feat: unify Design Studio and plugin library

[Devin-AXIS]

What changed

• Add a reusable Design Studio host boundary and publish the DeepSeek Harness integration as deepseek-idesign.
• Keep the existing iPolloWork Design and Video workflows on the same shared Design Studio implementation.
• Replace the legacy Extensions/App marketplace presentation with one searchable plugin capability-package library.
• Put Plugins/Skills in the settings header, default to Personal before Marketplace, compact installed icons, and keep responsive one/two-column package lists.
• Make Personal and Marketplace use one canonical plugin detail component; installed marketplace entries now open the installed detail route.
• Show Installed, a top-level enable switch, and a visible authorization-required state on installed plugin details.

Why

Design Studio, DeepSeek Harness collaboration, local plugin packages, and the Cloud marketplace had evolved on separate branches. This PR consolidates them on current main so there is one maintained plugin-package surface, one canonical detail experience, and one reusable Design Studio owner instead of parallel implementations.

Impact

• Existing Design and Video entry points remain unchanged for users.
• DeepSeek Harness can load iDesign as an independently versioned plugin.
• Personal and Cloud plugins use the same V2 capability-package model and detail presentation.
• The old custom-app, raw MCP, standalone Skill marketplace, and duplicate marketplace detail presentation are removed from the primary plugin page.

Validation

• pnpm --filter @ipollowork/app typecheck — passed.
• pnpm --dir apps/app exec bun test --isolate tests/cloud-marketplaces-view.test.ts — 5 passed, 0 failed.
• pnpm --filter @ipollowork/app build — passed.
• pnpm --dir plugins/deepseek-harness/design-studio run check — passed.
• pnpm --dir plugins/deepseek-harness/design-studio run build — passed with the deepseek-idesign package name.
• pnpm fraimz --flow plugin-library --cdp-url http://127.0.0.1:9823 — passed all 5 steps against the real Electron client, including Marketplace → installed detail and authorization state.
• git diff --check — passed.
• Maintainability audit — 0 errors, 0 warnings.

Evidence

Fraimz report was generated locally at evals/results/2026-08-15T11-07-58-401Z/fraimz.html. The flow is reproducible with the command above; no generated report artifact is committed.

Known baseline

The repository-wide app test command still reports the same two existing source-string failures in HyperFrames titlebar and template-authoring checks; neither file is changed by this detail-page update.

[Devin-AXIS]

fraimz — ✅ PASSED

1 passed · 0 failed · 0 skipped — run 2026-08-15T10-58-00-579Z

Full frame proof with validated screenshots: evals/results/2026-08-15T10-58-00-579Z/fraimz.html (re-run: pnpm fraimz --flow plugin-library)

✅ plugin-library — Unified plugin library navigation and catalog

User-facing flow demo

1. Plugins open as one searchable capability-package library
   • ✅ Visible text includes "插件"
   • ✅ Visible text includes "技能"
   • ✅ Visible text includes "已安装"
   • ✅ Visible text includes "市场"
   • ✅ Visible text includes "个人"
   • ✅ Visible text does not include "添加自定义应用"
   • ✅ Visible text does not include "你的应用"
   • 📸 plugin-library-01-plugin-library-marketplace.png — 12 validations passed
2. Personal packages stay in the same library without exposing raw MCP rows
   • ✅ Visible text does not include "可用应用"
   • ✅ Visible text does not include "你的应用"
   • 📸 plugin-library-02-plugin-library-personal.png — 8 validations passed
3. Skills remain a first-class index inside the same extension surface
   • ✅ Visible text includes "导入本地skill"
   • ✅ Visible text does not include "添加自定义应用"
   • 📸 plugin-library-03-plugin-library-skills.png — 7 validations passed

(screenshot upload failed: BLOB_READ_WRITE_TOKEN is not set and could not be fetched from Infisical (infisical secrets get BLOB_READ_WRITE_TOKEN --plain --silent) — run infisical login once, or export it: export BLOB_READ_WRITE_TOKEN="$(infisical secrets get BLOB_READ_WRITE_TOKEN --plain --silent)" — images available in the run directory)