feat(admin): 面板补全 — 插件安装表单+已装列表 / LLM组maxTokens展示编辑 / POST admin/llm 部分编辑合并

- 前端: api.ts(adminPluginInstall带config/uninstall/listInstalledPlugins) + types + plugins/InstalledPlugins.tsx(已装列表+安装表单, Miuix) + llm/LlmProviderForm.tsx(maxTokens输入) ; Plugins.tsx去假安装按钮
- 后端 admin_write_llm_channels.go: llmProviderRequest字段改指针, mergeLlmProvider部分合并(省略保留原值), runtimeconfig/models.go Find
- 新增测试 admin_write_test TestAdminAddLlmProviderPartialEditPreservesFields
- 前端 build + 后端 build/vet/test 全绿; Docs/api-client v0.29
- (面板无法实机登录, 用 react-dom/server 冒烟渲染 LlmModule/PluginsModule)

frontend/web/src/lib/api.ts

@@ -20,6 +20,7 @@ import type {
   ChannelTestResult,
   ChatMessage,
   ChatSyncResult,
+  InstalledPlugin,
   LlmProviderRequest,
   LlmTestRequest,
   LlmTestResult,
@@ -32,6 +33,8 @@ import type {
   Mode,
   PersonaRecord,
   PersonaUpsertRequest,
+  PluginInstallRequest,
+  PluginInstallResult,
   KookFriendList,
   KookMessageTestResult,
   KookViewResponse,
@@ -391,6 +394,11 @@ export function adminListMemories(): Promise<MemoryRecord[]> {
 export function adminListPlugins(): Promise<AdminPluginRecord[]> {
   return request<AdminPluginRecord[]>("/admin/plugins");
 }
+/** GET /api/v1/admin/plugins/installed — runtime-installed plugins (v0.28), with
+ *  the backend masking apiKey/sensitive env and reporting live/toolCount. */
+export function adminListInstalledPlugins(): Promise<InstalledPlugin[]> {
+  return request<InstalledPlugin[]>("/admin/plugins/installed");
+}
 /** POST /api/v1/admin/plugins/policy — owner-only, audited. */
 export function adminSetPluginPolicy(
   name: string,
@@ -677,15 +685,18 @@ export function adminWeixinLoginStatus(
     `/admin/channels/${encodeURIComponent(platform)}/login-status${q}`,
   );
 }
-/** POST /api/v1/admin/plugins/install — honest 501 (needs a plugin source). */
-export function adminPluginInstall(req: { name: string; kind: string; description: string }): Promise<AdminPluginRecord> {
-  return request<AdminPluginRecord>("/admin/plugins/install", { method: "POST", body: JSON.stringify(req) });
+/** POST /api/v1/admin/plugins/install — installs (or refreshes) an MCP server
+ *  plugin (v0.28): connects, discovers its tools and hot-registers them. The
+ *  backend answers 502 and persists nothing when connect/discover fails. */
+export function adminPluginInstall(req: PluginInstallRequest): Promise<PluginInstallResult> {
+  return request<PluginInstallResult>("/admin/plugins/install", { method: "POST", body: JSON.stringify(req) });
 }
-/** POST /api/v1/admin/plugins/uninstall — removes a capability from the registry. */
-export function adminPluginUninstall(req: { name: string }): Promise<{ name: string; uninstalled: boolean }> {
-  return request<{ name: string; uninstalled: boolean }>("/admin/plugins/uninstall", {
+/** POST /api/v1/admin/plugins/uninstall — removes an installed MCP server (tools
+ *  unregistered + config deleted) or a plain capability from the registry. */
+export function adminPluginUninstall(name: string): Promise<{ name: string; uninstalled: boolean; kind?: string }> {
+  return request<{ name: string; uninstalled: boolean; kind?: string }>("/admin/plugins/uninstall", {
     method: "POST",
-    body: JSON.stringify(req),
+    body: JSON.stringify({ name }),
   });
 }
 /** POST /api/v1/admin/memories/search — real retrieval over the memory store. */