diff --git a/VCPDistributedServer/frontend-plugin-loader.js b/VCPDistributedServer/frontend-plugin-loader.js
index 4af8a625b..97199b7a9 100644
--- a/VCPDistributedServer/frontend-plugin-loader.js
+++ b/VCPDistributedServer/frontend-plugin-loader.js
@@ -3,10 +3,12 @@
 
     if (window.VCPFrontendPlugins?.loaderStarted) return;
 
-    const registry = new Map();
+    const registry = new Map();
+    const loadStates = new Map();
     const api = {
         loaderStarted: true,
-        registry,
+        registry,
+        getLoadState(id) { return loadStates.get(id); },
         register(id, instance) {
             if (!id || registry.has(id)) return false;
             registry.set(id, instance || {});
@@ -53,7 +55,9 @@
             const plugins = response?.success && Array.isArray(response.plugins) ? response.plugins : [];
             for (const plugin of plugins) {
                 loadStyle(plugin);
-                results.push(await loadScript(plugin));
+                const result = await loadScript(plugin);
+                loadStates.set(plugin.id, Object.freeze(result));
+                results.push(result);
             }
         } catch (error) {
             console.error('[FrontendPlugins] 无法读取已启用插件清单。', error);
diff --git a/docs/settings-plugins.md b/docs/settings-plugins.md
new file mode 100644
index 000000000..a271f01a0
--- /dev/null
+++ b/docs/settings-plugins.md
@@ -0,0 +1,37 @@
+# 设置 → 插件与工具
+
+主聊天的插件入口打开此设置分区，沿用现有设置壳和 DSH 控件样式。
+
+## 功能
+
+- 界面插件：搜索、启停及 Manifest 配置表单；显示加载器的真实加载结果。
+- 本机工具：搜索、启停及配置；运行状态取自本机插件与服务模块，节点连接在工具栏集中显示。
+- 后端插件：使用当前 VCPToolBox 管理端账号连接，读取注册清单并通过已有管理 API 启停和保存配置。分布式条目只读。
+
+正常卡片省略重复状态标记，由开关表示启停。异常、未加载、状态未知、待重启、只读仍有短标记；完整运行事实可在详情和无障碍描述中读取。后端“已注册”只表示注册，不证明一次工具调用健康或浏览器已连接。
+
+## 配置行为
+
+本机启停与配置在重启 VCPChat 后生效，不打断当前聊天。后端由现有管理 API 重新加载插件。布尔/枚举使用共享选择器；数字遵守类型和范围；密钥遮挡，多行内容保留换行。
+
+已有 `plugin-config.json` 时编辑该 JSON 文件，否则使用 `config.env`。未知键和注释保留。Manifest 与原始配置位于“高级配置”；后端 Manifest 只读。本机 Manifest 不能改变插件标识或分类。
+
+插件配置独立显式保存，不进入全局设置自动保存。切换分类、搜索、刷新及本次应用会话内关闭重开设置保留草稿。保存与启停校验 revision，阻止覆盖其他窗口的修改；后端 revision 同时绑定服务器 origin。干净表单刷新读取最新配置，“放弃更改”读取成功后才替换草稿。插件移除时保留草稿供复制，并阻止保存。
+
+## 接口与边界
+
+插件 IPC 只接受应用真实主窗口顶层 frame。插件目录和配置拒绝越界路径、目录链接与符号链接，支持正常 Unicode 文件夹。
+
+后端凭据只保留在主进程应用会话，导航、关闭、断开及服务器 origin 改变时清除；请求禁止跳转，超时 12 秒。管理地址采用服务器 origin 的根路径，尚不支持额外反向代理路径前缀。聊天 API key 不能代替管理端账号密码。
+
+复用现有 UIUX 按钮、开关、门户选择器和生命周期所有者；样式通过 `settings.css` 导入，不修改生成的 UIUX 文件。DSH 样式参考固定源码 `639ed015`：正常启用项不显示状态标记、空描述不占位、线形展开箭头、36px/12px 按钮、36×20px 开关及明暗主题语义色。未做完整 DSH 应用像素 A/B。
+
+## 验证
+
+```powershell
+npm run test:settings-plugins
+node --test tests/settings-schema-render.test.mjs tests/global-settings-save.test.mjs tests/settings-autosave-coordinator.test.mjs tests/preload-registry.test.js tests/frontend-plugins.test.js tests/uiux-settings-bridge-modules.test.mjs tests/uiux-settings-css-parts.test.mjs tests/uiux-primitives.test.mjs
+npm run check:ui-system
+```
+
+真实 Electron 验证使用隔离插件实际改清单、写配置、制造外部修改冲突并恢复草稿，结束后清理。真实 VCPToolBox 验证管理端登录与清单读取；后端写操作通过匹配现有 API 的模拟服务验证，未停用真实后端插件。检查明暗主题、窄窗口、键盘展开、选择器、搜索和主聊天插件入口。
diff --git a/main.html b/main.html
index a8aeed3ef..477bf983d 100755
--- a/main.html
+++ b/main.html
@@ -723,7 +723,7 @@ <h2 class="vcp-settings-source-title">全局设置</h2>
 
                 <div class="vcp-settings-source-layout">
                     <!-- 左侧导航菜单 -->
-                    <nav class="vcp-settings-source-nav" data-settings-sections='[{"value":"user-identity","label":"用户身份"},{"value":"server-connection","label":"服务器连接"},{"value":"jev-service","label":"Jev 服务"},{"value":"appearance-settings","label":"界面与外观"},{"value":"render-settings","label":"消息渲染"},{"value":"selection-assistant","label":"划词助手"},{"value":"voice-settings","label":"语音设置"},{"value":"advanced-features","label":"高级功能"},{"value":"workspace-management","label":"工作区管理"},{"value":"quick-actions","label":"快捷操作"}]'>
+                    <nav class="vcp-settings-source-nav" data-settings-sections='[{"value":"user-identity","label":"用户身份"},{"value":"server-connection","label":"服务器连接"},{"value":"jev-service","label":"Jev 服务"},{"value":"appearance-settings","label":"界面与外观"},{"value":"plugins-tools","label":"插件与工具"},{"value":"render-settings","label":"消息渲染"},{"value":"selection-assistant","label":"划词助手"},{"value":"voice-settings","label":"语音设置"},{"value":"advanced-features","label":"高级功能"},{"value":"workspace-management","label":"工作区管理"},{"value":"quick-actions","label":"快捷操作"}]'>
                         <template class="vcp-settings-source-list">
                             <li class="vcp-settings-source-item active" data-section="user-identity">
                                 <svg class="settings-nav-icon" viewBox="0 0 24 24" fill="none" stroke="currentColor"
@@ -829,6 +829,7 @@ <h2 class="vcp-settings-source-title">全局设置</h2>
                             <div class="settings-section" id="section-server-connection" data-settings-section-key="server-connection"></div>
                             <div class="settings-section" id="section-jev-service" data-settings-section-key="jev-service"></div>
                             <div class="settings-section" id="section-appearance-settings" data-settings-section-key="appearance-settings"></div>
+                            <div class="settings-section" id="section-plugins-tools" data-settings-section-key="plugins-tools"></div>
                             <div class="settings-section" id="section-render-settings" data-settings-section-key="render-settings"></div>
                             <div class="settings-section" id="section-selection-assistant" data-settings-section-key="selection-assistant"></div>
                             <div class="settings-section" id="section-voice-settings" data-settings-section-key="voice-settings"></div>
diff --git a/main.js b/main.js
index ca1145e40..4306097b5 100644
--- a/main.js
+++ b/main.js
@@ -1619,8 +1619,20 @@ if (!gotTheLock) {
             mainWindow,
             openChildWindows,
             settingsManager: appSettingsManager,
-            APP_DATA_ROOT_IN_PROJECT,
-        });
+            APP_DATA_ROOT_IN_PROJECT,
+        });
+        require('./modules/ipc/pluginSettingsHandlers').initialize({
+            mainWindow,
+            settingsManager: appSettingsManager,
+            getRuntime: () => {
+                const manager = require('./VCPDistributedServer/Plugin');
+                return {
+                    plugins: distributedServer ? manager.plugins : new Map(),
+                    services: distributedServer ? manager.serviceModules : new Map(),
+                    connected: distributedServer?.ws?.readyState === 1,
+                };
+            },
+        });
         await embeddedAppSessions?.closeAll();
         embeddedAppTasks?.dispose('main-window-reinitialized');
         embeddedAppTasks = new SenderTaskRegistry({ label: 'embedded-app-tasks' });
diff --git a/modules/ipc/applicationSender.js b/modules/ipc/applicationSender.js
new file mode 100644
index 000000000..bef8eea0f
--- /dev/null
+++ b/modules/ipc/applicationSender.js
@@ -0,0 +1,35 @@
+'use strict';
+
+const path = require('node:path');
+const { fileURLToPath } = require('node:url');
+const PROJECT_ROOT = path.resolve(__dirname, '../..');
+
+function isApplicationPageUrl(raw, pages = ['main.html'], projectRoot = PROJECT_ROOT) {
+    try {
+        const url = new URL(raw);
+        if (url.protocol !== 'file:') return false;
+        const normalize = p => process.platform === 'win32' ? path.resolve(p).toLowerCase() : path.resolve(p);
+        const actual = normalize(fileURLToPath(url));
+        return pages.some(page => actual === normalize(path.join(projectRoot, page)));
+    } catch { return false; }
+}
+
+function createApplicationSenderGuard({ pages = ['main.html'], projectRoot = PROJECT_ROOT, getWebContents = null, getMainWebContents = null } = {}) {
+    return event => {
+        try {
+            const sender = event?.sender;
+            const frame = event?.senderFrame;
+            // 文件名后缀和 frame 自报 URL 都不能证明权限：必须是应用页面的真实顶层窗口。
+            if (!sender || sender.isDestroyed() || !frame || frame !== sender.mainFrame || frame.detached) return false;
+            if (sender.getType() !== 'window') return false;
+            if (getWebContents && sender !== getWebContents()) return false;
+            if (getMainWebContents && isApplicationPageUrl(frame.url, ['main.html'], projectRoot)) {
+                const main = getMainWebContents();
+                if (main && sender !== main) return false;
+            }
+            return isApplicationPageUrl(frame.url, pages, projectRoot) && isApplicationPageUrl(sender.getURL(), pages, projectRoot);
+        } catch { return false; }
+    };
+}
+
+module.exports = { isApplicationPageUrl, createApplicationSenderGuard };
diff --git a/modules/ipc/pluginSettingsHandlers.js b/modules/ipc/pluginSettingsHandlers.js
new file mode 100644
index 000000000..c16910c3c
--- /dev/null
+++ b/modules/ipc/pluginSettingsHandlers.js
@@ -0,0 +1,24 @@
+'use strict';
+const path = require('node:path');
+const { ipcMain } = require('electron');
+const { createApplicationSenderGuard } = require('./applicationSender');
+const { createPluginSettingsService } = require('../services/pluginSettingsService');
+
+function initialize({ mainWindow, settingsManager, getRuntime }) {
+    const allowed = createApplicationSenderGuard({ getMainWebContents: () => mainWindow?.webContents });
+    const service = createPluginSettingsService({ root: path.resolve(__dirname, '../..'), readSettings: () => settingsManager.readSettings(), getRuntime });
+    const handler = fn => async (event, data) => {
+        if (!allowed(event)) return { success: false, error: '此页面无权管理插件' };
+        try { return { success: true, data: await fn(data || {}) }; }
+        catch (error) { return { success: false, error: error.message.includes('fetch') ? '无法连接 VCPToolBox 管理端，请检查服务器连接' : error.message }; }
+    };
+    ipcMain.handle('plugin-settings:list', handler(data => service.list(data.category)));
+    ipcMain.handle('plugin-settings:detail', handler(data => service.detail(data.category, data.id)));
+    ipcMain.handle('plugin-settings:toggle', handler(data => service.toggle(data)));
+    ipcMain.handle('plugin-settings:save', handler(data => service.save(data)));
+    ipcMain.handle('plugin-settings:connect', handler(data => service.connect(data)));
+    ipcMain.handle('plugin-settings:disconnect', handler(() => service.disconnect()));
+    mainWindow?.webContents?.on('did-start-navigation', (_event, _url, _inPlace, isMainFrame) => { if (isMainFrame) service.disconnect(); });
+    mainWindow?.once('closed', () => service.disconnect());
+}
+module.exports = { initialize };
diff --git a/modules/services/pluginSettingsService.js b/modules/services/pluginSettingsService.js
new file mode 100644
index 000000000..bc4cf8597
--- /dev/null
+++ b/modules/services/pluginSettingsService.js
@@ -0,0 +1,184 @@
+'use strict';
+
+const fs = require('node:fs/promises');
+const path = require('node:path');
+const crypto = require('node:crypto');
+const dotenv = require('dotenv');
+const MANIFEST = 'plugin-manifest.json';
+const digest = value => crypto.createHash('sha256').update(value).digest('hex');
+const canonical = manifest => JSON.stringify(Object.fromEntries(Object.entries(manifest || {}).filter(([key]) => !['basePath', 'pluginSpecificEnvConfig', 'isDistributed', 'serverId'].includes(key))));
+const publicManifest = manifest => ({ name: manifest.name, displayName: manifest.displayName, description: manifest.description, version: manifest.version, pluginType: manifest.pluginType });
+
+// Settings owns configuration; the running loaders remain authoritative for runtime state.
+function createPluginSettingsService({ root, readSettings, getRuntime = () => ({}), fetchImpl = global.fetch }) {
+    const pluginRoot = path.join(root, 'VCPDistributedServer', 'Plugin');
+    let backendSession = null;
+    const queues = new Map();
+    const pending = new Map();
+    async function serial(key, run) {
+        const previous = queues.get(key) || Promise.resolve();
+        const task = previous.catch(() => {}).then(run);
+        queues.set(key, task);
+        try { return await task; } finally { if (queues.get(key) === task) queues.delete(key); }
+    }
+    async function directory(id) {
+        if (typeof id !== 'string' || !/^[^<>:"/\\|?*\x00-\x1f]+$/.test(id) || ['.', '..'].includes(id) || id.trim() !== id) throw new Error('无效的插件标识');
+        const resolvedRoot = await fs.realpath(pluginRoot);
+        const folder = await fs.realpath(path.join(pluginRoot, id));
+        if (path.dirname(folder) !== resolvedRoot) throw new Error('插件目录不能指向外部路径');
+        return folder;
+    }
+    async function readFileSafe(folder, name, optional = false) {
+        const target = path.join(folder, name);
+        try {
+            const stat = await fs.lstat(target);
+            if (!stat.isFile() || stat.isSymbolicLink()) throw new Error('插件配置必须是普通文件');
+            if (stat.size > 1024 * 1024) throw new Error('插件配置超过 1 MB');
+            return await fs.readFile(target, 'utf8');
+        } catch (error) { if (optional && error.code === 'ENOENT') return null; throw error; }
+    }
+    async function local(id) {
+        const folder = await directory(id);
+        let enabled = true;
+        let rawManifest;
+        try { rawManifest = await readFileSafe(folder, MANIFEST); }
+        catch (error) {
+            if (error.code !== 'ENOENT') throw error;
+            enabled = false;
+            rawManifest = await readFileSafe(folder, MANIFEST + '.block');
+        }
+        const jsonConfig = await readFileSafe(folder, 'plugin-config.json', true);
+        const configFormat = jsonConfig !== null ? 'json' : 'env';
+        const config = jsonConfig !== null ? jsonConfig : (await readFileSafe(folder, 'config.env', true)) || '';
+        let manifest = {}, error = '';
+        try {
+            manifest = JSON.parse(rawManifest);
+            if (!manifest || typeof manifest !== 'object' || Array.isArray(manifest)) throw new Error();
+        } catch { manifest = {}; error = 'Manifest 必须是有效的 JSON 对象'; }
+        const category = manifest.pluginType === 'renderer' ? 'renderer' : 'local';
+        const runtime = getRuntime();
+        const loaded = runtime.plugins?.get(manifest.name);
+        const loadedHere = loaded && path.resolve(loaded.basePath || '') === path.resolve(folder);
+        const changed = loadedHere && (canonical(loaded) !== canonical(manifest) || (configFormat === 'env' && JSON.stringify(loaded.pluginSpecificEnvConfig || {}) !== JSON.stringify(dotenv.parse(config))));
+        const serviceFailed = loadedHere && ['service', 'hybridservice'].includes(manifest.pluginType) && manifest.communication?.protocol === 'direct' && !runtime.services?.has(manifest.name);
+        const revision = digest(String(enabled) + '\0' + rawManifest + '\0' + config);
+        return { id, category, enabled, manifest, rawManifest, config, configFormat, revision, error,
+            runtime: category === 'renderer' ? 'renderer' : serviceFailed ? 'error' : changed || (loadedHere && !enabled) ? 'restart' : loadedHere ? 'loaded' : 'unloaded',
+            connected: Boolean(runtime.connected), pendingRestart: pending.has(id) && pending.get(id) !== revision };
+    }
+    function summary(item) {
+        return { id: item.id, category: item.category, enabled: item.enabled, revision: item.revision, ...publicManifest(item.manifest), error: item.error,
+            runtime: item.runtime, connected: item.connected, pendingRestart: item.pendingRestart, readOnly: Boolean(item.readOnly) };
+    }
+    async function endpoint() {
+        const settings = await readSettings();
+        const url = new URL(settings.vcpServerUrl || settings.vcpLogUrl);
+        if (!['http:', 'https:'].includes(url.protocol) || url.username || url.password) throw new Error('请先设置有效的 VCPToolBox 服务器地址');
+        // Admin API is mounted at the server root, independently of /v1/chat/completions.
+        return url.origin;
+    }
+    async function backendRequest(route, body, session = backendSession) {
+        const origin = await endpoint();
+        if (!session || session.origin !== origin) { backendSession = null; throw new Error('请登录当前 VCPToolBox 管理端'); }
+        const response = await fetchImpl(origin + '/admin_api' + route, {
+            method: body ? 'POST' : 'GET', redirect: 'error', signal: AbortSignal.timeout(12000),
+            headers: { Authorization: 'Basic ' + session.auth, 'Content-Type': 'application/json' },
+            ...(body ? { body: JSON.stringify(body) } : {})
+        });
+        if (!response.ok) {
+            if ([401, 403].includes(response.status)) { backendSession = null; throw new Error('管理端登录失效，请检查账号和密码'); }
+            throw new Error(`VCPToolBox 管理接口返回 ${response.status}`);
+        }
+        return response.json();
+    }
+    async function backendItems() {
+        const origin = await endpoint();
+        const response = await backendRequest('/plugins');
+        if (!Array.isArray(response)) throw new Error('管理端插件清单格式无效');
+        return response.map(p => ({ id: p.name, category: 'backend', enabled: Boolean(p.enabled), manifest: p.manifest || {},
+            runtime: p.enabled ? 'registered' : 'disabled', readOnly: Boolean(p.isDistributed), config: p.configEnvContent || '',
+            revision: digest(origin + '\0' + String(Boolean(p.enabled)) + '\0' + JSON.stringify(p.manifest || {}) + '\0' + (p.configEnvContent || '')), error: '' }));
+    }
+    async function detail(category, id) {
+        if (!['renderer', 'local', 'backend'].includes(category)) throw new Error('无效的插件分类');
+        const item = category === 'backend' ? (await backendItems()).find(p => p.id === id) : await local(id);
+        if (!item || item.category !== category) throw new Error('找不到此分类的插件');
+        return { ...summary(item), revision: item.revision, config: item.config, configFormat: item.configFormat || 'env', configSchema: item.manifest.configSchema || {},
+            rawManifest: item.rawManifest || JSON.stringify(Object.fromEntries(Object.entries(item.manifest).filter(([key]) => !['pluginSpecificEnvConfig', 'basePath'].includes(key))), null, 2) };
+    }
+    return {
+        async list(category) {
+            if (category === 'backend') return (await backendItems()).map(summary);
+            if (!['renderer', 'local'].includes(category)) throw new Error('无效的插件分类');
+            const items = [];
+            for (const entry of await fs.readdir(pluginRoot, { withFileTypes: true })) {
+                if (!entry.isDirectory()) continue;
+                try { const item = await local(entry.name); if (item.category === category) items.push(summary(item)); }
+                catch (error) { if (error.code !== 'ENOENT') items.push({ id: entry.name, category, displayName: entry.name, enabled: false, error: error.message, runtime: 'error', readOnly: true }); }
+            }
+            return items.sort((a, b) => (a.displayName || a.id).localeCompare(b.displayName || b.id, 'zh-CN'));
+        },
+        detail,
+        async connect({ username, password }) {
+            if (typeof username !== 'string' || !username || typeof password !== 'string' || !password || username.includes(':')) throw new Error('请输入管理端账号和密码');
+            backendSession = null;
+            const session = { origin: await endpoint(), auth: Buffer.from(username + ':' + password).toString('base64') };
+            await backendRequest('/plugins', null, session);
+            backendSession = session;
+            return { connected: true };
+        },
+        disconnect() { backendSession = null; },
+        toggle({ category, id, enabled, revision }) {
+            return serial(category === 'backend' ? 'backend' : id, async () => {
+                if (typeof enabled !== 'boolean') throw new Error('启停值必须是布尔类型');
+                const item = await detail(category, id);
+                if (revision !== undefined && revision !== item.revision) throw new Error('插件配置已被其他窗口修改，请刷新后重试');
+                if (item.readOnly || item.error) throw new Error('此插件由其他节点管理或清单无效');
+                if (category === 'backend') await backendRequest('/plugins/' + encodeURIComponent(id) + '/toggle', { enable: enabled });
+                else if (item.enabled !== enabled) {
+                    const folder = await directory(id);
+                    const source = path.join(folder, MANIFEST + (enabled ? '.block' : ''));
+                    const target = path.join(folder, MANIFEST + (enabled ? '' : '.block'));
+                    try { await fs.lstat(target); throw new Error('启用和禁用清单同时存在，请先在高级入口检查'); }
+                    catch (error) { if (error.code !== 'ENOENT') throw error; }
+                    await fs.rename(source, target);
+                    if (!pending.has(id)) pending.set(id, item.revision);
+                }
+                return { requiresRestart: category !== 'backend' && (await local(id)).pendingRestart };
+            });
+        },
+        save({ category, id, revision, config, rawManifest }) {
+            return serial(category === 'backend' ? 'backend' : id, async () => {
+                const item = await detail(category, id);
+                if (item.readOnly) throw new Error('分布式插件请在所属本机节点配置');
+                if (revision !== item.revision) throw new Error('插件配置已被其他窗口修改，请刷新后重试');
+                if (typeof config !== 'string' || Buffer.byteLength(config) > 1024 * 1024) throw new Error('配置内容无效或超过 1 MB');
+                if (category === 'backend') {
+                    if (rawManifest !== undefined) throw new Error('后端管理接口不支持直接编辑 Manifest');
+                    await backendRequest('/plugins/' + encodeURIComponent(id) + '/config', { content: config });
+                } else {
+                    const folder = await directory(id);
+                    if (item.configFormat === 'json') {
+                        try { const parsed = JSON.parse(config); if (!parsed || typeof parsed !== 'object' || Array.isArray(parsed)) throw new Error(); }
+                        catch { throw new Error('plugin-config.json 必须是有效的 JSON 对象'); }
+                    }
+                    if (rawManifest !== undefined && rawManifest !== item.rawManifest) {
+                        if (typeof rawManifest !== 'string' || Buffer.byteLength(rawManifest) > 1024 * 1024) throw new Error('Manifest 内容无效');
+                        let manifest;
+                        try { manifest = JSON.parse(rawManifest); } catch { throw new Error('Manifest JSON 无效'); }
+                        if (!manifest || typeof manifest !== 'object' || Array.isArray(manifest) || typeof manifest.name !== 'string' || !manifest.name || typeof manifest.pluginType !== 'string' || !manifest.pluginType) throw new Error('Manifest 缺少有效的 name 或 pluginType');
+                        let previousName = id;
+                        try { previousName = JSON.parse(item.rawManifest).name || id; } catch { /* repair an invalid manifest without changing its folder identity */ }
+                        if (manifest.name !== previousName || (manifest.pluginType === 'renderer') !== (category === 'renderer')) throw new Error('此入口不能更改插件标识或分类');
+                        await fs.writeFile(path.join(folder, MANIFEST + (item.enabled ? '' : '.block')), rawManifest, 'utf8');
+                    }
+                    await fs.writeFile(path.join(folder, item.configFormat === 'json' ? 'plugin-config.json' : 'config.env'), config, 'utf8');
+                    if (!pending.has(id)) pending.set(id, item.revision);
+                }
+                return { requiresRestart: category !== 'backend' && (await local(id)).pendingRestart };
+            });
+        }
+    };
+}
+
+module.exports = { createPluginSettingsService };
diff --git a/modules/settings/schema-surface.js b/modules/settings/schema-surface.js
index 27dcad0f8..9212c54f8 100644
--- a/modules/settings/schema-surface.js
+++ b/modules/settings/schema-surface.js
@@ -18,6 +18,7 @@ import { voiceSettingsSection } from './schema/voice-settings.js';
 import { advancedFeaturesSection } from './schema/advanced-features.js';
 import { workspaceManagementSection } from './schema/workspace-management.js';
 import { appearanceSettingsSection } from './schema/appearance-settings.js';
+import { pluginsToolsSection } from './schema/plugins-tools.js';
 import { renderSchemaSection } from './render/field-renderer.js';
 
 // 已迁移到 schema 渲染的分区清单；M3（界面与外观）已收齐全部分区。
@@ -26,6 +27,7 @@ const SCHEMA_SECTIONS = Object.freeze([
     serverConnectionSection,
     jevServiceSection,
     appearanceSettingsSection,
+    pluginsToolsSection,
     renderSettingsSection,
     selectionAssistantSection,
     voiceSettingsSection,
diff --git a/modules/settings/schema/plugins-tools.js b/modules/settings/schema/plugins-tools.js
new file mode 100644
index 000000000..33882048d
--- /dev/null
+++ b/modules/settings/schema/plugins-tools.js
@@ -0,0 +1,7 @@
+import { section, custom } from './kernel.js';
+export const pluginsToolsSection = section('plugins-tools', '插件与工具', [custom('pluginsTools', doc => {
+    const host = doc.createElement('div');
+    host.className = 'plugins-settings';
+    host.dataset.vcpPluginSettings = 'true';
+    return host;
+})]);
diff --git a/modules/trayManager.js b/modules/trayManager.js
index 8d0472d0e..3b42beb45 100644
--- a/modules/trayManager.js
+++ b/modules/trayManager.js
@@ -174,7 +174,9 @@ const trayManager = (function () {
         // 动态获取最新的 API 引用
         const currentApi = window.chatAPI || window.electronAPI;
 
-        if (app.action === 'open-loom-manager' && currentApi?.loomOpenManager) {
+        if (app.action === 'open-plugin-manager-window' && window.VCPUISettingsBridge?.openSection) {
+            window.VCPUISettingsBridge.openSection('plugins-tools');
+        } else if (app.action === 'open-loom-manager' && currentApi?.loomOpenManager) {
             try {
                 const result = await currentApi.loomOpenManager();
                 if (!result?.success) {
diff --git a/modules/ui-system/next-shell/next-shell-controller.js b/modules/ui-system/next-shell/next-shell-controller.js
index ceb305ae0..ecf58cf6c 100644
--- a/modules/ui-system/next-shell/next-shell-controller.js
+++ b/modules/ui-system/next-shell/next-shell-controller.js
@@ -311,6 +311,10 @@
 
     async function openEmbeddedAppInternal(app) {
         if (!mounted) return;
+        if (app.action === 'open-plugin-manager-window' && window.VCPUISettingsBridge?.openSection) {
+            window.VCPUISettingsBridge.openSection('plugins-tools');
+            return;
+        }
         const generation = mountGeneration;
         if (!embeddedAppController?.supported) {
             await window.trayManager?.launchApp(app);
diff --git a/modules/ui-system/settings-bridge.js b/modules/ui-system/settings-bridge.js
index f6d400b4e..c3eb19af9 100644
--- a/modules/ui-system/settings-bridge.js
+++ b/modules/ui-system/settings-bridge.js
@@ -25,6 +25,7 @@ import { mountGlobalLanguageRows } from './settings/global-language-rows.js';
 import { mountGlobalChoices, mountGlobalSteppers, mountVoiceShortcutInput, mountGlobalTextInputs } from './settings/global-input-upgrades.js';
 import { mountForumCredentialInputs } from './settings/forum-controls.js';
 import { applySchemaSurface } from '../settings/schema-surface.js';
+import { mountPluginsSettings } from './settings/plugins-settings.js';
 import { renderAgentSettingsSurface } from '../settings/schema/sidebar-surfaces.js';
 import { ensureSettingsSidebarSurface } from './settings/settings-sidebar-surface.js';
 import { mountSettingsSidebarForm } from './settings/settings-sidebar-runtime.js';
@@ -218,6 +219,7 @@ const GLOBAL_CATEGORY_ICONS = Object.freeze({
     'server-connection': 'server',
     'jev-service': 'brain-circuit',
     'appearance-settings': 'palette',
+    'plugins-tools': 'puzzle',
     'render-settings': 'activity',
     'selection-assistant': 'mouse-pointer-click',
     'voice-settings': 'mic',
@@ -339,6 +341,7 @@ function enhanceGlobalSettings(root, form) {
                 if (field.querySelector('input:not([type="hidden"]), select, textarea')) enhance('Field', field);
             }),
         },
+        { name: 'plugins-settings', run: () => mountPluginsSettings(form.querySelector('[data-vcp-plugin-settings]'), { scope: scope() }) },
         { name: 'settings-shell', run: () => mountSettingsShell(root) },
         { name: 'autosave', run: () => mountSettingsAutosave(root, form, scope()) },
         { name: 'typed-field-owner', run: () => mountTypedFieldOwner(root, form) },
@@ -792,8 +795,10 @@ function mountSettingsShell(root) {
             state.sectionHost.append(next);
         }
         renderList();
+        next?.dispatchEvent(new CustomEvent('vcp-settings-section-activated'));
     };
 
+    listenSearch(root, 'vcp-settings-open-section', event => activateSection(event.detail?.key), 'settings-open-section');
     renderList();
 }
 
@@ -948,6 +953,15 @@ if (bridgeScope) {
 scheduleRefresh();
 
 window.VCPUISettingsBridge = Object.freeze({
+    openSection(key) {
+        if (isPresentationDestroyed()) return false;
+        window.uiHelperFunctions?.openModal?.('globalSettingsModal');
+        refresh();
+        const root = document.getElementById('globalSettingsModal');
+        if (!root) return false;
+        root.dispatchEvent(new CustomEvent('vcp-settings-open-section', { detail: { key } }));
+        return true;
+    },
     refresh: scheduleRefresh,
     flush: flushSettingsAutosave,
     getSnapshot() {
diff --git a/modules/ui-system/settings/autosave.js b/modules/ui-system/settings/autosave.js
index 3b5b0d528..3dfa9d958 100644
--- a/modules/ui-system/settings/autosave.js
+++ b/modules/ui-system/settings/autosave.js
@@ -131,6 +131,7 @@ export function mountSettingsAutosave(root, form, scope = null, options = {}) {
     state.schedule = schedule;
     state.setStatus = setStatus;
     const onInput = event => {
+        if (event.target?.closest?.('[data-vcp-plugin-settings]')) return;
         if (!event.target?.matches?.('input, select, textarea')) return;
         // The native file-input change fires before the avatar cropper has
         // produced the File consumed by handleSaveGlobalSettings. Ignore that
diff --git a/modules/ui-system/settings/global-input-upgrades.js b/modules/ui-system/settings/global-input-upgrades.js
index 68e964bb7..23f51df95 100644
--- a/modules/ui-system/settings/global-input-upgrades.js
+++ b/modules/ui-system/settings/global-input-upgrades.js
@@ -44,6 +44,7 @@ export function mountVoiceShortcutInput(form, api, scope) {
 export function mountGlobalTextInputs(form, api, scope) {
     if (!form || !scope || !api?.mountInput) return;
     form.querySelectorAll('input[type="text"], input:not([type])').forEach(input => {
+        if (input.closest('[data-vcp-plugin-settings]')) return;
         if (input.dataset.vcpTypedPrimitiveMounted === 'true' || input.closest('.vcp-uiux-input-wrap')) return;
         if (input.type === 'file' || input.dataset.vcpTypedFieldOwner === 'true' || input.closest('.model-input-container') || input.closest('.vcp-color-single-pill')) return;
         try {
diff --git a/modules/ui-system/settings/marker-registry.js b/modules/ui-system/settings/marker-registry.js
index df804e805..e5a39b0ca 100644
--- a/modules/ui-system/settings/marker-registry.js
+++ b/modules/ui-system/settings/marker-registry.js
@@ -87,6 +87,10 @@ const MARKERS = Object.freeze({
     vcpKeepOpenAfterSave: { owner: 'settings/autosave.js + global-settings-manager.js', cleanup: 'business-contract' },
     globalSettingsSaving: { owner: 'settings/autosave.js', cleanup: 'business-contract' },
     vcpAutosaveMounted: { owner: 'settings/autosave.js', cleanup: 'manual-retract' },
+    tone: { owner: 'settings/plugins-settings.js status projection', cleanup: 'scope-owned' },
+    pluginId: { owner: 'settings/plugins-settings.js inventory card', cleanup: 'scope-owned' },
+    configKey: { owner: 'settings/plugins-settings.js config form', cleanup: 'scope-owned' },
+    vcpPluginSettings: { owner: 'schema/plugins-tools.js independent save boundary', cleanup: 'persistent' },
     vcpSettingsConflictActions: { owner: 'settings-bridge.js conflict action bar', cleanup: 'scope-owned' },
     vcpSettingsConflict: { owner: 'typed-field-owners.js external reconciliation', cleanup: 'business-contract' },
 
diff --git a/modules/ui-system/settings/plugins-settings-model.js b/modules/ui-system/settings/plugins-settings-model.js
new file mode 100644
index 000000000..411209bf8
--- /dev/null
+++ b/modules/ui-system/settings/plugins-settings-model.js
@@ -0,0 +1,60 @@
+// Small browser-safe config.env editor: preserve comments and unknown keys.
+export function envEntries(content) {
+    const entries = [];
+    const pattern = /^(?:[ \t]*export[ \t]+)?[ \t]*([A-Za-z_][\w]*)[ \t]*=[ \t]*("(?:\\.|[^"\\])*"|'[^']*'|`[^`]*`|[^\r\n]*)/gm;
+    let match;
+    while ((match = pattern.exec(content))) {
+        const raw = match[2].trim();
+        const quoted = ['"', "'", '`'].includes(raw[0]);
+        let value = quoted ? raw.slice(1, -1) : raw.split('#')[0].trim();
+        if (raw[0] === '"') value = value.replace(/\\n/g, '\n').replace(/\\r/g, '\r');
+        const end = !quoted && match[2].includes('#')
+            ? pattern.lastIndex - match[2].length + match[2].split('#')[0].trimEnd().length
+            : pattern.lastIndex;
+        entries.push({ key: match[1], value, start: match.index, end });
+    }
+    return entries;
+}
+export function setEnvValue(content, key, value) {
+    if (!/^[A-Za-z_][\w]*$/.test(key)) throw new Error('无效的配置项名称');
+    const text = String(value);
+    const quote = !text.includes("'") ? "'" : !text.includes('`') ? '`' : !text.includes('"') && !/\\[nr]/.test(text) ? '"' : '';
+    if (value !== '' && !quote) throw new Error('此值包含复杂引号，请在高级配置中编辑');
+    const line = value === '' ? '' : `${key}=${quote}${text}${quote}`;
+    const existing = envEntries(content).filter(entry => entry.key === key);
+    if (!existing.length) return line ? content + (content && !content.endsWith('\n') ? '\n' : '') + line + '\n' : content;
+    let result = content;
+    for (let i = existing.length - 1; i >= 0; i--) {
+        const entry = existing[i];
+        result = result.slice(0, entry.start) + (i === 0 ? line : '') + result.slice(entry.end);
+    }
+    return result;
+}
+export function runtimeLabel(item, frontend = globalThis.window?.VCPFrontendPlugins) {
+    if (item.error) return { text: '加载异常', tone: 'error' };
+    if (item.category === 'renderer') {
+        const loaded = frontend?.getLoadState?.(item.name);
+        if (item.pendingRestart || (loaded?.loaded && !item.enabled)) return { text: '重启后生效', tone: 'pending' };
+        if (!item.enabled) return { text: '已停用', tone: 'neutral' };
+        if (loaded?.loaded === false) return { text: '加载失败', tone: 'error' };
+        if (loaded?.loaded) return { text: '已加载', tone: 'ready' };
+        return { text: item.enabled ? '未报告加载状态' : '已停用', tone: 'neutral' };
+    }
+    if (item.pendingRestart || item.runtime === 'restart') return { text: '重启后生效', tone: 'pending' };
+    if (item.runtime === 'error') return { text: '服务模块加载失败', tone: 'error' };
+    if (!item.enabled) return { text: '已停用', tone: 'neutral' };
+    if (item.category === 'backend') return { text: '后端已注册', tone: 'ready' };
+    if (item.runtime === 'loaded') return { text: item.connected ? '已加载 · 节点已连接' : '已加载 · 节点未连接', tone: item.connected ? 'ready' : 'pending' };
+    return { text: '本机服务未加载', tone: 'neutral' };
+}
+// Settled enabled rows need no marker (DSH inventory StateTag/PHASE_DOT_STATES).
+// Transport is shared by local tools and belongs to their panel, not each card.
+export function runtimeBadge(item, frontend) {
+    const state = runtimeLabel(item, frontend);
+    if (state.tone === 'error') return { text: '加载异常', tone: 'error' };
+    if (state.text === '重启后生效') return { text: '待重启', tone: 'pending' };
+    if (item.enabled && state.text === '未报告加载状态') return { text: '状态未知', tone: 'neutral' };
+    if (item.enabled && state.text === '本机服务未加载') return { text: '未加载', tone: 'pending' };
+    return { text: item.readOnly ? '只读' : '', tone: 'neutral' };
+}
+export const isSecret = key => /password|secret|token|api.?key|auth|credential/i.test(key);
diff --git a/modules/ui-system/settings/plugins-settings.js b/modules/ui-system/settings/plugins-settings.js
new file mode 100644
index 000000000..142cd238b
--- /dev/null
+++ b/modules/ui-system/settings/plugins-settings.js
@@ -0,0 +1,443 @@
+import { envEntries, setEnvValue, runtimeLabel, runtimeBadge, isSecret } from './plugins-settings-model.js';
+import { mountSelectKeyboardGlue } from './select-keyboard.js';
+
+const mounted = new WeakMap();
+const drafts = new WeakMap();
+const CATEGORIES = { renderer: '界面插件', local: '本机工具', backend: '后端插件' };
+
+export function mountPluginsSettings(host, { api = globalThis.window?.chatAPI, scope, frontend = globalThis.window?.VCPFrontendPlugins, ui = globalThis.window?.VCPUIUX } = {}) {
+    if (!host || mounted.has(host)) return mounted.get(host);
+    const doc = host.ownerDocument;
+    function resources() {
+        const abort = new doc.defaultView.AbortController();
+        const cleanups = new Set();
+        return {
+            get active() { return !abort.signal.aborted; },
+            listen(el, type, fn, options = {}) { el.addEventListener(type, fn, { ...options, signal: abort.signal }); },
+            own(fn) { const release = () => { if (cleanups.delete(release)) fn(); }; cleanups.add(release); return release; },
+            dispose() { abort.abort(); for (const fn of [...cleanups].reverse()) fn(); }
+        };
+    }
+    const lifetime = resources();
+    let disposed = false;
+    let active = 'renderer';
+    const states = new Map();
+    const savedDrafts = drafts.get(host) || new Map(); drafts.set(host, savedDrafts);
+    const draftKey = item => `${item.category}:${item.id}`;
+    function node(tag, className, text) {
+        const el = doc.createElement(tag);
+        if (className) el.className = className;
+        if (text !== undefined) el.textContent = text;
+        return el;
+    }
+    function listen(el, type, fn) { lifetime.listen(el, type, fn); }
+    function button(text, fn, className = 'plugins-button', owner = lifetime) {
+        const el = node('button', className, text); el.type = 'button'; owner.listen(el, 'click', fn);
+        if (className.includes('plugins-button') && ui?.mountButton) {
+            ui.mountButton(el, { variant: className.includes('plugins-button-primary') ? 'primary' : 'outline', size: 'md' }, owner);
+            // Current DSH Button uses radius-md; the older shared adapter still projects a capsule.
+            el.style.borderRadius = 'var(--dsw-radius-md, 12px)';
+        }
+        return el;
+    }
+    async function call(method, data) {
+        if (!api?.[method]) throw new Error('插件管理接口不可用，请重启 VCPChat');
+        const result = await api[method](data);
+        if (!result?.success) throw new Error(result?.error || '插件管理操作失败');
+        return result.data;
+    }
+    function message(el, text, error = false) {
+        el.textContent = text; el.dataset.tone = error ? 'error' : 'neutral';
+    }
+    function status(card) {
+        const state = runtimeLabel(card.item, frontend);
+        const badge = runtimeBadge(card.item, frontend);
+        card.status.textContent = badge.text; card.status.dataset.tone = badge.tone; card.status.hidden = !badge.text;
+        card.expand.setAttribute('aria-label', `${card.title.textContent}，${state.text}`);
+        if (card.description.textContent) card.expand.setAttribute('aria-describedby', card.description.id);
+        else card.expand.removeAttribute('aria-describedby');
+        card.toggle.title = state.text;
+        const fact = card.details.querySelector('.plugins-runtime-fact');
+        if (fact) fact.textContent = card.item.category === 'local' ? state.text.split(' · ')[0] : state.text;
+        card.toggle.setAttribute('aria-checked', String(card.item.enabled));
+        card.toggle.disabled = card.busy || card.detailLoading || card.stale || card.item.readOnly || Boolean(card.item.error);
+        const locked = card.busy || card.detailLoading;
+        if (locked) card.root.setAttribute('aria-busy', 'true'); else card.root.removeAttribute('aria-busy');
+        for (const control of card.details.querySelectorAll('.plugins-input, .plugins-code')) {
+            control.disabled = locked || (control.classList.contains('plugins-input') && (card.item.readOnly || card.stale));
+            const trigger = control.parentElement.querySelector('.vcp-uiux-select-trigger'); if (trigger) trigger.disabled = control.disabled;
+        }
+        const invalid = [...card.details.querySelectorAll('.plugins-input, .plugins-code')].some(control => !control.checkValidity());
+        const save = card.details.querySelector('.plugins-button-primary'); if (save) save.disabled = locked || card.stale || !card.dirty || card.item.readOnly || invalid;
+        const discard = card.details.querySelector('.plugins-config-actions .plugins-button:not(.plugins-button-primary)'); if (discard) discard.disabled = locked || !card.dirty;
+    }
+    const heading = node('h3', 'plugins-heading', '插件与工具');
+    const tabs = node('div', 'plugins-tabs'); tabs.setAttribute('role', 'tablist'); tabs.setAttribute('aria-label', '插件类型');
+    const body = node('div', 'plugins-panels');
+    host.replaceChildren(heading, tabs, body);
+    // Independent config saves must never trigger the global-settings autosave/submit owner.
+    for (const type of ['input', 'change']) listen(host, type, event => event.stopPropagation());
+    listen(host, 'keydown', event => {
+        if (event.key === 'Enter' && event.target.matches('input, select')) event.preventDefault();
+    });
+    function select(category) {
+        active = category;
+        for (const [key, state] of states) {
+            if (key !== category) for (const card of state.cards.values()) card.detailScope?.closeMenus?.();
+            state.panel.hidden = key !== category;
+            state.tab.setAttribute('aria-selected', String(key === category));
+            state.tab.tabIndex = key === category ? 0 : -1;
+        }
+        if (!states.get(category).loaded) void refresh(states.get(category));
+    }
+    function filter(state) {
+        const query = state.search.value.trim().toLocaleLowerCase();
+        let count = 0;
+        for (const card of state.cards.values()) {
+            const match = `${card.item.displayName || ''} ${card.item.name || card.item.id} ${card.item.description || ''}`.toLocaleLowerCase().includes(query);
+            card.root.hidden = !match; if (match) count++;
+        }
+        state.empty.hidden = count > 0 || state.loading || Boolean(state.error);
+        state.empty.textContent = query ? '无搜索结果' : '暂无插件';
+    }
+    async function refresh(state) {
+        const sequence = ++state.sequence;
+        state.loading = true; state.error = ''; state.refresh.disabled = true; state.panel.setAttribute('aria-busy', 'true');
+        message(state.notice, '正在读取插件状态…'); filter(state);
+        for (const card of state.cards.values()) card.detailScope?.closeMenus?.();
+        try {
+            const items = await call('pluginSettingsList', { category: state.category });
+            if (disposed || sequence !== state.sequence) return;
+            const ids = new Set(items.map(item => item.id));
+            for (const [id, card] of state.cards) {
+                if (!ids.has(id)) {
+                    if (card.dirty) {
+                        card.stale = true; status(card);
+                        card.details.querySelector('.plugins-button-primary').disabled = true;
+                        message(card.notice, '插件已移除。未保存的更改已保留，请复制所需配置。', true);
+                    } else { card.removed = true; card.detailScope?.dispose(); card.scope.dispose(); card.root.remove(); state.cards.delete(id); }
+                }
+            }
+            for (const item of items) {
+                let card = state.cards.get(item.id);
+                if (!card) { card = makeCard(state, item); state.cards.set(item.id, card); }
+                else {
+                    card.item = item;
+                    card.title.textContent = item.displayName || item.name || item.id;
+                    card.description.textContent = item.description || ''; card.description.hidden = !item.description; card.description.title = item.description || '';
+                    card.toggle.setAttribute('aria-label', `启用 ${item.displayName || item.id}`);
+                    card.stale = false;
+                    if (card.detail && !card.busy && !card.detailLoading) {
+                        if (card.dirty) message(card.notice, '未保存的更改已保留');
+                        else await loadDetail(card);
+                    }
+                    status(card);
+                }
+                state.list.append(card.root);
+            }
+            if (disposed || sequence !== state.sequence) return;
+            state.loaded = true;
+            state.login.hidden = true;
+            if (state.disconnect) state.disconnect.hidden = false;
+            message(state.notice, '');
+            if (state.connection) {
+                const connected = items.some(item => item.connected);
+                message(state.connection, items.length ? connected ? '节点已连接' : '节点未连接' : '');
+                state.connection.dataset.tone = items.length && !connected ? 'pending' : 'neutral';
+            }
+        } catch (error) {
+            if (disposed || sequence !== state.sequence) return;
+            state.error = error.message;
+            const initialLogin = state.category === 'backend' && !state.loaded && /请登录当前/.test(error.message);
+            message(state.notice, initialLogin ? '' : error.message, !initialLogin);
+            if (state.connection) message(state.connection, '');
+            // Never leave stale backend rows looking authoritative after disconnect/auth failure.
+            state.list.hidden = true;
+            for (const card of state.cards.values()) { card.stale = true; status(card); }
+            if (state.category === 'backend' && /登录|账号|密码/.test(error.message)) { state.login.hidden = false; state.disconnect.hidden = true; }
+        } finally {
+            if (!disposed && sequence === state.sequence) {
+                state.loading = false; state.refresh.disabled = false; state.panel.removeAttribute('aria-busy');
+                if (!state.error) state.list.hidden = false;
+                filter(state);
+            }
+        }
+    }
+    function makeCard(state, item) {
+        const cardScope = resources();
+        const root = node('article', 'plugins-card'); root.dataset.pluginId = item.id;
+        const header = node('div', 'plugins-card-header');
+        const expand = button('', () => { const open = expand.getAttribute('aria-expanded') !== 'true'; expand.setAttribute('aria-expanded', String(open)); details.hidden = !open; if (!open) card.detailScope?.closeMenus?.(); if (open && !card.detail) void loadDetail(card); }, 'plugins-card-expand', cardScope);
+        expand.setAttribute('aria-expanded', 'false');
+        const copy = node('span', 'plugins-card-copy');
+        const title = node('strong', 'plugins-card-title', item.displayName || item.name || item.id);
+        const description = node('span', 'plugins-card-description', item.description || '');
+        description.hidden = !item.description; description.title = item.description || '';
+        description.id = `plugins-description-${state.category}-${encodeURIComponent(item.id)}`;
+        copy.append(title, description);
+        const chevron = node('span', 'vcp-ui-icon plugins-chevron', 'chevron-down'); chevron.setAttribute('aria-hidden', 'true');
+        expand.append(copy, chevron);
+        const tools = node('div', 'plugins-card-tools'); const indicator = node('span', 'plugins-runtime');
+        const toggle = button('', async () => {
+            if (card.busy || card.dirty) { message(card.notice, '请先保存或放弃更改', true); return; }
+            card.busy = true; status(card);
+            try {
+                const result = await call('pluginSettingsToggle', { category: state.category, id: card.item.id, enabled: !card.item.enabled, revision: card.item.revision });
+                if (disposed || card.removed) return;
+                card.item.enabled = !card.item.enabled; card.item.pendingRestart = result.requiresRestart;
+                message(card.notice, '');
+                // Reload revision after manifest rename so subsequent config saves use the correct source.
+                if (card.detail) { card.detail = null; await loadDetail(card); }
+                await refresh(state);
+            } catch (error) { if (!disposed) message(card.notice, error.message, true); }
+            finally { if (!disposed) { card.busy = false; status(card); } }
+        }, 'plugins-switch', cardScope);
+        toggle.setAttribute('role', 'switch'); toggle.setAttribute('aria-label', `启用 ${item.displayName || item.id}`);
+        tools.append(indicator, toggle); header.append(expand, tools);
+        const details = node('div', 'plugins-card-details'); details.hidden = true;
+        details.id = `plugins-detail-${state.category}-${encodeURIComponent(item.id)}`;
+        expand.setAttribute('aria-controls', details.id);
+        const notice = node('p', 'plugins-notice plugins-card-notice'); notice.setAttribute('role', 'status');
+        root.append(header, details, notice);
+        const card = { root, item, title, description, expand, scope: cardScope, status: indicator, toggle, details, notice, dirty: false, busy: false, detail: null, detailLoading: false };
+        const saved = savedDrafts.get(draftKey(item));
+        if (saved) {
+            card.detail = saved.data; renderDetail(card, saved); details.hidden = false; expand.setAttribute('aria-expanded', 'true');
+            message(notice, '已恢复未保存的更改');
+            savedDrafts.delete(draftKey(item));
+        }
+        status(card); return card;
+    }
+    async function loadDetail(card) {
+        if (card.detailLoading) return;
+        card.detailLoading = true; status(card); message(card.notice, '正在读取配置…');
+        try {
+            const data = await call('pluginSettingsDetail', { category: card.item.category, id: card.item.id });
+            if (disposed || card.removed) return;
+            card.detail = data; renderDetail(card); message(card.notice, data.error || '', Boolean(data.error));
+        } catch (error) {
+            if (!disposed && !card.removed) { message(card.notice, error.message, true); card.details.replaceChildren(button('重试', () => void loadDetail(card), 'plugins-button', card.scope)); }
+        } finally { card.detailLoading = false; if (!disposed) status(card); }
+    }
+    function renderDetail(card, saved) {
+        card.detailScope?.dispose();
+        const detailScope = resources(); card.detailScope = detailScope;
+        const data = card.detail;
+        let config = saved?.config ?? data.config;
+        let rawEdited = saved?.rawEdited ?? false;
+        const fields = node('div', 'plugins-config-fields'); const controls = new Map();
+        const meta = node('dl', 'plugins-meta');
+        for (const [label, value] of [['标识', data.name || data.id], ['版本', data.version], ['类型', data.pluginType]]) {
+            if (value) meta.append(node('dt', '', label), node('dd', '', value));
+        }
+        meta.append(node('dt', '', '状态'), node('dd', 'plugins-runtime-fact'));
+        const advanced = node('details', 'plugins-advanced');
+        const summary = node('summary', 'plugins-advanced-toggle');
+        const advancedIcon = node('span', 'vcp-ui-icon plugins-chevron', 'chevron-down'); advancedIcon.setAttribute('aria-hidden', 'true');
+        summary.append(node('span', '', '高级配置'), advancedIcon);
+        advanced.append(summary);
+        const rawLabel = node('label', 'plugins-field'); rawLabel.append(node('span', 'plugins-field-label', data.configFormat === 'json' ? 'plugin-config.json' : 'config.env'));
+        const raw = node('textarea', 'plugins-code'); raw.rows = 6; raw.spellcheck = false; raw.value = config; raw.readOnly = data.readOnly; raw.setAttribute('aria-label', `原始 ${data.configFormat === 'json' ? 'plugin-config.json' : 'config.env'}`); rawLabel.append(raw);
+        const manifestLabel = node('label', 'plugins-field'); manifestLabel.append(node('span', 'plugins-field-label', data.category === 'backend' ? 'Manifest（只读）' : 'Manifest'));
+        const manifest = node('textarea', 'plugins-code'); manifest.rows = 8; manifest.spellcheck = false; manifest.value = saved?.manifest ?? data.rawManifest; manifest.readOnly = data.category === 'backend' || data.readOnly; manifest.setAttribute('aria-label', '插件 Manifest'); manifestLabel.append(manifest);
+        advanced.append(node('p', 'plugins-hint', '配置可能包含密钥'), rawLabel, manifestLabel);
+        const save = button('保存', async () => {
+            if (card.busy || card.stale || card.detailLoading) return;
+            if (!raw.checkValidity()) { raw.reportValidity(); return; }
+            for (const control of controls.values()) if (!control.checkValidity()) { control.reportValidity(); return; }
+            card.busy = true; save.disabled = true; discard.disabled = true; raw.disabled = true; manifest.disabled = true;
+            for (const control of controls.values()) { control.disabled = true; control.parentElement.querySelector('.vcp-uiux-select-trigger')?.setAttribute('disabled', ''); }
+            detailScope.closeMenus?.();
+            status(card); message(card.notice, '正在保存配置…');
+            try {
+                const result = await call('pluginSettingsSave', { category: data.category, id: data.id, revision: data.revision, config,
+                    ...(data.category !== 'backend' && manifest.value !== data.rawManifest ? { rawManifest: manifest.value } : {}) });
+                if (disposed || card.removed) return;
+                card.dirty = false;
+                card.detail = null; await loadDetail(card);
+                card.item.pendingRestart = result.requiresRestart; status(card);
+                message(card.notice, '已保存');
+            } catch (error) { if (!disposed) message(card.notice, error.message, true); }
+            finally {
+                if (!disposed) {
+                    card.busy = false; save.disabled = !card.dirty || data.readOnly; discard.disabled = !card.dirty;
+                    raw.disabled = false; manifest.disabled = false; for (const control of controls.values()) {
+                        control.disabled = data.readOnly;
+                        const trigger = control.parentElement.querySelector('.vcp-uiux-select-trigger'); if (trigger) trigger.disabled = data.readOnly;
+                    }
+                    status(card);
+                }
+            }
+        }, 'plugins-button plugins-button-primary', detailScope);
+        const discard = button('放弃更改', async () => {
+            if (card.busy || card.detailLoading) return;
+            card.busy = true; discard.disabled = true; status(card);
+            try {
+                const latest = await call('pluginSettingsDetail', { category: data.category, id: data.id });
+                if (disposed || card.removed) return;
+                card.dirty = false; card.detail = latest; renderDetail(card); message(card.notice, '');
+            } catch (error) { if (!disposed && !card.removed) message(card.notice, `${error.message}；更改已保留。`, true); }
+            finally { if (!disposed && !card.removed) { card.busy = false; discard.disabled = !card.dirty; status(card); } }
+        }, 'plugins-button', detailScope);
+        discard.title = '放弃更改并重新读取';
+        function dirty() {
+            card.dirty = config !== data.config || manifest.value !== data.rawManifest;
+            save.disabled = !card.dirty || data.readOnly || !raw.checkValidity(); discard.disabled = !card.dirty;
+            status(card);
+            message(card.notice, card.dirty ? '未保存' : '');
+        }
+        function syncControls() {
+            let values;
+            if (data.configFormat === 'json') {
+                try {
+                    const parsed = JSON.parse(config);
+                    if (!parsed || typeof parsed !== 'object' || Array.isArray(parsed)) throw new Error();
+                    values = new Map(Object.entries(parsed).map(([key, value]) => [key, typeof value === 'object' ? JSON.stringify(value) : String(value)]));
+                }
+                catch { raw.setCustomValidity('原始配置必须是有效的 JSON 对象'); return; }
+            } else values = new Map(envEntries(config).map(entry => [entry.key, entry.value]));
+            for (const [key, control] of controls) { control.value = values.get(key) ?? ''; control.setCustomValidity(''); control.dispatchEvent(new doc.defaultView.Event('vcp-uiux-sync')); }
+        }
+        for (const [key, specValue] of Object.entries(data.configSchema || {})) {
+            if (!/^[A-Za-z_][\w]*$/.test(key)) continue;
+            const spec = typeof specValue === 'object' && specValue ? specValue : { type: specValue };
+            const field = node('label', 'plugins-field'); field.append(node('span', 'plugins-field-label', spec.title || key));
+            let control;
+            if (spec.type === 'boolean' || Array.isArray(spec.enum)) {
+                control = node('select', 'plugins-input');
+                const labelFor = value => spec.type === 'boolean' ? String(value) === 'true' ? '开启' : '关闭' : String(value);
+                const options = [['', `默认${spec.default !== undefined ? `（${labelFor(spec.default)}）` : ''}`], ...(spec.enum || ['true', 'false']).map(value => [String(value), labelFor(value)])];
+                for (const [value, label] of options) { const option = node('option', '', label); option.value = value; control.append(option); }
+            } else {
+                let initial = '';
+                if (data.configFormat === 'json') { try { initial = JSON.parse(config)?.[key] ?? ''; } catch { /* raw editor exposes invalid JSON for repair */ } }
+                else initial = new Map(envEntries(config).map(entry => [entry.key, entry.value])).get(key) || '';
+                initial = String(initial);
+                if (isSecret(key) && initial.includes('\n')) { field.append(node('span', 'plugins-hint', '多行密钥，请在高级配置中编辑')); fields.append(field); continue; }
+                control = node(initial.includes('\n') || ['array', 'object'].includes(spec.type) ? 'textarea' : 'input', 'plugins-input');
+                if (control.tagName === 'INPUT') control.type = isSecret(key) ? 'password' : ['integer', 'number'].includes(spec.type) ? 'number' : 'text';
+                else control.rows = 3;
+                if (spec.type === 'integer') control.step = '1'; else if (spec.type === 'number') control.step = 'any';
+                if (spec.minimum !== undefined) control.min = spec.minimum;
+                if (spec.maximum !== undefined) control.max = spec.maximum;
+                control.placeholder = spec.default !== undefined && !isSecret(key) ? `默认：${spec.default}` : '未设置';
+                control.autocomplete = 'off';
+            }
+            control.dataset.configKey = key; control.disabled = data.readOnly;
+            controls.set(key, control); field.append(control);
+            if (spec.description) field.append(node('span', 'plugins-hint', spec.description));
+            const edit = () => {
+                try {
+                    control.setCustomValidity('');
+                    if (data.configFormat === 'json') {
+                        const values = JSON.parse(config);
+                        if (control.value === '') delete values[key];
+                        else {
+                            const value = ['boolean', 'integer', 'number', 'array', 'object'].includes(spec.type) ? JSON.parse(control.value) : control.value;
+                            if (spec.type === 'array' && !Array.isArray(value)) throw new Error();
+                            if (spec.type === 'object' && (!value || typeof value !== 'object' || Array.isArray(value))) throw new Error();
+                            if (spec.type === 'boolean' && typeof value !== 'boolean') throw new Error();
+                            if (['integer', 'number'].includes(spec.type) && (typeof value !== 'number' || !Number.isFinite(value) || (spec.type === 'integer' && !Number.isInteger(value)))) throw new Error();
+                            values[key] = value;
+                        }
+                        config = JSON.stringify(values, null, 2) + '\n';
+                    } else {
+                        config = setEnvValue(config, key, control.value);
+                        const values = text => JSON.stringify([...new Map(envEntries(text).map(entry => [entry.key, entry.value]))].sort(([a], [b]) => a.localeCompare(b)));
+                        if (!rawEdited && values(config) === values(data.config)) config = data.config;
+                    }
+                    raw.value = config; dirty();
+                } catch (error) { card.dirty = true; discard.disabled = false; control.setCustomValidity(data.configFormat === 'json' ? '请输入符合类型的 JSON 值' : error.message); save.disabled = true; message(card.notice, control.validationMessage, true); }
+            };
+            detailScope.listen(control, control.tagName === 'SELECT' ? 'change' : 'input', edit);
+            fields.append(field);
+        }
+        syncControls();
+        detailScope.listen(raw, 'input', () => { rawEdited = true; config = raw.value; raw.setCustomValidity(''); syncControls(); dirty(); });
+        detailScope.listen(manifest, 'input', dirty);
+        const actions = node('div', 'plugins-config-actions'); actions.hidden = Boolean(data.readOnly); actions.append(save, discard); save.disabled = true; discard.disabled = true;
+        card.details.replaceChildren(meta, ...(fields.childElementCount ? [fields] : []), advanced, actions);
+        if (data.readOnly) card.details.prepend(node('p', 'plugins-hint', '分布式插件，请在所属节点编辑'));
+        const triggers = [];
+        detailScope.closeMenus = () => { for (const trigger of triggers) if (trigger.getAttribute('aria-expanded') === 'true') trigger.click(); };
+        for (const [key, control] of controls) if (control.tagName === 'SELECT' && ui?.mountSelect) {
+            control.id = `${card.details.id}-${key}`;
+            ui.mountSelect(control, { label: control.closest('label').querySelector('.plugins-field-label').textContent, portal: true }, detailScope);
+            const trigger = control.parentElement.querySelector('.vcp-uiux-select-trigger');
+            trigger.disabled = data.readOnly; triggers.push(trigger);
+            const decorate = () => {
+                const icon = node('span', 'vcp-ui-icon plugins-chevron', 'chevron-down'); icon.setAttribute('aria-hidden', 'true');
+                trigger.querySelector('.plugins-chevron')?.remove(); trigger.append(icon);
+            };
+            decorate(); detailScope.listen(control, 'change', decorate); detailScope.listen(control, 'vcp-uiux-sync', decorate);
+            const cleanups = []; mountSelectKeyboardGlue(control, cleanups, detailScope);
+            detailScope.own(() => { for (const cleanup of cleanups) cleanup(); });
+        }
+        card.captureDraft = () => ({ data, config, rawEdited, manifest: manifest.value,
+            values: [...controls].map(([key, control]) => [key, control.value, control.validity.customError ? control.validationMessage : '']) });
+        if (saved) {
+            for (const [key, value, error] of saved.values) {
+                const control = controls.get(key); if (!control) continue;
+                control.value = value; control.setCustomValidity(error); control.dispatchEvent(new doc.defaultView.Event('vcp-uiux-sync'));
+            }
+            dirty(); card.dirty = true; status(card);
+        }
+    }
+    for (const [category, label] of Object.entries(CATEGORIES)) {
+        const tab = button(label, () => select(category), 'plugins-tab'); tab.id = `plugins-tab-${category}`; tab.setAttribute('role', 'tab'); tab.setAttribute('aria-controls', `plugins-panel-${category}`);
+        const panel = node('section', 'plugins-panel'); panel.id = `plugins-panel-${category}`; panel.setAttribute('role', 'tabpanel'); panel.setAttribute('aria-labelledby', tab.id);
+        const toolbar = node('div', 'plugins-toolbar');
+        const searchBox = node('div', 'plugins-search'); const icon = node('span', 'vcp-ui-icon', 'search'); icon.setAttribute('aria-hidden', 'true');
+        const search = node('input', 'plugins-search-input'); search.type = 'search'; search.placeholder = `搜索${label}…`; search.setAttribute('aria-label', `搜索${label}`); searchBox.append(icon, search);
+        const refreshButton = button('刷新', () => void refresh(state)); toolbar.append(searchBox, refreshButton);
+        const notice = node('p', 'plugins-notice'); notice.setAttribute('role', 'status'); notice.setAttribute('aria-live', 'polite');
+        const connection = category === 'local' ? node('span', 'plugins-notice plugins-connection') : null;
+        if (connection) { connection.setAttribute('role', 'status'); toolbar.append(connection); }
+        const list = node('div', 'plugins-list'); const empty = node('p', 'plugins-empty'); empty.hidden = true;
+        const login = node('div', 'plugins-login'); login.hidden = true;
+        const state = { category, tab, panel, search, refresh: refreshButton, notice, connection, list, empty, login, cards: new Map(), loaded: false, loading: false, error: '', sequence: 0 };
+        if (category === 'backend') {
+            login.append(node('p', 'plugins-hint', '连接 VCPToolBox 管理端'));
+            const usernameLabel = node('label', 'plugins-field'); usernameLabel.append(node('span', 'plugins-field-label', '管理端账号'));
+            const username = node('input', 'plugins-input'); username.autocomplete = 'username'; usernameLabel.append(username);
+            const passwordLabel = node('label', 'plugins-field'); passwordLabel.append(node('span', 'plugins-field-label', '管理端密码'));
+            const password = node('input', 'plugins-input'); password.type = 'password'; password.autocomplete = 'current-password'; passwordLabel.append(password);
+            const connect = button('连接管理端', async () => {
+                connect.disabled = true; message(notice, '正在连接管理端…');
+                try { await call('pluginSettingsConnect', { username: username.value, password: password.value }); if (!disposed) { password.value = ''; await refresh(state); } }
+                catch (error) { if (!disposed) message(notice, error.message, true); }
+                finally { if (!disposed) connect.disabled = false; }
+            }, 'plugins-button plugins-button-primary');
+            login.append(usernameLabel, passwordLabel, connect);
+            const disconnect = button('断开管理端', async () => {
+                try { await call('pluginSettingsDisconnect'); if (!disposed) { state.loaded = false; await refresh(state); } }
+                catch (error) { if (!disposed) message(notice, error.message, true); }
+            });
+            const sessionActions = node('span', 'plugins-session-actions'); sessionActions.hidden = true; state.disconnect = sessionActions;
+            sessionActions.append(disconnect); toolbar.append(sessionActions);
+            listen(password, 'keydown', event => { if (event.key === 'Enter') { event.preventDefault(); connect.click(); } });
+        }
+        listen(search, 'input', () => filter(state));
+        listen(tab, 'keydown', event => {
+            if (!['ArrowLeft', 'ArrowRight', 'Home', 'End'].includes(event.key)) return;
+            event.preventDefault(); const keys = Object.keys(CATEGORIES); const index = keys.indexOf(active);
+            const next = event.key === 'Home' ? keys[0] : event.key === 'End' ? keys.at(-1) : keys[(index + (event.key === 'ArrowRight' ? 1 : -1) + keys.length) % keys.length];
+            select(next); states.get(next).tab.focus();
+        });
+        panel.append(toolbar, notice, login, list, empty); tabs.append(tab); body.append(panel); states.set(category, state);
+    }
+    // Loading is lazy: opening general settings must not contact the backend.
+    const onActivated = () => { if (!states.get(active).loaded) void refresh(states.get(active)); };
+    listen(host.closest('.settings-section') || host, 'vcp-settings-section-activated', onActivated);
+    const controller = { select, refresh: () => refresh(states.get(active)), dispose() {
+        disposed = true; lifetime.dispose();
+        for (const state of states.values()) for (const card of state.cards.values()) {
+            if (card.dirty && card.captureDraft) savedDrafts.set(draftKey(card.item), card.captureDraft());
+            card.removed = true; card.detailScope?.dispose(); card.scope.dispose();
+        }
+        states.clear(); host.replaceChildren(); mounted.delete(host);
+    } };
+    mounted.set(host, controller); scope?.own(() => controller.dispose(), 'plugins-settings', 'ui-presentation');
+    for (const [key, state] of states) { state.panel.hidden = key !== active; state.tab.setAttribute('aria-selected', String(key === active)); state.tab.tabIndex = key === active ? 0 : -1; }
+    return controller;
+}
diff --git a/modules/ui-system/settings/section-ownership.js b/modules/ui-system/settings/section-ownership.js
index eaa563208..82eebc275 100644
--- a/modules/ui-system/settings/section-ownership.js
+++ b/modules/ui-system/settings/section-ownership.js
@@ -5,6 +5,7 @@ const SECTION_KEYS = Object.freeze({
     '服务器连接': 'server-connection',
     'Jev 服务': 'jev-service',
     '界面与外观': 'appearance-settings',
+    '插件与工具': 'plugins-tools',
     '消息渲染': 'render-settings',
     '划词助手': 'selection-assistant',
     '语音设置': 'voice-settings',
diff --git a/modules/ui-system/settings/select-keyboard.js b/modules/ui-system/settings/select-keyboard.js
new file mode 100644
index 000000000..2df6f6133
--- /dev/null
+++ b/modules/ui-system/settings/select-keyboard.js
@@ -0,0 +1,88 @@
+// Shared keyboard behavior for settings and independent plugin configuration pickers.
+export function mountSelectKeyboardGlue(select, cleanups, scope) {
+    const trigger = select.parentElement?.querySelector(':scope > .vcp-uiux-select-trigger');
+    if (!trigger) return;
+    const openMenuItems = () => {
+        const menuId = trigger.getAttribute('aria-controls');
+        const menu = menuId ? document.getElementById(menuId) : null;
+        if (!menu || menu.hidden) return null;
+        return [...menu.querySelectorAll('.vcp-uiux-menu-item:not(:disabled)')];
+    };
+    const focusSelectedItem = () => {
+        const items = openMenuItems();
+        if (!items?.length) return;
+        const selected = items.find(item => item.dataset.selected === 'true') || items[0];
+        selected.focus();
+    };
+    const moveFocus = (items, current, next) => {
+        const count = items.length;
+        if (!count) return;
+        items[((next % count) + count) % count].focus();
+    };
+    let focusFrame = null;
+    let focusFrameRelease = null;
+    const requestFrame = globalThis.requestAnimationFrame || (callback => setTimeout(callback, 16));
+    const cancelFrame = globalThis.cancelAnimationFrame || clearTimeout;
+    const cancelFocusFrame = () => {
+        if (focusFrame !== null) cancelFrame(focusFrame);
+        focusFrame = null;
+        const release = focusFrameRelease;
+        focusFrameRelease = null;
+        if (release) void release();
+    };
+    const scheduleFocusFrame = () => {
+        cancelFocusFrame();
+        let release;
+        focusFrame = requestFrame(() => {
+            focusFrame = null;
+            focusFrameRelease = null;
+            void release?.();
+            if (scope.active) focusSelectedItem();
+        });
+        release = scope.own(() => {
+            if (focusFrame !== null) cancelFrame(focusFrame);
+            focusFrame = null;
+        }, 'select-focus-frame', 'animation-frame');
+        focusFrameRelease = release;
+    };
+    const onTriggerKey = event => {
+        if (event.key !== 'ArrowDown' && event.key !== 'ArrowUp') return;
+        event.preventDefault();
+        if (trigger.getAttribute('aria-expanded') !== 'true') {
+            trigger.click();
+            scheduleFocusFrame();
+            return;
+        }
+        const items = openMenuItems();
+        if (!items?.length) return;
+        const current = Math.max(0, items.findIndex(item => item.dataset.selected === 'true'));
+        moveFocus(items, current, event.key === 'ArrowDown' ? current + 1 : current - 1);
+    };
+    const onDocumentKey = event => {
+        if (!['ArrowDown', 'ArrowUp', 'Home', 'End'].includes(event.key)) return;
+        const target = event.target;
+        if (!(target instanceof Element) || !target.classList.contains('vcp-uiux-menu-item')) return;
+        const items = openMenuItems();
+        if (!items?.length) return;
+        const current = items.indexOf(target);
+        let next = current;
+        if (event.key === 'ArrowDown') next = current + 1;
+        else if (event.key === 'ArrowUp') next = current - 1;
+        else if (event.key === 'Home') next = 0;
+        else next = items.length - 1;
+        event.preventDefault();
+        moveFocus(items, current, next);
+    };
+    // Programmatic business writes elsewhere publish global-settings-updated;
+    // the primitive only re-syncs on change/vcp-uiux-sync, so mirror the event.
+    const onGlobalUpdate = () => select.dispatchEvent(new Event('vcp-uiux-sync'));
+    trigger.addEventListener('keydown', onTriggerKey);
+    document.addEventListener('keydown', onDocumentKey, true);
+    window.addEventListener('global-settings-updated', onGlobalUpdate);
+    cleanups.push(() => {
+        cancelFocusFrame();
+        trigger.removeEventListener('keydown', onTriggerKey);
+        document.removeEventListener('keydown', onDocumentKey, true);
+        window.removeEventListener('global-settings-updated', onGlobalUpdate);
+    });
+}
diff --git a/modules/ui-system/settings/select-projection.js b/modules/ui-system/settings/select-projection.js
index e32e0d130..b4ef3a78c 100644
--- a/modules/ui-system/settings/select-projection.js
+++ b/modules/ui-system/settings/select-projection.js
@@ -1,3 +1,4 @@
+import { mountSelectKeyboardGlue } from './select-keyboard.js';
 // select-projection — the bridge-side Select projection over the generated
 // primitive (single portal implementation). Owns the per-form option-change
 // observer, the roving keyboard glue (thread A contract gap) and the
@@ -54,94 +55,6 @@ export function createSelectProjection({ ensurePresentationScope }) {
         release = scope.own(() => clearTimeout(timer), label, 'timeout');
     }
 
-    function mountSelectKeyboardGlue(select, cleanups, scope) {
-        const trigger = select.parentElement?.querySelector(':scope > .vcp-uiux-select-trigger');
-        if (!trigger) return;
-        const openMenuItems = () => {
-            const menuId = trigger.getAttribute('aria-controls');
-            const menu = menuId ? document.getElementById(menuId) : null;
-            if (!menu || menu.hidden) return null;
-            return [...menu.querySelectorAll('.vcp-uiux-menu-item:not(:disabled)')];
-        };
-        const focusSelectedItem = () => {
-            const items = openMenuItems();
-            if (!items?.length) return;
-            const selected = items.find(item => item.dataset.selected === 'true') || items[0];
-            selected.focus();
-        };
-        const moveFocus = (items, current, next) => {
-            const count = items.length;
-            if (!count) return;
-            items[((next % count) + count) % count].focus();
-        };
-        let focusFrame = null;
-        let focusFrameRelease = null;
-        const requestFrame = globalThis.requestAnimationFrame || (callback => setTimeout(callback, 16));
-        const cancelFrame = globalThis.cancelAnimationFrame || clearTimeout;
-        const cancelFocusFrame = () => {
-            if (focusFrame !== null) cancelFrame(focusFrame);
-            focusFrame = null;
-            const release = focusFrameRelease;
-            focusFrameRelease = null;
-            if (release) void release();
-        };
-        const scheduleFocusFrame = () => {
-            cancelFocusFrame();
-            let release;
-            focusFrame = requestFrame(() => {
-                focusFrame = null;
-                focusFrameRelease = null;
-                void release?.();
-                if (scope.active) focusSelectedItem();
-            });
-            release = scope.own(() => {
-                if (focusFrame !== null) cancelFrame(focusFrame);
-                focusFrame = null;
-            }, 'select-focus-frame', 'animation-frame');
-            focusFrameRelease = release;
-        };
-        const onTriggerKey = event => {
-            if (event.key !== 'ArrowDown' && event.key !== 'ArrowUp') return;
-            event.preventDefault();
-            if (trigger.getAttribute('aria-expanded') !== 'true') {
-                trigger.click();
-                scheduleFocusFrame();
-                return;
-            }
-            const items = openMenuItems();
-            if (!items?.length) return;
-            const current = Math.max(0, items.findIndex(item => item.dataset.selected === 'true'));
-            moveFocus(items, current, event.key === 'ArrowDown' ? current + 1 : current - 1);
-        };
-        const onDocumentKey = event => {
-            if (!['ArrowDown', 'ArrowUp', 'Home', 'End'].includes(event.key)) return;
-            const target = event.target;
-            if (!(target instanceof Element) || !target.classList.contains('vcp-uiux-menu-item')) return;
-            const items = openMenuItems();
-            if (!items?.length) return;
-            const current = items.indexOf(target);
-            let next = current;
-            if (event.key === 'ArrowDown') next = current + 1;
-            else if (event.key === 'ArrowUp') next = current - 1;
-            else if (event.key === 'Home') next = 0;
-            else next = items.length - 1;
-            event.preventDefault();
-            moveFocus(items, current, next);
-        };
-        // Programmatic business writes elsewhere publish global-settings-updated;
-        // the primitive only re-syncs on change/vcp-uiux-sync, so mirror the event.
-        const onGlobalUpdate = () => select.dispatchEvent(new Event('vcp-uiux-sync'));
-        trigger.addEventListener('keydown', onTriggerKey);
-        document.addEventListener('keydown', onDocumentKey, true);
-        window.addEventListener('global-settings-updated', onGlobalUpdate);
-        cleanups.push(() => {
-            cancelFocusFrame();
-            trigger.removeEventListener('keydown', onTriggerKey);
-            document.removeEventListener('keydown', onDocumentKey, true);
-            window.removeEventListener('global-settings-updated', onGlobalUpdate);
-        });
-    }
-
     function mountUiuxSelects(form) {
         const previousObserver = selectObserverStates.get(form);
         // A repeated refresh disconnects the live observer before remounting.
@@ -159,6 +72,7 @@ export function createSelectProjection({ ensurePresentationScope }) {
         // resources nothing will ever disconnect. The whole pass is a no-op.
         if (!scope) return;
         form.querySelectorAll('select').forEach(select => {
+            if (select.closest('[data-vcp-plugin-settings]')) return;
             // Typed primitives mount first and mark their native business node.
             if (select.dataset.vcpTypedPrimitiveMounted === 'true') return;
             if (select.multiple || select.disabled) return;
@@ -216,6 +130,7 @@ export function createSelectProjection({ ensurePresentationScope }) {
             };
             const observer = new window.MutationObserver(mutations => {
                 const relevant = mutations.some(record => {
+                    if (record.target.closest?.('[data-vcp-plugin-settings]')) return false;
                     if (record.type === 'attributes') return record.target.matches?.('select, option');
                     if (record.type !== 'childList') return false;
                     if (record.target.matches?.('select')) return true;
diff --git a/package.json b/package.json
index 0be3c7c0c..aa3e7e54f 100644
--- a/package.json
+++ b/package.json
@@ -86,7 +86,8 @@
     "test:mobile-sync": "node --test tests/mobile-sync-protocol.test.js tests/mobile-sync-error-contract.test.js tests/mobile-sync-central-adapter.test.js tests/mobile-sync-canonical.test.js tests/mobile-sync-failure-contract.test.js tests/mobile-sync-sqlite-delete.test.js tests/mobile-sync-streaming.test.js tests/mobile-sync-degraded-mode.test.js tests/mobile-sync-package.test.js",
     "test:cds": "cargo test --manifest-path rust_chat_data_service/Cargo.toml --locked",
     "check:cds:fmt": "cargo fmt --manifest-path rust_chat_data_service/Cargo.toml -- --check",
-    "check:cds:clippy": "cargo clippy --manifest-path rust_chat_data_service/Cargo.toml --locked --all-targets -- -D warnings"
+    "check:cds:clippy": "cargo clippy --manifest-path rust_chat_data_service/Cargo.toml --locked --all-targets -- -D warnings",
+    "test:settings-plugins": "node --test tests/plugin-settings-service.test.js tests/plugin-settings-ui.test.mjs tests/plugin-settings-handlers.test.js"
   },
   "keywords": [
     "VCP",
diff --git a/preloads/api/pluginSettings.js b/preloads/api/pluginSettings.js
new file mode 100644
index 000000000..cef676921
--- /dev/null
+++ b/preloads/api/pluginSettings.js
@@ -0,0 +1,14 @@
+'use strict';
+const { invoke } = require('../core/define');
+module.exports = {
+    handlers: ['modules/ipc/pluginSettingsHandlers.js'],
+    roles: ['chat'],
+    api: {
+        pluginSettingsList: invoke('plugin-settings:list', 'data'),
+        pluginSettingsDetail: invoke('plugin-settings:detail', 'data'),
+        pluginSettingsToggle: invoke('plugin-settings:toggle', 'data'),
+        pluginSettingsSave: invoke('plugin-settings:save', 'data'),
+        pluginSettingsConnect: invoke('plugin-settings:connect', 'data'),
+        pluginSettingsDisconnect: invoke('plugin-settings:disconnect'),
+    },
+};
diff --git a/scripts/check-design-system-boundary.mjs b/scripts/check-design-system-boundary.mjs
index 4a8f44bc3..487be73de 100644
--- a/scripts/check-design-system-boundary.mjs
+++ b/scripts/check-design-system-boundary.mjs
@@ -42,6 +42,16 @@ const forbiddenPaths = [
 ];
 
 const allowedSourceDifferences = new Set([
+    // Settings plugin management: feature-owned services and their focused tests.
+    'docs/settings-plugins.md',
+    'modules/ipc/pluginSettingsHandlers.js',
+    'modules/ipc/applicationSender.js',
+    'modules/services/pluginSettingsService.js',
+    'preloads/api/pluginSettings.js',
+    'tests/helpers/trusted-main-sender.cjs',
+    'tests/plugin-settings-handlers.test.js',
+    'tests/plugin-settings-service.test.js',
+    'tests/plugin-settings-ui.test.mjs',
     '.github/workflows/canonical_ui.yml',
     '.github/workflows/chat_kernel_ui.yml',
     '.github/workflows/mobile_sync.yml',
diff --git a/scripts/check-ui-system.mjs b/scripts/check-ui-system.mjs
index 91145dece..5456de027 100644
--- a/scripts/check-ui-system.mjs
+++ b/scripts/check-ui-system.mjs
@@ -143,7 +143,13 @@ const inlineStyleCompatibilityAllowlist = new Set([
 
 for (const file of filesIn(moduleDir, '.js')) {
     const source = fs.readFileSync(file, 'utf8');
-    if (/\bstyle\s*=|\.style\./.test(source) && !inlineStyleCompatibilityAllowlist.has(file)) {
+    // The plugin page corrects only the older shared Button's capsule radius.
+    // Its primitive owns restoration; all other inline writes remain forbidden.
+    const radiusProjection = "el.style.borderRadius = 'var(--dsw-radius-md, 12px)';";
+    const pluginButtonRadiusOnly = file === path.join(moduleDir, 'settings', 'plugins-settings.js')
+        && source.includes(radiusProjection)
+        && !/\bstyle\s*=|\.style\./.test(source.replace(radiusProjection, ''));
+    if (/\bstyle\s*=|\.style\./.test(source) && !inlineStyleCompatibilityAllowlist.has(file) && !pluginButtonRadiusOnly) {
         report(file, 'contains inline style mutation');
     }
 }
diff --git a/scripts/next-delta-shared-baseline.json b/scripts/next-delta-shared-baseline.json
index 2e5ab4ed9..8036304f8 100644
--- a/scripts/next-delta-shared-baseline.json
+++ b/scripts/next-delta-shared-baseline.json
@@ -36,7 +36,7 @@
     "reason": "reviewed notification rendering after injected filtering and owner-scoped toast timers and transition listeners replaced ambient lifecycle effects"
   },
   "VCPDistributedServer/frontend-plugin-loader.js": {
-    "sha256": "0987ee41ed76c8b4f0963353c4b387f0b46a6202b9e8516aa02cce27568862ca",
-    "reason": "upstream plugin loader contract; dynamic wallpaper internals remain out of scope"
+    "sha256": "94a7a193ac6db1d35a03f64625382cb4bf2ec33069e11b1b8765dc11ead9216e",
+    "reason": "PR 30 reviewed: expose immutable script load outcomes for truthful plugin-settings status; preserve enabled-only discovery, serial loading and registration semantics."
   }
 }
diff --git a/styles/ui-system/business-modals.css b/styles/ui-system/business-modals.css
index a280c8676..f5256cd4a 100644
--- a/styles/ui-system/business-modals.css
+++ b/styles/ui-system/business-modals.css
@@ -6,6 +6,12 @@
         backdrop-filter: blur(5px);
     }
 
+    /* DSH web-styling.md: settings retain a translucent mask without filtering the page. */
+    html.vcp-global-settings-host .vcp-ui-scope#globalSettingsModal {
+        backdrop-filter: none;
+        -webkit-backdrop-filter: none;
+    }
+
     :is(html, html.vcp-global-settings-host) .vcp-ui-scope.modal .modal-content {
         width: min(100%, var(--vcp-ui-modal-width));
         max-height: min(var(--vcp-ui-modal-height), calc(100vh - var(--vcp-ui-space-7)));
diff --git a/styles/ui-system/settings-plugins.css b/styles/ui-system/settings-plugins.css
new file mode 100644
index 000000000..ac6a80bdd
--- /dev/null
+++ b/styles/ui-system/settings-plugins.css
@@ -0,0 +1,78 @@
+/* DSH 639ed015: PluginsSettingsSection + PluginInventorySettingsTab.
+   Configurable cards use one column; colors inherit the existing settings theme. */
+html.vcp-global-settings-host .vcp-ui-scope#globalSettingsModal .plugins-settings {
+    --plugins-fill: var(--dsw-alias-settings-card-fill, var(--dsw-alias-bg-layer-2, var(--vcp-ui-surface-1)));
+    --plugins-stroke: var(--dsw-alias-settings-card-stroke, var(--dsw-alias-border-l4, color-mix(in srgb, var(--plugins-text) 16%, transparent)));
+    --plugins-text: var(--dsw-alias-label-primary, var(--vcp-ui-text-1));
+    --plugins-muted: var(--dsw-alias-label-tertiary, var(--vcp-ui-text-3));
+    display: flex; flex-direction: column; gap: 12px; max-width: 760px; min-width: 0;
+    color: var(--plugins-text); font: 400 var(--vcp-ui-text-caption, 13px)/20px var(--vcp-ui-font-family);
+}
+html.vcp-global-settings-host .vcp-ui-scope#globalSettingsModal .plugins-settings [hidden] { display: none; }
+html.vcp-global-settings-host .vcp-ui-scope#globalSettingsModal .plugins-heading { margin: 0; font-size: var(--vcp-ui-text-xl, 18px); line-height: 24px; font-weight: 600; color: var(--plugins-text); }
+html.vcp-global-settings-host .vcp-ui-scope#globalSettingsModal .plugins-settings :is(button, input, select, textarea) { font: inherit; box-sizing: border-box; }
+html.vcp-global-settings-host .vcp-ui-scope#globalSettingsModal .plugins-settings :is(button, input, select, textarea, summary):focus-visible { outline: 2px solid var(--dsw-alias-state-business-primary, var(--plugins-text)); outline-offset: 2px; }
+html.vcp-global-settings-host .vcp-ui-scope#globalSettingsModal .plugins-settings :is(button, summary) { cursor: pointer; }
+html.vcp-global-settings-host .vcp-ui-scope#globalSettingsModal .plugins-settings button:disabled { cursor: not-allowed; opacity: .4; }
+html.vcp-global-settings-host .vcp-ui-scope#globalSettingsModal .plugins-notice, html.vcp-global-settings-host .vcp-ui-scope#globalSettingsModal .plugins-hint, html.vcp-global-settings-host .vcp-ui-scope#globalSettingsModal .plugins-empty { margin: 0; color: var(--plugins-muted); font-size: var(--vcp-ui-text-sm, 12px); line-height: 18px; overflow-wrap: anywhere; }
+html.vcp-global-settings-host .vcp-ui-scope#globalSettingsModal .plugins-notice:empty { display: none; }
+html.vcp-global-settings-host .vcp-ui-scope#globalSettingsModal .plugins-tabs { display: flex; gap: 22px; border-bottom: .5px solid var(--plugins-stroke); }
+html.vcp-global-settings-host .vcp-ui-scope#globalSettingsModal .plugins-tab { position: relative; padding: 7px 1px 9px; border: 0; background: transparent; color: var(--plugins-muted); white-space: nowrap; }
+html.vcp-global-settings-host .vcp-ui-scope#globalSettingsModal .plugins-tab[aria-selected="true"] { color: var(--plugins-text); font-weight: 500; }
+html.vcp-global-settings-host .vcp-ui-scope#globalSettingsModal .plugins-tab[aria-selected="true"]::after { content: ''; position: absolute; inset: auto 0 -1px; height: 2px; background: var(--plugins-text); border-radius: 1px; }
+html.vcp-global-settings-host .vcp-ui-scope#globalSettingsModal .plugins-panel { display: flex; flex-direction: column; gap: 14px; min-width: 0; }
+html.vcp-global-settings-host .vcp-ui-scope#globalSettingsModal .plugins-toolbar { display: flex; align-items: center; flex-wrap: wrap; gap: 8px; }
+html.vcp-global-settings-host .vcp-ui-scope#globalSettingsModal .plugins-search { display: flex; position: relative; align-items: center; flex: 1 1 180px; min-width: 0; }
+html.vcp-global-settings-host .vcp-ui-scope#globalSettingsModal .plugins-search > .vcp-ui-icon { position: absolute; left: 12px; width: 16px; height: 16px; pointer-events: none; color: var(--plugins-muted); }
+html.vcp-global-settings-host .vcp-ui-scope#globalSettingsModal .plugins-settings .plugins-search-input { width: 100%; height: 36px; padding: 0 34px 0 36px; border: .5px solid var(--plugins-stroke); border-radius: var(--dsw-radius-md, 12px); background: var(--dsw-alias-bg-layer-1, var(--plugins-fill)); color: var(--plugins-text); }
+html.vcp-global-settings-host .vcp-ui-scope#globalSettingsModal .plugins-settings .plugins-input { width: 100%; min-height: 32px; margin: 0; padding: 5px 8px; border: .5px solid var(--plugins-stroke); border-radius: var(--dsw-radius-md, 12px); background: var(--dsw-alias-bg-layer-1, var(--plugins-fill)); color: var(--plugins-text); }
+html.vcp-global-settings-host .vcp-ui-scope#globalSettingsModal .plugins-settings .plugins-button { display: inline-flex; align-items: center; justify-content: center; height: 36px; padding: 0 14px; border: .5px solid var(--dsw-alias-border-l3, var(--plugins-stroke)); border-radius: var(--dsw-radius-md, 12px); background: transparent; color: var(--plugins-text); font-size: var(--vcp-ui-text-base, 14px); line-height: 22px; white-space: nowrap; }
+html.vcp-global-settings-host .vcp-ui-scope#globalSettingsModal .plugins-settings .plugins-button:hover:not(:disabled) { background: var(--dsw-alias-interactive-bg-hover, var(--vcp-ui-surface-2)); }
+html.vcp-global-settings-host .vcp-ui-scope#globalSettingsModal .plugins-settings .plugins-button-primary { background: var(--dsw-alias-button-primary-fill, var(--plugins-text)); color: var(--dsw-alias-label-primary-foreground, var(--dsw-alias-bg-layer-1, var(--vcp-ui-surface-1))); border-color: transparent; }
+html.vcp-global-settings-host .vcp-ui-scope#globalSettingsModal .plugins-settings .plugins-button-primary:hover:not(:disabled) { background: var(--dsw-alias-button-primary-hover, color-mix(in srgb, var(--plugins-text) 86%, var(--plugins-fill))); }
+html.vcp-global-settings-host .vcp-ui-scope#globalSettingsModal .plugins-list { display: flex; flex-direction: column; gap: 10px; }
+html.vcp-global-settings-host .vcp-ui-scope#globalSettingsModal .plugins-card { border: .5px solid var(--plugins-stroke); border-radius: var(--dsw-radius-xl, 20px); background: var(--plugins-fill); overflow: hidden; }
+html.vcp-global-settings-host .vcp-ui-scope#globalSettingsModal .plugins-card-header { display: flex; align-items: center; gap: 12px; padding: 12px 14px; min-height: 52px; }
+html.vcp-global-settings-host .vcp-ui-scope#globalSettingsModal .plugins-card-header:hover, html.vcp-global-settings-host .vcp-ui-scope#globalSettingsModal .plugins-card-header:has(.plugins-card-expand[aria-expanded="true"]) { background: var(--dsw-alias-interactive-bg-hover, var(--vcp-ui-surface-2)); }
+html.vcp-global-settings-host .vcp-ui-scope#globalSettingsModal .plugins-settings .plugins-card-expand:focus-visible { outline-offset: -2px; border-radius: var(--dsw-radius-sm, 8px); }
+html.vcp-global-settings-host .vcp-ui-scope#globalSettingsModal .plugins-card-expand { display: flex; align-items: center; gap: 10px; flex: 1; min-width: 0; padding: 0; border: 0; background: transparent; color: inherit; text-align: left; }
+html.vcp-global-settings-host .vcp-ui-scope#globalSettingsModal .plugins-card-copy { display: flex; flex: 1; flex-direction: column; gap: 2px; min-width: 0; }
+html.vcp-global-settings-host .vcp-ui-scope#globalSettingsModal .plugins-card-title { font-size: var(--vcp-ui-text-base, 14px); line-height: 20px; font-weight: 500; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
+html.vcp-global-settings-host .vcp-ui-scope#globalSettingsModal .plugins-card-description { color: var(--plugins-muted); font-size: var(--vcp-ui-text-sm, 12px); line-height: 18px; display: -webkit-box; -webkit-line-clamp: 2; -webkit-box-orient: vertical; overflow: hidden; }
+html.vcp-global-settings-host .vcp-ui-scope#globalSettingsModal .plugins-chevron { flex: 0 0 16px; width: 16px; height: 16px; transition: transform 140ms ease; }
+html.vcp-global-settings-host .vcp-ui-scope#globalSettingsModal .plugins-card-expand[aria-expanded="true"] .plugins-chevron { transform: rotate(180deg); }
+html.vcp-global-settings-host .vcp-ui-scope#globalSettingsModal .plugins-card-tools { display: flex; align-items: center; gap: 10px; }
+html.vcp-global-settings-host .vcp-ui-scope#globalSettingsModal .plugins-runtime { display: flex; align-items: center; white-space: nowrap; color: var(--plugins-muted); font-size: var(--vcp-ui-font-size-xs, 11px); line-height: 16px; }
+html.vcp-global-settings-host .vcp-ui-scope#globalSettingsModal .plugins-settings [data-tone="error"] { color: var(--vcp-ui-danger, var(--vcp-color-danger)); }
+html.vcp-global-settings-host .vcp-ui-scope#globalSettingsModal .plugins-settings [data-tone="pending"] { color: var(--vcp-ui-warning, var(--vcp-color-warning)); }
+html.vcp-global-settings-host .vcp-ui-scope#globalSettingsModal .plugins-settings .plugins-switch { position: relative; flex: 0 0 36px; width: 36px; height: 20px; padding: 2px; border: 0; border-radius: 999px; background: var(--dsw-alias-border-l3, var(--plugins-stroke)); }
+html.vcp-global-settings-host .vcp-ui-scope#globalSettingsModal .plugins-switch::after { content: ''; position: absolute; top: 2px; left: 2px; width: 16px; height: 16px; border-radius: 50%; background: var(--dsw-alias-switch-thumb, var(--dsw-alias-bg-layer-1, var(--plugins-fill))); transition: transform 120ms ease; }
+html.vcp-global-settings-host .vcp-ui-scope#globalSettingsModal .plugins-settings .plugins-switch[aria-checked="true"] { background: var(--dsw-alias-brand-primary, var(--plugins-text)); }
+html.vcp-global-settings-host .vcp-ui-scope#globalSettingsModal .plugins-switch[aria-checked="true"]::after { transform: translateX(16px); background: var(--dsw-alias-label-primary-foreground, var(--dsw-alias-bg-layer-1, var(--plugins-fill))); }
+html.vcp-global-settings-host .vcp-ui-scope#globalSettingsModal .plugins-card-details { display: flex; flex-direction: column; gap: 14px; padding: 10px 14px 12px; border-top: .5px solid var(--plugins-stroke); background: var(--dsw-alias-bg-module-platform, var(--vcp-ui-surface-2)); }
+html.vcp-global-settings-host .vcp-ui-scope#globalSettingsModal .plugins-meta { display: grid; grid-template-columns: 76px minmax(0, 1fr); gap: 6px 10px; margin: 0; font-size: var(--vcp-ui-text-sm, 12px); line-height: 18px; }
+html.vcp-global-settings-host .vcp-ui-scope#globalSettingsModal .plugins-meta dt { color: var(--plugins-muted); } html.vcp-global-settings-host .vcp-ui-scope#globalSettingsModal .plugins-meta dd { margin: 0; overflow-wrap: anywhere; }
+html.vcp-global-settings-host .vcp-ui-scope#globalSettingsModal .plugins-config-fields, html.vcp-global-settings-host .vcp-ui-scope#globalSettingsModal .plugins-login { display: flex; flex-direction: column; gap: 12px; }
+html.vcp-global-settings-host .vcp-ui-scope#globalSettingsModal .plugins-field { display: flex; flex-direction: column; gap: 6px; min-width: 0; margin: 0; padding: 0; color: var(--plugins-text); font-weight: 400; }
+html.vcp-global-settings-host .vcp-ui-scope#globalSettingsModal .plugins-field-label { font-size: var(--vcp-ui-text-caption, 13px); line-height: 20px; font-weight: 500; }
+html.vcp-global-settings-host .vcp-ui-scope#globalSettingsModal .plugins-advanced { border-top: .5px solid var(--plugins-stroke); padding-top: 10px; }
+html.vcp-global-settings-host .vcp-ui-scope#globalSettingsModal .plugins-advanced > summary { display: inline-flex; align-items: center; gap: 4px; padding: 0; border: 0; background: transparent; list-style: none; font-size: var(--vcp-ui-text-caption, 13px); line-height: 20px; color: var(--dsw-alias-label-secondary, var(--plugins-muted)); }
+html.vcp-global-settings-host .vcp-ui-scope#globalSettingsModal .plugins-advanced > summary::marker { content: ''; }
+html.vcp-global-settings-host .vcp-ui-scope#globalSettingsModal .plugins-advanced > summary::-webkit-details-marker { display: none; }
+html.vcp-global-settings-host .vcp-ui-scope#globalSettingsModal .plugins-advanced[open] > summary .plugins-chevron { transform: rotate(180deg); }
+html.vcp-global-settings-host .vcp-ui-scope#globalSettingsModal .plugins-advanced[open] > :not(summary) { margin-top: 10px; }
+html.vcp-global-settings-host .vcp-ui-scope#globalSettingsModal .plugins-settings .plugins-code { width: 100%; resize: vertical; padding: 10px; border: .5px solid var(--plugins-stroke); border-radius: var(--dsw-radius-md, 12px); color: var(--plugins-text); background: var(--plugins-fill); font: var(--vcp-ui-text-sm, 12px)/18px var(--vcp-ui-font-mono, monospace); }
+html.vcp-global-settings-host .vcp-ui-scope#globalSettingsModal .plugins-config-actions { display: flex; flex-wrap: wrap; gap: 8px; }
+html.vcp-global-settings-host .vcp-ui-scope#globalSettingsModal .plugins-card-notice { padding: 0 14px 10px; } html.vcp-global-settings-host .vcp-ui-scope#globalSettingsModal .plugins-card-notice:empty { display: none; }
+html.vcp-global-settings-host .vcp-ui-scope#globalSettingsModal .plugins-empty { padding: 28px 12px; text-align: center; }
+
+html.vcp-global-settings-host .vcp-ui-scope#globalSettingsModal .plugins-panels { container-type: inline-size; }
+html.vcp-global-settings-host .vcp-ui-scope#globalSettingsModal .plugins-settings .vcp-uiux-select { min-width: 0; }
+html.vcp-global-settings-host .vcp-ui-scope#globalSettingsModal .plugins-settings .vcp-uiux-select-trigger { min-height: 32px; padding: 5px 8px; border: .5px solid var(--plugins-stroke); border-radius: var(--dsw-radius-md, 12px); font: inherit; background: var(--dsw-alias-bg-layer-1, var(--plugins-fill)); color: var(--plugins-text); }
+html.vcp-global-settings-host .vcp-ui-scope#globalSettingsModal .plugins-settings .vcp-uiux-select-trigger .plugins-chevron { margin-left: auto; }
+@media (prefers-reduced-motion: reduce) { html.vcp-global-settings-host .vcp-ui-scope#globalSettingsModal .plugins-chevron, html.vcp-global-settings-host .vcp-ui-scope#globalSettingsModal .plugins-switch::after { transition: none; } }
+
+/* DSH Switch opts out of the settings superellipse. Stylelint's older CSS data lacks this Chromium property. */
+/* stylelint-disable property-no-unknown */
+html.vcp-global-settings-host .vcp-ui-scope#globalSettingsModal .plugins-settings .plugins-switch, html.vcp-global-settings-host .vcp-ui-scope#globalSettingsModal .plugins-settings .plugins-switch::after { corner-shape: round; }
+/* stylelint-enable property-no-unknown */
diff --git a/styles/ui-system/settings-portal.css b/styles/ui-system/settings-portal.css
index 00e1a952b..139dd4793 100644
--- a/styles/ui-system/settings-portal.css
+++ b/styles/ui-system/settings-portal.css
@@ -33,3 +33,10 @@
 :is(html, html.vcp-global-settings-host) > body :is(.vcp-uiux-menu-portal, .vcp-uiux-primitive-menu) .vcp-uiux-menu-item-label {
     max-width: none !important;
 }
+
+/* DSH Menu.module.css: keyboard focus uses the same row fill as pointer hover. */
+:is(html, html.vcp-global-settings-host) > body .vcp-uiux-primitive-menu .vcp-uiux-menu-item:focus-visible:not(:disabled) {
+    background: var(--dsw-alias-interactive-bg-hover, var(--vcp-ui-fill-1));
+    outline: none !important;
+    box-shadow: none !important;
+}
diff --git a/styles/ui-system/settings.css b/styles/ui-system/settings.css
index 6bd63d4a9..1c18c8031 100644
--- a/styles/ui-system/settings.css
+++ b/styles/ui-system/settings.css
@@ -11,3 +11,4 @@
 @import url('./settings-portal.css');
 @import url('./settings-stream-animation.css');
 @import url('./settings-sidebar.css');
+@import url('./settings-plugins.css');
diff --git a/styles/ui-system/uiux-theme/semantic.css b/styles/ui-system/uiux-theme/semantic.css
index 6e1f24be4..c54aa271c 100644
--- a/styles/ui-system/uiux-theme/semantic.css
+++ b/styles/ui-system/uiux-theme/semantic.css
@@ -7,6 +7,9 @@ body[data-vcp-theme="light"] {
     --dsw-alias-bg-module-platform: rgb(245 246 247);
     --dsw-alias-border-inverted: rgb(0 0 0 / 0);
     --dsw-alias-border-l2: rgb(0 0 0 / 0.1);
+    /* DSH design-platform.css: controls and settings-card stroke roles. */
+    --dsw-alias-border-l3: rgb(0 0 0 / 0.12);
+    --dsw-alias-border-l4: rgb(0 0 0 / 0.16);
     --dsw-alias-label-primary: rgb(15 17 21);
     --dsw-alias-label-tertiary: rgb(129 133 140);
     --dsw-alias-interactive-bg-hover: rgb(38 49 72 / 0.06);
@@ -20,6 +23,8 @@ body[data-vcp-theme="dark"] {
     --dsw-alias-bg-module-platform: rgb(53 54 56);
     --dsw-alias-border-inverted: rgb(255 255 255 / 0.06);
     --dsw-alias-border-l2: rgb(255 255 255 / 0.12);
+    --dsw-alias-border-l3: rgb(255 255 255 / 0.16);
+    --dsw-alias-border-l4: rgb(255 255 255 / 0.2);
     --dsw-alias-label-primary: rgb(249 250 251);
     --dsw-alias-label-tertiary: rgb(173 178 184);
     --dsw-alias-interactive-bg-hover: rgb(255 255 255 / 0.08);
@@ -36,6 +41,8 @@ body.dark-theme {
     --dsw-alias-bg-module-platform: rgb(53 54 56);
     --dsw-alias-border-inverted: rgb(255 255 255 / 0.06);
     --dsw-alias-border-l2: rgb(255 255 255 / 0.12);
+    --dsw-alias-border-l3: rgb(255 255 255 / 0.16);
+    --dsw-alias-border-l4: rgb(255 255 255 / 0.2);
     --dsw-alias-label-primary: rgb(249 250 251);
     --dsw-alias-label-tertiary: rgb(173 178 184);
     --dsw-alias-interactive-bg-hover: rgb(255 255 255 / 0.08);
diff --git a/tests/helpers/trusted-main-sender.cjs b/tests/helpers/trusted-main-sender.cjs
new file mode 100644
index 000000000..81945488e
--- /dev/null
+++ b/tests/helpers/trusted-main-sender.cjs
@@ -0,0 +1,14 @@
+'use strict';
+const path = require('node:path');
+const { pathToFileURL } = require('node:url');
+const { EventEmitter } = require('node:events');
+function createTrustedMainSender(page = 'main.html') {
+    const sender = new EventEmitter();
+    const url = pathToFileURL(path.resolve(__dirname, '../..', page)).href;
+    sender.mainFrame = { url, detached: false };
+    sender.getURL = () => url;
+    sender.getType = () => 'window';
+    sender.isDestroyed = () => false;
+    return { sender, event: { sender, senderFrame: sender.mainFrame }, mainWindow: { webContents: sender } };
+}
+module.exports = { createTrustedMainSender };
diff --git a/tests/plugin-settings-handlers.test.js b/tests/plugin-settings-handlers.test.js
new file mode 100644
index 000000000..d188a545e
--- /dev/null
+++ b/tests/plugin-settings-handlers.test.js
@@ -0,0 +1,35 @@
+'use strict';
+const test = require('node:test');
+const assert = require('node:assert/strict');
+const Module = require('node:module');
+const { EventEmitter } = require('node:events');
+const { createTrustedMainSender } = require('./helpers/trusted-main-sender.cjs');
+const handlers = new Map();
+let disconnects = 0, reads = 0;
+const originalLoad = Module._load;
+Module._load = function(request, parent, isMain) {
+    if (request === 'electron') return { ipcMain: { handle: (channel, fn) => handlers.set(channel, fn) } };
+    if (request === '../services/pluginSettingsService' && parent.filename.endsWith('pluginSettingsHandlers.js')) return { createPluginSettingsService: () => ({ list: async () => { reads++; return []; }, disconnect: () => { disconnects++; } }) };
+    return originalLoad.call(this, request, parent, isMain);
+};
+const { initialize } = require('../modules/ipc/pluginSettingsHandlers');
+Module._load = originalLoad;
+test('only the application top-level window can read config or issue plugin mutations', async () => {
+    const trusted = createTrustedMainSender();
+    Object.setPrototypeOf(trusted.mainWindow, EventEmitter.prototype);
+    EventEmitter.call(trusted.mainWindow);
+    initialize({ mainWindow: trusted.mainWindow, settingsManager: {} });
+    const invalid = [createTrustedMainSender('PluginManagerModules/plugin-manager.html').event,
+        createTrustedMainSender().event,
+        { sender: trusted.sender, senderFrame: { url: trusted.sender.getURL(), detached: false } },
+        { senderFrame: { url: 'https://example.org/' } }];
+    for (const [channel, handler] of handlers) {
+        for (const event of invalid) assert.equal((await handler(event, { category: 'local' })).success, false, channel);
+    }
+    assert.equal(reads, 0);
+    assert.equal((await handlers.get('plugin-settings:list')(trusted.event, { category: 'local' })).success, true);
+    assert.equal(reads, 1);
+    trusted.sender.emit('did-start-navigation', {}, 'https://example.org', false, false); assert.equal(disconnects, 0);
+    trusted.sender.emit('did-start-navigation', {}, trusted.sender.getURL(), false, true); assert.equal(disconnects, 1);
+    trusted.mainWindow.emit('closed'); assert.equal(disconnects, 2);
+});
diff --git a/tests/plugin-settings-service.test.js b/tests/plugin-settings-service.test.js
new file mode 100644
index 000000000..a002dd891
--- /dev/null
+++ b/tests/plugin-settings-service.test.js
@@ -0,0 +1,97 @@
+'use strict';
+const test = require('node:test');
+const assert = require('node:assert/strict');
+const fs = require('node:fs/promises');
+const os = require('node:os');
+const path = require('node:path');
+const { createPluginSettingsService } = require('../modules/services/pluginSettingsService');
+
+async function fixture(t) {
+    const root = await fs.mkdtemp(path.join(os.tmpdir(), 'vcp-plugin-settings-'));
+    t.after(() => fs.rm(root, { recursive: true, force: true }));
+    const dir = path.join(root, 'VCPDistributedServer/Plugin/Fixture');
+    await fs.mkdir(dir, { recursive: true });
+    const manifest = { name: 'Fixture', pluginType: 'synchronous', entryPoint: { script: 'fixture.js' }, configSchema: { COUNT: { type: 'integer', default: 1 } } };
+    await fs.writeFile(path.join(dir, 'plugin-manifest.json'), JSON.stringify(manifest));
+    await fs.writeFile(path.join(dir, 'config.env'), '# preserved\nCOUNT=2\nTOKEN=private-secret\n');
+    let runtime = {};
+    const service = createPluginSettingsService({ root, readSettings: () => ({ vcpServerUrl: 'http://localhost:6005/v1/chat/completions' }), getRuntime: () => runtime });
+    return { root, dir, service, manifest, setRuntime: value => { runtime = value; } };
+}
+test('inventory strips config secrets and distinguishes enabled from actual loaded state', async t => {
+    const f = await fixture(t);
+    let inventory = await f.service.list('local');
+    assert.equal(inventory[0].enabled, true); assert.equal(inventory[0].runtime, 'unloaded');
+    assert.ok(!JSON.stringify(inventory).includes('private-secret'));
+    f.setRuntime({ plugins: new Map([['Fixture', { ...f.manifest, basePath: f.dir, pluginSpecificEnvConfig: { COUNT: '2', TOKEN: 'private-secret' } }]]), connected: true });
+    inventory = await f.service.list('local'); assert.equal(inventory[0].runtime, 'loaded');
+    const data = await f.service.detail('local', 'Fixture');
+    await f.service.save({ category: 'local', id: 'Fixture', revision: data.revision, config: 'COUNT=3' });
+    inventory = await f.service.list('local'); assert.equal(inventory[0].runtime, 'restart');
+    assert.equal(inventory[0].pendingRestart, true);
+});
+test('toggle is reversible, stale edits cannot overwrite changes, unrelated keys persist', async t => {
+    const { dir, service } = await fixture(t);
+    const old = await service.detail('local', 'Fixture');
+    await service.toggle({ category: 'local', id: 'Fixture', enabled: false });
+    assert.equal((await service.list('local'))[0].enabled, false);
+    await assert.rejects(service.save({ category: 'local', id: 'Fixture', revision: old.revision, config: 'COUNT=4' }), /其他窗口/);
+    await service.toggle({ category: 'local', id: 'Fixture', enabled: true });
+    assert.equal((await service.list('local'))[0].enabled, true);
+    assert.equal(await fs.readFile(path.join(dir, 'config.env'), 'utf8'), old.config);
+    await assert.rejects(service.detail('local', '../Fixture'), /无效/);
+    await assert.rejects(service.toggle({ category: 'backend', id: 'Fixture', enabled: 'true' }), /布尔/);
+});
+test('JSON-config plugins save the actual plugin-config.json and reject malformed JSON', async t => {
+    const { dir, service } = await fixture(t);
+    await fs.writeFile(path.join(dir, 'plugin-config.json'), '{"IgnoreApps":["safe"]}');
+    const data = await service.detail('local', 'Fixture'); assert.equal(data.configFormat, 'json');
+    await assert.rejects(service.save({ category: 'local', id: 'Fixture', revision: data.revision, config: '{broken' }), /有效的 JSON/);
+    assert.equal(await fs.readFile(path.join(dir, 'plugin-config.json'), 'utf8'), data.config);
+    await service.save({ category: 'local', id: 'Fixture', revision: data.revision, config: '{"IgnoreApps":["changed"]}' });
+    assert.ok((await fs.readFile(path.join(dir, 'config.env'), 'utf8')).includes('private-secret'));
+    assert.ok((await fs.readFile(path.join(dir, 'plugin-config.json'), 'utf8')).includes('changed'));
+});
+test('backend auth is session scoped, follows settings origin, distributed rows are read-only', async () => {
+    let origin = 'http://localhost:6005/v1/chat/completions';
+    const requests = [];
+    let enabled = true;
+    const service = createPluginSettingsService({ root: '', readSettings: () => ({ vcpServerUrl: origin }), fetchImpl: async (url, options) => {
+        requests.push({ url, options });
+        if (url.endsWith('/toggle')) { enabled = JSON.parse(options.body).enable; return { ok: true, json: async () => ({}) }; }
+        if (url.endsWith('/config')) return { ok: true, json: async () => ({}) };
+        return { ok: true, json: async () => [{ name: 'Backend', enabled, manifest: { name: 'Backend', pluginType: 'synchronous' }, configEnvContent: 'API_KEY=backend-secret' }, { name: 'Remote', enabled: true, isDistributed: true, manifest: { name: 'Remote' } }] };
+    } });
+    await assert.rejects(service.list('backend'), /登录/);
+    await service.connect({ username: 'admin', password: 'password' });
+    assert.equal(requests[0].url, 'http://localhost:6005/admin_api/plugins'); assert.equal(requests[0].options.redirect, 'error');
+    const inventory = await service.list('backend'); assert.ok(!JSON.stringify(inventory).includes('backend-secret'));
+    await assert.rejects(service.toggle({ category: 'backend', id: 'Remote', enabled: false }), /其他节点/);
+    await service.toggle({ category: 'backend', id: 'Backend', enabled: false }); assert.equal((await service.list('backend'))[0].enabled, false);
+    const detail = await service.detail('backend', 'Backend');
+    await service.save({ category: 'backend', id: 'Backend', revision: detail.revision, config: 'API_KEY=new' });
+    origin = 'http://localhost:6006'; await assert.rejects(service.list('backend'), /当前/);
+    assert.ok(!requests.some(r => r.url.includes('6006')));
+    await service.connect({ username: 'admin', password: 'password' });
+    await assert.rejects(service.save({ category: 'backend', id: 'Backend', revision: detail.revision, config: 'API_KEY=old-server-draft' }), /其他窗口/);
+    assert.ok(!requests.some(r => r.url.includes('6006') && r.url.endsWith('/config')));
+});
+
+test('reverting a local toggle clears restart state and stale inventory cannot toggle another revision', async t => {
+    const { service } = await fixture(t); const old = (await service.list('local'))[0];
+    assert.equal((await service.toggle({ category: 'local', id: 'Fixture', enabled: false, revision: old.revision })).requiresRestart, true);
+    await assert.rejects(service.toggle({ category: 'local', id: 'Fixture', enabled: true, revision: old.revision }), /其他窗口/);
+    assert.equal((await service.toggle({ category: 'local', id: 'Fixture', enabled: true })).requiresRestart, false);
+    assert.equal((await service.list('local'))[0].pendingRestart, false);
+});
+
+test('empty JSON remains JSON for repair; null manifests cannot crash inventory; Unicode folders work', async t => {
+    const { service, dir } = await fixture(t);
+    await fs.writeFile(path.join(dir, 'plugin-config.json'), '');
+    const detail = await service.detail('local', 'Fixture'); assert.equal(detail.configFormat, 'json'); assert.equal(detail.config, '');
+    await service.save({ category: 'local', id: 'Fixture', revision: detail.revision, config: '{}' });
+    assert.equal(await fs.readFile(path.join(dir, 'plugin-config.json'), 'utf8'), '{}');
+    await fs.writeFile(path.join(dir, 'plugin-manifest.json'), 'null'); assert.match((await service.list('local'))[0].error, /JSON 对象/);
+    const unicode = path.join(path.dirname(dir), '中文工具'); await fs.rename(dir, unicode);
+    assert.equal((await service.detail('local', '中文工具')).id, '中文工具');
+});
diff --git a/tests/plugin-settings-ui.test.mjs b/tests/plugin-settings-ui.test.mjs
new file mode 100644
index 000000000..fab1b84b4
--- /dev/null
+++ b/tests/plugin-settings-ui.test.mjs
@@ -0,0 +1,201 @@
+import test from 'node:test';
+import assert from 'node:assert/strict';
+import { JSDOM } from 'jsdom';
+import dotenv from 'dotenv';
+import { mountPluginsSettings } from '../modules/ui-system/settings/plugins-settings.js';
+import { setEnvValue, envEntries, runtimeLabel, runtimeBadge } from '../modules/ui-system/settings/plugins-settings-model.js';
+import { mountGlobalTextInputs } from '../modules/ui-system/settings/global-input-upgrades.js';
+import { mountSelect } from '../modules/uiux/generated/primitives/select.js';
+import { mountButton } from '../modules/uiux/generated/primitives/button.js';
+
+const tick = () => new Promise(resolve => setTimeout(resolve, 0));
+function fixture() {
+    const dom = new JSDOM('<form><div class="settings-section"><div data-vcp-plugin-settings class="plugins-settings"></div></div></form>');
+    const host = dom.window.document.querySelector('.plugins-settings');
+    const calls = [];
+    const item = { id: 'Fixture', name: 'Fixture', displayName: '测试插件', description: '绘制图片和附件', enabled: true, runtime: 'loaded', connected: true };
+    const api = {
+        async pluginSettingsList(data) { calls.push(['list', data]); return data.category === 'backend' ? { success: false, error: '请登录管理端' } : { success: true, data: [{ ...item, category: data.category }] }; },
+        async pluginSettingsDetail(data) { return { success: true, data: { ...item, ...data, revision: 'version1', config: '# unknown\nCOUNT=2\nAPI_KEY=secret\n', rawManifest: '{}', configSchema: { COUNT: { type: 'integer' }, API_KEY: { type: 'string' } } } }; },
+        async pluginSettingsSave(data) { calls.push(['save', data]); return { success: false, error: '插件配置已被其他窗口修改' }; },
+        async pluginSettingsToggle(data) { calls.push(['toggle', data]); return { success: true, data: { requiresRestart: true } }; },
+    };
+    return { dom, host, calls, api, controller: mountPluginsSettings(host, { api }) };
+}
+test('dotenv values preserve Windows paths, comments, multiline text and unknown secrets', () => {
+    const original = '# Keep me\nOTHER=untouched\nCOUNT=2\nCOUNT=3\n';
+    for (const value of ['C:\\new\\repo', 'quoted "path"', 'line1\nline2', 'a#b', "it's okay"]) {
+        const changed = setEnvValue(original, 'COUNT', value);
+        assert.equal(dotenv.parse(changed).COUNT, value); assert.equal(envEntries(changed).find(v => v.key === 'COUNT').value, value);
+        assert.ok(changed.includes('# Keep me')); assert.ok(changed.includes('OTHER=untouched'));
+        assert.equal(envEntries(changed).filter(v => v.key === 'COUNT').length, 1);
+    }
+    assert.ok(setEnvValue('COUNT=2 # inline comment\n', 'COUNT', '4').includes(' # inline comment'));
+});
+test('global text-input enhancement leaves independent plugin controls with their owner', () => {
+    const f = fixture();
+    const input = f.dom.window.document.createElement('input'); input.type = 'text'; f.host.append(input);
+    let mounts = 0;
+    mountGlobalTextInputs(f.host.closest('form'), { mountInput() { mounts++; } }, { own() {} });
+    assert.equal(mounts, 0); f.controller.dispose();
+});
+test('lazy tabs, search, draft retention, password masking and failed-save retry', async () => {
+    const f = fixture(); assert.equal(f.calls.length, 0);
+    f.controller.select('local'); await tick();
+    const panel = f.host.querySelector('#plugins-panel-local');
+    panel.querySelector('.plugins-card-expand').click(); await tick();
+    const count = panel.querySelector('[data-config-key="COUNT"]'); count.value = '8'; count.dispatchEvent(new f.dom.window.Event('input', { bubbles: true }));
+    assert.equal(panel.querySelector('[data-config-key="API_KEY"]').type, 'password');
+    let globalInputs = 0; f.host.closest('form').addEventListener('input', () => globalInputs++);
+    count.dispatchEvent(new f.dom.window.Event('input', { bubbles: true })); assert.equal(globalInputs, 0);
+    f.controller.select('renderer'); await tick(); f.controller.select('local'); assert.equal(count.value, '8');
+    panel.querySelector('.plugins-switch').click(); await tick(); assert.ok(!f.calls.some(c => c[0] === 'toggle'));
+    panel.querySelector('.plugins-button-primary').click(); await tick();
+    assert.equal(dotenv.parse(f.calls.find(c => c[0] === 'save')[1].config).COUNT, '8');
+    assert.ok(panel.textContent.includes('其他窗口')); assert.equal(count.value, '8'); assert.equal(panel.querySelector('.plugins-button-primary').disabled, false);
+    const search = panel.querySelector('input[type="search"]'); search.value = 'no-result'; search.dispatchEvent(new f.dom.window.Event('input', { bubbles: true }));
+    assert.equal(panel.querySelector('.plugins-card').hidden, true); assert.equal(panel.querySelector('.plugins-empty').hidden, false);
+    f.controller.select('backend'); await tick(); assert.equal(f.host.querySelector('.plugins-login').hidden, true); // renderer panel's empty login slot
+    assert.equal(f.host.querySelector('#plugins-panel-backend .plugins-login').hidden, false);
+    f.controller.dispose(); assert.equal(f.host.children.length, 0);
+});
+test('disposed mount cannot apply a late inventory response; runtime does not equate enable with success', async () => {
+    const f = fixture(); let resolve;
+    f.api.pluginSettingsList = () => new Promise(r => { resolve = r; });
+    f.controller.select('local'); f.controller.dispose(); resolve({ success: true, data: [] }); await tick();
+    assert.equal(f.host.children.length, 0);
+    assert.equal(runtimeLabel({ category: 'renderer', enabled: true }).text, '未报告加载状态');
+    assert.equal(runtimeLabel({ category: 'backend', enabled: true }).text, '后端已注册');
+    assert.equal(runtimeLabel({ category: 'local', enabled: true, runtime: 'unloaded' }).text, '本机服务未加载');
+});
+
+test('refresh reloads clean details, preserves drafts, and discard recovers from a stale revision', async () => {
+    const f = fixture(); let version = 1;
+    const original = f.api.pluginSettingsDetail;
+    f.api.pluginSettingsDetail = async data => {
+        const result = await original(data); result.data.revision = `version${version}`;
+        result.data.config = `COUNT=${version}\n`; return result;
+    };
+    f.api.pluginSettingsSave = async data => { f.calls.push(['save', data]); return { success: data.revision === `version${version}`, data: { requiresRestart: true }, error: '配置已被其他窗口修改' }; };
+    f.controller.select('local'); await tick();
+    const panel = f.host.querySelector('#plugins-panel-local'); panel.querySelector('.plugins-card-expand').click(); await tick();
+    version = 2; await f.controller.refresh();
+    assert.equal(panel.querySelector('[data-config-key="COUNT"]').value, '2');
+    const edit = value => { const el = panel.querySelector('[data-config-key="COUNT"]'); el.value = value; el.dispatchEvent(new f.dom.window.Event('input', { bubbles: true })); };
+    edit('9'); version = 3; await f.controller.refresh(); assert.equal(panel.querySelector('[data-config-key="COUNT"]').value, '9');
+    panel.querySelector('.plugins-button-primary').click(); await tick(); assert.ok(panel.textContent.includes('其他窗口'));
+    [...panel.querySelectorAll('button')].find(el => el.textContent === '放弃更改').click(); await tick();
+    assert.equal(panel.querySelector('[data-config-key="COUNT"]').value, '3');
+    edit('8'); panel.querySelector('.plugins-button-primary').click(); await tick(); await tick();
+    assert.equal(f.calls.filter(c => c[0] === 'save').at(-1)[1].revision, 'version3');
+    assert.ok(panel.textContent.includes('已保存')); f.controller.dispose();
+});
+
+test('late detail completion after removal does not resurrect a card; removal retains an unsaved draft', async () => {
+    const f = fixture(); f.controller.select('local'); await tick();
+    const panel = f.host.querySelector('#plugins-panel-local'); let resolve;
+    f.api.pluginSettingsDetail = () => new Promise(r => { resolve = r; });
+    panel.querySelector('.plugins-card-expand').click();
+    f.api.pluginSettingsList = async () => ({ success: true, data: [] });
+    await f.controller.refresh(); resolve({ success: true, data: {} }); await tick(); assert.equal(panel.querySelector('.plugins-card'), null); f.controller.dispose();
+    const g = fixture(); g.controller.select('local'); await tick();
+    const other = g.host.querySelector('#plugins-panel-local'); other.querySelector('.plugins-card-expand').click(); await tick();
+    const count = other.querySelector('[data-config-key="COUNT"]'); count.value = '19'; count.dispatchEvent(new g.dom.window.Event('input', { bubbles: true }));
+    g.api.pluginSettingsList = async () => ({ success: true, data: [] }); await g.controller.refresh();
+    assert.equal(count.value, '19'); assert.ok(other.textContent.includes('未保存的更改已保留')); assert.equal(other.querySelector('.plugins-button-primary').disabled, true); g.controller.dispose();
+});
+
+test('shared picker changes config, supports keyboard, syncs raw edits, closes on tab switch and disposal', async t => {
+    const f = fixture(); f.controller.dispose();
+    const oldWindow = globalThis.window, oldDocument = globalThis.document, oldElement = globalThis.Element;
+    globalThis.window = f.dom.window; globalThis.document = f.dom.window.document; globalThis.Element = f.dom.window.Element;
+    t.after(() => { globalThis.window = oldWindow; globalThis.document = oldDocument; globalThis.Element = oldElement; f.dom.window.close(); });
+    const detail = f.api.pluginSettingsDetail;
+    f.api.pluginSettingsDetail = async data => { const result = await detail(data); result.data.configSchema.ENABLED = { type: 'boolean' }; return result; };
+    const controller = mountPluginsSettings(f.host, { api: f.api, ui: { mountSelect, mountButton } });
+    controller.select('local'); await tick();
+    const panel = f.host.querySelector('#plugins-panel-local'); panel.querySelector('.plugins-card-expand').click(); await tick();
+    const trigger = panel.querySelector('.vcp-uiux-select-trigger'); trigger.click();
+    const menu = f.dom.window.document.querySelector('[role="menu"]'); assert.equal(menu.hidden, false);
+    const items = [...menu.querySelectorAll('[role="menuitem"]')]; items[0].focus();
+    items[0].dispatchEvent(new f.dom.window.KeyboardEvent('keydown', { key: 'End', bubbles: true })); assert.equal(f.dom.window.document.activeElement, items.at(-1));
+    items[1].click(); assert.equal(dotenv.parse(panel.querySelector('.plugins-code').value).ENABLED, 'true');
+    const raw = panel.querySelector('.plugins-code'); raw.value += 'ENABLED=false\n'; raw.dispatchEvent(new f.dom.window.Event('input', { bubbles: true }));
+    assert.ok(trigger.textContent.includes('关闭')); trigger.click(); controller.select('renderer'); assert.equal(f.dom.window.document.querySelector('[role="menu"]'), null);
+    controller.select('local'); trigger.click(); controller.dispose(); assert.equal(f.dom.window.document.querySelector('[role="menu"]'), null);
+});
+
+test('multiline config remains editable without stripping newlines; disabled renderer is not a load failure', async () => {
+    const f = fixture(); const original = f.api.pluginSettingsDetail;
+    f.api.pluginSettingsDetail = async data => { const result = await original(data); result.data.config = "TEXT='line1\nline2'\n"; result.data.configSchema = { TEXT: { type: 'string' } }; return result; };
+    f.controller.select('local'); await tick(); const panel = f.host.querySelector('#plugins-panel-local'); panel.querySelector('.plugins-card-expand').click(); await tick();
+    const control = panel.querySelector('[data-config-key="TEXT"]'); assert.equal(control.tagName, 'TEXTAREA'); assert.equal(control.value, 'line1\nline2');
+    assert.equal(runtimeLabel({ category: 'renderer', enabled: false, name: 'Fixture' }, { getLoadState: () => ({ loaded: false }) }).text, '已停用'); f.controller.dispose();
+});
+
+test('closing and reopening settings retains drafts and their original revision; reverting fields clears dirty state', async () => {
+    const f = fixture(); f.controller.select('local'); await tick();
+    const panel = f.host.querySelector('#plugins-panel-local'); panel.querySelector('.plugins-card-expand').click(); await tick();
+    const edit = value => { const el = f.host.querySelector('#plugins-panel-local [data-config-key="COUNT"]'); el.value = value; el.dispatchEvent(new f.dom.window.Event('input', { bubbles: true })); };
+    edit('8'); edit('2'); assert.equal(panel.querySelector('.plugins-button-primary').disabled, true);
+    edit('42'); f.controller.dispose();
+    const original = f.api.pluginSettingsDetail;
+    f.api.pluginSettingsDetail = async data => { const result = await original(data); result.data.revision = 'version2'; return result; };
+    const controller = mountPluginsSettings(f.host, { api: f.api }); controller.select('local'); await tick();
+    assert.equal(f.host.querySelector('#plugins-panel-local [data-config-key="COUNT"]').value, '42');
+    f.host.querySelector('#plugins-panel-local .plugins-button-primary').click(); await tick();
+    assert.equal(f.calls.find(c => c[0] === 'save')[1].revision, 'version1'); controller.dispose();
+});
+
+test('settled rows omit redundant markers while runtime facts and exceptional states remain available', async () => {
+    const f = fixture();
+    const list = f.api.pluginSettingsList;
+    f.api.pluginSettingsList = async data => { const result = await list(data); result.data.push({ ...result.data[0], id: 'Second', description: '' }); return result; };
+    f.controller.select('local'); await tick();
+    const panel = f.host.querySelector('#plugins-panel-local');
+    assert.equal(panel.querySelectorAll('.plugins-connection').length, 1);
+    assert.equal(panel.querySelector('.plugins-connection').textContent, '节点已连接');
+    for (const card of panel.querySelectorAll('.plugins-card')) {
+        assert.equal(card.querySelector('.plugins-runtime').hidden, true);
+        assert.equal(card.querySelector('.plugins-runtime').textContent, '');
+        assert.match(card.querySelector('.plugins-card-expand').getAttribute('aria-label'), /已加载/);
+    }
+    assert.equal(panel.querySelector('[data-plugin-id="Second"] .plugins-card-description').hidden, true);
+    panel.querySelector('.plugins-card-expand').click(); await tick();
+    assert.equal(panel.querySelector('.plugins-runtime-fact').textContent, '已加载');
+    assert.equal(panel.querySelector(':scope > .plugins-notice').textContent, '');
+    assert.equal(runtimeBadge({ category: 'local', enabled: false }).text, '');
+    assert.equal(runtimeBadge({ category: 'backend', enabled: true }).text, '');
+    assert.equal(runtimeBadge({ category: 'local', enabled: true, runtime: 'loaded', connected: false }).text, '');
+    assert.equal(runtimeBadge({ category: 'local', enabled: true, pendingRestart: true }).text, '待重启');
+    assert.equal(runtimeBadge({ category: 'local', enabled: true, runtime: 'unloaded' }).text, '未加载');
+    assert.equal(runtimeBadge({ category: 'local', error: 'bad manifest' }).tone, 'error');
+    assert.equal(runtimeBadge({ category: 'renderer', enabled: true }).text, '状态未知');
+    assert.equal(runtimeBadge({ category: 'renderer', enabled: true, name: 'Fixture' }, { getLoadState: () => ({ loaded: false }) }).tone, 'error');
+    assert.equal(runtimeLabel({ category: 'renderer', enabled: true, name: 'Fixture' }, { getLoadState: () => ({ loaded: false }) }).text, '加载失败');
+    assert.equal(runtimeBadge({ category: 'backend', enabled: true, readOnly: true }).text, '只读');
+    f.controller.dispose();
+});
+
+test('exception badges stay visible and a disconnected node is reported once at panel level', async () => {
+    const f = fixture(); let item = { id: 'Fixture', name: 'Fixture', enabled: true, runtime: 'unloaded', connected: false, category: 'local' };
+    f.api.pluginSettingsList = async () => ({ success: true, data: [{ ...item }] });
+    f.controller.select('local'); await tick();
+    const panel = f.host.querySelector('#plugins-panel-local');
+    const badge = panel.querySelector('.plugins-runtime');
+    assert.equal(badge.hidden, false); assert.equal(badge.textContent, '未加载');
+    assert.equal(panel.querySelector('.plugins-connection').textContent, '节点未连接');
+    assert.equal(panel.querySelector('.plugins-connection').dataset.tone, 'pending');
+    item.runtime = 'loaded'; item.pendingRestart = true; await f.controller.refresh();
+    assert.equal(badge.hidden, false); assert.equal(badge.textContent, '待重启');
+    item.pendingRestart = false; item.error = 'Manifest 必须是有效的 JSON 对象'; await f.controller.refresh();
+    assert.equal(badge.hidden, false); assert.equal(badge.dataset.tone, 'error');
+    assert.equal(panel.querySelector('.plugins-switch').disabled, true);
+    item.error = ''; item.readOnly = true; await f.controller.refresh();
+    const originalDetail = f.api.pluginSettingsDetail;
+    f.api.pluginSettingsDetail = async data => { const result = await originalDetail(data); result.data.readOnly = true; result.data.configSchema = {}; return result; };
+    panel.querySelector('.plugins-card-expand').click(); await tick();
+    assert.equal(panel.querySelector('.plugins-config-actions').hidden, true);
+    assert.equal(panel.querySelector('.plugins-config-fields'), null);
+    f.controller.dispose();
+});
diff --git a/tests/settings-schema-render.test.mjs b/tests/settings-schema-render.test.mjs
index 840b13799..a9775ba30 100644
--- a/tests/settings-schema-render.test.mjs
+++ b/tests/settings-schema-render.test.mjs
@@ -44,7 +44,7 @@ function renderIntoForm(sectionDescriptor) {
 
 test('九分区全部登记且 schema 编译无异常', () => {
     const keys = schemaSurfaceSections().map(s => s.key);
-    assert.deepEqual(keys, ['user-identity', 'server-connection', 'jev-service', 'appearance-settings', 'render-settings',
+    assert.deepEqual(keys, ['user-identity', 'server-connection', 'jev-service', 'appearance-settings', 'plugins-tools', 'render-settings',
         'selection-assistant', 'voice-settings', 'advanced-features', 'workspace-management', 'quick-actions']);
     for (const sectionDescriptor of schemaSurfaceSections()) {
         const nodes = renderSchemaSection(sectionDescriptor, doc);
diff --git a/tests/uiux-settings-css-parts.test.mjs b/tests/uiux-settings-css-parts.test.mjs
index f26bb3f08..b145add53 100644
--- a/tests/uiux-settings-css-parts.test.mjs
+++ b/tests/uiux-settings-css-parts.test.mjs
@@ -20,6 +20,7 @@ const ENTRY_PARTS = [
     'settings-portal.css',      // body-level portal stacking override
     'settings-stream-animation.css', // upstream streaming-animation settings + live preview
     'settings-sidebar.css',     // schema-driven Agent/Group item-settings surface
+    'settings-plugins.css',     // independent plugin configuration cards
 ];
 
 const read = name => fs.readFileSync(path.join(styleDir, name), 'utf8');