.9.86 — packument accessor: registry metadata gets an owning module, register's network leg leaves the lock (steelman C2 / ADR-0019)
 
 - **Problem (steelman report, card C2)**: "registry metadata" had no owning module - Register fetched an 8MiB-scale full packument INSIDE the official file lock just to read one publish timestamp (npmjs first leg 5s timeout + effective-source leg up to 12s), putting mirror machines' white-wait directly on the install critical path; the B3 prewarm paid the same full fetch a second time through an uncached channel; three adapters each fetched, interpreted and cached (or not) independently.

package/lib/client.js

@@ -624,6 +624,66 @@ var init_window_drag = __esm({
   }
 });
 
+// src/client/window-resize.js
+var window_resize_exports = {};
+__export(window_resize_exports, {
+  MIN_H: () => MIN_H,
+  MIN_W: () => MIN_W,
+  SIZE_KEY: () => SIZE_KEY,
+  clampSize: () => clampSize,
+  loadPanelSize: () => loadPanelSize,
+  savePanelSize: () => savePanelSize
+});
+function finiteInset2(v) {
+  return Number.isFinite(v) ? v : 0;
+}
+function clampSize(size, viewport, insets = ZERO_INSETS2, origin = null) {
+  const maxW = Math.max(0, viewport.width - finiteInset2(insets?.left) - finiteInset2(insets?.right) - PANEL_MARGIN * 2);
+  const maxH = Math.max(0, viewport.height - finiteInset2(insets?.top) - finiteInset2(insets?.bottom) - PANEL_MARGIN * 2);
+  const effMaxW = origin ? Math.min(maxW, Math.max(0, viewport.width - finiteInset2(insets?.right) - PANEL_MARGIN - finiteInset2(origin.left))) : maxW;
+  const effMaxH = origin ? Math.min(maxH, Math.max(0, viewport.height - finiteInset2(insets?.bottom) - PANEL_MARGIN - finiteInset2(origin.top))) : maxH;
+  const minW = Math.min(MIN_W, effMaxW);
+  const minH = Math.min(MIN_H, effMaxH);
+  return {
+    w: Math.min(Math.max(size.w, minW), effMaxW),
+    h: Math.min(Math.max(size.h, minH), effMaxH)
+  };
+}
+function loadPanelSize(storage) {
+  if (!storage || typeof storage.getItem !== "function") return null;
+  try {
+    const raw = storage.getItem(SIZE_KEY);
+    if (typeof raw !== "string" || raw === "") return null;
+    const parsed = JSON.parse(raw);
+    if (typeof parsed !== "object" || parsed === null || !Number.isFinite(parsed.w) || !Number.isFinite(parsed.h)) {
+      return null;
+    }
+    return { w: parsed.w, h: parsed.h };
+  } catch {
+    return null;
+  }
+}
+function savePanelSize(storage, size) {
+  if (typeof size !== "object" || size === null || !Number.isFinite(size.w) || !Number.isFinite(size.h)) {
+    throw new TypeError(`invalid panel size: ${JSON.stringify(size)}`);
+  }
+  try {
+    storage.setItem(SIZE_KEY, JSON.stringify({ w: size.w, h: size.h }));
+  } catch {
+  }
+}
+var SIZE_KEY, MIN_W, MIN_H, ZERO_INSETS2;
+var init_window_resize = __esm({
+  "src/client/window-resize.js"() {
+    "use strict";
+    init_window_drag();
+    SIZE_KEY = "dshm-panel-size";
+    MIN_W = 640;
+    MIN_H = 460;
+    ZERO_INSETS2 = { left: 0, right: 0, top: 0, bottom: 0 };
+  }
+});
+
 // src/client/img-chain.js
 var img_chain_exports = {};
 __export(img_chain_exports, {
@@ -1958,6 +2018,7 @@ var { backdropCloseHandlers: backdropCloseHandlers2 } = (init_backdrop(), __toCo
 var { lbStep: lbStep2, lbNeighbors: lbNeighbors2, swipeDir: swipeDir2 } = (init_lightbox(), __toCommonJS(lightbox_exports));
 var { shotWheelAction: shotWheelAction2 } = (init_wheel_strip(), __toCommonJS(wheel_strip_exports));
 var { dragSlop: dragSlop2, grabOffset: grabOffset2, titlebarTopInset: titlebarTopInset2, clampPoint: clampPoint2, loadPanelPos: loadPanelPos2, savePanelPos: savePanelPos2, isDragTarget: isDragTarget2 } = (init_window_drag(), __toCommonJS(window_drag_exports));
+var { clampSize: clampSize2, loadPanelSize: loadPanelSize2, savePanelSize: savePanelSize2 } = (init_window_resize(), __toCommonJS(window_resize_exports));
 var { WESERV_TIMEOUT_MS: WESERV_TIMEOUT_MS2, weservUrl: weservUrl2, serviceBucketOf: serviceBucketOf2, tierOrder: tierOrder2, nextTier: nextTier2, needsTimeout: needsTimeout2, preferredTier: preferredTier2, rememberSuccess: rememberSuccess2 } = (init_img_chain(), __toCommonJS(img_chain_exports));
 var { createMarkdown: createMarkdown2 } = (init_markdown(), __toCommonJS(markdown_exports));
 var { ExtLink, MdImg, renderMarkdown } = createMarkdown2(h);
@@ -2150,7 +2211,7 @@ var ZH = {
   "pager.jump.ph": "\u9875\u53F7",
   "panel.fullscreen": "\u5168\u5C4F",
   "panel.restore": "\u8FD8\u539F",
-  "panel.dragHint": "\u62D6\u62FD\u79FB\u52A8 \xB7 \u53CC\u51FB\u5207\u6362\u5168\u5C4F",
+  "panel.dragHint": "\u62D6\u62FD\u79FB\u52A8 \xB7 \u53CC\u51FB\u5168\u5C4F \xB7 \u62D6\u8FB9\u89D2\u8C03\u5927\u5C0F",
   "lb.title": "\u63D2\u4EF6\u622A\u56FE\u9884\u89C8",
   "lb.prev": "\u4E0A\u4E00\u5F20\uFF08\u2190\uFF09",
   "lb.next": "\u4E0B\u4E00\u5F20\uFF08\u2192\uFF09",
@@ -2450,7 +2511,7 @@ var EN = {
   "pager.jump.ph": "Page",
   "panel.fullscreen": "Fullscreen",
   "panel.restore": "Restore",
-  "panel.dragHint": "Drag to move \xB7 Double-click to toggle fullscreen",
+  "panel.dragHint": "Drag to move \xB7 Double-click to fullscreen \xB7 Drag edges to resize",
   "lb.title": "Plugin screenshot preview",
   "lb.prev": "Previous (\u2190)",
   "lb.next": "Next (\u2192)",
@@ -2619,6 +2680,17 @@ var CSS = `
    DSH Web / \u6D4F\u89C8\u5668\u65E0\u6B64\u53D8\u91CF \u2192 \u56DE\u843D 0px\uFF0C\u884C\u4E3A\u4E0E\u65E7\u7248\u9010\u5B57\u8282\u4E00\u81F4\u3002 */
 .dshm-overlay.full{padding:0;top:var(--dsh-windows-titlebar-height,0px)}
 .dshm-panel.full{width:100%;height:100%;border-radius:0}
+/* resize \u70ED\u533A\uFF08panel resize\uFF09\uFF1A\u900F\u660E\u8D34\u5185\u7F18\uFF08\u9762\u677F overflow:hidden \u4E0D\u53EF\u5916\u7F6E\uFF09\u3002
+   \u8FB9 6/8px\u3001\u89D2 14\xD714\uFF08Q8 \u5B9A\u7A3F 12\u201316px \u5E26\u5185\uFF1B\u626B\u63CF\u671F\u53EF\u6821\u51C6\uFF09\u3002\u53F3\u70ED\u533A\u76D6\u4F4F .dshm-body
+   \u7EB5\u5411\u6EDA\u52A8\u6761\u5916\u7F18 ~6px\uFF08\u4F59 ~9px \u53EF\u62D6\uFF09\u3001\u89D2\u70ED\u533A\u4E0E\u6EDA\u52A8\u6761 corner \u6B7B\u533A\u57FA\u672C\u91CD\u5408\uFF08Q4 \u63A5\u53D7\uFF09\u3002
+   cursor \u5373\u5168\u90E8\u4F9B\u6027\u2014\u2014\u65E0\u89C6\u89C9\u63A7\u4EF6\uFF08Q8\uFF09\u3002z-index \u538B\u8FC7 body \u5185\u5BB9\u4F46\u4E0D\u8FDB\u5934\u90E8\u4EA4\u4E92\u533A
+   \uFF08head padding 14px > 6px \u70ED\u533A\uFF0Cwinctl \u6309\u94AE\u65E0\u78B0\u649E\uFF09\u3002 */
+.dshm-rz{position:absolute;z-index:5;touch-action:none}
+.rz-e{top:0;right:0;width:6px;height:100%;cursor:ew-resize}
+.rz-s{bottom:0;left:0;width:100%;height:8px;cursor:ns-resize}
+.rz-se{right:0;bottom:0;width:14px;height:14px;cursor:nwse-resize}
+.dshm-panel.full .dshm-rz{display:none} /* belt \u2460\uFF1A\u5168\u5C4F\u6001\u624B\u67C4\u4E0D\u6E32\u67D3\uFF0CCSS \u515C\u5E95 */
+@media (pointer:coarse){.dshm-rz{display:none}} /* belt \u2461\uFF1Acoarse \u6307\u9488\u6574\u7EC4\u9690\u85CF\uFF08Q8\uFF09 */
 /* \u7A97\u53E3\u63A7\u5236\u7EC4\uFF080.7.7\uFF09\uFF1A\u6700\u5927\u5316/\u5173\u95ED\u8FDE\u4F53\u6309\u94AE\u7EC4\u2014\u2014\u7B49\u5BBD\u4E24\u683C + \u53D1\u4E1D\u5206\u9694\u7EBF\uFF0C\u7EDF\u4E00\u7EBF\u6761\u56FE\u6807 */
 /* \u7A97\u53E3\u63A7\u5236\u7EC4\uFF080.7.7/0.7.8\uFF09\uFF1A\u6700\u5927\u5316/\u5173\u95ED\u8FDE\u4F53\u6309\u94AE\u7EC4\u2014\u2014\u900F\u660E\u5E95 + \u53D1\u4E1D\u5916\u6846\uFF0C\u4E0E\u641C\u7D22\u6E05\u9664\u94AE\u540C\u4E00\u914D\u8272\u8BED\u8A00\uFF1B\u5BBD\u683C\u9632\u8BEF\u89E6 */
 .dshm-winctl{display:inline-flex;align-items:stretch;border:1px solid var(--dsw-alias-border-l2,#e5e7eb);border-radius:9px;background:transparent;overflow:hidden;flex:none}
@@ -2628,10 +2700,10 @@ var CSS = `
 .dshm-winctl button:active{background:var(--dsw-alias-fill-secondary,rgba(127,127,127,.2))}
 .dshm-winctl button.danger:hover{background:#e5484d;color:#fff}
 .dshm-head{display:flex;align-items:center;gap:8px;padding:10px 14px;border-bottom:1px solid var(--dsw-alias-border-l2,#e5e7eb)}
-.dshm-title{font-weight:600;font-size:15px;margin-right:2px}
+.dshm-title{font-weight:600;font-size:15px;margin-right:2px;white-space:nowrap;min-width:0;overflow:hidden;text-overflow:ellipsis}
 .dshm-head-divider{width:1px;height:18px;background:var(--dsw-alias-border-l2,#e5e7eb);flex:none}
 .dshm-seg{display:inline-flex;align-items:center;gap:2px;padding:2px;border:1px solid var(--dsw-alias-border-l2,#e2e4e8);border-radius:9px;background:var(--dsw-alias-bg-layer-1,#f5f6f8)}
-.dshm-seg button{appearance:none;border:0;background:transparent;height:28px;padding:0 14px;border-radius:7px;font:inherit;font-size:12px;color:var(--dsw-alias-label-tertiary,#7b8088);cursor:pointer;display:inline-flex;align-items:center;gap:6px;transition:background .15s,color .15s,box-shadow .15s}
+.dshm-seg button{appearance:none;border:0;background:transparent;height:28px;padding:0 14px;border-radius:7px;font:inherit;font-size:12px;color:var(--dsw-alias-label-tertiary,#7b8088);cursor:pointer;display:inline-flex;align-items:center;gap:6px;white-space:nowrap;transition:background .15s,color .15s,box-shadow .15s}
 .dshm-seg button:hover{color:var(--dsw-alias-label-secondary,#4b5058)}
 .dshm-seg button.on{background:var(--dsw-alias-bg-layer-3,#fff);color:var(--dsw-alias-label-primary,#17191c);font-weight:600;box-shadow:var(--dsw-shadow-lv1,0 2px 8px rgb(20 24 32 / 8%))}
 .dsvm-filterbtn{appearance:none;border:1px solid var(--dsw-alias-border-l2,#e5e7eb);background:var(--dsw-alias-bg-elevated,transparent);color:var(--dsw-alias-label-secondary,#4b5563);border-radius:8px;padding:4px 12px;font:inherit;font-size:12px;cursor:pointer;display:inline-flex;align-items:center;gap:6px;white-space:nowrap;transition:color .15s,border-color .15s,background .15s}
@@ -2707,7 +2779,8 @@ var CSS = `
 .dsvm-pagebtn.on{border-color:var(--dsw-alias-interactive-bg-selected,#4f46e5);color:var(--dsw-alias-interactive-bg-selected,#4f46e5);font-weight:600}
 .dsvm-pagebtn:disabled{opacity:.4;cursor:default}
 .dsvm-modal{position:fixed;inset:0;z-index:2147483100;background:var(--dsw-alias-bg-mask-3,rgba(15,23,42,.55));display:flex;align-items:center;justify-content:center;padding:24px 16px}
-.dsvm-modalbox{width:min(720px,100%);max-height:86vh;overflow:auto;background:var(--dsw-alias-bg-elevated,#fff);background:color-mix(in srgb,var(--dsw-alias-bg-base,#fff) 94%,transparent);backdrop-filter:blur(14px);border:1px solid var(--dsw-alias-border-l2,#e5e7eb);border-radius:14px;box-shadow:0 18px 48px rgba(2,6,23,.25);padding:16px;display:flex;flex-direction:column;gap:10px}
+.dsvm-modalbox{width:min(720px,100%);max-height:86vh;overflow:hidden;background:var(--dsw-alias-bg-elevated,#fff);background:color-mix(in srgb,var(--dsw-alias-bg-base,#fff) 94%,transparent);backdrop-filter:blur(14px);border:1px solid var(--dsw-alias-border-l2,#e5e7eb);border-radius:14px;box-shadow:0 18px 48px rgba(2,6,23,.25);padding:16px;display:flex;flex-direction:column;gap:10px}
+.dsvm-modalbody{overflow:auto;min-height:0;overscroll-behavior:contain;display:flex;flex-direction:column;gap:10px}
 .dsvm-modalhead{display:flex;align-items:center;gap:8px;flex-wrap:wrap}
 .dsvm-kv{display:grid;grid-template-columns:auto 1fr;gap:4px 14px;font-size:12px;margin:0}
 .dsvm-kv dt{color:var(--dsw-alias-label-caption,#6b7280);white-space:nowrap}
@@ -2860,8 +2933,13 @@ button.dshm-badge:hover{filter:brightness(.95)}
 .dshm-settings-grid>.dshm-section{margin:0;min-width:0}
 .dshm-settings-grid>.dshm-section:nth-child(3){grid-column:1/-1}
 .dshm-settings-grid>.dshm-ops-card{grid-column:1/-1}
-.dshm-panel.full .dshm-settings-grid{grid-template-columns:4fr 7fr 3fr}
-.dshm-panel.full .dshm-settings-grid>.dshm-section:nth-child(3){grid-column:auto}
+/* \u4E09\u5217\u5236\u95E8\u63A7 = \u5BB9\u5668\u5BBD\u5EA6\u800C\u975E\u5168\u5C4F\u6001\uFF080.9.88\uFF0Cpanel resize \u4F34\u751F\u4FEE\u590D\uFF09\uFF1A\u8FD8\u539F\u6001\u53EF\u62C9\u5230
+   \u4EFB\u610F\u5BBD\uFF0C\u22651100px \u65F6\u300C\u5173\u4E8E\u300D\u5347\u7B2C\u4E09\u5217\uFF08\u7EA6 230px \u5BBD\uFF0Ckv \u884C\u653E\u5F97\u4E0B\uFF09\uFF1B\u987A\u5E26\u4FEE\u6B63\u65E7\u8D26\u2014\u2014
+   \u5C0F\u89C6\u53E3\u5168\u5C4F\uFF08<1100\uFF09\u4E0D\u518D\u88AB\u5F3A\u585E\u4E09\u5217\uFF0C\u56DE\u843D\u4E24\u5217\u3002\u2264760px \u89C6\u53E3\u5355\u5217\u5A92\u4F53\u67E5\u8BE2\u539F\u6837\u4FDD\u7559\u3002 */
+@container (min-width:1100px){
+  .dshm-settings-grid{grid-template-columns:4fr 7fr 3fr}
+  .dshm-settings-grid>.dshm-section:nth-child(3){grid-column:auto}
+}
 @media (max-width:760px){.dshm-settings-grid,.dshm-panel.full .dshm-settings-grid{grid-template-columns:minmax(0,1fr)}.dshm-settings-grid>.dshm-section:nth-child(3),.dshm-settings-grid>.dshm-ops-card{grid-column:1/-1}}
 .dshm-kvlines{display:flex;flex-direction:column}
 .dshm-kvline-row{display:flex;justify-content:space-between;align-items:baseline;gap:10px;padding:5px 0;border-bottom:1px solid var(--dsw-alias-border-l2,rgba(127,127,127,.14));min-width:0}
@@ -2913,7 +2991,7 @@ button.dshm-badge:hover{filter:brightness(.95)}
 .dshm-links{display:flex;align-items:center;gap:6px;flex-wrap:wrap;margin-top:7px;padding-top:6px;border-top:1px solid var(--dsw-alias-border-l2,#e5e7eb);font-size:11px;color:var(--dsw-alias-label-caption,#6b7280)}
 .dshm-links-k,.dshm-links-sep{color:var(--dsw-alias-label-caption,#9ca3af)}
 .dshm-links a{color:var(--dsw-alias-state-business-primary,#4d6bfe);text-decoration:none;font-weight:500}
-.dshm-links-ver{font-weight:500;color:var(--dsw-alias-label-secondary,#4b5563);font-variant-numeric:tabular-nums}
+.dshm-links-ver{font-weight:500;color:var(--dsw-alias-label-caption,#6b7280);font-variant-numeric:tabular-nums}
 .dshm-links a:hover{text-decoration:underline}
 .dshm-prog{display:flex;align-items:center;gap:8px;padding:8px 10px;border:1px solid var(--dsw-alias-border-l2,#e5e7eb);border-radius:8px;font-size:12px;color:var(--dsw-alias-label-secondary,#4b5563)}
 .dshm-prog .bar{flex:1;height:6px;border-radius:3px;background:var(--dsw-alias-bg-layer-2,rgba(38,49,72,.08));overflow:hidden;min-width:80px}
@@ -2973,8 +3051,10 @@ button.dshm-dshchip:disabled{cursor:default;opacity:.75}
    \u89C6\u53E3\u5BBD \u2260 \u9762\u677F\u5BBD\uFF08600px \u89C6\u53E3\u2192568px \u9762\u677F\u4ECD\u6EA2\u51FA\uFF09\uFF1B\u5BB9\u5668\u67E5\u8BE2\u8DDF\u968F\u9762\u677F\u5B9E\u9645\u5BBD\u5EA6\u3002\u9762\u677F\u5BBD\u9AD8
    \u5747\u4E3A min(920px,100%)/min(680px,86vh) \u516C\u5F0F\u6D3E\u751F\u3001\u4E0D\u4F9D\u8D56\u5185\u5BB9\uFF0Cinline-size \u5305\u542B\u5B89\u5168\uFF1B
    \u706F\u7BB1 portal \u6302 body\uFF080.9.73\uFF09\u3001\u5206\u7C7B\u884C sticky \u5728 .dshm-body \u6EDA\u52A8\u5BB9\u5668\u5185\uFF0C\u5747\u4E0D\u53D7\u7956\u5148
-   inline-size \u5305\u542B\u5F71\u54CD\u3002\u65AD\u70B9\uFF1A\u5BB9\u5668 600px\uFF08\u4E24\u884C\u91CD\u6392\uFF09\u4E0E\u89C6\u53E3 600px\uFF08\u9ED8\u8BA4\u5168\u5C4F\u5224\u5B9A +
-   overlay 8px\uFF09\u540C\u503C\u3002
+   inline-size \u5305\u542B\u5F71\u54CD\u3002\u65AD\u70B9\uFF1A\u5BB9\u5668 720px\uFF08\u4E24\u884C\u91CD\u6392\uFF09\u4E0E\u89C6\u53E3 600px\uFF08\u9ED8\u8BA4\u5168\u5C4F\u5224\u5B9A +
+   overlay 8px\uFF09\u2014\u2014\u4E24\u65AD\u70B9 0.9.88 \u8D77\u89E3\u8026\uFF1Apanel resize \u7684 min 640 \u843D\u5728 601\u2013720 \u5E26\u65F6\u65E7
+   600px \u65AD\u70B9\u4E0D\u89E6\u53D1\uFF0C\u957F\u6807\u9898\u6298\u884C/seg \u6324\u538B\uFF08\u4E3B\u4EBA\u5B9E\u6D4B 2026-10-15\uFF09\uFF0C720 \u65AD\u70B9\u8BA9 min \u6052\u5165
+   \u4E24\u884C\u533A\uFF1B\u526F\u4F5C\u7528 = 600\u2013720px \u89C6\u53E3\u7684\u624B\u673A\u5168\u5C4F\u4E5F\u4E24\u884C\uFF0C\u5C5E\u4FEE\u590D\u800C\u975E\u56DE\u5F52\u3002
    \u515C\u5E95\u8BED\u4E49\u8BF4\u660E\uFF08\u5171\u8BC6 Q3 + \u8BC4\u5BA1 R7\uFF09\uFF1A\u300C\u4E0D\u652F\u6301\u5BB9\u5668\u67E5\u8BE2\u7684\u6D4F\u89C8\u5668\u65B0\u89C4\u5219\u96F6\u751F\u6548\u300D\u6309 CSS
    \u6761\u4EF6\u89C4\u5219\u7EC4\u673A\u5236\u7B49\u6548\u843D\u5730\u2014\u2014.dshm-title-short \u57FA\u7840\u9690\u85CF\u4E0D\u4F9D\u8D56\u5BB9\u5668\u67E5\u8BE2\uFF08\u8001\u6D4F\u89C8\u5668\u4E5F\u8981
    \u751F\u6548\uFF09\uFF1B\u5176\u4F59\u65B0\u89C4\u5219\u90FD\u662F\u6574\u5757 at-rule\uFF08@supports/@container/@media \u9876\u5C42\u5144\u5F1F\uFF09\uFF0C\u4E0D\u652F\u6301
@@ -2988,7 +3068,7 @@ button.dshm-dshchip:disabled{cursor:default;opacity:.75}
 /* \u4E24\u884C\u91CD\u6392\uFF1A\u884C1 [\u77ED\u6807\u9898 \u22EFspacer\u22EF chip winctl]\uFF0C\u884C2 [seg \u62C9\u901A]\u3002DOM \u987A\u5E8F\u4E0D\u52A8
   \uFF08title\u2192divider\u2192seg\u2192spacer\u2192chip\u2192winctl\uFF09\uFF0C\u5168\u9760 order+wrap\u2014\u2014\u6E90\u951A/tab \u5E8F/\u8BFB\u5C4F\u5E8F
   \u96F6\u6270\u52A8\uFF1B\u89C6\u89C9\u5E8F\u4E0E DOM \u5E8F\u4E0D\u4E00\u81F4\uFF08seg \u5728 DOM \u524D\u3001\u89C6\u89C9\u5728\u540E\uFF09\uFF0C\u9762\u677F\u5185\u5143\u7D20\u5C11\u53EF\u63A5\u53D7 */
-@container (max-width:600px){
+@container (max-width:720px){
   .dshm-head{flex-wrap:wrap;row-gap:6px}
   .dshm-head-divider{display:none}
   .dshm-title-full{display:none}
@@ -3822,75 +3902,82 @@ function DetailModal({ it, labels, busy, onClose, onInstall, onUpgrade, upgradeB
         h("span", { className: "dshm-spacer" }),
         h("button", { ref: closeRef, className: "dshm-xbtn", "aria-label": lookup("common.close"), title: lookup("common.close"), onClick: onClose }, h(XIcon))
       ),
-      it.community === true ? h(
-        "div",
-        { className: "dsvm-byline" },
-        it.owner ? h("span", null, `by ${it.owner}`) : null,
-        typeof it.stars === "number" ? h("span", { title: String(it.stars) }, `${compactCount(it.stars)} \u2605`) : null,
-        typeof it.downloads === "number" ? h("span", { title: String(it.downloads) }, `${compactCount(it.downloads)} \u2193`) : null
-      ) : null,
-      h(LinksRow, { npm: it.npm, github: it.github, homepage: it.homepage }),
+      // 0.9.88（T7 验收·主人反馈二）：中段内容包进 modalbody 滚动层——✕（head）与
+      // 「安装」（actions）双端常驻，README/能力披露展开多长都关得上、装得了；
+      // box 攂 overflow:hidden，滚动收进 body（overscroll-behavior 防链式透传底页）。
       h(
-        "dl",
-        { className: "dsvm-kv" },
-        kv(lookup("modal.category"), catLabel),
-        it.added ? kv(lookup("modal.added"), fmtDate(it.added)) : null,
-        it.community === true ? kv(
-          lookup("modal.dlwindow"),
-          typeof it.downloads === "number" ? h("span", { title: String(it.downloads) }, `${compactCount(it.downloads)}\uFF08${it.downloadsStart || "?"} ~ ${it.downloadsEnd || "?"}${it.downloadsCheckedAt ? `\uFF0C${lookup("modal.checkedat")} ${it.downloadsCheckedAt}` : ""}\uFF09`) : lookup("modal.dlnone")
-        ) : null,
-        kv(lookup("detail.latest"), it.latestVersion ? `v${it.latestVersion}` : it.latestTag ? it.latestTag : it.latestSha ? it.latestSha : it.latestError ? it.version ? lookup("sub.snapshot", { v: it.version }) : it.latestError : "\u2014"),
-        kv(lookup("detail.installed"), it.installedPkg ? `${it.installedPkg} v${it.installedVersion || "?"}` : lookup("installed.none")),
-        it.community !== true && Array.isArray(it.verified) && it.verified.length ? kv(lookup("modal.verified"), it.verified.join("\u3001")) : null,
-        it.audience === "internal" ? kv(lookup("modal.audience.label"), lookup("modal.audience.value")) : null,
-        it.decoupled === true ? kv(lookup("modal.decoupled.label"), lookup("modal.decoupled.value")) : null,
-        (it.tags || []).length ? kv(lookup("modal.tags"), it.tags.join(", ")) : null,
-        it.deprecated === true && it.replacement ? kv(lookup("modal.replacement"), it.replacement) : null
-      ),
-      h("div", { className: "dshm-desc", style: { WebkitLineClamp: "unset" } }, descFull),
-      it.npm ? h(
-        "details",
-        { className: "dsvm-fold", onToggle: (e) => {
-          if (e.target.open) setRmOpen(true);
-        } },
-        h("summary", null, lookup("readme.show")),
-        rmOpen ? h(ReadmeBlock, { pkg: it.npm, repo: it.github }) : h("div", { className: "dshm-hint" }, lookup("readme.loading"))
-      ) : null,
-      visible.length ? h(
         "div",
-        { ref: shotRowRef, className: "dsvm-shotrow" },
-        ...shots.map((src, i) => h(Shot, { key: `${i}:${src}`, src, onClick: () => setLb(visible.indexOf(src)), onBroken: breakShot }))
-      ) : null,
-      it.community === true ? h(
-        "details",
-        { className: "dsvm-fold" },
-        h("summary", null, lookup("detail.capabilities")),
-        Array.isArray(it.capabilities) && it.capabilities.length ? h(
+        { className: "dsvm-modalbody" },
+        it.community === true ? h(
           "div",
-          null,
-          h("div", null, it.capabilities.join(", ")),
-          Array.isArray(it.capabilityRedLines) && it.capabilityRedLines.length ? h("div", { className: "dshm-err" }, `${lookup("detail.redlines")}: ${it.capabilityRedLines.join("; ")}`) : null
-        ) : h("div", { className: "dshm-hint" }, lookup("detail.capabilities.unscanned"))
-      ) : null,
-      showInstallCmd ? h(
-        "details",
-        { className: "dsvm-fold" },
-        h("summary", null, lookup("modal.installcmd")),
+          { className: "dsvm-byline" },
+          it.owner ? h("span", null, `by ${it.owner}`) : null,
+          typeof it.stars === "number" ? h("span", { title: String(it.stars) }, `${compactCount(it.stars)} \u2605`) : null,
+          typeof it.downloads === "number" ? h("span", { title: String(it.downloads) }, `${compactCount(it.downloads)} \u2193`) : null
+        ) : null,
+        h(LinksRow, { npm: it.npm, github: it.github, homepage: it.homepage }),
         h(
+          "dl",
+          { className: "dsvm-kv" },
+          kv(lookup("modal.category"), catLabel),
+          it.added ? kv(lookup("modal.added"), fmtDate(it.added)) : null,
+          it.community === true ? kv(
+            lookup("modal.dlwindow"),
+            typeof it.downloads === "number" ? h("span", { title: String(it.downloads) }, `${compactCount(it.downloads)}\uFF08${it.downloadsStart || "?"} ~ ${it.downloadsEnd || "?"}${it.downloadsCheckedAt ? `\uFF0C${lookup("modal.checkedat")} ${it.downloadsCheckedAt}` : ""}\uFF09`) : lookup("modal.dlnone")
+          ) : null,
+          kv(lookup("detail.latest"), it.latestVersion ? `v${it.latestVersion}` : it.latestTag ? it.latestTag : it.latestSha ? it.latestSha : it.latestError ? it.version ? lookup("sub.snapshot", { v: it.version }) : it.latestError : "\u2014"),
+          kv(lookup("detail.installed"), it.installedPkg ? `${it.installedPkg} v${it.installedVersion || "?"}` : lookup("installed.none")),
+          it.community !== true && Array.isArray(it.verified) && it.verified.length ? kv(lookup("modal.verified"), it.verified.join("\u3001")) : null,
+          it.audience === "internal" ? kv(lookup("modal.audience.label"), lookup("modal.audience.value")) : null,
+          it.decoupled === true ? kv(lookup("modal.decoupled.label"), lookup("modal.decoupled.value")) : null,
+          (it.tags || []).length ? kv(lookup("modal.tags"), it.tags.join(", ")) : null,
+          it.deprecated === true && it.replacement ? kv(lookup("modal.replacement"), it.replacement) : null
+        ),
+        h("div", { className: "dshm-desc", style: { WebkitLineClamp: "unset" } }, descFull),
+        it.npm ? h(
+          "details",
+          { className: "dsvm-fold", onToggle: (e) => {
+            if (e.target.open) setRmOpen(true);
+          } },
+          h("summary", null, lookup("readme.show")),
+          rmOpen ? h(ReadmeBlock, { pkg: it.npm, repo: it.github }) : h("div", { className: "dshm-hint" }, lookup("readme.loading"))
+        ) : null,
+        visible.length ? h(
           "div",
-          { className: "dsvm-cmdrow" },
-          h("code", { className: "dsvm-code" }, installCmd),
-          h("button", { className: "dshm-btn sm", onClick: copyCmd }, copied ? lookup("modal.copied") : lookup("modal.copy"))
-        )
-      ) : null,
-      // 0.9.15：安装信息就地进 Modal（主人反馈 2026-10-02：进度/终态原先只隔遮罩在底层透出）。
-      // 进度行复用 ProgressLine（自轮询 host status）；底层同源行由 MarketTab 在本 Modal 打开时让位。
-      // installRec 派生自全局操作记录（DESIGN §2.6「状态不挂卡片」的所有权模型不变，此处只是展示）：
-      // 仅 queued/running 挂行，input（兼容待决）走上层 CompatDialog；installNote 为本次终态摘要。
-      installRec && (installRec.status === "running" || installRec.status === "queued") ? h(ProgressLine, { key: "opprog" }) : null,
-      upgradeRec && (upgradeRec.status === "running" || upgradeRec.status === "queued") ? h(ProgressLine, { key: "upprog" }) : null,
-      installNote ? h("div", { key: "opnote", className: installNote.kind === "err" ? "dshm-err" : installNote.kind === "hint" ? "dshm-hint" : "dshm-ok" }, installNote.text) : null,
-      installNote && installNote.kind === "ok" ? h("div", { key: "opnote-rh", className: "dshm-hint" }, lookup(profileKind === "desktop" ? "profile.restartHint" : "banner.done")) : null,
+          { ref: shotRowRef, className: "dsvm-shotrow" },
+          ...shots.map((src, i) => h(Shot, { key: `${i}:${src}`, src, onClick: () => setLb(visible.indexOf(src)), onBroken: breakShot }))
+        ) : null,
+        it.community === true ? h(
+          "details",
+          { className: "dsvm-fold" },
+          h("summary", null, lookup("detail.capabilities")),
+          Array.isArray(it.capabilities) && it.capabilities.length ? h(
+            "div",
+            null,
+            h("div", null, it.capabilities.join(", ")),
+            Array.isArray(it.capabilityRedLines) && it.capabilityRedLines.length ? h("div", { className: "dshm-err" }, `${lookup("detail.redlines")}: ${it.capabilityRedLines.join("; ")}`) : null
+          ) : h("div", { className: "dshm-hint" }, lookup("detail.capabilities.unscanned"))
+        ) : null,
+        showInstallCmd ? h(
+          "details",
+          { className: "dsvm-fold" },
+          h("summary", null, lookup("modal.installcmd")),
+          h(
+            "div",
+            { className: "dsvm-cmdrow" },
+            h("code", { className: "dsvm-code" }, installCmd),
+            h("button", { className: "dshm-btn sm", onClick: copyCmd }, copied ? lookup("modal.copied") : lookup("modal.copy"))
+          )
+        ) : null,
+        // 0.9.15：安装信息就地进 Modal（主人反馈 2026-10-02：进度/终态原先只隔遮罩在底层透出）。
+        // 进度行复用 ProgressLine（自轮询 host status）；底层同源行由 MarketTab 在本 Modal 打开时让位。
+        // installRec 派生自全局操作记录（DESIGN §2.6「状态不挂卡片」的所有权模型不变，此处只是展示）：
+        // 仅 queued/running 挂行，input（兼容待决）走上层 CompatDialog；installNote 为本次终态摘要。
+        installRec && (installRec.status === "running" || installRec.status === "queued") ? h(ProgressLine, { key: "opprog" }) : null,
+        upgradeRec && (upgradeRec.status === "running" || upgradeRec.status === "queued") ? h(ProgressLine, { key: "upprog" }) : null,
+        installNote ? h("div", { key: "opnote", className: installNote.kind === "err" ? "dshm-err" : installNote.kind === "hint" ? "dshm-hint" : "dshm-ok" }, installNote.text) : null,
+        installNote && installNote.kind === "ok" ? h("div", { key: "opnote-rh", className: "dshm-hint" }, lookup(profileKind === "desktop" ? "profile.restartHint" : "banner.done")) : null
+      ),
       h(
         "div",
         { className: "dsvm-modalactions" },
@@ -4901,15 +4988,14 @@ function FavoriteZone({ favorites, onOpen }) {
     if (!list.length) return;
     const timer = setTimeout(() => {
       void (async () => {
-        const lookupLive = async (fav) => {
-          try {
-            const res = await api("market", { query: fav.id, source: "all", limit: 8, probeMode: "cache-only" });
-            const items = res && Array.isArray(res.items) ? res.items : [];
-            return items.some((x) => x && x.id === fav.id);
-          } catch {
-            return false;
-          }
-        };
+        let present = /* @__PURE__ */ new Set();
+        try {
+          const res = await api("market-ids-exist", { ids: list.map((f) => f.id) });
+          if (res && Array.isArray(res.present)) present = new Set(res.present);
+        } catch {
+          present = /* @__PURE__ */ new Set();
+        }
+        const lookupLive = async (fav) => present.has(fav.id);
         const { stale } = await partitionStale2(list, lookupLive);
         if (live) setCheck({ staleIds: stale.map((f) => f.id) });
       })();
@@ -5226,20 +5312,35 @@ function MarketPanel({ onClose }) {
       return null;
     }
   });
+  const [size, setSize] = useState(() => {
+    try {
+      return loadPanelSize2(typeof window !== "undefined" && window.localStorage ? window.localStorage : null);
+    } catch {
+      return null;
+    }
+  });
   const fullRef = useRef(full);
   fullRef.current = full;
   const posRef = useRef(pos);
   posRef.current = pos;
+  const sizeRef = useRef(size);
+  sizeRef.current = size;
+  const resizingRef = useRef(false);
   const reclamp = useCallback(() => {
-    if (fullRef.current || draggingRef.current || !panelRef.current || typeof window === "undefined") return;
+    if (fullRef.current || draggingRef.current || resizingRef.current || !panelRef.current || typeof window === "undefined") return;
+    const vp = { width: window.innerWidth, height: window.innerHeight };
+    const insets = readTitlebarInsets();
+    const prevSize = sizeRef.current;
+    const eff = prevSize ? clampSize2(prevSize, vp, insets) : null;
+    if (eff && prevSize && (eff.w !== prevSize.w || eff.h !== prevSize.h)) setSize(eff);
     const prev = posRef.current;
     if (!prev) return;
     const rect = panelRef.current.getBoundingClientRect();
     const next = clampPoint2(
       { x: prev.x, y: prev.y },
-      { width: window.innerWidth, height: window.innerHeight },
-      { width: rect.width, height: rect.height },
-      readTitlebarInsets()
+      vp,
+      eff ? { width: eff.w, height: eff.h } : { width: rect.width, height: rect.height },
+      insets
     );
     if (next.x !== prev.x || next.y !== prev.y) setPos(next);
   }, []);
@@ -5260,7 +5361,7 @@ function MarketPanel({ onClose }) {
     let originY = 0;
     let grab = { dx: 0, dy: 0 };
     let rest = { x: 0, y: 0 };
-    let size = { width: 0, height: 0 };
+    let size2 = { width: 0, height: 0 };
     let lastPoint = null;
     const bindGesture = () => {
       document.addEventListener("pointermove", onPointerMove);
@@ -5277,7 +5378,7 @@ function MarketPanel({ onClose }) {
       const topLeft = clampPoint2(
         { x: lastPoint.x - grab.dx, y: lastPoint.y - grab.dy },
         { width: window.innerWidth, height: window.innerHeight },
-        size,
+        size2,
         readTitlebarInsets()
       );
       panelRef.current.style.transform = `translate3d(${Math.round(topLeft.x - rest.x)}px, ${Math.round(topLeft.y - rest.y)}px, 0)`;
@@ -5300,7 +5401,7 @@ function MarketPanel({ onClose }) {
       const final = clampPoint2(
         { x: event.clientX - grab.dx, y: event.clientY - grab.dy },
         { width: window.innerWidth, height: window.innerHeight },
-        size,
+        size2,
         readTitlebarInsets()
       );
       panel.style.left = `${final.x}px`;
@@ -5350,7 +5451,7 @@ function MarketPanel({ onClose }) {
       const rect = panel.getBoundingClientRect();
       grab = grabOffset2({ x: event.clientX, y: event.clientY }, rect);
       rest = { x: rect.left, y: rect.top };
-      size = { width: rect.width, height: rect.height };
+      size2 = { width: rect.width, height: rect.height };
       if (headEl.setPointerCapture) {
         try {
           headEl.setPointerCapture(event.pointerId);
@@ -5366,6 +5467,122 @@ function MarketPanel({ onClose }) {
       document.body.style.userSelect = "";
     };
   }, []);
+  useEffect(() => {
+    const panelEl = panelRef.current;
+    if (!panelEl) return void 0;
+    let zone = null;
+    let resizing = false;
+    let moved = false;
+    let slop = 6;
+    let originX = 0, originY = 0;
+    let startW = 0, startH = 0;
+    let originRect = null;
+    let lastPoint = null;
+    let raf = 0;
+    const ZONE_CURSOR = { e: "ew-resize", s: "ns-resize", se: "nwse-resize" };
+    const bindGesture = () => {
+      document.addEventListener("pointermove", onPointerMove);
+      document.addEventListener("pointerup", onPointerUp);
+      document.addEventListener("pointercancel", onPointerCancel);
+    };
+    const unbindGesture = () => {
+      document.removeEventListener("pointermove", onPointerMove);
+      document.removeEventListener("pointerup", onPointerUp);
+      document.removeEventListener("pointercancel", onPointerCancel);
+    };
+    const frameStep = () => {
+      raf = 0;
+      if (!resizing || !moved || !lastPoint || !panelRef.current) return;
+      const raw = {
+        w: zone === "s" ? startW : startW + (lastPoint.x - originX),
+        h: zone === "e" ? startH : startH + (lastPoint.y - originY)
+      };
+      const next = clampSize2(raw, { width: window.innerWidth, height: window.innerHeight }, readTitlebarInsets(), originRect);
+      panelRef.current.style.width = `${Math.round(next.w)}px`;
+      panelRef.current.style.height = `${Math.round(next.h)}px`;
+    };
+    const onPointerMove = (event) => {
+      if (!resizing) return;
+      if (!moved) {
+        if (Math.hypot(event.clientX - originX, event.clientY - originY) < slop) return;
+        moved = true;
+        document.body.style.userSelect = "none";
+        document.body.style.cursor = ZONE_CURSOR[zone];
+      }
+      lastPoint = { x: event.clientX, y: event.clientY };
+      if (!raf) raf = requestAnimationFrame(frameStep);
+    };
+    const onPointerUp = () => {
+      if (!resizing) return;
+      const baked = panelRef.current ? clampSize2(
+        moved && lastPoint ? { w: zone === "s" ? startW : startW + (lastPoint.x - originX), h: zone === "e" ? startH : startH + (lastPoint.y - originY) } : { w: startW, h: startH },
+        { width: window.innerWidth, height: window.innerHeight },
+        readTitlebarInsets(),
+        originRect
+      ) : null;
+      unbindGesture();
+      if (raf) cancelAnimationFrame(raf);
+      raf = 0;
+      resizing = false;
+      resizingRef.current = false;
+      document.body.style.userSelect = "";
+      document.body.style.cursor = "";
+      if (!moved) return;
+      try {
+        savePanelSize2(typeof window !== "undefined" && window.localStorage ? window.localStorage : null, baked);
+      } catch {
+      }
+      setSize(baked);
+    };
+    const onPointerCancel = () => {
+      if (!resizing) return;
+      unbindGesture();
+      if (raf) cancelAnimationFrame(raf);
+      raf = 0;
+      resizing = false;
+      resizingRef.current = false;
+      document.body.style.userSelect = "";
+      document.body.style.cursor = "";
+      if (panelRef.current) {
+        panelRef.current.style.width = sizeRef.current ? `${sizeRef.current.w}px` : "";
+        panelRef.current.style.height = sizeRef.current ? `${sizeRef.current.h}px` : "";
+      }
+    };
+    const onPointerDown = (event) => {
+      if (resizing) return;
+      if (event.button !== 0) return;
+      if (event.pointerType !== "mouse") return;
+      const handle = event.target?.closest?.("[data-dshm-resize]");
+      if (!handle) return;
+      zone = handle.getAttribute("data-dshm-resize");
+      const rect = panelRef.current.getBoundingClientRect();
+      startW = rect.width;
+      startH = rect.height;
+      originRect = posRef.current ? { left: rect.left, top: rect.top } : null;
+      originX = event.clientX;
+      originY = event.clientY;
+      slop = dragSlop2(event.pointerType);
+      resizing = true;
+      resizingRef.current = true;
+      moved = false;
+      lastPoint = null;
+      if (handle.setPointerCapture) {
+        try {
+          handle.setPointerCapture(event.pointerId);
+        } catch {
+        }
+      }
+      bindGesture();
+    };
+    panelEl.addEventListener("pointerdown", onPointerDown);
+    return () => {
+      panelEl.removeEventListener("pointerdown", onPointerDown);
+      unbindGesture();
+      if (raf) cancelAnimationFrame(raf);
+      document.body.style.userSelect = "";
+      document.body.style.cursor = "";
+    };
+  }, []);
   const marketCommunity = useMarketData("community");
   const marketPrimary = useMarketData("primary");
   const markets = { community: marketCommunity, primary: marketPrimary };
@@ -5544,7 +5761,12 @@ function MarketPanel({ onClose }) {
       "div",
       {
         className: ["dshm-panel", full && "full", !full && pos && "abs"].filter(Boolean).join(" "),
-        style: !full && pos ? { left: `${pos.x}px`, top: `${pos.y}px` } : void 0,
+        // panel resize：尺寸记忆以 inline 宽高覆盖类默认 min(920px,100%)·min(680px,86vh)；
+        // 与位置记忆互不诱发（就地生长：居中形态只带 width/height 仍由 flex 居中）
+        style: !full ? {
+          ...pos ? { left: `${pos.x}px`, top: `${pos.y}px` } : {},
+          ...size ? { width: `${size.w}px`, height: `${size.h}px` } : {}
+        } : void 0,
         ref: panelRef,
         onClick: (e) => e.stopPropagation()
       },
@@ -5662,7 +5884,13 @@ function MarketPanel({ onClose }) {
           h("span", { className: `dshm-banner-text${toastScrollCls}`, ref: toastTextRef }, toast.text)
         ) : null,
         banner ? h(RestartBanner, { note: banner.text, onDone: () => setBanner(null), desktop: banner.desktop === true, onRestarted: reloadPing }) : null
-      ) : null
+      ) : null,
+      // resize 热区（panel resize）：透明无视觉；pointer-only 供性（aria-hidden）。
+      // 全屏态不渲染（Task 5 CSS @media pointer:coarse 与 .full belt 另有双保险）；
+      // data-dshm-resize 供 T3 手势机 closest 门卫。
+      !full && h("div", { className: "dshm-rz rz-e", "data-dshm-resize": "e", "aria-hidden": "true" }),
+      !full && h("div", { className: "dshm-rz rz-s", "data-dshm-resize": "s", "aria-hidden": "true" }),
+      !full && h("div", { className: "dshm-rz rz-se", "data-dshm-resize": "se", "aria-hidden": "true" })
     )
   );
 }

package/lib/core/community.js

@@ -8,10 +8,10 @@
  */
 import { mkdir, readFile, rm, rename, writeFile } from 'node:fs/promises';
 import { isAbsolute, join, relative } from 'node:path';
-import { cacheRoot } from './env.js';
+import { cacheRoot, WEB_PROFILE } from './env.js';
 import { decodeUtf8Fatal, fetchBytesLimited, describeFetchFailure } from './httpx.js';
 import { isExactVersion, npmLatest } from './versions.js';
-import { communityOutcome } from './merged-market.js';
+import { mergedOutcome } from './merged-market.js';
 export const COMMUNITY_NPM_PACKAGE = 'dsh-plugin-catalog';
 export const MAX_COMMUNITY_BYTES = 32 * 1024 * 1024;
 export const MAX_COMMUNITY_ENTRIES = 30_000;
@@ -448,16 +448,29 @@ export async function fetchCommunityCatalog(cfg = {}, opts = {}) {
     }
 }
 /**
- * 单一深接口（计划 Task 6）：fetch → adapt → merge 计数 → CommunityRegistrySummary。
- * - primaryEntries 直接取本次 registry snapshot 的 primary plugins（displaced 与本次响应同代，
+ * 单一深接口（计划 Task 6）：fetch → mergedOutcome（L2 代存储）→ CommunityRegistrySummary。
+ * - 0.9.87 FP3：改道 mergedOutcome——同身份（registry 代 + 目录 version）命中即免全量
+ *   adapt+merge（每次设置页打开 ~10-50ms CPU），summary 仍由当次 state 现算（「summary
+ *   永不入代」不变量保持）；失败/deadline/unavailable/disabled 形态透传不落代；
+ * - registry 直接取本次 registry snapshot 的 LoadedRegistry（displaced 与本次响应同代，
  *   不重复加载主清单；内部禁止调用 loadRegistry——单一来源约束）；
+ * - namespace/profile 显式透传：缺省 'host'/WEB_PROFILE，与改道前 fetchCommunityCatalog/
+ *   awesomeDir 的隐式默认逐字节同路（缓存目录恒 web 段——**自觉取舍**：保 parity 优先于
+ *   与 market 臂共享 L2 代，desktop host 下各建各代是接受的成本，勿当「漏传」修复）；
  * - 3s 是本 waiter 的等待上限（waiter-scoped race）：到点未 materialize → unavailable +
  *   「社区目录状态获取超时」errors，调用方主响应照常；共享 flight 按 30s hard cap 继续；
  * - 数据源 cache-first：fetchCommunityCatalog 的版本缓存 + TTL 保证 registry 刷新无重复网络压力。
  */
-export async function getCommunitySummary(primaryEntries, cfg = {}, opts) {
-    const task = fetchCommunityCatalog(cfg, { signal: opts.signal, force: opts.force });
-    const outcome = await communityOutcome(task, opts.deadlineAt, primaryEntries);
+export async function getCommunitySummary(registry, cfg = {}, opts) {
+    const task = fetchCommunityCatalog(cfg, { namespace: opts.namespace, signal: opts.signal, force: opts.force, profile: opts.profile });
+    const outcome = await mergedOutcome({
+        namespace: opts.namespace ?? 'host',
+        profile: opts.profile ?? WEB_PROFILE,
+        cfg,
+        registry,
+        communityTask: task,
+        deadlineAt: opts.deadlineAt,
+    });
     return outcome.summary;
 }
 // 0.9.14 SWR：过期触发即登记的后台自愈 flight（waiter 隔离；flight 本体走 fetchCommunityCatalog

package/lib/core/host-api.js

@@ -10,7 +10,7 @@
 import { BOOT_ID, publicInstallStatus } from './dsh-cli.js';
 import { resolveDshVersion, readLauncherPackageVersion } from './dsh-version.js';
 import { runDoctor } from './doctor.js';
-import { listInstalledWithMeta, listMarket, installFromRegistry, selfUpgrade, uninstallPlugin, upgradePlugin, InstallGuardError, } from './market.js';
+import { listInstalledWithMeta, listMarket, existingMarketIds, installFromRegistry, selfUpgrade, uninstallPlugin, upgradePlugin, InstallGuardError, } from './market.js';
 import { runProfileTransaction, TransactionError } from './profile-transaction.js';
 import { listExternalOperations, clearExternalOperations, removeExternalOperation } from './external-journal.js';
 import { readInstalledPluginReadme } from './installed.js';
@@ -212,6 +212,7 @@ export function createApiDispatcher(ctx) {
     const d = {
         listMarket: ctx.deps?.listMarket ?? listMarket,
         listInstalledWithMeta: ctx.deps?.listInstalledWithMeta ?? listInstalledWithMeta,
+        existingMarketIds: ctx.deps?.existingMarketIds ?? existingMarketIds,
         installFromRegistry: ctx.deps?.installFromRegistry ?? installFromRegistry,
         uninstallPlugin: ctx.deps?.uninstallPlugin ?? uninstallPlugin,
         upgradePlugin: ctx.deps?.upgradePlugin ?? upgradePlugin,
@@ -323,10 +324,14 @@ export function createApiDispatcher(ctx) {
                     // 0.9.11：不再透传 force——「强制刷新」语义是精选清单（registry 链），社区目录走自己的
                     // TTL/共享 flight；此前 force 连坐会在弱网下把社区卡打成 3s 超时的「不可用」占位
                     // （Windows 实机 2026-10-01：点强制刷新 → 社区卡「获取超时」，flight 后台自愈前一直报错）。
-                    const community = await d.getCommunitySummary(snap.loaded.registry.plugins, cfg(), {
+                    // 0.9.87 FP3：getCommunitySummary 改道 mergedOutcome（L2）——registry 传 snap.loaded
+                    // 整体（身份键需要 configuredAddress/fetchedAt）；namespace 'host' + profile 缺省
+                    // （WEB_PROFILE）与改道前缓存路径逐字节同路。
+                    const community = await d.getCommunitySummary(snap.loaded, cfg(), {
                         force: false,
                         signal,
                         deadlineAt: Date.now() + 3_000,
+                        namespace: 'host',
                     });
                     payload = { plugins: snap.loaded.registry.plugins, registryState: snap.loaded, community };
                     break;
@@ -421,6 +426,22 @@ export function createApiDispatcher(ctx) {
                     payload = { ...result };
                     break;
                 }
+                case 'market-ids-exist': {
+                    // 0.9.87 FP2：收藏 stale 检测批量化——一次批量 id 存在性查询取代逐收藏完整 market 扇出。
+                    // 校验：非空字符串数组 ≤500（trim 后透传）；违例 400（与 source/sort/probeMode 同款不静默吞）。
+                    const rawIds = body.ids;
+                    if (!Array.isArray(rawIds) || rawIds.length > 500 || rawIds.some((v) => typeof v !== 'string' || v.trim() === '')) {
+                        throw new ApiProtocolError(400, '非法 ids: 需非空字符串数组（≤500）');
+                    }
+                    const ids = rawIds.map((v) => v.trim());
+                    const result = await d.existingMarketIds(ids, cfg(), {
+                        namespace: 'host',
+                        profile: profile.name,
+                        signal,
+                    });
+                    payload = { present: result.present };
+                    break;
+                }
                 case 'installed': {
                     await ctx.controller.ensureReady();
                     // 0.9.5 双 profile 读路径接线（实机回归 2026-10-01）：desktop 下已装列表此前

package/lib/core/installed.js

@@ -146,41 +146,42 @@ function sanitizePkgJson(raw, fallbackName) {
         githubRepo: githubRepoFromRepository(raw.repository),
     };
 }
-/** 枚举 web profile 已安装插件（只读）。complete:false 时 items/others 为 partial 结果（已确认部分保留）。 */
-export async function listInstalledPlugins(profileDir = webProfileDir()) {
-    const root = resolve(profileDir);
-    const result = await readProfileDepsResult(root);
-    let complete = result.complete;
-    const deps = result.deps;
-    const items = [];
-    let others = 0;
-    for (const pkg of Object.keys(deps).sort()) {
-        const spec = deps[pkg];
-        const dir = resolvePluginDir(root, pkg, spec);
-        if (!dir) {
-            // 依赖键不安全、目录无法解析 → 无法判断（不冒充非 DSH）
-            complete = false;
-            continue;
-        }
-        const rawResult = await readPkgJsonResult(dir);
-        if (!rawResult.ok) {
-            // package.json 缺失/不可读/坏 JSON/根非对象 → 无法判断
-            complete = false;
-            continue;
-        }
-        const raw = rawResult.value;
-        if (!('dsh' in raw)) {
-            // 确认非 DSH 依赖
-            others += 1;
-            continue;
-        }
-        const info = sanitizePkgJson(raw, pkg);
-        // 包内补丁层行枚举（开关粒度判定原料）：缺失 → readable:false（按多行 → Bundle 级处理）
-        const patchText = await readTextLimited(join(dir, 'cordis.patch.yml'), PATCH_MAX_BYTES);
-        const patchRows = patchText
-            ? readBundlePatchRows(patchText.text)
-            : { inserts: [], configRows: 0, readable: false };
-        items.push({
+async function classifyDep(root, pkg, spec, wantPatch) {
+    const dir = resolvePluginDir(root, pkg, spec);
+    if (!dir)
+        return 'unknown';
+    const rawResult = await readPkgJsonResult(dir);
+    if (!rawResult.ok)
+        return 'unknown';
+    const raw = rawResult.value;
+    if (!('dsh' in raw))
+        return 'other';
+    const info = sanitizePkgJson(raw, pkg);
+    // 包内补丁层行枚举（开关粒度判定原料）：缺失 → readable:false（按多行 → Bundle 级处理）。
+    // wantPatch=false（市场查询热路径）省略 patchRows 字段——不伪造 readable:false（那是
+    // 「多行插件」的语义谎报）；消费方（enablement/toggle，listInstalledWithMeta 路径）全程 ?. 链。
+    if (!wantPatch) {
+        return {
+            item: {
+                pkg,
+                name: info.name,
+                version: info.version,
+                description: info.description,
+                homepage: info.homepage,
+                spec,
+                source: parseSpecSource(spec),
+                dsh: true,
+                path: dir,
+                githubRepo: info.githubRepo,
+            },
+        };
+    }
+    const patchText = await readTextLimited(join(dir, 'cordis.patch.yml'), PATCH_MAX_BYTES);
+    const patchRows = patchText
+        ? readBundlePatchRows(patchText.text)
+        : { inserts: [], configRows: 0, readable: false };
+    return {
+        item: {
             pkg,
             name: info.name,
             version: info.version,
@@ -190,9 +191,39 @@ export async function listInstalledPlugins(profileDir = webProfileDir()) {
             source: parseSpecSource(spec),
             dsh: true,
             path: dir,
-            githubRepo: githubRepoFromRepository(raw.repository),
+            githubRepo: info.githubRepo,
             patchRows,
-        });
+        },
+    };
+}
+/**
+ * 枚举 web profile 已安装插件（只读）。complete:false 时 items/others 为 partial 结果（已确认部分保留）。
+ * opts.patchRows=false：跳过每插件的 cordis.patch.yml 读取与 YAML 解析（热路径省 ~0.55ms/插件），
+ * 产出的 item 不带 patchRows 字段——仅供不需要开关粒度原料的调用方（市场查询）使用。
+ */
+export async function listInstalledPlugins(profileDir = webProfileDir(), opts) {
+    const root = resolve(profileDir);
+    const result = await readProfileDepsResult(root);
+    let complete = result.complete;
+    const deps = result.deps;
+    const wantPatch = opts?.patchRows !== false;
+    // 每依赖文件读并发执行（原串行 for-await 是热路径上每次市场查询都重复支付的一半预算，
+    // 14 依赖实测 IO 串行 ~11ms → 并行 ~2.5ms）；Promise.all 保序，输出仍按依赖键字典序。
+    const keys = Object.keys(deps).sort();
+    const classified = await Promise.all(keys.map((pkg) => classifyDep(root, pkg, deps[pkg], wantPatch)));
+    const items = [];
+    let others = 0;
+    for (const c of classified) {
+        if (c === 'unknown') {
+            // 依赖键不安全、目录无法解析、package.json 缺失/不可读/坏 JSON → 无法判断（不冒充非 DSH）
+            complete = false;
+        }
+        else if (c === 'other') {
+            others += 1;
+        }
+        else {
+            items.push(c.item);
+        }
     }
     return { items, others, complete, profileDir: root };
 }

package/lib/core/market.js

@@ -22,7 +22,7 @@ import { fetchCommunityCatalog as defaultFetchCommunityCatalog, } from './commun
 // 0.9.68（ADR-0016）：合并层迁入 merged-market.ts（communityOutcome/mergeRegistries/communitySummary/
 // deadlineRace/matchInstalledByEntry/isCommunityEntry/COMMUNITY_CATEGORY_LABELS）——market↔community
 // import 环自此断开；re-export 保既有消费方（tools.ts 的类型、profile-ops 的 matchInstalledByEntry）零改动。
-import { communityOutcome, communityTimeoutSummary, withFallbackLookups, deadlineRace, isCommunityEntry, matchInstalledByEntry, mergedOutcome, } from './merged-market.js';
+import { communityOutcome, communityTimeoutSummary, withFallbackLookups, deadlineRace, isCommunityEntry, matchInstalledByEntry, mergedOutcome, GITHUB_SPEC_RE, } from './merged-market.js';
 export { communityOutcome, matchInstalledByEntry } from './merged-market.js';
 import { normalizeSearchText, relevanceScore, tokenizeSearchText } from './search-relevance.js';
 import { GithubBudgetExhaustedError, createGithubRequestBudget, isExactVersion } from './versions.js';
@@ -229,9 +229,52 @@ function sortEntries(entries, sort) {
         return (aa < ab ? -1 : aa > ab ? 1 : 0) * dirMul || nameCmp(a, b);
     });
 }
+function buildInstalledIndex(installedItems) {
+    const byPkg = new Map();
+    const byName = new Map();
+    const byGithub = new Map();
+    installedItems.forEach((inst, ord) => {
+        const slot = { inst, ord };
+        if (!byPkg.has(inst.pkg))
+            byPkg.set(inst.pkg, slot);
+        if (!byName.has(inst.name))
+            byName.set(inst.name, slot);
+        if (inst.source === 'github') {
+            const m = GITHUB_SPEC_RE.exec(inst.spec);
+            if (m && !byGithub.has(m[1]))
+                byGithub.set(m[1], slot);
+        }
+    });
+    return { byPkg, byName, byGithub };
+}
+/** 三候选（byPkg[npm] / byName[npm] / byGithub[github]，truthiness 守卫与旧谓词一致）取 ord 最小者胜。 */
+function lookupInstalledByIndex(index, entry) {
+    const candidates = [];
+    if (entry.npm) {
+        const byPkg = index.byPkg.get(entry.npm);
+        if (byPkg)
+            candidates.push(byPkg);
+        const byName = index.byName.get(entry.npm);
+        if (byName)
+            candidates.push(byName);
+    }
+    if (entry.github) {
+        const byRepo = index.byGithub.get(entry.github);
+        if (byRepo)
+            candidates.push(byRepo);
+    }
+    if (candidates.length === 0)
+        return undefined;
+    let best = candidates[0];
+    for (let i = 1; i < candidates.length; i++) {
+        if (candidates[i].ord < best.ord)
+            best = candidates[i];
+    }
+    return best.inst;
+}
 /** 合并条目 → MarketItem：社区条目带 community 标记与旁路字段。 */
-function toMarketItem(entry, installedItems) {
-    const inst = matchInstalledByEntry(entry, installedItems);
+function toMarketItem(entry, installedIndex) {
+    const inst = lookupInstalledByIndex(installedIndex, entry);
     const item = { ...entry, installed: Boolean(inst), outdated: false };
     if (inst) {
         item.installedPkg = inst.pkg;
@@ -289,7 +332,7 @@ export async function listMarket(cfg = {}, opts = {}, deps = {}) {
     const signal = opts.signal;
     const remaining = () => deadlineAt - Date.now();
     const registryTask = d.loadRegistry(cfg, { namespace, signal, force: opts.force, deadlineMs, profile: opts.profile });
-    const installedTask = d.listInstalledPlugins(opts.profileDir).catch(() => null);
+    const installedTask = d.listInstalledPlugins(opts.profileDir, { patchRows: false }).catch(() => null);
     // 社区 flight 并发启动（source=primary 零调用；0.7.0 Task 7：primaryOnly 字段已删除）；共享 loader 不接收调用者 deadline——
     // listMarket 作为 waiter 在 communityOutcome 内 race 自己的剩余 deadline/signal（v10 契约）
     const communityTask = source === 'primary' ? null : d.fetchCommunityCatalog(cfg, { namespace, signal, force: opts.force, profile: opts.profile });
@@ -393,7 +436,9 @@ export async function listMarket(cfg = {}, opts = {}, deps = {}) {
     let offset = normalizeOffset(opts.offset);
     if (total > 0 && offset >= total)
         offset = Math.floor((total - 1) / limit) * limit;
-    const items = ordered.slice(offset, offset + limit).map((entry) => toMarketItem(entry, installedItems));
+    // 0.9.68（ADR-0016 决策 5 同款思路，FP5 2026-10-15）：已装索引每查询建一次，页内条目 O(1) 查表
+    const installedIndex = buildInstalledIndex(installedItems);
+    const items = ordered.slice(offset, offset + limit).map((entry) => toMarketItem(entry, installedIndex));
     let latestComplete = true;
     let latestTimedOut = false;
     if (withLatest && items.length > 0) {
@@ -494,6 +539,64 @@ export async function listMarket(cfg = {}, opts = {}, deps = {}) {
         community: community.summary,
     };
 }
+/**
+ * 批量 id 存在性（收藏 stale 检测专用，FP2）：一次装载 registry+社区、经物化合并市场（L2，
+ * 同身份与 listMarket 共享代）对 **merged 域**（主清单 + 存活社区条目，不含 displaced——与
+ * 今日 source:'all' 搜索域一致）建原始 id Set，按输入序过滤返回。
+ *
+ * 三不原则（与 listMarket 的接口差异，也是性能来源）：不枚举已装、不探测 latest、不分页。
+ *
+ * 语义对照（旧路径 = 逐收藏 `market {query:id, source:'all', limit:8, probeMode:'cache-only'}`
+ * + items.some(id)）：除一处自觉差异外逐点一致——**curatedFirst 挤出边界**：旧搜索页路径在
+ * primary 域同字段全词命中 ≥limit 条时会把 id-exact 的社区条目挤出前 8（误判 stale），本接口
+ * 的 Set 判定在该边界判 live（=「已从目录消失」的正确语义），属修复而非回归，勿改回搜索页行为。
+ *
+ * 失败语义：registry 装载 reject → 原样抛出（host-api 统一 500 → 客户端 catch 空 Set 全 stale，
+ * 与今日 market 同路径等价）；deadline 逃逸 → `{ present: [] }`（同今日超时空页 → 全 stale）；
+ * 社区 unavailable/disabled → merged=primary-only → 社区收藏判 stale（同今日）。
+ */
+export async function existingMarketIds(ids, cfg = {}, opts = {}, deps) {
+    const list = Array.isArray(ids) ? ids : [];
+    if (list.length === 0)
+        return { present: [] };
+    const d = {
+        loadRegistry: deps?.loadRegistry ?? defaultLoadRegistry,
+        fetchCommunityCatalog: deps?.fetchCommunityCatalog ?? defaultFetchCommunityCatalog,
+    };
+    const deadlineMs = typeof opts.deadlineMs === 'number' && Number.isFinite(opts.deadlineMs) && opts.deadlineMs > 0
+        ? opts.deadlineMs
+        : DEFAULT_DEADLINE_MS;
+    const deadlineAt = Date.now() + deadlineMs;
+    const namespace = opts.namespace ?? 'host';
+    const signal = opts.signal;
+    const registryTask = d.loadRegistry(cfg, { namespace, signal, force: opts.force, deadlineMs, profile: opts.profile });
+    const communityTask = d.fetchCommunityCatalog(cfg, { namespace, signal, force: opts.force, profile: opts.profile });
+    let loaded;
+    try {
+        loaded = await deadlineRace(registryTask, deadlineAt - Date.now());
+    }
+    catch (err) {
+        void communityTask.catch(() => undefined);
+        throw err;
+    }
+    if (loaded === 'deadline') {
+        void communityTask.catch(() => undefined);
+        return { present: [] };
+    }
+    const community = await mergedOutcome({
+        namespace,
+        profile: opts.profile ?? WEB_PROFILE,
+        cfg,
+        registry: loaded,
+        communityTask,
+        deadlineAt,
+    });
+    const knownIds = new Set(community.merged.map((entry) => entry.id));
+    const present = list
+        .map((id) => (typeof id === 'string' ? id.trim() : ''))
+        .filter((id) => id !== '' && knownIds.has(id));
+    return { present };
+}
 // ---------- 已装列表 ----------
 export async function listInstalledWithMeta(cfg = {}, opts = {}, deps = {}) {
     const d = { ...marketDeps(), ...deps };

package/lib/core/merged-market.js

@@ -54,7 +54,7 @@ export function matchInstalledByEntry(entry, installed) {
         if (entry.npm && it.name === entry.npm)
             return true;
         if (entry.github && it.source === 'github') {
-            const m = /^github:([^#]+)/.exec(it.spec);
+            const m = GITHUB_SPEC_RE.exec(it.spec);
             if (m && m[1] === entry.github)
                 return true;
         }
@@ -158,7 +158,8 @@ function buildMatchIndex(domain) {
     });
     return { byNpm, byGithub, byId };
 }
-const GITHUB_SPEC_RE = /^github:([^#]+)/;
+/** github spec 的 owner/repo 提取（matchInstalledByEntry 与 market.ts 已装索引共用单一事实源；2026-10-15 导出）。 */
+export const GITHUB_SPEC_RE = /^github:([^#]+)/;
 /** 三候选（npm[pkg] / npm[name] / github[spec]（仅 source==='github'））取域序最前者胜——与 matchInstalledByEntry 逐点等价。 */
 function lookupInIndex(index, installed) {
     const candidates = [];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-m",
-  "version": "0.9.86",
+  "version": "0.9.88",
   "description": "可自定义收录清单的 DSH 插件市场：收录、安装、卸载、升级一站完成，附 agent 工具与 dshm CLI。",
   "license": "MIT",
   "type": "module",