diff --git a/app/main_server.py b/app/main_server.py
index ff6db93b04..ad280f20a3 100644
--- a/app/main_server.py
+++ b/app/main_server.py
@@ -1491,6 +1491,7 @@ async def get_response(self, path, scope):
 from main_routers.workshop_router import router as workshop_router # noqa
 from main_routers.cookies_login_router import router as cookies_login_router # noqa
 from main_routers.game_router import router as game_router # noqa
+from main_routers.actions_proxy_router import router as actions_proxy_router # noqa
 from main_routers.shared_state import init_shared_state # noqa
 
 
@@ -1541,6 +1542,7 @@ async def beacon_shutdown():
 app.include_router(galgame_router)
 app.include_router(game_router)
 app.include_router(cookies_login_router) # Cookies登录相关路由，放在最后以避免与其他API路由冲突
+app.include_router(actions_proxy_router)  # Quick Actions Panel: 代理到插件服务器
 app.include_router(pages_router)  # 兜底路由需最后挂载
 
 # 后台预加载任务
diff --git a/frontend/react-neko-chat/src/App.test.tsx b/frontend/react-neko-chat/src/App.test.tsx
index 0531fb27b4..b9b85ae479 100644
--- a/frontend/react-neko-chat/src/App.test.tsx
+++ b/frontend/react-neko-chat/src/App.test.tsx
@@ -1,7 +1,28 @@
 import { act, fireEvent, render, screen } from '@testing-library/react';
-import App from './App';
+import App, { resolveQuickActionNavigationTarget } from './App';
 import { parseChatMessage } from './message-schema';
 
+describe('resolveQuickActionNavigationTarget', () => {
+  it('rewrites loopback plugin UI links to the current remote host', () => {
+    expect(resolveQuickActionNavigationTarget(
+      'http://127.0.0.1:48916/plugin/demo/ui/',
+      { hostname: '192.168.1.20' },
+    )).toBe('http://192.168.1.20:48916/plugin/demo/ui/');
+  });
+
+  it('keeps local and non-plugin quick action links unchanged', () => {
+    expect(resolveQuickActionNavigationTarget(
+      'http://127.0.0.1:48916/plugin/demo/ui/',
+      { hostname: 'localhost' },
+    )).toBe('http://127.0.0.1:48916/plugin/demo/ui/');
+    expect(resolveQuickActionNavigationTarget(
+      'http://127.0.0.1:48916/admin',
+      { hostname: '192.168.1.20' },
+    )).toBe('http://127.0.0.1:48916/admin');
+    expect(resolveQuickActionNavigationTarget('/plugin/demo/ui/')).toBe('/plugin/demo/ui/');
+  });
+});
+
 describe('App', () => {
   it('renders the empty state when there are no messages', () => {
     render(<App />);
diff --git a/frontend/react-neko-chat/src/App.tsx b/frontend/react-neko-chat/src/App.tsx
index a7fca5235b..11957164df 100644
--- a/frontend/react-neko-chat/src/App.tsx
+++ b/frontend/react-neko-chat/src/App.tsx
@@ -14,6 +14,7 @@ import {
   type ChoicePrompt,
   type ChoicePromptSource,
 } from './message-schema';
+import CommandPalette, { type CommandItem, type UserPreferences } from './CommandPalette';
 
 export type ChatWindowProps = ChatWindowSchemaProps & {
   onMessageAction?: (message: ChatMessage, action: MessageAction) => void;
@@ -27,6 +28,12 @@ export type ChatWindowProps = ChatWindowSchemaProps & {
   onTranslateToggle?: () => void;
   onGalgameModeToggle?: () => void;
   onGalgameOptionSelect?: (option: GalgameOption) => void;
+  quickActions?: CommandItem[];
+  quickActionsPreferences?: UserPreferences;
+  quickActionsLoading?: boolean;
+  onQuickActionExecute?: (actionId: string, value: unknown) => Promise<CommandItem | null>;
+  onQuickActionsRequest?: () => void;
+  onQuickActionsPreferencesChange?: (prefs: UserPreferences) => void;
   // Generic ChoicePrompt（mini-game invite 等通用三选项框架）。
   // galgame mode 现有路径继续走 galgameOptions / onGalgameOptionSelect（BC）；
   // 本框架先只承载 mini_game_invite，未来可把 galgame 也迁过来。
@@ -107,6 +114,45 @@ const hammerOverlayTransformOrigin = {
   y: 118,
 };
 
+type NavigationLocation = Pick<Location, 'hostname'>;
+
+function isLoopbackHostname(hostname: string): boolean {
+  const normalized = hostname.trim().toLowerCase().replace(/^\[|\]$/g, '');
+  if (normalized === 'localhost' || normalized === '::1' || normalized === '0:0:0:0:0:0:0:1') {
+    return true;
+  }
+  return /^127(?:\.\d{1,3}){3}$/.test(normalized);
+}
+
+export function resolveQuickActionNavigationTarget(
+  target: string,
+  currentLocation: NavigationLocation = window.location,
+): string | null {
+  if (!target) return null;
+  if (target.startsWith('//')) return null;
+  const isRelative = target.startsWith('/') || target.startsWith('./') || target.startsWith('../');
+  const isHttp = /^https?:\/\//i.test(target);
+  if (!isRelative && !isHttp) return null;
+  if (!isHttp) return target;
+
+  try {
+    const targetUrl = new URL(target);
+    const currentHostname = currentLocation.hostname;
+    if (
+      targetUrl.pathname.startsWith('/plugin/')
+      && currentHostname
+      && isLoopbackHostname(targetUrl.hostname)
+      && !isLoopbackHostname(currentHostname)
+    ) {
+      targetUrl.hostname = currentHostname;
+      return targetUrl.toString();
+    }
+    return target;
+  } catch {
+    return null;
+  }
+}
+
 const avatarToolSoundPaths = {
   lollipopBite: '/static/sounds/avatar-tools/lollipop-bite.mp3',
   coinDrop: '/static/sounds/avatar-tools/coin-drop.mp3',
@@ -608,6 +654,12 @@ export default function App({
   onTranslateToggle,
   onGalgameModeToggle,
   onGalgameOptionSelect,
+  quickActions,
+  quickActionsPreferences,
+  quickActionsLoading,
+  onQuickActionExecute,
+  onQuickActionsRequest,
+  onQuickActionsPreferencesChange,
   choicePrompt = null,
   onChoiceSelect,
   rollbackDraft,
@@ -616,6 +668,8 @@ export default function App({
 }: ChatWindowProps) {
   const [draft, setDraft] = useState('');
   const [toolMenuOpen, setToolMenuOpen] = useState(false);
+  const [quickActionsPanelOpen, setQuickActionsPanelOpen] = useState(false);
+  const [quickActionsSlashMode, setQuickActionsSlashMode] = useState(false);
   // 当 composer-bottom-bar 宽度 < 阈值时，把右侧 4 个工具按钮折叠成 ··· 菜单。
   // 用四态机让进出过渡都跑完动画再切稳态：
   //   expanded   → collapsing (右→左级联收起) → compact   (··· 入场)
@@ -669,6 +723,7 @@ export default function App({
   const [floatingHearts, setFloatingHearts] = useState<FloatingHeart[]>([]);
   const [floatingFistDrops, setFloatingFistDrops] = useState<FloatingFistDrop[]>([]);
   const submittingRef = useRef(false);
+  const composerTextareaRef = useRef<HTMLTextAreaElement | null>(null);
   const lastRollbackKeyRef = useRef('');
   const lastToolCursorResetKeyRef = useRef('');
   const canSubmit = !composerDisabled && (draft.trim().length > 0 || composerAttachments.length > 0);
@@ -1516,6 +1571,8 @@ export default function App({
   useEffect(() => {
     if (composerHidden || composerDisabled) {
       clearActiveCursorToolSelection();
+      setQuickActionsPanelOpen(false);
+      setQuickActionsSlashMode(false);
     }
   }, [clearActiveCursorToolSelection, composerHidden, composerDisabled]);
 
@@ -1531,6 +1588,40 @@ export default function App({
     clearGlobalToolCursorState();
   }, []);
 
+  const handleQuickActionInjectText = useCallback((text: string) => {
+    setDraft(prev => {
+      if (!prev || !prev.trim()) return text;
+      return `${prev} ${text}`;
+    });
+    setQuickActionsPanelOpen(false);
+    setQuickActionsSlashMode(false);
+    requestAnimationFrame(() => {
+      composerTextareaRef.current?.focus();
+    });
+  }, []);
+
+  const handleQuickActionNavigate = useCallback((target: string, openIn: string) => {
+    const resolvedTarget = resolveQuickActionNavigationTarget(target);
+    if (!resolvedTarget) return;
+    if (openIn === 'same_tab') {
+      window.location.href = resolvedTarget;
+    } else {
+      window.open(resolvedTarget, '_blank', 'noopener,noreferrer');
+    }
+  }, []);
+
+  const handleQuickActionExecute = useCallback(async (
+    actionId: string,
+    value: unknown,
+  ): Promise<CommandItem | null> => {
+    if (!onQuickActionExecute) return null;
+    return onQuickActionExecute(actionId, value);
+  }, [onQuickActionExecute]);
+
+  const handleQuickActionsPreferencesChange = useCallback((prefs: UserPreferences) => {
+    onQuickActionsPreferencesChange?.(prefs);
+  }, [onQuickActionsPreferencesChange]);
+
   function submitDraft() {
     if (composerDisabled) return;
     if (submittingRef.current) return;
@@ -1545,8 +1636,32 @@ export default function App({
     }
   }
 
-  // 右侧 3 个工具按钮：在 compact 与 normal 两种布局中复用同一份 JSX，
+  // 右侧工具按钮：在 compact 与 normal 两种布局中复用同一份 JSX，
   // 既避免重复，也保证 ref/事件绑定在两种模式下行为一致。
+  const quickActionsButtonNode = (
+    <button
+      className={`composer-tool-btn composer-quick-actions-btn${quickActionsPanelOpen ? ' is-active' : ''}`}
+      type="button"
+      aria-label={i18n('chat.quickActionsAriaLabel', '快捷操作')}
+      title={i18n('chat.quickActionsLabel', '快捷操作')}
+      aria-pressed={quickActionsPanelOpen}
+      aria-expanded={quickActionsPanelOpen}
+      disabled={composerDisabled}
+      onClick={() => {
+        if (composerDisabled) return;
+        const willOpen = !quickActionsPanelOpen;
+        setQuickActionsPanelOpen(willOpen);
+        setOverflowMenuOpen(false);
+        if (willOpen) {
+          setQuickActionsSlashMode(false);
+          onQuickActionsRequest?.();
+        }
+      }}
+    >
+      <span className="composer-quick-actions-glyph" aria-hidden="true">⌘</span>
+    </button>
+  );
+
   const translateButtonNode = (
     <button
       className={`composer-tool-btn composer-translate-btn${translateEnabled ? ' is-active' : ''}`}
@@ -1849,12 +1964,29 @@ export default function App({
               ))}
             </div>
           ) : null}
+          {quickActionsPanelOpen ? (
+            <CommandPalette
+              items={quickActions ?? []}
+              preferences={quickActionsPreferences ?? { pinned: [], hidden: [], recent: [] }}
+              loading={quickActionsLoading}
+              slashMode={quickActionsSlashMode}
+              onExecute={handleQuickActionExecute}
+              onInjectText={handleQuickActionInjectText}
+              onNavigate={handleQuickActionNavigate}
+              onPreferencesChange={handleQuickActionsPreferencesChange}
+              onClose={() => {
+                setQuickActionsPanelOpen(false);
+                setQuickActionsSlashMode(false);
+              }}
+            />
+          ) : null}
           <form className="composer" onSubmit={(event) => {
             event.preventDefault();
             submitDraft();
           }}>
             <div className="composer-input-shell">
               <textarea
+                ref={composerTextareaRef}
                 className="composer-input"
                 placeholder={inputPlaceholder}
                 aria-label={inputPlaceholder}
@@ -1862,7 +1994,16 @@ export default function App({
                 value={draft}
                 readOnly={composerDisabled}
                 disabled={composerDisabled}
-                onChange={(event) => { setDraft(event.target.value); }}
+                onChange={(event) => {
+                  const nextDraft = event.target.value;
+                  if (nextDraft === '/' && !draft && !quickActionsPanelOpen && !composerDisabled) {
+                    setQuickActionsSlashMode(true);
+                    setQuickActionsPanelOpen(true);
+                    onQuickActionsRequest?.();
+                    return;
+                  }
+                  setDraft(nextDraft);
+                }}
                 onKeyDown={(event) => {
                   if (event.nativeEvent.isComposing) return;
                   if (event.key === 'Enter' && !event.shiftKey) {
@@ -2011,6 +2152,8 @@ export default function App({
                       <span className="composer-tool-divider" aria-hidden="true">|</span>
                       {translateButtonNode}
                       <span className="composer-tool-divider" aria-hidden="true">|</span>
+                      {quickActionsButtonNode}
+                      <span className="composer-tool-divider" aria-hidden="true">|</span>
                       {jukeboxButtonNode}
                       <span className="composer-tool-divider" aria-hidden="true">|</span>
                       {emojiToolMenuNode}
@@ -2052,6 +2195,7 @@ export default function App({
                         >
                           {galgameToggleButtonNode}
                           {translateButtonNode}
+                          {quickActionsButtonNode}
                           {jukeboxButtonNode}
                           {emojiToolMenuNode}
                         </div>
diff --git a/frontend/react-neko-chat/src/CommandPalette.tsx b/frontend/react-neko-chat/src/CommandPalette.tsx
new file mode 100644
index 0000000000..fa30ea9061
--- /dev/null
+++ b/frontend/react-neko-chat/src/CommandPalette.tsx
@@ -0,0 +1,960 @@
+import { useState, useEffect, useRef, useCallback, useMemo } from 'react';
+import { i18n } from './i18n';
+
+/* ================================================================== */
+/*  Types                                                              */
+/* ================================================================== */
+
+export interface CommandItem {
+  action_id: string;
+  type: 'instant' | 'chat_inject' | 'navigation';
+  label: string;
+  description: string;
+  category: string;
+  plugin_id: string;
+  control?: 'toggle' | 'button' | 'dropdown' | 'number' | 'slider' | 'text' | 'plugin_lifecycle' | 'entry_toggle';
+  current_value?: unknown;
+  options?: string[];
+  min?: number;
+  max?: number;
+  step?: number;
+  disabled?: boolean;
+  inject_text?: string;
+  input_schema?: Record<string, unknown>;
+  target?: string;
+  open_in?: 'new_tab' | 'same_tab';
+  keywords?: string[];
+  icon?: string | null;
+  priority?: number;
+  section?: 'pinned' | 'recent' | 'commands' | null;
+  quick_action?: boolean;
+}
+
+export interface UserPreferences {
+  pinned: string[];
+  hidden: string[];
+  recent: string[];
+}
+
+export interface CommandPaletteProps {
+  items: CommandItem[];
+  preferences: UserPreferences;
+  loading?: boolean;
+  slashMode?: boolean;
+  onExecute: (actionId: string, value: unknown) => Promise<CommandItem | null>;
+  onInjectText: (text: string) => void;
+  onNavigate: (target: string, openIn: string) => void;
+  onPreferencesChange: (prefs: UserPreferences) => void;
+  onClose: () => void;
+}
+
+const MAX_RECENT_ACTIONS = 12;
+
+/* ================================================================== */
+/*  Helpers                                                            */
+/* ================================================================== */
+
+function matchesSearch(item: CommandItem, query: string): boolean {
+  if (!query) return true;
+  const q = query.toLowerCase();
+  return (
+    item.label.toLowerCase().includes(q) ||
+    item.description.toLowerCase().includes(q) ||
+    item.plugin_id.toLowerCase().includes(q) ||
+    item.category.toLowerCase().includes(q) ||
+    (item.keywords ?? []).some(k => k.toLowerCase().includes(q))
+  );
+}
+
+function defaultIcon(item: CommandItem): string {
+  if (item.icon) return item.icon;
+  if (item.type === 'chat_inject') return '📎';
+  if (item.type === 'navigation') return '↗';
+  switch (item.control) {
+    case 'toggle': return '🔘';
+    case 'slider': return '🎚';
+    case 'number': return '🔢';
+    case 'dropdown': return '📋';
+    case 'button': return '⚡';
+    default: return '•';
+  }
+}
+
+/* ================================================================== */
+/*  Inline control renderers                                           */
+/* ================================================================== */
+
+interface ControlProps {
+  item: CommandItem;
+  loading: boolean;
+  error: string | null;
+  onExec: (id: string, value: unknown) => void;
+  onInject: (text: string) => void;
+  onNavigate: (target: string, openIn: string) => void;
+}
+
+function ToggleWidget({ item, loading, onExec }: ControlProps) {
+  const checked = Boolean(item.current_value);
+  return (
+    <button
+      type="button"
+      role="switch"
+      aria-checked={checked}
+      aria-label={item.label}
+      className={`cp-toggle ${checked ? 'is-on' : ''}`}
+      disabled={item.disabled || loading}
+      onClick={e => { e.stopPropagation(); onExec(item.action_id, !checked); }}
+    >
+      <span className="cp-toggle-thumb" />
+    </button>
+  );
+}
+
+function DropdownWidget({ item, loading, onExec }: ControlProps) {
+  return (
+    <select
+      className="cp-select"
+      value={String(item.current_value ?? '')}
+      disabled={item.disabled || loading}
+      aria-label={item.label}
+      onClick={e => e.stopPropagation()}
+      onChange={e => onExec(item.action_id, e.target.value)}
+    >
+      {(item.options ?? []).map(o => (
+        <option key={o} value={o}>{o}</option>
+      ))}
+    </select>
+  );
+}
+
+function SliderWidget({ item, loading, onExec }: ControlProps) {
+  const numVal = Number(item.current_value ?? item.min ?? 0);
+  const [local, setLocal] = useState(numVal);
+  const committed = useRef(numVal);
+  useEffect(() => { setLocal(numVal); committed.current = numVal; }, [numVal]);
+
+  const commit = () => {
+    if (local !== committed.current) {
+      committed.current = local;
+      onExec(item.action_id, local);
+    }
+  };
+
+  return (
+    <div className="cp-slider-wrap" onClick={e => e.stopPropagation()}>
+      <input
+        type="range"
+        className="cp-slider"
+        min={item.min ?? 0}
+        max={item.max ?? 100}
+        step={item.step ?? 1}
+        value={local}
+        disabled={item.disabled || loading}
+        aria-label={item.label}
+        onChange={e => setLocal(Number(e.target.value))}
+        onMouseUp={commit}
+        onTouchEnd={commit}
+        onKeyUp={commit}
+      />
+      <span className="cp-slider-val">{local}</span>
+    </div>
+  );
+}
+
+function NumberWidget({ item, loading, onExec }: ControlProps) {
+  const numVal = Number(item.current_value ?? 0);
+  const [local, setLocal] = useState(numVal);
+  const timer = useRef<ReturnType<typeof setTimeout> | null>(null);
+  useEffect(() => { setLocal(numVal); }, [numVal]);
+  useEffect(() => () => { if (timer.current) clearTimeout(timer.current); }, []);
+
+  const commit = useCallback(
+    (v: number) => {
+      if (timer.current) clearTimeout(timer.current);
+      // Clamp to min/max and reject NaN
+      const lo = item.min ?? -Infinity;
+      const hi = item.max ?? Infinity;
+      const clamped = Number.isFinite(v) ? Math.min(Math.max(v, lo), hi) : numVal;
+      timer.current = setTimeout(() => onExec(item.action_id, clamped), 400);
+    },
+    [item.action_id, item.min, item.max, numVal, onExec],
+  );
+  const step = item.step ?? 1;
+  const inc = () => { const n = Math.min(local + step, item.max ?? Infinity); setLocal(n); commit(n); };
+  const dec = () => { const n = Math.max(local - step, item.min ?? -Infinity); setLocal(n); commit(n); };
+
+  return (
+    <div className="cp-num-group" onClick={e => e.stopPropagation()}>
+      <button type="button" className="cp-num-btn" disabled={item.disabled || loading} onClick={dec} aria-label={`${item.label} −`}>−</button>
+      <input
+        type="number"
+        className="cp-num-input"
+        value={local}
+        min={item.min}
+        max={item.max}
+        step={item.step}
+        disabled={item.disabled || loading}
+        aria-label={item.label}
+        onChange={e => { const v = Number(e.target.value); setLocal(v); commit(v); }}
+      />
+      <button type="button" className="cp-num-btn" disabled={item.disabled || loading} onClick={inc} aria-label={`${item.label} +`}>+</button>
+    </div>
+  );
+}
+
+function TextWidget({ item, loading, onExec }: ControlProps) {
+  const strVal = String(item.current_value ?? '');
+  const [local, setLocal] = useState(strVal);
+  const timer = useRef<ReturnType<typeof setTimeout> | null>(null);
+  useEffect(() => { setLocal(strVal); }, [strVal]);
+  useEffect(() => () => { if (timer.current) clearTimeout(timer.current); }, []);
+
+  const commit = useCallback((v: string) => {
+    if (timer.current) clearTimeout(timer.current);
+    timer.current = setTimeout(() => onExec(item.action_id, v), 600);
+  }, [item.action_id, onExec]);
+
+  return (
+    <input
+      type="text"
+      className="cp-text-input"
+      value={local}
+      disabled={item.disabled || loading}
+      aria-label={item.label}
+      placeholder={item.description || item.label}
+      onClick={e => e.stopPropagation()}
+      onChange={e => { setLocal(e.target.value); commit(e.target.value); }}
+      onKeyDown={e => { if (e.key === 'Enter') { e.preventDefault(); if (timer.current) clearTimeout(timer.current); onExec(item.action_id, local); } }}
+    />
+  );
+}
+
+function InlineWidget(props: ControlProps) {
+  const { item } = props;
+  if (item.type === 'chat_inject' || item.type === 'navigation') return null;
+  switch (item.control) {
+    case 'toggle':
+    case 'entry_toggle':
+      return <ToggleWidget {...props} />;
+    case 'dropdown':
+      return <DropdownWidget {...props} />;
+    case 'slider':
+      return <SliderWidget {...props} />;
+    case 'number':
+      return <NumberWidget {...props} />;
+    case 'text':
+      return <TextWidget {...props} />;
+    default:
+      return null;
+  }
+}
+
+/* ================================================================== */
+/*  Parameter form (for button entries with input_schema)              */
+/* ================================================================== */
+
+function ParamForm({ item, onExec, onCancel }: {
+  item: CommandItem;
+  onExec: (id: string, value: unknown) => void;
+  onCancel: () => void;
+}) {
+  const schema = item.input_schema as Record<string, unknown> | undefined;
+  const properties = (schema?.properties ?? {}) as Record<string, { type?: string; description?: string; default?: unknown }>;
+  const propKeys = Object.keys(properties);
+
+  const [values, setValues] = useState<Record<string, string>>(() => {
+    const defaults: Record<string, string> = {};
+    for (const key of propKeys) {
+      const prop = properties[key];
+      defaults[key] = prop?.default != null ? String(prop.default) : '';
+    }
+    return defaults;
+  });
+
+  const submit = () => {
+    const args: Record<string, unknown> = {};
+    for (const key of propKeys) {
+      const prop = properties[key];
+      const raw = values[key] ?? '';
+      // Untouched / cleared inputs are emitted as "absent" so the
+      // server/plugin can apply its own default for optional parameters.
+      // The previous `Number(raw) || 0` / `false` / `""` coercion silently
+      // overrode those defaults with concrete zero/false/empty values.
+      if (raw === '') continue;
+      if (prop?.type === 'number' || prop?.type === 'integer') {
+        const n = Number(raw);
+        if (Number.isNaN(n)) continue;
+        args[key] = n;
+      } else if (prop?.type === 'boolean') {
+        args[key] = raw === 'true' || raw === '1';
+      } else {
+        args[key] = raw;
+      }
+    }
+    onExec(item.action_id, args);
+  };
+
+  return (
+    <div className="cp-param-form" onClick={e => e.stopPropagation()}>
+      {propKeys.map(key => {
+        const prop = properties[key];
+        return (
+          <label key={key} className="cp-param-field">
+            <span className="cp-param-label">{prop?.description || key}</span>
+            <input
+              type={prop?.type === 'number' || prop?.type === 'integer' ? 'number' : 'text'}
+              className="cp-param-input"
+              value={values[key] ?? ''}
+              placeholder={key}
+              onChange={e => setValues(v => ({ ...v, [key]: e.target.value }))}
+              onKeyDown={e => { if (e.key === 'Enter') submit(); }}
+            />
+          </label>
+        );
+      })}
+      <div className="cp-param-actions">
+        <button type="button" className="cp-param-cancel" onClick={onCancel}>
+          {i18n('commandPalette.cancel', '取消')}
+        </button>
+        <button type="button" className="cp-param-submit" onClick={submit}>
+          {i18n('commandPalette.confirm', '确认')}
+        </button>
+      </div>
+    </div>
+  );
+}
+
+/* ================================================================== */
+/*  Context menu (pin / hide)                                          */
+/* ================================================================== */
+
+function ContextMenu({ item, prefs, onPrefsChange, onClose }: {
+  item: CommandItem;
+  prefs: UserPreferences;
+  onPrefsChange: (p: UserPreferences) => void;
+  onClose: () => void;
+}) {
+  const isPinned = prefs.pinned.includes(item.action_id);
+  const isHidden = prefs.hidden.includes(item.action_id);
+  const menuRef = useRef<HTMLDivElement>(null);
+
+  useEffect(() => {
+    const handler = (e: MouseEvent) => {
+      if (menuRef.current && !menuRef.current.contains(e.target as Node)) onClose();
+    };
+    const id = setTimeout(() => document.addEventListener('mousedown', handler), 0);
+    return () => { clearTimeout(id); document.removeEventListener('mousedown', handler); };
+  }, [onClose]);
+
+  const togglePin = () => {
+    const next = { ...prefs };
+    if (isPinned) {
+      next.pinned = next.pinned.filter(id => id !== item.action_id);
+    } else {
+      next.pinned = [...next.pinned, item.action_id];
+      // Unpin also unhides
+      next.hidden = next.hidden.filter(id => id !== item.action_id);
+    }
+    onPrefsChange(next);
+    onClose();
+  };
+
+  const toggleHide = () => {
+    const next = { ...prefs };
+    if (isHidden) {
+      next.hidden = next.hidden.filter(id => id !== item.action_id);
+    } else {
+      next.hidden = [...next.hidden, item.action_id];
+      // Hide also unpins
+      next.pinned = next.pinned.filter(id => id !== item.action_id);
+    }
+    onPrefsChange(next);
+    onClose();
+  };
+
+  return (
+    <div className="cp-ctx-menu" ref={menuRef}>
+      <button type="button" className="cp-ctx-item" onClick={togglePin}>
+        {isPinned
+          ? `📌 ${i18n('commandPalette.unpin', '取消置顶')}`
+          : `📌 ${i18n('commandPalette.pin', '置顶')}`}
+      </button>
+      <button type="button" className="cp-ctx-item" onClick={toggleHide}>
+        {isHidden
+          ? `👁 ${i18n('commandPalette.unhide', '取消隐藏')}`
+          : `🙈 ${i18n('commandPalette.hide', '隐藏')}`}
+      </button>
+    </div>
+  );
+}
+
+/* ================================================================== */
+/*  Single command row                                                 */
+/* ================================================================== */
+
+function CommandRow({ item, loading, error, highlighted, prefs, onExec, onInject, onNavigate, onPrefsChange }: {
+  item: CommandItem;
+  loading: boolean;
+  error: string | null;
+  highlighted?: boolean;
+  prefs: UserPreferences;
+  onExec: (id: string, value: unknown) => void;
+  onInject: (text: string) => void;
+  onNavigate: (target: string, openIn: string) => void;
+  onPrefsChange: (p: UserPreferences) => void;
+}) {
+  const [ctxOpen, setCtxOpen] = useState(false);
+  const [paramFormOpen, setParamFormOpen] = useState(false);
+  const isHidden = prefs.hidden.includes(item.action_id);
+  const isPinned = prefs.pinned.includes(item.action_id);
+
+  const hasInlineWidget = item.type === 'instant' && (
+    item.control === 'toggle' || item.control === 'entry_toggle' ||
+    item.control === 'dropdown' || item.control === 'slider' || item.control === 'number' ||
+    item.control === 'text'
+  );
+
+  const hasParams = (() => {
+    if (item.control !== 'button') return false;
+    const schema = item.input_schema as Record<string, unknown> | undefined;
+    const props = schema?.properties as Record<string, unknown> | undefined;
+    return props && Object.keys(props).length > 0;
+  })();
+
+  const handleRowClick = () => {
+    if (hasInlineWidget) return;
+    if (item.disabled || loading) return;
+    if (item.type === 'chat_inject') {
+      onInject(item.inject_text ?? '');
+      return;
+    }
+    if (item.type === 'navigation') {
+      onNavigate(item.target ?? '', item.open_in ?? 'new_tab');
+      return;
+    }
+    if (item.control === 'button') {
+      if (hasParams) {
+        setParamFormOpen(open => !open);
+      } else {
+        onExec(item.action_id, null);
+      }
+    }
+  };
+
+  const controlProps: ControlProps = { item, loading, error, onExec, onInject, onNavigate };
+
+  return (
+    <div className={`cp-row-wrap ${isHidden ? 'is-hidden' : ''}`}>
+      <div
+        className={`cp-row ${hasInlineWidget ? '' : 'cp-row-clickable'}${highlighted ? ' cp-row-highlighted' : ''}`}
+        onClick={handleRowClick}
+        role={hasInlineWidget ? undefined : 'button'}
+        tabIndex={hasInlineWidget ? undefined : 0}
+        onKeyDown={hasInlineWidget ? undefined : (e) => { if (e.key === 'Enter' || e.key === ' ') { e.preventDefault(); handleRowClick(); } }}
+      >
+        <span className="cp-row-icon-wrap" aria-hidden="true">
+          <span className="cp-row-icon">{defaultIcon(item)}</span>
+        </span>
+        <div className="cp-row-info">
+          <div className="cp-row-label-line">
+            <span className="cp-row-label">{item.label}</span>
+            {isPinned && <span className="cp-row-pin-badge" aria-label="pinned">📌</span>}
+          </div>
+          {item.description ? (
+            <span className="cp-row-desc">{item.description}</span>
+          ) : (
+            <span className="cp-row-desc cp-row-category">{item.category}</span>
+          )}
+        </div>
+        <div className="cp-row-right">
+          {loading && <span className="cp-spinner" />}
+          <InlineWidget {...controlProps} />
+          {!hasInlineWidget && item.type === 'chat_inject' && (
+            <span className="cp-row-badge cp-row-badge-inject">{i18n('commandPalette.inject', '注入')}</span>
+          )}
+          {!hasInlineWidget && item.type === 'navigation' && (
+            <span className="cp-row-badge cp-row-badge-nav">{i18n('commandPalette.open', '打开')}</span>
+          )}
+          {!hasInlineWidget && item.control === 'button' && !hasParams && (
+            <span className="cp-row-badge cp-row-badge-run">{i18n('commandPalette.run', '执行')}</span>
+          )}
+          {!hasInlineWidget && item.control === 'button' && hasParams && (
+            <span className="cp-row-badge cp-row-badge-run">{paramFormOpen ? '▾' : i18n('commandPalette.run', '执行')}</span>
+          )}
+          {error && <span className="cp-err" title={error}>!</span>}
+          <button
+            type="button"
+            className="cp-ctx-trigger"
+            aria-label={i18n('commandPalette.more', '更多')}
+            onClick={e => { e.stopPropagation(); setCtxOpen(o => !o); }}
+          >
+            ⋮
+          </button>
+          {ctxOpen && (
+            <ContextMenu
+              item={item}
+              prefs={prefs}
+              onPrefsChange={onPrefsChange}
+              onClose={() => setCtxOpen(false)}
+            />
+          )}
+        </div>
+      </div>
+      {paramFormOpen && hasParams && (
+        <ParamForm
+          item={item}
+          onExec={(id, val) => { setParamFormOpen(false); onExec(id, val); }}
+          onCancel={() => setParamFormOpen(false)}
+        />
+      )}
+    </div>
+  );
+}
+
+/* ================================================================== */
+/*  Toast stack                                                        */
+/* ================================================================== */
+
+type ToastItem = { id: number; tone: 'success' | 'error'; text: string };
+let _toastId = 0;
+
+function ToastStack({ toasts }: { toasts: ToastItem[] }) {
+  if (toasts.length === 0) return null;
+  return (
+    <div className="cp-toast-stack">
+      {toasts.map(t => (
+        <div key={t.id} className={`message-block-status tone-${t.tone} cp-toast`}>
+          {t.text}
+        </div>
+      ))}
+    </div>
+  );
+}
+
+/* ================================================================== */
+/*  Helpers: classify items                                            */
+/* ================================================================== */
+
+type ContentTab = 'quick' | 'settings' | 'all';
+type GroupMode = 'byPlugin' | 'byFunction';
+
+const _SETTINGS_CONTROLS = new Set(['toggle', 'entry_toggle', 'dropdown', 'slider', 'number', 'text']);
+
+function isSettingsItem(item: CommandItem): boolean {
+  return item.type === 'instant' && _SETTINGS_CONTROLS.has(item.control ?? '');
+}
+
+function functionGroupLabel(item: CommandItem): string {
+  if (item.type === 'chat_inject') return '💬 斜杠命令';
+  if (item.type === 'navigation') return '↗ 导航';
+  switch (item.control) {
+    case 'toggle': case 'entry_toggle': return '🔘 开关';
+    case 'slider': return '🎚 滑块';
+    case 'number': return '🔢 数值';
+    case 'dropdown': return '📋 下拉';
+    case 'button': return '⚡ 操作';
+    case 'plugin_lifecycle': return '🔧 生命周期';
+    default: return '• 其他';
+  }
+}
+
+function groupItems(items: CommandItem[], mode: GroupMode): Map<string, CommandItem[]> {
+  const groups = new Map<string, CommandItem[]>();
+  for (const item of items) {
+    // "按插件" groups by plugin_id so lifecycle actions join their plugin
+    const key = mode === 'byPlugin' ? item.plugin_id : functionGroupLabel(item);
+    if (!groups.has(key)) groups.set(key, []);
+    groups.get(key)!.push(item);
+  }
+  return groups;
+}
+
+/* ================================================================== */
+/*  Collapsible plugin card (for "按插件" view)                        */
+/* ================================================================== */
+
+function PluginCard({ pluginName, items, loadingMap, errorMap, sharedRowProps, highlightedActionId }: {
+  pluginName: string;
+  items: CommandItem[];
+  loadingMap: Record<string, boolean>;
+  errorMap: Record<string, string | null>;
+  sharedRowProps: {
+    prefs: UserPreferences;
+    onExec: (id: string, value: unknown) => void;
+    onInject: (text: string) => void;
+    onNavigate: (target: string, openIn: string) => void;
+    onPrefsChange: (p: UserPreferences) => void;
+  };
+  highlightedActionId: string | null;
+}) {
+  const [expanded, setExpanded] = useState(false);
+  const bodyRef = useRef<HTMLDivElement>(null);
+  const [bodyHeight, setBodyHeight] = useState(0);
+  const entryCount = items.filter(a => a.category !== '插件管理').length;
+  const mgmtCount = items.filter(a => a.category === '插件管理').length;
+
+  // Auto-expand whenever keyboard nav lands on one of our rows, so the
+  // highlighted row is actually visible and Enter can find a
+  // ``.cp-row-highlighted.cp-row-clickable`` target (the keyboard handler in
+  // the parent activates via querySelector + .click()).
+  const containsHighlight = highlightedActionId != null
+    && items.some(i => i.action_id === highlightedActionId);
+  const effectivelyExpanded = expanded || containsHighlight;
+
+  // Measure body height after render for smooth animation
+  useEffect(() => {
+    if (!effectivelyExpanded) {
+      setBodyHeight(0);
+      return;
+    }
+    const body = bodyRef.current;
+    if (!body) return;
+    const measure = () => setBodyHeight(body.scrollHeight);
+    measure();
+    if (typeof ResizeObserver === 'undefined') return;
+    const observer = new ResizeObserver(measure);
+    observer.observe(body);
+    return () => observer.disconnect();
+  }, [effectivelyExpanded, items.length]);
+
+  return (
+    <div className={`cp-plugin-card ${effectivelyExpanded ? 'is-expanded' : ''}`}>
+      <button
+        type="button"
+        className="cp-plugin-card-header"
+        onClick={() => setExpanded(e => !e)}
+        aria-expanded={effectivelyExpanded}
+      >
+        <span className={`cp-plugin-card-chevron ${effectivelyExpanded ? 'is-open' : ''}`}>▸</span>
+        <span className="cp-plugin-card-name">{pluginName}</span>
+        <span className="cp-plugin-card-counts">
+          {entryCount > 0 && <span className="cp-plugin-card-badge">{entryCount}</span>}
+          {mgmtCount > 0 && <span className="cp-plugin-card-badge cp-plugin-card-badge-mgmt">⚙{mgmtCount}</span>}
+        </span>
+      </button>
+      <div
+        className="cp-plugin-card-collapse"
+        style={{ maxHeight: effectivelyExpanded ? `${bodyHeight}px` : '0px' }}
+      >
+        <div className="cp-plugin-card-body" ref={bodyRef}>
+          {items.map((item, i) => (
+            <div key={item.action_id} className="cp-card-item-stagger" style={effectivelyExpanded ? { animationDelay: `${i * 30}ms` } : undefined}>
+              <CommandRow
+                item={item}
+                loading={!!loadingMap[item.action_id]}
+                error={errorMap[item.action_id] ?? null}
+                highlighted={item.action_id === highlightedActionId}
+                {...sharedRowProps}
+              />
+            </div>
+          ))}
+        </div>
+      </div>
+    </div>
+  );
+}
+
+/* ================================================================== */
+/*  Main component                                                     */
+/* ================================================================== */
+
+export default function CommandPalette({
+  items,
+  preferences,
+  loading: externalLoading = false,
+  slashMode = false,
+  onExecute,
+  onInjectText,
+  onNavigate,
+  onPreferencesChange,
+  onClose,
+}: CommandPaletteProps) {
+  const [search, setSearch] = useState('');
+  const [viewMode, setViewMode] = useState<GroupMode>('byFunction');
+  const [filterTab, setFilterTab] = useState<ContentTab>('all');
+  const [loadingMap, setLoadingMap] = useState<Record<string, boolean>>({});
+  const [errorMap, setErrorMap] = useState<Record<string, string | null>>({});
+  const [localItems, setLocalItems] = useState<CommandItem[]>(items);
+  const [localPrefs, setLocalPrefs] = useState<UserPreferences>(preferences);
+  const [toasts, setToasts] = useState<ToastItem[]>([]);
+  const panelRef = useRef<HTMLDivElement>(null);
+  const searchRef = useRef<HTMLInputElement>(null);
+
+  useEffect(() => { setLocalItems(items); }, [items]);
+  useEffect(() => { setLocalPrefs(preferences); }, [preferences]);
+
+  useEffect(() => { searchRef.current?.focus(); }, []);
+  useEffect(() => {
+    const onKey = (e: KeyboardEvent) => { if (e.key === 'Escape') onClose(); };
+    document.addEventListener('keydown', onKey);
+    return () => document.removeEventListener('keydown', onKey);
+  }, [onClose]);
+  useEffect(() => {
+    const onClick = (e: MouseEvent) => {
+      if (panelRef.current && !panelRef.current.contains(e.target as Node)) onClose();
+    };
+    const id = setTimeout(() => document.addEventListener('mousedown', onClick), 0);
+    return () => { clearTimeout(id); document.removeEventListener('mousedown', onClick); };
+  }, [onClose]);
+
+  const pushToast = useCallback((tone: ToastItem['tone'], text: string) => {
+    const id = ++_toastId;
+    setToasts(prev => [...prev.slice(-2), { id, tone, text }]);
+    setTimeout(() => setToasts(prev => prev.filter(t => t.id !== id)), 3000);
+  }, []);
+
+  const handleExecute = useCallback(async (actionId: string, value: unknown) => {
+    setLoadingMap(m => ({ ...m, [actionId]: true }));
+    setErrorMap(m => ({ ...m, [actionId]: null }));
+    const label = localItems.find(a => a.action_id === actionId)?.label ?? actionId;
+    try {
+      const updated = await onExecute(actionId, value);
+      // Don't do local patching here — the host will re-fetch all actions
+      // and pass new `items` prop, which triggers the useEffect sync above.
+      // Local patching would conflict with the full refresh.
+      if (updated) {
+        setLocalItems(prev => prev.map(a => (a.action_id === updated.action_id ? updated : a)));
+      }
+      const nextPrefs = {
+        ...localPrefs,
+        recent: [actionId, ...localPrefs.recent.filter(id => id !== actionId)].slice(0, MAX_RECENT_ACTIONS),
+      };
+      setLocalPrefs(nextPrefs);
+      onPreferencesChange(nextPrefs);
+      pushToast('success', `${label}: ${i18n('commandPalette.success', '成功')}`);
+    } catch (err: unknown) {
+      const msg = err instanceof Error ? err.message : String(err);
+      const cleanMsg = msg.replace(/^executeChatAction:\s*HTTP\s*\d+\s*[-–—]?\s*/i, '');
+      setErrorMap(m => ({ ...m, [actionId]: cleanMsg }));
+      setTimeout(() => setErrorMap(m => ({ ...m, [actionId]: null })), 3000);
+      pushToast('error', `${label}: ${cleanMsg}`);
+    } finally {
+      setLoadingMap(m => ({ ...m, [actionId]: false }));
+    }
+  }, [onExecute, onPreferencesChange, localItems, localPrefs, pushToast]);
+
+  const handleInject = useCallback((text: string) => {
+    onInjectText(text);
+    onClose();
+  }, [onInjectText, onClose]);
+
+  const handlePrefsChange = useCallback((prefs: UserPreferences) => {
+    setLocalPrefs(prefs);
+    onPreferencesChange(prefs);
+  }, [onPreferencesChange]);
+
+  // ── Build display items ──
+  const { displayItems, hasResults } = useMemo(() => {
+    const isSearching = search.trim().length > 0;
+    const baseItems = slashMode
+      ? localItems.filter(a => a.type === 'chat_inject')
+      : localItems;
+    const matched = baseItems.filter(a => matchesSearch(a, search));
+    const visible = isSearching
+      ? matched
+      : matched.filter(a => !localPrefs.hidden.includes(a.action_id));
+
+    const sortByPriority = (a: CommandItem, b: CommandItem) => {
+      const pa = a.priority ?? 0;
+      const pb = b.priority ?? 0;
+      if (pa !== pb) return pb - pa;
+      return a.label.localeCompare(b.label);
+    };
+
+    // "按插件" mode: show all, no filter tabs
+    if (viewMode === 'byPlugin') {
+      const sorted = [...visible].sort(sortByPriority);
+      const ordered = isSearching
+        ? sorted
+        : Array.from(groupItems(sorted, 'byPlugin').values()).flat();
+      return { displayItems: ordered, hasResults: ordered.length > 0 };
+    }
+
+    // "按功能" mode: apply filter tab
+    let filtered: CommandItem[];
+    if (filterTab === 'quick') {
+      const pinnedIds = new Set(localPrefs.pinned);
+      const pinned = localPrefs.pinned
+        .map(id => visible.find(a => a.action_id === id))
+        .filter((a): a is CommandItem => a !== undefined);
+      const quick = visible
+        .filter(a => a.quick_action && !pinnedIds.has(a.action_id))
+        .sort(sortByPriority);
+      filtered = [...pinned, ...quick];
+    } else if (filterTab === 'settings') {
+      filtered = visible.filter(isSettingsItem).sort(sortByPriority);
+    } else {
+      const pinnedIds = new Set(localPrefs.pinned);
+      const recentIds = new Set(localPrefs.recent);
+      const pinned = localPrefs.pinned
+        .map(id => visible.find(a => a.action_id === id))
+        .filter((a): a is CommandItem => a !== undefined);
+      const recent = localPrefs.recent
+        .map(id => visible.find(a => a.action_id === id))
+        .filter((a): a is CommandItem => a !== undefined && !pinnedIds.has(a.action_id));
+      const rest = visible
+        .filter(a => !pinnedIds.has(a.action_id) && !recentIds.has(a.action_id))
+        .sort(sortByPriority);
+      filtered = [...pinned, ...recent, ...rest];
+    }
+
+    return { displayItems: filtered, hasResults: filtered.length > 0 };
+  }, [localItems, localPrefs, search, slashMode, viewMode, filterTab]);
+
+  const isSearching = search.trim().length > 0;
+
+  // ── Keyboard navigation ──
+  const [highlightIdx, setHighlightIdx] = useState(-1);
+  useEffect(() => { setHighlightIdx(-1); }, [search, displayItems.length, viewMode, filterTab]);
+
+  const handleSearchKeyDown = useCallback((e: React.KeyboardEvent) => {
+    if (e.key === 'ArrowDown') {
+      e.preventDefault();
+      setHighlightIdx(prev => (prev + 1) % Math.max(displayItems.length, 1));
+    } else if (e.key === 'ArrowUp') {
+      e.preventDefault();
+      setHighlightIdx(prev => prev <= 0 ? displayItems.length - 1 : prev - 1);
+    } else if (e.key === 'Enter' && highlightIdx >= 0 && highlightIdx < displayItems.length) {
+      e.preventDefault();
+      panelRef.current
+        ?.querySelector<HTMLElement>('.cp-row-highlighted.cp-row-clickable')
+        ?.click();
+    }
+  }, [displayItems.length, highlightIdx]);
+
+  const sharedRowProps = {
+    prefs: localPrefs,
+    onExec: handleExecute, onInject: handleInject, onNavigate,
+    onPrefsChange: handlePrefsChange,
+  };
+
+  const hasQuickActions = localItems.some(a => a.quick_action);
+  const hasSettingsItems = localItems.some(isSettingsItem);
+  const showFilterTabs = viewMode === 'byFunction' && !slashMode;
+  const showGrouped = viewMode === 'byPlugin' && !isSearching;
+
+  // Currently highlighted item identifier — flow into PluginCard so grouped
+  // rendering can still light up the right row (and so Enter can find a
+  // ``.cp-row-highlighted.cp-row-clickable`` to click).
+  const highlightedActionId = highlightIdx >= 0 && highlightIdx < displayItems.length
+    ? displayItems[highlightIdx].action_id
+    : null;
+
+  const renderGrouped = (items: CommandItem[]) => {
+    const groups = groupItems(items, 'byPlugin');
+    // Resolve display name: use category from first non-management item, fallback to plugin_id
+    return Array.from(groups.entries()).map(([pluginId, groupItems]) => {
+      const nameItem = groupItems.find(a => a.category !== '插件管理');
+      const displayName = nameItem?.category || pluginId;
+      return (
+        <PluginCard
+          key={pluginId}
+          pluginName={displayName}
+          items={groupItems}
+          loadingMap={loadingMap}
+          errorMap={errorMap}
+          sharedRowProps={sharedRowProps}
+          highlightedActionId={highlightedActionId}
+        />
+      );
+    });
+  };
+
+  const renderFlat = (items: CommandItem[]) => (
+    <div className="cp-section">
+      {items.map((item, i) => (
+        <div key={item.action_id} className="cp-stagger" style={{ animationDelay: `${i * 20}ms` }}>
+          <CommandRow item={item} loading={!!loadingMap[item.action_id]} error={errorMap[item.action_id] ?? null} highlighted={highlightIdx === i} {...sharedRowProps} />
+        </div>
+      ))}
+    </div>
+  );
+
+  const emptyText = (() => {
+    if (isSearching) return i18n('commandPalette.noResults', '没有匹配的操作');
+    if (viewMode === 'byFunction') {
+      if (filterTab === 'quick') return i18n('commandPalette.noQuickActions', '暂无快捷操作');
+      if (filterTab === 'settings') return i18n('commandPalette.noSettings', '暂无配置项');
+    }
+    return i18n('commandPalette.empty', '暂无可用操作');
+  })();
+
+  return (
+    <div className="cp-panel" ref={panelRef} role="dialog" aria-label={i18n('commandPalette.title', '命令面板')}>
+      {/* ── Search ── */}
+      <div className="cp-search-bar">
+        <span className="cp-search-icon" aria-hidden="true">🔍</span>
+        <input
+          ref={searchRef}
+          type="text"
+          className="cp-search"
+          placeholder={slashMode
+            ? i18n('commandPalette.slashPlaceholder', '搜索斜杠命令...')
+            : i18n('commandPalette.searchPlaceholder', '搜索操作...')}
+          value={search}
+          onChange={e => setSearch(e.target.value)}
+          onKeyDown={handleSearchKeyDown}
+          aria-label={i18n('commandPalette.searchAriaLabel', '搜索操作')}
+        />
+        {search && (
+          <button type="button" className="cp-search-clear" aria-label={i18n('commandPalette.clearSearch', '清除搜索')}
+            onClick={() => { setSearch(''); searchRef.current?.focus(); }}>✕</button>
+        )}
+      </div>
+
+      {/* ── Filter tabs (slide in/out with view mode) ── */}
+      {showFilterTabs && (
+        <div className="cp-tab-bar cp-tab-bar-top cp-filter-tabs-enter" key={`filter-${viewMode}`}>
+          <button type="button" className={`cp-tab ${filterTab === 'all' ? 'cp-tab-active' : ''}`} onClick={() => setFilterTab('all')}>
+            📋 {i18n('commandPalette.allCommands', '全部')}
+          </button>
+          {hasQuickActions && (
+            <button type="button" className={`cp-tab ${filterTab === 'quick' ? 'cp-tab-active' : ''}`} onClick={() => setFilterTab('quick')}>
+              ⚡ {i18n('commandPalette.quickActions', '快捷操作')}
+            </button>
+          )}
+          {hasSettingsItems && (
+            <button type="button" className={`cp-tab ${filterTab === 'settings' ? 'cp-tab-active' : ''}`} onClick={() => setFilterTab('settings')}>
+              ⚙️ {i18n('commandPalette.settings', '配置项')}
+            </button>
+          )}
+        </div>
+      )}
+
+      {/* ── Content ── */}
+      <div className="cp-content">
+        {externalLoading && localItems.length === 0 ? (
+          <div className="cp-empty"><span className="cp-spinner" /></div>
+        ) : !hasResults ? (
+          <div className="cp-empty">
+            <div className="cp-empty-icon" aria-hidden="true">{isSearching ? '🔍' : '📋'}</div>
+            <div className="cp-empty-text">{emptyText}</div>
+            {isSearching && (
+              <button type="button" className="cp-empty-clear" onClick={() => { setSearch(''); searchRef.current?.focus(); }}>
+                {i18n('commandPalette.clearSearch', '清除搜索')}
+              </button>
+            )}
+          </div>
+        ) : (
+          <div className="cp-page-transition" key={`${viewMode}-${filterTab}`}>
+            {showGrouped ? renderGrouped(displayItems) : renderFlat(displayItems)}
+          </div>
+        )}
+      </div>
+
+      {/* ── Bottom: view mode toggle (always visible) ── */}
+      {!slashMode && (
+        <div className="cp-tab-bar cp-tab-bar-bottom">
+          <button type="button" className={`cp-tab ${viewMode === 'byPlugin' ? 'cp-tab-active' : ''}`} onClick={() => setViewMode('byPlugin')}>
+            🧩 {i18n('commandPalette.byPlugin', '按插件')}
+          </button>
+          <button type="button" className={`cp-tab ${viewMode === 'byFunction' ? 'cp-tab-active' : ''}`} onClick={() => setViewMode('byFunction')}>
+            🏷️ {i18n('commandPalette.byFunction', '按功能')}
+          </button>
+        </div>
+      )}
+
+      <ToastStack toasts={toasts} />
+    </div>
+  );
+}
diff --git a/frontend/react-neko-chat/src/message-schema.test.ts b/frontend/react-neko-chat/src/message-schema.test.ts
index d4a7375b46..ee8c289491 100644
--- a/frontend/react-neko-chat/src/message-schema.test.ts
+++ b/frontend/react-neko-chat/src/message-schema.test.ts
@@ -31,6 +31,67 @@ describe('message-schema', () => {
     expect(props).toEqual({});
   });
 
+  it('preserves quick action props through the window props schema', async () => {
+    const action = {
+      action_id: 'plugin.demo.toggle',
+      type: 'instant',
+      label: 'Demo toggle',
+      description: 'Toggle demo mode',
+      category: 'settings',
+      plugin_id: 'demo',
+      control: 'toggle',
+      current_value: false,
+      quick_action: true,
+    } as const;
+    const onQuickActionExecute = vi.fn(async () => ({
+      ...action,
+      current_value: true,
+    }));
+    const onQuickActionsRequest = vi.fn();
+    const onQuickActionsPreferencesChange = vi.fn();
+    const props = parseChatWindowProps({
+      quickActions: [action],
+      quickActionsPreferences: {
+        pinned: [action.action_id],
+        hidden: [],
+        recent: [],
+      },
+      quickActionsLoading: true,
+      onQuickActionExecute,
+      onQuickActionsRequest,
+      onQuickActionsPreferencesChange,
+    });
+
+    expect(props.quickActions?.[0]?.action_id).toBe(action.action_id);
+    expect(props.quickActionsPreferences?.pinned).toEqual([action.action_id]);
+    expect(props.quickActionsLoading).toBe(true);
+    props.onQuickActionsRequest?.();
+    props.onQuickActionsPreferencesChange?.({ pinned: [], hidden: [action.action_id], recent: [] });
+    await expect(props.onQuickActionExecute?.(action.action_id, true)).resolves.toMatchObject({
+      action_id: action.action_id,
+      current_value: true,
+    });
+    expect(onQuickActionsRequest).toHaveBeenCalledTimes(1);
+    expect(onQuickActionsPreferencesChange).toHaveBeenCalledWith({
+      pinned: [],
+      hidden: [action.action_id],
+      recent: [],
+    });
+  });
+
+  it('accepts async quick action request and preference callbacks', async () => {
+    const onQuickActionsRequest = vi.fn(async () => {});
+    const onQuickActionsPreferencesChange = vi.fn(async () => {});
+    const props = parseChatWindowProps({
+      onQuickActionsRequest,
+      onQuickActionsPreferencesChange,
+    });
+
+    await expect(props.onQuickActionsRequest?.()).resolves.toBeUndefined();
+    await expect(props.onQuickActionsPreferencesChange?.({ pinned: [], hidden: [], recent: [] }))
+      .resolves.toBeUndefined();
+  });
+
   it('accepts an avatar interaction callback in window props', () => {
     const onAvatarInteraction = vi.fn();
     const props = parseChatWindowProps({ onAvatarInteraction });
diff --git a/frontend/react-neko-chat/src/message-schema.ts b/frontend/react-neko-chat/src/message-schema.ts
index 549ec5000f..d51cb0a70e 100644
--- a/frontend/react-neko-chat/src/message-schema.ts
+++ b/frontend/react-neko-chat/src/message-schema.ts
@@ -53,6 +53,48 @@ const galgameOptionSchema = z.object({
   text: z.string().min(1),
 });
 
+const commandItemSchema = z.object({
+  action_id: z.string().min(1),
+  type: z.enum(['instant', 'chat_inject', 'navigation']),
+  label: z.string().min(1),
+  description: z.string(),
+  category: z.string(),
+  plugin_id: z.string(),
+  control: z.enum([
+    'toggle',
+    'button',
+    'dropdown',
+    'number',
+    'slider',
+    'text',
+    'plugin_lifecycle',
+    'entry_toggle',
+  ]).optional(),
+  current_value: z.unknown().optional(),
+  options: z.array(z.string()).optional(),
+  min: z.number().finite().optional(),
+  max: z.number().finite().optional(),
+  step: z.number().finite().optional(),
+  disabled: z.boolean().optional(),
+  inject_text: z.string().optional(),
+  input_schema: z.record(z.unknown()).optional(),
+  target: z.string().optional(),
+  open_in: z.enum(['new_tab', 'same_tab']).optional(),
+  keywords: z.array(z.string()).optional(),
+  icon: z.string().nullable().optional(),
+  priority: z.number().finite().optional(),
+  section: z.enum(['pinned', 'recent', 'commands']).nullable().optional(),
+  quick_action: z.boolean().optional(),
+}).strict();
+
+const commandPreferencesSchema = z.object({
+  pinned: z.array(z.string()),
+  hidden: z.array(z.string()),
+  recent: z.array(z.string()),
+}).strict();
+
+const voidOrVoidPromiseSchema = z.union([z.void(), z.promise(z.void())]);
+
 // Generic ChoicePrompt — composer-anchored "AI 给你出几个选项" UI 组件抽象。
 //
 // 当前 source：
@@ -207,6 +249,9 @@ export const chatWindowPropsSchema = z.object({
   galgameToggleButtonLabel: z.string().optional(),
   galgameToggleButtonAriaLabel: z.string().optional(),
   galgameLoadingLabel: z.string().optional(),
+  quickActions: z.array(commandItemSchema).optional(),
+  quickActionsPreferences: commandPreferencesSchema.optional(),
+  quickActionsLoading: z.boolean().optional(),
   onMessageAction: z.function()
     .args(chatMessageSchema, messageActionSchema)
     .returns(z.void())
@@ -255,6 +300,18 @@ export const chatWindowPropsSchema = z.object({
     .args(galgameOptionSchema)
     .returns(z.void())
     .optional(),
+  onQuickActionExecute: z.function()
+    .args(z.string(), z.unknown())
+    .returns(z.promise(z.union([commandItemSchema, z.null()])))
+    .optional(),
+  onQuickActionsRequest: z.function()
+    .args()
+    .returns(voidOrVoidPromiseSchema)
+    .optional(),
+  onQuickActionsPreferencesChange: z.function()
+    .args(commandPreferencesSchema)
+    .returns(voidOrVoidPromiseSchema)
+    .optional(),
   // Generic ChoicePrompt（mini-game invite 等通用三选项框架）
   choicePrompt: choicePromptSchema.optional(),
   onChoiceSelect: z.function()
@@ -274,6 +331,8 @@ export type StatusBlock = z.infer<typeof statusBlockSchema>;
 export type ButtonGroupBlock = z.infer<typeof buttonGroupBlockSchema>;
 export type ComposerAttachment = z.infer<typeof composerAttachmentSchema>;
 export type GalgameOption = z.infer<typeof galgameOptionSchema>;
+export type CommandItemSchema = z.infer<typeof commandItemSchema>;
+export type CommandPreferences = z.infer<typeof commandPreferencesSchema>;
 export type ChoiceOption = z.infer<typeof choiceOptionSchema>;
 export type ChoicePrompt = NonNullable<z.infer<typeof choicePromptSchema>>;
 export type ChoicePromptSource = ChoicePrompt['source'];
diff --git a/frontend/react-neko-chat/src/styles.css b/frontend/react-neko-chat/src/styles.css
index cd6a1ebf2d..511af29275 100644
--- a/frontend/react-neko-chat/src/styles.css
+++ b/frontend/react-neko-chat/src/styles.css
@@ -2090,6 +2090,10 @@ svg {
   background: rgba(68, 183, 254, 0.15);
 }
 
+[data-theme="dark"] .composer-quick-actions-btn.is-active {
+  background: rgba(68, 183, 254, 0.26);
+}
+
 [data-theme="dark"] .composer-emoji-btn.is-active {
   background: rgba(68, 183, 254, 0.26);
 }
@@ -2224,6 +2228,658 @@ svg {
   opacity: 0.85;
 }
 
+/* Command Palette */
+.composer-quick-actions-glyph {
+  display: inline-flex;
+  align-items: center;
+  justify-content: center;
+  width: 20px;
+  height: 20px;
+  font-size: 18px;
+  font-weight: 500;
+  line-height: 1;
+  color: #44b7fe;
+  opacity: 0.85;
+  transition: opacity 0.15s ease;
+}
+
+.composer-quick-actions-btn:hover .composer-quick-actions-glyph {
+  opacity: 1;
+}
+
+.composer-quick-actions-btn.is-active .composer-quick-actions-glyph {
+  opacity: 1;
+  color: #2196f3;
+}
+
+.composer-quick-actions-btn.is-active {
+  background: rgba(68, 183, 254, 0.18);
+}
+
+.cp-panel {
+  position: absolute;
+  left: 10px;
+  right: 10px;
+  bottom: calc(100% + 8px);
+  z-index: 120;
+  display: flex;
+  flex-direction: column;
+  max-height: min(430px, 66vh);
+  overflow: hidden;
+  border: 1px solid rgba(126, 150, 190, 0.2);
+  border-radius: 8px;
+  background: rgba(250, 252, 255, 0.96);
+  box-shadow: 0 18px 46px rgba(46, 66, 112, 0.18), 0 5px 16px rgba(46, 66, 112, 0.1);
+  backdrop-filter: blur(18px) saturate(1.15);
+  -webkit-backdrop-filter: blur(18px) saturate(1.15);
+  animation: cp-slide-up 180ms ease both;
+}
+
+@keyframes cp-slide-up {
+  from { opacity: 0; transform: translateY(8px) scale(0.98); }
+  to { opacity: 1; transform: translateY(0) scale(1); }
+}
+
+@keyframes cp-fade-in {
+  from { opacity: 0; transform: translateY(4px); }
+  to { opacity: 1; transform: translateY(0); }
+}
+
+@keyframes cp-spin {
+  to { transform: rotate(360deg); }
+}
+
+.cp-search-bar {
+  display: flex;
+  align-items: center;
+  gap: 8px;
+  padding: 10px 12px;
+  border-bottom: 1px solid rgba(126, 150, 190, 0.12);
+}
+
+.cp-search-icon {
+  opacity: 0.45;
+  font-size: 0.78rem;
+}
+
+.cp-search {
+  flex: 1;
+  min-width: 0;
+  height: 32px;
+  border: 1px solid rgba(126, 150, 190, 0.22);
+  border-radius: 8px;
+  padding: 0 10px;
+  background: rgba(255, 255, 255, 0.86);
+  color: #25304a;
+  font-size: 0.84rem;
+  outline: none;
+}
+
+.cp-search:focus {
+  border-color: rgba(64, 166, 232, 0.55);
+  box-shadow: 0 0 0 3px rgba(64, 166, 232, 0.12);
+}
+
+.cp-search-clear,
+.cp-ctx-trigger,
+.cp-empty-clear,
+.cp-tab,
+.cp-plugin-card-header,
+.cp-num-btn,
+.cp-param-cancel,
+.cp-param-submit {
+  font: inherit;
+}
+
+.cp-search:focus-visible,
+.cp-search-clear:focus-visible,
+.cp-ctx-trigger:focus-visible,
+.cp-empty-clear:focus-visible,
+.cp-tab:focus-visible,
+.cp-plugin-card-header:focus-visible,
+.cp-row-clickable:focus-visible,
+.cp-num-btn:focus-visible,
+.cp-toggle:focus-visible,
+.cp-param-cancel:focus-visible,
+.cp-param-submit:focus-visible {
+  outline: 2px solid rgba(64, 166, 232, 0.72);
+  outline-offset: 2px;
+  box-shadow: 0 0 0 3px rgba(64, 166, 232, 0.14);
+}
+
+.cp-search-clear {
+  width: 24px;
+  height: 24px;
+  border: 0;
+  border-radius: 50%;
+  background: rgba(126, 150, 190, 0.12);
+  color: #60708e;
+  cursor: pointer;
+}
+
+.cp-content {
+  min-height: 120px;
+  overflow-y: auto;
+  padding: 6px;
+}
+
+.cp-section,
+.cp-page-transition {
+  display: flex;
+  flex-direction: column;
+  gap: 4px;
+}
+
+.cp-stagger,
+.cp-card-item-stagger,
+.cp-page-transition {
+  animation: cp-fade-in 160ms ease both;
+}
+
+.cp-row-wrap {
+  position: relative;
+}
+
+.cp-row-wrap.is-hidden {
+  opacity: 0.38;
+}
+
+.cp-row {
+  display: flex;
+  align-items: center;
+  gap: 10px;
+  min-height: 42px;
+  padding: 7px 8px;
+  border-radius: 8px;
+}
+
+.cp-row-clickable {
+  cursor: pointer;
+}
+
+.cp-row-clickable:hover,
+.cp-row-highlighted {
+  background: rgba(64, 166, 232, 0.08);
+}
+
+.cp-row-icon-wrap {
+  display: inline-flex;
+  align-items: center;
+  justify-content: center;
+  width: 30px;
+  height: 30px;
+  flex: 0 0 30px;
+  border-radius: 8px;
+  background: rgba(126, 150, 190, 0.1);
+}
+
+.cp-row-icon {
+  font-size: 0.88rem;
+  line-height: 1;
+}
+
+.cp-row-info {
+  min-width: 0;
+  flex: 1;
+  display: flex;
+  flex-direction: column;
+  gap: 1px;
+}
+
+.cp-row-label-line {
+  display: flex;
+  align-items: center;
+  gap: 4px;
+  min-width: 0;
+}
+
+.cp-row-label,
+.cp-row-desc {
+  overflow: hidden;
+  text-overflow: ellipsis;
+  white-space: nowrap;
+}
+
+.cp-row-label {
+  color: #273149;
+  font-size: 0.82rem;
+  font-weight: 650;
+}
+
+.cp-row-desc {
+  color: #7c8ba5;
+  font-size: 0.68rem;
+}
+
+.cp-row-right {
+  position: relative;
+  display: flex;
+  align-items: center;
+  gap: 6px;
+  flex-shrink: 0;
+}
+
+.cp-row-badge {
+  display: inline-flex;
+  align-items: center;
+  height: 22px;
+  padding: 0 8px;
+  border: 1px solid rgba(64, 166, 232, 0.16);
+  border-radius: 999px;
+  background: rgba(64, 166, 232, 0.08);
+  color: #287fbd;
+  font-size: 0.68rem;
+  white-space: nowrap;
+}
+
+.cp-ctx-trigger {
+  display: inline-flex;
+  align-items: center;
+  justify-content: center;
+  width: 24px;
+  height: 24px;
+  border: 0;
+  border-radius: 50%;
+  background: transparent;
+  color: #7c8ba5;
+  cursor: pointer;
+}
+
+.cp-ctx-trigger:hover {
+  background: rgba(126, 150, 190, 0.13);
+}
+
+.cp-ctx-menu {
+  position: absolute;
+  top: calc(100% + 4px);
+  right: 0;
+  z-index: 4;
+  min-width: 128px;
+  padding: 4px;
+  border: 1px solid rgba(126, 150, 190, 0.18);
+  border-radius: 8px;
+  background: rgba(255, 255, 255, 0.98);
+  box-shadow: 0 10px 24px rgba(46, 66, 112, 0.16);
+}
+
+.cp-ctx-item {
+  display: block;
+  width: 100%;
+  border: 0;
+  border-radius: 6px;
+  padding: 7px 9px;
+  background: transparent;
+  color: #273149;
+  text-align: left;
+  font-size: 0.76rem;
+  cursor: pointer;
+}
+
+.cp-ctx-item:hover {
+  background: rgba(64, 166, 232, 0.09);
+}
+
+.cp-toggle {
+  position: relative;
+  width: 38px;
+  height: 22px;
+  border: 0;
+  border-radius: 999px;
+  background: rgba(126, 150, 190, 0.24);
+  cursor: pointer;
+}
+
+.cp-toggle.is-on {
+  background: linear-gradient(135deg, #2fbb6b, #46d78f);
+}
+
+.cp-toggle-thumb {
+  position: absolute;
+  top: 2px;
+  left: 2px;
+  width: 18px;
+  height: 18px;
+  border-radius: 50%;
+  background: #fff;
+  box-shadow: 0 1px 4px rgba(0, 0, 0, 0.2);
+  transition: transform 160ms ease;
+}
+
+.cp-toggle.is-on .cp-toggle-thumb {
+  transform: translateX(16px);
+}
+
+.cp-select,
+.cp-text-input,
+.cp-num-input,
+.cp-param-input {
+  border: 1px solid rgba(126, 150, 190, 0.24);
+  border-radius: 7px;
+  background: rgba(255, 255, 255, 0.88);
+  color: #273149;
+  outline: none;
+}
+
+.cp-select,
+.cp-text-input {
+  height: 28px;
+  max-width: 150px;
+  padding: 0 8px;
+  font-size: 0.76rem;
+}
+
+.cp-slider-wrap,
+.cp-num-group {
+  display: flex;
+  align-items: center;
+  gap: 7px;
+}
+
+.cp-slider {
+  width: 92px;
+  accent-color: #348fd3;
+}
+
+.cp-slider-val {
+  min-width: 24px;
+  color: #60708e;
+  font-size: 0.68rem;
+  text-align: right;
+}
+
+.cp-num-group {
+  gap: 0;
+}
+
+.cp-num-btn {
+  width: 26px;
+  height: 28px;
+  border: 1px solid rgba(126, 150, 190, 0.24);
+  background: rgba(255, 255, 255, 0.8);
+  color: #506080;
+  cursor: pointer;
+}
+
+.cp-num-input {
+  width: 46px;
+  height: 28px;
+  border-left: 0;
+  border-right: 0;
+  border-radius: 0;
+  text-align: center;
+}
+
+.cp-param-form {
+  margin: 0 8px 8px 48px;
+  padding: 9px;
+  border-top: 1px solid rgba(126, 150, 190, 0.12);
+  background: rgba(246, 249, 253, 0.78);
+  border-radius: 0 0 8px 8px;
+}
+
+.cp-param-field {
+  display: flex;
+  flex-direction: column;
+  gap: 3px;
+  margin-bottom: 7px;
+}
+
+.cp-param-label {
+  color: #60708e;
+  font-size: 0.7rem;
+  font-weight: 650;
+}
+
+.cp-param-input {
+  height: 30px;
+  padding: 0 8px;
+}
+
+.cp-param-actions {
+  display: flex;
+  justify-content: flex-end;
+  gap: 8px;
+}
+
+.cp-param-cancel,
+.cp-param-submit {
+  border: 0;
+  border-radius: 7px;
+  padding: 5px 12px;
+  font-size: 0.74rem;
+  font-weight: 650;
+  cursor: pointer;
+}
+
+.cp-param-cancel {
+  background: rgba(126, 150, 190, 0.13);
+  color: #60708e;
+}
+
+.cp-param-submit {
+  background: #348fd3;
+  color: #fff;
+}
+
+.cp-spinner {
+  display: inline-block;
+  width: 14px;
+  height: 14px;
+  border: 2px solid rgba(52, 143, 211, 0.18);
+  border-top-color: #348fd3;
+  border-radius: 50%;
+  animation: cp-spin 700ms linear infinite;
+}
+
+.cp-err {
+  display: inline-flex;
+  align-items: center;
+  justify-content: center;
+  width: 18px;
+  height: 18px;
+  border-radius: 50%;
+  background: rgba(220, 76, 76, 0.14);
+  color: #c44141;
+  font-size: 0.7rem;
+  font-weight: 700;
+}
+
+.cp-empty {
+  display: flex;
+  min-height: 150px;
+  flex-direction: column;
+  align-items: center;
+  justify-content: center;
+  gap: 8px;
+  color: #7c8ba5;
+  text-align: center;
+}
+
+.cp-empty-icon {
+  font-size: 1.5rem;
+  opacity: 0.45;
+}
+
+.cp-empty-clear {
+  border: 0;
+  border-radius: 7px;
+  padding: 5px 12px;
+  background: rgba(64, 166, 232, 0.1);
+  color: #287fbd;
+  cursor: pointer;
+}
+
+.cp-tab-bar {
+  display: flex;
+  flex-shrink: 0;
+  border-color: rgba(126, 150, 190, 0.12);
+}
+
+.cp-tab-bar-top {
+  border-bottom: 1px solid rgba(126, 150, 190, 0.12);
+}
+
+.cp-tab-bar-bottom {
+  border-top: 1px solid rgba(126, 150, 190, 0.12);
+}
+
+.cp-tab {
+  flex: 1;
+  min-width: 0;
+  border: 0;
+  background: transparent;
+  color: #60708e;
+  padding: 9px 8px;
+  font-size: 0.74rem;
+  font-weight: 650;
+  cursor: pointer;
+}
+
+.cp-tab:hover {
+  background: rgba(126, 150, 190, 0.08);
+}
+
+.cp-tab-active {
+  color: #287fbd;
+  box-shadow: inset 0 -2px 0 #348fd3;
+}
+
+.cp-plugin-card {
+  border: 1px solid rgba(126, 150, 190, 0.12);
+  border-radius: 8px;
+  overflow: hidden;
+  background: rgba(255, 255, 255, 0.45);
+}
+
+.cp-plugin-card + .cp-plugin-card {
+  margin-top: 5px;
+}
+
+.cp-plugin-card-header {
+  display: flex;
+  align-items: center;
+  gap: 8px;
+  width: 100%;
+  border: 0;
+  padding: 9px 10px;
+  background: transparent;
+  color: #273149;
+  cursor: pointer;
+}
+
+.cp-plugin-card-chevron {
+  color: #7c8ba5;
+  transition: transform 160ms ease;
+}
+
+.cp-plugin-card-chevron.is-open {
+  transform: rotate(90deg);
+}
+
+.cp-plugin-card-name {
+  flex: 1;
+  text-align: left;
+  font-weight: 650;
+}
+
+.cp-plugin-card-counts {
+  display: flex;
+  gap: 4px;
+}
+
+.cp-plugin-card-badge {
+  border-radius: 999px;
+  padding: 1px 6px;
+  background: rgba(64, 166, 232, 0.12);
+  color: #287fbd;
+  font-size: 0.65rem;
+}
+
+.cp-plugin-card-collapse {
+  overflow: hidden;
+  transition: max-height 220ms ease;
+}
+
+.cp-toast-stack {
+  position: absolute;
+  left: 10px;
+  right: 10px;
+  bottom: 8px;
+  z-index: 5;
+  display: flex;
+  flex-direction: column;
+  gap: 6px;
+  pointer-events: none;
+}
+
+.cp-toast {
+  border-radius: 8px;
+  padding: 7px 10px;
+  background: rgba(255, 255, 255, 0.96);
+  box-shadow: 0 6px 18px rgba(46, 66, 112, 0.16);
+  font-size: 0.76rem;
+}
+
+[data-theme="dark"] .cp-panel {
+  background: rgba(35, 38, 56, 0.96);
+  border-color: rgba(255, 255, 255, 0.08);
+  box-shadow: 0 18px 48px rgba(0, 0, 0, 0.36);
+}
+
+[data-theme="dark"] .cp-search,
+[data-theme="dark"] .cp-select,
+[data-theme="dark"] .cp-text-input,
+[data-theme="dark"] .cp-num-input,
+[data-theme="dark"] .cp-param-input {
+  background: rgba(255, 255, 255, 0.06);
+  border-color: rgba(255, 255, 255, 0.1);
+  color: #e8eaed;
+}
+
+[data-theme="dark"] .cp-num-btn {
+  background: rgba(255, 255, 255, 0.06);
+  border-color: rgba(255, 255, 255, 0.1);
+  color: #dce5f4;
+}
+
+[data-theme="dark"] .cp-toggle {
+  background: rgba(255, 255, 255, 0.16);
+}
+
+[data-theme="dark"] .cp-toggle.is-on {
+  background: linear-gradient(135deg, #31a86b, #43c98b);
+}
+
+[data-theme="dark"] .cp-toggle-thumb {
+  background: #f7fbff;
+}
+
+[data-theme="dark"] .cp-row-label,
+[data-theme="dark"] .cp-ctx-item,
+[data-theme="dark"] .cp-plugin-card-header {
+  color: #e8eaed;
+}
+
+[data-theme="dark"] .cp-row-desc,
+[data-theme="dark"] .cp-tab,
+[data-theme="dark"] .cp-empty,
+[data-theme="dark"] .cp-param-label {
+  color: #9aa6ba;
+}
+
+[data-theme="dark"] .cp-row-icon-wrap,
+[data-theme="dark"] .cp-plugin-card,
+[data-theme="dark"] .cp-param-form {
+  background: rgba(255, 255, 255, 0.04);
+  border-color: rgba(255, 255, 255, 0.07);
+}
+
+[data-theme="dark"] .cp-ctx-menu,
+[data-theme="dark"] .cp-toast {
+  background: rgba(35, 38, 56, 0.98);
+  border-color: rgba(255, 255, 255, 0.08);
+}
+
 @media (prefers-reduced-motion: reduce) {
   .avatar-cursor-overlay-stage,
   .hammer-cursor-overlay-stage,
@@ -2238,7 +2894,12 @@ svg {
   .composer-icon-popover,
   .composer-icon-button,
   .composer-galgame-slot,
-  .composer-galgame-option {
+  .composer-galgame-option,
+  .cp-panel,
+  .cp-stagger,
+  .cp-card-item-stagger,
+  .cp-page-transition,
+  .cp-spinner {
     animation: none !important;
     animation-delay: 0ms !important;
     transition: none !important;
diff --git a/frontend/react-neko-chat/src/test/CommandPalette.test.tsx b/frontend/react-neko-chat/src/test/CommandPalette.test.tsx
new file mode 100644
index 0000000000..5637ce7938
--- /dev/null
+++ b/frontend/react-neko-chat/src/test/CommandPalette.test.tsx
@@ -0,0 +1,460 @@
+import { render, screen, fireEvent, waitFor } from '@testing-library/react';
+import { describe, it, expect, vi } from 'vitest';
+import CommandPalette, { type CommandItem, type UserPreferences } from '../CommandPalette';
+
+/* ── Fixtures ──────────────────────────────────────────────────────── */
+
+const toggle: CommandItem = {
+  action_id: 'demo:settings:enabled',
+  type: 'instant',
+  label: 'Enabled',
+  description: 'Toggle feature',
+  category: 'Demo',
+  plugin_id: 'demo',
+  control: 'toggle',
+  current_value: false,
+  icon: '🔘',
+  keywords: ['demo', 'enabled'],
+};
+
+const slider: CommandItem = {
+  action_id: 'demo:settings:volume',
+  type: 'instant',
+  label: 'Volume',
+  description: '',
+  category: 'Demo',
+  plugin_id: 'demo',
+  control: 'slider',
+  current_value: 50,
+  min: 0,
+  max: 100,
+  step: 1,
+  icon: '🎚',
+  keywords: ['demo', 'volume'],
+};
+
+const button: CommandItem = {
+  action_id: 'system:demo:entry:do_thing',
+  type: 'instant',
+  label: 'Do Thing',
+  description: 'Run a task',
+  category: 'Demo',
+  plugin_id: 'demo',
+  control: 'button',
+  icon: '⚡',
+  keywords: ['demo', 'do_thing'],
+};
+
+const buttonWithParams: CommandItem = {
+  ...button,
+  action_id: 'system:demo:entry:with_params',
+  label: 'With Params',
+  input_schema: {
+    type: 'object',
+    properties: {
+      name: { type: 'string', description: 'Name' },
+    },
+  },
+};
+
+const inject: CommandItem = {
+  action_id: 'demo:greet',
+  type: 'chat_inject',
+  label: 'Greet',
+  description: 'Say hello',
+  category: 'Demo',
+  plugin_id: 'demo',
+  inject_text: '@Demo /greet',
+  icon: '📎',
+  keywords: ['demo', 'greet'],
+};
+
+const nav: CommandItem = {
+  action_id: 'system:demo:open_ui',
+  type: 'navigation',
+  label: 'Open UI',
+  description: '',
+  category: 'Demo',
+  plugin_id: 'demo',
+  target: 'http://127.0.0.1:9090/plugin/demo/ui/',
+  open_in: 'new_tab',
+  icon: '↗',
+  keywords: ['demo', 'ui'],
+};
+
+const startPlugin: CommandItem = {
+  action_id: 'system:tts:start',
+  type: 'instant',
+  label: '启动 TTS',
+  description: '',
+  category: '插件管理',
+  plugin_id: 'tts',
+  control: 'button',
+  icon: '▶',
+  keywords: ['tts', 'start', '启动'],
+  priority: -10,
+};
+
+const allItems = [toggle, slider, button, inject, nav, startPlugin];
+
+const emptyPrefs: UserPreferences = { pinned: [], hidden: [], recent: [] };
+
+function renderPalette(
+  items: CommandItem[] = allItems,
+  preferences: UserPreferences = emptyPrefs,
+  overrides: Partial<React.ComponentProps<typeof CommandPalette>> = {},
+) {
+  const onExecute = vi.fn().mockResolvedValue(null);
+  const onInjectText = vi.fn();
+  const onNavigate = vi.fn();
+  const onPreferencesChange = vi.fn();
+  const onClose = vi.fn();
+
+  const result = render(
+    <CommandPalette
+      items={items}
+      preferences={preferences}
+      onExecute={onExecute}
+      onInjectText={onInjectText}
+      onNavigate={onNavigate}
+      onPreferencesChange={onPreferencesChange}
+      onClose={onClose}
+      {...overrides}
+    />,
+  );
+
+  return { ...result, onExecute, onInjectText, onNavigate, onPreferencesChange, onClose };
+}
+
+/* ── Tests ─────────────────────────────────────────────────────────── */
+
+describe('CommandPalette', () => {
+  it('renders the panel with search bar', () => {
+    renderPalette();
+    expect(screen.getByRole('dialog')).toBeInTheDocument();
+    expect(screen.getByPlaceholderText('搜索操作...')).toBeInTheDocument();
+  });
+
+  it('auto-focuses the search input on open', () => {
+    renderPalette();
+    expect(screen.getByPlaceholderText('搜索操作...')).toHaveFocus();
+  });
+
+  it('shows all items in the "全部" section by default', () => {
+    renderPalette();
+    expect(screen.getByText('Enabled')).toBeInTheDocument();
+    expect(screen.getByText('Volume')).toBeInTheDocument();
+    expect(screen.getByText('Do Thing')).toBeInTheDocument();
+    expect(screen.getByText('Greet')).toBeInTheDocument();
+    expect(screen.getByText('Open UI')).toBeInTheDocument();
+    expect(screen.getByText('启动 TTS')).toBeInTheDocument();
+  });
+
+  it('closes on Escape key', () => {
+    const { onClose } = renderPalette();
+    fireEvent.keyDown(document, { key: 'Escape' });
+    expect(onClose).toHaveBeenCalledTimes(1);
+  });
+
+  it('shows empty state when no items', () => {
+    renderPalette([]);
+    expect(screen.getByText('暂无可用操作')).toBeInTheDocument();
+  });
+});
+
+describe('Search', () => {
+  it('filters items by label', () => {
+    renderPalette();
+    const input = screen.getByPlaceholderText('搜索操作...');
+    fireEvent.change(input, { target: { value: 'Volume' } });
+    expect(screen.getByText('Volume')).toBeInTheDocument();
+    expect(screen.queryByText('Greet')).not.toBeInTheDocument();
+  });
+
+  it('filters items by keywords', () => {
+    renderPalette();
+    const input = screen.getByPlaceholderText('搜索操作...');
+    fireEvent.change(input, { target: { value: 'greet' } });
+    expect(screen.getByText('Greet')).toBeInTheDocument();
+    expect(screen.queryByText('Volume')).not.toBeInTheDocument();
+  });
+
+  it('shows no-results state when search has no matches', () => {
+    renderPalette();
+    const input = screen.getByPlaceholderText('搜索操作...');
+    fireEvent.change(input, { target: { value: 'xyznonexistent' } });
+    expect(screen.getByText('没有匹配的操作')).toBeInTheDocument();
+  });
+
+  it('shows clear button when search has text', () => {
+    renderPalette();
+    const input = screen.getByPlaceholderText('搜索操作...');
+    fireEvent.change(input, { target: { value: 'test' } });
+    const clearBtn = screen.getByLabelText('清除搜索');
+    expect(clearBtn).toBeInTheDocument();
+    fireEvent.click(clearBtn);
+    expect(input).toHaveValue('');
+  });
+});
+
+describe('Sections', () => {
+  it('shows pinned items first when preferences have pinned items', () => {
+    const prefs: UserPreferences = { pinned: ['demo:greet'], hidden: [], recent: [] };
+    renderPalette(allItems, prefs);
+    // Pinned item should be visible
+    expect(screen.getByText('Greet')).toBeInTheDocument();
+  });
+
+  it('shows items from recent list', () => {
+    const prefs: UserPreferences = { pinned: [], hidden: [], recent: ['demo:settings:volume'] };
+    renderPalette(allItems, prefs);
+    // Recent item should be visible
+    expect(screen.getByText('Volume')).toBeInTheDocument();
+  });
+
+  it('hides items in hidden list', () => {
+    const prefs: UserPreferences = { pinned: [], hidden: ['demo:greet'], recent: [] };
+    renderPalette(allItems, prefs);
+    // Greet should not be visible in normal view
+    expect(screen.queryByText('Greet')).not.toBeInTheDocument();
+  });
+
+  it('shows hidden items (greyed) when searching', () => {
+    const prefs: UserPreferences = { pinned: [], hidden: ['demo:greet'], recent: [] };
+    renderPalette(allItems, prefs);
+    const input = screen.getByPlaceholderText('搜索操作...');
+    fireEvent.change(input, { target: { value: 'Greet' } });
+    // Should appear in search results even though hidden.
+    const label = screen.getByText('Greet');
+    expect(label).toBeInTheDocument();
+    // Lock the "greyed" visual: the row's wrap element must carry the
+    // is-hidden class. Without this, a style regression that drops the
+    // class would still leave the visibility-only assertion green.
+    const wrap = label.closest('.cp-row-wrap');
+    expect(wrap).not.toBeNull();
+    expect(wrap).toHaveClass('is-hidden');
+  });
+
+  it('does not duplicate pinned items in the all section', () => {
+    const prefs: UserPreferences = { pinned: ['demo:greet'], hidden: [], recent: [] };
+    renderPalette(allItems, prefs);
+    // Greet should appear once (in pinned), not twice
+    const greetElements = screen.getAllByText('Greet');
+    expect(greetElements).toHaveLength(1);
+  });
+});
+
+describe('Toggle control', () => {
+  it('renders a switch for toggle items', () => {
+    renderPalette([toggle]);
+    const sw = screen.getByRole('switch');
+    expect(sw).toHaveAttribute('aria-checked', 'false');
+  });
+
+  it('calls onExecute with negated value on click', async () => {
+    const { onExecute } = renderPalette([toggle]);
+    const sw = screen.getByRole('switch');
+    fireEvent.click(sw);
+    await waitFor(() => {
+      expect(onExecute).toHaveBeenCalledWith('demo:settings:enabled', true);
+    });
+  });
+});
+
+describe('Button control', () => {
+  it('calls onExecute with null on click', async () => {
+    const { onExecute } = renderPalette([button]);
+    // The row is a div[role=button] — find by the label text inside it
+    const label = screen.getByText('Do Thing');
+    fireEvent.click(label.closest('.cp-row')!);
+    await waitFor(() => {
+      expect(onExecute).toHaveBeenCalledWith('system:demo:entry:do_thing', null);
+    });
+  });
+
+  it('opens parameter form instead of executing null from keyboard Enter', () => {
+    const { onExecute } = renderPalette([buttonWithParams]);
+    const input = screen.getByPlaceholderText('搜索操作...');
+
+    fireEvent.keyDown(input, { key: 'ArrowDown' });
+    fireEvent.keyDown(input, { key: 'Enter' });
+
+    expect(screen.getByText('Name')).toBeInTheDocument();
+    expect(onExecute).not.toHaveBeenCalled();
+  });
+});
+
+describe('Chat inject', () => {
+  it('calls onInjectText and onClose on click', () => {
+    const { onInjectText, onClose } = renderPalette([inject]);
+    const label = screen.getByText('Greet');
+    fireEvent.click(label.closest('.cp-row')!);
+    expect(onInjectText).toHaveBeenCalledWith('@Demo /greet');
+    expect(onClose).toHaveBeenCalled();
+  });
+});
+
+describe('Navigation', () => {
+  it('calls onNavigate on click', () => {
+    const { onNavigate } = renderPalette([nav]);
+    const label = screen.getByText('Open UI');
+    fireEvent.click(label.closest('.cp-row')!);
+    expect(onNavigate).toHaveBeenCalledWith(
+      'http://127.0.0.1:9090/plugin/demo/ui/',
+      'new_tab',
+    );
+  });
+});
+
+describe('Context menu (pin/hide)', () => {
+  it('toggles pin via context menu', async () => {
+    const { onPreferencesChange } = renderPalette([button]);
+    // Open context menu
+    const ctxTrigger = screen.getByLabelText('更多');
+    fireEvent.click(ctxTrigger);
+    // Click pin
+    const pinBtn = screen.getByText(/置顶/);
+    fireEvent.click(pinBtn);
+    expect(onPreferencesChange).toHaveBeenCalledWith(
+      expect.objectContaining({ pinned: ['system:demo:entry:do_thing'] }),
+    );
+  });
+
+  it('toggles hide via context menu', async () => {
+    const { onPreferencesChange } = renderPalette([button]);
+    const ctxTrigger = screen.getByLabelText('更多');
+    fireEvent.click(ctxTrigger);
+    const hideBtn = screen.getByText(/隐藏/);
+    fireEvent.click(hideBtn);
+    expect(onPreferencesChange).toHaveBeenCalledWith(
+      expect.objectContaining({ hidden: ['system:demo:entry:do_thing'] }),
+    );
+  });
+});
+
+describe('Error handling', () => {
+  it('shows error toast when execute fails', async () => {
+    const onExecute = vi.fn().mockRejectedValue(new Error('boom'));
+    renderPalette([button], emptyPrefs, { onExecute });
+    const label = screen.getByText('Do Thing');
+    fireEvent.click(label.closest('.cp-row')!);
+    await waitFor(() => {
+      expect(screen.getByText(/boom/)).toBeInTheDocument();
+    });
+  });
+});
+
+describe('Slider control', () => {
+  it('renders a range input', () => {
+    renderPalette([slider]);
+    const input = screen.getByRole('slider');
+    expect(input).toHaveAttribute('min', '0');
+    expect(input).toHaveAttribute('max', '100');
+  });
+});
+
+describe('Parameter form submit', () => {
+  it('omits untouched optional fields so the server default applies', async () => {
+    const { onExecute } = renderPalette([buttonWithParams]);
+    const search = screen.getByPlaceholderText('搜索操作...');
+
+    // Open the parameter form for the button-with-params item.
+    fireEvent.keyDown(search, { key: 'ArrowDown' });
+    fireEvent.keyDown(search, { key: 'Enter' });
+    expect(screen.getByText('Name')).toBeInTheDocument();
+
+    // Submit without filling anything. Previously this would coerce blank
+    // string into `{name: ""}`, actively overriding the plugin/server
+    // default; the fix should send an empty payload instead.
+    fireEvent.click(screen.getByText('确认'));
+
+    await waitFor(() => {
+      expect(onExecute).toHaveBeenCalledWith('system:demo:entry:with_params', {});
+    });
+  });
+
+  it('emits filled fields verbatim', async () => {
+    const { onExecute } = renderPalette([buttonWithParams]);
+    const search = screen.getByPlaceholderText('搜索操作...');
+
+    fireEvent.keyDown(search, { key: 'ArrowDown' });
+    fireEvent.keyDown(search, { key: 'Enter' });
+
+    const nameInput = screen.getByPlaceholderText('name');
+    fireEvent.change(nameInput, { target: { value: 'hello' } });
+    fireEvent.click(screen.getByText('确认'));
+
+    await waitFor(() => {
+      expect(onExecute).toHaveBeenCalledWith('system:demo:entry:with_params', { name: 'hello' });
+    });
+  });
+});
+
+describe('Grouped view keyboard activation', () => {
+  it('activates the highlighted row via Enter even when rendered grouped', async () => {
+    // Use only the chat_inject item so Enter activation calls onInjectText
+    // (button/instant items have other code paths; chat_inject is the
+    // simplest one to assert on). The keyboard handler in CommandPalette
+    // dispatches Enter by clicking the `.cp-row-highlighted.cp-row-clickable`
+    // element, which only resolves if PluginCard actually passes the
+    // highlighted prop through to its children.
+    const { onInjectText } = renderPalette([inject]);
+
+    // Switch to "按插件" (byPlugin) view. The button text is "🧩 按插件";
+    // match by regex so the leading emoji doesn't trip exact-match.
+    fireEvent.click(screen.getByRole('button', { name: /按插件/ }));
+
+    const input = screen.getByPlaceholderText('搜索操作...');
+    fireEvent.keyDown(input, { key: 'ArrowDown' });
+    fireEvent.keyDown(input, { key: 'Enter' });
+
+    await waitFor(() => {
+      expect(onInjectText).toHaveBeenCalledWith('@Demo /greet');
+    });
+  });
+
+  it('moves the highlight in the same order as grouped rows', () => {
+    const alphaFirst: CommandItem = {
+      ...inject,
+      action_id: 'alpha:first',
+      label: 'Alpha First',
+      category: 'Alpha',
+      plugin_id: 'alpha',
+      inject_text: '@Alpha /first',
+      priority: 30,
+    };
+    const betaFirst: CommandItem = {
+      ...inject,
+      action_id: 'beta:first',
+      label: 'Beta First',
+      category: 'Beta',
+      plugin_id: 'beta',
+      inject_text: '@Beta /first',
+      priority: 20,
+    };
+    const alphaSecond: CommandItem = {
+      ...inject,
+      action_id: 'alpha:second',
+      label: 'Alpha Second',
+      category: 'Alpha',
+      plugin_id: 'alpha',
+      inject_text: '@Alpha /second',
+      priority: 10,
+    };
+
+    renderPalette([alphaFirst, betaFirst, alphaSecond]);
+    fireEvent.click(screen.getByRole('button', { name: /按插件/ }));
+
+    const search = screen.getByPlaceholderText('搜索操作...');
+    const row = (label: string) => screen.getByRole('button', { name: new RegExp(label) });
+
+    fireEvent.keyDown(search, { key: 'ArrowDown' });
+    expect(row('Alpha First')).toHaveClass('cp-row-highlighted');
+
+    fireEvent.keyDown(search, { key: 'ArrowDown' });
+    expect(row('Alpha Second')).toHaveClass('cp-row-highlighted');
+
+    fireEvent.keyDown(search, { key: 'ArrowDown' });
+    expect(row('Beta First')).toHaveClass('cp-row-highlighted');
+  });
+});
diff --git a/frontend/react-neko-chat/src/test/setup.ts b/frontend/react-neko-chat/src/test/setup.ts
index 668f30d6b7..1bb577bfb5 100644
--- a/frontend/react-neko-chat/src/test/setup.ts
+++ b/frontend/react-neko-chat/src/test/setup.ts
@@ -19,7 +19,11 @@ if (!HTMLElement.prototype.scrollTo) {
 }
 
 if (typeof window.ResizeObserver === 'undefined') {
+  // Match the real `ResizeObserver(callback)` signature so callers like
+  // `new ResizeObserver(measure)` aren't falsely flagged as passing a
+  // superfluous argument by signature-based static analysis (CodeQL).
   class ResizeObserverStub {
+    constructor(_cb?: ResizeObserverCallback) {}
     observe() {}
     unobserve() {}
     disconnect() {}
diff --git a/main_routers/actions_proxy_router.py b/main_routers/actions_proxy_router.py
new file mode 100644
index 0000000000..4d756653bc
--- /dev/null
+++ b/main_routers/actions_proxy_router.py
@@ -0,0 +1,162 @@
+# -*- coding: utf-8 -*-
+"""
+Actions Proxy Router
+
+Proxies Command Palette requests from the main server to the user plugin
+server, which owns the actual action providers.
+
+URL convention: routes declared WITHOUT trailing slash. See
+``main_routers/characters_router.py`` docstring or
+``.agent/rules/neko-guide.md`` for the project-wide convention.
+"""
+from __future__ import annotations
+
+import time
+from typing import Any
+from urllib.parse import quote
+
+import httpx
+from fastapi import APIRouter, Query, Request
+from fastapi.responses import JSONResponse
+
+from config import USER_PLUGIN_BASE
+from utils.logger_config import get_module_logger
+
+router = APIRouter(tags=["actions-proxy"])
+logger = get_module_logger(__name__, "Main")
+
+_USER_PLUGIN_DEFAULT_BASE = "http://127.0.0.1:48916"
+_USER_PLUGIN_BASE_CACHE: tuple[str, float] = ("", 0.0)
+
+
+def _proxy_response(resp: httpx.Response) -> JSONResponse:
+    """Return the plugin server response with its original status code."""
+    try:
+        content = resp.json()
+    except ValueError:
+        content = {"detail": resp.text}
+    return JSONResponse(status_code=resp.status_code, content=content)
+
+
+def _empty_actions_payload() -> dict[str, Any]:
+    return {"actions": [], "preferences": {"pinned": [], "hidden": [], "recent": []}}
+
+
+def _empty_preferences_payload() -> dict[str, Any]:
+    return {"pinned": [], "hidden": [], "recent": []}
+
+
+async def _resolve_user_plugin_base() -> str:
+    """Resolve the active user plugin server base URL.
+
+    The configured base is normally correct. The fallback mirrors the agent
+    dashboard route so dev setups that still use the historical default port
+    remain reachable.
+    """
+    global _USER_PLUGIN_BASE_CACHE
+    cached_base, cached_at = _USER_PLUGIN_BASE_CACHE
+    now = time.monotonic()
+    if cached_base and now - cached_at < 5.0:
+        return cached_base
+
+    candidates: list[str] = []
+    for value in (USER_PLUGIN_BASE, _USER_PLUGIN_DEFAULT_BASE):
+        normalized = str(value or "").rstrip("/")
+        if normalized and normalized not in candidates:
+            candidates.append(normalized)
+
+    async with httpx.AsyncClient(timeout=0.45, proxy=None, trust_env=False) as client:
+        for base in candidates:
+            try:
+                response = await client.get(f"{base}/available")
+                if response.is_success:
+                    _USER_PLUGIN_BASE_CACHE = (base, now)
+                    return base
+            except Exception:
+                continue
+
+    fallback = str(USER_PLUGIN_BASE or _USER_PLUGIN_DEFAULT_BASE).rstrip("/")
+    _USER_PLUGIN_BASE_CACHE = (fallback, now)
+    return fallback
+
+
+@router.get("/chat/actions", response_model=None)
+async def proxy_chat_actions(
+    plugin_id: str | None = Query(default=None),
+) -> Any:
+    """Proxy GET /chat/actions to the user plugin server."""
+    params: dict[str, str] = {}
+    if plugin_id:
+        params["plugin_id"] = plugin_id
+    try:
+        base = await _resolve_user_plugin_base()
+        async with httpx.AsyncClient(timeout=5.0, proxy=None, trust_env=False) as client:
+            resp = await client.get(f"{base}/chat/actions", params=params)
+            return _proxy_response(resp)
+    except Exception:
+        logger.debug("Failed to proxy GET /chat/actions", exc_info=True)
+        return _empty_actions_payload()
+
+
+# Preferences routes must be registered before the {action_id:path} route.
+
+
+@router.get("/chat/actions/preferences", response_model=None)
+async def proxy_get_preferences() -> Any:
+    """Proxy GET /chat/actions/preferences to the user plugin server."""
+    try:
+        base = await _resolve_user_plugin_base()
+        async with httpx.AsyncClient(timeout=5.0, proxy=None, trust_env=False) as client:
+            resp = await client.get(f"{base}/chat/actions/preferences")
+            return _proxy_response(resp)
+    except Exception:
+        logger.debug("Failed to proxy GET /chat/actions/preferences", exc_info=True)
+        return _empty_preferences_payload()
+
+
+@router.post("/chat/actions/preferences", response_model=None)
+async def proxy_save_preferences(request: Request) -> JSONResponse:
+    """Proxy POST /chat/actions/preferences to the user plugin server."""
+    try:
+        body = await request.json()
+    except Exception:
+        body = {}
+    try:
+        base = await _resolve_user_plugin_base()
+        async with httpx.AsyncClient(timeout=5.0, proxy=None, trust_env=False) as client:
+            resp = await client.post(f"{base}/chat/actions/preferences", json=body)
+            return _proxy_response(resp)
+    except Exception as exc:
+        logger.warning("Failed to proxy POST /chat/actions/preferences: %s", exc)
+        return JSONResponse(status_code=502, content=_empty_preferences_payload())
+
+
+@router.post("/chat/actions/{action_id:path}/execute", response_model=None)
+async def proxy_chat_action_execute(
+    action_id: str,
+    request: Request,
+) -> JSONResponse:
+    """Proxy POST /chat/actions/{action_id}/execute to the user plugin server."""
+    try:
+        body = await request.json()
+    except Exception:
+        body = {}
+    # Percent-encode the action_id segment: action IDs are plugin-defined and
+    # can contain reserved URL characters (`?`, `#`, `%`, ...) that would
+    # otherwise reinterpret the outgoing path/query and turn a legitimate
+    # action into a 404 on the plugin server. `:` is the canonical separator
+    # in action IDs (e.g. `system:demo:toggle`) so we keep it unencoded for
+    # readability; everything else (including `/`) is encoded and FastAPI's
+    # `{action_id:path}` decodes on the other side.
+    encoded_action_id = quote(action_id, safe=":")
+    try:
+        base = await _resolve_user_plugin_base()
+        async with httpx.AsyncClient(timeout=10.0, proxy=None, trust_env=False) as client:
+            resp = await client.post(f"{base}/chat/actions/{encoded_action_id}/execute", json=body)
+            return _proxy_response(resp)
+    except Exception as exc:
+        logger.warning("Failed to proxy POST /chat/actions/%s/execute: %s", action_id, exc)
+        return JSONResponse(
+            status_code=502,
+            content={"success": False, "action": None, "message": str(exc)},
+        )
diff --git a/plugin/sdk/plugin/__init__.py b/plugin/sdk/plugin/__init__.py
index a84029dc6b..abecad31d0 100644
--- a/plugin/sdk/plugin/__init__.py
+++ b/plugin/sdk/plugin/__init__.py
@@ -5,19 +5,17 @@
 
 from __future__ import annotations
 
-import sys as _sys
-from importlib import import_module as _import_module
+import importlib
 
 from . import base as _base
 from . import decorators as _decorators
-# 避免 `from . import llm_tool as _llm_tool` 在 importlib.reload 时被外部 `llm_tool` 函数名
-# 遮蔽（第一次加载后本模块的 `llm_tool` 属性变成函数，导致下次 `from . import llm_tool` 拿回函数而非子模块）喵
-_llm_tool = _sys.modules.get("plugin.sdk.plugin.llm_tool") or _import_module("plugin.sdk.plugin.llm_tool")
 from . import runtime as _runtime
 from . import settings as _settings
 from . import ui as ui
 from plugin.sdk.shared.i18n import PluginI18n, tr
 
+_llm_tool = importlib.import_module(f"{__name__}.llm_tool")
+
 # --- Base ---
 NEKO_PLUGIN_META_ATTR = _base.NEKO_PLUGIN_META_ATTR
 NEKO_PLUGIN_TAG = _base.NEKO_PLUGIN_TAG
diff --git a/plugin/sdk/plugin/base.py b/plugin/sdk/plugin/base.py
index d4f4e834f4..f9de0c86e4 100644
--- a/plugin/sdk/plugin/base.py
+++ b/plugin/sdk/plugin/base.py
@@ -14,7 +14,6 @@
 from plugin.sdk.shared.core.base import DEFAULT_PLUGIN_VERSION as _DEFAULT_PLUGIN_VERSION
 from plugin.sdk.shared.core.base import NekoPluginBase as _SharedNekoPluginBase
 from plugin.sdk.shared.core.base import PluginMeta as _SharedPluginMeta
-from plugin.sdk.shared.core.base_runtime import resolve_plugin_data_dir
 from plugin.sdk.shared.core.events import EventHandler, EventMeta
 from plugin.sdk.shared.i18n import PluginI18n, load_plugin_i18n_from_meta
 from plugin.sdk.shared.models.exceptions import EntryConflictError
@@ -47,6 +46,7 @@ def __init__(self, ctx):
         self.i18n = self._load_plugin_i18n()
         self._static_ui_config: dict[str, Any] | None = None
         self._list_actions: list[dict[str, Any]] = []
+        self._last_attachments: list[dict] = []
         self._dynamic_entries: dict[str, dict[str, Any]] = {}
         # plugin_id-scoped registry of LLM tools we've claimed locally.
         # Tracks (name -> LlmToolMeta) so we can re-emit IPC notifications
@@ -112,6 +112,7 @@ def config_dir(self) -> Path:
         return Path(config_path).parent if config_path is not None else Path.cwd()
 
     def data_path(self, *parts: str) -> Path:
+        from plugin.sdk.shared.core.base_runtime import resolve_plugin_data_dir
         base = resolve_plugin_data_dir(self.ctx)
         return base.joinpath(*parts) if parts else base
 
@@ -146,6 +147,48 @@ async def run_update(self, **kwargs: Any) -> object:
     async def export_push(self, **kwargs: Any) -> object:
         return await self.ctx.export_push(**kwargs)
 
+    async def export_push_image(self, **kwargs: Any) -> object:
+        return await self.ctx.export_push_image(**kwargs)
+
+    def get_attachments(self) -> list[dict]:
+        """Return image attachments forwarded from the user's chat message."""
+        try:
+            result = self.ctx.get_attachments()
+            if isinstance(result, list):
+                self._last_attachments = list(result)
+                return list(self._last_attachments)
+        except Exception:
+            pass  # ctx may not support get_attachments; fall back to cache
+        return list(self._last_attachments)
+
+    def get_user_language(self) -> str:
+        try:
+            getter = getattr(self.ctx, "get_user_language", None)
+            if callable(getter):
+                return str(getter() or "")
+        except Exception:
+            pass  # ctx may not implement get_user_language; return empty
+        return ""
+
+    def set_user_language(self, lang: str) -> None:
+        try:
+            setter = getattr(self.ctx, "set_user_language", None)
+            if callable(setter):
+                setter(lang)
+        except Exception:
+            pass  # best-effort; language state is non-critical
+
+    async def fetch_user_language(self, *, timeout: float = 5.0) -> str:
+        try:
+            result = await self.system_info.get_user_language(timeout=timeout)
+            if result.is_ok():
+                lang = str(result.value)
+                self.set_user_language(lang)
+                return lang
+        except Exception:
+            pass  # non-critical; fall back to cached/context language
+        return self.get_user_language()
+
     async def finish(self, **kwargs: Any) -> Any:
         return await self.ctx.finish(**kwargs)
 
diff --git a/plugin/sdk/plugin/settings.py b/plugin/sdk/plugin/settings.py
index 7ce839fd9b..9510a6ef2d 100644
--- a/plugin/sdk/plugin/settings.py
+++ b/plugin/sdk/plugin/settings.py
@@ -58,14 +58,26 @@ def SettingsField(
         description: Human-readable description.
         **kwargs: Forwarded to ``pydantic.Field``.
     """
-    json_schema_extra = kwargs.pop("json_schema_extra", None) or {}
-    json_schema_extra["hot"] = hot
-    return Field(
+    json_schema_extra = kwargs.pop("json_schema_extra", None)
+    if callable(json_schema_extra):
+        original_extra = json_schema_extra
+
+        def _with_hot(schema: dict[str, Any]) -> None:
+            original_extra(schema)
+            schema["hot"] = hot
+
+        json_schema_extra = _with_hot
+    else:
+        json_schema_extra = dict(json_schema_extra or {})
+        json_schema_extra["hot"] = hot
+    field = Field(
         default=default,
         description=description,
         json_schema_extra=json_schema_extra,
         **kwargs,
     )
+    field.metadata.append(("__neko_hot__", hot))
+    return field
 
 
 def get_hot_fields(settings_cls: type[PluginSettings]) -> set[str]:
@@ -75,6 +87,12 @@ def get_hot_fields(settings_cls: type[PluginSettings]) -> set[str]:
     """
     hot_names: set[str] = set()
     for name, field_info in settings_cls.model_fields.items():
+        if any(
+            isinstance(entry, tuple) and entry[:1] == ("__neko_hot__",) and bool(entry[1])
+            for entry in field_info.metadata
+        ):
+            hot_names.add(name)
+            continue
         extra = field_info.json_schema_extra
         if isinstance(extra, dict) and extra.get("hot") is True:
             hot_names.add(name)
@@ -108,6 +126,7 @@ def create_settings_safe(
         pass
 
     # Slow path: validate field-by-field, falling back to defaults.
+    base_defaults = _defaults_dict(settings_cls)
     safe_data: dict[str, Any] = {}
     for name, field_info in settings_cls.model_fields.items():
         if name not in data:
@@ -119,31 +138,31 @@ def create_settings_safe(
         probe: dict[str, Any] = {name: value}
         try:
             settings_cls.model_validate(
-                {**_defaults_dict(settings_cls), **probe},
+                {**base_defaults, **probe},
             )
             safe_data[name] = value
         except ValidationError as exc:
             _field_default = field_info.default
-            if _field_default is PydanticUndefined:
+            has_default_factory = field_info.default_factory is not None
+            if _field_default is PydanticUndefined and not has_default_factory:
                 # Required field with no default — we must include the bad
                 # value and let the final validation decide.
                 safe_data[name] = value
             else:
+                default_label = "<factory>" if has_default_factory else _field_default
                 logger.warning(
-                    "PluginSettings field '{}' validation failed, using default ({}): {}",
+                    "PluginSettings field '{}' validation failed, using default ({})",
                     name,
-                    _field_default,
-                    exc,
+                    default_label,
                 )
                 # Omit from safe_data so pydantic uses the declared default.
 
     try:
-        return settings_cls.model_validate(safe_data)
-    except ValidationError as exc:
+        return settings_cls.model_validate({**base_defaults, **safe_data})
+    except ValidationError:
         # Last resort: all defaults.
         logger.warning(
-            "PluginSettings full fallback to defaults after per-field recovery failed: {}",
-            exc,
+            "PluginSettings full fallback to defaults after per-field recovery failed",
         )
         return settings_cls.model_validate({})
 
@@ -155,7 +174,13 @@ def _defaults_dict(settings_cls: type[PluginSettings]) -> dict[str, Any]:
         if field_info.default is not PydanticUndefined:
             defaults[name] = field_info.default
         elif field_info.default_factory is not None:
-            defaults[name] = field_info.default_factory()
+            try:
+                defaults[name] = field_info.get_default(
+                    call_default_factory=True,
+                    validated_data=defaults,
+                )
+            except TypeError:
+                defaults[name] = field_info.get_default(call_default_factory=True)
     return defaults
 
 
diff --git a/plugin/sdk/shared/core/decorators.py b/plugin/sdk/shared/core/decorators.py
index 565fbeb319..15ebdb1cd6 100644
--- a/plugin/sdk/shared/core/decorators.py
+++ b/plugin/sdk/shared/core/decorators.py
@@ -599,7 +599,8 @@ def quick_action(
 ) -> Callable[[F], F]:
     """标记一个 entry 为快捷操作，在命令面板中优先展示。
 
-    必须放在 @plugin_entry 下面（先执行），由 @plugin_entry 读取配置。
+    可放在 @plugin_entry 上方或下方。若 @plugin_entry 已经先执行，本装饰器
+    会直接更新已有 entry metadata。
 
     用法::
 
@@ -614,6 +615,10 @@ async def get_weather(self, ...): ...
     cfg = QuickActionConfig(icon=icon, priority=priority)
 
     def _decorator(fn: F) -> F:
+        meta = getattr(fn, EVENT_META_ATTR, None)
+        if isinstance(meta, EventMeta):
+            meta.quick_action = True
+            meta.quick_action_config = cfg
         setattr(fn, _QUICK_ACTION_CONFIG_ATTR, cfg)
         return fn
 
diff --git a/plugin/sdk/shared/runtime/system_info.py b/plugin/sdk/shared/runtime/system_info.py
index d0e2bd589b..643a6e7bcc 100644
--- a/plugin/sdk/shared/runtime/system_info.py
+++ b/plugin/sdk/shared/runtime/system_info.py
@@ -148,6 +148,38 @@ async def get_server_settings(self, *, timeout: float = 5.0) -> Result[JsonObjec
                 Err(self._normalize_impl_error(error, op_name="system_info.get_server_settings", timeout=timeout)),
             )
 
+    async def get_user_language(self, *, timeout: float = 5.0) -> Result[str, SystemInfoErrorLike]:
+        """Return the user's configured language code from the host.
+
+        Returns Ok("") when no language is configured — callers should
+        treat an empty string as "language not set" and fall back to their
+        own default locale.
+        """
+        timeout_ok = self._validate_timeout(timeout)
+        if isinstance(timeout_ok, Err):
+            return cast(Result[str, SystemInfoErrorLike], timeout_ok)
+        try:
+            config_result = await self.get_system_config(timeout=timeout)
+            if isinstance(config_result, Err):
+                return cast(Result[str, SystemInfoErrorLike], config_result)
+            payload = config_result.value
+            if isinstance(payload.get("data"), dict):
+                payload = payload["data"]
+            cfg = payload.get("config") if isinstance(payload, dict) else payload
+            if isinstance(cfg, dict):
+                full = cfg.get("user_language_full")
+                if isinstance(full, str) and full:
+                    return Ok(full)
+                short = cfg.get("user_language")
+                if isinstance(short, str) and short:
+                    return Ok(short)
+            return Ok("")
+        except Exception as error:
+            return cast(
+                Result[str, SystemInfoErrorLike],
+                Err(self._normalize_impl_error(error, op_name="system_info.get_user_language", timeout=timeout)),
+            )
+
     async def get_python_env(self) -> Result[JsonObject, TransportError]:
         try:
             try:
diff --git a/plugin/server/application/actions/__init__.py b/plugin/server/application/actions/__init__.py
new file mode 100644
index 0000000000..aed48bda44
--- /dev/null
+++ b/plugin/server/application/actions/__init__.py
@@ -0,0 +1,28 @@
+"""Quick Actions Panel — action providers.
+
+This package contains the three ``ActionProvider`` implementations that
+feed the ``ActionAggregationService``:
+
+* ``SettingsActionProvider``  – auto-generates instant actions from
+  ``PluginSettings`` hot fields.
+* ``ListActionsProvider``     – maps plugin ``list_actions`` to
+  ``ActionDescriptor`` items.
+* ``SystemActionProvider``    – generates lifecycle, toggle, entry,
+  static-UI and profile actions for every registered plugin.
+"""
+
+from __future__ import annotations
+
+from plugin.server.application.actions.aggregation_service import ActionAggregationService
+from plugin.server.application.actions.execution_service import ActionExecutionService
+from plugin.server.application.actions.list_actions_provider import ListActionsProvider
+from plugin.server.application.actions.settings_provider import SettingsActionProvider
+from plugin.server.application.actions.system_provider import SystemActionProvider
+
+__all__ = [
+    "ActionAggregationService",
+    "ActionExecutionService",
+    "ListActionsProvider",
+    "SettingsActionProvider",
+    "SystemActionProvider",
+]
diff --git a/plugin/server/application/actions/aggregation_service.py b/plugin/server/application/actions/aggregation_service.py
new file mode 100644
index 0000000000..f267ac2965
--- /dev/null
+++ b/plugin/server/application/actions/aggregation_service.py
@@ -0,0 +1,55 @@
+"""ActionAggregationService — merge actions from all providers.
+
+Holds instances of the ``ActionProvider`` implementations and
+exposes a single ``aggregate_actions`` method that collects, merges and
+returns a flat list of ``ActionDescriptor`` items.
+
+Per-provider errors are caught and logged so that a single failing
+provider does not block the others.
+"""
+
+from __future__ import annotations
+
+from plugin.logging_config import get_logger
+from plugin.server.application.actions.builtin_provider import BuiltinActionsProvider
+from plugin.server.application.actions.list_actions_provider import ListActionsProvider
+from plugin.server.application.actions.settings_provider import SettingsActionProvider
+from plugin.server.application.actions.system_provider import SystemActionProvider
+from plugin.server.domain.action_models import ActionDescriptor
+from plugin.server.domain.action_provider import ActionProvider
+
+logger = get_logger("server.application.actions.aggregation")
+
+
+class ActionAggregationService:
+    """Aggregate ``ActionDescriptor`` items from all providers."""
+
+    def __init__(self) -> None:
+        self._providers: list[ActionProvider] = [
+            SettingsActionProvider(),
+            ListActionsProvider(),
+            SystemActionProvider(),
+            BuiltinActionsProvider(),
+        ]
+
+    async def aggregate_actions(
+        self,
+        plugin_id: str | None = None,
+    ) -> list[ActionDescriptor]:
+        """Call all providers, merge results, return flat list.
+
+        A single provider failure is logged as a warning and does not
+        prevent the other providers from contributing their actions.
+        """
+        all_actions: list[ActionDescriptor] = []
+        for provider in self._providers:
+            try:
+                actions = await provider.get_actions(plugin_id=plugin_id)
+                all_actions.extend(actions)
+            except Exception as exc:
+                logger.warning(
+                    "ActionProvider {} failed: {}",
+                    type(provider).__name__,
+                    str(exc),
+                )
+        return all_actions
diff --git a/plugin/server/application/actions/builtin_provider.py b/plugin/server/application/actions/builtin_provider.py
new file mode 100644
index 0000000000..825ef0c740
--- /dev/null
+++ b/plugin/server/application/actions/builtin_provider.py
@@ -0,0 +1,108 @@
+"""BuiltinActionsProvider — always-available commands for the command palette.
+
+These actions are available regardless of whether a plugin exposes entries
+or settings.  For every registered plugin, this provider generates
+start / stop / reload buttons so the command palette is never empty.
+"""
+
+from __future__ import annotations
+
+import asyncio
+from collections.abc import Mapping
+from typing import Any
+
+from plugin.logging_config import get_logger
+from plugin.sdk.shared.i18n import load_plugin_i18n_from_meta, resolve_i18n_refs
+from plugin.server.domain.action_models import ActionDescriptor
+
+logger = get_logger("server.application.actions.builtin_provider")
+
+
+def _resolve_default_locale() -> str:
+    try:
+        from utils.language_utils import get_global_language_full
+
+        return str(get_global_language_full() or "en")
+    except Exception:
+        return "en"
+
+
+def _collect_builtin_actions_sync(
+    plugin_id_filter: str | None = None,
+) -> list[ActionDescriptor]:
+    """Collect built-in actions (called from a worker thread)."""
+    from plugin.core.state import state
+
+    actions: list[ActionDescriptor] = []
+    locale = _resolve_default_locale()
+
+    # ── Plugin lifecycle: start/stop for every registered plugin ──
+    # This gives users a way to manage plugins from the command palette
+    # without the old full lifecycle control panel.
+    plugins_snapshot = state.get_plugins_snapshot_cached()
+    hosts_snapshot: dict[str, Any] = {}
+    with state.acquire_plugin_hosts_read_lock():
+        hosts_snapshot = dict(state.plugin_hosts)
+
+    for pid, meta_raw in plugins_snapshot.items():
+        if plugin_id_filter is not None and pid != plugin_id_filter:
+            continue
+
+        if not isinstance(meta_raw, Mapping):
+            continue
+        meta: dict[str, Any] = dict(meta_raw)
+        plugin_i18n = load_plugin_i18n_from_meta(meta)
+        resolved_name = resolve_i18n_refs(meta.get("name") or pid, plugin_i18n, locale=locale)
+        plugin_name = str(resolved_name or pid)
+        is_running = pid in hosts_snapshot
+
+        if is_running:
+            actions.append(ActionDescriptor(
+                action_id=f"system:{pid}:stop",
+                type="instant",
+                label=f"停止 {plugin_name}",
+                description="",
+                category="插件管理",
+                plugin_id=pid,
+                control="button",
+                icon="⏹",
+                keywords=[pid, plugin_name, "stop", "停止", "关闭"],
+                priority=-10,
+            ))
+            actions.append(ActionDescriptor(
+                action_id=f"system:{pid}:reload",
+                type="instant",
+                label=f"重载 {plugin_name}",
+                description="",
+                category="插件管理",
+                plugin_id=pid,
+                control="button",
+                icon="🔄",
+                keywords=[pid, plugin_name, "reload", "重载", "刷新"],
+                priority=-10,
+            ))
+        else:
+            actions.append(ActionDescriptor(
+                action_id=f"system:{pid}:start",
+                type="instant",
+                label=f"启动 {plugin_name}",
+                description="",
+                category="插件管理",
+                plugin_id=pid,
+                control="button",
+                icon="▶",
+                keywords=[pid, plugin_name, "start", "启动", "开启"],
+                priority=-10,
+            ))
+
+    return actions
+
+
+class BuiltinActionsProvider:
+    """Generate always-available built-in ``ActionDescriptor`` items."""
+
+    async def get_actions(
+        self,
+        plugin_id: str | None = None,
+    ) -> list[ActionDescriptor]:
+        return await asyncio.to_thread(_collect_builtin_actions_sync, plugin_id)
diff --git a/plugin/server/application/actions/execution_service.py b/plugin/server/application/actions/execution_service.py
new file mode 100644
index 0000000000..c1237c45c9
--- /dev/null
+++ b/plugin/server/application/actions/execution_service.py
@@ -0,0 +1,511 @@
+"""ActionExecutionService — execute actions by action_id.
+
+Parses the ``action_id`` prefix to determine the execution path and
+delegates to the appropriate handler module.
+
+Execution paths:
+* ``system:{plugin_id}:{action}`` → ``_SystemActionHandler``
+* ``{plugin_id}:settings:{field}`` → ``_SettingsActionHandler``
+* ``{plugin_id}:{action_id}``      → ``_ListActionHandler``
+"""
+
+from __future__ import annotations
+
+import asyncio
+from typing import Any
+
+from plugin.logging_config import get_logger
+from plugin.server.application.actions.aggregation_service import ActionAggregationService
+from plugin.server.application.config.hot_update_service import hot_update_plugin_config
+from plugin.server.application.plugins import PluginLifecycleService
+from plugin.server.domain.action_models import (
+    ActionDescriptor,
+    ActionExecuteResponse,
+)
+from plugin.server.domain.errors import ServerDomainError
+from plugin.server.infrastructure.plugin_settings_resolver import resolve_settings_class
+
+logger = get_logger("server.application.actions.execution")
+
+
+# ======================================================================
+# Shared helper
+# ======================================================================
+
+# Known lifecycle keywords that authorize the ``system:`` prefix to mean
+# "system-handler lifecycle action" rather than "plugin literally named
+# system". Module-level so dispatch (``ActionExecutionService.execute``) and
+# action_id → plugin_id reverse lookup (``_plugin_id_from_action_id``,
+# ``_find_action``) stay in sync.
+_SYSTEM_LIFECYCLE_KEYS: frozenset[str] = frozenset({
+    "start", "stop", "reload", "toggle", "profile", "entry",
+})
+
+
+def _is_plugin_running(plugin_id: str) -> bool:
+    from plugin.core.state import state
+
+    with state.acquire_plugin_hosts_read_lock():
+        return plugin_id in state.plugin_hosts
+
+
+async def _find_action(
+    aggregation: ActionAggregationService,
+    action_id: str,
+) -> ActionDescriptor | None:
+    """Re-fetch the updated ActionDescriptor for *action_id*."""
+    try:
+        plugin_id = _plugin_id_from_action_id(action_id)
+        all_actions = await aggregation.aggregate_actions(plugin_id=plugin_id)
+        for action in all_actions:
+            if action.action_id == action_id:
+                return action
+    except Exception as exc:
+        logger.warning("Failed to re-fetch action {}: {}", action_id, str(exc))
+    return None
+
+
+def _plugin_id_from_action_id(action_id: str) -> str | None:
+    """Map an action_id to its owning plugin_id.
+
+    Mirrors the structural dispatch in :class:`ActionExecutionService.execute`
+    so a plugin literally named ``system`` doesn't get its settings / list
+    actions misclassified as lifecycle calls. The rule (precedence matters):
+
+    1. ``{plugin_id}:settings:{field}`` → ``parts[0]``. Checked first so a
+       field name that happens to collide with a lifecycle keyword (e.g.
+       ``system:settings:start``) still resolves to plugin ``parts[0]``.
+    2. ``system:{plugin_id}:{lifecycle | entry...}`` → ``parts[1]``, only
+       when ``parts[2]`` is a known lifecycle keyword.
+    3. Otherwise → ``parts[0]`` (covers list actions, including plugin
+       "system" cases like ``system:foo``).
+    """
+    parts = action_id.split(":")
+    if not parts:
+        return None
+    if len(parts) >= 3 and parts[1] == "settings":
+        return parts[0]
+    if (
+        action_id.startswith("system:")
+        and len(parts) >= 3
+        and parts[2] in _SYSTEM_LIFECYCLE_KEYS
+    ):
+        return parts[1]
+    return parts[0]
+
+
+# ======================================================================
+# Settings handler
+# ======================================================================
+
+class _SettingsActionHandler:
+    """Handle ``{plugin_id}:settings:{field}`` actions via config hot-update."""
+
+    def __init__(self, aggregation: ActionAggregationService) -> None:
+        self._aggregation = aggregation
+
+    async def execute(
+        self,
+        plugin_id: str,
+        field_name: str,
+        value: object,
+    ) -> ActionExecuteResponse:
+        settings_cls = await asyncio.to_thread(
+            resolve_settings_class, plugin_id,
+        )
+        if settings_cls is None:
+            raise ServerDomainError(
+                code="SETTINGS_NOT_FOUND",
+                message=f"Plugin '{plugin_id}' has no PluginSettings class",
+                status_code=404,
+                details={"plugin_id": plugin_id},
+            )
+
+        # Validate the field is actually a hot field
+        from plugin.sdk.plugin.settings import get_hot_fields
+        hot_fields = get_hot_fields(settings_cls)
+        if field_name not in hot_fields:
+            raise ServerDomainError(
+                code="FIELD_NOT_HOT",
+                message=f"Field '{field_name}' is not a hot-updatable setting",
+                status_code=403,
+                details={"plugin_id": plugin_id, "field": field_name},
+            )
+
+        toml_section = settings_cls.model_config.get("toml_section", "settings")
+
+        updates: dict[str, object] = {toml_section: {field_name: value}}
+
+        result = await hot_update_plugin_config(
+            plugin_id=plugin_id,
+            updates=updates,
+            mode="temporary",
+        )
+
+        updated_action = await _find_action(
+            self._aggregation, f"{plugin_id}:settings:{field_name}",
+        )
+        message = (
+            result.get("message", "Config hot-updated successfully")
+            if isinstance(result, dict)
+            else "Config hot-updated successfully"
+        )
+
+        return ActionExecuteResponse(
+            success=True,
+            action=updated_action,
+            message=str(message),
+        )
+
+
+# ======================================================================
+# System handler
+# ======================================================================
+
+class _SystemActionHandler:
+    """Handle ``system:{plugin_id}:{action}`` actions."""
+
+    def __init__(
+        self,
+        lifecycle: PluginLifecycleService,
+    ) -> None:
+        self._lifecycle = lifecycle
+
+    async def execute(
+        self,
+        action_id: str,
+        value: object,
+    ) -> ActionExecuteResponse:
+        parts = action_id.split(":")
+        if len(parts) < 3:
+            raise ServerDomainError(
+                code="ACTION_NOT_FOUND",
+                message=f"Action '{action_id}' not found",
+                status_code=404,
+                details={"action_id": action_id},
+            )
+
+        plugin_id = parts[1]
+        action = parts[2]
+
+        handler = self._DISPATCH.get(action)
+        if handler is not None:
+            # Lifecycle actions (start/stop/reload/toggle/profile) must have
+            # exactly three segments — reject malformed ids like
+            # `system:demo:stop:unexpected` so crafted tails cannot smuggle
+            # extra data into a privileged op.
+            if len(parts) != 3:
+                raise ServerDomainError(
+                    code="ACTION_NOT_FOUND",
+                    message=f"Action '{action_id}' not found",
+                    status_code=404,
+                    details={"action_id": action_id},
+                )
+            return await handler(self, plugin_id, action_id, value)
+
+        # entry:{entry_id}
+        if action == "entry" and len(parts) >= 4:
+            entry_id = ":".join(parts[3:])
+            return await self._entry_toggle(plugin_id, entry_id, action_id, value)
+
+        raise ServerDomainError(
+            code="ACTION_NOT_FOUND",
+            message=f"Action '{action_id}' not found",
+            status_code=404,
+            details={"action_id": action_id},
+        )
+
+    # -- Lifecycle actions --
+    # These return action=None because the frontend does a full
+    # fetchChatActions() refresh after every execute anyway.
+
+    async def _start(
+        self, plugin_id: str, action_id: str, value: object,
+    ) -> ActionExecuteResponse:
+        result = await self._lifecycle.start_plugin(plugin_id)
+        return ActionExecuteResponse(
+            success=True,
+            message=str(result.get("message", "Plugin started")),
+        )
+
+    async def _stop(
+        self, plugin_id: str, action_id: str, value: object,
+    ) -> ActionExecuteResponse:
+        result = await self._lifecycle.stop_plugin(plugin_id)
+        return ActionExecuteResponse(
+            success=True,
+            message=str(result.get("message", "Plugin stopped")),
+        )
+
+    async def _reload(
+        self, plugin_id: str, action_id: str, value: object,
+    ) -> ActionExecuteResponse:
+        result = await self._lifecycle.reload_plugin(plugin_id)
+        return ActionExecuteResponse(
+            success=True,
+            message=str(result.get("message", "Plugin reloaded")),
+        )
+
+    async def _toggle(
+        self, plugin_id: str, action_id: str, value: object,
+    ) -> ActionExecuteResponse:
+        running = await asyncio.to_thread(_is_plugin_running, plugin_id)
+        if running:
+            result = await self._lifecycle.stop_plugin(plugin_id)
+            msg = "Plugin stopped"
+        else:
+            result = await self._lifecycle.start_plugin(plugin_id)
+            msg = "Plugin started"
+        return ActionExecuteResponse(
+            success=True,
+            message=str(result.get("message", msg)),
+        )
+
+    async def _profile(
+        self, plugin_id: str, action_id: str, value: object,
+    ) -> ActionExecuteResponse:
+        if not isinstance(value, str) or not value.strip():
+            raise ServerDomainError(
+                code="INVALID_ARGUMENT",
+                message="Profile name must be a non-empty string",
+                status_code=400,
+                details={"plugin_id": plugin_id},
+            )
+
+        profile_name = value.strip()
+
+        try:
+            from plugin.config.service import set_plugin_active_profile
+
+            await asyncio.to_thread(set_plugin_active_profile, plugin_id, profile_name)
+        except ServerDomainError:
+            raise
+        except Exception as exc:
+            raise ServerDomainError(
+                code="PLUGIN_PROFILE_ACTIVATE_FAILED",
+                message=f"Failed to set active profile '{profile_name}'",
+                status_code=500,
+                details={
+                    "plugin_id": plugin_id,
+                    "profile_name": profile_name,
+                    "error": str(exc),
+                },
+            ) from exc
+
+        reload_error: str | None = None
+        try:
+            await self._lifecycle.reload_plugin(plugin_id)
+        except Exception as exc:
+            reload_error = str(exc) or type(exc).__name__
+            logger.warning(
+                "Profile switched but reload failed for plugin {}: {}",
+                plugin_id,
+                reload_error,
+            )
+
+        # The profile config DID change, so success=True is still correct.
+        # The message must surface the failed reload, though — otherwise the
+        # palette tells the user "Profile switched" while the running plugin
+        # is still on the old profile until the next manual reload.
+        if reload_error is None:
+            message = f"Profile switched to '{profile_name}'"
+        else:
+            message = (
+                f"Profile switched to '{profile_name}', but reload failed "
+                f"({reload_error}). A manual reload is required for the "
+                f"running plugin to pick up the new profile."
+            )
+        return ActionExecuteResponse(success=True, message=message)
+
+    # -- Entry toggle --
+
+    async def _entry_toggle(
+        self,
+        plugin_id: str,
+        entry_id: str,
+        action_id: str,
+        value: object,
+    ) -> ActionExecuteResponse:
+        from plugin.core.state import state
+
+        # Resolve the host — required for both trigger and toggle paths.
+        host = None
+        with state.acquire_plugin_hosts_read_lock():
+            host = state.plugin_hosts.get(plugin_id)
+
+        if host is None:
+            raise ServerDomainError(
+                code="PLUGIN_NOT_RUNNING",
+                message=f"Plugin '{plugin_id}' is not running",
+                status_code=400,
+                details={"plugin_id": plugin_id},
+            )
+
+        # ── Button-type entries (value != bool): trigger execution via IPC ──
+        if not isinstance(value, bool):
+            # value may be a dict of parameters from the frontend form,
+            # or null for entries without input_schema.
+            args: dict = value if isinstance(value, dict) else {}
+            try:
+                trigger = getattr(host, "trigger", None)
+                if trigger is not None:
+                    result = await trigger(entry_id, args)
+                    msg = str(result) if result is not None else f"Entry '{entry_id}' executed"
+                else:
+                    raise ServerDomainError(
+                        code="ENTRY_TRIGGER_UNSUPPORTED",
+                        message=f"Plugin host for '{plugin_id}' does not support trigger",
+                        status_code=501,
+                        details={"plugin_id": plugin_id, "entry_id": entry_id},
+                    )
+            except ServerDomainError:
+                # Preserve intentional domain errors (status/code) instead of
+                # collapsing them into a generic 500 ENTRY_TRIGGER_FAILED.
+                raise
+            except Exception as exc:
+                raise ServerDomainError(
+                    code="ENTRY_TRIGGER_FAILED",
+                    message=f"Failed to trigger entry '{entry_id}': {exc}",
+                    status_code=500,
+                    details={
+                        "plugin_id": plugin_id,
+                        "entry_id": entry_id,
+                        "error": str(exc),
+                    },
+                ) from exc
+
+            return ActionExecuteResponse(
+                success=True,
+                message=msg,
+            )
+
+        # ── Toggle-type entries (value == bool): enable/disable service ──
+        enable = value
+
+        try:
+            method_name = "enable_entry" if enable else "disable_entry"
+            method = getattr(host, method_name, None)
+            if method is not None:
+                await asyncio.to_thread(method, entry_id)
+            else:
+                raise ServerDomainError(
+                    code="ENTRY_TOGGLE_UNSUPPORTED",
+                    message=f"Plugin host for '{plugin_id}' does not support {method_name}",
+                    status_code=501,
+                    details={"plugin_id": plugin_id, "entry_id": entry_id},
+                )
+        except ServerDomainError:
+            # Preserve intentional domain errors (status/code) instead of
+            # collapsing them into a generic 500 ENTRY_TOGGLE_FAILED.
+            raise
+        except Exception as exc:
+            raise ServerDomainError(
+                code="ENTRY_TOGGLE_FAILED",
+                message=f"Failed to {'enable' if enable else 'disable'} entry '{entry_id}'",
+                status_code=500,
+                details={
+                    "plugin_id": plugin_id,
+                    "entry_id": entry_id,
+                    "error": str(exc),
+                },
+            ) from exc
+
+        return ActionExecuteResponse(
+            success=True,
+            message=f"Entry '{entry_id}' {'enabled' if enable else 'disabled'}",
+        )
+
+    # Dispatch table — avoids long if/elif chains
+    _DISPATCH: dict[str, Any] = {
+        "start": _start,
+        "stop": _stop,
+        "reload": _reload,
+        "toggle": _toggle,
+        "profile": _profile,
+    }
+
+
+# ======================================================================
+# List action handler
+# ======================================================================
+
+class _ListActionHandler:
+    """Handle ``{plugin_id}:{action_id}`` list actions."""
+
+    async def execute(
+        self,
+        action_id: str,
+        value: object,
+    ) -> ActionExecuteResponse:
+        # List action IPC execution is not yet implemented.
+        raise ServerDomainError(
+            code="ACTION_NOT_IMPLEMENTED",
+            message=f"List action '{action_id}' execution is not yet implemented",
+            status_code=501,
+            details={"action_id": action_id},
+        )
+
+
+# ======================================================================
+# Public facade
+# ======================================================================
+
+class ActionExecutionService:
+    """Execute actions identified by ``action_id``.
+
+    Delegates to specialised handler classes based on the action_id prefix.
+    """
+
+    def __init__(self) -> None:
+        self._lifecycle = PluginLifecycleService()
+        self._aggregation = ActionAggregationService()
+        self._settings_handler = _SettingsActionHandler(self._aggregation)
+        self._system_handler = _SystemActionHandler(self._lifecycle)
+        self._list_action_handler = _ListActionHandler()
+
+    # Mirror the module-level constant so existing callers / tests that
+    # reach for ``ActionExecutionService._SYSTEM_LIFECYCLE_KEYS`` keep
+    # working. The authoritative source is the module-level one above.
+    _SYSTEM_LIFECYCLE_KEYS = _SYSTEM_LIFECYCLE_KEYS
+
+    async def execute(
+        self,
+        action_id: str,
+        value: object = None,
+    ) -> ActionExecuteResponse:
+        """Parse *action_id* and dispatch to the correct handler."""
+
+        parts = action_id.split(":")
+
+        # {plugin_id}:settings:{field} — checked first so that a plugin
+        # literally named "system" still routes its settings (e.g.
+        # ``system:settings:enabled``) to the settings handler instead of
+        # being swallowed by the lifecycle prefix below.
+        if len(parts) >= 3 and parts[1] == "settings":
+            field_name = ":".join(parts[2:])
+            return await self._settings_handler.execute(parts[0], field_name, value)
+
+        # system:{plugin_id}:{lifecycle | entry[:...]} — only treat the
+        # ``system:`` prefix as a lifecycle namespace when ``parts[2]`` is a
+        # known lifecycle keyword. Otherwise (e.g. plugin "system" exposing a
+        # list action ``foo`` as ``system:foo``) fall through to the
+        # list-action handler so that namespace doesn't become a privileged
+        # tombstone for any plugin unfortunate enough to pick the same name.
+        if (
+            action_id.startswith("system:")
+            and len(parts) >= 3
+            and parts[2] in _SYSTEM_LIFECYCLE_KEYS
+        ):
+            return await self._system_handler.execute(action_id, value)
+
+        # {plugin_id}:{action_id} (list_action) — covers plugin "system"
+        # list actions like ``system:foo`` (len(parts) == 2).
+        if len(parts) >= 2:
+            return await self._list_action_handler.execute(action_id, value)
+
+        raise ServerDomainError(
+            code="ACTION_NOT_FOUND",
+            message=f"Action '{action_id}' not found",
+            status_code=404,
+            details={"action_id": action_id},
+        )
diff --git a/plugin/server/application/actions/list_actions_provider.py b/plugin/server/application/actions/list_actions_provider.py
new file mode 100644
index 0000000000..e286c446ca
--- /dev/null
+++ b/plugin/server/application/actions/list_actions_provider.py
@@ -0,0 +1,205 @@
+"""ListActionsProvider — map plugin ``list_actions`` to ActionDescriptors.
+
+Each plugin may register a set of *list_actions* in its metadata (stored
+in ``state.plugins[pid]``).  This provider reads them and converts each
+entry into the appropriate ``ActionDescriptor`` based on its ``kind``.
+"""
+
+from __future__ import annotations
+
+import asyncio
+from collections.abc import Mapping
+from typing import Any
+
+from plugin.logging_config import get_logger
+from plugin.sdk.shared.i18n import load_plugin_i18n_from_meta, resolve_i18n_refs
+from plugin.server.domain.action_models import ActionDescriptor
+
+logger = get_logger("server.application.actions.list_actions_provider")
+
+
+# ---------------------------------------------------------------------------
+# Kind → ActionDescriptor mapping
+# ---------------------------------------------------------------------------
+
+_NAVIGATION_KINDS = frozenset({"ui", "url", "route"})
+_CHAT_INJECT_KIND = "chat_inject"
+
+
+def _resolve_default_locale() -> str:
+    try:
+        from utils.language_utils import get_global_language_full
+
+        return str(get_global_language_full() or "en")
+    except Exception:
+        return "en"
+
+
+def _normalize_target(raw_target: str, plugin_id: str) -> str:
+    # `{plugin_id}` placeholder mirrors plugin-list UI normalization in
+    # ui_query_service._normalize_plugin_list_action.
+    return raw_target.replace("{plugin_id}", plugin_id)
+
+
+def _safe_priority(value: Any) -> int:
+    if value is None:
+        return 0
+    try:
+        return int(value)
+    except (TypeError, ValueError):
+        logger.debug("Ignoring invalid list_action priority: {}", value)
+        return 0
+
+
+def _safe_bool(value: Any) -> bool:
+    if isinstance(value, bool):
+        return value
+    if isinstance(value, str):
+        normalized = value.strip().lower()
+        if normalized in {"true", "1", "yes", "on"}:
+            return True
+        if normalized in {"false", "0", "no", "off", ""}:
+            return False
+    return bool(value)
+
+
+def _map_list_action(
+    plugin_id: str,
+    plugin_name: str,
+    action: dict[str, Any],
+) -> ActionDescriptor | None:
+    """Convert a single list_action dict to an ``ActionDescriptor``.
+
+    The caller is expected to have already resolved any ``$i18n`` refs in
+    ``action`` so that ``label`` / ``description`` are plain strings.
+    """
+    action_id_raw = action.get("id")
+    if not isinstance(action_id_raw, str):
+        return None
+    action_id = action_id_raw.strip()
+    if not action_id:
+        return None
+
+    kind = str(action.get("kind", "")).strip().lower()
+    label_raw = action.get("label")
+    label = label_raw if isinstance(label_raw, str) and label_raw else action_id
+    description_raw = action.get("description")
+    description = description_raw if isinstance(description_raw, str) else ""
+    full_action_id = f"{plugin_id}:{action_id}"
+    quick = _safe_bool(action.get("quick_action", False))
+    icon_override = action.get("icon")
+    priority_override = action.get("priority")
+
+    if kind == _CHAT_INJECT_KIND:
+        target = action.get("target")
+        if not isinstance(target, str) or not target.strip():
+            inject_text = f"@{plugin_id} /{action_id}"
+        else:
+            inject_text = _normalize_target(target, plugin_id)
+        return ActionDescriptor(
+            action_id=full_action_id,
+            type="chat_inject",
+            label=label,
+            description=description,
+            category=plugin_name,
+            plugin_id=plugin_id,
+            inject_text=inject_text,
+            icon=icon_override or "📎",
+            keywords=[plugin_id, plugin_name, action_id, label],
+            quick_action=quick,
+            priority=_safe_priority(priority_override),
+        )
+
+    if kind in _NAVIGATION_KINDS:
+        raw_target = action.get("target")
+        if not isinstance(raw_target, str) or not raw_target.strip():
+            logger.debug(
+                "Skipping navigation list_action with invalid target plugin_id={} action_id={}",
+                plugin_id,
+                action_id,
+            )
+            return None
+        target = _normalize_target(raw_target.strip(), plugin_id)
+        open_in = action.get("open_in")
+        if open_in not in ("new_tab", "same_tab"):
+            open_in = "new_tab"
+        return ActionDescriptor(
+            action_id=full_action_id,
+            type="navigation",
+            label=label,
+            description=description,
+            category=plugin_name,
+            plugin_id=plugin_id,
+            target=target,
+            open_in=open_in,
+            icon=icon_override or "↗",
+            keywords=[plugin_id, plugin_name, action_id, label],
+            quick_action=quick,
+            priority=_safe_priority(priority_override),
+        )
+
+    if kind:
+        logger.debug(
+            "Skipping non-routable list_action plugin_id={} action_id={} kind={}",
+            plugin_id,
+            action_id,
+            kind,
+        )
+    return None
+
+
+# ---------------------------------------------------------------------------
+# Synchronous core (runs in thread)
+# ---------------------------------------------------------------------------
+
+def _collect_list_actions_sync(
+    plugin_id_filter: str | None = None,
+) -> list[ActionDescriptor]:
+    """Collect list_actions-derived descriptors (called from a worker thread)."""
+    from plugin.core.state import state
+
+    plugins_snapshot = state.get_plugins_snapshot_cached()
+    locale = _resolve_default_locale()
+    actions: list[ActionDescriptor] = []
+
+    for pid, meta_raw in plugins_snapshot.items():
+        if plugin_id_filter is not None and pid != plugin_id_filter:
+            continue
+
+        if not isinstance(meta_raw, Mapping):
+            continue
+        meta: dict[str, Any] = dict(meta_raw)
+        plugin_i18n = load_plugin_i18n_from_meta(meta)
+        resolved_name = resolve_i18n_refs(meta.get("name") or pid, plugin_i18n, locale=locale)
+        plugin_name = str(resolved_name or pid)
+
+        # list_actions may be stored under the "list_actions" key in metadata
+        raw_list_actions = meta.get("list_actions")
+        if not isinstance(raw_list_actions, (list, tuple)):
+            continue
+
+        for raw_action in raw_list_actions:
+            if not isinstance(raw_action, Mapping):
+                continue
+            resolved_action = resolve_i18n_refs(dict(raw_action), plugin_i18n, locale=locale)
+            if not isinstance(resolved_action, dict):
+                continue
+            descriptor = _map_list_action(pid, plugin_name, resolved_action)
+            if descriptor is not None:
+                actions.append(descriptor)
+
+    return actions
+
+
+# ---------------------------------------------------------------------------
+# Public provider
+# ---------------------------------------------------------------------------
+
+class ListActionsProvider:
+    """Generate ``ActionDescriptor`` items from plugin ``list_actions``."""
+
+    async def get_actions(
+        self,
+        plugin_id: str | None = None,
+    ) -> list[ActionDescriptor]:
+        return await asyncio.to_thread(_collect_list_actions_sync, plugin_id)
diff --git a/plugin/server/application/actions/preferences_service.py b/plugin/server/application/actions/preferences_service.py
new file mode 100644
index 0000000000..60f04d2010
--- /dev/null
+++ b/plugin/server/application/actions/preferences_service.py
@@ -0,0 +1,97 @@
+"""UserActionPreferences persistence service.
+
+Stores per-user command palette preferences (pinned / hidden / recent)
+in a JSON file under the plugin config directory.
+"""
+
+from __future__ import annotations
+
+import asyncio
+import json
+from pathlib import Path
+
+from plugin.logging_config import get_logger
+from plugin.server.domain.action_models import UserActionPreferences
+
+logger = get_logger("server.application.actions.preferences")
+
+_MAX_RECENT = 10
+
+
+def _preferences_path() -> Path:
+    """Return the path to the preferences JSON file."""
+    from plugin.settings import USER_PLUGIN_CONFIG_ROOT
+
+    return Path(USER_PLUGIN_CONFIG_ROOT) / ".action_preferences.json"
+
+
+def _load_sync() -> UserActionPreferences:
+    """Load preferences from disk (called from worker thread)."""
+    path = _preferences_path()
+    if not path.exists():
+        return UserActionPreferences()
+    try:
+        data = json.loads(path.read_text(encoding="utf-8"))
+        return UserActionPreferences.model_validate(data)
+    except Exception as exc:
+        logger.warning("Failed to load action preferences: {}", str(exc))
+        return UserActionPreferences()
+
+
+def _save_sync(prefs: UserActionPreferences) -> None:
+    """Atomically save preferences to disk (called from worker thread).
+
+    Writes to a temporary file first, then renames to the target path.
+    This prevents half-written JSON on crash.  Raises on failure so the
+    caller can propagate the error to the client.
+    """
+    import os
+    import tempfile
+
+    path = _preferences_path()
+    path.parent.mkdir(parents=True, exist_ok=True)
+    content = json.dumps(prefs.model_dump(), ensure_ascii=False, indent=2)
+
+    # Write to a temp file in the same directory, then atomic rename.
+    fd, tmp_path = tempfile.mkstemp(
+        dir=str(path.parent),
+        prefix=".action_prefs_",
+        suffix=".tmp",
+    )
+    try:
+        with os.fdopen(fd, "w", encoding="utf-8") as f:
+            f.write(content)
+        os.replace(tmp_path, str(path))
+    except BaseException:
+        # Clean up the temp file on any failure
+        try:
+            os.unlink(tmp_path)
+        except OSError:
+            pass  # best-effort cleanup; temp file may already be gone
+        raise
+
+
+class PreferencesService:
+    """Manage user action preferences (pinned / hidden / recent)."""
+
+    def __init__(self) -> None:
+        self._write_lock = asyncio.Lock()
+
+    async def load(self) -> UserActionPreferences:
+        return await asyncio.to_thread(_load_sync)
+
+    async def save(self, prefs: UserActionPreferences) -> UserActionPreferences:
+        async with self._write_lock:
+            prefs.recent = prefs.recent[:_MAX_RECENT]
+            await asyncio.to_thread(_save_sync, prefs)
+            return prefs
+
+    async def touch_recent(self, action_id: str) -> None:
+        """Move *action_id* to the front of the recent list."""
+        async with self._write_lock:
+            prefs = await asyncio.to_thread(_load_sync)
+            if action_id in prefs.recent:
+                prefs.recent.remove(action_id)
+            prefs.recent.insert(0, action_id)
+            prefs.recent = prefs.recent[:_MAX_RECENT]
+            await asyncio.to_thread(_save_sync, prefs)
diff --git a/plugin/server/application/actions/settings_provider.py b/plugin/server/application/actions/settings_provider.py
new file mode 100644
index 0000000000..fbe22603ba
--- /dev/null
+++ b/plugin/server/application/actions/settings_provider.py
@@ -0,0 +1,328 @@
+"""SettingsActionProvider — auto-generate instant actions from PluginSettings.
+
+For every running plugin that defines a ``PluginSettings`` subclass, this
+provider inspects each ``hot=True`` field and emits an ``ActionDescriptor``
+with the appropriate control type (toggle / slider / number / dropdown).
+"""
+
+from __future__ import annotations
+
+import asyncio
+import enum
+import typing
+from collections.abc import Mapping
+from typing import Any, get_args, get_origin
+
+from plugin.logging_config import get_logger
+from plugin.sdk.shared.i18n import load_plugin_i18n_from_meta, resolve_i18n_refs
+from plugin.server.domain.action_models import ActionDescriptor
+from plugin.server.infrastructure.plugin_settings_resolver import resolve_settings_class
+
+
+def _resolve_default_locale() -> str:
+    try:
+        from utils.language_utils import get_global_language_full
+
+        return str(get_global_language_full() or "en")
+    except Exception:
+        return "en"
+
+logger = get_logger("server.application.actions.settings_provider")
+
+
+# ---------------------------------------------------------------------------
+# Helpers
+# ---------------------------------------------------------------------------
+
+
+def _is_hot(field_info: Any) -> bool:
+    if any(
+        isinstance(entry, tuple) and entry[:1] == ("__neko_hot__",) and bool(entry[1])
+        for entry in getattr(field_info, "metadata", [])
+    ):
+        return True
+    extra = field_info.json_schema_extra
+    return isinstance(extra, dict) and extra.get("hot") is True
+
+
+def _get_constraint(field_info: Any, name: str) -> float | None:
+    """Read a Pydantic v2 numeric constraint from field metadata."""
+    # Pydantic v2 stores constraints in field_info.metadata as annotated types
+    for item in getattr(field_info, "metadata", []):
+        val = getattr(item, name, None)
+        if val is not None:
+            return float(val)
+    return None
+
+
+def _get_enum_options(field_info: Any, annotation: Any) -> list[str] | None:
+    """Extract enum / Literal string options from a field."""
+    # 1. Check json_schema_extra for explicit enum list
+    extra = field_info.json_schema_extra
+    if isinstance(extra, dict):
+        enum_vals = extra.get("enum")
+        if isinstance(enum_vals, (list, tuple)) and enum_vals:
+            return [str(v) for v in enum_vals]
+
+    # 2. Check if annotation is a Literal type
+    origin = get_origin(annotation)
+    if origin is typing.Literal:
+        args = get_args(annotation)
+        if args:
+            return [str(a) for a in args]
+
+    # 3. Check if annotation is an enum.Enum subclass
+    if isinstance(annotation, type) and issubclass(annotation, enum.Enum):
+        return [str(m.value) for m in annotation]
+
+    return None
+
+
+def _resolve_annotation(annotation: Any) -> type | None:
+    """Unwrap Optional / Union to get the core type.
+
+    Handles both ``typing.Union[X, None]`` (Python 3.9) and
+    ``X | None`` (PEP 604, Python 3.10+).
+    """
+    import types as _types
+
+    origin = get_origin(annotation)
+    if origin is typing.Union or isinstance(annotation, _types.UnionType):
+        args = [a for a in get_args(annotation) if a is not type(None)]
+        return args[0] if args else None
+    return annotation
+
+
+def _build_descriptor_for_field(
+    plugin_id: str,
+    plugin_name: str,
+    field_name: str,
+    field_info: Any,
+    annotation: Any,
+    current_value: Any,
+) -> ActionDescriptor | None:
+    """Map a single PluginSettings field to an ActionDescriptor (or None)."""
+    core_type = _resolve_annotation(annotation)
+
+    label = field_info.description or field_name
+    base = dict(
+        action_id=f"{plugin_id}:settings:{field_name}",
+        type="instant",
+        label=label,
+        description=field_info.description or "",
+        category=plugin_name,
+        plugin_id=plugin_id,
+        keywords=[plugin_id, plugin_name, field_name, label],
+    )
+
+    # --- bool → toggle ---
+    if core_type is bool:
+        return ActionDescriptor(
+            **base,
+            control="toggle",
+            current_value=bool(current_value) if current_value is not None else False,
+            icon="🔘",
+        )
+
+    # --- int / float → slider or number ---
+    if core_type in (int, float):
+        ge = _get_constraint(field_info, "ge")
+        le = _get_constraint(field_info, "le")
+        gt = _get_constraint(field_info, "gt")
+        lt = _get_constraint(field_info, "lt")
+
+        # Resolve effective min/max from ge/gt and le/lt
+        eff_min = ge if ge is not None else gt
+        eff_max = le if le is not None else lt
+        if core_type is int:
+            if ge is None and gt is not None:
+                eff_min = gt + 1
+            if le is None and lt is not None:
+                eff_max = lt - 1
+
+        if eff_min is not None and eff_max is not None:
+            step: float = 1.0 if core_type is int else 0.1
+            return ActionDescriptor(
+                **base,
+                control="slider",
+                current_value=current_value,
+                min=eff_min,
+                max=eff_max,
+                step=step,
+                icon="🎚",
+            )
+
+        # number fallback — one or both bounds missing
+        return ActionDescriptor(
+            **base,
+            control="number",
+            current_value=current_value,
+            min=eff_min,
+            max=eff_max,
+            icon="🔢",
+        )
+
+    # --- str with enum / Literal → dropdown ---
+    if core_type is str:
+        options = _get_enum_options(field_info, annotation)
+        if options:
+            return ActionDescriptor(
+                **base,
+                control="dropdown",
+                current_value=current_value,
+                options=options,
+                icon="📋",
+            )
+        # str without enum → text input
+        return ActionDescriptor(
+            **base,
+            control="text",
+            current_value=current_value,
+            icon="✏️",
+        )
+
+    # --- Enum subclass → dropdown ---
+    if isinstance(core_type, type) and issubclass(core_type, enum.Enum):
+        options = [str(m.value) for m in core_type]
+        if isinstance(current_value, enum.Enum):
+            display_value = str(current_value.value)
+        elif current_value is not None:
+            display_value = str(current_value)
+        else:
+            display_value = None
+        return ActionDescriptor(
+            **base,
+            control="dropdown",
+            current_value=display_value,
+            options=options,
+            icon="📋",
+        )
+
+    # --- Literal (non-str) → dropdown ---
+    origin = get_origin(core_type)
+    if origin is typing.Literal:
+        args = get_args(core_type)
+        if args:
+            return ActionDescriptor(
+                **base,
+                control="dropdown",
+                current_value=str(current_value) if current_value is not None else None,
+                options=[str(a) for a in args],
+                icon="📋",
+            )
+
+    # Unsupported type → skip
+    return None
+
+
+# ---------------------------------------------------------------------------
+# Synchronous core (runs in thread)
+# ---------------------------------------------------------------------------
+
+def _collect_settings_actions_sync(
+    plugin_id_filter: str | None = None,
+) -> list[ActionDescriptor]:
+    """Collect settings-derived actions (called from a worker thread)."""
+    from plugin.core.state import state
+
+    plugins_snapshot = state.get_plugins_snapshot_cached()
+    with state.acquire_plugin_hosts_read_lock():
+        hosts_snapshot: dict[str, Any] = dict(state.plugin_hosts)
+
+    locale = _resolve_default_locale()
+    actions: list[ActionDescriptor] = []
+
+    for pid, meta_raw in plugins_snapshot.items():
+        if plugin_id_filter is not None and pid != plugin_id_filter:
+            continue
+
+        # Only running plugins (must have a host)
+        host = hosts_snapshot.get(pid)
+        if host is None:
+            continue
+
+        if not isinstance(meta_raw, Mapping):
+            continue
+        meta: dict[str, Any] = dict(meta_raw)
+
+        plugin_i18n = load_plugin_i18n_from_meta(meta)
+        resolved_name = resolve_i18n_refs(meta.get("name") or pid, plugin_i18n, locale=locale)
+        plugin_name = str(resolved_name or pid)
+
+        # Resolve the PluginSettings class
+        settings_cls = resolve_settings_class(pid, host=host)
+        if settings_cls is None:
+            continue
+
+        # Read current effective config for this plugin's toml_section
+        toml_section = settings_cls.model_config.get("toml_section", "settings")
+
+        # Read current effective config (includes temporary hot-updates),
+        # falling back to TOML file if effective config is unavailable.
+        # NOTE: When host.get_effective_config() is not available (current state),
+        # temporary hot-updates won't be reflected until the plugin persists them.
+        # The frontend works around this by using the ActionExecuteResponse.action
+        # field which returns the freshly-computed descriptor after execution.
+        current_section: dict[str, Any] = {}
+        try:
+            effective = getattr(host, "get_effective_config", None)
+            if callable(effective):
+                cfg = effective()
+                if isinstance(cfg, dict):
+                    section = cfg.get(toml_section)
+                    if isinstance(section, Mapping):
+                        current_section = dict(section)
+            if not current_section:
+                from plugin.config.service import load_plugin_config
+                config_data = load_plugin_config(pid, validate=False)
+                if isinstance(config_data, dict):
+                    inner = config_data.get("config", config_data)
+                    section = inner.get(toml_section) if isinstance(inner, Mapping) else None
+                    if isinstance(section, Mapping):
+                        current_section = dict(section)
+        except Exception as exc:
+            logger.debug(
+                "Failed to load config for plugin {} section {}: {}",
+                pid, toml_section, repr(exc),
+            )
+
+        # Iterate fields
+        for field_name, field_info in settings_cls.model_fields.items():
+            if not _is_hot(field_info):
+                continue
+
+            annotation = field_info.annotation
+            if field_name in current_section:
+                current_value = current_section[field_name]
+            else:
+                try:
+                    current_value = field_info.get_default(call_default_factory=True)
+                except TypeError:
+                    current_value = field_info.default
+
+            descriptor = _build_descriptor_for_field(
+                plugin_id=pid,
+                plugin_name=plugin_name,
+                field_name=field_name,
+                field_info=field_info,
+                annotation=annotation,
+                current_value=current_value,
+            )
+            if descriptor is not None:
+                actions.append(descriptor)
+
+    return actions
+
+
+# ---------------------------------------------------------------------------
+# Public provider
+# ---------------------------------------------------------------------------
+
+class SettingsActionProvider:
+    """Generate ``ActionDescriptor`` items from ``PluginSettings`` hot fields."""
+
+    async def get_actions(
+        self,
+        plugin_id: str | None = None,
+    ) -> list[ActionDescriptor]:
+        return await asyncio.to_thread(_collect_settings_actions_sync, plugin_id)
diff --git a/plugin/server/application/actions/system_provider.py b/plugin/server/application/actions/system_provider.py
new file mode 100644
index 0000000000..3a2c918022
--- /dev/null
+++ b/plugin/server/application/actions/system_provider.py
@@ -0,0 +1,233 @@
+"""SystemActionProvider — entry actions and UI navigation for running plugins.
+
+For every registered *running* plugin this provider generates:
+
+* Button actions for non-service entries (action, hook, timer, chat_command, …)
+* Navigation action for plugins with static UI
+
+Lifecycle management (start/stop/reload/toggle) and service toggles are
+intentionally excluded — those belong in the plugin management dashboard,
+not in the chat command palette.
+"""
+
+from __future__ import annotations
+
+import asyncio
+from collections.abc import Mapping
+from typing import Any
+
+from plugin.logging_config import get_logger
+from plugin.sdk.shared.i18n import load_plugin_i18n_from_meta, resolve_i18n_refs
+from plugin.server.application.plugins.ui_query_service import _has_static_ui_from_meta
+from plugin.server.domain.action_models import ActionDescriptor
+
+logger = get_logger("server.application.actions.system_provider")
+
+
+# ---------------------------------------------------------------------------
+# Helpers
+# ---------------------------------------------------------------------------
+
+
+def _has_static_ui(meta: Mapping[str, object]) -> bool:
+    # Delegate to ui_query_service so plugins relying on the conventional
+    # ``<plugin dir>/static/index.html`` inference (with no explicit
+    # static_ui_config) are also recognized — matches the behavior of the
+    # `/plugin/{id}/ui/` route.
+    return _has_static_ui_from_meta(meta)
+
+
+def _resolve_default_locale() -> str:
+    try:
+        from utils.language_utils import get_global_language_full
+
+        return str(get_global_language_full() or "en")
+    except Exception:
+        return "en"
+
+
+def _resolve_plugin_i18n(value: object, plugin_meta: Mapping[str, object], *, locale: str | None = None) -> object:
+    return resolve_i18n_refs(
+        value,
+        load_plugin_i18n_from_meta(plugin_meta),
+        locale=locale or _resolve_default_locale(),
+    )
+
+
+def _coerce_quick_action_priority(value: object) -> int:
+    try:
+        return int(value)
+    except (TypeError, ValueError):
+        return 0
+
+
+def _get_entries_for_plugin(
+    plugin_id: str,
+    handlers_snapshot: dict[str, Any],
+    plugin_meta: Mapping[str, object] | None = None,
+    locale: str | None = None,
+) -> list[dict[str, Any]]:
+    """Extract entry info dicts for *plugin_id* from the event_handlers snapshot."""
+    entries: list[dict[str, Any]] = []
+    seen: set[str] = set()
+
+    for key, handler in handlers_snapshot.items():
+        if not isinstance(key, str):
+            continue
+
+        if key.startswith(f"{plugin_id}."):
+            entry_id = key[len(plugin_id) + 1:]
+        elif key.startswith(f"{plugin_id}:plugin_entry:"):
+            entry_id = key[len(f"{plugin_id}:plugin_entry:"):]
+        else:
+            continue
+
+        if entry_id in seen:
+            continue
+        seen.add(entry_id)
+
+        meta = getattr(handler, "meta", None)
+        entry_name = getattr(meta, "name", entry_id) if meta else entry_id
+        entry_kind = getattr(meta, "kind", "action") if meta else "action"
+        entry_description = getattr(meta, "description", "") if meta else ""
+        entry_input_schema = getattr(meta, "input_schema", None) if meta else None
+        is_quick = bool(getattr(meta, "quick_action", False)) if meta else False
+        qa_config = getattr(meta, "quick_action_config", None) if meta else None
+
+        entry_dict: dict[str, Any] = {
+            "id": entry_id,
+            "name": entry_name,
+            "kind": entry_kind,
+            "description": entry_description,
+            "input_schema": entry_input_schema,
+            "quick_action": is_quick,
+            "quick_action_icon": getattr(qa_config, "icon", None) if qa_config else None,
+            "quick_action_priority": getattr(qa_config, "priority", 0) if qa_config else 0,
+        }
+        if plugin_meta is not None:
+            resolved = _resolve_plugin_i18n(entry_dict, plugin_meta, locale=locale)
+            if isinstance(resolved, dict):
+                entry_dict = resolved
+        entries.append(entry_dict)
+
+    return entries
+
+
+# ---------------------------------------------------------------------------
+# Synchronous core (runs in thread)
+# ---------------------------------------------------------------------------
+
+def _collect_system_actions_sync(
+    plugin_id_filter: str | None = None,
+) -> list[ActionDescriptor]:
+    """Collect user-facing actions from running plugins (called from a worker thread)."""
+    from plugin.core.state import state
+
+    plugins_snapshot = state.get_plugins_snapshot_cached()
+    hosts_snapshot: dict[str, Any] = {}
+    with state.acquire_plugin_hosts_read_lock():
+        hosts_snapshot = dict(state.plugin_hosts)
+    handlers_snapshot = state.get_event_handlers_snapshot_cached()
+
+    actions: list[ActionDescriptor] = []
+
+    for pid, meta_raw in plugins_snapshot.items():
+        if plugin_id_filter is not None and pid != plugin_id_filter:
+            continue
+
+        if not isinstance(meta_raw, Mapping):
+            continue
+        meta: dict[str, Any] = dict(meta_raw)
+        plugin_name_obj = _resolve_plugin_i18n(meta.get("name") or pid, meta)
+        plugin_name = str(plugin_name_obj or pid)
+        is_running = pid in hosts_snapshot
+
+        # ── Entry actions (running plugins only) ──
+        # Only non-service entries are exposed as user-facing commands.
+        # Services are background processes managed via the admin dashboard.
+        if is_running:
+            entries = _get_entries_for_plugin(pid, handlers_snapshot, plugin_meta=meta)
+            for entry in entries:
+                entry_kind = entry.get("kind", "action")
+
+                # Skip service entries — they are not user-facing commands
+                if entry_kind == "service":
+                    continue
+
+                entry_id = entry["id"]
+                entry_name = entry.get("name", entry_id)
+                entry_desc = entry.get("description", "")
+
+                # chat_command entries appear as slash commands (chat_inject)
+                if entry_kind == "chat_command":
+                    actions.append(ActionDescriptor(
+                        action_id=f"system:{pid}:entry:{entry_id}",
+                        type="chat_inject",
+                        label=str(entry_name),
+                        description=str(entry_desc),
+                        category=plugin_name,
+                        plugin_id=pid,
+                        inject_text=f"@{plugin_name} /{entry_id}",
+                        icon="📎",
+                        keywords=[pid, plugin_name, str(entry_name), entry_id],
+                        quick_action=entry.get("quick_action", False),
+                    ))
+                    continue
+
+                is_quick = entry.get("quick_action", False)
+                qa_icon = entry.get("quick_action_icon")
+                qa_priority = entry.get("quick_action_priority", 0)
+
+                raw_schema = entry.get("input_schema")
+                schema: dict[str, object] | None = None
+                if isinstance(raw_schema, dict):
+                    props = raw_schema.get("properties")
+                    if isinstance(props, dict) and len(props) > 0:
+                        schema = raw_schema
+
+                actions.append(ActionDescriptor(
+                    action_id=f"system:{pid}:entry:{entry_id}",
+                    type="instant",
+                    label=str(entry_name),
+                    description=str(entry_desc),
+                    category=plugin_name,
+                    plugin_id=pid,
+                    control="button",
+                    input_schema=schema,
+                    icon=str(qa_icon) if qa_icon else "⚡",
+                    keywords=[pid, plugin_name, str(entry_name)],
+                    quick_action=bool(is_quick),
+                    priority=_coerce_quick_action_priority(qa_priority) if is_quick else 0,
+                ))
+
+        # ── Static UI navigation ──
+        if _has_static_ui(meta):
+            from config import USER_PLUGIN_SERVER_PORT as _ui_port
+            actions.append(ActionDescriptor(
+                action_id=f"system:{pid}:open_ui",
+                type="navigation",
+                label=f"Open {plugin_name} UI",
+                description="",
+                category=plugin_name,
+                plugin_id=pid,
+                target=f"http://127.0.0.1:{_ui_port}/plugin/{pid}/ui/",
+                open_in="new_tab",
+                icon="↗",
+                keywords=[pid, plugin_name, "ui", "interface", "open"],
+            ))
+
+    return actions
+
+
+# ---------------------------------------------------------------------------
+# Public provider
+# ---------------------------------------------------------------------------
+
+class SystemActionProvider:
+    """Generate user-facing ``ActionDescriptor`` items for running plugins."""
+
+    async def get_actions(
+        self,
+        plugin_id: str | None = None,
+    ) -> list[ActionDescriptor]:
+        return await asyncio.to_thread(_collect_system_actions_sync, plugin_id)
diff --git a/plugin/server/domain/action_models.py b/plugin/server/domain/action_models.py
new file mode 100644
index 0000000000..d02b918f32
--- /dev/null
+++ b/plugin/server/domain/action_models.py
@@ -0,0 +1,89 @@
+"""Pydantic models for the Command Palette.
+
+Defines the ``ActionDescriptor`` that describes a single action item,
+plus request/response envelopes for the execute endpoint.
+"""
+
+from __future__ import annotations
+
+from typing import Literal
+
+from pydantic import BaseModel, Field
+
+
+class ActionDescriptor(BaseModel):
+    """描述一个命令面板中的操作项。"""
+
+    action_id: str = Field(description="唯一标识，格式: {plugin_id}:{field_or_action_id}")
+    type: Literal["instant", "chat_inject", "navigation"]
+    label: str = Field(description="显示名称")
+    description: str = Field(default="", description="描述文本")
+    category: str = Field(description="分组名称，默认为插件 name")
+    plugin_id: str = Field(description="来源插件 ID，系统级操作为 'system'")
+
+    # Instant action fields (type == "instant")
+    control: Literal[
+        "toggle",
+        "button",
+        "dropdown",
+        "number",
+        "slider",
+        "text",
+        "plugin_lifecycle",
+        "entry_toggle",
+    ] | None = None
+    current_value: object = None
+    options: list[str] | None = None  # dropdown only
+    min: float | None = None  # number/slider only
+    max: float | None = None  # number/slider only
+    step: float | None = None  # number/slider only
+    disabled: bool = False
+
+    # Entry action fields (control == "button" with input_schema)
+    input_schema: dict[str, object] | None = None
+
+    # Chat inject fields (type == "chat_inject")
+    inject_text: str | None = None
+
+    # Navigation fields (type == "navigation")
+    target: str | None = None
+    open_in: Literal["new_tab", "same_tab"] | None = None
+
+    # Command palette metadata
+    keywords: list[str] = Field(default_factory=list, description="搜索关键词（多语言）")
+    icon: str | None = Field(default=None, description="Emoji 或图标标识")
+    priority: int = Field(default=0, description="排序权重，越大越靠前")
+    quick_action: bool = Field(default=False, description="插件自注册的快捷操作，在面板中优先展示")
+    section: Literal["pinned", "recent", "commands"] | None = Field(
+        default=None, description="面板分区，由前端根据偏好计算",
+    )
+
+
+class ActionExecuteRequest(BaseModel):
+    """POST /chat/actions/{action_id}/execute 请求体。"""
+
+    value: object = None
+
+
+class ActionExecuteResponse(BaseModel):
+    """POST /chat/actions/{action_id}/execute 响应体。"""
+
+    success: bool
+    action: ActionDescriptor | None = None
+    message: str = ""
+
+
+class UserActionPreferences(BaseModel):
+    """用户对命令面板操作项的个性化偏好。"""
+
+    pinned: list[str] = Field(default_factory=list, description="置顶的 action_id 列表")
+    hidden: list[str] = Field(default_factory=list, description="隐藏的 action_id 列表")
+    recent: list[str] = Field(default_factory=list, description="最近使用的 action_id，最多 10 条")
+
+
+__all__ = [
+    "ActionDescriptor",
+    "ActionExecuteRequest",
+    "ActionExecuteResponse",
+    "UserActionPreferences",
+]
diff --git a/plugin/server/domain/action_provider.py b/plugin/server/domain/action_provider.py
new file mode 100644
index 0000000000..5fdc93e187
--- /dev/null
+++ b/plugin/server/domain/action_provider.py
@@ -0,0 +1,30 @@
+"""ActionProvider protocol for the Command Palette.
+
+Each provider is responsible for generating ``ActionDescriptor`` items
+from a single source (PluginSettings, list_actions, system entries, builtin, …).
+"""
+
+from __future__ import annotations
+
+from typing import Protocol
+
+from plugin.server.domain.action_models import ActionDescriptor
+
+
+class ActionProvider(Protocol):
+    """操作项提供者协议。
+
+    每个 provider 负责从一个来源生成 ``ActionDescriptor`` 列表。
+    """
+
+    async def get_actions(
+        self,
+        plugin_id: str | None = None,
+    ) -> list[ActionDescriptor]:
+        """返回操作项列表。*plugin_id* 为 ``None`` 时返回所有。"""
+        ...
+
+
+__all__ = [
+    "ActionProvider",
+]
diff --git a/plugin/server/http_app.py b/plugin/server/http_app.py
index 026b49f0c0..94641fb230 100644
--- a/plugin/server/http_app.py
+++ b/plugin/server/http_app.py
@@ -20,6 +20,7 @@
 from plugin.server.lifecycle import shutdown as lifecycle_shutdown
 from plugin.server.lifecycle import startup as lifecycle_startup
 from plugin.server.routes import (
+    actions_router,
     config_router,
     frontend_router,
     health_router,
@@ -168,6 +169,7 @@ async def _frontend_cache_headers(
     app.include_router(frontend_router)
     app.include_router(websocket_router)
     app.include_router(plugin_ui_router)
+    app.include_router(actions_router)
     # galgame_plugin install routes 是可选模块：plugin import-time 副作用
     # （缺 dxcam / tesseract / textractor 等可选依赖、非 Windows 运行时等）不应让
     # 整个 plugin server 启动失败；失败时只让 install 端点返回 404。
diff --git a/plugin/server/infrastructure/plugin_settings_resolver.py b/plugin/server/infrastructure/plugin_settings_resolver.py
new file mode 100644
index 0000000000..b557f12849
--- /dev/null
+++ b/plugin/server/infrastructure/plugin_settings_resolver.py
@@ -0,0 +1,67 @@
+"""Resolve a plugin's ``PluginSettings`` subclass from its entry_point.
+
+Centralises the "import plugin class → get .Settings → check it's a
+PluginSettings subclass" logic that was previously duplicated across
+``execution_service``, ``settings_provider``, and ``hot_update_service``.
+"""
+
+from __future__ import annotations
+
+import importlib
+from collections.abc import Mapping
+from typing import Any
+
+from plugin.logging_config import get_logger
+
+logger = get_logger("server.infrastructure.plugin_settings_resolver")
+
+
+def resolve_settings_class(
+    plugin_id: str,
+    *,
+    host: Any = None,
+) -> type | None:
+    """Return the ``PluginSettings`` subclass for *plugin_id*, or ``None``.
+
+    Resolution order:
+    1. If *host* is provided, read ``host.entry_point``.
+    2. Otherwise fall back to the plugins snapshot metadata
+       (``entry_point`` or ``entry`` key).
+
+    Returns ``None`` when the plugin has no ``Settings`` inner class or
+    when the import fails (backward-compat plugins).
+    """
+    from plugin.core.state import state
+    from plugin.sdk.plugin.settings import PluginSettings
+
+    # Determine entry_point
+    entry_point: str | None = None
+    if host is not None:
+        entry_point = getattr(host, "entry_point", None)
+    if not entry_point:
+        plugins_snapshot = state.get_plugins_snapshot_cached()
+        meta_raw = plugins_snapshot.get(plugin_id)
+        if isinstance(meta_raw, Mapping):
+            entry_point = meta_raw.get("entry_point") or meta_raw.get("entry")
+
+    if not entry_point or not isinstance(entry_point, str):
+        return None
+
+    try:
+        module_path, class_name = entry_point.split(":", 1)
+        mod = importlib.import_module(module_path)
+        plugin_cls = getattr(mod, class_name, None)
+        if plugin_cls is None:
+            return None
+        settings_cls = getattr(plugin_cls, "Settings", None)
+        if settings_cls is None:
+            return None
+        if isinstance(settings_cls, type) and issubclass(settings_cls, PluginSettings):
+            return settings_cls
+    except Exception:
+        logger.debug(
+            "Failed to resolve PluginSettings for plugin_id={}, entry_point={}",
+            plugin_id,
+            entry_point,
+        )
+    return None
diff --git a/plugin/server/routes/__init__.py b/plugin/server/routes/__init__.py
index ccc79b270a..c1799b7f45 100644
--- a/plugin/server/routes/__init__.py
+++ b/plugin/server/routes/__init__.py
@@ -13,6 +13,7 @@
 from plugin.server.routes.frontend import router as frontend_router
 from plugin.server.routes.websocket import router as websocket_router
 from plugin.server.routes.plugin_ui import router as plugin_ui_router
+from plugin.server.routes.actions import router as actions_router
 from plugin.server.routes.plugin_cli import router as plugin_cli_router
 from plugin.server.routes.llm_tools import router as llm_tools_router
 
@@ -27,6 +28,7 @@
     'frontend_router',
     'websocket_router',
     'plugin_ui_router',
+    'actions_router',
     'plugin_cli_router',
     'llm_tools_router',
 ]
diff --git a/plugin/server/routes/actions.py b/plugin/server/routes/actions.py
new file mode 100644
index 0000000000..f9305fff19
--- /dev/null
+++ b/plugin/server/routes/actions.py
@@ -0,0 +1,96 @@
+"""
+命令面板路由
+
+GET  /chat/actions                       — 获取所有操作项
+GET  /chat/actions/preferences           — 获取用户偏好
+POST /chat/actions/preferences           — 保存用户偏好
+POST /chat/actions/{action_id}/execute   — 执行操作
+"""
+from typing import Optional
+
+from fastapi import APIRouter, Query
+
+from plugin.logging_config import get_logger
+from plugin.server.application.actions.aggregation_service import ActionAggregationService
+from plugin.server.application.actions.execution_service import ActionExecutionService
+from plugin.server.application.actions.preferences_service import PreferencesService
+from plugin.server.domain.action_models import (
+    ActionExecuteRequest,
+    ActionExecuteResponse,
+    UserActionPreferences,
+)
+from plugin.server.domain.errors import ServerDomainError
+from plugin.server.infrastructure.auth import require_admin
+from plugin.server.infrastructure.error_mapping import raise_http_from_domain
+
+router = APIRouter()
+logger = get_logger("server.routes.actions")
+aggregation_service = ActionAggregationService()
+execution_service = ActionExecutionService()
+preferences_service = PreferencesService()
+
+
+@router.get("/chat/actions")
+async def get_chat_actions(
+    plugin_id: Optional[str] = Query(default=None),
+    _: str = require_admin,
+) -> dict[str, object]:
+    try:
+        actions = await aggregation_service.aggregate_actions(plugin_id=plugin_id)
+        prefs = await preferences_service.load()
+        return {
+            "actions": [a.model_dump(exclude_none=True) for a in actions],
+            "preferences": prefs.model_dump(),
+        }
+    except ServerDomainError as error:
+        raise_http_from_domain(error, logger=logger)
+
+
+# ── Preferences routes MUST be registered before the {action_id:path}
+#    route below, otherwise FastAPI would match "preferences" as an action_id.
+
+@router.get("/chat/actions/preferences")
+async def get_action_preferences(
+    _: str = require_admin,
+) -> dict[str, object]:
+    try:
+        prefs = await preferences_service.load()
+        return prefs.model_dump()
+    except ServerDomainError as error:
+        raise_http_from_domain(error, logger=logger)
+
+
+@router.post("/chat/actions/preferences")
+async def save_action_preferences(
+    payload: UserActionPreferences,
+    _: str = require_admin,
+) -> dict[str, object]:
+    try:
+        prefs = await preferences_service.save(payload)
+        return prefs.model_dump()
+    except ServerDomainError as error:
+        raise_http_from_domain(error, logger=logger)
+
+
+# ── Execute route uses {action_id:path} — must come last.
+
+@router.post("/chat/actions/{action_id:path}/execute")
+async def execute_chat_action(
+    action_id: str,
+    payload: ActionExecuteRequest,
+    _: str = require_admin,
+) -> dict[str, object]:
+    try:
+        result: ActionExecuteResponse = await execution_service.execute(
+            action_id=action_id,
+            value=payload.value,
+        )
+        # Auto-update recent list on successful execution
+        if result.success:
+            try:
+                await preferences_service.touch_recent(action_id)
+            except Exception:
+                pass  # Non-critical — don't fail the execute response
+        return result.model_dump(exclude_none=True)
+    except ServerDomainError as error:
+        raise_http_from_domain(error, logger=logger)
diff --git a/plugin/server/routes/config.py b/plugin/server/routes/config.py
index df5fddb303..22c937b517 100644
--- a/plugin/server/routes/config.py
+++ b/plugin/server/routes/config.py
@@ -215,3 +215,42 @@ async def hot_update_plugin_config_endpoint(
         )
     except ServerDomainError as error:
         raise_http_from_domain(error, logger=logger)
+
+
+@router.get("/plugin/{plugin_id}/settings/schema")
+async def get_plugin_settings_schema_endpoint(
+    plugin_id: str,
+    _: str = require_admin,
+) -> dict[str, object]:
+    """Return the PluginSettings JSON Schema for a plugin."""
+    try:
+        return _resolve_plugin_settings_schema(plugin_id)
+    except ServerDomainError as error:
+        raise_http_from_domain(error, logger=logger)
+
+
+def _resolve_plugin_settings_schema(plugin_id: str) -> dict[str, object]:
+    """Resolve the PluginSettings class for *plugin_id* and return its schema."""
+    from plugin.core.state import state
+    from plugin.server.infrastructure.plugin_settings_resolver import resolve_settings_class
+
+    empty: dict[str, object] = {
+        "plugin_id": plugin_id,
+        "settings_class": None,
+        "toml_section": None,
+        "schema": None,
+    }
+
+    with state.acquire_plugin_hosts_read_lock():
+        host = state.plugin_hosts.get(plugin_id)
+
+    settings_cls = resolve_settings_class(plugin_id, host=host)
+    if settings_cls is None:
+        return empty
+
+    return {
+        "plugin_id": plugin_id,
+        "settings_class": settings_cls.__name__,
+        "toml_section": settings_cls.model_config.get("toml_section", "settings"),
+        "schema": settings_cls.model_json_schema(),
+    }
diff --git a/plugin/tests/integration/test_action_routes.py b/plugin/tests/integration/test_action_routes.py
new file mode 100644
index 0000000000..bb1d1e230f
--- /dev/null
+++ b/plugin/tests/integration/test_action_routes.py
@@ -0,0 +1,201 @@
+"""Integration tests for /chat/actions routes.
+
+Uses httpx + ASGI transport to test the full request/response cycle
+through FastAPI, including error mapping and serialization.
+"""
+from __future__ import annotations
+
+from collections.abc import AsyncIterator
+
+import pytest
+from fastapi import FastAPI
+from httpx import ASGITransport, AsyncClient
+
+from plugin.server.domain.action_models import ActionDescriptor, ActionExecuteResponse
+from plugin.server.domain.errors import ServerDomainError
+from plugin.server.infrastructure.auth import verify_admin_code
+from plugin.server.infrastructure.exceptions import register_exception_handlers
+import plugin.server.routes.actions as _actions_route_module
+
+
+# ── Fakes ────────────────────────────────────────────────────────────
+
+_FAKE_ACTIONS: list[ActionDescriptor] = [
+    ActionDescriptor(
+        action_id="system:demo:toggle",
+        type="instant",
+        label="Demo",
+        category="系统",
+        plugin_id="demo",
+        control="plugin_lifecycle",
+        current_value=True,
+    ),
+    ActionDescriptor(
+        action_id="demo:settings:volume",
+        type="instant",
+        label="Volume",
+        category="Demo",
+        plugin_id="demo",
+        control="slider",
+        current_value=50,
+        min=0,
+        max=100,
+    ),
+    ActionDescriptor(
+        action_id="demo:greet",
+        type="chat_inject",
+        label="Greet",
+        category="Demo",
+        plugin_id="demo",
+        inject_text="@Demo /greet",
+    ),
+]
+
+
+class _FakeAggregationService:
+    async def aggregate_actions(self, plugin_id: str | None = None) -> list[ActionDescriptor]:
+        if plugin_id:
+            return [a for a in _FAKE_ACTIONS if a.plugin_id == plugin_id]
+        return list(_FAKE_ACTIONS)
+
+
+class _FakeExecutionService:
+    async def execute(self, action_id: str, value: object = None) -> ActionExecuteResponse:
+        if action_id == "system:demo:toggle":
+            new_val = not bool(value) if isinstance(value, bool) else True
+            return ActionExecuteResponse(
+                success=True,
+                action=ActionDescriptor(
+                    action_id=action_id,
+                    type="instant",
+                    label="Demo",
+                    category="系统",
+                    plugin_id="demo",
+                    control="plugin_lifecycle",
+                    current_value=new_val,
+                ),
+                message="toggled",
+            )
+        if action_id == "bad:action":
+            raise ServerDomainError(
+                code="ACTION_NOT_FOUND",
+                message="not found",
+                status_code=404,
+                details={"action_id": action_id},
+            )
+        return ActionExecuteResponse(success=True, message="ok")
+
+
+class _FakePreferencesService:
+    async def load(self):
+        from plugin.server.domain.action_models import UserActionPreferences
+        return UserActionPreferences()
+
+    async def save(self, prefs):
+        return prefs
+
+    async def touch_recent(self, action_id: str) -> None:
+        pass
+
+
+# ── Fixtures ─────────────────────────────────────────────────────────
+
+@pytest.fixture
+def actions_test_app() -> FastAPI:
+    app = FastAPI(title="actions-test")
+    register_exception_handlers(app)
+    app.dependency_overrides[verify_admin_code] = lambda: "test"
+    app.include_router(_actions_route_module.router)
+    return app
+
+
+@pytest.fixture
+async def client(actions_test_app: FastAPI, monkeypatch: pytest.MonkeyPatch) -> AsyncIterator[AsyncClient]:
+    monkeypatch.setattr(_actions_route_module, "aggregation_service", _FakeAggregationService())
+    monkeypatch.setattr(_actions_route_module, "execution_service", _FakeExecutionService())
+    monkeypatch.setattr(_actions_route_module, "preferences_service", _FakePreferencesService())
+
+    transport = ASGITransport(app=actions_test_app)
+    async with AsyncClient(transport=transport, base_url="http://testserver") as c:
+        yield c
+
+
+# ── GET /chat/actions ────────────────────────────────────────────────
+
+@pytest.mark.plugin_integration
+@pytest.mark.asyncio
+class TestGetChatActions:
+    async def test_returns_all_actions(self, client: AsyncClient) -> None:
+        resp = await client.get("/chat/actions")
+        assert resp.status_code == 200
+        data = resp.json()
+        assert len(data["actions"]) == 3
+        assert isinstance(data["preferences"], dict)
+        assert "pinned" in data["preferences"]
+
+    async def test_filter_by_plugin_id(self, client: AsyncClient) -> None:
+        resp = await client.get("/chat/actions", params={"plugin_id": "demo"})
+        assert resp.status_code == 200
+        data = resp.json()
+        assert all(a["plugin_id"] == "demo" for a in data["actions"])
+
+    async def test_action_fields_serialized(self, client: AsyncClient) -> None:
+        resp = await client.get("/chat/actions")
+        data = resp.json()
+        lifecycle = next(a for a in data["actions"] if a["control"] == "plugin_lifecycle")
+        assert lifecycle["current_value"] is True
+        assert lifecycle["action_id"] == "system:demo:toggle"
+
+        slider = next(a for a in data["actions"] if a["control"] == "slider")
+        assert slider["min"] == 0
+        assert slider["max"] == 100
+
+        inject = next(a for a in data["actions"] if a["type"] == "chat_inject")
+        assert inject["inject_text"] == "@Demo /greet"
+
+    async def test_none_fields_excluded(self, client: AsyncClient) -> None:
+        resp = await client.get("/chat/actions")
+        data = resp.json()
+        lifecycle = next(a for a in data["actions"] if a["control"] == "plugin_lifecycle")
+        assert "inject_text" not in lifecycle
+        assert "target" not in lifecycle
+
+
+# ── POST /chat/actions/{action_id}/execute ───────────────────────────
+
+@pytest.mark.plugin_integration
+@pytest.mark.asyncio
+class TestExecuteChatAction:
+    async def test_execute_toggle(self, client: AsyncClient) -> None:
+        resp = await client.post(
+            "/chat/actions/system:demo:toggle/execute",
+            json={"value": False},
+        )
+        assert resp.status_code == 200
+        data = resp.json()
+        assert data["success"] is True
+        assert data["action"]["control"] == "plugin_lifecycle"
+        assert data["message"] == "toggled"
+
+    async def test_execute_with_null_value(self, client: AsyncClient) -> None:
+        resp = await client.post(
+            "/chat/actions/demo:settings:volume/execute",
+            json={"value": None},
+        )
+        assert resp.status_code == 200
+        assert resp.json()["success"] is True
+
+    async def test_execute_not_found(self, client: AsyncClient) -> None:
+        resp = await client.post(
+            "/chat/actions/bad:action/execute",
+            json={"value": None},
+        )
+        assert resp.status_code == 404
+
+    async def test_execute_empty_body(self, client: AsyncClient) -> None:
+        resp = await client.post(
+            "/chat/actions/system:demo:toggle/execute",
+            json={},
+        )
+        assert resp.status_code == 200
+        assert resp.json()["success"] is True
diff --git a/plugin/tests/unit/server/test_action_aggregation_service.py b/plugin/tests/unit/server/test_action_aggregation_service.py
new file mode 100644
index 0000000000..7162a83b28
--- /dev/null
+++ b/plugin/tests/unit/server/test_action_aggregation_service.py
@@ -0,0 +1,72 @@
+"""Unit tests for plugin.server.application.actions.aggregation_service."""
+from __future__ import annotations
+
+import pytest
+
+from plugin.server.application.actions.aggregation_service import ActionAggregationService
+from plugin.server.domain.action_models import ActionDescriptor
+
+
+class _OkProvider:
+    def __init__(self, actions: list[ActionDescriptor]) -> None:
+        self._actions = actions
+
+    async def get_actions(self, plugin_id: str | None = None) -> list[ActionDescriptor]:
+        if plugin_id:
+            return [a for a in self._actions if a.plugin_id == plugin_id]
+        return list(self._actions)
+
+
+class _FailProvider:
+    async def get_actions(self, plugin_id: str | None = None) -> list[ActionDescriptor]:
+        raise RuntimeError("provider exploded")
+
+
+def _make_action(action_id: str, plugin_id: str = "demo") -> ActionDescriptor:
+    return ActionDescriptor(
+        action_id=action_id,
+        type="instant",
+        label=action_id,
+        category="Test",
+        plugin_id=plugin_id,
+        control="button",
+    )
+
+
+@pytest.mark.plugin_unit
+@pytest.mark.asyncio
+class TestAggregationService:
+    async def test_merges_from_multiple_providers(self) -> None:
+        svc = ActionAggregationService.__new__(ActionAggregationService)
+        svc._providers = [
+            _OkProvider([_make_action("a")]),
+            _OkProvider([_make_action("b")]),
+        ]
+        actions = await svc.aggregate_actions()
+        assert len(actions) == 2
+        assert {a.action_id for a in actions} == {"a", "b"}
+
+    async def test_failing_provider_does_not_block_others(self) -> None:
+        svc = ActionAggregationService.__new__(ActionAggregationService)
+        svc._providers = [
+            _OkProvider([_make_action("ok")]),
+            _FailProvider(),
+        ]
+        actions = await svc.aggregate_actions()
+        assert len(actions) == 1
+        assert actions[0].action_id == "ok"
+
+    async def test_empty_providers(self) -> None:
+        svc = ActionAggregationService.__new__(ActionAggregationService)
+        svc._providers = []
+        actions = await svc.aggregate_actions()
+        assert actions == []
+
+    async def test_plugin_id_filter_passed_through(self) -> None:
+        svc = ActionAggregationService.__new__(ActionAggregationService)
+        svc._providers = [
+            _OkProvider([_make_action("a", "p1"), _make_action("b", "p2")]),
+        ]
+        actions = await svc.aggregate_actions(plugin_id="p1")
+        assert len(actions) == 1
+        assert actions[0].plugin_id == "p1"
diff --git a/plugin/tests/unit/server/test_action_builtin_provider.py b/plugin/tests/unit/server/test_action_builtin_provider.py
new file mode 100644
index 0000000000..c500e68e40
--- /dev/null
+++ b/plugin/tests/unit/server/test_action_builtin_provider.py
@@ -0,0 +1,100 @@
+"""Unit tests for plugin.server.application.actions.builtin_provider."""
+from __future__ import annotations
+
+import threading
+from typing import Any
+from unittest.mock import patch
+
+import pytest
+
+from plugin.server.application.actions import builtin_provider as module
+from plugin.server.domain.action_models import ActionDescriptor
+
+
+class _FakeState:
+    def __init__(
+        self,
+        plugins: dict[str, Any] | None = None,
+        hosts: dict[str, Any] | None = None,
+    ) -> None:
+        self.plugins = plugins or {}
+        self.plugin_hosts = hosts or {}
+        self._lock = threading.RLock()
+
+    def get_plugins_snapshot_cached(self, **_kw: Any) -> dict[str, Any]:
+        return dict(self.plugins)
+
+    def acquire_plugin_hosts_read_lock(self) -> Any:
+        return self._lock
+
+
+def _collect(fake_state: _FakeState, plugin_id: str | None = None) -> list[ActionDescriptor]:
+    with patch("plugin.core.state.state", fake_state):
+        return module._collect_builtin_actions_sync(plugin_id)
+
+
+@pytest.mark.plugin_unit
+class TestBuiltinActions:
+    def test_running_plugin_emits_stop_and_reload(self) -> None:
+        state = _FakeState(
+            plugins={"demo": {"name": "Demo"}},
+            hosts={"demo": object()},
+        )
+        actions = _collect(state)
+        action_ids = {a.action_id for a in actions}
+        assert action_ids == {"system:demo:stop", "system:demo:reload"}
+
+    def test_stopped_plugin_emits_start_only(self) -> None:
+        state = _FakeState(
+            plugins={"demo": {"name": "Demo"}},
+            hosts={},
+        )
+        actions = _collect(state)
+        action_ids = {a.action_id for a in actions}
+        assert action_ids == {"system:demo:start"}
+
+    def test_plugin_name_i18n_ref_is_resolved(self, tmp_path) -> None:
+        """``$i18n`` refs in plugin meta ``name`` must be resolved before they
+        flow into labels/keywords — otherwise the command palette shows raw
+        ``{'$i18n': '...'}`` reprs in builtin lifecycle commands."""
+        plugin_dir = tmp_path / "i18n_demo"
+        plugin_dir.mkdir()
+        translations = plugin_dir / "i18n"
+        translations.mkdir()
+        (translations / "en.json").write_text(
+            '{"plugin.name": "Resolved Demo"}', encoding="utf-8"
+        )
+        config_path = plugin_dir / "config.toml"
+        config_path.write_text("", encoding="utf-8")
+
+        state = _FakeState(
+            plugins={"demo": {
+                "name": {"$i18n": "plugin.name", "default": "Resolved Demo"},
+                "config_path": str(config_path),
+            }},
+            hosts={"demo": object()},
+        )
+        actions = _collect(state)
+        assert actions
+        for a in actions:
+            assert "Resolved Demo" in a.label
+            assert "$i18n" not in a.label
+            assert all("$i18n" not in str(k) for k in a.keywords)
+
+    def test_plugin_id_filter(self) -> None:
+        state = _FakeState(
+            plugins={"a": {"name": "A"}, "b": {"name": "B"}},
+            hosts={"a": object(), "b": object()},
+        )
+        actions = _collect(state, plugin_id="b")
+        # Non-empty guard: an `all(...)` over `[]` would trivially pass and
+        # mask a regression that drops the filter result entirely.
+        assert actions
+        assert all(a.plugin_id == "b" for a in actions)
+
+    def test_non_mapping_meta_skipped(self) -> None:
+        state = _FakeState(
+            plugins={"bad": "not-a-dict"},
+            hosts={"bad": object()},
+        )
+        assert _collect(state) == []
diff --git a/plugin/tests/unit/server/test_action_execution_service.py b/plugin/tests/unit/server/test_action_execution_service.py
new file mode 100644
index 0000000000..55f6fcf011
--- /dev/null
+++ b/plugin/tests/unit/server/test_action_execution_service.py
@@ -0,0 +1,577 @@
+"""Unit tests for plugin.server.application.actions.execution_service."""
+from __future__ import annotations
+
+import threading
+from typing import Any
+
+import pytest
+
+from plugin.server.application.actions.execution_service import (
+    ActionExecutionService,
+    _plugin_id_from_action_id,
+)
+from plugin.server.domain.action_models import ActionDescriptor
+from plugin.server.domain.errors import ServerDomainError
+
+
+# ── Fakes ────────────────────────────────────────────────────────────
+
+class _FakeLifecycleService:
+    def __init__(self) -> None:
+        self.calls: list[tuple[str, str]] = []
+
+    async def start_plugin(self, plugin_id: str) -> dict[str, Any]:
+        self.calls.append(("start", plugin_id))
+        return {"success": True, "message": "started"}
+
+    async def stop_plugin(self, plugin_id: str) -> dict[str, Any]:
+        self.calls.append(("stop", plugin_id))
+        return {"success": True, "message": "stopped"}
+
+    async def reload_plugin(self, plugin_id: str) -> dict[str, Any]:
+        self.calls.append(("reload", plugin_id))
+        return {"success": True, "message": "reloaded"}
+
+
+class _FakeAggregationService:
+    def __init__(self, actions: list[ActionDescriptor] | None = None) -> None:
+        self._actions = actions or []
+
+    async def aggregate_actions(self, plugin_id: str | None = None) -> list[ActionDescriptor]:
+        return [a for a in self._actions if plugin_id is None or a.plugin_id == plugin_id]
+
+
+class _FakeHost:
+    def __init__(self) -> None:
+        self.enabled_entries: list[str] = []
+        self.disabled_entries: list[str] = []
+        self.triggered_entries: list[str] = []
+
+    def enable_entry(self, entry_id: str) -> None:
+        self.enabled_entries.append(entry_id)
+
+    def disable_entry(self, entry_id: str) -> None:
+        self.disabled_entries.append(entry_id)
+
+    async def trigger(self, entry_id: str, args: dict, timeout: float = 30.0) -> object:
+        self.triggered_entries.append(entry_id)
+        return {"ok": True}
+
+
+class _FakeState:
+    def __init__(self, hosts: dict[str, Any] | None = None) -> None:
+        self.plugin_hosts = hosts or {}
+        self._lock = threading.RLock()
+
+    def acquire_plugin_hosts_read_lock(self) -> Any:
+        return self._lock
+
+    def acquire_plugin_hosts_write_lock(self) -> Any:
+        return self._lock
+
+
+def _build_service(
+    lifecycle: _FakeLifecycleService | None = None,
+    aggregation: _FakeAggregationService | None = None,
+) -> ActionExecutionService:
+    svc = ActionExecutionService.__new__(ActionExecutionService)
+    svc._lifecycle = lifecycle or _FakeLifecycleService()
+    svc._aggregation = aggregation or _FakeAggregationService()
+
+    from plugin.server.application.actions.execution_service import (
+        _ListActionHandler,
+        _SettingsActionHandler,
+        _SystemActionHandler,
+    )
+
+    svc._settings_handler = _SettingsActionHandler(svc._aggregation)
+    svc._system_handler = _SystemActionHandler(svc._lifecycle)
+    svc._list_action_handler = _ListActionHandler()
+    return svc
+
+
+# ── System handler tests ─────────────────────────────────────────────
+
+@pytest.mark.plugin_unit
+@pytest.mark.asyncio
+class TestSystemActions:
+    async def test_toggle_starts_stopped_plugin(self, monkeypatch: pytest.MonkeyPatch) -> None:
+        lifecycle = _FakeLifecycleService()
+        svc = _build_service(lifecycle=lifecycle)
+        monkeypatch.setattr(
+            "plugin.server.application.actions.execution_service._is_plugin_running",
+            lambda pid: False,
+        )
+        resp = await svc.execute("system:demo:toggle", value=True)
+        assert resp.success is True
+        assert ("start", "demo") in lifecycle.calls
+
+    async def test_toggle_stops_running_plugin(self, monkeypatch: pytest.MonkeyPatch) -> None:
+        lifecycle = _FakeLifecycleService()
+        svc = _build_service(lifecycle=lifecycle)
+        monkeypatch.setattr(
+            "plugin.server.application.actions.execution_service._is_plugin_running",
+            lambda pid: True,
+        )
+        resp = await svc.execute("system:demo:toggle", value=False)
+        assert resp.success is True
+        assert ("stop", "demo") in lifecycle.calls
+
+    async def test_start(self) -> None:
+        lifecycle = _FakeLifecycleService()
+        svc = _build_service(lifecycle=lifecycle)
+        resp = await svc.execute("system:demo:start")
+        assert resp.success is True
+        assert ("start", "demo") in lifecycle.calls
+
+    async def test_stop(self) -> None:
+        lifecycle = _FakeLifecycleService()
+        svc = _build_service(lifecycle=lifecycle)
+        resp = await svc.execute("system:demo:stop")
+        assert resp.success is True
+        assert ("stop", "demo") in lifecycle.calls
+
+    async def test_reload(self) -> None:
+        lifecycle = _FakeLifecycleService()
+        svc = _build_service(lifecycle=lifecycle)
+        resp = await svc.execute("system:demo:reload")
+        assert resp.success is True
+        assert ("reload", "demo") in lifecycle.calls
+
+    async def test_unknown_system_action_falls_through_to_list_handler(self) -> None:
+        """Once the lifecycle-keyword gate was added, ``system:demo:explode``
+        no longer matches a lifecycle action — `explode` isn't in the keyword
+        set — so it falls through to the list-action handler (which itself
+        currently raises ACTION_NOT_IMPLEMENTED). The point of this test is
+        that it does NOT raise ACTION_NOT_FOUND from the system handler."""
+        svc = _build_service()
+        with pytest.raises(ServerDomainError) as exc_info:
+            await svc.execute("system:demo:explode")
+        assert exc_info.value.code == "ACTION_NOT_IMPLEMENTED"
+
+    async def test_two_segment_system_action_falls_through_to_list_handler(self) -> None:
+        """``system:bad`` (2 segments) is now treated as plugin "system"
+        calling list action "bad" — no longer reserved by the system handler
+        — so the dispatch routes it to the list handler."""
+        svc = _build_service()
+        with pytest.raises(ServerDomainError) as exc_info:
+            await svc.execute("system:bad")
+        assert exc_info.value.code == "ACTION_NOT_IMPLEMENTED"
+
+    async def test_lifecycle_action_rejects_extra_segments(self) -> None:
+        """A crafted id like `system:demo:stop:unexpected` must NOT execute the
+        lifecycle handler — only exactly three segments are valid for
+        start/stop/reload/toggle/profile."""
+        lifecycle = _FakeLifecycleService()
+        svc = _build_service(lifecycle=lifecycle)
+        with pytest.raises(ServerDomainError) as exc_info:
+            await svc.execute("system:demo:stop:unexpected")
+        assert exc_info.value.code == "ACTION_NOT_FOUND"
+        assert lifecycle.calls == []  # the stop must not have run
+
+
+# ── Entry toggle / button tests ──────────────────────────────────────
+
+@pytest.mark.plugin_unit
+@pytest.mark.asyncio
+class TestEntryActions:
+    async def test_button_entry_triggers_via_host(self, monkeypatch: pytest.MonkeyPatch) -> None:
+        """Button-type entries (value=null) should call host.trigger."""
+        host = _FakeHost()
+        from plugin.core.state import state as real_state
+        original_hosts = real_state.plugin_hosts
+        real_state.plugin_hosts = {"demo": host}
+        try:
+            svc = _build_service()
+            resp = await svc.execute("system:demo:entry:do_thing", value=None)
+            assert resp.success is True
+            assert "do_thing" in host.triggered_entries
+        finally:
+            real_state.plugin_hosts = original_hosts
+
+    async def test_button_entry_plugin_not_running(self, monkeypatch: pytest.MonkeyPatch) -> None:
+        from plugin.core.state import state as real_state
+        original_hosts = real_state.plugin_hosts
+        real_state.plugin_hosts = {}
+        try:
+            svc = _build_service()
+            with pytest.raises(ServerDomainError) as exc_info:
+                await svc.execute("system:demo:entry:do_thing", value=None)
+            assert exc_info.value.code == "PLUGIN_NOT_RUNNING"
+        finally:
+            real_state.plugin_hosts = original_hosts
+
+    async def test_toggle_entry_enable(self, monkeypatch: pytest.MonkeyPatch) -> None:
+        host = _FakeHost()
+        monkeypatch.setattr(
+            "plugin.server.application.actions.execution_service._is_plugin_running",
+            lambda pid: True,
+        )
+        from plugin.core.state import state as real_state
+        original_hosts = real_state.plugin_hosts
+        real_state.plugin_hosts = {"demo": host}
+        try:
+            svc = _build_service()
+            resp = await svc.execute("system:demo:entry:my_svc", value=True)
+            assert resp.success is True
+            assert "my_svc" in host.enabled_entries
+        finally:
+            real_state.plugin_hosts = original_hosts
+
+    async def test_toggle_entry_disable(self, monkeypatch: pytest.MonkeyPatch) -> None:
+        host = _FakeHost()
+        monkeypatch.setattr(
+            "plugin.server.application.actions.execution_service._is_plugin_running",
+            lambda pid: True,
+        )
+        from plugin.core.state import state as real_state
+        original_hosts = real_state.plugin_hosts
+        real_state.plugin_hosts = {"demo": host}
+        try:
+            svc = _build_service()
+            resp = await svc.execute("system:demo:entry:my_svc", value=False)
+            assert resp.success is True
+            assert "my_svc" in host.disabled_entries
+        finally:
+            real_state.plugin_hosts = original_hosts
+
+    async def test_toggle_entry_plugin_not_running(self, monkeypatch: pytest.MonkeyPatch) -> None:
+        monkeypatch.setattr(
+            "plugin.server.application.actions.execution_service._is_plugin_running",
+            lambda pid: False,
+        )
+        svc = _build_service()
+        with pytest.raises(ServerDomainError) as exc_info:
+            await svc.execute("system:demo:entry:my_svc", value=True)
+        assert exc_info.value.code == "PLUGIN_NOT_RUNNING"
+
+    async def test_button_entry_preserves_unsupported_error(self) -> None:
+        """If the host has no ``trigger`` method, the handler must surface the
+        intentional ENTRY_TRIGGER_UNSUPPORTED (501) instead of collapsing it
+        into a generic ENTRY_TRIGGER_FAILED (500)."""
+        from types import SimpleNamespace
+
+        host = SimpleNamespace()  # no `trigger` attribute on purpose
+        from plugin.core.state import state as real_state
+        original_hosts = real_state.plugin_hosts
+        real_state.plugin_hosts = {"demo": host}
+        try:
+            svc = _build_service()
+            with pytest.raises(ServerDomainError) as exc_info:
+                await svc.execute("system:demo:entry:do_thing", value=None)
+            assert exc_info.value.code == "ENTRY_TRIGGER_UNSUPPORTED"
+            assert exc_info.value.status_code == 501
+        finally:
+            real_state.plugin_hosts = original_hosts
+
+    async def test_toggle_entry_preserves_unsupported_error(self, monkeypatch: pytest.MonkeyPatch) -> None:
+        """If the host lacks ``enable_entry`` / ``disable_entry``, the handler
+        must surface ENTRY_TOGGLE_UNSUPPORTED (501) rather than wrap it as
+        ENTRY_TOGGLE_FAILED (500)."""
+        from types import SimpleNamespace
+
+        host = SimpleNamespace()  # no enable_entry / disable_entry
+        monkeypatch.setattr(
+            "plugin.server.application.actions.execution_service._is_plugin_running",
+            lambda pid: True,
+        )
+        from plugin.core.state import state as real_state
+        original_hosts = real_state.plugin_hosts
+        real_state.plugin_hosts = {"demo": host}
+        try:
+            svc = _build_service()
+            with pytest.raises(ServerDomainError) as exc_info:
+                await svc.execute("system:demo:entry:my_svc", value=True)
+            assert exc_info.value.code == "ENTRY_TOGGLE_UNSUPPORTED"
+            assert exc_info.value.status_code == 501
+        finally:
+            real_state.plugin_hosts = original_hosts
+
+
+# ── Settings handler tests ───────────────────────────────────────────
+
+@pytest.mark.plugin_unit
+@pytest.mark.asyncio
+class TestSettingsActions:
+    async def test_settings_action_calls_hot_update(self, monkeypatch: pytest.MonkeyPatch) -> None:
+        captured: dict[str, Any] = {}
+
+        async def fake_hot_update(plugin_id: str, updates: dict, mode: str) -> dict:
+            captured["plugin_id"] = plugin_id
+            captured["updates"] = updates
+            captured["mode"] = mode
+            return {"message": "ok"}
+
+        # Provide a fake PluginSettings class with a hot field
+        from pydantic import BaseModel, Field
+
+        class _FakeSettings(BaseModel):
+            model_config = {"toml_section": "settings"}
+            enabled: bool = Field(default=False, json_schema_extra={"hot": True})
+
+        monkeypatch.setattr(
+            "plugin.server.application.actions.execution_service.hot_update_plugin_config",
+            fake_hot_update,
+        )
+        monkeypatch.setattr(
+            "plugin.server.application.actions.execution_service.resolve_settings_class",
+            lambda pid, **kw: _FakeSettings,
+        )
+
+        svc = _build_service()
+        resp = await svc.execute("demo:settings:enabled", value=True)
+        assert resp.success is True
+        assert captured["plugin_id"] == "demo"
+        assert captured["updates"] == {"settings": {"enabled": True}}
+        assert captured["mode"] == "temporary"
+
+
+# ── List action handler tests ────────────────────────────────────────
+
+@pytest.mark.plugin_unit
+@pytest.mark.asyncio
+class TestListActions:
+    async def test_list_action_raises_not_implemented(self) -> None:
+        svc = _build_service()
+        with pytest.raises(ServerDomainError) as exc_info:
+            await svc.execute("demo:some_action")
+        assert exc_info.value.code == "ACTION_NOT_IMPLEMENTED"
+
+
+# ── Dispatch routing tests ───────────────────────────────────────────
+
+@pytest.mark.plugin_unit
+@pytest.mark.asyncio
+class TestDispatchRouting:
+    async def test_unknown_action_id_raises(self) -> None:
+        svc = _build_service()
+        with pytest.raises(ServerDomainError) as exc_info:
+            await svc.execute("single-segment-no-colon")
+        assert exc_info.value.code == "ACTION_NOT_FOUND"
+
+    async def test_profile_requires_string_value(self) -> None:
+        svc = _build_service()
+        with pytest.raises(ServerDomainError) as exc_info:
+            await svc.execute("system:demo:profile", value=123)
+        assert exc_info.value.code == "INVALID_ARGUMENT"
+
+    async def test_profile_requires_nonempty_string(self) -> None:
+        svc = _build_service()
+        with pytest.raises(ServerDomainError) as exc_info:
+            await svc.execute("system:demo:profile", value="  ")
+        assert exc_info.value.code == "INVALID_ARGUMENT"
+
+    async def test_profile_reload_failure_surfaces_in_message(
+        self, monkeypatch: pytest.MonkeyPatch,
+    ) -> None:
+        """When ``set_plugin_active_profile`` succeeds but ``reload_plugin``
+        fails, the response must surface the reload failure in the message
+        rather than silently returning a misleading "Profile switched"
+        success — the running plugin is still on the old profile."""
+        # Stub out the on-disk profile switch as a sync no-op (the production
+        # call site invokes it via ``asyncio.to_thread`` so a coroutine
+        # wouldn't work here).
+        import plugin.config.service as config_service_mod
+        monkeypatch.setattr(
+            config_service_mod, "set_plugin_active_profile",
+            lambda *a, **kw: None, raising=False,
+        )
+
+        class _FailingReloadLifecycle(_FakeLifecycleService):
+            async def reload_plugin(self, plugin_id: str) -> dict[str, Any]:
+                raise RuntimeError("reload boom")
+
+        svc = _build_service(lifecycle=_FailingReloadLifecycle())
+        resp = await svc.execute("system:demo:profile", value="prod")
+        assert resp.success is True  # config did change
+        assert "reload failed" in resp.message
+        assert "prod" in resp.message
+        assert "reload boom" in resp.message
+
+    async def test_profile_activation_preserves_domain_error(
+        self, monkeypatch: pytest.MonkeyPatch,
+    ) -> None:
+        import plugin.config.service as config_service_mod
+
+        def _raise_missing_profile(*_args: object, **_kwargs: object) -> None:
+            raise ServerDomainError(
+                code="PLUGIN_PROFILE_NOT_FOUND",
+                message="Profile 'missing' not found",
+                status_code=404,
+                details={"plugin_id": "demo", "profile_name": "missing"},
+            )
+
+        monkeypatch.setattr(
+            config_service_mod,
+            "set_plugin_active_profile",
+            _raise_missing_profile,
+            raising=False,
+        )
+
+        lifecycle = _FakeLifecycleService()
+        svc = _build_service(lifecycle=lifecycle)
+        with pytest.raises(ServerDomainError) as exc_info:
+            await svc.execute("system:demo:profile", value="missing")
+
+        assert exc_info.value.code == "PLUGIN_PROFILE_NOT_FOUND"
+        assert exc_info.value.status_code == 404
+        assert lifecycle.calls == []
+
+
+# ── _plugin_id_from_action_id reverse lookup ────────────────────────
+
+@pytest.mark.plugin_unit
+class TestPluginIdFromActionId:
+    """The reverse lookup must mirror ``ActionExecutionService.execute`` so
+    that ``_find_action`` after a settings/list-action execute hits the
+    right plugin slice. The previous implementation read ``parts[1]`` for
+    every ``system:`` prefix, which routed plugin "system" settings to a
+    nonexistent plugin "settings"."""
+
+    def test_lifecycle_uses_parts_1(self) -> None:
+        assert _plugin_id_from_action_id("system:demo:start") == "demo"
+        assert _plugin_id_from_action_id("system:demo:stop") == "demo"
+        assert _plugin_id_from_action_id("system:demo:entry:do_thing") == "demo"
+        assert _plugin_id_from_action_id("system:demo:profile") == "demo"
+
+    def test_system_plugin_settings_uses_parts_0(self) -> None:
+        """For plugin literally named "system", ``parts[0]`` is the plugin
+        id; only authorize the lifecycle shortcut when ``parts[2]`` is a
+        known lifecycle keyword."""
+        assert _plugin_id_from_action_id("system:settings:enabled") == "system"
+        assert _plugin_id_from_action_id("system:foo") == "system"
+
+    def test_settings_precedence_beats_lifecycle_keyword(self) -> None:
+        """Field name colliding with a lifecycle keyword (e.g. ``start``)
+        must not flip the resolver to the lifecycle shortcut — settings
+        precedence wins."""
+        assert _plugin_id_from_action_id("system:settings:start") == "system"
+        assert _plugin_id_from_action_id("system:settings:stop") == "system"
+
+    def test_normal_plugin_settings_uses_parts_0(self) -> None:
+        assert _plugin_id_from_action_id("demo:settings:enabled") == "demo"
+        assert _plugin_id_from_action_id("demo:greet") == "demo"
+
+
+# ── Plugin literally named "system" — namespace collision regression ─
+
+@pytest.mark.plugin_unit
+@pytest.mark.asyncio
+class TestSystemPluginIdNamespace:
+    """A plugin whose ``plugin_id == "system"`` must not have its actions
+    swallowed by the ``system:`` lifecycle prefix. Dispatch is structural —
+    we only treat ``system:{x}:{y}`` as a lifecycle when ``{y}`` is a known
+    lifecycle keyword."""
+
+    async def test_system_named_plugin_list_action_falls_through(self) -> None:
+        """``system:foo`` (2 segments) is a list action for plugin "system",
+        not a lifecycle call. The list handler currently raises
+        ACTION_NOT_IMPLEMENTED, which is the *correct* routing — the test
+        verifies the dispatch reaches the list handler, not the system one."""
+        svc = _build_service()
+        with pytest.raises(ServerDomainError) as exc_info:
+            await svc.execute("system:foo")
+        assert exc_info.value.code == "ACTION_NOT_IMPLEMENTED"
+
+    async def test_system_named_plugin_settings_routes_to_settings_handler(
+        self, monkeypatch: pytest.MonkeyPatch,
+    ) -> None:
+        """``system:settings:enabled`` for plugin_id=="system" must reach the
+        settings handler — not get misclassified as a lifecycle 'settings'
+        action (which would fail ACTION_NOT_FOUND).
+
+        Also locks the ``_find_action`` re-fetch path: a previously-buggy
+        ``_find_action`` mapped this action_id to plugin "settings", so the
+        aggregation filter would miss the descriptor and
+        ``resp.action`` would come back ``None``.
+        """
+        captured: dict[str, Any] = {}
+
+        async def fake_hot_update(plugin_id: str, updates: dict, mode: str) -> dict:
+            captured["plugin_id"] = plugin_id
+            captured["updates"] = updates
+            captured["mode"] = mode
+            return {"message": "ok"}
+
+        from pydantic import BaseModel, Field
+
+        class _FakeSettings(BaseModel):
+            model_config = {"toml_section": "settings"}
+            enabled: bool = Field(default=False, json_schema_extra={"hot": True})
+
+        monkeypatch.setattr(
+            "plugin.server.application.actions.execution_service.hot_update_plugin_config",
+            fake_hot_update,
+        )
+        monkeypatch.setattr(
+            "plugin.server.application.actions.execution_service.resolve_settings_class",
+            lambda pid, **kw: _FakeSettings,
+        )
+
+        descriptor = ActionDescriptor(
+            action_id="system:settings:enabled",
+            type="instant",
+            label="Enabled",
+            category="System",
+            plugin_id="system",
+            control="toggle",
+            current_value=True,
+        )
+        aggregation = _FakeAggregationService(actions=[descriptor])
+        svc = _build_service(aggregation=aggregation)
+        resp = await svc.execute("system:settings:enabled", value=True)
+        assert resp.success is True
+        assert captured["plugin_id"] == "system"
+        assert captured["updates"] == {"settings": {"enabled": True}}
+        # The whole point of fixing _find_action's namespace handling: the
+        # refreshed descriptor must come back so the palette can update its
+        # inline widget without a full re-fetch.
+        assert resp.action is not None
+        assert resp.action.action_id == "system:settings:enabled"
+
+    async def test_lifecycle_keyword_collision_with_system_plugin_field(
+        self, monkeypatch: pytest.MonkeyPatch,
+    ) -> None:
+        """Even if plugin "system" has a hot field literally named "start"
+        (which clashes with a lifecycle keyword), ``system:settings:start``
+        must still reach the settings handler because the structural form
+        ``{x}:settings:{y}`` wins over the ``system:`` prefix shortcut."""
+        captured: dict[str, Any] = {}
+
+        async def fake_hot_update(plugin_id: str, updates: dict, mode: str) -> dict:
+            captured["plugin_id"] = plugin_id
+            captured["updates"] = updates
+            return {"message": "ok"}
+
+        from pydantic import BaseModel, Field
+
+        class _FakeSettings(BaseModel):
+            model_config = {"toml_section": "settings"}
+            start: bool = Field(default=False, json_schema_extra={"hot": True})
+
+        monkeypatch.setattr(
+            "plugin.server.application.actions.execution_service.hot_update_plugin_config",
+            fake_hot_update,
+        )
+        monkeypatch.setattr(
+            "plugin.server.application.actions.execution_service.resolve_settings_class",
+            lambda pid, **kw: _FakeSettings,
+        )
+
+        descriptor = ActionDescriptor(
+            action_id="system:settings:start",
+            type="instant",
+            label="Start",
+            category="System",
+            plugin_id="system",
+            control="toggle",
+            current_value=True,
+        )
+        aggregation = _FakeAggregationService(actions=[descriptor])
+        svc = _build_service(aggregation=aggregation)
+        resp = await svc.execute("system:settings:start", value=True)
+        assert resp.success is True
+        assert captured["plugin_id"] == "system"
+        assert captured["updates"] == {"settings": {"start": True}}
+        assert resp.action is not None
+        assert resp.action.action_id == "system:settings:start"
diff --git a/plugin/tests/unit/server/test_action_list_actions_provider.py b/plugin/tests/unit/server/test_action_list_actions_provider.py
new file mode 100644
index 0000000000..d8b8af3045
--- /dev/null
+++ b/plugin/tests/unit/server/test_action_list_actions_provider.py
@@ -0,0 +1,269 @@
+"""Unit tests for plugin.server.application.actions.list_actions_provider."""
+from __future__ import annotations
+
+from typing import Any
+from unittest.mock import patch
+
+import pytest
+
+from plugin.server.application.actions import list_actions_provider as module
+from plugin.server.domain.action_models import ActionDescriptor
+
+
+class _FakeState:
+    def __init__(self, plugins: dict[str, Any] | None = None) -> None:
+        self.plugins = plugins or {}
+
+    def get_plugins_snapshot_cached(self, **_kw: Any) -> dict[str, Any]:
+        return dict(self.plugins)
+
+
+def _collect(fake_state: _FakeState, plugin_id: str | None = None) -> list[ActionDescriptor]:
+    with patch("plugin.core.state.state", fake_state):
+        return module._collect_list_actions_sync(plugin_id)
+
+
+@pytest.mark.plugin_unit
+class TestMapListAction:
+    def test_chat_inject_with_target(self) -> None:
+        d = module._map_list_action("demo", "Demo", {
+            "id": "greet",
+            "kind": "chat_inject",
+            "label": "Greet",
+            "target": "/hello",
+        })
+        assert d is not None
+        assert d.type == "chat_inject"
+        assert d.inject_text == "/hello"
+
+    def test_chat_inject_default_target(self) -> None:
+        d = module._map_list_action("demo", "Demo", {
+            "id": "greet",
+            "kind": "chat_inject",
+            "label": "Greet",
+        })
+        assert d is not None
+        assert d.inject_text == "@demo /greet"
+
+    def test_navigation_kinds(self) -> None:
+        for kind in ("ui", "url", "route"):
+            d = module._map_list_action("demo", "Demo", {
+                "id": "open",
+                "kind": kind,
+                "label": "Open",
+                "target": "http://example.com",
+            })
+            assert d is not None
+            assert d.type == "navigation"
+            assert d.open_in == "new_tab"
+
+    def test_navigation_same_tab(self) -> None:
+        d = module._map_list_action("demo", "Demo", {
+            "id": "open",
+            "kind": "url",
+            "label": "Open",
+            "target": "http://example.com",
+            "open_in": "same_tab",
+        })
+        assert d is not None
+        assert d.open_in == "same_tab"
+
+    def test_navigation_requires_string_target(self) -> None:
+        for target in (None, "", "   ", {"path": "/ui"}):
+            d = module._map_list_action("demo", "Demo", {
+                "id": "open",
+                "kind": "ui",
+                "label": "Open",
+                "target": target,
+            })
+            assert d is None
+
+    def test_quick_action_parses_string_false(self) -> None:
+        d = module._map_list_action("demo", "Demo", {
+            "id": "greet",
+            "kind": "chat_inject",
+            "label": "Greet",
+            "quick_action": "false",
+        })
+
+        assert d is not None
+        assert d.quick_action is False
+
+    def test_null_label_and_description_use_defaults(self) -> None:
+        d = module._map_list_action("demo", "Demo", {
+            "id": "greet",
+            "kind": "chat_inject",
+            "label": None,
+            "description": None,
+        })
+
+        assert d is not None
+        assert d.label == "greet"
+        assert d.description == ""
+
+    def test_invalid_priority_falls_back_to_zero(self) -> None:
+        d = module._map_list_action("demo", "Demo", {
+            "id": "open",
+            "kind": "ui",
+            "label": "Open",
+            "target": "/ui",
+            "priority": "not-a-number",
+        })
+
+        assert d is not None
+        assert d.priority == 0
+
+    def test_non_routable_kinds_are_skipped(self) -> None:
+        for kind in ("toggle", "trigger", "action", "button", "run", "custom_kind"):
+            d = module._map_list_action("demo", "Demo", {
+                "id": f"do_{kind}",
+                "kind": kind,
+                "label": f"Do {kind}",
+            })
+            assert d is None, f"kind={kind} is not executable through the actions service yet"
+
+    def test_empty_kind_returns_none(self) -> None:
+        d = module._map_list_action("demo", "Demo", {
+            "id": "noop",
+            "kind": "",
+            "label": "Noop",
+        })
+        assert d is None
+
+    def test_missing_id_returns_none(self) -> None:
+        d = module._map_list_action("demo", "Demo", {"kind": "action", "label": "X"})
+        assert d is None
+
+    def test_action_id_format(self) -> None:
+        d = module._map_list_action("my-plugin", "My Plugin", {
+            "id": "do_stuff",
+            "kind": "ui",
+            "label": "Do Stuff",
+            "target": "/ui",
+        })
+        assert d is not None
+        assert d.action_id == "my-plugin:do_stuff"
+        assert d.plugin_id == "my-plugin"
+
+    def test_action_id_whitespace_is_normalized(self) -> None:
+        """A raw id like ``"  foo  "`` must be stripped before joining with
+        plugin_id so the resulting action_id has no internal whitespace."""
+        d = module._map_list_action("demo", "Demo", {
+            "id": "  greet  ",
+            "kind": "chat_inject",
+            "label": "Greet",
+        })
+        assert d is not None
+        assert d.action_id == "demo:greet"
+        assert d.inject_text == "@demo /greet"
+
+    def test_action_id_only_whitespace_returns_none(self) -> None:
+        d = module._map_list_action("demo", "Demo", {
+            "id": "   ",
+            "kind": "chat_inject",
+            "label": "x",
+        })
+        assert d is None
+
+
+@pytest.mark.plugin_unit
+class TestCollectListActions:
+    def test_empty_plugins(self) -> None:
+        assert _collect(_FakeState()) == []
+
+    def test_plugin_without_list_actions(self) -> None:
+        state = _FakeState(plugins={"demo": {"name": "Demo"}})
+        assert _collect(state) == []
+
+    def test_plugin_with_list_actions(self) -> None:
+        state = _FakeState(plugins={"demo": {
+            "name": "Demo",
+            "list_actions": [
+                {"id": "a", "kind": "action", "label": "A"},
+                {"id": "b", "kind": "chat_inject", "label": "B"},
+            ],
+        }})
+        actions = _collect(state)
+        assert len(actions) == 1
+        assert actions[0].type == "chat_inject"
+
+    def test_filter_by_plugin_id(self) -> None:
+        state = _FakeState(plugins={
+            "a": {"name": "A", "list_actions": [{"id": "x", "kind": "action", "label": "X"}]},
+            "b": {"name": "B", "list_actions": [{"id": "y", "kind": "ui", "label": "Y", "target": "/ui"}]},
+        })
+        actions = _collect(state, plugin_id="b")
+        assert len(actions) == 1
+        assert actions[0].action_id == "b:y"
+
+    def test_invalid_list_action_skipped(self) -> None:
+        state = _FakeState(plugins={"demo": {
+            "name": "Demo",
+            "list_actions": [
+                "not-a-dict",
+                {"id": "ok", "kind": "action", "label": "OK"},
+                {"id": "open", "kind": "ui", "label": "Open", "target": "/ui"},
+            ],
+        }})
+        actions = _collect(state)
+        assert len(actions) == 1
+        assert actions[0].action_id == "demo:open"
+
+    def test_non_mapping_meta_skipped(self) -> None:
+        state = _FakeState(plugins={"bad": "not-a-dict"})
+        assert _collect(state) == []
+
+    def test_navigation_target_substitutes_plugin_id(self) -> None:
+        state = _FakeState(plugins={"my-plugin": {
+            "name": "MyPlugin",
+            "list_actions": [
+                {"id": "panel", "kind": "route", "label": "Panel",
+                 "target": "/plugins/{plugin_id}?tab=panel"},
+            ],
+        }})
+        actions = _collect(state)
+        assert len(actions) == 1
+        assert actions[0].target == "/plugins/my-plugin?tab=panel"
+
+    def test_chat_inject_target_substitutes_plugin_id(self) -> None:
+        state = _FakeState(plugins={"demo": {
+            "name": "Demo",
+            "list_actions": [
+                {"id": "say", "kind": "chat_inject", "label": "Say",
+                 "target": "@{plugin_id} hello"},
+            ],
+        }})
+        actions = _collect(state)
+        assert len(actions) == 1
+        assert actions[0].inject_text == "@demo hello"
+
+    def test_i18n_ref_label_is_resolved(self, tmp_path) -> None:
+        # Mock plugin i18n: write a translations file the loader can find.
+        plugin_dir = tmp_path / "i18n_plugin"
+        plugin_dir.mkdir()
+        translations_dir = plugin_dir / "i18n"
+        translations_dir.mkdir()
+        (translations_dir / "en.json").write_text(
+            '{"actions.open_ui.label": "Open UI"}', encoding="utf-8"
+        )
+        config_path = plugin_dir / "config.toml"
+        config_path.write_text("", encoding="utf-8")
+
+        state = _FakeState(plugins={"demo": {
+            "name": "Demo",
+            "config_path": str(config_path),
+            "list_actions": [
+                {
+                    "id": "open",
+                    "kind": "ui",
+                    "label": {"$i18n": "actions.open_ui.label", "default": "Open UI"},
+                    "target": "/ui",
+                },
+            ],
+        }})
+        actions = _collect(state)
+        assert len(actions) == 1
+        assert actions[0].label == "Open UI"
+        # The label must not leak the raw mapping repr.
+        assert "$i18n" not in actions[0].label
+        assert "{" not in actions[0].label
diff --git a/plugin/tests/unit/server/test_action_models.py b/plugin/tests/unit/server/test_action_models.py
new file mode 100644
index 0000000000..0850a760c4
--- /dev/null
+++ b/plugin/tests/unit/server/test_action_models.py
@@ -0,0 +1,153 @@
+"""Unit tests for plugin.server.domain.action_models."""
+from __future__ import annotations
+
+import pytest
+
+from plugin.server.domain.action_models import (
+    ActionDescriptor,
+    ActionExecuteRequest,
+    ActionExecuteResponse,
+)
+
+
+@pytest.mark.plugin_unit
+class TestActionDescriptor:
+    def test_minimal_instant(self) -> None:
+        d = ActionDescriptor(
+            action_id="demo:settings:enabled",
+            type="instant",
+            label="Enabled",
+            category="Demo",
+            plugin_id="demo",
+            control="toggle",
+            current_value=True,
+        )
+        assert d.action_id == "demo:settings:enabled"
+        assert d.disabled is False
+
+    def test_navigation(self) -> None:
+        d = ActionDescriptor(
+            action_id="system:demo:open_ui",
+            type="navigation",
+            label="Open UI",
+            category="系统",
+            plugin_id="demo",
+            target="http://127.0.0.1:9090/plugin/demo/ui/",
+            open_in="new_tab",
+        )
+        assert d.target is not None
+        assert d.open_in == "new_tab"
+
+    def test_chat_inject(self) -> None:
+        d = ActionDescriptor(
+            action_id="demo:greet",
+            type="chat_inject",
+            label="Greet",
+            category="Demo",
+            plugin_id="demo",
+            inject_text="@Demo /greet",
+        )
+        assert d.inject_text == "@Demo /greet"
+
+    def test_plugin_lifecycle_control(self) -> None:
+        d = ActionDescriptor(
+            action_id="system:demo:toggle",
+            type="instant",
+            label="Demo",
+            category="系统",
+            plugin_id="demo",
+            control="plugin_lifecycle",
+            current_value=True,
+        )
+        assert d.control == "plugin_lifecycle"
+
+    def test_button_control(self) -> None:
+        d = ActionDescriptor(
+            action_id="system:demo:entry:do_thing",
+            type="instant",
+            label="Do Thing",
+            category="系统",
+            plugin_id="demo",
+            control="button",
+        )
+        assert d.control == "button"
+        assert d.current_value is None
+
+    def test_slider_control(self) -> None:
+        d = ActionDescriptor(
+            action_id="demo:settings:volume",
+            type="instant",
+            label="Volume",
+            category="Demo",
+            plugin_id="demo",
+            control="slider",
+            current_value=50,
+            min=0,
+            max=100,
+            step=1,
+        )
+        assert d.min == 0
+        assert d.max == 100
+
+    def test_exclude_none_serialization(self) -> None:
+        d = ActionDescriptor(
+            action_id="x:y",
+            type="instant",
+            label="X",
+            category="C",
+            plugin_id="x",
+            control="button",
+        )
+        data = d.model_dump(exclude_none=True)
+        assert "inject_text" not in data
+        assert "target" not in data
+        assert "options" not in data
+
+    @pytest.mark.parametrize("bad_control", ["unknown", "radio", "checkbox"])
+    def test_invalid_control_rejected(self, bad_control: str) -> None:
+        with pytest.raises(Exception):
+            ActionDescriptor(
+                action_id="x:y",
+                type="instant",
+                label="X",
+                category="C",
+                plugin_id="x",
+                control=bad_control,  # type: ignore[arg-type]
+            )
+
+
+@pytest.mark.plugin_unit
+class TestActionExecuteRequest:
+    def test_default_value_is_none(self) -> None:
+        req = ActionExecuteRequest()
+        assert req.value is None
+
+    def test_with_bool_value(self) -> None:
+        req = ActionExecuteRequest(value=True)
+        assert req.value is True
+
+    def test_with_string_value(self) -> None:
+        req = ActionExecuteRequest(value="profile-a")
+        assert req.value == "profile-a"
+
+
+@pytest.mark.plugin_unit
+class TestActionExecuteResponse:
+    def test_success_with_action(self) -> None:
+        action = ActionDescriptor(
+            action_id="x:y",
+            type="instant",
+            label="X",
+            category="C",
+            plugin_id="x",
+            control="toggle",
+            current_value=True,
+        )
+        resp = ActionExecuteResponse(success=True, action=action, message="ok")
+        assert resp.success is True
+        assert resp.action is not None
+        assert resp.message == "ok"
+
+    def test_success_without_action(self) -> None:
+        resp = ActionExecuteResponse(success=True, message="done")
+        assert resp.action is None
diff --git a/plugin/tests/unit/server/test_action_settings_provider.py b/plugin/tests/unit/server/test_action_settings_provider.py
new file mode 100644
index 0000000000..7e0a7fd34a
--- /dev/null
+++ b/plugin/tests/unit/server/test_action_settings_provider.py
@@ -0,0 +1,104 @@
+from __future__ import annotations
+
+from typing import Literal
+
+import pytest
+
+from plugin.sdk.plugin.settings import PluginSettings, SettingsField
+from plugin.server.application.actions import settings_provider as module
+
+pytestmark = pytest.mark.plugin_unit
+
+
+def test_is_hot_reads_settings_field_metadata_for_callable_schema_extra() -> None:
+    def add_marker(schema: dict[str, object]) -> None:
+        schema["x-marker"] = "ok"
+
+    class _Settings(PluginSettings):
+        value: int = SettingsField(1, hot=True, json_schema_extra=add_marker)
+
+    assert module._is_hot(_Settings.model_fields["value"]) is True
+
+
+def test_int_exclusive_bounds_are_exposed_as_closed_ui_bounds() -> None:
+    class _Settings(PluginSettings):
+        count: int = SettingsField(1, hot=True, gt=0, lt=10)
+
+    descriptor = module._build_descriptor_for_field(
+        plugin_id="demo",
+        plugin_name="Demo",
+        field_name="count",
+        field_info=_Settings.model_fields["count"],
+        annotation=_Settings.model_fields["count"].annotation,
+        current_value=1,
+    )
+
+    assert descriptor is not None
+    assert descriptor.min == 1
+    assert descriptor.max == 9
+
+
+def test_optional_literal_fields_build_dropdown() -> None:
+    class _Settings(PluginSettings):
+        mode: Literal["auto", "manual"] | None = SettingsField(None, hot=True)
+
+    descriptor = module._build_descriptor_for_field(
+        plugin_id="demo",
+        plugin_name="Demo",
+        field_name="mode",
+        field_info=_Settings.model_fields["mode"],
+        annotation=_Settings.model_fields["mode"].annotation,
+        current_value="auto",
+    )
+
+    assert descriptor is not None
+    assert descriptor.control == "dropdown"
+    assert descriptor.options == ["auto", "manual"]
+
+
+def test_collect_resolves_plugin_name_i18n_ref(tmp_path, monkeypatch: pytest.MonkeyPatch) -> None:
+    """``$i18n`` refs in plugin meta ``name`` must be resolved before the
+    plugin_name is used as descriptor category — otherwise the command palette
+    surfaces ``{'$i18n': '...'}`` reprs."""
+    import threading
+    from unittest.mock import patch
+
+    # Plugin i18n bundle.
+    plugin_dir = tmp_path / "i18n_demo"
+    plugin_dir.mkdir()
+    translations = plugin_dir / "i18n"
+    translations.mkdir()
+    (translations / "en.json").write_text(
+        '{"plugin.name": "Resolved Demo"}', encoding="utf-8"
+    )
+    config_path = plugin_dir / "config.toml"
+    config_path.write_text("", encoding="utf-8")
+
+    class _Settings(PluginSettings):
+        enabled: bool = SettingsField(default=False, hot=True)
+
+    class _FakeState:
+        def __init__(self) -> None:
+            self.plugin_hosts = {"demo": object()}
+            self._lock = threading.RLock()
+
+        def get_plugins_snapshot_cached(self, **_kw):
+            return {
+                "demo": {
+                    "name": {"$i18n": "plugin.name", "default": "Resolved Demo"},
+                    "config_path": str(config_path),
+                }
+            }
+
+        def acquire_plugin_hosts_read_lock(self):
+            return self._lock
+
+    fake_state = _FakeState()
+    monkeypatch.setattr(module, "resolve_settings_class", lambda pid, host=None: _Settings)
+
+    with patch("plugin.core.state.state", fake_state):
+        actions = module._collect_settings_actions_sync()
+
+    assert len(actions) == 1
+    assert actions[0].category == "Resolved Demo"
+    assert "$i18n" not in actions[0].category
diff --git a/plugin/tests/unit/server/test_action_system_provider.py b/plugin/tests/unit/server/test_action_system_provider.py
new file mode 100644
index 0000000000..5e63342e91
--- /dev/null
+++ b/plugin/tests/unit/server/test_action_system_provider.py
@@ -0,0 +1,317 @@
+"""Unit tests for plugin.server.application.actions.system_provider."""
+from __future__ import annotations
+
+import threading
+import json
+from pathlib import Path
+from typing import Any
+from unittest.mock import patch
+
+import pytest
+
+from plugin.server.application.actions import system_provider as module
+from plugin.server.domain.action_models import ActionDescriptor
+
+
+# ── Helpers ──────────────────────────────────────────────────────────
+
+def _make_plugin_meta(
+    pid: str = "demo",
+    name: str = "Demo Plugin",
+    **extra: Any,
+) -> dict[str, Any]:
+    return {"id": pid, "name": name, **extra}
+
+
+def _make_handler(
+    entry_id: str,
+    name: object = "",
+    kind: str = "action",
+    enabled: bool = True,
+    description: object = "",
+    input_schema: dict[str, object] | None = None,
+    quick_action: bool = False,
+    quick_action_priority: object = 0,
+) -> Any:
+    """Create a fake event handler with meta attributes."""
+    from types import SimpleNamespace
+
+    meta = SimpleNamespace(
+        id=entry_id,
+        name=name or entry_id,
+        kind=kind,
+        description=description,
+        metadata={"enabled": enabled},
+        input_schema=input_schema,
+        quick_action=quick_action,
+        quick_action_config=SimpleNamespace(
+            icon=None,
+            priority=quick_action_priority,
+        ),
+    )
+    return SimpleNamespace(meta=meta)
+
+
+class _FakeState:
+    """Minimal stand-in for plugin.core.state.state."""
+
+    def __init__(
+        self,
+        plugins: dict[str, Any] | None = None,
+        hosts: dict[str, Any] | None = None,
+        handlers: dict[str, Any] | None = None,
+    ) -> None:
+        self.plugins = plugins or {}
+        self.plugin_hosts = hosts or {}
+        self.event_handlers = handlers or {}
+        self._lock = threading.RLock()
+
+    def get_plugins_snapshot_cached(self, **_kw: Any) -> dict[str, Any]:
+        return dict(self.plugins)
+
+    def acquire_plugin_hosts_read_lock(self) -> Any:
+        return self._lock
+
+    def get_event_handlers_snapshot_cached(self, **_kw: Any) -> dict[str, Any]:
+        return dict(self.event_handlers)
+
+
+# ── Tests ────────────────────────────────────────────────────────────
+
+@pytest.mark.plugin_unit
+class TestCollectSystemActions:
+    """Tests for _collect_system_actions_sync."""
+
+    def _collect(self, fake_state: _FakeState, plugin_id: str | None = None) -> list[ActionDescriptor]:
+        with patch("plugin.core.state.state", fake_state):
+            return module._collect_system_actions_sync(plugin_id)
+
+    def test_empty_plugins(self) -> None:
+        actions = self._collect(_FakeState())
+        assert actions == []
+
+    def test_stopped_plugin_produces_no_actions(self) -> None:
+        """Stopped plugins should not produce any user-facing actions."""
+        state = _FakeState(plugins={"demo": _make_plugin_meta()})
+        actions = self._collect(state)
+        assert len(actions) == 0
+
+    def test_no_lifecycle_actions_emitted(self) -> None:
+        """Lifecycle management is not part of the command palette."""
+        state = _FakeState(
+            plugins={"demo": _make_plugin_meta()},
+            hosts={"demo": object()},
+        )
+        actions = self._collect(state)
+        lifecycle = [a for a in actions if a.control == "plugin_lifecycle"]
+        assert len(lifecycle) == 0
+
+    def test_no_start_stop_reload_buttons_emitted(self) -> None:
+        state = _FakeState(
+            plugins={"demo": _make_plugin_meta()},
+            hosts={"demo": object()},
+        )
+        actions = self._collect(state)
+        ids = {a.action_id for a in actions}
+        assert "system:demo:start" not in ids
+        assert "system:demo:stop" not in ids
+        assert "system:demo:reload" not in ids
+        assert "system:demo:toggle" not in ids
+
+    def test_plugin_id_filter(self) -> None:
+        state = _FakeState(
+            plugins={
+                "a": _make_plugin_meta("a", "A"),
+                "b": _make_plugin_meta("b", "B"),
+            },
+            hosts={"a": object(), "b": object()},
+            handlers={
+                "a.do_a": _make_handler("do_a"),
+                "b.do_b": _make_handler("do_b"),
+            },
+        )
+        actions = self._collect(state, plugin_id="a")
+        assert all(a.plugin_id == "a" for a in actions)
+
+    def test_service_entry_skipped(self) -> None:
+        """Service entries are background processes, not user-facing commands."""
+        state = _FakeState(
+            plugins={"demo": _make_plugin_meta()},
+            hosts={"demo": object()},
+            handlers={"demo.my_service": _make_handler("my_service", kind="service")},
+        )
+        actions = self._collect(state)
+        entry_actions = [a for a in actions if "entry:" in a.action_id]
+        assert len(entry_actions) == 0
+
+    def test_action_entry_gets_button(self) -> None:
+        state = _FakeState(
+            plugins={"demo": _make_plugin_meta()},
+            hosts={"demo": object()},
+            handlers={"demo.do_thing": _make_handler("do_thing", kind="action")},
+        )
+        actions = self._collect(state)
+        entry_actions = [a for a in actions if "entry:" in a.action_id]
+        assert len(entry_actions) == 1
+        assert entry_actions[0].control == "button"
+
+    def test_invalid_quick_action_priority_falls_back_to_zero(self) -> None:
+        state = _FakeState(
+            plugins={"demo": _make_plugin_meta()},
+            hosts={"demo": object()},
+            handlers={
+                "demo.do_thing": _make_handler(
+                    "do_thing",
+                    kind="action",
+                    quick_action=True,
+                    quick_action_priority="not-a-number",
+                ),
+            },
+        )
+        actions = self._collect(state)
+        entry = [a for a in actions if "entry:" in a.action_id][0]
+        assert entry.quick_action is True
+        assert entry.priority == 0
+
+    def test_entry_has_keywords_and_icon(self) -> None:
+        state = _FakeState(
+            plugins={"demo": _make_plugin_meta()},
+            hosts={"demo": object()},
+            handlers={"demo.do_thing": _make_handler("do_thing", kind="action")},
+        )
+        actions = self._collect(state)
+        entry = [a for a in actions if "entry:" in a.action_id][0]
+        assert entry.icon == "⚡"
+        assert "demo" in entry.keywords
+        assert "Demo Plugin" in entry.keywords
+
+    def test_entries_only_for_running_plugins(self) -> None:
+        state = _FakeState(
+            plugins={"demo": _make_plugin_meta()},
+            hosts={},  # not running
+            handlers={"demo.do_thing": _make_handler("do_thing")},
+        )
+        actions = self._collect(state)
+        entry_actions = [a for a in actions if "entry:" in a.action_id]
+        assert len(entry_actions) == 0
+
+    def test_non_mapping_meta_skipped(self) -> None:
+        state = _FakeState(plugins={"bad": "not-a-dict"})
+        actions = self._collect(state)
+        assert actions == []
+
+    def test_entry_category_is_plugin_name(self) -> None:
+        """Entry actions should use the plugin name as category, not '系统'."""
+        state = _FakeState(
+            plugins={"demo": _make_plugin_meta()},
+            hosts={"demo": object()},
+            handlers={"demo.do_thing": _make_handler("do_thing", kind="action")},
+        )
+        actions = self._collect(state)
+        entry = [a for a in actions if "entry:" in a.action_id][0]
+        assert entry.category == "Demo Plugin"
+
+    def test_entry_i18n_refs_are_resolved_for_command_palette(self, tmp_path: Path) -> None:
+        plugin_dir = tmp_path / "demo"
+        locales_dir = plugin_dir / "locales"
+        locales_dir.mkdir(parents=True)
+        (plugin_dir / "plugin.toml").write_text("[plugin]\nid='demo'\n", encoding="utf-8")
+        (locales_dir / "en.json").write_text(
+            json.dumps({
+                "plugin.name": "Localized Demo",
+                "entries.run.name": "Localized Run",
+                "entries.run.description": "Localized description",
+                "fields.value": "Localized value field",
+            }),
+            encoding="utf-8",
+        )
+        state = _FakeState(
+            plugins={"demo": _make_plugin_meta(
+                name={"$i18n": "plugin.name", "default": "Demo"},
+                config_path=str(plugin_dir / "plugin.toml"),
+                i18n={"default_locale": "en", "locales_dir": "locales"},
+            )},
+            hosts={"demo": object()},
+            handlers={"demo.run": _make_handler(
+                "run",
+                name={"$i18n": "entries.run.name", "default": "Run"},
+                description={"$i18n": "entries.run.description", "default": "Run description"},
+                input_schema={
+                    "type": "object",
+                    "properties": {
+                        "value": {
+                            "type": "string",
+                            "description": {"$i18n": "fields.value", "default": "Value"},
+                        },
+                    },
+                },
+            )},
+        )
+
+        actions = self._collect(state)
+        entry = [a for a in actions if "entry:" in a.action_id][0]
+        assert entry.category == "Localized Demo"
+        assert entry.label == "Localized Run"
+        assert entry.description == "Localized description"
+        assert entry.input_schema is not None
+        assert entry.input_schema["properties"]["value"]["description"] == "Localized value field"
+
+
+@pytest.mark.plugin_unit
+class TestGetEntriesForPlugin:
+    def test_dot_key_format(self) -> None:
+        handlers = {"demo.entry_a": _make_handler("entry_a", kind="action")}
+        entries = module._get_entries_for_plugin("demo", handlers)
+        assert len(entries) == 1
+        assert entries[0]["id"] == "entry_a"
+        assert entries[0]["kind"] == "action"
+
+    def test_colon_key_format(self) -> None:
+        handlers = {"demo:plugin_entry:entry_b": _make_handler("entry_b", kind="service")}
+        entries = module._get_entries_for_plugin("demo", handlers)
+        assert len(entries) == 1
+        assert entries[0]["kind"] == "service"
+
+    def test_deduplication(self) -> None:
+        h = _make_handler("dup", kind="action")
+        handlers = {"demo.dup": h, "demo:plugin_entry:dup": h}
+        entries = module._get_entries_for_plugin("demo", handlers)
+        assert len(entries) == 1
+
+    def test_ignores_other_plugins(self) -> None:
+        handlers = {"other.entry_x": _make_handler("entry_x")}
+        entries = module._get_entries_for_plugin("demo", handlers)
+        assert len(entries) == 0
+
+
+@pytest.mark.plugin_unit
+class TestHasStaticUi:
+    def test_no_config(self) -> None:
+        assert module._has_static_ui({}) is False
+
+    def test_disabled(self) -> None:
+        assert module._has_static_ui({"static_ui_config": {"enabled": False}}) is False
+
+    def test_enabled_but_no_directory(self) -> None:
+        assert module._has_static_ui({"static_ui_config": {"enabled": True}}) is False
+
+    def test_enabled_with_missing_dir(self, tmp_path: Path) -> None:
+        meta = {"static_ui_config": {"enabled": True, "directory": str(tmp_path / "nope")}}
+        assert module._has_static_ui(meta) is False
+
+    def test_enabled_with_valid_dir(self, tmp_path: Path) -> None:
+        (tmp_path / "index.html").write_text("<html></html>")
+        meta = {"static_ui_config": {"enabled": True, "directory": str(tmp_path)}}
+        assert module._has_static_ui(meta) is True
+
+    def test_inferred_from_static_dir(self, tmp_path: Path) -> None:
+        """Plugins with only <plugin dir>/static/index.html and no explicit
+        static_ui_config should still be recognized, matching what the
+        /plugin/{id}/ui/ route actually serves."""
+        config_path = tmp_path / "config.toml"
+        config_path.write_text("", encoding="utf-8")
+        static_dir = tmp_path / "static"
+        static_dir.mkdir()
+        (static_dir / "index.html").write_text("<html></html>", encoding="utf-8")
+        meta = {"id": "demo", "config_path": str(config_path)}
+        assert module._has_static_ui(meta) is True
diff --git a/static/app-react-chat-window.js b/static/app-react-chat-window.js
index 0ab3312977..0172e8a335 100644
--- a/static/app-react-chat-window.js
+++ b/static/app-react-chat-window.js
@@ -26,6 +26,9 @@
     var savedShellSize = null;
     var savedShellPosition = null; // {left, top} before minimize – used to fly back on expand
     var _sortKeySeq = 0; // monotonically increasing sortKey counter
+    var _cachedActions = [];
+    var _cachedPreferences = { pinned: [], hidden: [], recent: [] };
+    var _actionsLoading = false;
 
     var state = {
         viewProps: null,
@@ -536,6 +539,104 @@
         });
     }
 
+    var _fetchActionsSeq = 0;
+    var _saveActionPrefsSeq = 0;
+    var _pendingPreferencesUpdate = false;
+
+    function normalizeActionPreferences(preferences) {
+        var prefs = preferences && typeof preferences === 'object' ? preferences : {};
+        return {
+            pinned: Array.isArray(prefs.pinned) ? prefs.pinned.map(String) : [],
+            hidden: Array.isArray(prefs.hidden) ? prefs.hidden.map(String) : [],
+            recent: Array.isArray(prefs.recent) ? prefs.recent.map(String) : []
+        };
+    }
+
+    function fetchChatActions() {
+        var seq = ++_fetchActionsSeq;
+        _actionsLoading = true;
+        renderWindow();
+        return fetch('/chat/actions', {
+            method: 'GET',
+            headers: { 'Accept': 'application/json' },
+            credentials: 'same-origin'
+        })
+            .then(function (res) {
+                if (!res.ok) throw new Error('fetchChatActions: HTTP ' + res.status);
+                return res.json();
+            })
+            .then(function (data) {
+                if (seq !== _fetchActionsSeq) return _cachedActions;
+                _cachedActions = data && Array.isArray(data.actions) ? data.actions : [];
+                if (!_pendingPreferencesUpdate) {
+                    _cachedPreferences = normalizeActionPreferences(data && data.preferences);
+                }
+                _actionsLoading = false;
+                renderWindow();
+                return _cachedActions;
+            })
+            .catch(function (err) {
+                if (seq !== _fetchActionsSeq) return _cachedActions;
+                console.warn('[ReactChatWindow] fetchChatActions failed:', err);
+                _actionsLoading = false;
+                renderWindow();
+                return _cachedActions;
+            });
+    }
+
+    function executeChatAction(actionId, value) {
+        return fetch('/chat/actions/' + encodeURIComponent(actionId) + '/execute', {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json', 'Accept': 'application/json' },
+            credentials: 'same-origin',
+            body: JSON.stringify({ value: value !== undefined ? value : null })
+        })
+            .then(function (res) {
+                if (!res.ok) {
+                    return res.json().catch(function () { return null; }).then(function (body) {
+                        var detail = body && body.detail ? body.detail : 'HTTP ' + res.status;
+                        if (typeof detail !== 'string') detail = JSON.stringify(detail);
+                        throw new Error(detail);
+                    });
+                }
+                return res.json();
+            })
+            .then(function (data) {
+                if (data && data.success) {
+                    fetchChatActions();
+                    return data.action || null;
+                }
+                throw new Error(data && data.message ? data.message : 'Action failed');
+            })
+            .catch(function (err) {
+                console.error('[ReactChatWindow] executeChatAction failed:', err);
+                throw err;
+            });
+    }
+
+    function saveChatActionPreferences(preferences) {
+        var seq = ++_saveActionPrefsSeq;
+        var previousPreferences = _cachedPreferences;
+        _pendingPreferencesUpdate = true;
+        _cachedPreferences = normalizeActionPreferences(preferences);
+        renderWindow();
+        fetch('/chat/actions/preferences', {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json', 'Accept': 'application/json' },
+            credentials: 'same-origin',
+            body: JSON.stringify(_cachedPreferences)
+        }).then(function (res) {
+            if (!res.ok) throw new Error('HTTP ' + res.status);
+            if (seq === _saveActionPrefsSeq) _pendingPreferencesUpdate = false;
+        }).catch(function (err) {
+            if (seq !== _saveActionPrefsSeq) return;
+            console.warn('[ReactChatWindow] saveChatActionPreferences failed, rolling back:', err);
+            _pendingPreferencesUpdate = false;
+            _cachedPreferences = previousPreferences;
+            renderWindow();
+        });
+    }
+
     function buildRenderProps() {
         if (state.rollbackDraft) {
             console.log('[ROLLBACK] buildRenderProps: rollbackDraftPresent=true length=' + state.rollbackDraft.length + ' key=' + state._rollbackKey);
@@ -563,7 +664,19 @@
             onTranslateToggle: handleTranslateToggle,
             onGalgameModeToggle: handleGalgameModeToggle,
             onGalgameOptionSelect: handleGalgameOptionSelect,
-            onChoiceSelect: handleChoiceSelect
+            onChoiceSelect: handleChoiceSelect,
+            quickActions: _cachedActions,
+            quickActionsPreferences: _cachedPreferences,
+            quickActionsLoading: _actionsLoading,
+            onQuickActionsRequest: function () {
+                fetchChatActions();
+            },
+            onQuickActionExecute: function (actionId, value) {
+                return executeChatAction(actionId, value);
+            },
+            onQuickActionsPreferencesChange: function (prefs) {
+                saveChatActionPreferences(prefs);
+            }
         });
     }
 
@@ -2164,6 +2277,7 @@
                     showToast(getI18nText('chat.reactWindowMountFailed', '聊天框挂载失败'), 3000);
                     return;
                 }
+                fetchChatActions();
                 // closeWindow 已经会重置 minimized，所以到这里通常 minimized=false
                 // 但如果外部直接调用 openWindow（未经 closeWindow），仍需处理
                 var wasMinimized = minimized;
@@ -2592,6 +2706,16 @@
             setComposerHidden(event.detail && event.detail.hidden);
         });
 
+        window.addEventListener(EVENT_PREFIX + 'plugin-state-change', function () {
+            var overlay = getOverlay();
+            if (overlay && !overlay.hidden) fetchChatActions();
+        });
+
+        window.addEventListener(EVENT_PREFIX + 'list-actions-update', function () {
+            var overlay = getOverlay();
+            if (overlay && !overlay.hidden) fetchChatActions();
+        });
+
         window.addEventListener(EVENT_PREFIX + 'set-galgame-mode', function (event) {
             var detail = event.detail || {};
             setGalgameModeEnabled(!!detail.enabled, { persist: detail.persist !== false });
diff --git a/tests/unit/test_actions_proxy_router.py b/tests/unit/test_actions_proxy_router.py
new file mode 100644
index 0000000000..31cafb59a8
--- /dev/null
+++ b/tests/unit/test_actions_proxy_router.py
@@ -0,0 +1,187 @@
+from __future__ import annotations
+
+from collections.abc import AsyncIterator
+from typing import Any
+
+import httpx
+import pytest
+from fastapi import FastAPI
+from httpx import ASGITransport, AsyncClient
+
+from main_routers import actions_proxy_router as route_module
+
+
+@pytest.fixture(autouse=True)
+def _reset_actions_proxy_cache() -> None:
+    route_module._USER_PLUGIN_BASE_CACHE = ("", 0.0)
+
+
+@pytest.fixture
+async def client(monkeypatch: pytest.MonkeyPatch) -> AsyncIterator[AsyncClient]:
+    monkeypatch.setattr(route_module, "_resolve_user_plugin_base", _fake_resolve_base)
+    app = FastAPI()
+    app.include_router(route_module.router)
+    transport = ASGITransport(app=app)
+    async with AsyncClient(transport=transport, base_url="http://testserver") as c:
+        yield c
+
+
+async def _fake_resolve_base() -> str:
+    return "http://plugin.test"
+
+
+class _FakePluginClient:
+    requests: list[tuple[str, str, dict[str, Any]]] = []
+    fail: bool = False
+
+    def __init__(self, *args: Any, **kwargs: Any) -> None:
+        self.kwargs = kwargs
+
+    async def __aenter__(self) -> "_FakePluginClient":
+        return self
+
+    async def __aexit__(self, *exc_info: object) -> None:
+        return None
+
+    async def get(self, url: str, **kwargs: Any) -> httpx.Response:
+        if self.fail:
+            raise httpx.ConnectError("plugin down")
+        self.requests.append(("GET", url, kwargs))
+        if url.endswith("/chat/actions/preferences"):
+            return httpx.Response(200, json={"pinned": ["demo"], "hidden": [], "recent": []})
+        return httpx.Response(
+            200,
+            json={
+                "actions": [{"action_id": "demo:greet", "label": "Greet"}],
+                "preferences": {"pinned": [], "hidden": [], "recent": []},
+            },
+        )
+
+    async def post(self, url: str, **kwargs: Any) -> httpx.Response:
+        if self.fail:
+            raise httpx.ConnectError("plugin down")
+        self.requests.append(("POST", url, kwargs))
+        if url.endswith("/execute"):
+            return httpx.Response(200, json={"success": True, "message": "ok"})
+        return httpx.Response(200, json=kwargs.get("json") or {})
+
+
+@pytest.fixture
+def fake_plugin_client(monkeypatch: pytest.MonkeyPatch) -> type[_FakePluginClient]:
+    _FakePluginClient.requests = []
+    _FakePluginClient.fail = False
+    monkeypatch.setattr(route_module.httpx, "AsyncClient", _FakePluginClient)
+    return _FakePluginClient
+
+
+@pytest.mark.unit
+@pytest.mark.asyncio
+async def test_proxy_chat_actions_forwards_plugin_filter(
+    client: AsyncClient,
+    fake_plugin_client: type[_FakePluginClient],
+) -> None:
+    response = await client.get("/chat/actions", params={"plugin_id": "demo"})
+
+    assert response.status_code == 200
+    assert response.json()["actions"][0]["action_id"] == "demo:greet"
+    assert fake_plugin_client.requests == [
+        ("GET", "http://plugin.test/chat/actions", {"params": {"plugin_id": "demo"}})
+    ]
+
+
+@pytest.mark.unit
+@pytest.mark.asyncio
+async def test_preferences_route_is_not_captured_as_action_id(
+    client: AsyncClient,
+    fake_plugin_client: type[_FakePluginClient],
+) -> None:
+    response = await client.get("/chat/actions/preferences")
+
+    assert response.status_code == 200
+    assert response.json()["pinned"] == ["demo"]
+    assert fake_plugin_client.requests == [
+        ("GET", "http://plugin.test/chat/actions/preferences", {})
+    ]
+
+
+@pytest.mark.unit
+@pytest.mark.asyncio
+async def test_execute_forwards_path_action_id(
+    client: AsyncClient,
+    fake_plugin_client: type[_FakePluginClient],
+) -> None:
+    response = await client.post(
+        "/chat/actions/system:demo:toggle/execute",
+        json={"value": True},
+    )
+
+    assert response.status_code == 200
+    assert response.json()["success"] is True
+    assert fake_plugin_client.requests == [
+        (
+            "POST",
+            "http://plugin.test/chat/actions/system:demo:toggle/execute",
+            {"json": {"value": True}},
+        )
+    ]
+
+
+@pytest.mark.unit
+@pytest.mark.asyncio
+async def test_execute_url_encodes_reserved_chars_in_action_id(
+    client: AsyncClient,
+    fake_plugin_client: type[_FakePluginClient],
+) -> None:
+    """Reserved URL chars in plugin-defined action IDs (`?`, `#`, `%`, `/`)
+    must be percent-encoded before the proxy forwards them, otherwise the
+    plugin server receives a different path/query and returns 404.
+
+    The `:` separator stays unencoded for readability — it's a sub-delimiter
+    that path segments allow."""
+    # Send the request with the reserved chars already percent-encoded; the
+    # FastAPI `{action_id:path}` converter decodes them and hands the raw
+    # `demo:weird?id#frag%bad` to the handler, which is what would happen if
+    # a real frontend built the URL via fetch/URL APIs.
+    response = await client.post(
+        "/chat/actions/demo:weird%3Fid%23frag%25bad/execute",
+        json={},
+    )
+
+    assert response.status_code == 200
+    assert len(fake_plugin_client.requests) == 1
+    _, forwarded_url, _ = fake_plugin_client.requests[0]
+    # `:` preserved; `?`, `#`, `%` re-encoded for the outgoing path.
+    assert forwarded_url == (
+        "http://plugin.test/chat/actions/demo:weird%3Fid%23frag%25bad/execute"
+    )
+
+
+@pytest.mark.unit
+@pytest.mark.asyncio
+async def test_list_degrades_to_empty_when_plugin_server_is_down(
+    client: AsyncClient,
+    fake_plugin_client: type[_FakePluginClient],
+) -> None:
+    fake_plugin_client.fail = True
+
+    response = await client.get("/chat/actions")
+
+    assert response.status_code == 200
+    assert response.json() == {
+        "actions": [],
+        "preferences": {"pinned": [], "hidden": [], "recent": []},
+    }
+
+
+@pytest.mark.unit
+@pytest.mark.asyncio
+async def test_execute_returns_bad_gateway_when_plugin_server_is_down(
+    client: AsyncClient,
+    fake_plugin_client: type[_FakePluginClient],
+) -> None:
+    fake_plugin_client.fail = True
+
+    response = await client.post("/chat/actions/demo:greet/execute", json={})
+
+    assert response.status_code == 502
+    assert response.json()["success"] is False