chore(deps): update cargo dependencies

refactor(backend): specta ipc bindings (#8195 )
* refactor(ipc): generate bindings with Specta * fix(profile): project IPC inputs to consumed fields * fix(events): remove unused refresh payloads * fix(webdav): return only consumed backup metadata * fix(network): trim unused interface metadata * fix(sysinfo): return only displayed system fields * chore(knip): check generated runtime exports * fix(proxy): confirm runtime chain updates before UI changes * fix(clipboard): propagate proxy environment copy failures * refactor(dns): remove ignored runtime patch * refactor(core): trim unused upgrade response fields * refactor(ipc): avoid redundant response copies * refactor(proxy): clarify automatic proxy query naming * chore(tests): remove added IPC regression tests * refactor(ipc): enforce typed command boundaries * chore(contract): check generated bindings before push * refactor(ipc): remove unused proxy liveness payloads
2026-10-15 05:40:47 +08:00 · 2026-10-12 06:28:55 +00:00 · 2026-10-12 06:16:05 +00:00 · 2026-10-11 16:06:46 +00:00 · 2026-10-11 13:23:40 +00:00 · 2026-10-11 12:01:50 +00:00
103 changed files with 3067 additions and 1662 deletions
@@ -5,7 +5,7 @@
  "features": {
    "ghcr.io/devcontainers/features/node:2": {
      "version": "24.21.0",
-      "pnpmVersion": "12.10.0"
+      "pnpmVersion": "12.11.2"
    },
    "ghcr.io/devcontainers/features/rust:1": {
      "version": "1.99.0",
@@ -6,6 +6,7 @@ on:

 permissions:
  contents: read
+  pull-requests: read

 env:
  HUSKY: 0
@@ -99,14 +100,7 @@ jobs:
        id: check_inputs
        uses: dorny/paths-filter@v4
        with:
-          filters: |
-            contract:
-              - 'src/services/contract.ts'
-              - 'scripts/gen-contract.mjs'
-              - 'src-tauri/src/core/notify/**'
-              - 'src-tauri/src/bin/**'
-              - 'src-tauri/src/lib.rs'
-              - '.github/workflows/frontend-check.yml'
+          filters: scripts/contract-inputs.json

      - name: Skip if contract inputs unchanged
        if: steps.check_inputs.outputs.contract != 'true'
@@ -159,8 +153,6 @@ jobs:
            touch "src-tauri/sidecar/${bin}-x86_64-unknown-linux-gnu"
          done

-      - name: Regenerate contract and require empty diff
+      - name: Check generated contract without changing the checkout
        if: steps.check_inputs.outputs.contract == 'true'
-        run: |
-          pnpm gen:contract
-          git diff --exit-code -- src/services/contract.ts
+        run: pnpm gen:contract --check
@@ -1,4 +1,4 @@
-# gh-aw-metadata: {"schema_version":"v4","frontmatter_hash":"ff92739239d50701d56d10eb77fff5083a556fe471496674aa066c4f73b6b6d2","body_hash":"e7b165b458a07108c2e6bfe6f4ed61f5659ce81512691dda091165d5966ee732","compiler_version":"v0.89.21","strict":true,"agent_id":"copilot","engine_versions":{"copilot":"1.0.87"}}
+# gh-aw-metadata: {"schema_version":"v4","frontmatter_hash":"8296ef86aad04ad225d29c7fe51dd18dfa50f258c46e8bd24e443193cc6f80fc","body_hash":"e7b165b458a07108c2e6bfe6f4ed61f5659ce81512691dda091165d5966ee732","compiler_version":"v0.89.21","strict":true,"agent_id":"copilot","engine_versions":{"copilot":"1.0.87"}}
 # gh-aw-manifest: {"version":1,"secrets":["COPILOT_GITHUB_TOKEN","GH_AW_DEFAULT_OTLP_ENDPOINT","GH_AW_DEFAULT_OTLP_HEADERS","GH_AW_GITHUB_MCP_SERVER_TOKEN","GH_AW_GITHUB_TOKEN","GITHUB_TOKEN"],"actions":[{"repo":"actions/checkout","sha":"3d3c42e5aac5ba805825da76410c181273ba90b1","version":"v7.0.1"},{"repo":"actions/download-artifact","sha":"3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c","version":"v8.0.1"},{"repo":"actions/github-script","sha":"3a2844b7e9c422d3c10d287c895573f7108da1b3","version":"v9.0.0"},{"repo":"actions/setup-node","sha":"820762786026740c76f36085b0efc47a31fe5020","version":"v7.0.0"},{"repo":"actions/upload-artifact","sha":"043fb46d1a93c77aae656e7c1c64a875d1fc6a0a","version":"v7.0.1"},{"repo":"github/gh-aw-actions/setup","sha":"924af5fdc64061cfbf66fb584c8b07e2ac230c60","version":"v0.89.21"}],"containers":[{"image":"ghcr.io/github/gh-aw-firewall/agent:0.28.23","digest":"sha256:2c78aaba1c108e130e2d6d01e4f2cca334ea04c53e6f258913ac34173fe7e3b2","pinned_image":"ghcr.io/github/gh-aw-firewall/agent:0.28.23@sha256:2c78aaba1c108e130e2d6d01e4f2cca334ea04c53e6f258913ac34173fe7e3b2"},{"image":"ghcr.io/github/gh-aw-firewall/api-proxy:0.28.23","digest":"sha256:c15c3d1208df10c5b588a3657be53742aa982ae0909d1eb1812525268794ca64","pinned_image":"ghcr.io/github/gh-aw-firewall/api-proxy:0.28.23@sha256:c15c3d1208df10c5b588a3657be53742aa982ae0909d1eb1812525268794ca64"},{"image":"ghcr.io/github/gh-aw-firewall/squid:0.28.23","digest":"sha256:02ffc56dd40158223064ef03a78c2d9717473c93723b4e403d455ea6f0b09ae0","pinned_image":"ghcr.io/github/gh-aw-firewall/squid:0.28.23@sha256:02ffc56dd40158223064ef03a78c2d9717473c93723b4e403d455ea6f0b09ae0"},{"image":"ghcr.io/github/gh-aw-mcpg:v0.4.25","digest":"sha256:9be0a86220e807a0ecc89e53d7453468f7a53fbc6b3d1efd2299025ffe01d086","pinned_image":"ghcr.io/github/gh-aw-mcpg:v0.4.25@sha256:9be0a86220e807a0ecc89e53d7453468f7a53fbc6b3d1efd2299025ffe01d086"},{"image":"ghcr.io/github/gh-aw-node","digest":"sha256:bac2192f6374d6262116399b34fc5e143d576f82719e90a18261cae7480f4d4e","pinned_image":"ghcr.io/github/gh-aw-node@sha256:bac2192f6374d6262116399b34fc5e143d576f82719e90a18261cae7480f4d4e"},{"image":"ghcr.io/github/github-mcp-server:v1.12.2","digest":"sha256:508a0857ec762b1ab1cece29193345b501fab1dd9d1228a7b617062954cecac6","pinned_image":"ghcr.io/github/github-mcp-server:v1.12.2@sha256:508a0857ec762b1ab1cece29193345b501fab1dd9d1228a7b617062954cecac6"}],"has_pull_request_target":true,"mcp_servers":[{"name":"github","tools":["get_pull_request","get_pull_request_comments","get_pull_request_diff","get_pull_request_files","get_pull_request_review_comments","get_pull_request_reviews","get_pull_request_status","issue_read","list_issue_types","list_issues","list_pull_requests","pull_request_read","search_issues","search_pull_requests"]},{"name":"safeoutputs","tools":["add_comment","add_labels","missing_data","missing_tool","noop","remove_labels"]}]}
 # This file was automatically generated by gh-aw (v0.89.21). DO NOT EDIT. To debug this workflow, load the skill at https://github.com/github/gh-aw/blob/main/debug.md
 #
@@ -541,7 +541,7 @@ jobs:
          GH_AW_SKILL_DIR: ".github/skills"
        run: bash "${RUNNER_TEMP}/gh-aw/actions/restore_inline_skills.sh"
      - name: Make Copilot quota exhaustion non-blocking
-        run: "node <<'NODE'\nconst fs = require('fs');\nconst harnessPath = `${process.env.RUNNER_TEMP}/gh-aw/actions/copilot_harness.cjs`;\nconst harness = fs.readFileSync(harnessPath, 'utf8');\nconst quotaBranch = [\n  '          if (isQuotaExceeded) {',\n  '            log(`attempt ${attempt + 1}: Copilot quota exceeded — not retrying`);',\n  '            return { action: \"stop\" };',\n  '          }',\n].join('\\n');\nconst nonBlockingQuotaBranch = [\n  '          if (isQuotaExceeded) {',\n  '            log(`attempt ${attempt + 1}: Copilot quota exceeded — not retrying`);',\n  '            if (/\\\\b429\\\\b|Too Many Requests/i.test(result.output)) {',\n  '              log(`attempt ${attempt + 1}: Copilot quota unavailable — exiting 0`);',\n  '              return { action: \"stop\", exitCode: 0 };',\n  '            }',\n  '            return { action: \"stop\" };',\n  '          }',\n].join('\\n');\n\nif (harness.split(quotaBranch).length !== 2) {\n  throw new Error('Unexpected Copilot quota branch; re-audit the gh-aw upgrade');\n}\nfs.writeFileSync(harnessPath, harness.replace(quotaBranch, nonBlockingQuotaBranch));\nNODE"
+        run: "node <<'NODE'\nconst fs = require('fs');\nconst harnessPath = `${process.env.RUNNER_TEMP}/gh-aw/actions/copilot_harness.cjs`;\nconst harness = fs.readFileSync(harnessPath, 'utf8');\nconst quotaBranch = [\n  '          if (isQuotaExceeded) {',\n  '            log(`attempt ${attempt + 1}: Copilot quota exceeded — not retrying`);',\n  '            return { action: \"stop\" };',\n  '          }',\n].join('\\n');\nconst nonBlockingQuotaBranch = [\n  '          let quotaErrorMsg = null;',\n  '          if (isQuotaExceeded) {',\n  '            log(`attempt ${attempt + 1}: Copilot quota exceeded — not retrying`);',\n  '            quotaErrorMsg = { action: \"stop\" };',\n  '          }',\n  '          if (/\\\\b429\\\\b|Too Many Requests/i.test(result.output)) {',\n  '            log(`attempt ${attempt + 1}: Copilot quota unavailable — exiting 0`);',\n  '            quotaErrorMsg = { action: \"stop\", exitCode: 0 };',\n  '          }',\n  '          if (quotaErrorMsg) {',\n  '            return quotaErrorMsg;',\n  '          }',\n].join('\\n');\n\nif (harness.split(quotaBranch).length !== 2) {\n  throw new Error('Unexpected Copilot quota branch; re-audit the gh-aw upgrade');\n}\nfs.writeFileSync(harnessPath, harness.replace(quotaBranch, nonBlockingQuotaBranch));\nNODE"

      - name: Download container images
        run: bash "${RUNNER_TEMP}/gh-aw/actions/download_docker_images.sh" ghcr.io/github/gh-aw-firewall/agent:0.28.23@sha256:2c78aaba1c108e130e2d6d01e4f2cca334ea04c53e6f258913ac34173fe7e3b2 ghcr.io/github/gh-aw-firewall/api-proxy:0.28.23@sha256:c15c3d1208df10c5b588a3657be53742aa982ae0909d1eb1812525268794ca64 ghcr.io/github/gh-aw-firewall/squid:0.28.23@sha256:02ffc56dd40158223064ef03a78c2d9717473c93723b4e403d455ea6f0b09ae0 ghcr.io/github/gh-aw-mcpg:v0.4.25@sha256:9be0a86220e807a0ecc89e53d7453468f7a53fbc6b3d1efd2299025ffe01d086 ghcr.io/github/gh-aw-node@sha256:bac2192f6374d6262116399b34fc5e143d576f82719e90a18261cae7480f4d4e ghcr.io/github/github-mcp-server:v1.12.2@sha256:508a0857ec762b1ab1cece29193345b501fab1dd9d1228a7b617062954cecac6
@@ -41,13 +41,17 @@ pre-agent-steps:
        '          }',
      ].join('\n');
      const nonBlockingQuotaBranch = [
+        '          let quotaErrorMsg = null;',
        '          if (isQuotaExceeded) {',
        '            log(`attempt ${attempt + 1}: Copilot quota exceeded — not retrying`);',
-        '            if (/\\b429\\b|Too Many Requests/i.test(result.output)) {',
-        '              log(`attempt ${attempt + 1}: Copilot quota unavailable — exiting 0`);',
-        '              return { action: "stop", exitCode: 0 };',
-        '            }',
-        '            return { action: "stop" };',
+        '            quotaErrorMsg = { action: "stop" };',
+        '          }',
+        '          if (/\\b429\\b|Too Many Requests/i.test(result.output)) {',
+        '            log(`attempt ${attempt + 1}: Copilot quota unavailable — exiting 0`);',
+        '            quotaErrorMsg = { action: "stop", exitCode: 0 };',
+        '          }',
+        '          if (quotaErrorMsg) {',
+        '            return quotaErrorMsg;',
        '          }',
      ].join('\n');

@@ -0,0 +1,90 @@
+name: SignPath Test
+
+on:
+  workflow_dispatch:
+
+permissions:
+  contents: read
+  actions: read
+
+env:
+  CARGO_INCREMENTAL: 0
+  HUSKY: 0
+
+jobs:
+  sign-windows:
+    runs-on: windows-latest
+    timeout-minutes: 90
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v7
+
+      - name: Install Rust
+        uses: dtolnay/rust-toolchain@master
+        with:
+          toolchain: '1.99.0'
+          targets: x86_64-pc-windows-msvc
+
+      - name: Install Node
+        uses: actions/setup-node@v7
+        with:
+          node-version: '24.21.0'
+
+      - name: Install pnpm
+        uses: pnpm/action-setup@v6
+        with:
+          run_install: false
+
+      - name: Install dependencies
+        run: pnpm install --frozen-lockfile
+
+      - name: Prepare build resources
+        run: pnpm run prebuild x86_64-pc-windows-msvc
+
+      - name: Build test installer
+        shell: pwsh
+        env:
+          NODE_OPTIONS: '--max-old-space-size=4096'
+        run: |
+          $configPath = Join-Path $env:RUNNER_TEMP 'signpath-test.json'
+          '{"bundle":{"createUpdaterArtifacts":false}}' |
+            Set-Content -LiteralPath $configPath -Encoding utf8
+          pnpm exec tauri build --target x86_64-pc-windows-msvc --bundles nsis --config $configPath
+
+      - name: Upload unsigned installer
+        id: unsigned
+        uses: actions/upload-artifact@v7
+        with:
+          name: windows-x64-unsigned
+          path: target/x86_64-pc-windows-msvc/release/bundle/nsis/*-setup.exe
+          if-no-files-found: error
+
+      - name: Sign with SignPath test certificate
+        uses: signpath/github-action-submit-signing-request@v3
+        with:
+          api-token: ${{ secrets.SIGNPATH_API_TOKEN }}
+          organization-id: '5b298f4d-010d-4bae-b665-70551a58839c'
+          project-slug: 'clash-verge-rev'
+          signing-policy-slug: 'test-signing'
+          artifact-configuration-slug: 'initial'
+          github-artifact-id: ${{ steps.unsigned.outputs.artifact-id }}
+          wait-for-completion: true
+          output-artifact-directory: signed
+
+      - name: Inspect installer signature
+        shell: pwsh
+        run: |
+          Get-ChildItem -Path signed/*-setup.exe | ForEach-Object {
+            $signature = Get-AuthenticodeSignature -LiteralPath $_.FullName
+            if (-not $signature.SignerCertificate) {
+              throw "No Authenticode signer certificate found for $($_.Name)"
+            }
+            $signature | Format-List Path, Status, StatusMessage, SignerCertificate
+          }
+
+      - name: Upload signed test installer
+        uses: actions/upload-artifact@v7
+        with:
+          name: windows-x64-test-signed
+          path: signed/*-setup.exe
+          if-no-files-found: error
@@ -5,4 +5,5 @@ if ! command -v "cargo-make" >/dev/null 2>&1; then
  cargo install --force cargo-make
 fi

+node scripts/check-contract-changes.mjs --push "$1" || exit $?
 cargo make pre-push
@@ -1,3 +1,3 @@
 nodejs 24.21.0
-pnpm 12.10.0
+pnpm 12.11.2
 rust 1.99.0
@@ -2,6 +2,12 @@
 # It is not intended for manual editing.
 version = 4

+[[package]]
+name = "Inflector"
+version = "0.11.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fe438c63458706e03479442743baae6c88256498e6431708f6dfc520a26515d3"
+
 [[package]]
 name = "adler2"
 version = "2.0.1"
@@ -1083,7 +1089,7 @@ checksum = "c8d4a3bb8b1e0c1050499d1815f5ab16d04f0959b233085fb31653fbfc9d98f9"

 [[package]]
 name = "clash-verge"
-version = "2.5.8"
+version = "2.5.9"
 dependencies = [
 "aes-gcm",
 "anyhow",
@@ -1113,7 +1119,7 @@ dependencies = [
 "getrandom 0.4.3",
 "libc",
 "log",
- "minisign-verify 0.3.0",
+ "minisign-verify",
 "nanoid",
 "network-interface",
 "objc2",
@@ -1125,7 +1131,7 @@ dependencies = [
 "regex",
 "reqwest 0.13.5",
 "reqwest_dav",
- "rfd",
+ "rfd 0.17.2",
 "runas",
 "rustls",
 "scopeguard",
@@ -1135,6 +1141,8 @@ dependencies = [
 "sha2 0.11.0",
 "smartstring",
 "socket2",
+ "specta",
+ "specta-typescript",
 "sysproxy",
 "tauri",
 "tauri-build",
@@ -1155,6 +1163,7 @@ dependencies = [
 "tauri-plugin-updater",
 "tauri-plugin-wdio-webdriver",
 "tauri-plugin-window-state",
+ "tauri-specta",
 "tokio",
 "tokio-rustls",
 "tokio-stream",
@@ -1166,7 +1175,7 @@ dependencies = [
 "windows-service",
 "windows-sys 0.61.2",
 "winreg 0.56.0",
- "zip 8.6.0",
+ "zip 9.0.2",
 ]

 [[package]]
@@ -1213,6 +1222,7 @@ dependencies = [
 "rust_iso3166",
 "serde",
 "serde_json",
+ "specta",
 "tokio",
 ]

@@ -1452,9 +1462,12 @@ dependencies = [

 [[package]]
 name = "constant_time_eq"
-version = "0.4.2"
+version = "0.6.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3d52eff69cd5e647efe296129160853a42795992097e8af39800e1060caeea9b"
+checksum = "9eb6feb175df65d0a3ccd3e73484e940d0ac664e8034f0519fd49a93db3071d9"
+dependencies = [
+ "rustversion",
+]

 [[package]]
 name = "cookie"
@@ -4038,9 +4051,9 @@ checksum = "112b39cec0b298b6c1999fee3e31427f74f676e4cb9879ed1a121b43661a4154"

 [[package]]
 name = "lzma-rust2"
-version = "0.16.5"
+version = "0.21.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ca93e534d1142d1d0dcca6d25fe302508a5dfb40b302802904577725ea0b695b"
+checksum = "fde178a3caf126c440fa15628147772d8ee590a39477d711353fbe2e58a73a5b"
 dependencies = [
 "sha2 0.11.0",
 ]
@@ -4157,12 +4170,6 @@ dependencies = [
 "unicase",
 ]

-[[package]]
-name = "minisign-verify"
-version = "0.2.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "22f9645cb765ea72b8111f36c522475d2daa0d22c957a9826437e97534bc4e9e"
-
 [[package]]
 name = "minisign-verify"
 version = "0.3.0"
@@ -5899,6 +5906,29 @@ dependencies = [
 "windows-sys 0.60.2",
 ]

+[[package]]
+name = "rfd"
+version = "0.17.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "20dafead71c16a34e1ff357ddefc8afc11e7d51d6d2b9fbd07eaa48e3e540220"
+dependencies = [
+ "block2",
+ "dispatch2",
+ "js-sys",
+ "libc",
+ "log",
+ "objc2",
+ "objc2-app-kit",
+ "objc2-core-foundation",
+ "objc2-foundation",
+ "percent-encoding",
+ "raw-window-handle",
+ "wasm-bindgen",
+ "wasm-bindgen-futures",
+ "web-sys",
+ "windows-sys 0.61.2",
+]
+
 [[package]]
 name = "ring"
 version = "0.17.14"
@@ -6400,9 +6430,9 @@ dependencies = [

 [[package]]
 name = "serde_json"
-version = "1.0.151"
+version = "1.0.154"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c841b55ecdae098c80dcae9cf767f6f8a0c2cdb3416bbef72181df4d0fe73f14"
+checksum = "e7e9cc8b1b85264074fbcc02a88680c4096b1e47df8f739dceb03bf482f04bd6"
 dependencies = [
 "itoa",
 "memchr",
@@ -6612,7 +6642,6 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "1e362d9935bc50f019969e2f9ecd66786612daae13e8f277be7bfb66e8bed3f7"
 dependencies = [
 "libc",
- "sigchld",
 "windows-sys 0.60.2",
 ]

@@ -6632,17 +6661,6 @@ version = "2.0.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "f8fadd59c855ef2080decdef8ff161eb6661b86933c9d82e5ba29dc602a55aba"

-[[package]]
-name = "sigchld"
-version = "0.2.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "47106eded3c154e70176fc83df9737335c94ce22f821c32d17ed1db1f83badb1"
-dependencies = [
- "libc",
- "os_pipe",
- "signal-hook 0.3.18",
-]
-
 [[package]]
 name = "signal-hook"
 version = "0.1.17"
@@ -6653,16 +6671,6 @@ dependencies = [
 "signal-hook-registry",
 ]

-[[package]]
-name = "signal-hook"
-version = "0.3.18"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d881a16cf4426aa584979d30bd82cb33429027e42122b169753d6ef1085ed6e2"
-dependencies = [
- "libc",
- "signal-hook-registry",
-]
-
 [[package]]
 name = "signal-hook-registry"
 version = "1.4.8"
@@ -6804,6 +6812,58 @@ dependencies = [
 "system-deps 6.2.2",
 ]

+[[package]]
+name = "specta"
+version = "2.0.0-rc.25"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "38f9a30cbcbb7011f1da7d73483983bf838af123883e45f2b36ed76328df9c50"
+dependencies = [
+ "paste",
+ "rustc_version 0.4.1",
+ "serde_json",
+ "specta-macros",
+]
+
+[[package]]
+name = "specta-macros"
+version = "2.0.0-rc.25"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2ce14957ecc2897f1f848b8255b6531d13ddf49cbcf506b7c2c9fb1d005593bb"
+dependencies = [
+ "Inflector",
+ "proc-macro2",
+ "quote",
+ "syn 2.0.119",
+]
+
+[[package]]
+name = "specta-serde"
+version = "0.0.12"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ee8a72b755ddb8949fd8f17c5db43f0e8a806ea587d9bc602ee3f73240c00029"
+dependencies = [
+ "specta",
+ "specta-macros",
+]
+
+[[package]]
+name = "specta-typescript"
+version = "0.0.12"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "639404ee95557f2f8b7e4cb773ffefd45304c7ab8ba21ac83b69051595e083c0"
+dependencies = [
+ "specta",
+]
+
+[[package]]
+name = "specta-util"
+version = "0.0.12"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "29b1fc02b446f7244a92924fe68c0555921209f1d342990cd1539e9138e69502"
+dependencies = [
+ "specta",
+]
+
 [[package]]
 name = "stable_deref_trait"
 version = "1.2.1"
@@ -6875,9 +6935,9 @@ checksum = "13c2bddecc57b384dee18652358fb23172facb8a2c51ccc10d74c157bdea3292"

 [[package]]
 name = "swift-rs"
-version = "1.0.8"
+version = "1.0.9"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e45c444e496845d3f2a351146bff59aae4975b2280238df1dfaa0c7d1846f38e"
+checksum = "cefd87076fd385308ee4aff597256c902f1fbb4d031de1558efc12f8ffefadd9"
 dependencies = [
 "base64 0.21.7",
 "serde",
@@ -7124,9 +7184,9 @@ checksum = "adb6935a6f5c20170eeceb1a3835a49e12e19d792f6dd344ccc76a985ca5a6ca"

 [[package]]
 name = "tauri"
-version = "2.12.1"
+version = "2.12.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ed99ee9694a2deb776d91cae48ac7411ddfc89ecae2f9b5041111d8c88f2ace9"
+checksum = "c404ecf956ff241bf6b39dd688614724e1bf1f63255abb4fc46d1c40371672ea"
 dependencies = [
 "anyhow",
 "bytes",
@@ -7159,6 +7219,7 @@ dependencies = [
 "serde_json",
 "serde_repr",
 "serialize-to-javascript",
+ "specta",
 "swift-rs",
 "tauri-build",
 "tauri-macros",
@@ -7171,16 +7232,16 @@ dependencies = [
 "tray-icon",
 "url",
 "webkit2gtk",
- "webview2-com 0.39.1",
+ "webview2-com",
 "window-vibrancy",
 "windows 0.62.2",
 ]

 [[package]]
 name = "tauri-build"
-version = "2.7.1"
+version = "2.7.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "59563ca5b331fd97f27ee9672ec8d36d33bb3c9e2c9f6710a1a5687256052e45"
+checksum = "2eea0b6302f82c574b21af6fc6ae6e86183b9280853c22621d0abf0936911ffc"
 dependencies = [
 "anyhow",
 "cargo_toml",
@@ -7199,11 +7260,11 @@ dependencies = [

 [[package]]
 name = "tauri-codegen"
-version = "2.7.1"
+version = "2.7.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e50213e463086ecc283d7e9f51c30cc0fd304ad457425158018be26dbf0d0a80"
+checksum = "02f468f9a9bcd404f57e5c191d91024e3de953d4b610f78c2907e7110615cb1c"
 dependencies = [
- "base64 0.22.1",
+ "base64 0.23.1",
 "brotli",
 "ico",
 "json-patch",
@@ -7226,9 +7287,9 @@ dependencies = [

 [[package]]
 name = "tauri-macros"
-version = "2.7.1"
+version = "2.7.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8129fb43bb6e0d6b73ad3315cd172beaab17cd28899c594b1b32c80edbbfd99c"
+checksum = "131bffec939b20642380317f8403a33c8888489925e14bb965ceaff0d949b1cb"
 dependencies = [
 "heck 0.5.0",
 "proc-macro2",
@@ -7276,6 +7337,7 @@ dependencies = [
 "libc",
 "parking_lot",
 "serde",
+ "specta",
 "sysinfo",
 "tauri",
 "tauri-plugin-clipboard-manager",
@@ -7283,9 +7345,9 @@ dependencies = [

 [[package]]
 name = "tauri-plugin-clipboard-manager"
-version = "2.4.1"
+version = "2.4.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "333d3b6beeb1c2c7fc040233d4ea7b6c03a9f8f039592b7400833c43fb5b568a"
+checksum = "640d0789c9db02265a800fded60520df5a3baa4a1b5f40715b83d58842c24fcb"
 dependencies = [
 "arboard",
 "log",
@@ -7346,13 +7408,13 @@ dependencies = [

 [[package]]
 name = "tauri-plugin-dialog"
-version = "2.8.1"
+version = "2.8.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "daf9a5c92e39bdd84f22f6be9230e39d0c4e140345f71ffe6058dca4f71127cf"
+checksum = "3dca325d6e66e9170f2e1b9631722e4e544bcbc51781575d266abdaba697bd51"
 dependencies = [
 "log",
 "raw-window-handle",
- "rfd",
+ "rfd 0.16.0",
 "serde",
 "serde_json",
 "tauri",
@@ -7364,9 +7426,9 @@ dependencies = [

 [[package]]
 name = "tauri-plugin-fs"
-version = "2.6.0"
+version = "2.7.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "466eb32466fe5021b6728b06862f9ff14a9f7e1af890047654e03a96d7c0e1bb"
+checksum = "213fae2d85d4b76b06de5915d1862db9fa74541171f9d2c15da6ac9bd6e788c6"
 dependencies = [
 "anyhow",
 "dunce",
@@ -7388,9 +7450,9 @@ dependencies = [

 [[package]]
 name = "tauri-plugin-global-shortcut"
-version = "2.4.0"
+version = "2.4.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0bd2e1f725891a1613af8f25bf918ba3357654b0fd3f2d794c0ce76cbdd92ed2"
+checksum = "93ff17919fe09852d269bd37b1d3d2e993b9dbb514afe7acbf3346c1d3627e2d"
 dependencies = [
 "global-hotkey",
 "log",
@@ -7403,9 +7465,9 @@ dependencies = [

 [[package]]
 name = "tauri-plugin-http"
-version = "2.8.0"
+version = "2.8.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "93e9d6b3319e101bc1be27cfa0fb4054d7784a12509c67ead0033b82180e5ed1"
+checksum = "46f1afc4200ba2e8b596c378d5756d0056febf8755f1563633d98f6bd7fffb2f"
 dependencies = [
 "bytes",
 "cookie_store",
@@ -7422,7 +7484,7 @@ dependencies = [
 "thiserror 2.0.20",
 "tokio",
 "url",
- "urlpattern 0.3.0",
+ "urlpattern",
 ]

 [[package]]
@@ -7452,9 +7514,9 @@ dependencies = [

 [[package]]
 name = "tauri-plugin-notification"
-version = "2.5.1"
+version = "2.6.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "533770889abb60a0407d5a32096182f0e6463f5a3dfaa675be94580aa14070e1"
+checksum = "8cf3cce3ea492b3a8a7f431a4e5dd5d31dc41b2a4a243faa660cbe8095a577bd"
 dependencies = [
 "log",
 "notify-rust",
@@ -7467,13 +7529,14 @@ dependencies = [
 "thiserror 2.0.20",
 "time",
 "url",
+ "zbus",
 ]

 [[package]]
 name = "tauri-plugin-opener"
-version = "2.7.0"
+version = "2.7.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d39404b2572927e0d3ed30a7ca226037f7508d22e79c96ee6ef0d42b6a4b3345"
+checksum = "85dead674ee41937d042ee855d785f07ee67206f19402200c12b9255964d5ac8"
 dependencies = [
 "dunce",
 "glob",
@@ -7503,11 +7566,12 @@ dependencies = [

 [[package]]
 name = "tauri-plugin-shell"
-version = "2.4.0"
+version = "2.5.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "094bdbc47e5efe36544ba21b3a53ab5c724150236cf55e6c9be46191deb6eab6"
+checksum = "8567d42b2c7264355daa1df415ec77f52aa42e885924c86a969be2e920e05521"
 dependencies = [
 "encoding_rs",
+ "libc",
 "log",
 "open",
 "os_pipe",
@@ -7520,13 +7584,14 @@ dependencies = [
 "tauri-plugin",
 "thiserror 2.0.20",
 "tokio",
+ "windows-sys 0.60.2",
 ]

 [[package]]
 name = "tauri-plugin-updater"
-version = "2.13.1"
+version = "2.13.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3cb0b2ea3e85ca287990d3859a29cc5cb18024240fd78f62e027fb7963670f18"
+checksum = "855a336eb389d2c1502244fd48fa2d8cb487a430f691bbaed025195f99a04489"
 dependencies = [
 "base64 0.22.1",
 "dirs 7.0.0",
@@ -7534,8 +7599,9 @@ dependencies = [
 "futures-util",
 "http",
 "infer",
+ "libc",
 "log",
- "minisign-verify 0.2.5",
+ "minisign-verify",
 "osakit",
 "percent-encoding",
 "reqwest 0.13.5",
@@ -7557,9 +7623,9 @@ dependencies = [

 [[package]]
 name = "tauri-plugin-wdio-webdriver"
-version = "1.4.0"
+version = "1.5.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "52c5e97428174a52b7f4357bbc4535fcce52c6a06c8ee7a379502f7cda1b6045"
+checksum = "4f76676d510d271d80abcf8b0552987b5b4f0eae5e3f906e9b5660d43c97c62e"
 dependencies = [
 "async-trait",
 "axum",
@@ -7583,9 +7649,9 @@ dependencies = [
 "tracing",
 "uuid",
 "webkit2gtk",
- "webview2-com 0.38.2",
- "windows 0.61.3",
- "windows-core 0.61.2",
+ "webview2-com",
+ "windows 0.62.2",
+ "windows-core 0.62.2",
 ]

 [[package]]
@@ -7624,7 +7690,7 @@ dependencies = [
 "thiserror 2.0.20",
 "url",
 "webkit2gtk",
- "webview2-com 0.39.1",
+ "webview2-com",
 "windows 0.62.2",
 ]

@@ -7650,11 +7716,42 @@ dependencies = [
 "tracing",
 "url",
 "webkit2gtk",
- "webview2-com 0.39.1",
+ "webview2-com",
 "windows 0.62.2",
 "wry",
 ]

+[[package]]
+name = "tauri-specta"
+version = "2.0.0-rc.25"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ee080f36d2ac17ce2f3a82fb53f02d664e8345457de51b56dad3c394dacc41a2"
+dependencies = [
+ "heck 0.5.0",
+ "serde",
+ "serde_json",
+ "specta",
+ "specta-serde",
+ "specta-typescript",
+ "specta-util",
+ "tauri",
+ "tauri-specta-macros",
+ "thiserror 2.0.20",
+]
+
+[[package]]
+name = "tauri-specta-macros"
+version = "2.0.0-rc.25"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6a59dfdce06c98d8d211619bea5fdb39486d8a8c558e12b2d2ce255972320012"
+dependencies = [
+ "darling",
+ "heck 0.5.0",
+ "proc-macro2",
+ "quote",
+ "syn 2.0.119",
+]
+
 [[package]]
 name = "tauri-utils"
 version = "2.10.1"
@@ -7688,7 +7785,7 @@ dependencies = [
 "thiserror 2.0.20",
 "toml 1.1.6+spec-1.1.0",
 "url",
- "urlpattern 0.6.0",
+ "urlpattern",
 "uuid",
 "walkdir",
 ]
@@ -7807,7 +7904,7 @@ dependencies = [
 "regex",
 "semver 0.11.0",
 "sha2 0.9.9",
- "signal-hook 0.1.17",
+ "signal-hook",
 "terminfo",
 "termios",
 "thiserror 1.0.69",
@@ -8040,9 +8137,9 @@ dependencies = [

 [[package]]
 name = "tokio-util"
-version = "0.7.19"
+version = "0.7.20"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "494815d09bf52b5548659851081238f0ca39ff638363907596da739561c62c52"
+checksum = "e464cf451ba96ebfc6f9b6542f17ee8b8956e33f1e40d9690624e59d7a7f8a4b"
 dependencies = [
 "bytes",
 "futures-core",
@@ -8497,47 +8594,6 @@ dependencies = [
 "windows-sys 0.61.2",
 ]

-[[package]]
-name = "unic-char-property"
-version = "0.9.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a8c57a407d9b6fa02b4795eb81c5b6652060a15a7903ea981f3d723e6c0be221"
-dependencies = [
- "unic-char-range",
-]
-
-[[package]]
-name = "unic-char-range"
-version = "0.9.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0398022d5f700414f6b899e10b8348231abf9173fa93144cbc1a43b9793c1fbc"
-
-[[package]]
-name = "unic-common"
-version = "0.9.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "80d7ff825a6a654ee85a63e80f92f054f904f21e7d12da4e22f9834a4aaa35bc"
-
-[[package]]
-name = "unic-ucd-ident"
-version = "0.9.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e230a37c0381caa9219d67cf063aa3a375ffed5bf541a452db16e744bdab6987"
-dependencies = [
- "unic-char-property",
- "unic-char-range",
- "unic-ucd-version",
-]
-
-[[package]]
-name = "unic-ucd-version"
-version = "0.9.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "96bd2f2237fe450fcd0a1d2f5f4e91711124f7857ba2e964247776ebeeb7b0c4"
-dependencies = [
- "unic-common",
-]
-
 [[package]]
 name = "unicase"
 version = "2.9.0"
@@ -8597,18 +8653,6 @@ dependencies = [
 "serde_derive",
 ]

-[[package]]
-name = "urlpattern"
-version = "0.3.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "70acd30e3aa1450bc2eece896ce2ad0d178e9c079493819301573dae3c37ba6d"
-dependencies = [
- "regex",
- "serde",
- "unic-ucd-ident",
- "url",
-]
-
 [[package]]
 name = "urlpattern"
 version = "0.6.0"
@@ -9000,20 +9044,6 @@ dependencies = [
 "rustls-pki-types",
 ]

-[[package]]
-name = "webview2-com"
-version = "0.38.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7130243a7a5b33c54a444e54842e6a9e133de08b5ad7b5861cd8ed9a6a5bc96a"
-dependencies = [
- "webview2-com-macros",
- "webview2-com-sys 0.38.2",
- "windows 0.61.3",
- "windows-core 0.61.2",
- "windows-implement",
- "windows-interface",
-]
-
 [[package]]
 name = "webview2-com"
 version = "0.39.1"
@@ -9021,7 +9051,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "3f89fca7a704cee10dcb3654c1dbb8941d1783132f1917358af75bec37a7d7e6"
 dependencies = [
 "webview2-com-macros",
- "webview2-com-sys 0.39.1",
+ "webview2-com-sys",
 "windows 0.62.2",
 "windows-core 0.62.2",
 ]
@@ -9037,17 +9067,6 @@ dependencies = [
 "syn 2.0.119",
 ]

-[[package]]
-name = "webview2-com-sys"
-version = "0.38.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "381336cfffd772377d291702245447a5251a2ffa5bad679c99e61bc48bacbf9c"
-dependencies = [
- "thiserror 2.0.20",
- "windows 0.61.3",
- "windows-core 0.61.2",
-]
-
 [[package]]
 name = "webview2-com-sys"
 version = "0.39.1"
@@ -9787,7 +9806,7 @@ dependencies = [
 "url",
 "webkit2gtk",
 "webkit2gtk-sys",
- "webview2-com 0.39.1",
+ "webview2-com",
 "windows 0.62.2",
 "windows-core 0.62.2",
 "windows-version",
@@ -10055,9 +10074,9 @@ dependencies = [

 [[package]]
 name = "zip"
-version = "8.6.0"
+version = "9.0.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2d04a6b5381502aa6087c94c669499eb1602eb9c5e8198e534de571f7154809b"
+checksum = "9e2fc56a6707efb066c40aead2409ebb1224e6dde24a074e9fbc78ced500507b"
 dependencies = [
 "aes",
 "bzip2",
@@ -10070,6 +10089,7 @@ dependencies = [
 "indexmap 2.14.0",
 "lzma-rust2",
 "memchr",
+ "nix",
 "pbkdf2",
 "ppmd-rust",
 "sha1 0.11.0",
@@ -10106,27 +10126,27 @@ dependencies = [

 [[package]]
 name = "zstd"
-version = "0.13.3"
+version = "0.14.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e91ee311a569c327171651566e07972200e76fcfe2242a4fa446149a3881c08a"
+checksum = "057cfd910cfac363a0ada849592624b4c9ff2e10bef504c3433810d78ed96f93"
 dependencies = [
 "zstd-safe",
 ]

 [[package]]
 name = "zstd-safe"
-version = "7.2.4"
+version = "8.1.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8f49c4d5f0abb602a93fb8736af2a4f4dd9512e36f7f570d66e65ff867ed3b9d"
+checksum = "bdd44c6a7284e91f3717755b24315a302edd9153a01f753c3cba3d765e8eafac"
 dependencies = [
 "zstd-sys",
 ]

 [[package]]
 name = "zstd-sys"
-version = "2.0.16+zstd.1.5.7"
+version = "2.1.1+zstd.1.5.7"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "91e19ebc2adc8f83e43039e79776e3fda8ca919132d68a1fed6a5faca2683748"
+checksum = "aeec9eaf2dffbbd09201e23bd0ffcbaa33bb8e9266a10734fd7ed90a85eca078"
 dependencies = [
 "cc",
 "pkg-config",
@@ -10187,8 +10207,3 @@ dependencies = [
 "syn 3.0.5",
 "winnow 1.0.4",
 ]
-
-[[patch.unused]]
-name = "tray-icon"
-version = "0.24.1"
-source = "git+https://github.com/Tunglies/tray-icon.git?branch=fix%2Fmacos-27-click-reentrancy#5750c67d02d32f2af100e120ad665959d4268cef"
@@ -50,11 +50,6 @@ split-debuginfo = "unpacked"
 # Backport Windows menu command ID recycling on the muda 0.20 compatibility branch.
 muda = { git = "https://github.com/wonfen/muda.git", rev = "547de49352791653fbdfa785f20f3c7ece8468e2" }

-# macOS Golden Gate fix for tray-icon click reentrancy issue
-# Remove the following patch once the fix is merged upstream(tauri) 
-# https://github.com/tauri-apps/tray-icon/pull/365
-tray-icon = { git = "https://github.com/Tunglies/tray-icon.git", branch = "fix/macos-27-click-reentrancy" }
-
 [workspace.dependencies]
 clash-verge-draft = { path = "crates/clash-verge-draft" }
 clash-verge-media-unlock = { path = "crates/clash-verge-media-unlock" }
@@ -66,8 +61,8 @@ tracing-estuary = { git = "https://github.com/Tunglies/tracing-estuary.git", bra
 tauri-plugin-clash-verge-sysinfo = { path = "crates/tauri-plugin-clash-verge-sysinfo" }
 tracing = "0.1.44"

-tauri = { version = "2.12.1" }
-tauri-plugin-clipboard-manager = "2.4.1"
+tauri = { version = "2.12.3" }
+tauri-plugin-clipboard-manager = "2.4.2"
 parking_lot = { version = "0.12.5", features = ["hardware-lock-elision"] }
 anyhow = "1.0.104"
 chrono = "0.4.45"
@@ -93,7 +88,7 @@ rust_iso3166 = "0.2.0"
 smartstring = { version = "1.0.1" }

 serde = { version = "1.0.229" }
-serde_json = { version = "1.0.151" }
+serde_json = { version = "1.0.154" }
 serde_yaml_ng = { version = "0.10.0" }
 bitflags = { version = "2.13.2" }
 socket2 = "0.6.5"
@@ -1,51 +1,24 @@
-## v2.5.8
+## v2.5.9

 <details>
 <summary><strong> 🐞 修复问题 </strong></summary>

- 修复系统托盘代理组行不显示延迟、超时项与未测过项无法区分的问题
- 修复不同订阅源的同名节点测速和延迟显示指向错误节点的问题
- 修复端口设置混淆保存值与运行值、输入无效时缺少提示的问题
- 修复已有内核进程阻止启动时缺少多语言说明和处理建议的问题
- 修复从开始菜单再次打开应用后，窗口反复弹出并提示启动失败的问题
- 修复多个代理集合包含同名节点时，代理组中的节点变灰并显示 ambiguous、无法选择的问题
- 修复手动更新时重复下载后台已下载的安装包、启动时选「稍后」后每次启动都重新下载的问题
- 修复下载更新时镜像缓慢或卡住不会切换下载地址、点击「取消」无法中止下载的问题
- 修复关闭「自动检查更新」后，启动时仍弹出已下载更新的安装提示的问题
- 修复从 Dock 退出、注销或关机时，应用可能长时间卡住无法退出的问题
- 修复宽窗口下「订阅」页每行显示过多卡片，导致配置名称被截断的问题
-
-**🖥️ Windows**
-
- 修复 Windows 升级后因文件权限异常无法启动、需要手动清理配置的问题
- 修复 Windows 服务启动类型被改为手动后，软件启动卡住约两分钟的问题，并提供一键修复
- 修复 Windows 长时间运行后，托盘菜单点击无响应的问题
-
-**🍎 macOS**
-
- 修复 macOS 关闭 TUN 或退出后，系统 DNS 仍停留在 `114.114.114.114` 导致无法解析域名的问题
-
-**🖥️/🍎 Windows/macOS**
-
- 修复 Windows/macOS 打开系统托盘菜单时，节点延迟与自动选择状态未刷新的问题
+- 修复通过 URL 导入订阅时，即使导入的订阅并非当前使用的订阅，也会重新加载当前配置的问题

 </details>

 <details>
 <summary><strong> ✨ 新增功能 </strong></summary>

- 新增系统托盘代理组中的「测试延迟」菜单项

 </details>

 <details>
 <summary><strong> 🚀 优化改进 </strong></summary>

- 优化端口设置窗口的实现，精简重复代码
- 优化侧边栏流量图表的 CPU 占用

 **🖥️ Windows**

- 优化 Windows 服务安全检查未通过时的提示：启动、安装或修复服务时说明原因与内核占用，并提供处理方法
+- Windows 系统代理默认绕过 `*.local` 域名，访问局域网设备的 `.local` 主机名时不再经过代理

 </details>
@@ -70,6 +70,8 @@ tray:
  global: Global
  profiles: Perfis
  proxies: Proxies
+  testLatency: Test Latency
+  testingLatency: Testing latency…
  systemProxy: Proxy do sistema
  tunMode: Modo TUN
  closeAllConnections: Fechar todas as conexões
@@ -4,6 +4,7 @@ version = "0.1.0"
 edition = "2024"

 [dependencies]
+specta = { version = "=2.0.0-rc.25", features = ["derive", "function"] }
 clash-verge-logging = { workspace = true }
 chrono = { workspace = true }
 log = { workspace = true }
@@ -2,7 +2,7 @@ use serde::{Deserialize, Serialize};

 use super::utils::{country_code_to_emoji, get_local_date_string};

-#[derive(Debug, Clone, Serialize, Deserialize)]
+#[derive(Debug, Clone, Serialize, Deserialize, specta::Type)]
 pub struct UnlockItem {
    pub name: String,
    pub status: String,
@@ -5,6 +5,7 @@ edition = "2024"
 rust-version = "1.91"

 [dependencies]
+specta = { version = "=2.0.0-rc.25", features = ["derive", "function"] }
 tauri = { workspace = true }
 tauri-plugin-clipboard-manager = { workspace = true }
 parking_lot = { workspace = true }
@@ -1,53 +1,46 @@
 use parking_lot::RwLock;
 use serde::Serialize;
 use tauri::{AppHandle, Runtime, State, command};
-use tauri_plugin_clipboard_manager::{ClipboardExt as _, Error};
+use tauri_plugin_clipboard_manager::ClipboardExt as _;

 use crate::Platform;

-#[derive(Serialize)]
+#[derive(Serialize, specta::Type)]
 pub struct SystemInfo {
    pub system_name: String,
    pub system_version: String,
-    pub system_kernel_version: String,
-    pub system_arch: String,
-    pub app_version: String,
-    pub app_core_mode: String,
-    pub app_is_admin: bool,
 }

-impl From<Platform> for SystemInfo {
-    fn from(platform: Platform) -> Self {
+impl From<&Platform> for SystemInfo {
+    fn from(platform: &Platform) -> Self {
        Self {
-            system_name: platform.sysinfo.system_name,
-            system_version: platform.sysinfo.system_version,
-            system_kernel_version: platform.sysinfo.system_kernel_version,
-            system_arch: platform.sysinfo.system_arch,
-            app_version: platform.appinfo.app_version,
-            app_core_mode: platform.appinfo.app_core_mode,
-            app_is_admin: platform.appinfo.app_is_admin,
+            system_name: platform.sysinfo.system_name.clone(),
+            system_version: platform.sysinfo.system_version.clone(),
        }
    }
 }

 #[command]
-pub fn get_system_info(state: State<'_, RwLock<Platform>>) -> Result<SystemInfo, Error> {
+#[specta::specta]
+pub fn get_system_info(state: State<'_, RwLock<Platform>>) -> Result<SystemInfo, String> {
    let platform = state.inner().read();
-    Ok(SystemInfo::from(platform.clone()))
+    Ok(SystemInfo::from(&*platform))
 }

 /// 获取应用的运行时间（毫秒）
 #[command]
-pub fn get_app_uptime(state: State<'_, RwLock<Platform>>) -> Result<u128, Error> {
+#[specta::specta]
+pub fn get_app_uptime(state: State<'_, RwLock<Platform>>) -> Result<u128, String> {
    Ok(state.inner().read().appinfo.app_startup_time.elapsed().as_millis())
 }

 #[command]
+#[specta::specta]
 pub fn export_diagnostic_info<R: Runtime>(
    app_handle: AppHandle<R>,
    state: State<'_, RwLock<Platform>>,
-) -> Result<(), Error> {
+) -> Result<(), String> {
    let info = state.inner().read().to_string();
    let clipboard = app_handle.clipboard();
-    clipboard.write_text(info)
+    clipboard.write_text(info).map_err(|error| error.to_string())
 }
@@ -1,3 +1,55 @@
+## v2.5.8
+
+<details>
+<summary><strong> 🐞 修复问题 </strong></summary>
+
+- 修复系统托盘代理组行不显示延迟、超时项与未测过项无法区分的问题
+- 修复不同订阅源的同名节点测速和延迟显示指向错误节点的问题
+- 修复端口设置混淆保存值与运行值、输入无效时缺少提示的问题
+- 修复已有内核进程阻止启动时缺少多语言说明和处理建议的问题
+- 修复从开始菜单再次打开应用后，窗口反复弹出并提示启动失败的问题
+- 修复多个代理集合包含同名节点时，代理组中的节点变灰并显示 ambiguous、无法选择的问题
+- 修复手动更新时重复下载后台已下载的安装包、启动时选「稍后」后每次启动都重新下载的问题
+- 修复下载更新时镜像缓慢或卡住不会切换下载地址、点击「取消」无法中止下载的问题
+- 修复关闭「自动检查更新」后，启动时仍弹出已下载更新的安装提示的问题
+- 修复从 Dock 退出、注销或关机时，应用可能长时间卡住无法退出的问题
+- 修复宽窗口下「订阅」页每行显示过多卡片，导致配置名称被截断的问题
+
+**🖥️ Windows**
+
+- 修复 Windows 升级后因文件权限异常无法启动、需要手动清理配置的问题
+- 修复 Windows 服务启动类型被改为手动后，软件启动卡住约两分钟的问题，并提供一键修复
+- 修复 Windows 长时间运行后，托盘菜单点击无响应的问题
+
+**🍎 macOS**
+
+- 修复 macOS 关闭 TUN 或退出后，系统 DNS 仍停留在 `114.114.114.114` 导致无法解析域名的问题
+
+**🖥️/🍎 Windows/macOS**
+
+- 修复 Windows/macOS 打开系统托盘菜单时，节点延迟与自动选择状态未刷新的问题
+
+</details>
+
+<details>
+<summary><strong> ✨ 新增功能 </strong></summary>
+
+- 新增系统托盘代理组中的「测试延迟」菜单项
+
+</details>
+
+<details>
+<summary><strong> 🚀 优化改进 </strong></summary>
+
+- 优化端口设置窗口的实现，精简重复代码
+- 优化侧边栏流量图表的 CPU 占用
+
+**🖥️ Windows**
+
+- 优化 Windows 服务安全检查未通过时的提示：启动、安装或修复服务时说明原因与内核占用，并提供处理方法
+
+</details>
+
 ## v2.5.7

 <details>
@@ -12,6 +12,92 @@ import pluginUnusedImports from 'eslint-plugin-unused-imports'
 import globals from 'globals'
 import tseslint from 'typescript-eslint'

+const ipcBoundaryRules = ({
+  allowCommands = false,
+  allowInvoke = false,
+  allowEvents = false,
+} = {}) => {
+  const paths = [
+    ...(!allowInvoke
+      ? [
+          {
+            name: '@tauri-apps/api/core',
+            importNames: ['invoke'],
+            allowTypeImports: true,
+            message: 'Invoke backend commands through services/cmds.',
+          },
+        ]
+      : []),
+    ...(!allowEvents
+      ? [
+          {
+            name: '@tauri-apps/api/event',
+            importNames: ['listen', 'emit', 'emitTo', 'once'],
+            allowTypeImports: true,
+            message:
+              'The event bus owns Tauri event subscriptions and emissions.',
+          },
+        ]
+      : []),
+  ]
+  const patterns = allowCommands
+    ? []
+    : [
+        {
+          regex: '(^|/)bindings(\\.ts)?$',
+          importNames: ['commands'],
+          allowTypeImports: true,
+          message:
+            'Only services/cmds may import generated command implementations.',
+        },
+      ]
+  const modules = [
+    ...(!allowInvoke ? ['@tauri-apps/api/core'] : []),
+    ...(!allowEvents ? ['@tauri-apps/api/event'] : []),
+  ]
+  const syntax = modules.flatMap((name) => [
+    {
+      selector: `ImportExpression[source.value='${name}']`,
+      message:
+        'Use the owned IPC service boundary instead of dynamically importing Tauri APIs.',
+    },
+    {
+      selector: `CallExpression[callee.name='require'][arguments.0.value='${name}']`,
+      message:
+        'Use the owned IPC service boundary instead of requiring Tauri APIs.',
+    },
+    {
+      selector: `TSImportEqualsDeclaration[moduleReference.expression.value='${name}']`,
+      message: 'Use the owned IPC service boundary for Tauri APIs.',
+    },
+  ])
+  if (!allowCommands) {
+    syntax.push(
+      {
+        selector: 'ImportExpression[source.value=/bindings(\\.ts)?$/]',
+        message:
+          'Only services/cmds may load generated command implementations.',
+      },
+      {
+        selector:
+          "CallExpression[callee.name='require'][arguments.0.value=/bindings(\\.ts)?$/]",
+        message:
+          'Only services/cmds may load generated command implementations.',
+      },
+      {
+        selector:
+          'TSImportEqualsDeclaration[moduleReference.expression.value=/bindings(\\.ts)?$/]',
+        message:
+          'Only services/cmds may load generated command implementations.',
+      },
+    )
+  }
+  return {
+    'no-restricted-imports': ['error', { paths, patterns }],
+    'no-restricted-syntax': ['error', ...syntax],
+  }
+}
+
 export default defineConfig([
  pluginESx.configs['flat/restrict-to-es2022'],
  {
@@ -162,4 +248,33 @@ export default defineConfig([
      },
    },
  },
+  {
+    files: ['src/**/*.{ts,tsx,js,jsx,mts,mjs}'],
+    rules: ipcBoundaryRules(),
+  },
+  {
+    files: ['src/services/cmds.ts'],
+    rules: ipcBoundaryRules({ allowCommands: true }),
+  },
+  {
+    files: ['src/services/bindings.ts'],
+    rules: ipcBoundaryRules({ allowCommands: true, allowInvoke: true }),
+  },
+  {
+    files: ['src/services/bus/**/*.{ts,tsx}'],
+    rules: ipcBoundaryRules({ allowEvents: true }),
+  },
+  {
+    files: [
+      'src/components/proxy/proxy-chain.tsx',
+      'src/components/proxy/proxy-groups-chain.tsx',
+      'src/pages/proxies.tsx',
+    ],
+    rules: {
+      '@typescript-eslint/no-floating-promises': [
+        'error',
+        { ignoreVoid: false },
+      ],
+    },
+  },
 ])
@@ -1,6 +1,6 @@
 {
  "$schema": "https://unpkg.com/knip@6/schema.json",
-  "entry": ["src/polyfills/*.js!"],
+  "entry": ["src/polyfills/*.js!", "scripts/check-contract-changes.mjs!"],
  "project": ["src/**/*.{js,jsx,ts,tsx,sass,scss}!", "scripts/**/*.{js,mjs}!"],
  "include": [
    "files",
@@ -18,7 +18,7 @@
  "ignoreDependencies": ["lint-staged"],
  "ignoreIssues": {
    "src/types/generated/**": ["exports", "types"],
-    "src/services/contract.ts": ["exports", "types"]
+    "src/services/bindings.ts": ["types"]
  },
  "cycles": {
    "dynamicImports": true
@@ -1,6 +1,6 @@
 {
  "name": "clash-verge",
-  "version": "2.5.8",
+  "version": "2.5.9",
  "license": "GPL-3.0-only",
  "scripts": {
    "prepare": "husky || true",
@@ -146,5 +146,5 @@
    ]
  },
  "type": "module",
-  "packageManager": "pnpm@12.10.0"
+  "packageManager": "pnpm@12.11.2"
 }
@@ -7,153 +7,153 @@ importers:
    configDependencies: {}
    packageManagerDependencies:
      pnpm:
-        specifier: 12.10.0
-        version: 12.10.0
+        specifier: 12.11.2
+        version: 12.11.2

 packages:

-  '@pnpm/exe.android-arm64@12.10.0':
-    resolution: {integrity: sha512-QMMRzOI/7CU4xLbKY6O2BZn3VI4+a8LLyim18H7it8llBWuBPMqDqUURE8045k+7lI8/lI2/tElhyKptEviKDQ==}
+  '@pnpm/exe.android-arm64@12.11.2':
+    resolution: {integrity: sha512-owLw13OfPkEoY+hLBNeeG+dCFhywr7q2d/EHPz4mNL2RhKnv8gNwMARkjkiDQu234aItVwFNDeGnmQXm+ikkAg==}
    cpu: [arm64]
    os: [android]

-  '@pnpm/exe.android-x64@12.10.0':
-    resolution: {integrity: sha512-41zwlROW+t523Nfqo4rWp8IPiSK5vnAWrnCey26Je45rX1SMNc4ABY7OFmPw41/t+Y0CE+4tjTj+0s9YGqPM5w==}
+  '@pnpm/exe.android-x64@12.11.2':
+    resolution: {integrity: sha512-GYPkVebl4iokOA/4MPSpGoUVfFlsth7uqOCe1XiaiM23LAdvUOMJBObqHJijr89ZqjwHm9pO6vO45GRwJ2U2qA==}
    cpu: [x64]
    os: [android]

-  '@pnpm/exe.darwin-arm64@12.10.0':
-    resolution: {integrity: sha512-L+r7AD8Fjf8Vcc4ZRJl+Pjzc27CIeQ/FiRwPmOluFO2UcXubmGHdW+OuMUxrU0vkoXiGR61Ft0RtaPwTRY4W/g==}
+  '@pnpm/exe.darwin-arm64@12.11.2':
+    resolution: {integrity: sha512-n9M4On66y8FDxUAKgMO1FXt0qihyG4e+56p3/F0uo8Bx9KplW8BwKVnXigzCJ8aNM6sVVPkOE6M9XXbeVIxnZA==}
    cpu: [arm64]
    os: [darwin]

-  '@pnpm/exe.darwin-x64@12.10.0':
-    resolution: {integrity: sha512-/TCF1K6E+4PnbkLgqGS1Iqlf5bHp6FDzuXgu6++PMMAFkF7Yk5EF3BcfG1gYYjpkvlJBccvVMsRBnWFbSyqu1w==}
+  '@pnpm/exe.darwin-x64@12.11.2':
+    resolution: {integrity: sha512-oSW7n3sBT0c0cyk4kj10T2Y6Mpm+OFEiCAWozgX039tdoI6yqJF1uaFD3sw7ugLdu6VV3+uY0pa1TUZIPdxDWA==}
    cpu: [x64]
    os: [darwin]

-  '@pnpm/exe.freebsd-x64@12.10.0':
-    resolution: {integrity: sha512-k7/WFA91E2qhnR/2EOEv402U8bjP758y2pybbdiB5Hrd4KhgviVOJp5cFrXpKgd8HZJs/RZN7cdmMvU2Q2BVgg==}
+  '@pnpm/exe.freebsd-x64@12.11.2':
+    resolution: {integrity: sha512-qbzc3KoDpa/Lkf8vs3jnDe6dUUbso+6eLIyssYFMiliLpYNxn8dirk11YoNnOQcdHVB50v5RFls1Yid6ttT5pg==}
    cpu: [x64]
    os: [freebsd]

-  '@pnpm/exe.linux-arm64-musl@12.10.0':
-    resolution: {integrity: sha512-ChD8bN0lRCRaL+CMOaMUgZQ4WHzEkDXmDHrZgXgdoo6yymQKKzr66Ic7Sl/D7Ky1cVUcFEzHjlq4fGDJwt6Lqg==}
+  '@pnpm/exe.linux-arm64-musl@12.11.2':
+    resolution: {integrity: sha512-uMEYDwKRktGwANubQ+kYCwmhNwg3Ik6qK89ahsbQ5cP30R/5FVJb/T99vr9XRUBC/A7mZI6eeT92oyVas9ACyg==}
    cpu: [arm64]
    os: [linux]
    libc: [musl]

-  '@pnpm/exe.linux-arm64@12.10.0':
-    resolution: {integrity: sha512-egl5RUSQFh7kETBdmMhaTuaQKP1pjH6Cxq370zgpFFKJXF+GGkIzK+jLNazrjX9pKIWF3iqn7kUeyP6yKxzBoA==}
+  '@pnpm/exe.linux-arm64@12.11.2':
+    resolution: {integrity: sha512-6e8ZAQUwFXAWHHHv5FesWqf/kEK04wuitBv5f/gxzkC0DiBfaixr+f+6JQede8SF4Ji5LcMwVFJbzAtffpWxEg==}
    cpu: [arm64]
    os: [linux]
    libc: [glibc]

-  '@pnpm/exe.linux-ppc64@12.10.0':
-    resolution: {integrity: sha512-YJ6bEZ+stPpv71CGfGQQeyIpMx/zSMEcAXQzG+rjBtzVfyNsxYciRevhJ+PE9b2qKqN78Mh/1tOMmx9ly4VXGw==}
+  '@pnpm/exe.linux-ppc64@12.11.2':
+    resolution: {integrity: sha512-Ui8A4nepkVupx2VpuFfysEluMvWK6gTB5rgVts7Ss/+8dj0RD28x3F/seNeH/zSypgC6yKdV6qsKVQh/uffTuQ==}
    cpu: [ppc64]
    os: [linux]
    libc: [glibc]

-  '@pnpm/exe.linux-riscv64@12.10.0':
-    resolution: {integrity: sha512-njfd4euctC1zH1nVBbm6+r1c+0y/TtgqN523rk/KMSxqItpV5QAVa9Yz48Rt5DOIKmuLq7xXOhsQodBlbTk3pw==}
+  '@pnpm/exe.linux-riscv64@12.11.2':
+    resolution: {integrity: sha512-i1yLdQ5bu+wjQ+srtFoJAaY2gN/+oXHFdjul4llCeoDxHE0rTIG3R41NhHfCjyFPW4+CpbBT58933CL9sMOCnA==}
    cpu: [riscv64]
    os: [linux]
    libc: [glibc]

-  '@pnpm/exe.linux-s390x@12.10.0':
-    resolution: {integrity: sha512-4JI2F8pYGMcsG6ny61OiBSvZeDozc64TbPozbTU2X5uCsaFCsCvcpr/WwyypwCv+/mNjcIhaKhlxpwJYsnteIg==}
+  '@pnpm/exe.linux-s390x@12.11.2':
+    resolution: {integrity: sha512-YS1/lhPjjTsN4QL50VaFZKRa3Uc/bDnhE8eKbJMFvuX06UuFS5YaiDg04APoZdfVSGqTfX27QAg7rfLMSWaqxA==}
    cpu: [s390x]
    os: [linux]
    libc: [glibc]

-  '@pnpm/exe.linux-x64-musl@12.10.0':
-    resolution: {integrity: sha512-xayd2iG8ugdvjlGeOvsfm+iSe0bFu9RTX3/8HWOLAQmHdbLKi4hPbxP0S4c9tj8pNej/IxVBQLJksRXFlhNjPw==}
+  '@pnpm/exe.linux-x64-musl@12.11.2':
+    resolution: {integrity: sha512-7eIxQR05fvJxCujUSKp5KTtehJ7QqrgqP/HD1+BcB/SaV2Be4XI1PEHiOgA1zxsiMIeMvTF6E4G4dYHrFjeXRg==}
    cpu: [x64]
    os: [linux]
    libc: [musl]

-  '@pnpm/exe.linux-x64@12.10.0':
-    resolution: {integrity: sha512-PFkzWEghFLKuocxMHtn57mlJ59f5aBbqjX6FCUtiunEHqxTxOibSduQPs3Llm6VWbAXBjD3VrX29Z+bjU1Dpyw==}
+  '@pnpm/exe.linux-x64@12.11.2':
+    resolution: {integrity: sha512-FK7QKe24AYgppJwO3mpooYptduuvIGqKJPi5ac7MdnWkjUy46JBfYhCW0grnkWKC8YOf0x+vGviuQqJEj3SpQQ==}
    cpu: [x64]
    os: [linux]
    libc: [glibc]

-  '@pnpm/exe.win32-arm64@12.10.0':
-    resolution: {integrity: sha512-0HtTS+TLONWd/dNSczyOkK0UeZ36cbdhC/2ljZ61DPhvc4jTb7ur0yU47On0in7Im3yXwzTY4vtF8ykrDwc+NQ==}
+  '@pnpm/exe.win32-arm64@12.11.2':
+    resolution: {integrity: sha512-PCTjVDdJb6VvraZxrEeFv6EqEA0hhIsAySx28e95J2Tqpi88hLpgOXgNqV0vpxq9A+b8GLQfyk/D+1UlJPv/YQ==}
    cpu: [arm64]
    os: [win32]

-  '@pnpm/exe.win32-x64@12.10.0':
-    resolution: {integrity: sha512-IcW3rehTGzJ7YnmHEWnbnJakjbBmnH0r29qiajK9+6b9psMF9IjocFr0dyitRVSfXxyW/FI5PIK3mOswGoyFTg==}
+  '@pnpm/exe.win32-x64@12.11.2':
+    resolution: {integrity: sha512-8sgX86OvRjJ3yZs/TvGR2L31wH9ScPZ+f+geKI3ikuB0RRiK3i4LlTRO8OXN6pdRqj8epMde4312MCjj7JsJdA==}
    cpu: [x64]
    os: [win32]

-  pnpm@12.10.0:
-    resolution: {integrity: sha512-Eip7bd+dQCaLwNsal4CJm5Xk+out/Ke9RQYVrYz3wmWfX1acIO18U4hrx7CNDVClT0rVBwaEf1aC7GxQSEFlOQ==}
+  pnpm@12.11.2:
+    resolution: {integrity: sha512-JaUWUqGWeFr18ovabf6NxYLr76SsHRgCIc4TkCMcX7dmN4IupLbkYzznSs3LCnf3Ja8RutOBd/3t2u6BipVcuQ==}
    engines: {node: '>=18.*'}
    hasBin: true

 snapshots:

-  '@pnpm/exe.android-arm64@12.10.0':
+  '@pnpm/exe.android-arm64@12.11.2':
    optional: true

-  '@pnpm/exe.android-x64@12.10.0':
+  '@pnpm/exe.android-x64@12.11.2':
    optional: true

-  '@pnpm/exe.darwin-arm64@12.10.0':
+  '@pnpm/exe.darwin-arm64@12.11.2':
    optional: true

-  '@pnpm/exe.darwin-x64@12.10.0':
+  '@pnpm/exe.darwin-x64@12.11.2':
    optional: true

-  '@pnpm/exe.freebsd-x64@12.10.0':
+  '@pnpm/exe.freebsd-x64@12.11.2':
    optional: true

-  '@pnpm/exe.linux-arm64-musl@12.10.0':
+  '@pnpm/exe.linux-arm64-musl@12.11.2':
    optional: true

-  '@pnpm/exe.linux-arm64@12.10.0':
+  '@pnpm/exe.linux-arm64@12.11.2':
    optional: true

-  '@pnpm/exe.linux-ppc64@12.10.0':
+  '@pnpm/exe.linux-ppc64@12.11.2':
    optional: true

-  '@pnpm/exe.linux-riscv64@12.10.0':
+  '@pnpm/exe.linux-riscv64@12.11.2':
    optional: true

-  '@pnpm/exe.linux-s390x@12.10.0':
+  '@pnpm/exe.linux-s390x@12.11.2':
    optional: true

-  '@pnpm/exe.linux-x64-musl@12.10.0':
+  '@pnpm/exe.linux-x64-musl@12.11.2':
    optional: true

-  '@pnpm/exe.linux-x64@12.10.0':
+  '@pnpm/exe.linux-x64@12.11.2':
    optional: true

-  '@pnpm/exe.win32-arm64@12.10.0':
+  '@pnpm/exe.win32-arm64@12.11.2':
    optional: true

-  '@pnpm/exe.win32-x64@12.10.0':
+  '@pnpm/exe.win32-x64@12.11.2':
    optional: true

-  pnpm@12.10.0:
+  pnpm@12.11.2:
    optionalDependencies:
-      '@pnpm/exe.android-arm64': 12.10.0
-      '@pnpm/exe.android-x64': 12.10.0
-      '@pnpm/exe.darwin-arm64': 12.10.0
-      '@pnpm/exe.darwin-x64': 12.10.0
-      '@pnpm/exe.freebsd-x64': 12.10.0
-      '@pnpm/exe.linux-arm64': 12.10.0
-      '@pnpm/exe.linux-arm64-musl': 12.10.0
-      '@pnpm/exe.linux-ppc64': 12.10.0
-      '@pnpm/exe.linux-riscv64': 12.10.0
-      '@pnpm/exe.linux-s390x': 12.10.0
-      '@pnpm/exe.linux-x64': 12.10.0
-      '@pnpm/exe.linux-x64-musl': 12.10.0
-      '@pnpm/exe.win32-arm64': 12.10.0
-      '@pnpm/exe.win32-x64': 12.10.0
+      '@pnpm/exe.android-arm64': 12.11.2
+      '@pnpm/exe.android-x64': 12.11.2
+      '@pnpm/exe.darwin-arm64': 12.11.2
+      '@pnpm/exe.darwin-x64': 12.11.2
+      '@pnpm/exe.freebsd-x64': 12.11.2
+      '@pnpm/exe.linux-arm64': 12.11.2
+      '@pnpm/exe.linux-arm64-musl': 12.11.2
+      '@pnpm/exe.linux-ppc64': 12.11.2
+      '@pnpm/exe.linux-riscv64': 12.11.2
+      '@pnpm/exe.linux-s390x': 12.11.2
+      '@pnpm/exe.linux-x64': 12.11.2
+      '@pnpm/exe.linux-x64-musl': 12.11.2
+      '@pnpm/exe.win32-arm64': 12.11.2
+      '@pnpm/exe.win32-x64': 12.11.2

 ---
 lockfileVersion: '9.0'
@@ -1,84 +1,34 @@
-import fs from 'node:fs'
 import path from 'node:path'

-/**
- * Architecture grep gates for the frontend contract flow. Select gates via
- * argv:
- *
- *   node scripts/check-architecture.mjs listen emit invoke
- *
- * - listen/emit: the Tauri event API may only be used under src/services/bus/**
- *   (the event bus). Detected as a bare `listen(`/`emit(` call (member calls
- *   like `this.emit(` are unrelated class methods) or as importing the name
- *   from '@tauri-apps/api/event'.
- * - invoke: `invoke(` calls may exist only under src/services/**.
- */
+import { ESLint } from 'eslint'

 const ROOT = path.resolve(import.meta.dirname, '..')
-const SRC = path.join(ROOT, 'src')
-
-const tauriEventImport = (name) =>
-  new RegExp(
-    `import\\s*\\{[^}]*\\b${name}\\b[^}]*\\}\\s*from\\s*'@tauri-apps/api/event'`,
-  )
-
-const GATES = {
-  listen: {
-    patterns: [/(?<![.\w])listen\(/, tauriEventImport('listen')],
-    allowed: (file) => file.startsWith('src/services/bus/'),
-    description: 'Tauri listen outside the event bus (src/services/bus)',
-  },
-  emit: {
-    patterns: [/(?<![.\w])emit\(/, tauriEventImport('emit')],
-    allowed: (file) => file.startsWith('src/services/bus/'),
-    description: 'Tauri emit outside the event bus (src/services/bus)',
-  },
-  invoke: {
-    patterns: [/\binvoke\(/],
-    allowed: (file) => file.startsWith('src/services/'),
-    description: 'invoke( outside the services layer (src/services)',
-  },
-}
-
-const walk = (dir) => {
-  const entries = fs.readdirSync(dir, { withFileTypes: true })
-  return entries.flatMap((entry) => {
-    const full = path.join(dir, entry.name)
-    if (entry.isDirectory()) return walk(full)
-    return /\.(ts|tsx|js|jsx|mts|mjs)$/.test(entry.name) ? [full] : []
-  })
-}
-
-const selected = process.argv.slice(2)
-if (selected.length === 0) {
+const gates = process.argv.slice(2)
+if (
+  !gates.length ||
+  gates.some((gate) => !['listen', 'emit', 'invoke'].includes(gate))
+) {
  console.error('usage: check-architecture.mjs <gate>... (listen|emit|invoke)')
  process.exit(2)
 }

-let violations = 0
-for (const gate of selected) {
-  const rule = GATES[gate]
-  if (!rule) {
-    console.error(`unknown gate: ${gate}`)
-    process.exit(2)
-  }
-  for (const file of walk(SRC)) {
-    const relative = path.relative(ROOT, file).replaceAll('\\', '/')
-    if (rule.allowed(relative)) continue
-    const lines = fs.readFileSync(file, 'utf8').split('\n')
-    lines.forEach((line, index) => {
-      if (rule.patterns.some((pattern) => pattern.test(line))) {
-        violations += 1
-        console.error(
-          `[arch] ${rule.description}: ${relative}:${index + 1}: ${line.trim()}`,
-        )
-      }
-    })
-  }
+// All IPC boundaries use the lint configuration, including when callers request a legacy gate.
+const eslint = new ESLint({ cwd: ROOT, allowInlineConfig: false })
+const results = await eslint.lintFiles(['src'])
+const boundaryRules = new Set([
+  'no-restricted-imports',
+  'no-restricted-syntax',
+  '@typescript-eslint/no-floating-promises',
+])
+const violations = results.flatMap((result) =>
+  result.messages
+    .filter((message) => message.fatal || boundaryRules.has(message.ruleId))
+    .map((message) => ({ file: result.filePath, ...message })),
+)
+for (const violation of violations) {
+  console.error(
+    `[arch] ${path.relative(ROOT, violation.file)}:${violation.line}: ${violation.message}`,
+  )
 }
-
-if (violations > 0) {
-  console.error(`[arch] ${violations} violation(s) found`)
-  process.exit(1)
-}
-console.log('[arch] no violations')
+if (violations.length) process.exitCode = 1
+else console.log('[arch] no violations')
@@ -0,0 +1,69 @@
+import { execFileSync } from 'node:child_process'
+import fs from 'node:fs'
+import path from 'node:path'
+
+const ROOT = path.resolve(import.meta.dirname, '..')
+const git = (...args) =>
+  execFileSync('git', args, { cwd: ROOT, encoding: 'utf8' }).trim()
+const { contract } = JSON.parse(
+  fs.readFileSync(path.join(ROOT, 'scripts/contract-inputs.json'), 'utf8'),
+)
+const inputs = contract.map((pattern) => `:(glob)${pattern}`)
+const args = process.argv.slice(2)
+if (args.length !== 2 || args[0] !== '--push') {
+  console.error('usage: check-contract-changes.mjs --push <remote>')
+  process.exit(2)
+}
+const hasChanges = (...range) =>
+  git('diff', '--name-only', ...range, '--', ...inputs) !== ''
+const assertCleanInputs = (...range) => {
+  if (
+    hasChanges(...range) ||
+    git('ls-files', '--others', '--exclude-standard', '--', ...inputs)
+  ) {
+    throw new Error(
+      'Contract inputs differ from the pushed commit. Commit those changes before pushing.',
+    )
+  }
+}
+let relevant = false
+const head = git('rev-parse', 'HEAD')
+for (const line of fs
+  .readFileSync(0, 'utf8')
+  .trim()
+  .split('\n')
+  .filter(Boolean)) {
+  const fields = line.trim().split(/\s+/)
+  if (
+    fields.length !== 4 ||
+    ![fields[1], fields[3]].every((sha) => /^[a-f0-9]{40,64}$/.test(sha))
+  ) {
+    throw new Error('Invalid pre-push ref update')
+  }
+  const [, local, , remote] = fields
+  if (/^0+$/.test(local) || local === remote) continue
+  // A new remote branch has no upstream; use its fork point with the remote default branch.
+  const base = /^0+$/.test(remote)
+    ? git('merge-base', local, `refs/remotes/${args[1]}/HEAD`)
+    : remote
+  if (!hasChanges(base, local)) continue
+  const commit = git('rev-parse', `${local}^{commit}`)
+  if (commit !== head)
+    throw new Error(
+      'Check out the pushed commit before validating its changed IPC contract.',
+    )
+  assertCleanInputs('HEAD')
+  relevant = true
+}
+if (relevant) {
+  execFileSync(
+    process.execPath,
+    [path.join(ROOT, 'scripts/gen-contract.mjs'), '--check'],
+    {
+      cwd: ROOT,
+      stdio: 'inherit',
+    },
+  )
+} else {
+  console.log('[contract] inputs unchanged; skipping Rust generation')
+}
@@ -0,0 +1,23 @@
+{
+  "contract": [
+    "src-tauri/**/*.rs",
+    "crates/**/*.rs",
+    "Cargo.toml",
+    "Cargo.lock",
+    "src-tauri/Cargo.toml",
+    "crates/**/Cargo.toml",
+    "rust-toolchain.toml",
+    "src-tauri/tauri.conf*.json",
+    "src/services/bindings.ts",
+    "scripts/gen-contract.mjs",
+    "scripts/check-contract-changes.mjs",
+    "biome.json",
+    "biome.jsonc",
+    "package.json",
+    "pnpm-lock.yaml",
+    "pnpm-workspace.yaml",
+    "scripts/contract-inputs.json",
+    ".github/workflows/frontend-check.yml",
+    ".husky/pre-push"
+  ]
+}
@@ -1,91 +1,55 @@
 import { execFileSync } from 'node:child_process'
 import fs from 'node:fs'
+import os from 'node:os'
 import path from 'node:path'

-/**
- * Regenerates src/services/contract.ts from the backend wire contract.
- * Source of truth: `cargo run -p clash-verge --bin frontend-contract` inside
- * src-tauri, which serializes the same enum variants and event payloads the
- * app emits at runtime. CI reruns this and fails on a non-empty diff.
- */
-
 const ROOT = path.resolve(import.meta.dirname, '..')
-const OUT = path.join(ROOT, 'src/services/contract.ts')
-
-const contract = JSON.parse(
+const BINDINGS = path.join(ROOT, 'src/services/bindings.ts')
+const args = process.argv.slice(2)
+if (args.length > 1 || (args.length === 1 && args[0] !== '--check')) {
+  console.error('usage: gen-contract.mjs [--check]')
+  process.exit(2)
+}
+const check = args[0] === '--check'
+const temporary = check
+  ? fs.mkdtempSync(path.join(os.tmpdir(), 'verge-contract-'))
+  : null
+const output = temporary ? path.join(temporary, 'bindings.ts') : BINDINGS
+try {
  execFileSync(
    'cargo',
-    ['run', '-p', 'clash-verge', '--bin', 'frontend-contract', '-q'],
-    {
-      cwd: path.join(ROOT, 'src-tauri'),
-      encoding: 'utf8',
-      maxBuffer: 16 * 1024 * 1024,
-    },
-  ),
-)
-
-if (contract.version !== 1) {
-  throw new Error(`unsupported wire contract version: ${contract.version}`)
-}
-
-/** TS type per event, derived from the serialized sample payload's JSON shape. */
-const payloadType = (name, sample) => {
-  if (sample === null) return 'null'
-  if (typeof sample === 'string') return 'string'
-  if (Array.isArray(sample)) {
-    if (name === 'verge://notice-message') return '[NoticeStatus, string]'
-    throw new Error(`unexpected array payload for ${name}`)
+    [
+      'run',
+      '-p',
+      'clash-verge',
+      '--bin',
+      'frontend-contract',
+      '--locked',
+      '-q',
+      ...(check ? ['--', output] : []),
+    ],
+    { cwd: ROOT, stdio: 'inherit' },
+  )
+  const formatted = execFileSync(
+    process.execPath,
+    [
+      path.join(ROOT, 'node_modules/@biomejs/biome/bin/biome'),
+      'format',
+      '--stdin-file-path',
+      BINDINGS,
+    ],
+    { cwd: ROOT, input: fs.readFileSync(output) },
+  )
+  if (check) {
+    if (!formatted.equals(fs.readFileSync(BINDINGS))) {
+      console.error(
+        'IPC bindings are out of date. Run pnpm gen:contract and commit the generated file.',
+      )
+      process.exitCode = 1
+    }
+  } else {
+    fs.writeFileSync(BINDINGS, formatted)
  }
-  if (typeof sample === 'object') {
-    const keys = Object.keys(sample)
-    if (keys.length === 1 && keys[0] === 'uid') return '{ uid: string }'
-    if (name === 'verge://run-state-changed') return 'RunState'
-    throw new Error(`unexpected object payload for ${name}: ${keys.join(',')}`)
-  }
-  throw new Error(`unexpected payload for ${name}`)
+} finally {
+  if (temporary) fs.rmSync(temporary, { recursive: true, force: true })
 }
-
-const needsRunState = contract.events.some(
-  (e) => e.name === 'verge://run-state-changed',
-)
-if (!needsRunState)
-  throw new Error('run-state-changed event missing from contract')
-
-const lines = []
-lines.push(
-  '// @generated by scripts/gen-contract.mjs from the backend wire contract. DO NOT EDIT.',
-)
-lines.push('// Regen: pnpm gen:contract')
-lines.push('')
-lines.push("import type { RunState } from './cmds'")
-lines.push('')
-lines.push(
-  '/** Wire status strings from NoticeStatus; keep in sync via `pnpm gen:contract`. */',
-)
-lines.push('export type NoticeStatus =')
-for (const status of contract.noticeStatuses) {
-  lines.push(`  | ${JSON.stringify(status)}`)
-}
-lines.push('')
-lines.push('/** Event name → payload type for every backend-emitted event. */')
-lines.push('export interface VergeEventPayloads {')
-for (const event of contract.events) {
-  const key = JSON.stringify(event.name)
-  lines.push(`  ${key}: ${payloadType(event.name, event.sample)}`)
-}
-lines.push('}')
-lines.push('')
-
-const content = `${lines.join('\n')}\n`
-fs.writeFileSync(OUT, content)
-
-// Match the repo's biome style so CI parity (`git diff --exit-code`) is stable.
-execFileSync(
-  process.platform === 'win32' ? 'pnpm.cmd' : 'pnpm',
-  ['exec', 'biome', 'format', '--write', path.relative(ROOT, OUT)],
-  { cwd: ROOT, stdio: 'ignore' },
-)
-
-console.log(
-  `[gen-contract] wrote ${path.relative(ROOT, OUT)}: ${contract.events.length} events, ${contract.noticeStatuses.length} statuses`,
-)
@@ -1,6 +1,6 @@
 [package]
 name = "clash-verge"
-version = "2.5.8"
+version = "2.5.9"
 description = "clash verge"
 authors = ["zzzgydi", "Tunglies", "wonfen", "MystiPanda"]
 license = "GPL-3.0-only"
@@ -29,7 +29,7 @@ perf-harness = ["dep:tauri-plugin-wdio-webdriver"]
 identifier = "io.github.clash-verge-rev.clash-verge-rev"

 [build-dependencies]
-tauri-build = { version = "2.7.1", features = [] }
+tauri-build = { version = "2.7.2", features = [] }

 [dependencies]
 clash-verge-draft = { workspace = true }
@@ -60,7 +60,7 @@ bitflags = { workspace = true }
 socket2 = { workspace = true }
 warp = { version = "0.4.3", features = ["server"] }
 open = "5.4.4"
-rfd = { version = "0.16.0", default-features = false, features = ["common-controls-v6"] }
+rfd = { version = "0.17.2", default-features = false, features = ["common-controls-v6"] }
 dirs = "7.0.0"
 dunce = "1.0.5"
 nanoid = "0.5"
@@ -73,14 +73,14 @@ sysproxy = { git = "https://github.com/clash-verge-rev/sysproxy-rs.git", branch
  "guard",
 ] }
 network-interface = { version = "2.0.5", features = ["serde"] }
-tauri-plugin-shell = "2.4.0"
-tauri-plugin-opener = "2.7.0"
-tauri-plugin-dialog = "2.8.1"
-tauri-plugin-fs = "2.6.0"
+tauri-plugin-shell = "2.5.0"
+tauri-plugin-opener = "2.7.1"
+tauri-plugin-dialog = "2.8.2"
+tauri-plugin-fs = "2.7.0"
 tauri-plugin-process = "2.4.0"
 tauri-plugin-deep-link = "2.6.1"
 tauri-plugin-window-state = "2.5.0"
-zip = "8.6.0"
+zip = "9.0.2"
 flate2 = "1.1.10"
 reqwest_dav = "0.3.3"
 aes-gcm = { version = "0.11.1" }
@@ -91,10 +91,10 @@ getrandom = "0.4.3"
 futures = "0.3.34"
 gethostname = "1.1.0"
 scopeguard = "1.2.0"
-tauri-plugin-notification = "2.5.1"
+tauri-plugin-notification = "2.6.0"
 tokio-stream = "0.1.19"
 backon = { version = "1.6.0", features = ["tokio-sleep"] }
-tauri-plugin-http = "2.8.0"
+tauri-plugin-http = "2.8.2"
 tracing = { workspace = true }
 tauri-plugin-devtools = { version = "2.2.2", optional = true }
 tauri-plugin-mihomo = { git = "https://github.com/clash-verge-rev/tauri-plugin-mihomo", branch = "main" }
@@ -108,13 +108,16 @@ rustls = { version = "0.23.45", features = ["ring"] }
 webpki-roots = "1.0.9"
 dark-light = "3.0.0"
 bytes = "1.12.1"
-tokio-util = { version = "0.7.19", features = ["time"] }
+tokio-util = { version = "0.7.20", features = ["time"] }
+specta = { version = "=2.0.0-rc.25", features = ["derive", "function", "serde_json"] }
+tauri-specta = { version = "=2.0.0-rc.25", features = ["derive", "typescript"] }
+specta-typescript = "=0.0.12"

 [target.'cfg(unix)'.dependencies]
 libc = "0.2.190"

 [target.'cfg(target_os = "macos")'.dependencies]
-tauri-plugin-wdio-webdriver = { version = "=1.4.0", optional = true }
+tauri-plugin-wdio-webdriver = { version = "=1.5.0", optional = true }
 objc2 = "0.6.5"
 objc2-foundation = { version = "0.3.2", features = [
  "NSString",
@@ -147,8 +150,8 @@ windows-sys.workspace = true

 [target.'cfg(not(any(target_os = "android", target_os = "ios")))'.dependencies]
 tauri-plugin-autostart = "2.7.0"
-tauri-plugin-global-shortcut = "2.4.0"
-tauri-plugin-updater = "2.13.1"
+tauri-plugin-global-shortcut = "2.4.1"
+tauri-plugin-updater = "2.13.3"

 [dev-dependencies]
 criterion = { workspace = true }
@@ -1,8 +1,12 @@
-//! Prints the frontend wire contract as JSON to stdout. Zero new dependencies:
-//! the payload is derived from the same serializers the app uses at runtime.
-//! Consumed by scripts/gen-contract.mjs; CI regenerates and diffs the committed
-//! TypeScript artifact.
-
-fn main() {
-    println!("{}", app_lib::frontend_wire_contract());
+fn main() -> Result<(), Box<dyn std::error::Error>> {
+    let mut args = std::env::args_os().skip(1);
+    let output = args
+        .next()
+        .map(std::path::PathBuf::from)
+        .unwrap_or_else(|| std::path::Path::new(env!("CARGO_MANIFEST_DIR")).join("../src/services/bindings.ts"));
+    if args.next().is_some() {
+        return Err(std::io::Error::new(std::io::ErrorKind::InvalidInput, "expected at most one output path").into());
+    }
+    app_lib::ipc::builder().export(specta_typescript::Typescript::default(), output)?;
+    Ok(())
 }
@@ -9,12 +9,14 @@ use smartstring::alias::String;
 use tauri::{AppHandle, Manager as _, ipc::Channel};

 #[tauri::command]
+#[specta::specta]
 pub async fn open_app_dir() -> CmdResult<()> {
    let app_dir = dirs::app_home_dir().stringify_err()?;
    open::that(app_dir).stringify_err()
 }

 #[tauri::command]
+#[specta::specta]
 pub async fn open_core_dir() -> CmdResult<()> {
    let core_dir = tauri::utils::platform::current_exe().stringify_err()?;
    let core_dir = core_dir.parent().ok_or("failed to get core dir")?;
@@ -22,12 +24,14 @@ pub async fn open_core_dir() -> CmdResult<()> {
 }

 #[tauri::command]
+#[specta::specta]
 pub async fn open_logs_dir() -> CmdResult<()> {
    let log_dir = dirs::app_logs_dir().stringify_err()?;
    open::that(log_dir).stringify_err()
 }

 #[tauri::command]
+#[specta::specta]
 pub fn open_devtools(app_handle: AppHandle) {
    if let Some(window) = app_handle.get_webview_window("main") {
        if !window.is_devtools_open() {
@@ -39,22 +43,26 @@ pub fn open_devtools(app_handle: AppHandle) {
 }

 #[tauri::command]
+#[specta::specta]
 pub async fn exit_app() {
    feat::quit().await;
 }

 #[tauri::command]
+#[specta::specta]
 pub async fn restart_app() -> CmdResult<()> {
    feat::restart_app().await;
    Ok(())
 }

 #[tauri::command]
+#[specta::specta]
 pub async fn install_update(
    app_handle: AppHandle,
-    version: String,
+    version: std::string::String,
    on_event: Channel<DownloadEvent>,
 ) -> CmdResult<bool> {
+    let version: String = version.into();
    SilentUpdater::global()
        .install_update(&app_handle, &version, |event| {
            let _ = on_event.send(event);
@@ -64,22 +72,32 @@ pub async fn install_update(
 }

 #[tauri::command]
+#[specta::specta]
 pub fn cancel_update_download() {
    SilentUpdater::global().cancel_download();
 }

 #[tauri::command]
-pub fn get_app_dir() -> CmdResult<String> {
+#[specta::specta]
+pub fn get_app_dir() -> CmdResult<std::string::String> {
    let app_home_dir = dirs::app_home_dir().stringify_err()?.to_string_lossy().into();
    Ok(app_home_dir)
 }

 #[tauri::command]
-pub async fn download_icon_cache(url: String, name: String) -> CmdResult<String> {
-    feat::download_icon_cache(url, name).await
+#[specta::specta]
+pub async fn download_icon_cache(
+    url: std::string::String,
+    name: std::string::String,
+) -> CmdResult<std::string::String> {
+    let url: String = url.into();
+    let name: String = name.into();
+    feat::download_icon_cache(url, name).await.map(Into::into)
 }

 #[tauri::command]
-pub async fn copy_icon_file(path: String, icon_info: feat::IconInfo) -> CmdResult<String> {
-    feat::copy_icon_file(path, icon_info).await
+#[specta::specta]
+pub async fn copy_icon_file(path: std::string::String, icon_info: feat::IconInfo) -> CmdResult<std::string::String> {
+    let path: String = path.into();
+    feat::copy_icon_file(path, icon_info).await.map(Into::into)
 }
@@ -4,33 +4,44 @@ use feat::LocalBackupFile;
 use smartstring::alias::String;

 #[tauri::command]
+#[specta::specta]
 pub async fn create_local_backup() -> CmdResult<()> {
    feat::create_local_backup().await.stringify_err()
 }

 #[tauri::command]
+#[specta::specta]
 pub async fn list_local_backup() -> CmdResult<Vec<LocalBackupFile>> {
    feat::list_local_backup().await.stringify_err()
 }

 #[tauri::command]
-pub async fn delete_local_backup(filename: String) -> CmdResult<()> {
+#[specta::specta]
+pub async fn delete_local_backup(filename: std::string::String) -> CmdResult<()> {
+    let filename: String = filename.into();
    feat::delete_local_backup(filename).await.stringify_err()
 }

 #[tauri::command]
-pub async fn restore_local_backup(filename: String) -> CmdResult<()> {
+#[specta::specta]
+pub async fn restore_local_backup(filename: std::string::String) -> CmdResult<()> {
+    let filename: String = filename.into();
    feat::restore_local_backup(filename)
        .await
        .map_err(|error| super::proxy_aware_error(&error))
 }

 #[tauri::command]
-pub async fn import_local_backup(source: String) -> CmdResult<String> {
-    feat::import_local_backup(source).await.stringify_err()
+#[specta::specta]
+pub async fn import_local_backup(source: std::string::String) -> CmdResult<std::string::String> {
+    let source: String = source.into();
+    feat::import_local_backup(source).await.map(Into::into).stringify_err()
 }

 #[tauri::command]
-pub async fn export_local_backup(filename: String, destination: String) -> CmdResult<()> {
+#[specta::specta]
+pub async fn export_local_backup(filename: std::string::String, destination: std::string::String) -> CmdResult<()> {
+    let filename: String = filename.into();
+    let destination: String = destination.into();
    feat::export_local_backup(filename, destination).await.stringify_err()
 }
@@ -12,30 +12,33 @@ use crate::{
    },
 };
 use clash_verge_logging::{Type, logging, logging_error};
-use serde_yaml_ng::Mapping;
 use smartstring::alias::String;
 use tokio::fs;

 #[tauri::command]
+#[specta::specta]
 pub async fn copy_clash_env() -> CmdResult {
-    feat::copy_clash_env().await;
-    Ok(())
+    feat::copy_clash_env().await.stringify_err()
 }

 #[tauri::command]
+#[specta::specta]
 pub async fn get_clash_info() -> CmdResult<ClashInfo> {
    Ok(Config::clash().await.data_arc().get_client_info())
 }

 #[tauri::command]
-pub async fn patch_clash_config(payload: Mapping) -> CmdResult {
-    feat::patch_clash(&payload)
+#[specta::specta]
+pub async fn patch_clash_config(payload: crate::ipc::YamlMapping) -> CmdResult {
+    feat::patch_clash(&payload.0)
        .await
        .map_err(|error| proxy_aware_coded_error(&error, "CLASH_CONFIG_UPDATE_FAILED"))
 }

 #[tauri::command]
-pub async fn patch_clash_mode(payload: String) -> CmdResult {
+#[specta::specta]
+pub async fn patch_clash_mode(payload: std::string::String) -> CmdResult {
+    let payload: String = payload.into();
    feat::change_clash_mode(payload)
        .await
        .with_error_code("CLASH_MODE_UPDATE_FAILED")
@@ -43,12 +46,15 @@ pub async fn patch_clash_mode(payload: String) -> CmdResult {

 /// Reads the saved mode without depending on strict mihomo `/configs` deserialization.
 #[tauri::command]
-pub async fn get_clash_mode() -> CmdResult<Option<String>> {
-    Ok(Config::clash().await.data_arc().get_mode().map(Into::into))
+#[specta::specta]
+pub async fn get_clash_mode() -> CmdResult<Option<std::string::String>> {
+    Ok(Config::clash().await.data_arc().get_mode())
 }

 #[tauri::command]
-pub async fn change_clash_core(clash_core: String) -> CmdResult<Option<CommandFailure>> {
+#[specta::specta]
+pub async fn change_clash_core(clash_core: std::string::String) -> CmdResult<Option<CommandFailure>> {
+    let clash_core: String = clash_core.into();
    logging!(info, Type::Config, "changing core to {clash_core}");

    match CoreManager::global().change_core(&clash_core).await {
@@ -80,6 +86,7 @@ pub async fn change_clash_core(clash_core: String) -> CmdResult<Option<CommandFa
 }

 #[tauri::command]
+#[specta::specta]
 pub async fn restart_core() -> CmdResult {
    logging_error!(Type::Core, profiles_save_file_safe().await);
    let result = CoreManager::global()
@@ -94,6 +101,7 @@ pub async fn restart_core() -> CmdResult {

 /// Replaces the managed core binary atomically instead of letting mihomo overwrite itself.
 #[tauri::command]
+#[specta::specta]
 pub async fn upgrade_clash_core(force: bool) -> CmdResult<feat::CoreUpgradeReport> {
    let report = feat::upgrade_core(force).await.with_error_code("CORE_UPGRADE_FAILED")?;
    if report.upgraded {
@@ -103,7 +111,9 @@ pub async fn upgrade_clash_core(force: bool) -> CmdResult<feat::CoreUpgradeRepor
 }

 #[tauri::command]
-pub async fn test_delay(url: String) -> CmdResult<u32> {
+#[specta::specta]
+pub async fn test_delay(url: std::string::String) -> CmdResult<u32> {
+    let url: String = url.into();
    let result = match feat::test_delay(url).await {
        Ok(delay) => delay,
        Err(e) => {
@@ -115,13 +125,14 @@ pub async fn test_delay(url: String) -> CmdResult<u32> {
 }

 #[tauri::command]
-pub async fn save_dns_config(dns_config: Mapping) -> CmdResult {
+#[specta::specta]
+pub async fn save_dns_config(dns_config: crate::ipc::YamlMapping) -> CmdResult {
    use crate::utils::dirs;
    use tokio::fs;

    let dns_path = dirs::app_home_dir().stringify_err()?.join(constants::files::DNS_CONFIG);

-    let yaml_str = yaml_emitter::to_mihomo_config_string(&dns_config).stringify_err()?;
+    let yaml_str = yaml_emitter::to_mihomo_config_string(&dns_config.0).stringify_err()?;
    fs::write(&dns_path, yaml_str).await.stringify_err()?;
    logging!(info, Type::Config, "DNS config saved to {dns_path:?}");

@@ -129,22 +140,27 @@ pub async fn save_dns_config(dns_config: Mapping) -> CmdResult {
 }

 #[tauri::command]
+#[specta::specta]
 pub fn take_dns_override_notice() -> bool {
    crate::config::dns::take_dns_override_notice()
 }

 #[tauri::command]
+#[specta::specta]
 pub async fn set_dns_override(
-    profile_uid: String,
+    profile_uid: std::string::String,
    enabled: bool,
-    confirmation: Option<String>,
+    confirmation: Option<std::string::String>,
 ) -> CmdResult<feat::DnsOverrideOutcome> {
+    let profile_uid: String = profile_uid.into();
+    let confirmation = confirmation.map(String::from);
    feat::set_dns_override(profile_uid, enabled, confirmation)
        .await
        .map_err(|error| proxy_aware_coded_error(&error, "DNS_OVERRIDE_UPDATE_FAILED"))
 }

 #[tauri::command]
+#[specta::specta]
 pub async fn apply_dns_config(apply: bool) -> CmdResult {
    if apply {
        let dns_path = dirs::app_home_dir().stringify_err()?.join(constants::files::DNS_CONFIG);
@@ -163,7 +179,7 @@ pub async fn apply_dns_config(apply: bool) -> CmdResult {
            );
        })?;

-        let patch_config = serde_yaml_ng::from_str::<serde_yaml_ng::Mapping>(&dns_yaml).stringify_err_log(|e| {
+        serde_yaml_ng::from_str::<serde_yaml_ng::Mapping>(&dns_yaml).stringify_err_log(|e| {
            logging!(
                error,
                Type::Config,
@@ -172,13 +188,6 @@ pub async fn apply_dns_config(apply: bool) -> CmdResult {
            );
        })?;

-        let mut patch = serde_yaml_ng::Mapping::new();
-        patch.insert("dns".into(), patch_config.into());
-
-        Config::runtime().await.edit_draft(|d| {
-            d.patch_config(&patch);
-        });
-
        CoreManager::global().update_config_checked().await.map_err(|error| {
            logging!(error, Type::Config, "failed to apply the config with DNS: {error:#}");
            proxy_aware_error(&error)
@@ -202,20 +211,22 @@ pub async fn apply_dns_config(apply: bool) -> CmdResult {
 }

 #[tauri::command]
-pub async fn get_dns_config_content() -> CmdResult<Option<String>> {
+#[specta::specta]
+pub async fn get_dns_config_content() -> CmdResult<Option<std::string::String>> {
    use crate::utils::dirs;
    use tokio::fs;

    let dns_path = dirs::app_home_dir().stringify_err()?.join(constants::files::DNS_CONFIG);

    match fs::read_to_string(&dns_path).await {
-        Ok(content) => Ok(Some(content.into())),
+        Ok(content) => Ok(Some(content)),
        Err(error) if error.kind() == std::io::ErrorKind::NotFound => Ok(None),
        Err(error) => Err(CommandFailure::plain(error)),
    }
 }

 #[tauri::command]
+#[specta::specta]
 pub async fn validate_dns_config() -> CmdResult<ValidationOutcome> {
    let app_dir = dirs::app_home_dir().stringify_err()?;
    let dns_path = app_dir.join(constants::files::DNS_CONFIG);
@@ -232,6 +243,7 @@ pub async fn validate_dns_config() -> CmdResult<ValidationOutcome> {
 }

 #[tauri::command]
+#[specta::specta]
 pub async fn get_clash_logs() -> CmdResult<Vec<std::string::String>> {
    let logs = CoreManager::global().get_clash_logs().await.unwrap_or_default();
    Ok(logs)
@@ -3,6 +3,7 @@ use crate::core::lightweight;
 use super::CmdResult;

 #[tauri::command]
+#[specta::specta]
 pub async fn entry_lightweight_mode() -> CmdResult {
    lightweight::entry_lightweight_mode().await;
    Ok(())
@@ -5,11 +5,13 @@ use crate::{
 };

 #[tauri::command]
+#[specta::specta]
 pub async fn probe_listener(request: ListenerProbe) -> CmdResult<ListenerProbeOutcome> {
    feat::probe_listener(request).await.stringify_err()
 }

 #[tauri::command]
+#[specta::specta]
 pub async fn save_proxy_ports(settings: ProxyPortSettings) -> CmdResult<SaveProxyPortsOutcome> {
    feat::save_proxy_ports(settings)
        .await
@@ -4,6 +4,7 @@ use std::time::Duration;
 use tauri::{command, ipc::Channel};

 #[command]
+#[specta::specta]
 pub fn get_unlock_items() -> Vec<UnlockItem> {
    clash_verge_media_unlock::default_unlock_items()
 }
@@ -26,6 +27,7 @@ async fn create_client() -> Result<Client, String> {
 }

 #[command]
+#[specta::specta]
 pub async fn check_media_unlock(on_complete: Channel<UnlockItem>) -> Result<Vec<UnlockItem>, String> {
    let client = create_client().await?;
    Ok(clash_verge_media_unlock::check_media_unlock(&client, |item| {
@@ -35,6 +37,7 @@ pub async fn check_media_unlock(on_complete: Channel<UnlockItem>) -> Result<Vec<
 }

 #[command]
+#[specta::specta]
 pub async fn check_media_unlock_item(name: String) -> Result<UnlockItem, String> {
    let client = create_client().await?;
    clash_verge_media_unlock::check_media_unlock_item(&client, &name).await
@@ -4,7 +4,7 @@ use smartstring::alias::String;
 pub type CmdResult<T = ()> = Result<T, CommandFailure>;

 /// Structured command failure returned to the frontend.
-#[derive(Debug, Clone, PartialEq, Eq, serde::Serialize)]
+#[derive(Debug, Clone, PartialEq, Eq, serde::Serialize, specta::Type)]
 pub struct CommandFailure {
    /// Stable frontend identifier, when classified.
    #[serde(skip_serializing_if = "Option::is_none")]
@@ -3,13 +3,12 @@ use crate::cmd::StringifyErr as _;
 use crate::core::{proxy_control, sysopt::Sysopt};

 use gethostname::gethostname;
-use network_interface::NetworkInterface;
-use serde_yaml_ng::Mapping;
 use sysproxy::{Autoproxy, Sysproxy};
 use tauri_plugin_clash_verge_sysinfo;

 #[tauri::command]
-pub async fn get_sys_proxy() -> CmdResult<Mapping> {
+#[specta::specta]
+pub async fn get_sys_proxy() -> CmdResult<SystemProxy> {
    Sysopt::global().wait_idle().await;
    // With no network service there is no proxy configured anywhere, which reads as disabled.
    let sys_proxy = match Sysproxy::get_system_proxy() {
@@ -17,40 +16,40 @@ pub async fn get_sys_proxy() -> CmdResult<Mapping> {
        other => other.stringify_err()?,
    };
    let Sysproxy {
-        ref host,
-        ref bypass,
-        ref port,
-        ref enable,
+        host,
+        bypass,
+        port,
+        enable,
    } = sys_proxy;

-    let mut map = Mapping::new();
-    map.insert("enable".into(), (*enable).into());
-    map.insert("server".into(), format!("{}:{}", host, port).into());
-    map.insert("bypass".into(), bypass.as_str().into());
-    Ok(map)
+    Ok(SystemProxy {
+        enable,
+        server: format!("{host}:{port}"),
+        bypass,
+    })
 }

 #[tauri::command]
-pub async fn get_auto_proxy() -> CmdResult<Mapping> {
+#[specta::specta]
+pub async fn get_auto_proxy() -> CmdResult<AutoProxy> {
    Sysopt::global().wait_idle().await;
    let auto_proxy = match Autoproxy::get_auto_proxy() {
        Err(error) if proxy_control::is_missing_network_service(&error) => Autoproxy::default(),
        other => other.stringify_err()?,
    };
-    let Autoproxy { ref enable, ref url } = auto_proxy;
+    let Autoproxy { enable, url } = auto_proxy;

-    let mut map = Mapping::new();
-    map.insert("enable".into(), (*enable).into());
-    map.insert("url".into(), url.as_str().into());
-    Ok(map)
+    Ok(AutoProxy { enable, url })
 }

 #[tauri::command]
+#[specta::specta]
 pub fn get_embedded_server_port() -> CmdResult<u16> {
    crate::utils::server::embedded_server_port().stringify_err()
 }

 #[tauri::command]
+#[specta::specta]
 pub fn get_system_hostname() -> String {
    match gethostname().into_string() {
        Ok(name) => name,
@@ -62,12 +61,14 @@ pub fn get_system_hostname() -> String {
 }

 #[tauri::command]
+#[specta::specta]
 pub fn get_network_interfaces() -> Vec<String> {
    tauri_plugin_clash_verge_sysinfo::list_network_interfaces()
 }

 #[tauri::command]
-pub fn get_network_interfaces_info() -> CmdResult<Vec<NetworkInterface>> {
+#[specta::specta]
+pub fn get_network_interfaces_info() -> CmdResult<Vec<crate::ipc::NetworkInterfaceView>> {
    use network_interface::{NetworkInterface, NetworkInterfaceConfig as _};

    let names = get_network_interfaces();
@@ -77,9 +78,22 @@ pub fn get_network_interfaces_info() -> CmdResult<Vec<NetworkInterface>> {

    for interface in interfaces {
        if names.contains(&interface.name) {
-            result.push(interface);
+            result.push(interface.into());
        }
    }

    Ok(result)
 }
+
+#[derive(serde::Serialize, specta::Type)]
+pub struct SystemProxy {
+    pub enable: bool,
+    pub server: String,
+    pub bypass: String,
+}
+
+#[derive(serde::Serialize, specta::Type)]
+pub struct AutoProxy {
+    pub enable: bool,
+    pub url: String,
+}
@@ -33,6 +33,7 @@ fn profile_import_error(err: &anyhow::Error) -> std::string::String {
 }

 #[tauri::command]
+#[specta::specta]
 pub async fn get_profiles() -> CmdResult<SharedDraft<IProfiles>> {
    let draft = Config::profiles().await;
    let data = draft.data_arc();
@@ -40,6 +41,7 @@ pub async fn get_profiles() -> CmdResult<SharedDraft<IProfiles>> {
 }

 #[tauri::command]
+#[specta::specta]
 pub async fn enhance_profiles() -> CmdResult<ValidationOutcome> {
    match feat::enhance_profiles().await {
        Ok(outcome) if outcome.is_valid() => {
@@ -65,6 +67,7 @@ pub async fn enhance_profiles() -> CmdResult<ValidationOutcome> {

 #[tauri::command]
 #[tracing::instrument(skip_all, level = "info", fields(url = %help::mask_url(&url), uid = tracing::field::Empty))]
+#[specta::specta]
 pub async fn import_profile(url: std::string::String, option: Option<PrfOption>) -> CmdResult {
    let item = &mut match PrfItem::from_url(&url, None, None, option.as_ref()).await {
        Ok(it) => it,
@@ -94,7 +97,10 @@ pub async fn import_profile(url: std::string::String, option: Option<PrfOption>)
 }

 #[tauri::command]
-pub async fn reorder_profile(active_id: String, over_id: String) -> CmdResult {
+#[specta::specta]
+pub async fn reorder_profile(active_id: std::string::String, over_id: std::string::String) -> CmdResult {
+    let active_id: String = active_id.into();
+    let over_id: String = over_id.into();
    match profiles_reorder_safe(&active_id, &over_id).await {
        Ok(_) => {
            logging!(info, Type::Cmd, "重新排序配置文件: {} -> {}", active_id, over_id);
@@ -114,16 +120,16 @@ pub async fn reorder_profile(active_id: String, over_id: String) -> CmdResult {
 }

 #[tauri::command]
-pub async fn create_profile(item: PrfItem, file_data: Option<String>) -> CmdResult {
+#[specta::specta]
+pub async fn create_profile(item: ProfileCreate, file_data: Option<std::string::String>) -> CmdResult {
+    let item: PrfItem = item.into();
+    let file_data = file_data.map(String::from);
    match profiles_append_item_with_filedata_safe(&item, file_data).await {
        Ok(_) => {
            profiles_save_file_safe()
                .await
                .with_error_code("PROFILE_CREATE_FAILED")?;
            logging_error!(Type::Timer, Timer::global().refresh().await);
-            if let Some(uid) = &item.uid {
-                handle::Handle::notify_profile_changed(uid);
-            }
            Ok(())
        }
        Err(err) => Err(coded_error("PROFILE_CREATE_FAILED", err)),
@@ -131,7 +137,9 @@ pub async fn create_profile(item: PrfItem, file_data: Option<String>) -> CmdResu
 }

 #[tauri::command]
-pub async fn update_profile(index: String, option: Option<PrfOption>) -> CmdResult {
+#[specta::specta]
+pub async fn update_profile(index: std::string::String, option: Option<PrfOption>) -> CmdResult {
+    let index: String = index.into();
    match feat::update_profile(&index, option.as_ref(), true).await {
        Ok(_) => Ok(()),
        Err(e) => {
@@ -142,7 +150,9 @@ pub async fn update_profile(index: String, option: Option<PrfOption>) -> CmdResu
 }

 #[tauri::command]
-pub async fn delete_profile(index: String) -> CmdResult {
+#[specta::specta]
+pub async fn delete_profile(index: std::string::String) -> CmdResult {
+    let index: String = index.into();
    let profile_write_guard = PROFILE_WRITE_LOCK.lock().await;

    let profiles = Config::profiles().await;
@@ -313,9 +323,85 @@ async fn perform_config_update(
    }
 }

+#[derive(Default, serde::Deserialize, specta::Type)]
+#[serde(default)]
+pub struct ProfileSelection {
+    #[specta(type = Option<std::string::String>)]
+    pub current: Option<String>,
+}
+
+#[derive(Default, serde::Deserialize, specta::Type)]
+#[serde(default)]
+pub struct ProfileCreate {
+    #[serde(rename = "type")]
+    #[specta(type = Option<std::string::String>)]
+    pub itype: Option<String>,
+    #[specta(type = Option<std::string::String>)]
+    pub name: Option<String>,
+    #[specta(type = Option<std::string::String>)]
+    pub desc: Option<String>,
+    #[specta(type = Option<std::string::String>)]
+    pub url: Option<String>,
+    pub option: Option<PrfOption>,
+}
+
+impl From<ProfileCreate> for PrfItem {
+    fn from(item: ProfileCreate) -> Self {
+        Self {
+            itype: item.itype,
+            name: item.name,
+            desc: item.desc,
+            url: item.url,
+            option: item.option,
+            ..Self::default()
+        }
+    }
+}
+
+#[derive(Default, serde::Deserialize, specta::Type)]
+#[serde(default)]
+pub struct ProfilePatch {
+    #[serde(rename = "type")]
+    #[specta(type = Option<std::string::String>)]
+    pub itype: Option<String>,
+    #[specta(type = Option<std::string::String>)]
+    pub name: Option<String>,
+    #[specta(type = Option<std::string::String>)]
+    pub desc: Option<String>,
+    #[specta(type = Option<std::string::String>)]
+    pub file: Option<String>,
+    #[specta(type = Option<std::string::String>)]
+    pub url: Option<String>,
+    pub selected: Option<Vec<crate::config::PrfSelected>>,
+    #[specta(type = Option<std::collections::BTreeMap<std::string::String, std::string::String>>)]
+    pub latency_test_urls: Option<std::collections::BTreeMap<String, String>>,
+    pub extra: Option<crate::config::PrfExtra>,
+    pub updated: Option<usize>,
+    pub option: Option<PrfOption>,
+}
+
+impl From<ProfilePatch> for PrfItem {
+    fn from(patch: ProfilePatch) -> Self {
+        Self {
+            itype: patch.itype,
+            name: patch.name,
+            desc: patch.desc,
+            file: patch.file,
+            url: patch.url,
+            selected: patch.selected,
+            latency_test_urls: patch.latency_test_urls,
+            extra: patch.extra,
+            updated: patch.updated,
+            option: patch.option,
+            ..Self::default()
+        }
+    }
+}
+
 #[tauri::command]
 #[tracing::instrument(skip_all, level = "info", fields(target = ?profiles.current))]
-pub async fn patch_profiles_config(profiles: IProfiles) -> CmdResult<ValidationOutcome> {
+#[specta::specta]
+pub async fn patch_profiles_config(profiles: ProfileSelection) -> CmdResult<ValidationOutcome> {
    if CURRENT_SWITCHING_PROFILE
        .compare_exchange(false, true, Ordering::Acquire, Ordering::Relaxed)
        .is_err()
@@ -325,11 +411,17 @@ pub async fn patch_profiles_config(profiles: IProfiles) -> CmdResult<ValidationO
    }
    let _profile_write_guard = PROFILE_WRITE_LOCK.lock().await;

+    let profiles = IProfiles {
+        current: profiles.current,
+        items: None,
+    };
    let target_profile = profiles.current.as_ref();

    let previous_profile = Config::profiles().await.data_arc().current.clone();

-    Config::profiles().await.edit_draft(|d| d.patch_config(&profiles));
+    Config::profiles().await.edit_draft(|d| {
+        d.patch_config(&profiles);
+    });

    perform_config_update(target_profile, previous_profile.as_ref())
        .await
@@ -337,15 +429,17 @@ pub async fn patch_profiles_config(profiles: IProfiles) -> CmdResult<ValidationO
 }

 pub async fn patch_profiles_config_by_profile_index(profile_index: String) -> CmdResult<ValidationOutcome> {
-    let profiles = IProfiles {
+    let profiles = ProfileSelection {
        current: Some(profile_index),
-        items: None,
    };
    patch_profiles_config(profiles).await
 }

 #[tauri::command]
-pub async fn patch_profile(index: String, profile: PrfItem) -> CmdResult {
+#[specta::specta]
+pub async fn patch_profile(index: std::string::String, profile: ProfilePatch) -> CmdResult {
+    let profile: PrfItem = profile.into();
+    let index: String = index.into();
    let profiles = Config::profiles().await;
    let should_refresh_timer = if let Ok(old_profile) = profiles.latest_arc().get_item(&index)
        && let Some(new_option) = profile.option.as_ref()
@@ -385,7 +479,8 @@ pub async fn patch_profile(index: String, profile: PrfItem) -> CmdResult {
 }

 #[tauri::command]
-pub async fn view_profile(index: String) -> CmdResult {
+#[specta::specta]
+pub async fn view_profile(index: std::string::String) -> CmdResult {
    let profiles = Config::profiles().await;
    let profiles_ref = profiles.latest_arc();
    let file = profiles_ref
@@ -409,7 +504,8 @@ pub async fn view_profile(index: String) -> CmdResult {
 }

 #[tauri::command]
-pub async fn read_profile_file(index: String) -> CmdResult<String> {
+#[specta::specta]
+pub async fn read_profile_file(index: std::string::String) -> CmdResult<std::string::String> {
    let item = {
        let profiles = Config::profiles().await;
        let profiles_ref = profiles.latest_arc();
@@ -429,7 +525,7 @@ pub async fn read_profile_file(index: String) -> CmdResult<String> {
            .join(file.as_str());
        match tokio::fs::try_exists(&path).await {
            Ok(true) => {}
-            Ok(false) => return Ok(String::new()),
+            Ok(false) => return Ok(std::string::String::new()),
            Err(err) => {
                return Err(coded_error(
                    "PROFILE_READ_FAILED",
@@ -440,11 +536,12 @@ pub async fn read_profile_file(index: String) -> CmdResult<String> {
    }

    let data = item.read_file().await.with_error_code("PROFILE_READ_FAILED")?;
-    Ok(data)
+    Ok(data.into())
 }

 #[tauri::command]
-pub async fn get_next_update_time(uid: String) -> CmdResult<Option<i64>> {
+#[specta::specta]
+pub async fn get_next_update_time(uid: std::string::String) -> CmdResult<Option<i64>> {
    let timer = Timer::global();
    let next_time = timer.get_next_update_time(&uid).await;
    Ok(next_time)
@@ -18,6 +18,7 @@ use std::{

 /// Merges one selection pair into fresh backend state to avoid stale-list overwrites.
 #[tauri::command]
+#[specta::specta]
 pub async fn record_selected_node(group_name: String, node: String) -> CmdResult<()> {
    crate::config::profiles::record_selected_node(&group_name, &node)
        .await
@@ -25,6 +26,7 @@ pub async fn record_selected_node(group_name: String, node: String) -> CmdResult
 }

 #[tauri::command]
+#[specta::specta]
 pub async fn forget_selected_node(group_name: String) -> CmdResult<()> {
    crate::config::profiles::forget_selected_node(&group_name)
        .await
@@ -104,6 +106,7 @@ fn runtime_group_scopes(config: Option<&Mapping>) -> BTreeMap<String, GroupScope
 }

 #[tauri::command]
+#[specta::specta]
 pub async fn get_proxy_view() -> CmdResult<ProxyViewV1> {
    proxy_view(None).await
 }
@@ -135,6 +138,7 @@ pub(crate) async fn proxy_view(provider_timeout: Option<std::time::Duration>) ->
 }

 #[tauri::command]
+#[specta::specta]
 pub async fn sync_tray_proxy_selection() -> CmdResult<()> {
    if TRAY_SYNC_RUNNING
        .compare_exchange(false, true, Ordering::AcqRel, Ordering::Acquire)
@@ -1,44 +1,57 @@
 use super::CmdResult;
 use crate::{cmd::StringifyErr as _, config::Config, core::CoreManager, utils::yaml_emitter};
 use anyhow::{Context as _, anyhow};
-use clash_verge_logging::{Type, logging};
-use serde_yaml_ng::Mapping;
 use smartstring::alias::String;
 use std::collections::HashMap;

 #[tauri::command]
-pub async fn get_runtime_config() -> CmdResult<Option<Mapping>> {
-    Ok(Config::runtime().await.latest_arc().config.clone())
+#[specta::specta]
+pub async fn get_runtime_config() -> CmdResult<Option<crate::ipc::YamlMapping>> {
+    Ok(Config::runtime()
+        .await
+        .latest_arc()
+        .config
+        .clone()
+        .map(crate::ipc::YamlMapping))
 }

 #[tauri::command]
-pub async fn get_runtime_yaml() -> CmdResult<String> {
+#[specta::specta]
+pub async fn get_runtime_yaml() -> CmdResult<std::string::String> {
    let runtime = Config::runtime().await;
    let runtime = runtime.latest_arc();

    let config = runtime.config.as_ref();
    config
        .ok_or_else(|| anyhow!("failed to parse config to yaml file"))
-        .and_then(|config| {
-            yaml_emitter::to_mihomo_config_string(config)
-                .context("failed to convert config to yaml")
-                .map(|s| s.into())
-        })
+        .and_then(|config| yaml_emitter::to_mihomo_config_string(config).context("failed to convert config to yaml"))
        .stringify_err()
 }

 #[tauri::command]
-pub async fn get_runtime_logs() -> CmdResult<HashMap<String, Vec<(String, String)>>> {
-    Ok(Config::runtime().await.latest_arc().chain_logs.clone())
+#[specta::specta]
+pub async fn get_runtime_logs() -> CmdResult<RuntimeLogs> {
+    Ok(RuntimeLogs(Config::runtime().await.latest_arc().chain_logs.clone()))
+}
+
+#[derive(serde::Serialize, specta::Type)]
+#[serde(transparent)]
+pub struct RuntimeLogs(
+    #[specta(type = HashMap<std::string::String, Vec<(std::string::String, std::string::String)>>)]
+    HashMap<String, Vec<(String, String)>>,
+);
+
+#[tauri::command]
+#[specta::specta]
+pub fn take_discarded_keys_notice() -> Option<std::string::String> {
+    crate::enhance::take_discarded_keys_notice().map(Into::into)
 }

 #[tauri::command]
-pub fn take_discarded_keys_notice() -> Option<String> {
-    crate::enhance::take_discarded_keys_notice()
-}
-
-#[tauri::command]
-pub async fn get_runtime_proxy_chain_config(proxy_chain_exit_node: String) -> CmdResult<String> {
+#[specta::specta]
+pub async fn get_runtime_proxy_chain_config(
+    proxy_chain_exit_node: std::string::String,
+) -> CmdResult<std::string::String> {
    let runtime = Config::runtime().await;
    let runtime = runtime.latest_arc();

@@ -59,7 +72,7 @@ pub async fn get_runtime_proxy_chain_config(proxy_chain_exit_node: String) -> Cm
                false
            }
        }) {
-            proxies_chain.push(proxy.to_owned());
+            proxies_chain.push(proxy);
            proxy_name = proxy.get("dialer-proxy").map(|x| x.as_str());
        }

@@ -68,18 +81,17 @@ pub async fn get_runtime_proxy_chain_config(proxy_chain_exit_node: String) -> Cm
            .find(|proxy| proxy.get("name").map(|x| x.as_str()) == proxy_name)
            && !proxies_chain.is_empty()
        {
-            proxies_chain.push(entry_proxy.to_owned());
+            proxies_chain.push(entry_proxy);
        }

        proxies_chain.reverse();

-        let mut config: HashMap<String, Vec<serde_yaml_ng::Value>> = HashMap::new();
+        let mut config: HashMap<String, Vec<&serde_yaml_ng::Value>> = HashMap::new();

        config.insert("proxies".into(), proxies_chain);

        yaml_emitter::to_mihomo_config_string(&config)
            .context("YAML generation failed")
-            .map(|s| s.into())
            .stringify_err()
    } else {
        Err("failed to get proxies or proxy-groups".into())
@@ -87,20 +99,13 @@ pub async fn get_runtime_proxy_chain_config(proxy_chain_exit_node: String) -> Cm
 }

 #[tauri::command]
-pub async fn update_proxy_chain_config_in_runtime(proxy_chain_config: Option<serde_yaml_ng::Value>) -> CmdResult<()> {
-    match CoreManager::global()
+#[specta::specta]
+pub async fn update_proxy_chain_config_in_runtime(
+    proxy_chain_config: Option<crate::ipc::YamlValue>,
+) -> CmdResult<crate::core::validate::ValidationOutcome> {
+    let proxy_chain_config = proxy_chain_config.map(|value| value.0);
+    CoreManager::global()
        .update_runtime_config(|d| d.update_proxy_chain_config(proxy_chain_config))
        .await
-    {
-        Ok(outcome) if outcome.is_valid() => {}
-        Ok(outcome) => logging!(
-            warn,
-            Type::Core,
-            "Failed to apply runtime proxy chain config: {}",
-            outcome
-        ),
-        Err(err) => logging!(error, Type::Core, "Failed to apply runtime proxy chain config: {err:#}"),
-    }
-
-    Ok(())
+        .stringify_err()
 }
@@ -16,7 +16,13 @@ use tokio::fs;

 /// 保存profiles的配置
 #[tauri::command]
-pub async fn save_profile_file(index: String, file_data: Option<String>) -> CmdResult<ValidationOutcome> {
+#[specta::specta]
+pub async fn save_profile_file(
+    index: std::string::String,
+    file_data: Option<std::string::String>,
+) -> CmdResult<ValidationOutcome> {
+    let index: String = index.into();
+    let file_data = file_data.map(String::from);
    let file_data = match file_data {
        Some(d) => d,
        None => return Ok(ValidationOutcome::Valid),
@@ -8,11 +8,11 @@ use crate::{
    },
 };

-#[derive(Debug, PartialEq, Eq, serde::Serialize)]
+#[derive(Debug, PartialEq, Eq, serde::Serialize, specta::Type)]
 #[serde(tag = "status", rename_all = "camelCase")]
 pub enum ServiceInstallOutcome {
    Installed,
-    #[cfg(any(windows, test))]
+    #[cfg_attr(not(any(windows, test)), allow(dead_code))]
    Sidecar {
        reason: String,
    },
@@ -82,11 +82,13 @@ where
 }

 #[tauri::command]
+#[specta::specta]
 pub async fn install_service() -> CmdResult<ServiceInstallOutcome> {
    execute_service_operation_sync(ServiceStatus::InstallRequired, "SERVICE_INSTALL_FAILED").await
 }

 #[tauri::command]
+#[specta::specta]
 pub async fn uninstall_service() -> CmdResult {
    CoreManager::global()
        .uninstall_service_and_start_sidecar()
@@ -95,16 +97,19 @@ pub async fn uninstall_service() -> CmdResult {
 }

 #[tauri::command]
+#[specta::specta]
 pub async fn reinstall_service() -> CmdResult<ServiceInstallOutcome> {
    execute_service_operation_sync(ServiceStatus::ReinstallRequired, "SERVICE_REINSTALL_FAILED").await
 }

 #[tauri::command]
+#[specta::specta]
 pub async fn repair_service() -> CmdResult<ServiceInstallOutcome> {
    execute_service_operation_sync(ServiceStatus::ForceReinstallRequired, "SERVICE_REPAIR_FAILED").await
 }

 #[tauri::command]
+#[specta::specta]
 pub async fn continue_with_sidecar() -> CmdResult {
    crate::core::CoreManager::global()
        .continue_with_sidecar(None)
@@ -113,31 +118,37 @@ pub async fn continue_with_sidecar() -> CmdResult {
 }

 #[tauri::command]
+#[specta::specta]
 pub fn get_sidecar_failure() -> crate::core::notification::SidecarFailureSnapshot {
    crate::core::notification::sidecar_failure_snapshot()
 }

 #[tauri::command]
+#[specta::specta]
 pub fn take_service_fallback_notice() -> Option<crate::core::service::ServiceFallbackNotice> {
    crate::core::service::take_service_fallback_notice()
 }

 #[tauri::command]
+#[specta::specta]
 pub fn get_core_startup_error() -> Option<crate::core::manager::CoreFailure> {
    crate::core::CoreManager::global().get_startup_error()
 }

 #[tauri::command]
+#[specta::specta]
 pub fn take_service_repair_notice() -> bool {
    crate::core::service::take_service_repair_notice()
 }

 #[tauri::command]
+#[specta::specta]
 pub fn take_service_owner_notice() -> Option<String> {
    crate::core::service::take_service_owner_notice()
 }

 #[tauri::command]
+#[specta::specta]
 pub fn sync_runtime_providers() {
    if matches!(*CoreManager::global().get_running_mode(), RunningMode::Service) {
        request_runtime_provider_sync(timing::RUNTIME_PROVIDER_SETTLE);
@@ -5,11 +5,13 @@ use crate::core::{

 /// Returns one coherent core/service snapshot instead of independently refreshed state.
 #[tauri::command]
+#[specta::specta]
 pub async fn get_runtime_state() -> Result<RunStateView, String> {
    Ok(RUN_STATE.settled().await.to_view())
 }

 #[tauri::command]
+#[specta::specta]
 pub async fn get_pending_failures() -> Vec<PendingFailure> {
    notification::pending_failures()
 }
@@ -22,6 +22,7 @@ mod platform {
 }

 #[tauri::command]
+#[specta::specta]
 pub async fn invoke_uwp_tool() -> CmdResult {
    platform::invoke_uwp_tool()
 }
@@ -9,12 +9,14 @@ use clash_verge_draft::SharedDraft;

 /// 获取Verge配置
 #[tauri::command]
+#[specta::specta]
 pub async fn get_verge_config() -> CmdResult<SharedDraft<IVerge>> {
    feat::fetch_verge_config().await.stringify_err()
 }

 /// 修改Verge配置
 #[tauri::command]
+#[specta::specta]
 pub async fn patch_verge_config(payload: IVerge) -> CmdResult {
    let operation = system_proxy_operation(&payload);
    let result = match operation {
@@ -4,11 +4,18 @@ use crate::{
    config::{Config, IVerge},
    core, feat,
 };
-use reqwest_dav::list_cmd::ListFile;
 use smartstring::alias::String;

 #[tauri::command]
-pub async fn save_webdav_config(url: String, username: String, password: String) -> CmdResult<()> {
+#[specta::specta]
+pub async fn save_webdav_config(
+    url: std::string::String,
+    username: std::string::String,
+    password: std::string::String,
+) -> CmdResult<()> {
+    let url: String = url.into();
+    let username: String = username.into();
+    let password: String = password.into();
    let patch = IVerge {
        webdav_url: Some(url),
        webdav_username: Some(username),
@@ -25,22 +32,31 @@ pub async fn save_webdav_config(url: String, username: String, password: String)
 }

 #[tauri::command]
+#[specta::specta]
 pub async fn create_webdav_backup() -> CmdResult<()> {
    feat::create_backup_and_upload_webdav().await.stringify_err()
 }

 #[tauri::command]
-pub async fn list_webdav_backup() -> CmdResult<Vec<ListFile>> {
-    feat::list_wevdav_backup().await.stringify_err()
+#[specta::specta]
+pub async fn list_webdav_backup() -> CmdResult<Vec<crate::ipc::WebDavFile>> {
+    feat::list_wevdav_backup()
+        .await
+        .map(|files| files.into_iter().map(Into::into).collect())
+        .stringify_err()
 }

 #[tauri::command]
-pub async fn delete_webdav_backup(filename: String) -> CmdResult<()> {
+#[specta::specta]
+pub async fn delete_webdav_backup(filename: std::string::String) -> CmdResult<()> {
+    let filename: String = filename.into();
    feat::delete_webdav_backup(filename).await.stringify_err()
 }

 #[tauri::command]
-pub async fn restore_webdav_backup(filename: String) -> CmdResult<()> {
+#[specta::specta]
+pub async fn restore_webdav_backup(filename: std::string::String) -> CmdResult<()> {
+    let filename: String = filename.into();
    feat::restore_webdav_backup(filename)
        .await
        .map_err(|error| super::proxy_aware_error(&error))
@@ -308,7 +308,7 @@ impl IClashTemp {
    }
 }

-#[derive(Default, Debug, Clone, Deserialize, Serialize, PartialEq, Eq)]
+#[derive(Default, Debug, Clone, Deserialize, Serialize, PartialEq, Eq, specta::Type)]
 pub struct ClashInfo {
    /// clash core port
    pub mixed_port: u16,
@@ -364,14 +364,14 @@ fn test_clash_info() {
    assert_eq!(get_case(8888, "192.168.1.1:80800"), get_result(8888, "127.0.0.1:9097"));
 }

-#[derive(Default, Debug, Clone, Deserialize, Serialize, PartialEq, Eq)]
+#[derive(Default, Debug, Clone, Deserialize, Serialize, PartialEq, Eq, specta::Type)]
 #[serde(rename_all = "kebab-case")]
 pub struct IClashExternalControllerCors {
    pub allow_origins: Option<Vec<String>>,
    pub allow_private_network: Option<bool>,
 }

-#[derive(Default, Debug, Clone, Deserialize, Serialize, PartialEq, Eq)]
+#[derive(Default, Debug, Clone, Deserialize, Serialize, PartialEq, Eq, specta::Type)]
 #[serde(rename_all = "kebab-case")]
 pub struct IClash {
    pub mixed_port: Option<u16>,
@@ -387,7 +387,7 @@ pub struct IClash {
    pub external_controller_cors: Option<IClashExternalControllerCors>,
 }

-#[derive(Default, Debug, Clone, Deserialize, Serialize, PartialEq, Eq)]
+#[derive(Default, Debug, Clone, Deserialize, Serialize, PartialEq, Eq, specta::Type)]
 #[serde(rename_all = "kebab-case")]
 pub struct IClashTUN {
    pub enable: Option<bool>,
@@ -397,7 +397,7 @@ pub struct IClashTUN {
    pub dns_hijack: Option<Vec<String>>,
 }

-#[derive(Default, Debug, Clone, Deserialize, Serialize, PartialEq, Eq)]
+#[derive(Default, Debug, Clone, Deserialize, Serialize, PartialEq, Eq, specta::Type)]
 #[serde(rename_all = "kebab-case")]
 pub struct IClashDNS {
    pub enable: Option<bool>,
@@ -414,7 +414,7 @@ pub struct IClashDNS {
    pub nameserver_policy: Option<Vec<String>>,
 }

-#[derive(Default, Debug, Clone, Deserialize, Serialize, PartialEq, Eq)]
+#[derive(Default, Debug, Clone, Deserialize, Serialize, PartialEq, Eq, specta::Type)]
 #[serde(rename_all = "kebab-case")]
 pub struct IClashFallbackFilter {
    pub geoip: Option<bool>,
@@ -106,10 +106,11 @@ impl DnsOverrideState {
    }
 }

-#[derive(Debug, Clone, Default, Deserialize, Serialize)]
+#[derive(Debug, Clone, Default, Deserialize, Serialize, specta::Type)]
 pub struct ProfileDnsSettings {
    pub enabled: bool,
    #[serde(default, skip_serializing_if = "Option::is_none")]
+    #[specta(type = Option<std::string::String>)]
    pub confirmation: Option<String>,
 }

@@ -27,28 +27,34 @@ pub(super) fn normalize_profile_home_url(raw: &str) -> Option<String> {
    Some(url.to_string().into())
 }

-#[derive(Debug, Clone, Deserialize, Serialize, Default)]
+#[derive(Debug, Clone, Deserialize, Serialize, Default, specta::Type)]
+#[serde(default)]
 pub struct PrfItem {
+    #[specta(type = Option<std::string::String>)]
    pub uid: Option<String>,

    /// enum value: remote | local | script | merge
    #[serde(rename = "type")]
+    #[specta(type = Option<std::string::String>)]
    pub itype: Option<String>,
-
+    #[specta(type = Option<std::string::String>)]
    pub name: Option<String>,
-
+    #[specta(type = Option<std::string::String>)]
    pub file: Option<String>,

    #[serde(skip_serializing_if = "Option::is_none")]
+    #[specta(type = Option<std::string::String>)]
    pub desc: Option<String>,

    #[serde(skip_serializing_if = "Option::is_none")]
+    #[specta(type = Option<std::string::String>)]
    pub url: Option<String>,

    #[serde(skip_serializing_if = "Option::is_none")]
    pub selected: Option<Vec<PrfSelected>>,

    #[serde(skip_serializing_if = "Option::is_none")]
+    #[specta(type = Option<std::collections::BTreeMap<std::string::String, std::string::String>>)]
    pub latency_test_urls: Option<std::collections::BTreeMap<String, String>>,

    #[serde(skip_serializing_if = "Option::is_none")]
@@ -60,19 +66,24 @@ pub struct PrfItem {
    pub option: Option<PrfOption>,

    #[serde(skip_serializing_if = "Option::is_none")]
+    #[specta(type = Option<std::string::String>)]
    pub home: Option<String>,

    #[serde(skip)]
+    #[specta(type = Option<std::string::String>)]
    pub file_data: Option<String>,
 }

-#[derive(Default, Debug, Clone, Deserialize, Serialize, PartialEq, Eq)]
+#[derive(Default, Debug, Clone, Deserialize, Serialize, PartialEq, Eq, specta::Type)]
+#[serde(default)]
 pub struct PrfSelected {
+    #[specta(type = Option<std::string::String>)]
    pub name: Option<String>,
+    #[specta(type = Option<std::string::String>)]
    pub now: Option<String>,
 }

-#[derive(Default, Debug, Clone, Copy, Deserialize, Serialize)]
+#[derive(Default, Debug, Clone, Copy, Deserialize, Serialize, specta::Type)]
 pub struct PrfExtra {
    pub upload: u64,
    pub download: u64,
@@ -80,9 +91,11 @@ pub struct PrfExtra {
    pub expire: u64,
 }

-#[derive(Default, Debug, Clone, Deserialize, Serialize, PartialEq, Eq)]
+#[derive(Default, Debug, Clone, Deserialize, Serialize, PartialEq, Eq, specta::Type)]
+#[serde(default)]
 pub struct PrfOption {
    #[serde(skip_serializing_if = "Option::is_none")]
+    #[specta(type = Option<std::string::String>)]
    pub user_agent: Option<String>,

    #[serde(skip_serializing_if = "Option::is_none")]
@@ -105,15 +118,15 @@ pub struct PrfOption {

    #[serde(skip_serializing_if = "Option::is_none")]
    pub allow_auto_update: Option<bool>,
-
+    #[specta(type = Option<std::string::String>)]
    pub merge: Option<String>,
-
+    #[specta(type = Option<std::string::String>)]
    pub script: Option<String>,
-
+    #[specta(type = Option<std::string::String>)]
    pub rules: Option<String>,
-
+    #[specta(type = Option<std::string::String>)]
    pub proxies: Option<String>,
-
+    #[specta(type = Option<std::string::String>)]
    pub groups: Option<String>,
 }

@@ -48,8 +48,10 @@ const SELECTED_NODES_SETTLE_INTERVAL: Duration = Duration::from_secs(1);
 const SELECTED_NODES_FIRST_PASS_BUDGET: Duration = Duration::from_secs(3);

 /// Define the `profiles.yaml` schema
-#[derive(Default, Debug, Clone, Deserialize, Serialize)]
+#[derive(Default, Debug, Clone, Deserialize, Serialize, specta::Type)]
+#[serde(default)]
 pub struct IProfiles {
+    #[specta(type = Option<std::string::String>)]
    pub current: Option<String>,

    pub items: Option<Vec<PrfItem>>,
@@ -11,26 +11,30 @@ use serde::{Deserialize, Serialize};
 use smartstring::alias::String;

 /// ### `verge.yaml` schema
-#[derive(Default, Debug, Clone, Deserialize, Serialize)]
+#[derive(Default, Debug, Clone, Deserialize, Serialize, specta::Type)]
+#[serde(default)]
 pub struct IVerge {
    /// silent | error | warn | info | debug | trace
+    #[specta(type = Option<std::string::String>)]
    pub app_log_level: Option<String>,

    /// Maximum app log size in KiB.
    pub app_log_max_size: Option<u64>,

    pub app_log_max_count: Option<usize>,
-
+    #[specta(type = Option<std::string::String>)]
    pub language: Option<String>,

    /// `light` or `dark` or `system`
+    #[specta(type = Option<std::string::String>)]
    pub theme_mode: Option<String>,
-
+    #[specta(type = Option<std::string::String>)]
    pub tray_event: Option<String>,
-
+    #[specta(type = Option<std::string::String>)]
    pub env_type: Option<String>,
-
+    #[specta(type = Option<std::string::String>)]
    pub start_page: Option<String>,
+    #[specta(type = Option<std::string::String>)]
    pub startup_script: Option<String>,

    pub traffic_graph: Option<bool>,
@@ -48,18 +52,23 @@ pub struct IVerge {

    #[cfg(target_os = "macos")]
    #[serde(skip_serializing_if = "Option::is_none")]
+    #[specta(type = Option<std::string::String>)]
    pub tray_icon: Option<String>,

    #[serde(skip_serializing_if = "Option::is_none")]
+    #[specta(type = Option<std::string::String>)]
    pub menu_icon: Option<String>,

    #[serde(skip_serializing_if = "Option::is_none")]
+    #[specta(type = Option<Vec<std::string::String>>)]
    pub menu_order: Option<Vec<String>>,

    #[serde(skip_serializing_if = "Option::is_none")]
+    #[specta(type = Option<std::string::String>)]
    pub proxy_group_tools_position: Option<String>,

    #[serde(skip_serializing_if = "Option::is_none")]
+    #[specta(type = Option<std::string::String>)]
    pub notice_position: Option<String>,

    pub collapse_navbar: Option<bool>,
@@ -84,39 +93,43 @@ pub struct IVerge {
    pub enable_dns_settings: Option<bool>,

    #[serde(default, skip_serializing_if = "std::collections::BTreeMap::is_empty")]
+    #[specta(type = std::collections::BTreeMap<std::string::String, super::dns::ProfileDnsSettings>)]
    pub profile_dns_settings: std::collections::BTreeMap<String, super::dns::ProfileDnsSettings>,

    pub use_default_bypass: Option<bool>,
-
+    #[specta(type = Option<std::string::String>)]
    pub system_proxy_bypass: Option<String>,

    pub proxy_guard_duration: Option<u64>,

    pub proxy_auto_config: Option<bool>,
-
+    #[specta(type = Option<std::string::String>)]
    pub pac_file_content: Option<String>,
-
+    #[specta(type = Option<std::string::String>)]
    pub proxy_host: Option<String>,

    pub theme_setting: Option<IVergeTheme>,
-
+    #[specta(type = Option<Vec<std::string::String>>)]
    pub web_ui_list: Option<Vec<String>>,

    #[serde(skip_serializing_if = "Option::is_none")]
+    #[specta(type = Option<std::string::String>)]
    pub clash_core: Option<String>,

    /// format: {func},{key}
    #[serde(skip_serializing_if = "Option::is_none")]
+    #[specta(type = Option<Vec<std::string::String>>)]
    pub hotkeys: Option<Vec<String>>,

    pub enable_global_hotkey: Option<bool>,

+    #[specta(type = Option<crate::ipc::JsonValue>)]
    pub home_cards: Option<serde_json::Value>,

    pub auto_close_connection: Option<bool>,

    pub auto_check_update: Option<bool>,
-
+    #[specta(type = Option<std::string::String>)]
    pub default_latency_test: Option<String>,

    pub default_latency_timeout: Option<i16>,
@@ -171,6 +184,7 @@ pub struct IVerge {
        skip_serializing_if = "Option::is_none",
        default
    )]
+    #[specta(type = Option<std::string::String>)]
    pub webdav_url: Option<String>,

    #[serde(
@@ -179,6 +193,7 @@ pub struct IVerge {
        skip_serializing_if = "Option::is_none",
        default
    )]
+    #[specta(type = Option<std::string::String>)]
    pub webdav_username: Option<String>,

    #[serde(
@@ -187,12 +202,14 @@ pub struct IVerge {
        skip_serializing_if = "Option::is_none",
        default
    )]
+    #[specta(type = Option<std::string::String>)]
    pub webdav_password: Option<String>,

    #[cfg(target_os = "macos")]
    pub enable_tray_speed: Option<bool>,

    #[serde(skip_serializing_if = "Option::is_none")]
+    #[specta(type = Option<std::string::String>)]
    pub tray_proxy_groups_display_mode: Option<String>,
    pub tray_inline_outbound_modes: Option<bool>,

@@ -209,27 +226,41 @@ pub struct IVerge {
    pub enable_external_controller: Option<bool>,
 }

-#[derive(Default, Debug, Clone, Deserialize, Serialize)]
+#[derive(Default, Debug, Clone, Deserialize, Serialize, specta::Type)]
+#[serde(default)]
 pub struct IVergeTestItem {
+    #[specta(type = Option<std::string::String>)]
    pub uid: Option<String>,
+    #[specta(type = Option<std::string::String>)]
    pub name: Option<String>,
+    #[specta(type = Option<std::string::String>)]
    pub icon: Option<String>,
+    #[specta(type = Option<std::string::String>)]
    pub url: Option<String>,
 }

-#[derive(Default, Debug, Clone, Deserialize, Serialize)]
+#[derive(Default, Debug, Clone, Deserialize, Serialize, specta::Type)]
+#[serde(default)]
 pub struct IVergeTheme {
+    #[specta(type = Option<std::string::String>)]
    pub primary_color: Option<String>,
+    #[specta(type = Option<std::string::String>)]
    pub secondary_color: Option<String>,
+    #[specta(type = Option<std::string::String>)]
    pub primary_text: Option<String>,
+    #[specta(type = Option<std::string::String>)]
    pub secondary_text: Option<String>,
-
+    #[specta(type = Option<std::string::String>)]
    pub info_color: Option<String>,
+    #[specta(type = Option<std::string::String>)]
    pub error_color: Option<String>,
+    #[specta(type = Option<std::string::String>)]
    pub warning_color: Option<String>,
+    #[specta(type = Option<std::string::String>)]
    pub success_color: Option<String>,
-
+    #[specta(type = Option<std::string::String>)]
    pub font_family: Option<String>,
+    #[specta(type = Option<std::string::String>)]
    pub css_injection: Option<String>,
 }

@@ -38,7 +38,7 @@ pub(crate) fn proxy_listener_keys() -> impl Iterator<Item = &'static str> {
    PROXY_LISTENERS.iter().map(|(key, _, _)| *key)
 }

-#[derive(Debug, Deserialize)]
+#[derive(Debug, Deserialize, specta::Type)]
 #[serde(rename_all = "camelCase")]
 pub struct ProxyPortSettings {
    pub mixed_port: u16,
@@ -48,27 +48,27 @@ pub struct ProxyPortSettings {
    pub tproxy: ToggleableProxyPort,
 }

-#[derive(Clone, Copy, Debug, Deserialize)]
+#[derive(Clone, Copy, Debug, Deserialize, specta::Type)]
 pub struct ToggleableProxyPort {
    pub enabled: bool,
    pub port: u16,
 }

-#[derive(Debug, Deserialize)]
+#[derive(Debug, Deserialize, specta::Type)]
 #[serde(rename_all = "camelCase")]
 pub struct ListenerProbe {
    pub address: String,
    pub transports: Vec<ListenerTransport>,
 }

-#[derive(Clone, Copy, Debug, Deserialize, PartialEq, Eq, Hash, Serialize)]
+#[derive(Clone, Copy, Debug, Deserialize, PartialEq, Eq, Hash, Serialize, specta::Type)]
 #[serde(rename_all = "lowercase")]
 pub enum ListenerTransport {
    Tcp,
    Udp,
 }

-#[derive(Debug, PartialEq, Eq, Serialize)]
+#[derive(Debug, PartialEq, Eq, Serialize, specta::Type)]
 #[serde(tag = "status", rename_all = "camelCase")]
 pub enum ListenerProbeOutcome {
    Available,
@@ -77,7 +77,7 @@ pub enum ListenerProbeOutcome {
    Indeterminate { message: String },
 }

-#[derive(Debug, PartialEq, Eq, Serialize)]
+#[derive(Debug, PartialEq, Eq, Serialize, specta::Type)]
 #[serde(tag = "status", rename_all = "camelCase")]
 pub enum SaveProxyPortsOutcome {
    Saved,
@@ -57,7 +57,7 @@ fn claim_core_readiness_generation(state: &AtomicU64, captured_generation: u64)
        .is_ok()
 }

-#[derive(Clone, Copy, Debug, serde::Serialize, PartialEq, Eq)]
+#[derive(Clone, Copy, Debug, serde::Serialize, PartialEq, Eq, specta::Type)]
 pub enum RunningMode {
    Service,
    Sidecar,
@@ -75,7 +75,7 @@ impl fmt::Display for RunningMode {
 }

 /// Why the Core is not running, kept until a Core starts again.
-#[derive(Clone, Debug, serde::Serialize, PartialEq, Eq)]
+#[derive(Clone, Debug, serde::Serialize, PartialEq, Eq, specta::Type)]
 #[serde(tag = "kind", content = "detail", rename_all = "camelCase")]
 pub enum CoreFailure {
    StartFailed(String),
@@ -52,10 +52,7 @@ impl Handle {
    /// Sent on every transition, so the frontend does not have to poll to notice that the Core
    /// stopped or that the Service came back.
    pub fn notify_run_state(state: &crate::core::runstate::RunStateView) {
-        let Ok(state) = serde_json::to_value(state) else {
-            return;
-        };
-        Self::send_event(FrontendEvent::RunStateChanged { state });
+        Self::send_event(FrontendEvent::RunStateChanged { state: state.clone() });
    }

    pub fn notify_profile_changed(profile_id: &String) {
@@ -3,9 +3,8 @@ pub use announce::{Refresh, announce};
 pub mod desktop;
 pub mod handle;
 pub mod notification;
-pub use notification::frontend_wire_contract;

-#[derive(Debug, Clone, Copy, PartialEq, Eq, serde::Serialize)]
+#[derive(Debug, Clone, Copy, PartialEq, Eq, serde::Serialize, specta::Type)]
 pub enum NoticeStatus {
    #[serde(rename = "info")]
    Info,
@@ -83,6 +82,7 @@ impl NoticeStatus {
    /// Every variant in golden order. The wire-contract export and the golden
    /// test both derive their variant list from here; expected strings stay
    /// hand-written in the test so renames cannot slip through.
+    #[cfg(test)]
    pub const ALL: [Self; 34] = [
        Self::Info,
        Self::ImportSubUrlOk,
@@ -1,6 +1,7 @@
 use super::NoticeStatus;
 use clash_verge_logging::{Type, logging};
 use parking_lot::Mutex;
+#[cfg(test)]
 use serde_json::json;
 use smartstring::alias::String;
 use std::sync::Arc;
@@ -31,7 +32,7 @@ pub enum FrontendEvent<'a> {
        uid: &'a String,
    },
    RunStateChanged {
-        state: serde_json::Value,
+        state: crate::core::runstate::RunStateView,
    },
    PendingFailuresChanged,
    #[cfg(target_os = "linux")]
@@ -42,7 +43,7 @@ pub enum FrontendEvent<'a> {

 /// Operation associated with a pending failure.
 #[allow(clippy::enum_variant_names)]
-#[derive(Debug, Clone, Copy, PartialEq, Eq, serde::Serialize)]
+#[derive(Debug, Clone, Copy, PartialEq, Eq, serde::Serialize, specta::Type)]
 #[serde(rename_all = "camelCase")]
 pub enum FailedOperation {
    SystemProxyEnable,
@@ -72,12 +73,14 @@ impl FailedOperation {
 }

 /// Latest unresolved failure for one stable code.
-#[derive(Debug, Clone, PartialEq, Eq, serde::Serialize)]
+#[derive(Debug, Clone, PartialEq, Eq, serde::Serialize, specta::Type)]
 #[serde(rename_all = "camelCase")]
 pub struct PendingFailure {
    /// Stable code used as the table key.
+    #[specta(type = std::string::String)]
    pub code: String,
    /// Full diagnostic context chain.
+    #[specta(type = std::string::String)]
    pub detail: String,
    pub operation: FailedOperation,
    /// Monotonic identity for repeated failures under the same code.
@@ -241,9 +244,10 @@ pub fn what_was_asked() -> FailedOperation {
 static PENDING_FAILURES: LazyLock<FailureTable> = LazyLock::new(FailureTable::default);

 /// A removal has a revision too, so a delayed read cannot restore a resolved failure.
-#[derive(Debug, Default, Clone, serde::Serialize)]
+#[derive(Debug, Default, Clone, serde::Serialize, specta::Type)]
 pub struct SidecarFailureSnapshot {
    pub revision: u64,
+    #[specta(type = Option<std::string::String>)]
    pub detail: Option<String>,
 }

@@ -327,24 +331,7 @@ impl NotificationSystem {
    }

    fn serialize_event(event: FrontendEvent) -> (&'static str, Result<serde_json::Value, serde_json::Error>) {
-        match event {
-            FrontendEvent::RefreshClash => ("verge://refresh-clash-config", Ok(json!("yes"))),
-            FrontendEvent::RefreshVerge => ("verge://refresh-verge-config", Ok(json!("yes"))),
-            FrontendEvent::RefreshProfiles => ("verge://refresh-profiles", Ok(json!("yes"))),
-            FrontendEvent::RefreshProxyConfig => ("verge://refresh-proxy-config", Ok(serde_json::Value::Null)),
-            FrontendEvent::NoticeMessage { status, message } => (
-                "verge://notice-message",
-                serde_json::to_value((status, message.as_ref())),
-            ),
-            FrontendEvent::ProfileChanged { current_profile_id } => ("profile-changed", Ok(json!(current_profile_id))),
-            FrontendEvent::TimerUpdated { profile_index } => ("verge://timer-updated", Ok(json!(profile_index))),
-            FrontendEvent::ProfileUpdateStarted { uid } => ("profile-update-started", Ok(json!({ "uid": uid }))),
-            FrontendEvent::ProfileUpdateCompleted { uid } => ("profile-update-completed", Ok(json!({ "uid": uid }))),
-            FrontendEvent::RunStateChanged { state } => ("verge://run-state-changed", Ok(state)),
-            FrontendEvent::PendingFailuresChanged => ("verge://pending-failures-changed", Ok(serde_json::Value::Null)),
-            #[cfg(target_os = "linux")]
-            FrontendEvent::ThemeChanged { theme } => ("tauri://theme-changed", serde_json::to_value(theme)),
-        }
+        serialize_frontend_event(event)
    }

    pub(crate) fn send_event(app_handle: AppHandle, event: FrontendEvent) {
@@ -381,20 +368,21 @@ mod wire_tests {
 }

 /// One sample per `FrontendEvent` variant, paired with its wire name and payload.
-/// Shared by the wire golden test and the contract export so the two cannot drift.
+#[cfg(test)]
 fn sample_frontend_events(uid: &String) -> Vec<(FrontendEvent<'_>, &'static str, serde_json::Value)> {
+    let state = crate::core::runstate::RunState {
+        health: Default::default(),
+        pending: None,
+        sidecar_allowed: false,
+        mode: crate::core::manager::RunningMode::NotRunning,
+        is_admin: false,
+        op_in_flight: false,
+    }
+    .to_view();
    vec![
-        (
-            FrontendEvent::RefreshClash,
-            "verge://refresh-clash-config",
-            json!("yes"),
-        ),
-        (
-            FrontendEvent::RefreshVerge,
-            "verge://refresh-verge-config",
-            json!("yes"),
-        ),
-        (FrontendEvent::RefreshProfiles, "verge://refresh-profiles", json!("yes")),
+        (FrontendEvent::RefreshClash, "verge://refresh-clash-config", json!(null)),
+        (FrontendEvent::RefreshVerge, "verge://refresh-verge-config", json!(null)),
+        (FrontendEvent::RefreshProfiles, "verge://refresh-profiles", json!(null)),
        (
            FrontendEvent::RefreshProxyConfig,
            "verge://refresh-proxy-config",
@@ -414,11 +402,9 @@ fn sample_frontend_events(uid: &String) -> Vec<(FrontendEvent<'_>, &'static str,
            json!("profile"),
        ),
        (
-            FrontendEvent::RunStateChanged {
-                state: json!({"running": true}),
-            },
+            FrontendEvent::RunStateChanged { state: state.clone() },
            "verge://run-state-changed",
-            json!({"running": true}),
+            serde_json::to_value(state).unwrap_or(serde_json::Value::Null),
        ),
        (
            FrontendEvent::PendingFailuresChanged,
@@ -445,24 +431,41 @@ fn sample_frontend_events(uid: &String) -> Vec<(FrontendEvent<'_>, &'static str,
    ]
 }

-/// Machine-readable form of the frontend wire contract: every event name with a
-/// serialized sample payload, plus every notice status string. The sample
-/// payload's JSON shape (string / null / array / object) is what the frontend
-/// generator maps to TypeScript types. `ThemeChanged` is a Tauri built-in
-/// linux-only window event, not part of this contract.
-pub fn frontend_wire_contract() -> serde_json::Value {
-    let uid = String::from("sample");
-    let events: Vec<_> = sample_frontend_events(&uid)
-        .into_iter()
-        .map(|(event, _, _)| {
-            let (name, payload) = NotificationSystem::serialize_event(event);
-            json!({ "name": name, "sample": payload.unwrap_or(serde_json::Value::Null) })
-        })
-        .collect();
-    let statuses: Vec<_> = NoticeStatus::ALL
-        .iter()
-        // A unit variant with a string rename cannot fail to serialize.
-        .filter_map(|status| serde_json::to_value(status).ok())
-        .collect();
-    json!({ "version": 1, "events": events, "noticeStatuses": statuses })
+macro_rules! frontend_events {
+    ($( $field:ident: $payload:ty = $name:literal, $pattern:pat => $value:expr; )*) => {
+        #[derive(serde::Serialize, specta::Type)]
+        pub struct VergeEventPayloads {
+            $(#[serde(rename = $name)] pub $field: $payload,)*
+        }
+
+        fn serialize_frontend_event(event: FrontendEvent) -> (&'static str, Result<serde_json::Value, serde_json::Error>) {
+            match event {
+                $($pattern => {
+                    let payload: $payload = $value;
+                    ($name, serde_json::to_value(payload))
+                },)*
+                #[cfg(target_os = "linux")]
+                FrontendEvent::ThemeChanged { theme } => ("tauri://theme-changed", serde_json::to_value(theme)),
+            }
+        }
+    };
+}
+
+frontend_events! {
+    refresh_clash: () = "verge://refresh-clash-config", FrontendEvent::RefreshClash => ();
+    refresh_verge: () = "verge://refresh-verge-config", FrontendEvent::RefreshVerge => ();
+    refresh_profiles: () = "verge://refresh-profiles", FrontendEvent::RefreshProfiles => ();
+    refresh_proxy: () = "verge://refresh-proxy-config", FrontendEvent::RefreshProxyConfig => ();
+    notice: (NoticeStatus, std::string::String) = "verge://notice-message", FrontendEvent::NoticeMessage { status, ref message } => (status, message.to_string());
+    profile_changed: std::string::String = "profile-changed", FrontendEvent::ProfileChanged { current_profile_id } => current_profile_id.to_string();
+    timer_updated: std::string::String = "verge://timer-updated", FrontendEvent::TimerUpdated { profile_index } => profile_index.to_string();
+    profile_started: ProfileUpdatePayload = "profile-update-started", FrontendEvent::ProfileUpdateStarted { uid } => ProfileUpdatePayload { uid: uid.to_string() };
+    profile_completed: ProfileUpdatePayload = "profile-update-completed", FrontendEvent::ProfileUpdateCompleted { uid } => ProfileUpdatePayload { uid: uid.to_string() };
+    run_state: crate::core::runstate::RunStateView = "verge://run-state-changed", FrontendEvent::RunStateChanged { state } => state;
+    pending_failures: () = "verge://pending-failures-changed", FrontendEvent::PendingFailuresChanged => ();
+}
+
+#[derive(serde::Serialize, specta::Type)]
+pub struct ProfileUpdatePayload {
+    pub uid: std::string::String,
 }
@@ -1,6 +1,6 @@
 use std::collections::{BTreeMap, BTreeSet, HashMap};

-use serde::Serialize;
+use serde::{Serialize, Serializer, ser::SerializeMap as _};
 use tauri_plugin_mihomo::models::{
    DelayHistory, Extra, Proxies, Proxy, ProxyProvider, ProxyProviders, ProxyType, VehicleType,
 };
@@ -20,7 +20,7 @@ pub struct GroupScope {

 pub struct ProxyViewBuilder;

-#[derive(Debug, PartialEq, Eq, Serialize)]
+#[derive(Debug, PartialEq, Eq, Serialize, specta::Type)]
 #[serde(rename_all = "camelCase")]
 pub struct ProxyViewV1 {
    pub schema_version: u8,
@@ -34,21 +34,21 @@ pub struct ProxyViewV1 {
    pub providers: Vec<ProxyProviderView>,
 }

-#[derive(Clone, Copy, Debug, PartialEq, Eq, Serialize)]
+#[derive(Clone, Copy, Debug, PartialEq, Eq, Serialize, specta::Type)]
 #[serde(rename_all = "lowercase")]
 pub enum ProxyViewOrderSource {
    Runtime,
    Fallback,
 }

-#[derive(Clone, Copy, Debug, PartialEq, Eq, Serialize)]
+#[derive(Clone, Copy, Debug, PartialEq, Eq, Serialize, specta::Type)]
 #[serde(rename_all = "lowercase")]
 pub enum ProxyViewProviderState {
    Ready,
    Unavailable,
 }

-#[derive(Debug, PartialEq, Eq, Serialize)]
+#[derive(Debug, PartialEq, Eq, Serialize, specta::Type)]
 pub struct ProxyCapabilities {
    pub udp: bool,
    pub xudp: bool,
@@ -57,13 +57,35 @@ pub struct ProxyCapabilities {
    pub smux: bool,
 }

-#[derive(Debug, PartialEq, Eq, Serialize)]
+#[derive(Serialize, specta::Type)]
+struct ProxyLatencyHistory<'a> {
+    #[specta(type = Vec<crate::ipc::DelayHistory>)]
+    history: &'a [DelayHistory],
+}
+
+fn serialize_proxy_latency_history<S: Serializer>(
+    extra: &HashMap<String, Extra>,
+    serializer: S,
+) -> Result<S::Ok, S::Error> {
+    let mut map = serializer.serialize_map(Some(extra.len()))?;
+    for (url, extra) in extra {
+        map.serialize_entry(
+            url,
+            &ProxyLatencyHistory {
+                history: &extra.history,
+            },
+        )?;
+    }
+    map.end()
+}
+
+#[derive(Debug, PartialEq, Eq, Serialize, specta::Type)]
 #[serde(rename_all = "camelCase")]
 pub struct ProxyGroupView {
    pub name: String,
    #[serde(rename = "type")]
+    #[specta(type = String)]
    pub proxy_type: ProxyType,
-    pub alive: bool,
    #[serde(skip_serializing_if = "Option::is_none")]
    pub now: Option<String>,
    #[serde(skip_serializing_if = "Option::is_none")]
@@ -74,22 +96,28 @@ pub struct ProxyGroupView {
    pub icon: Option<String>,
    #[serde(skip_serializing_if = "Option::is_none")]
    pub test_url: Option<String>,
+    #[specta(type = Vec<crate::ipc::DelayHistory>)]
    pub history: Vec<DelayHistory>,
+    #[serde(serialize_with = "serialize_proxy_latency_history")]
+    #[specta(type = HashMap<String, ProxyLatencyHistory<'static>>)]
    pub extra: HashMap<String, Extra>,
    #[serde(flatten)]
    pub capabilities: ProxyCapabilities,
    pub members: Vec<ProxyMemberRef>,
 }

-#[derive(Debug, PartialEq, Eq, Serialize)]
+#[derive(Debug, PartialEq, Eq, Serialize, specta::Type)]
 #[serde(rename_all = "camelCase")]
 pub struct ProxyNodeView {
    pub record_id: String,
    pub name: String,
    #[serde(rename = "type")]
+    #[specta(type = String)]
    pub proxy_type: ProxyType,
-    pub alive: bool,
+    #[specta(type = Vec<crate::ipc::DelayHistory>)]
    pub history: Vec<DelayHistory>,
+    #[serde(serialize_with = "serialize_proxy_latency_history")]
+    #[specta(type = HashMap<String, ProxyLatencyHistory<'static>>)]
    pub extra: HashMap<String, Extra>,
    #[serde(skip_serializing_if = "Option::is_none")]
    pub id: Option<String>,
@@ -104,7 +132,7 @@ pub struct ProxyNodeView {
    pub source: ProxyNodeSource,
 }

-#[derive(Debug, PartialEq, Eq, Serialize)]
+#[derive(Debug, PartialEq, Eq, Serialize, specta::Type)]
 #[serde(tag = "kind", rename_all = "camelCase")]
 pub enum ProxyNodeSource {
    Core {
@@ -119,7 +147,7 @@ pub enum ProxyNodeSource {
    },
 }

-#[derive(Debug, PartialEq, Eq, Serialize)]
+#[derive(Debug, PartialEq, Eq, Serialize, specta::Type)]
 #[serde(tag = "kind", rename_all = "camelCase")]
 pub enum ProxyMemberRef {
    Group {
@@ -136,7 +164,7 @@ pub enum ProxyMemberRef {
    },
 }

-#[derive(Clone, Copy, Debug, PartialEq, Eq, Serialize)]
+#[derive(Clone, Copy, Debug, PartialEq, Eq, Serialize, specta::Type)]
 pub enum ProxyMemberUnresolvedReason {
    #[serde(rename = "missing")]
    Missing,
@@ -146,7 +174,7 @@ pub enum ProxyMemberUnresolvedReason {
    ProviderUnavailable,
 }

-#[derive(Debug, PartialEq, Eq, Serialize)]
+#[derive(Debug, PartialEq, Eq, Serialize, specta::Type)]
 #[serde(rename_all = "camelCase")]
 pub struct ProxyProviderView {
    pub name: String,
@@ -158,7 +186,7 @@ pub struct ProxyProviderView {
    pub proxy_record_ids: Vec<String>,
 }

-#[derive(Clone, Copy, Debug, PartialEq, Eq, Serialize)]
+#[derive(Clone, Copy, Debug, PartialEq, Eq, Serialize, specta::Type)]
 pub enum ProxyProviderVehicleType {
    #[serde(rename = "HTTP")]
    Http,
@@ -168,7 +196,7 @@ pub enum ProxyProviderVehicleType {
    Inline,
 }

-#[derive(Debug, PartialEq, Eq, Serialize)]
+#[derive(Debug, PartialEq, Eq, Serialize, specta::Type)]
 pub struct ProxySubscriptionInfo {
    pub upload: i64,
    pub download: i64,
@@ -402,7 +430,6 @@ fn build_group(name: String, proxy: Proxy, resolver: &MemberResolver<'_>) -> Pro
        icon,
        now,
        test_url,
-        alive,
        history,
        extra,
        udp,
@@ -431,7 +458,6 @@ fn build_group(name: String, proxy: Proxy, resolver: &MemberResolver<'_>) -> Pro
    ProxyGroupView {
        name,
        proxy_type,
-        alive,
        now,
        fixed,
        hidden,
@@ -456,7 +482,6 @@ fn build_node(record_id: String, name: String, proxy: Proxy, source: ProxyNodeSo
        hidden,
        icon,
        test_url,
-        alive,
        history,
        extra,
        udp,
@@ -472,7 +497,6 @@ fn build_node(record_id: String, name: String, proxy: Proxy, source: ProxyNodeSo
        record_id,
        name,
        proxy_type,
-        alive,
        history,
        extra,
        id,
@@ -14,13 +14,13 @@ pub enum ServiceHealth {
 }

 impl ServiceHealth {
-    const fn kind(&self) -> &'static str {
+    const fn kind(&self) -> ServiceHealthKind {
        match self {
-            Self::Unknown => "unknown",
-            Self::Ready => "ready",
-            Self::NotInstalled => "notInstalled",
-            Self::VersionMismatch => "versionMismatch",
-            Self::Unavailable(_) => "unavailable",
+            Self::Unknown => ServiceHealthKind::Unknown,
+            Self::Ready => ServiceHealthKind::Ready,
+            Self::NotInstalled => ServiceHealthKind::NotInstalled,
+            Self::VersionMismatch => ServiceHealthKind::VersionMismatch,
+            Self::Unavailable(_) => ServiceHealthKind::Unavailable,
        }
    }

@@ -32,7 +32,7 @@ impl ServiceHealth {
    }
 }

-#[derive(Debug, Clone, Copy, PartialEq, Eq, serde::Serialize)]
+#[derive(Debug, Clone, Copy, PartialEq, Eq, serde::Serialize, specta::Type)]
 #[serde(rename_all = "camelCase")]
 pub enum PendingAction {
    Install,
@@ -118,11 +118,11 @@ impl RunState {
    }
 }

-#[derive(Debug, Clone, serde::Serialize)]
+#[derive(Debug, Clone, serde::Serialize, specta::Type)]
 #[serde(rename_all = "camelCase")]
 pub struct RunStateView {
    pub mode: RunningMode,
-    pub service: &'static str,
+    pub service: ServiceHealthKind,
    pub service_unavailable_reason: Option<String>,
    pub pending_action: Option<PendingAction>,
    pub sidecar_allowed: bool,
@@ -232,7 +232,7 @@ mod tests {

        let view = run_state.to_view();

-        assert_eq!(view.service, "unavailable");
+        assert_eq!(view.service, ServiceHealthKind::Unavailable);
        assert_eq!(view.service_unavailable_reason.as_deref(), Some("socket refused"));
        assert_eq!(view.pending_action, Some(PendingAction::Reinstall));
        assert!(view.tun_capable, "elevation alone makes TUN possible");
@@ -244,7 +244,7 @@ mod tests {
    fn a_healthy_view_reports_no_unavailable_reason() {
        let view = state(ServiceHealth::Ready, false, false).to_view();

-        assert_eq!(view.service, "ready");
+        assert_eq!(view.service, ServiceHealthKind::Ready);
        assert_eq!(view.service_unavailable_reason, None);
        assert!(view.service_usable);
        assert!(!view.service_needs_attention);
@@ -350,3 +350,13 @@ mod tests {
        assert!(settled.tun_should_be_disabled(true));
    }
 }
+
+#[derive(Debug, Clone, Copy, PartialEq, Eq, serde::Serialize, specta::Type)]
+#[serde(rename_all = "camelCase")]
+pub enum ServiceHealthKind {
+    Unknown,
+    Ready,
+    NotInstalled,
+    VersionMismatch,
+    Unavailable,
+}
@@ -44,7 +44,7 @@ static PENDING_SERVICE_REPAIR_NOTICE: AtomicBool = AtomicBool::new(false);
 static PENDING_SERVICE_OWNER_NOTICE: Mutex<Option<String>> = Mutex::new(None);

 /// Why the Service was unavailable when the core fell back to Sidecar.
-#[derive(Debug, Clone, PartialEq, Eq, serde::Serialize)]
+#[derive(Debug, Clone, PartialEq, Eq, serde::Serialize, specta::Type)]
 #[serde(tag = "kind", content = "reason", rename_all = "camelCase")]
 pub enum ServiceFallbackNotice {
    Unavailable,
@@ -261,7 +261,7 @@ impl Default for Sysopt {
 }

 #[cfg(target_os = "windows")]
-static DEFAULT_BYPASS: &str = "localhost;127.*;192.168.*;10.*;172.16.*;172.17.*;172.18.*;172.19.*;172.20.*;172.21.*;172.22.*;172.23.*;172.24.*;172.25.*;172.26.*;172.27.*;172.28.*;172.29.*;172.30.*;172.31.*;<local>";
+static DEFAULT_BYPASS: &str = "localhost;127.*;192.168.*;10.*;172.16.*;172.17.*;172.18.*;172.19.*;172.20.*;172.21.*;172.22.*;172.23.*;172.24.*;172.25.*;172.26.*;172.27.*;172.28.*;172.29.*;172.30.*;172.31.*;*.local;<local>";
 #[cfg(target_os = "windows")]
 static BYPASS_SEPARATOR: &str = ";";
 #[cfg(target_os = "linux")]
@@ -1160,7 +1160,15 @@ fn on_menu_event(_: &AppHandle, event: MenuEvent) {
                    logging!(error, Type::Tray, "Failed to close all connections from tray: {err}");
                }
            }
-            MenuIds::COPY_ENV => feat::copy_clash_env().await,
+            MenuIds::COPY_ENV => {
+                if let Err(err) = feat::copy_clash_env().await {
+                    logging!(
+                        error,
+                        Type::Tray,
+                        "Failed to copy proxy environment variables from tray: {err:#}"
+                    );
+                }
+            }
            MenuIds::CONF_DIR => {
                let _ = cmd::open_app_dir().await;
            }
@@ -34,7 +34,7 @@ impl SilentUpdater {
    }
 }

-#[derive(Serialize, Deserialize)]
+#[derive(Serialize, Deserialize, specta::Type)]
 struct UpdateCacheMeta {
    version: String,
    downloaded_at: String,
@@ -214,7 +214,7 @@ fn nsis_language_id(app_language: &str) -> &'static str {
 }

 /// Same wire shape as the updater plugin's JS `DownloadEvent`.
-#[derive(Clone, Serialize)]
+#[derive(Clone, Serialize, specta::Type)]
 #[serde(tag = "event", content = "data")]
 pub enum DownloadEvent {
    #[serde(rename_all = "camelCase")]
@@ -51,7 +51,7 @@ pub struct CoreConfigValidator {
    is_processing: AtomicBool,
 }

-#[derive(Debug, Clone, Copy, PartialEq, Eq, Serialize)]
+#[derive(Debug, Clone, Copy, PartialEq, Eq, Serialize, specta::Type)]
 #[serde(rename_all = "camelCase")]
 pub enum ValidationErrorKind {
    FileMissing,
@@ -94,7 +94,7 @@ impl ValidationErrorKind {
    }
 }

-#[derive(Debug, Clone, Copy, PartialEq, Eq, Serialize)]
+#[derive(Debug, Clone, Copy, PartialEq, Eq, Serialize, specta::Type)]
 #[serde(rename_all = "camelCase")]
 pub enum ValidationSkipReason {
    Exiting,
@@ -110,12 +110,18 @@ impl fmt::Display for ValidationSkipReason {
    }
 }

-#[derive(Debug, Clone, PartialEq, Eq, Serialize)]
+#[derive(Debug, Clone, PartialEq, Eq, Serialize, specta::Type)]
 #[serde(tag = "status", rename_all = "camelCase")]
 pub enum ValidationOutcome {
    Valid,
-    Invalid { kind: ValidationErrorKind, message: String },
-    Skipped { reason: ValidationSkipReason },
+    Invalid {
+        kind: ValidationErrorKind,
+        #[specta(type = std::string::String)]
+        message: String,
+    },
+    Skipped {
+        reason: ValidationSkipReason,
+    },
    Busy,
 }

@@ -16,10 +16,13 @@ use smartstring::alias::String;
 use std::path::PathBuf;
 use tokio::fs;

-#[derive(Debug, Serialize)]
+#[derive(Debug, Serialize, specta::Type)]
 pub struct LocalBackupFile {
+    #[specta(type = std::string::String)]
    pub filename: String,
+    #[specta(type = std::string::String)]
    pub path: String,
+    #[specta(type = std::string::String)]
    pub last_modified: String,
    pub content_length: u64,
 }
@@ -34,12 +34,10 @@ static STAGING_GENERATION: AtomicU64 = AtomicU64::new(0);
 /// `.rollback` and `.old` are fixed paths, so two upgrades must not overlap.
 static UPGRADE_LOCK: tokio::sync::Mutex<()> = tokio::sync::Mutex::const_new(());

-#[derive(Debug, serde::Serialize)]
+#[derive(Debug, serde::Serialize, specta::Type)]
 pub struct CoreUpgradeReport {
    /// False when the managed core was already at the latest version.
    pub upgraded: bool,
-    pub from: std::string::String,
-    pub to: std::string::String,
 }

 pub async fn upgrade_core(force: bool) -> Result<CoreUpgradeReport> {
@@ -62,11 +60,7 @@ pub async fn upgrade_core(force: bool) -> Result<CoreUpgradeReport> {
    logging!(debug, Type::Core, "core upgrade: latest version resolved via {proxy:?}");

    if !force && installed == latest {
-        return Ok(CoreUpgradeReport {
-            upgraded: false,
-            from: installed,
-            to: latest,
-        });
+        return Ok(CoreUpgradeReport { upgraded: false });
    }

    let package = download_package(proxy, alpha, &latest).await?;
@@ -150,11 +144,7 @@ pub async fn upgrade_core(force: bool) -> Result<CoreUpgradeReport> {
    #[cfg(windows)]
    let _ = std::fs::remove_file(target.with_extension("old"));

-    Ok(CoreUpgradeReport {
-        upgraded: true,
-        from: installed,
-        to: latest,
-    })
+    Ok(CoreUpgradeReport { upgraded: true })
 }

 /// Whether this upgrade handed bytes to the Service's approved core directory.
@@ -15,11 +15,14 @@ use crate::{
    utils::dirs,
 };

-#[derive(Serialize)]
+#[derive(Serialize, specta::Type)]
 #[serde(tag = "status", rename_all = "snake_case")]
 pub enum DnsOverrideOutcome {
    Applied,
-    ConfirmationRequired { source: String },
+    ConfirmationRequired {
+        #[specta(type = std::string::String)]
+        source: String,
+    },
 }

 pub async fn set_dns_override(
@@ -8,10 +8,13 @@ use std::path::{Component, Path, PathBuf};
 use tokio::fs;
 use tokio::io::AsyncWriteExt as _;

-#[derive(Debug, serde::Serialize, serde::Deserialize)]
+#[derive(Debug, serde::Serialize, serde::Deserialize, specta::Type)]
 pub struct IconInfo {
+    #[specta(type = std::string::String)]
    name: String,
+    #[specta(type = std::string::String)]
    previous_t: String,
+    #[specta(type = std::string::String)]
    current_t: String,
 }

@@ -11,6 +11,7 @@ use crate::{
        window_manager::WindowManager,
    },
 };
+use anyhow::Context as _;
 use clash_verge_logging::{Type, logging};
 use std::env;
 use tauri_plugin_clipboard_manager::ClipboardExt as _;
@@ -95,7 +96,7 @@ pub async fn toggle_tun_mode(not_save_file: Option<bool>) -> bool {
    }
 }

-pub async fn copy_clash_env() {
+pub async fn copy_clash_env() -> anyhow::Result<()> {
    let env_ip = env::var("CLASH_VERGE_REV_IP").ok();
    let verge_cfg = Config::verge().await.latest_arc();
    let ip = env_ip
@@ -133,12 +134,11 @@ pub async fn copy_clash_env() {
        }
        "fish" => format!("set -x http_proxy {http_proxy}; set -x https_proxy {http_proxy}"),
        _ => {
-            logging!(error, Type::ProxyMode, "copy_clash_env: Invalid env type! {env_type}");
-            return;
+            anyhow::bail!("Invalid environment variable format: {env_type}");
        }
    };

-    if let Err(err) = clipboard.write_text(&export_text) {
-        logging!(error, Type::ProxyMode, "Failed to write to clipboard: {err}");
-    }
+    clipboard
+        .write_text(export_text)
+        .context("Failed to write proxy environment variables to clipboard")
 }
@@ -0,0 +1,234 @@
+use crate::cmd;
+
+pub fn builder() -> tauri_specta::Builder<tauri::Wry> {
+    tauri_specta::Builder::new()
+        .types(&platform_types())
+        .commands(tauri_specta::collect_commands![
+            tauri_plugin_clash_verge_sysinfo::commands::get_system_info,
+            tauri_plugin_clash_verge_sysinfo::commands::get_app_uptime,
+            tauri_plugin_clash_verge_sysinfo::commands::export_diagnostic_info::<tauri::Wry>,
+            cmd::probe_listener,
+            cmd::save_proxy_ports,
+            cmd::get_sys_proxy,
+            cmd::get_auto_proxy,
+            cmd::get_embedded_server_port,
+            cmd::open_app_dir,
+            cmd::open_logs_dir,
+            cmd::open_core_dir,
+            cmd::get_network_interfaces,
+            cmd::get_system_hostname,
+            cmd::restart_app,
+            cmd::install_update,
+            cmd::cancel_update_download,
+            cmd::restart_core,
+            cmd::upgrade_clash_core,
+            cmd::get_runtime_state,
+            cmd::get_pending_failures,
+            cmd::get_sidecar_failure,
+            cmd::entry_lightweight_mode,
+            cmd::install_service,
+            cmd::uninstall_service,
+            cmd::reinstall_service,
+            cmd::repair_service,
+            cmd::continue_with_sidecar,
+            cmd::sync_runtime_providers,
+            cmd::get_clash_info,
+            cmd::patch_clash_config,
+            cmd::patch_clash_mode,
+            cmd::get_clash_mode,
+            cmd::change_clash_core,
+            cmd::get_runtime_config,
+            cmd::get_proxy_view,
+            cmd::get_runtime_yaml,
+            cmd::get_runtime_logs,
+            cmd::get_runtime_proxy_chain_config,
+            cmd::update_proxy_chain_config_in_runtime,
+            cmd::invoke_uwp_tool,
+            cmd::copy_clash_env,
+            cmd::sync_tray_proxy_selection,
+            cmd::record_selected_node,
+            cmd::forget_selected_node,
+            cmd::save_dns_config,
+            cmd::apply_dns_config,
+            cmd::set_dns_override,
+            cmd::take_dns_override_notice,
+            cmd::take_service_fallback_notice,
+            cmd::get_core_startup_error,
+            cmd::take_service_repair_notice,
+            cmd::take_service_owner_notice,
+            cmd::take_discarded_keys_notice,
+            cmd::get_dns_config_content,
+            cmd::validate_dns_config,
+            cmd::get_clash_logs,
+            cmd::get_verge_config,
+            cmd::patch_verge_config,
+            cmd::test_delay,
+            cmd::get_app_dir,
+            cmd::copy_icon_file,
+            cmd::download_icon_cache,
+            cmd::open_devtools,
+            cmd::exit_app,
+            cmd::get_network_interfaces_info,
+            cmd::get_profiles,
+            cmd::enhance_profiles,
+            cmd::patch_profiles_config,
+            cmd::view_profile,
+            cmd::patch_profile,
+            cmd::create_profile,
+            cmd::import_profile,
+            cmd::reorder_profile,
+            cmd::update_profile,
+            cmd::delete_profile,
+            cmd::read_profile_file,
+            cmd::save_profile_file,
+            cmd::get_next_update_time,
+            cmd::create_local_backup,
+            cmd::list_local_backup,
+            cmd::delete_local_backup,
+            cmd::restore_local_backup,
+            cmd::import_local_backup,
+            cmd::export_local_backup,
+            cmd::create_webdav_backup,
+            cmd::save_webdav_config,
+            cmd::list_webdav_backup,
+            cmd::delete_webdav_backup,
+            cmd::restore_webdav_backup,
+            cmd::get_unlock_items,
+            cmd::check_media_unlock,
+            cmd::check_media_unlock_item,
+        ])
+        .error_handling(tauri_specta::ErrorHandlingMode::Throw)
+        .dangerously_cast_bigints_to_number()
+        .typ::<crate::core::notify::notification::VergeEventPayloads>()
+}
+
+// Tauri transports YAML values as JSON; keep YAML storage out of the IPC type graph.
+#[derive(serde::Serialize, serde::Deserialize, specta::Type)]
+#[serde(transparent)]
+pub struct YamlMapping(#[specta(type = std::collections::HashMap<String, JsonValue>)] pub serde_yaml_ng::Mapping);
+
+#[derive(serde::Serialize, serde::Deserialize, specta::Type)]
+#[serde(transparent)]
+pub struct YamlValue(#[specta(type = JsonValue)] pub serde_yaml_ng::Value);
+
+#[derive(serde::Serialize, specta::Type)]
+pub struct WebDavFile {
+    pub href: String,
+    #[specta(type = String)]
+    pub last_modified: chrono::DateTime<chrono::Utc>,
+}
+
+impl From<reqwest_dav::list_cmd::ListFile> for WebDavFile {
+    fn from(file: reqwest_dav::list_cmd::ListFile) -> Self {
+        Self {
+            href: file.href,
+            last_modified: file.last_modified,
+        }
+    }
+}
+
+#[derive(serde::Serialize, specta::Type)]
+pub struct NetworkInterfaceView {
+    pub name: String,
+    pub addr: Vec<InterfaceAddress>,
+    pub mac_addr: Option<String>,
+}
+
+#[derive(serde::Serialize, serde::Deserialize, specta::Type)]
+pub enum InterfaceAddress {
+    V4(IpAddress),
+    V6(IpAddress),
+}
+
+#[derive(serde::Serialize, serde::Deserialize, specta::Type)]
+pub struct IpAddress {
+    pub ip: String,
+}
+
+impl From<network_interface::NetworkInterface> for NetworkInterfaceView {
+    fn from(interface: network_interface::NetworkInterface) -> Self {
+        Self {
+            name: interface.name,
+            addr: interface
+                .addr
+                .into_iter()
+                .map(|address| match address {
+                    network_interface::Addr::V4(address) => InterfaceAddress::V4(IpAddress {
+                        ip: address.ip.to_string(),
+                    }),
+                    network_interface::Addr::V6(address) => InterfaceAddress::V6(IpAddress {
+                        ip: address.ip.to_string(),
+                    }),
+                })
+                .collect(),
+            mac_addr: interface.mac_addr,
+        }
+    }
+}
+
+#[derive(serde::Serialize, serde::Deserialize, specta::Type)]
+pub struct DelayHistory {
+    pub time: String,
+    pub delay: u16,
+}
+
+fn platform_types() -> specta::Types {
+    use specta::datatype::{DataType, Fields};
+    let mut types = specta::Types::default().register::<crate::config::IVerge>();
+    <PlatformVergeFields as specta::Type>::definition(&mut types);
+    let platform = types
+        .into_unsorted_iter()
+        .find(|ty| ty.name == "PlatformVergeFields")
+        .and_then(|ty| ty.ty.clone());
+    let Some(DataType::Struct(platform)) = platform else {
+        unreachable!()
+    };
+    let Fields::Named(platform) = platform.fields else {
+        unreachable!()
+    };
+    types.iter_mut(|ty| {
+        if ty.name != "IVerge" {
+            return;
+        }
+        let Some(DataType::Struct(config)) = &mut ty.ty else {
+            return;
+        };
+        let Fields::Named(fields) = &mut config.fields else {
+            return;
+        };
+        fields
+            .fields
+            .retain(|(name, _)| !platform.fields.iter().any(|(platform_name, _)| name == platform_name));
+        fields.fields.extend(platform.fields.iter().cloned());
+    });
+    types
+}
+
+// These fields exist only on some hosts; IPC generation covers every desktop target.
+#[derive(serde::Serialize, serde::Deserialize, specta::Type)]
+struct PlatformVergeFields {
+    #[specta(optional)]
+    tray_icon: Option<String>,
+    #[specta(optional)]
+    verge_redir_port: Option<u16>,
+    #[specta(optional)]
+    verge_redir_enabled: Option<bool>,
+    #[specta(optional)]
+    verge_tproxy_port: Option<u16>,
+    #[specta(optional)]
+    verge_tproxy_enabled: Option<bool>,
+    #[specta(optional)]
+    enable_tray_speed: Option<bool>,
+}
+
+#[derive(serde::Serialize, serde::Deserialize, specta::Type)]
+#[serde(untagged)]
+pub enum JsonValue {
+    Null(()),
+    Bool(bool),
+    Number(f64),
+    String(String),
+    // Specta resolves fields in nested functions, where Self is unavailable.
+    Array(#[specta(type = Vec<JsonValue>)] Vec<Self>),
+    Object(#[specta(type = std::collections::HashMap<String, JsonValue>)] std::collections::HashMap<String, Self>),
+}
@@ -7,6 +7,7 @@ mod constants;
 mod core;
 mod enhance;
 mod feat;
+pub mod ipc;
 mod process;
 pub mod utils;

@@ -26,9 +27,6 @@ use tauri_plugin_deep_link::DeepLinkExt as _;

 pub static APP_HANDLE: OnceLock<AppHandle> = OnceLock::new();

-// Re-exported for src/bin/frontend-contract.rs; the wire contract stays owned
-// by core::notify.
-pub use crate::core::notify::frontend_wire_contract;
 /// Application initialization helper functions
 mod app_init {
    use super::*;
@@ -127,100 +125,10 @@ mod app_init {
    }

    pub fn generate_handlers() -> impl Fn(tauri::ipc::Invoke<tauri::Wry>) -> bool + Send + Sync + 'static {
-        tauri::generate_handler![
-            tauri_plugin_clash_verge_sysinfo::commands::get_system_info,
-            tauri_plugin_clash_verge_sysinfo::commands::get_app_uptime,
-            tauri_plugin_clash_verge_sysinfo::commands::export_diagnostic_info,
-            cmd::probe_listener,
-            cmd::save_proxy_ports,
-            cmd::get_sys_proxy,
-            cmd::get_auto_proxy,
-            cmd::get_embedded_server_port,
-            cmd::open_app_dir,
-            cmd::open_logs_dir,
-            cmd::open_core_dir,
-            cmd::get_network_interfaces,
-            cmd::get_system_hostname,
-            cmd::restart_app,
-            cmd::install_update,
-            cmd::cancel_update_download,
-            cmd::restart_core,
-            cmd::upgrade_clash_core,
-            cmd::get_runtime_state,
-            cmd::get_pending_failures,
-            cmd::get_sidecar_failure,
-            cmd::entry_lightweight_mode,
-            cmd::install_service,
-            cmd::uninstall_service,
-            cmd::reinstall_service,
-            cmd::repair_service,
-            cmd::continue_with_sidecar,
-            cmd::sync_runtime_providers,
-            cmd::get_clash_info,
-            cmd::patch_clash_config,
-            cmd::patch_clash_mode,
-            cmd::get_clash_mode,
-            cmd::change_clash_core,
-            cmd::get_runtime_config,
-            cmd::get_proxy_view,
-            cmd::get_runtime_yaml,
-            cmd::get_runtime_logs,
-            cmd::get_runtime_proxy_chain_config,
-            cmd::update_proxy_chain_config_in_runtime,
-            cmd::invoke_uwp_tool,
-            cmd::copy_clash_env,
-            cmd::sync_tray_proxy_selection,
-            cmd::record_selected_node,
-            cmd::forget_selected_node,
-            cmd::save_dns_config,
-            cmd::apply_dns_config,
-            cmd::set_dns_override,
-            cmd::take_dns_override_notice,
-            cmd::take_service_fallback_notice,
-            cmd::get_core_startup_error,
-            cmd::take_service_repair_notice,
-            cmd::take_service_owner_notice,
-            cmd::take_discarded_keys_notice,
-            cmd::get_dns_config_content,
-            cmd::validate_dns_config,
-            cmd::get_clash_logs,
-            cmd::get_verge_config,
-            cmd::patch_verge_config,
-            cmd::test_delay,
-            cmd::get_app_dir,
-            cmd::copy_icon_file,
-            cmd::download_icon_cache,
-            cmd::open_devtools,
-            cmd::exit_app,
-            cmd::get_network_interfaces_info,
-            cmd::get_profiles,
-            cmd::enhance_profiles,
-            cmd::patch_profiles_config,
-            cmd::view_profile,
-            cmd::patch_profile,
-            cmd::create_profile,
-            cmd::import_profile,
-            cmd::reorder_profile,
-            cmd::update_profile,
-            cmd::delete_profile,
-            cmd::read_profile_file,
-            cmd::save_profile_file,
-            cmd::get_next_update_time,
-            cmd::create_local_backup,
-            cmd::list_local_backup,
-            cmd::delete_local_backup,
-            cmd::restore_local_backup,
-            cmd::import_local_backup,
-            cmd::export_local_backup,
-            cmd::create_webdav_backup,
-            cmd::save_webdav_config,
-            cmd::list_webdav_backup,
-            cmd::delete_webdav_backup,
-            cmd::restore_webdav_backup,
-            cmd::get_unlock_items,
-            cmd::check_media_unlock,
-            cmd::check_media_unlock_item,
-        ]
+        {
+            let builder = crate::ipc::builder();
+            move |invoke| builder.invoke_handler()(invoke)
+        }
    }
 }

@@ -1,5 +1,5 @@
 {
-  "version": "2.5.8",
+  "version": "2.5.9",
  "$schema": "../node_modules/@tauri-apps/cli/config.schema.json",
  "bundle": {
    "active": true,
@@ -423,7 +423,7 @@ interface PersistentProxySelectProps
  value: string
  selectedName: string
  groupName: string
-  fixed?: string
+  fixed?: string | null
  selectedDelay: number
  options: ProxyOption[]
  onChange: (value: string) => void
@@ -785,8 +785,8 @@ export const CurrentProxyCard = () => {
      // The profile selection is the durable source across core restarts and run modes.
      handleSelectChange(
        selectedGroup.name,
-        previousProxy,
-        selectedGroup.fixed,
+        previousProxy!,
+        selectedGroup.fixed!,
      )({
        target: { value: nextName },
      })
@@ -940,7 +940,7 @@ export const CurrentProxyCard = () => {
            unsortedProxyOptions,
            sortType,
            delays.of,
-            defaultLatencyTimeout,
+            defaultLatencyTimeout!,
          ),
    [
      delays,
@@ -56,26 +56,7 @@ const openProfileHome = (url: string) => {
  void openExternalUrl(url).catch(showNotice.error)
 }

-// 使用类型定义，而不是导入
-interface ProfileExtra {
-  upload: number
-  download: number
-  total: number
-  expire: number
-}
-
-interface ProfileItem {
-  uid: string
-  type?: 'local' | 'remote' | 'merge' | 'script'
-  name?: string
-  desc?: string
-  file?: string
-  url?: string
-  updated?: number
-  extra?: ProfileExtra
-  home?: string
-  option?: any
-}
+type ProfileItem = IProfileItem

 interface HomeProfileCardProps {
  current: ProfileItem | null | undefined
@@ -298,10 +279,13 @@ export const HomeProfileCard = ({

    setUpdating(true)
    try {
-      await mutate(() => updateProfile(current.uid, current.option), {
-        id: `update-profile:${current.uid}`,
-        errorNotice: false,
-      })
+      await mutate(
+        () => updateProfile(current.uid!, current.option ?? undefined),
+        {
+          id: `update-profile:${current.uid}`,
+          errorNotice: false,
+        },
+      )
      onProfileUpdated?.()

      // 刷新首页数据
@@ -345,7 +329,7 @@ export const HomeProfileCard = ({
            flex: 1,
          },
        }}
-        title={current.name}
+        title={current.name!}
      >
        <span>{current.name}</span>
        <LaunchOutlined
@@ -201,7 +201,7 @@ export const ProxyTunCard: FC = () => {
          onClick={() => handleTabChange('tun')}
          icon={TroubleshootRounded}
          label={t('settings.sections.system.toggles.tunMode')}
-          hasIndicator={enable_tun_mode && isTunModeAvailable}
+          hasIndicator={enable_tun_mode! && isTunModeAvailable}
        />
      </Stack>

@@ -164,7 +164,7 @@ export const TestCard = () => {
        }}
      >
        {testList.map((item, index) => (
-          <SortableItem key={item.uid} id={item.uid} index={index}>
+          <SortableItem key={item.uid} id={item.uid!} index={index}>
            <TestItem
              itemData={item}
              onEdit={() => viewerRef.current?.edit(item)}
@@ -120,7 +120,7 @@ const ProfileItemBase = (props: ProfileItemProps) => {
  )
  const setLoading = useCallback(
    (loading: boolean) => {
-      setProfileLoading([itemData.uid], loading)
+      setProfileLoading([itemData.uid!], loading)
    },
    [itemData.uid, setProfileLoading],
  )
@@ -140,7 +140,7 @@ const ProfileItemBase = (props: ProfileItemProps) => {
            debugLog(`强制刷新定时器任务`)
          }

-          const nextUpdate = await getNextUpdateTime(itemData.uid)
+          const nextUpdate = await getNextUpdateTime(itemData.uid!)
          debugLog(`获取到下次更新时间结果:`, nextUpdate)

          if (nextUpdate) {
@@ -245,7 +245,7 @@ const ProfileItemBase = (props: ProfileItemProps) => {
  const hasHome = !!itemData.home // only subscription url has home page

  const { upload = 0, download = 0, total = 0 } = extra ?? {}
-  const from = parseUrl(itemData.url)
+  const from = parseUrl(itemData.url!)
  const description = itemData.desc
  const expire = parseExpire(extra?.expire)
  const progress = Math.min(
@@ -253,7 +253,7 @@ const ProfileItemBase = (props: ProfileItemProps) => {
    100,
  )

-  const loading = loadingCache.has(itemData.uid)
+  const loading = loadingCache.has(itemData.uid!)

  const [, forceRefresh] = useReducer((value: number) => value + 1, 0)
  useEffect(() => {
@@ -263,7 +263,7 @@ const ProfileItemBase = (props: ProfileItemProps) => {

    const handler = () => {
      const now = Date.now()
-      const lastUpdate = updated * 1000
+      const lastUpdate = updated! * 1000
      if (now - lastUpdate >= 24 * 36e5) return

      const wait = now - lastUpdate >= 36e5 ? 30e5 : 5e4
@@ -293,7 +293,7 @@ const ProfileItemBase = (props: ProfileItemProps) => {
  const [confirmOpen, setConfirmOpen] = useState(false)
  const [qrOpen, setQrOpen] = useState(false)

-  const loadProfileDocument = useCallback(() => readProfileFile(uid), [uid])
+  const loadProfileDocument = useCallback(() => readProfileFile(uid!), [uid])
  const loadMergeDocument = useCallback(
    () => readProfileFile(option?.merge ?? ''),
    [option?.merge],
@@ -370,7 +370,7 @@ const ProfileItemBase = (props: ProfileItemProps) => {
  const onOpenFile = useLockFn(async () => {
    setAnchorEl(null)
    try {
-      await mutate(() => viewProfile(itemData.uid), {
+      await mutate(() => viewProfile(itemData.uid!), {
        id: 'view-profile',
        errorNotice: false,
      })
@@ -402,7 +402,7 @@ const ProfileItemBase = (props: ProfileItemProps) => {

    try {
      const payload = Object.keys(option).length > 0 ? option : undefined
-      await mutate(() => updateProfile(itemData.uid, payload), {
+      await mutate(() => updateProfile(itemData.uid!, payload), {
        id: `update-profile:${itemData.uid}`,
        errorNotice: false,
      })
@@ -593,7 +593,7 @@ const ProfileItemBase = (props: ProfileItemProps) => {

  const handleSaveProfileDocument = useLockFn(async () => {
    const currentValue = profileDocument.value
-    const result = await mutate(() => saveProfileFile(uid, currentValue), {
+    const result = await mutate(() => saveProfileFile(uid!, currentValue), {
      id: `save-profile-file:${uid}`,
      errorNotice: false,
    })
@@ -728,7 +728,7 @@ const ProfileItemBase = (props: ProfileItemProps) => {
              variant="h6"
              component="h2"
              noWrap
-              title={name}
+              title={name!}
            >
              {name}
            </Typography>
@@ -794,7 +794,7 @@ const ProfileItemBase = (props: ProfileItemProps) => {
                    title={
                      showNextUpdate
                        ? t('profiles.components.profileItem.tooltips.showLast')
-                        : `${t('shared.labels.updateTime')}: ${parseExpire(updated)}\n${t('profiles.components.profileItem.tooltips.showNext')}`
+                        : `${t('shared.labels.updateTime')}: ${parseExpire(updated!)}\n${t('profiles.components.profileItem.tooltips.showNext')}`
                    }
                    sx={{
                      fontSize: 14,
@@ -812,8 +812,8 @@ const ProfileItemBase = (props: ProfileItemProps) => {
                  >
                    {showNextUpdate
                      ? nextUpdateTime
-                      : updated > 0
-                        ? dayjs(updated * 1000).fromNow()
+                      : updated! > 0
+                        ? dayjs(updated! * 1000).fromNow()
                        : ''}
                  </Typography>
                </Box>
@@ -831,7 +831,7 @@ const ProfileItemBase = (props: ProfileItemProps) => {
        ) : (
          <Box sx={{ ...boxStyle, fontSize: 12, justifyContent: 'flex-end' }}>
            <span title={t('shared.labels.updateTime')}>
-              {parseExpire(updated)}
+              {parseExpire(updated!)}
            </span>
          </Box>
        )}
@@ -896,7 +896,7 @@ const ProfileItemBase = (props: ProfileItemProps) => {
        <RulesEditorViewer
          groupsUid={option?.groups ?? ''}
          mergeUid={option?.merge ?? ''}
-          profileUid={uid}
+          profileUid={uid!}
          property={option?.rules ?? ''}
          open={true}
          onSave={onSave}
@@ -905,7 +905,7 @@ const ProfileItemBase = (props: ProfileItemProps) => {
      )}
      {proxiesOpen && (
        <ProxiesEditorViewer
-          profileUid={uid}
+          profileUid={uid!}
          property={option?.proxies ?? ''}
          open={true}
          onSave={onSave}
@@ -916,7 +916,7 @@ const ProfileItemBase = (props: ProfileItemProps) => {
        <GroupsEditorViewer
          mergeUid={option?.merge ?? ''}
          proxiesUid={option?.proxies ?? ''}
-          profileUid={uid}
+          profileUid={uid!}
          property={option?.groups ?? ''}
          open={true}
          onSave={onSave}
@@ -976,7 +976,7 @@ const ProfileItemBase = (props: ProfileItemProps) => {
      {qrOpen && itemData.url && (
        <QrViewer
          open={true}
-          value={`${itemData.url}${itemData.url.includes('?') ? '&' : '?'}name=${encodeURIComponent(name)}`}
+          value={`${itemData.url}${itemData.url.includes('?') ? '&' : '?'}name=${encodeURIComponent(name!)}`}
          onClose={() => setQrOpen(false)}
        />
      )}
@@ -115,7 +115,13 @@ export function ProfileViewer({ onChange, ref }: ProfileViewerProps) {
        }

        const name = form.name || `${form.type} file`
-        const item = { ...form, name, option }
+        const item = {
+          type: form.type,
+          name,
+          desc: form.desc,
+          option,
+          ...(form.type === 'remote' ? { url: form.url } : {}),
+        }
        const isRemote = form.type === 'remote'
        const isUpdate = openType === 'edit'

@@ -139,7 +145,7 @@ export function ProfileViewer({ onChange, ref }: ProfileViewerProps) {
                t('profiles.modals.profileForm.errors.uidMissing'),
              )
            }
-            await mutate(() => patchProfile(form.uid, item), {
+            await mutate(() => patchProfile(form.uid!, item), {
              id: 'patch-profile',
              errorNotice: false,
            })
@@ -157,7 +163,7 @@ export function ProfileViewer({ onChange, ref }: ProfileViewerProps) {
                  t('profiles.modals.profileForm.errors.uidMissing'),
                )
              }
-              await mutate(() => patchProfile(form.uid, item), {
+              await mutate(() => patchProfile(form.uid!, item), {
                id: 'patch-profile',
                errorNotice: false,
              })
@@ -190,13 +196,13 @@ export function ProfileViewer({ onChange, ref }: ProfileViewerProps) {
                  t('profiles.modals.profileForm.errors.uidMissing'),
                )
              }
-              await mutate(() => patchProfile(form.uid, retryItem), {
+              await mutate(() => patchProfile(form.uid!, retryItem), {
                id: 'patch-profile',
                errorNotice: false,
              })

              await mutate(
-                () => patchProfile(form.uid, { option: originalOptions }),
+                () => patchProfile(form.uid!, { option: originalOptions }),
                {
                  id: 'patch-profile',
                  errorNotice: false,
@@ -413,7 +419,7 @@ export function ProfileViewer({ onChange, ref }: ProfileViewerProps) {
                <InputLabel>
                  {t('profiles.modals.profileForm.fields.useSystemProxy')}
                </InputLabel>
-                <Switch checked={field.value} {...field} color="primary" />
+                <Switch checked={field.value!} {...field} color="primary" />
              </StyledBox>
            )}
          />
@@ -426,7 +432,7 @@ export function ProfileViewer({ onChange, ref }: ProfileViewerProps) {
                <InputLabel>
                  {t('profiles.modals.profileForm.fields.useClashProxy')}
                </InputLabel>
-                <Switch checked={field.value} {...field} color="primary" />
+                <Switch checked={field.value!} {...field} color="primary" />
              </StyledBox>
            )}
          />
@@ -439,7 +445,7 @@ export function ProfileViewer({ onChange, ref }: ProfileViewerProps) {
                <InputLabel>
                  {t('profiles.modals.profileForm.fields.acceptInvalidCerts')}
                </InputLabel>
-                <Switch checked={field.value} {...field} color="primary" />
+                <Switch checked={field.value!} {...field} color="primary" />
              </StyledBox>
            )}
          />
@@ -684,6 +684,9 @@ export const RulesEditorViewer = (props: Props) => {
                  ruleType.name !== 'SUB-RULE' && (
                    <TextField
                      autoComplete="new-password"
+                      autoCorrect="off"
+                      autoCapitalize="off"
+                      spellCheck="false"
                      size="small"
                      sx={{ minWidth: '240px' }}
                      slotProps={{
@@ -445,10 +445,14 @@ export const ProxyChain = ({
    if (isConnected) {
      setIsConnecting(true)
      try {
-        await mutate(() => updateProxyChainConfigInRuntime(null), {
-          id: 'update-proxy-chain-runtime',
-          errorNotice: false,
-        })
+        const result = await mutate(
+          () => updateProxyChainConfigInRuntime(null),
+          {
+            id: 'update-proxy-chain-runtime',
+            errorNotice: false,
+          },
+        )
+        if (!result.ok) return

        const targetGroup =
          mode === 'global'
@@ -461,7 +465,7 @@ export const ProxyChain = ({
              id: `select-proxy-node:${targetGroup}`,
              errorNotice: false,
            })
-            recordSelection(targetGroup, 'DIRECT')
+            await recordSelection(targetGroup, 'DIRECT')
          } catch {
            if (currentProxyChain.length >= 1) {
              try {
@@ -473,7 +477,7 @@ export const ProxyChain = ({
                    errorNotice: false,
                  },
                )
-                recordSelection(targetGroup, currentProxyChain[0].name)
+                await recordSelection(targetGroup, currentProxyChain[0].name)
              } catch {
                // ignore
              }
@@ -519,10 +523,14 @@ export const ProxyChain = ({
      // 第一步：保存链式代理配置
      const chainProxies = currentProxyChain.map((node) => node.name)
      debugLog('Saving chain config:', chainProxies)
-      await mutate(() => updateProxyChainConfigInRuntime(chainProxies), {
-        id: 'update-proxy-chain-runtime',
-        errorNotice: false,
-      })
+      const result = await mutate(
+        () => updateProxyChainConfigInRuntime(chainProxies),
+        {
+          id: 'update-proxy-chain-runtime',
+          errorNotice: false,
+        },
+      )
+      if (!result.ok) return
      debugLog('Chain configuration saved successfully')

      // 第二步：连接到代理链的最后一个节点
@@ -545,12 +553,12 @@ export const ProxyChain = ({
      )
      // The chain moves the group like any other selection, so the profile has to learn about
      // it: what the profile holds is what gets re-applied the next time the core starts.
-      recordSelection(targetGroup || 'GLOBAL', lastNode.name)
+      await recordSelection(targetGroup || 'GLOBAL', lastNode.name)
      localStorage.setItem('proxy-chain-group', targetGroup || 'GLOBAL')
      localStorage.setItem('proxy-chain-exit-node', lastNode.name)

      // 刷新代理信息以更新连接状态
-      refreshProxy()
+      await refreshProxy()
      debugLog('Successfully connected to proxy chain')
    } catch (error) {
      console.error('Failed to connect to proxy chain:', error)
@@ -619,14 +627,15 @@ export const ProxyChain = ({
            <IconButton
              size="small"
              onClick={() => {
-                mutate(() => updateProxyChainConfigInRuntime(null), {
+                void mutate(() => updateProxyChainConfigInRuntime(null), {
                  id: 'update-proxy-chain-runtime',
-                  errorNotice: false,
-                })
-                localStorage.removeItem('proxy-chain-group')
-                localStorage.removeItem('proxy-chain-exit-node')
-                localStorage.removeItem('proxy-chain-items')
-                onUpdateChain([])
+                  onFulfilled: () => {
+                    localStorage.removeItem('proxy-chain-group')
+                    localStorage.removeItem('proxy-chain-exit-node')
+                    localStorage.removeItem('proxy-chain-items')
+                    onUpdateChain([])
+                  },
+                }).catch(() => {})
              }}
              sx={{
                color: theme.palette.error.main,
@@ -5,11 +5,11 @@ export type ProxyEmptyStateReason =
  | 'no-proxy-info'

 type ProfileSummary = {
-  current?: string
+  current?: string | null
  items?: Array<{
-    uid?: string
-    type?: string
-  }>
+    uid?: string | null
+    type?: string | null
+  }> | null
 }

 interface ProxyListStateInput {
@@ -20,7 +20,7 @@ interface ProxyListStateInput {
  isRunningModePending: boolean
 }

-const isSubscriptionProfile = (item: { type?: string }): boolean =>
+const isSubscriptionProfile = (item: { type?: string | null }): boolean =>
  item.type === 'remote' || item.type === 'local'

 /** Decides only pre-render states; the built list owns whether it has renderable content. */
@@ -400,20 +400,26 @@ export function ProxyGroupsChain(props: ProxyGroupsChainProps) {
    setRuleMenuAnchor(null)
  }

-  const handleGroupSelect = (groupName: string) => {
-    onGroupSelect(groupName)
-    handleGroupMenuClose()
-
+  const handleGroupSelect = async (groupName: string) => {
    if (mode === 'rule') {
-      mutate(() => updateProxyChainConfigInRuntime(null), {
-        id: 'update-proxy-chain-runtime',
-        errorNotice: false,
-      })
+      try {
+        const result = await mutate(
+          () => updateProxyChainConfigInRuntime(null),
+          {
+            id: 'update-proxy-chain-runtime',
+          },
+        )
+        if (!result.ok) return
+      } catch {
+        return
+      }
      localStorage.removeItem('proxy-chain-group')
      localStorage.removeItem('proxy-chain-exit-node')
      localStorage.removeItem('proxy-chain-items')
      setProxyChain([])
    }
+    onGroupSelect(groupName)
+    handleGroupMenuClose()
  }

  const handleCloseDuplicateWarning = useCallback(() => {
@@ -198,7 +198,7 @@ export const ProxyRender = memo(function ProxyRender(props: RenderProps) {
        {toolsOnLeft && proxyCount}
        <ProxyGroupTools
          side={toolsOnLeft ? 'left' : 'right'}
-          url={group.testUrl}
+          url={group.testUrl!}
          groupName={group.name}
          headState={headState!}
          onLocation={() => onLocation(group)}
@@ -247,7 +247,7 @@ export const ProxyRender = memo(function ProxyRender(props: RenderProps) {
    return (
      <ProxyHead
        sx={{ pl: 2, pr: 3, mt: 0.5, mb: 1 }}
-        url={group.testUrl}
+        url={group.testUrl!}
        groupName={group.name}
        headState={headState!}
        onLocation={() => onLocation(group)}
@@ -17,7 +17,6 @@ const node = (memberIndex: number, delay: number, name = `${memberIndex}`) =>
        history: [{ delay }],
        extra: {
          'http://cp.cloudflare.com/generate_204': {
-            alive: true,
            history: [{ time: new Date(0).toISOString(), delay }],
          },
        },
@@ -110,13 +110,13 @@ const CHAIN_DELAY_GROUP = 'chain-mode'
 const virtualGroup = (members: ProxyGroupView['members']): ProxyGroupView => ({
  name: CHAIN_DELAY_GROUP,
  type: 'Selector',
-  alive: true,
  udp: false,
  xudp: false,
  tfo: false,
  mptcp: false,
  smux: false,
  history: [],
+  extra: {},
  members,
 })

@@ -237,7 +237,7 @@ export const useRenderList = (
        selected?.name ?? CHAIN_DELAY_GROUP,
        '',
        0,
-        latencyTimeout,
+        latencyTimeout!,
      )
      if (col > 1) {
        return groupOccurrences(occurrences, col).map((memberCol) => ({
@@ -289,8 +289,8 @@ export const useRenderList = (
          key: group.name,
          group,
          headState,
-          icon: group.icon,
-          testUrl: group.testUrl,
+          icon: group.icon!,
+          testUrl: group.testUrl!,
        },
      ]

@@ -300,7 +300,7 @@ export const useRenderList = (
          group.name,
          headState.filterText,
          headState.sortType,
-          latencyTimeout,
+          latencyTimeout!,
          {
            matchCase: headState.filterMatchCase,
            matchWholeWord: headState.filterMatchWholeWord,
@@ -337,11 +337,11 @@ export const useRenderList = (
      }

      cache.set(group.name, {
-        now: group.now,
+        now: group.now!,
        members: group.members,
        headState,
        col,
-        latencyTimeout,
+        latencyTimeout: latencyTimeout!,
        delays: groupDelays.get(group.name),
        items: ret,
      })
@@ -50,9 +50,9 @@ export const BackupConfigViewer = memo(

    const { register, handleSubmit, watch } = useForm<IWebDavConfig>({
      defaultValues: {
-        url: webdav_url,
-        username: webdav_username,
-        password: webdav_password,
+        url: webdav_url!,
+        username: webdav_username!,
+        password: webdav_password!,
      },
    })
    const url = watch('url')
@@ -196,7 +196,7 @@ export function DnsViewer({ ref }: { ref?: Ref<DialogRef> }) {
  const { verge } = useVerge()
  const { current: currentProfile } = useProfiles()
  const dnsEnabled = currentProfile
-    ? (verge?.profile_dns_settings?.[currentProfile.uid]?.enabled ??
+    ? (verge?.profile_dns_settings?.[currentProfile.uid!]?.enabled ??
      verge?.enable_dns_settings ??
      false)
    : false
@@ -138,7 +138,7 @@ export const SysproxyViewer = forwardRef<DialogRef>((props, ref) => {

  const defaultBypass = () => {
    if (isWindows) {
-      return 'localhost;127.*;192.168.*;10.*;172.16.*;172.17.*;172.18.*;172.19.*;172.20.*;172.21.*;172.22.*;172.23.*;172.24.*;172.25.*;172.26.*;172.27.*;172.28.*;172.29.*;172.30.*;172.31.*;<local>'
+      return 'localhost;127.*;192.168.*;10.*;172.16.*;172.17.*;172.18.*;172.19.*;172.20.*;172.21.*;172.22.*;172.23.*;172.24.*;172.25.*;172.26.*;172.27.*;172.28.*;172.29.*;172.30.*;172.31.*;*.local;<local>'
    }
    if (systemName === 'linux') {
      return 'localhost,127.0.0.1,192.168.0.0/16,10.0.0.0/8,172.16.0.0/12,::1'
@@ -438,7 +438,7 @@ export const SysproxyViewer = forwardRef<DialogRef>((props, ref) => {
          <Switch
            edge="end"
            disabled={!enabled}
-            checked={value.pac}
+            checked={value.pac!}
            onChange={(_, e) => setValue((v) => ({ ...v, pac: e }))}
          />
        </ListItem>
@@ -455,7 +455,7 @@ export const SysproxyViewer = forwardRef<DialogRef>((props, ref) => {
          <Switch
            edge="end"
            disabled={!enabled}
-            checked={value.guard}
+            checked={value.guard!}
            onChange={(_, e) => setValue((v) => ({ ...v, guard: e }))}
            sx={{ marginLeft: 'auto' }}
          />
@@ -1,5 +1,4 @@
 import { alpha, Box, Button, LinearProgress } from '@mui/material'
-import type { DownloadEvent } from '@tauri-apps/plugin-updater'
 import { useLockFn } from 'ahooks'
 import type { Ref } from 'react'
 import {
@@ -15,6 +14,7 @@ import type { Options as ReactMarkdownOptions } from 'react-markdown'

 import { BaseDialog, DialogRef } from '@/components/base'
 import { useUpdate } from '@/hooks/use-update'
+import type { DownloadEvent } from '@/services/bindings'
 import {
  cancelUpdateDownload,
  installUpdate,
@@ -40,7 +40,7 @@ const SettingClash = ({ onError }: Props) => {
  const { verge, mutateVerge } = useVerge()
  const { current: currentProfile } = useProfiles()
  const dnsEnabled = currentProfile
-    ? (verge?.profile_dns_settings?.[currentProfile.uid]?.enabled ??
+    ? (verge?.profile_dns_settings?.[currentProfile.uid!]?.enabled ??
      verge?.enable_dns_settings ??
      false)
    : false
@@ -9,6 +9,7 @@ import { useVerge } from '@/hooks/use-verge'
 import { navigationItems } from '@/pages/_navigation-meta'
 import { copyClashEnv } from '@/services/cmds'
 import { supportedLanguages } from '@/services/i18n'
+import { mutate } from '@/services/mutate'
 import { showNotice } from '@/services/notice-service'
 import getSystem from '@/utils/get-system'

@@ -75,8 +76,18 @@ const SettingVergeBasic = ({ onError }: Props) => {
  }

  const onCopyClashEnv = useCallback(async () => {
-    await copyClashEnv()
-    showNotice.success('shared.feedback.notifications.common.copySuccess', 1000)
+    try {
+      await mutate(copyClashEnv, {
+        id: 'copy-clash-env',
+        onFulfilled: () =>
+          showNotice.success(
+            'shared.feedback.notifications.common.copySuccess',
+            1000,
+          ),
+      })
+    } catch {
+      // The shared mutation boundary reports the failure.
+    }
  }, [])

  return (
@@ -25,11 +25,11 @@ export const TestItem = ({ itemData, onEdit, onDelete: removeTest }: Props) => {
  const [position, setPosition] = useState({ left: 0, top: 0 })
  const [delay, setDelay] = useState(-1)
  const { uid, name, icon, url } = itemData
-  const iconCachePath = useIconCache({ icon, cacheKey: uid })
+  const iconCachePath = useIconCache({ icon: icon!, cacheKey: uid! })

  const onDelay = useCallback(async () => {
    setDelay(-2)
-    const result = await cmdTestDelay(url)
+    const result = await cmdTestDelay(url!)
    setDelay(result)
  }, [url])

@@ -41,7 +41,7 @@ export const TestItem = ({ itemData, onEdit, onDelete: removeTest }: Props) => {
  const onDelete = useLockFn(async () => {
    setAnchorEl(null)
    try {
-      removeTest(uid)
+      removeTest(uid!)
    } catch (err: any) {
      showNotice.error(err)
    }
@@ -81,17 +81,17 @@ export const TestItem = ({ itemData, onEdit, onDelete: removeTest }: Props) => {
            <Box sx={{ display: 'flex', justifyContent: 'center' }}>
              {icon.trim().startsWith('http') && (
                <img
-                  alt={name}
+                  alt={name!}
                  src={iconCachePath === '' ? icon : iconCachePath}
                  height="40px"
                />
              )}
              {icon.trim().startsWith('data') && (
-                <img alt={name} src={icon} height="40px" />
+                <img alt={name!} src={icon!} height="40px" />
              )}
              {icon.trim().startsWith('<svg') && (
                <img
-                  alt={name}
+                  alt={name!}
                  src={`data:image/svg+xml;charset=utf-8,${encodeURIComponent(icon)}`}
                  height="40px"
                />
@@ -1,5 +1,6 @@
 import { useCallback, useEffect, useRef } from 'react'

+import type { ProfilePatch, ProfileSelection } from '@/services/bindings'
 import { getProfiles, patchProfile, patchProfilesConfig } from '@/services/cmds'
 import { mutate } from '@/services/mutate'
 import { migrateProfileTestUrls } from '@/services/proxy-test-url'
@@ -46,7 +47,7 @@ export const useProfiles = () => {
  }, [])

  const patchProfiles = useCallback(
-    async (value: Partial<IProfilesConfig>) => {
+    async (value: ProfileSelection) => {
      try {
        const result = await mutate(() => patchProfilesConfig(value), {
          id: 'patch-profiles-config',
@@ -77,7 +78,7 @@ export const useProfiles = () => {
  )

  const patchCurrent = useCallback(
-    async (value: Partial<IProfileItem>) => {
+    async (value: ProfilePatch) => {
      if (profiles?.current) {
        const uid = profiles.current
        await mutate(() => patchProfile(uid, value), {
@@ -166,10 +166,10 @@ export const useProxySelection = (options: ProxySelectionOptions = {}) => {

  const handleProxyGroupChange = useCallback(
    (
-      group: { name: string; now?: string; fixed?: string },
+      group: { name: string; now?: string | null; fixed?: string | null },
      proxy: { name: string },
    ) => {
-      changeProxy(group.name, proxy.name, group.now, group.fixed)
+      changeProxy(group.name, proxy.name, group.now!, group.fixed!)
    },
    [changeProxy],
  )
@@ -5,7 +5,7 @@ import { useDisplayedMixedPort } from '@/hooks/use-displayed-mixed-port'
 import { useVerge } from '@/hooks/use-verge'
 import { useSystemData } from '@/providers/app-data-context'
 import {
-  getAutotemProxy,
+  getAutoProxy,
  getEmbeddedServerPort,
  patchVergeConfig,
 } from '@/services/cmds'
@@ -21,8 +21,8 @@ export const useSystemProxyState = () => {
  const { sysproxy } = useSystemData()
  const displayedMixedPort = useDisplayedMixedPort()
  const { data: autoproxy } = useQuery({
-    queryKey: ['getAutotemProxy'],
-    queryFn: getAutotemProxy,
+    queryKey: ['getAutoProxy'],
+    queryFn: getAutoProxy,
    refetchOnWindowFocus: true,
    refetchOnReconnect: true,
  })
@@ -99,7 +99,7 @@ export const useSystemProxyState = () => {
      }
      // Kept separate so an unreadable config cannot discard OS state that did read.
      try {
-        await revalidateQueries([['getSystemProxy'], ['getAutotemProxy']])
+        await revalidateQueries([['getSystemProxy'], ['getAutoProxy']])
      } catch (error) {
        console.warn(
          '[system-proxy] rereading the OS proxy after a toggle failed:',
@@ -109,14 +109,14 @@ export const useSystemProxyState = () => {
        // rather than stay live from a stale cache.
        await Promise.all([
          removeCacheData(['getSystemProxy']),
-          removeCacheData(['getAutotemProxy']),
+          removeCacheData(['getAutoProxy']),
        ])
      }
    }
  }

  const invalidateProxyState = () =>
-    revalidateQueries([['getSystemProxy'], ['getAutotemProxy']])
+    revalidateQueries([['getSystemProxy'], ['getAutoProxy']])

  return {
    indicator,
@@ -117,7 +117,7 @@ const ProfilePage = () => {
  } = useProfiles()

  useEffect(() => {
-    currentProfileRef.current = profiles.current
+    currentProfileRef.current = profiles.current!
  }, [profiles])

  useEffect(() => {
@@ -212,10 +212,12 @@ const ProfilePage = () => {
    }
    setLoading(true)

+    const prevCurrent = profiles.current
+
    const handleImportSuccess = async (noticeKey: string) => {
      showNotice.success(noticeKey)
      setUrl('')
-      await performRobustRefresh()
+      await performRobustRefresh(prevCurrent)
    }
    try {
      await mutate(() => importProfile(url), {
@@ -261,7 +263,7 @@ const ProfilePage = () => {
  }

  // `useProfiles` already retries three times; add only one business-level retry.
-  const performRobustRefresh = async () => {
+  const performRobustRefresh = async (prevCurrent?: string | null) => {
    let retryCount = 0
    const maxRetries = 1
    const baseDelay = 200
@@ -270,13 +272,15 @@ const ProfilePage = () => {
      try {
        debugLog(`[导入刷新] 第${retryCount + 1}次尝试刷新配置数据`)

-        await mutateProfiles()
+        const fresh = await fetchProfilesIntoCache()

        await new Promise((resolve) =>
          setTimeout(resolve, baseDelay * (retryCount + 1)),
        )

-        await onEnhance(false)
+        if (fresh?.current !== prevCurrent) {
+          await onEnhance(false)
+        }
        return
      } catch (error) {
        console.error(`[导入刷新] 第${retryCount + 1}次刷新失败:`, error)
@@ -289,8 +293,10 @@ const ProfilePage = () => {

    console.warn(`[导入刷新] 常规刷新失败，尝试清除缓存重新获取`)
    try {
-      await fetchProfilesIntoCache()
-      await onEnhance(false)
+      const fresh = await fetchProfilesIntoCache()
+      if (fresh?.current !== prevCurrent) {
+        await onEnhance(false)
+      }
      showNotice.error(
        'profiles.page.feedback.notifications.importNeedsRefresh',
        3000,
@@ -574,7 +580,7 @@ const ProfilePage = () => {
  const onUpdateAll = useLockFn(async () => {
    const items = profileItems.filter((e) => e.type === 'remote')
    const target = items
-      .map((item) => item.uid)
+      .map((item) => item.uid!)
      .filter((uid) => !loadingCache.has(uid))

    setLoadingProfiles(target, true)
@@ -606,7 +612,7 @@ const ProfilePage = () => {
  }

  const selectAllProfiles = () => {
-    setSelectedProfiles(new Set(profileItems.map((item) => item.uid)))
+    setSelectedProfiles(new Set(profileItems.map((item) => item.uid!)))
  }

  const clearAllSelections = () => {
@@ -898,20 +904,20 @@ const ProfilePage = () => {
            {profileItems.map((item, index) => (
              <ProfileItem
                key={item.uid}
-                id={item.uid}
+                id={item.uid!}
                index={index}
                selected={(switchTarget ?? profiles.current) === item.uid}
                activating={
-                  activatings.includes(item.uid) ||
+                  activatings.includes(item.uid!) ||
                  visibleSwitchingProfile === item.uid
                }
                itemData={item}
-                timerUpdateRevision={timerRevisions.get(item.uid) ?? 0}
+                timerUpdateRevision={timerRevisions.get(item.uid!) ?? 0}
                completedUpdateRevision={
-                  completedUpdateRevisions.get(item.uid) ?? 0
+                  completedUpdateRevisions.get(item.uid!) ?? 0
                }
                mutateProfiles={mutateProfiles}
-                onSelect={(f) => onSelect(item.uid, f)}
+                onSelect={(f) => onSelect(item.uid!, f)}
                onEdit={() => viewerRef.current?.edit(item)}
                onSave={async (prev, curr) => {
                  if (prev !== curr && profiles.current === item.uid) {
@@ -920,14 +926,14 @@ const ProfilePage = () => {
                }}
                onDelete={() => {
                  if (batchMode) {
-                    toggleProfileSelection(item.uid)
+                    toggleProfileSelection(item.uid!)
                  } else {
-                    onDelete(item.uid)
+                    onDelete(item.uid!)
                  }
                }}
                batchMode={batchMode}
-                isSelected={selectedProfiles.has(item.uid)}
-                onSelectionChange={() => toggleProfileSelection(item.uid)}
+                isSelected={selectedProfiles.has(item.uid!)}
+                onSelectionChange={() => toggleProfileSelection(item.uid!)}
              />
            ))}
          </Box>
@@ -62,7 +62,7 @@ const ProxyPage = () => {
        id: 'patch-clash-mode',
        errorNotice: false,
      })
-      refreshClashConfig()
+      await refreshClashConfig()
    } catch (error) {
      showNotice.error(error)
    }
@@ -71,23 +71,27 @@ const ProxyPage = () => {
  const onToggleChainMode = useLockFn(async () => {
    const newChainMode = !isChainMode

-    setIsChainMode(newChainMode)
-    // 保存链式代理按钮状态到 localStorage
-    localStorage.setItem('proxy-chain-mode-enabled', newChainMode.toString())
-
    if (!newChainMode) {
      // 退出链式代理模式时，清除链式代理配置
      try {
        debugLog('Exiting chain mode, clearing chain configuration')
-        await mutate(() => updateProxyChainConfigInRuntime(null), {
-          id: 'update-proxy-chain-runtime',
-          errorNotice: false,
-        })
+        const result = await mutate(
+          () => updateProxyChainConfigInRuntime(null),
+          {
+            id: 'update-proxy-chain-runtime',
+            errorNotice: false,
+          },
+        )
+        if (!result.ok) return
        debugLog('Chain configuration cleared successfully')
      } catch (error) {
        console.error('Failed to clear chain configuration:', error)
+        showNotice.error(error)
+        return
      }
    }
+    setIsChainMode(newChainMode)
+    localStorage.setItem('proxy-chain-mode-enabled', newChainMode.toString())
  })

  // 当开启链式代理模式时，获取配置数据
@@ -123,7 +127,7 @@ const ProxyPage = () => {
      }
    }

-    fetchChainConfig()
+    fetchChainConfig().catch(() => {})

    return () => {
      cancelled = true
@@ -132,7 +136,7 @@ const ProxyPage = () => {

  useEffect(() => {
    if (normalizedMode && !isMode(normalizedMode)) {
-      onChangeMode('rule')
+      onChangeMode('rule').catch(() => {})
    }
  }, [normalizedMode, onChangeMode])

@@ -72,11 +72,7 @@ export const createEventBus = (deps: BusHandlerDeps) => {
        'getRuleProviders',
      ]),
    'verge://refresh-verge-config': () =>
-      deps.revalidateKeys([
-        'getVergeConfig',
-        'getSystemProxy',
-        'getAutotemProxy',
-      ]),
+      deps.revalidateKeys(['getVergeConfig', 'getSystemProxy', 'getAutoProxy']),
    'verge://refresh-profiles': () => deps.revalidateKeys(['getProfiles']),
    'verge://refresh-proxy-config': handleRefreshProxyConfig,
    'verge://notice-message': (payload) => deps.handleNotice(payload),
@@ -1,141 +1,183 @@
-import { Channel, invoke } from '@tauri-apps/api/core'
-import type { DownloadEvent } from '@tauri-apps/plugin-updater'
+import { Channel } from '@tauri-apps/api/core'
 import dayjs from 'dayjs'

-import type { CommandFailure } from '@/services/notice-service'
 import { showNotice } from '@/services/notice-service'
-import type { ProxyViewV1 } from '@/types/proxy-view'
 import { debugLog } from '@/utils/debug'

+import { commands } from './bindings'
+import type {
+  DownloadEvent,
+  JsonValue,
+  ListenerProbe,
+  ProxyPortSettings,
+  UnlockItem,
+  ProxyViewV1_Serialize as ProxyViewV1,
+  ProfileSelection,
+  ProfilePatch,
+  ProfileCreate,
+} from './bindings'
+
+export type {
+  RunningMode,
+  RunStateView as RunState,
+  FailedOperation,
+  PendingFailure,
+  SidecarFailureSnapshot,
+  ServiceInstallOutcome,
+  ProxyPortSettings,
+  ListenerTransport,
+  ListenerProbe,
+  UnlockItem,
+} from './bindings'
+
 export async function copyClashEnv() {
-  return invoke<void>('copy_clash_env')
+  return commands.copyClashEnv()
 }

-export async function getProfiles() {
-  return invoke<IProfilesConfig>('get_profiles')
+export async function getProfiles(): Promise<IProfilesConfig> {
+  return commands.getProfiles()
 }

 export async function enhanceProfiles() {
-  return (
-    (await invoke<ValidationOutcome>('enhance_profiles')).status === 'valid'
-  )
+  return (await commands.enhanceProfiles()).status === 'valid'
 }

-export async function patchProfilesConfig(profiles: IProfilesConfig) {
-  return invoke<ValidationOutcome>('patch_profiles_config', { profiles })
+export async function patchProfilesConfig(profiles: ProfileSelection) {
+  return commands.patchProfilesConfig({ current: profiles.current })
 }

 export async function createProfile(
-  item: Partial<IProfileItem>,
+  item: ProfileCreate,
  fileData?: string | null,
 ) {
-  return invoke<void>('create_profile', { item, fileData })
-}
-
-export async function viewProfile(index: string) {
-  return invoke<void>('view_profile', { index })
-}
-
-export async function readProfileFile(index: string) {
-  return invoke<string>('read_profile_file', { index })
-}
-
-export async function saveProfileFile(index: string, fileData: string) {
-  return (
-    (
-      await invoke<ValidationOutcome>('save_profile_file', {
-        index,
-        fileData,
-      })
-    ).status === 'valid'
+  return commands.createProfile(
+    {
+      type: item.type,
+      name: item.name,
+      desc: item.desc,
+      ...(item.type === 'remote' ? { url: item.url } : {}),
+      option: item.option,
+    },
+    fileData ?? null,
  )
 }

+export async function viewProfile(index: string) {
+  return commands.viewProfile(index)
+}
+
+export async function readProfileFile(index: string) {
+  return commands.readProfileFile(index)
+}
+
+export async function saveProfileFile(index: string, fileData: string) {
+  return (await commands.saveProfileFile(index, fileData)).status === 'valid'
+}
+
 export async function importProfile(url: string, option?: IProfileOption) {
-  return invoke<void>('import_profile', {
-    url,
-    option: option || { with_proxy: true },
-  })
+  return commands.importProfile(url, option || { with_proxy: true })
 }

 export async function reorderProfile(activeId: string, overId: string) {
-  return invoke<void>('reorder_profile', {
-    activeId,
-    overId,
-  })
+  return commands.reorderProfile(activeId, overId)
 }

 export async function updateProfile(index: string, option?: IProfileOption) {
-  return invoke<void>('update_profile', { index, option })
+  return commands.updateProfile(index, option ?? null)
 }

 export async function deleteProfile(index: string) {
-  return invoke<void>('delete_profile', { index })
+  return commands.deleteProfile(index)
 }

-export async function patchProfile(
-  index: string,
-  profile: Partial<IProfileItem>,
-) {
-  return invoke<void>('patch_profile', { index, profile })
+export async function patchProfile(index: string, profile: ProfilePatch) {
+  const {
+    type,
+    name,
+    desc,
+    file,
+    url,
+    selected,
+    latency_test_urls,
+    extra,
+    updated,
+    option,
+  } = profile
+  return commands.patchProfile(index, {
+    type,
+    name,
+    desc,
+    file,
+    url,
+    selected,
+    latency_test_urls,
+    extra,
+    updated,
+    option,
+  })
 }

 export async function getClashInfo() {
-  return invoke<IClashInfo | null>('get_clash_info')
+  return commands.getClashInfo()
 }

 // Fallback mode read independent of strict mihomo `/configs` deserialization.
 export async function getClashMode() {
-  return invoke<string | null>('get_clash_mode')
+  return commands.getClashMode()
 }

 export async function getRuntimeConfig() {
-  return invoke<IConfigData | null>('get_runtime_config')
+  return (await commands.getRuntimeConfig()) as IConfigData | null
 }

 export async function getRuntimeYaml() {
-  return invoke<string | null>('get_runtime_yaml')
+  return commands.getRuntimeYaml()
 }

 export async function getRuntimeLogs() {
-  return invoke<Record<string, [string, string][]>>('get_runtime_logs')
+  return commands.getRuntimeLogs()
 }

 export async function getRuntimeProxyChainConfig(proxyChainExitNode: string) {
-  return invoke<string>('get_runtime_proxy_chain_config', {
-    proxyChainExitNode,
-  })
+  return commands.getRuntimeProxyChainConfig(proxyChainExitNode)
 }

-export async function updateProxyChainConfigInRuntime(proxyChainConfig: any) {
-  return invoke<void>('update_proxy_chain_config_in_runtime', {
-    proxyChainConfig,
-  })
+export async function updateProxyChainConfigInRuntime(
+  proxyChainConfig: unknown,
+) {
+  const outcome = await commands.updateProxyChainConfigInRuntime(
+    proxyChainConfig == null ? null : (proxyChainConfig as JsonValue),
+  )
+  if (outcome.status === 'invalid') throw new Error(outcome.message)
+  if (outcome.status === 'skipped') {
+    throw new Error(`Proxy chain validation skipped: ${outcome.reason}`)
+  }
+  return outcome
 }

 export async function patchClashConfig(payload: Partial<IConfigData>) {
-  return invoke<void>('patch_clash_config', { payload })
+  return commands.patchClashConfig(payload as Record<string, JsonValue>)
 }

 export async function patchClashMode(payload: string) {
-  return invoke<void>('patch_clash_mode', { payload })
+  return commands.patchClashMode(payload)
 }

 export async function syncTrayProxySelection() {
-  return invoke<void>('sync_tray_proxy_selection')
+  return commands.syncTrayProxySelection()
 }

 /** Sends one selection pair so the backend can merge against current profile state. */
 export async function recordSelectedNode(groupName: string, node: string) {
-  return invoke<void>('record_selected_node', { groupName, node })
+  return commands.recordSelectedNode(groupName, node)
 }

 export async function forgetSelectedNode(groupName: string) {
-  return invoke<void>('forget_selected_node', { groupName })
+  return commands.forgetSelectedNode(groupName)
 }

 export async function getProxyView(): Promise<ProxyViewV1> {
-  const view = await invoke<ProxyViewV1>('get_proxy_view')
+  const view = await commands.getProxyView()
  if (view.schemaVersion !== 1) {
    throw new Error('Unsupported proxy view schema: ' + view.schemaVersion)
  }
@@ -145,7 +187,7 @@ export async function getProxyView(): Promise<ProxyViewV1> {
 export async function getClashLogs() {
  const regex = /time="(.+?)"\s+level=(.+?)\s+msg="(.+?)"/
  const newRegex = /(.+?)\s+(.+?)\s+(.+)/
-  const logs = await invoke<string[]>('get_clash_logs')
+  const logs = await commands.getClashLogs()

  return logs.reduce<ILogItem[]>((acc, log) => {
    const result = log.match(regex)
@@ -165,12 +207,12 @@ export async function getClashLogs() {
  }, [])
 }

-export async function getVergeConfig() {
-  return invoke<IVergeConfig>('get_verge_config')
+export async function getVergeConfig(): Promise<IVergeConfig> {
+  return commands.getVergeConfig()
 }

 export async function patchVergeConfig(payload: IVergeConfig) {
-  return invoke<void>('patch_verge_config', { payload })
+  return commands.patchVergeConfig(payload)
 }

 export async function setDnsOverride(
@@ -178,76 +220,57 @@ export async function setDnsOverride(
  enabled: boolean,
  confirmation?: string,
 ) {
-  return invoke<
-    { status: 'applied' } | { status: 'confirmation_required'; source: string }
-  >('set_dns_override', { profileUid, enabled, confirmation })
+  return commands.setDnsOverride(profileUid, enabled, confirmation ?? null)
 }

 export async function getDnsConfigContent() {
-  return invoke<string | null>('get_dns_config_content')
+  return commands.getDnsConfigContent()
 }

 export async function saveDnsConfig(dnsConfig: Record<string, unknown>) {
-  return invoke<void>('save_dns_config', { dnsConfig })
+  return commands.saveDnsConfig(dnsConfig as Record<string, JsonValue>)
 }

 export async function validateDnsConfig() {
-  return invoke<ValidationOutcome>('validate_dns_config')
+  return commands.validateDnsConfig()
 }

 export async function applyDnsConfig(apply: boolean) {
-  return invoke<void>('apply_dns_config', { apply })
+  return commands.applyDnsConfig(apply)
 }

 export async function takeDnsOverrideNotice() {
-  return invoke<boolean>('take_dns_override_notice')
+  return commands.takeDnsOverrideNotice()
 }

-export type ServiceFallbackNotice =
-  | { kind: 'unavailable' }
-  | { kind: 'coreRejected'; reason: string }
-  | { kind: 'notAutoStarted' }
-
 export async function takeServiceFallbackNotice() {
-  return invoke<ServiceFallbackNotice | null>('take_service_fallback_notice')
-}
-
-export interface CoreFailure {
-  kind: 'startFailed' | 'serviceCoreStopped'
-  detail: string
+  return commands.takeServiceFallbackNotice()
 }

 export async function getCoreStartupError() {
-  return invoke<CoreFailure | null>('get_core_startup_error')
+  return commands.getCoreStartupError()
 }

 export async function takeServiceRepairNotice() {
-  return invoke<boolean>('take_service_repair_notice')
+  return commands.takeServiceRepairNotice()
 }

 export async function takeServiceOwnerNotice() {
-  return invoke<string | null>('take_service_owner_notice')
+  return commands.takeServiceOwnerNotice()
 }

 export async function takeDiscardedKeysNotice() {
-  return invoke<string | null>('take_discarded_keys_notice')
+  return commands.takeDiscardedKeysNotice()
 }

 export async function getSystemProxy() {
-  return invoke<{
-    enable: boolean
-    server: string
-    bypass: string
-  }>('get_sys_proxy')
+  return commands.getSysProxy()
 }

-export async function getAutotemProxy() {
+export async function getAutoProxy() {
  try {
    debugLog('[API] 开始调用 get_auto_proxy')
-    const result = await invoke<{
-      enable: boolean
-      url: string
-    }>('get_auto_proxy')
+    const result = await commands.getAutoProxy()
    debugLog('[API] get_auto_proxy 调用成功:', result)
    return result
  } catch (error) {
@@ -260,30 +283,23 @@ export async function getAutotemProxy() {
 }

 export async function getEmbeddedServerPort() {
-  return invoke<number>('get_embedded_server_port')
+  return commands.getEmbeddedServerPort()
 }

 export async function changeClashCore(clashCore: string) {
-  return invoke<CommandFailure | null>('change_clash_core', { clashCore })
+  return commands.changeClashCore(clashCore)
 }

 export async function restartCore() {
-  return invoke<void>('restart_core')
-}
-
-export interface CoreUpgradeReport {
-  /** False when the managed core was already at the latest version. */
-  upgraded: boolean
-  from: string
-  to: string
+  return commands.restartCore()
 }

 export async function upgradeClashCore(force = false) {
-  return invoke<CoreUpgradeReport>('upgrade_clash_core', { force })
+  return commands.upgradeClashCore(force)
 }

 export async function restartApp() {
-  return invoke<void>('restart_app')
+  return commands.restartApp()
 }

 export async function installUpdate(
@@ -292,69 +308,57 @@ export async function installUpdate(
 ) {
  const channel = new Channel<DownloadEvent>()
  channel.onmessage = onEvent
-  return invoke<boolean>('install_update', { version, onEvent: channel })
+  return commands.installUpdate(version, channel)
 }

 export async function cancelUpdateDownload() {
-  return invoke<void>('cancel_update_download')
+  return commands.cancelUpdateDownload()
 }

 export async function getAppDir() {
-  return invoke<string>('get_app_dir')
+  return commands.getAppDir()
 }

 export async function openAppDir() {
-  return invoke<void>('open_app_dir').catch((err) => showNotice.error(err))
+  return commands.openAppDir().catch((err) => showNotice.error(err))
 }

 export async function openCoreDir() {
-  return invoke<void>('open_core_dir').catch((err) => showNotice.error(err))
+  return commands.openCoreDir().catch((err) => showNotice.error(err))
 }

 export async function openLogsDir() {
-  return invoke<void>('open_logs_dir').catch((err) => showNotice.error(err))
+  return commands.openLogsDir().catch((err) => showNotice.error(err))
 }

 export async function syncRuntimeProviders() {
-  return invoke<void>('sync_runtime_providers').catch((err) => {
+  return commands.syncRuntimeProviders().catch((err) => {
    console.warn('failed to queue the provider cache sync', err)
  })
 }

 export async function cmdTestDelay(url: string) {
-  return invoke<number>('test_delay', { url })
+  return commands.testDelay(url)
 }

 export async function invoke_uwp_tool() {
-  return invoke<void>('invoke_uwp_tool').catch((err) =>
-    showNotice.error(err, 1500),
-  )
+  return commands.invokeUwpTool().catch((err) => showNotice.error(err, 1500))
 }

 export async function openDevTools() {
-  return invoke('open_devtools')
+  return commands.openDevtools()
 }

 export async function exitApp() {
-  return invoke('exit_app')
+  return commands.exitApp()
 }

 export async function exportDiagnosticInfo() {
-  return invoke('export_diagnostic_info')
-}
-
-interface SystemInfo {
-  system_name: string
-  system_version: string
-  system_kernel_version: string
-  system_arch: string
-  app_version: string
-  app_core_mode: string
-  app_is_admin: boolean
+  return commands.exportDiagnosticInfo()
 }

 export async function getSystemInfo() {
-  return invoke<SystemInfo>('get_system_info')
+  return commands.getSystemInfo()
 }

 export async function copyIconFile(
@@ -373,55 +377,55 @@ export async function copyIconFile(
    current_t: currentTime,
  }

-  return invoke<void>('copy_icon_file', { path, iconInfo })
+  return commands.copyIconFile(path, iconInfo)
 }

 export async function downloadIconCache(url: string, name: string) {
-  return invoke<string>('download_icon_cache', { url, name })
+  return commands.downloadIconCache(url, name)
 }

 export async function getNetworkInterfaces() {
-  return invoke<string[]>('get_network_interfaces')
+  return commands.getNetworkInterfaces()
 }

 export async function getSystemHostname() {
-  return invoke<string>('get_system_hostname')
+  return commands.getSystemHostname()
 }

 export async function getNetworkInterfacesInfo() {
-  return invoke<INetworkInterface[]>('get_network_interfaces_info')
+  return commands.getNetworkInterfacesInfo()
 }

 export async function createWebdavBackup() {
-  return invoke<void>('create_webdav_backup')
+  return commands.createWebdavBackup()
 }

 export async function createLocalBackup() {
-  return invoke<void>('create_local_backup')
+  return commands.createLocalBackup()
 }

 export async function deleteWebdavBackup(filename: string) {
-  return invoke<void>('delete_webdav_backup', { filename })
+  return commands.deleteWebdavBackup(filename)
 }

 export async function deleteLocalBackup(filename: string) {
-  return invoke<void>('delete_local_backup', { filename })
+  return commands.deleteLocalBackup(filename)
 }

 export async function restoreWebDavBackup(filename: string) {
-  return invoke<void>('restore_webdav_backup', { filename })
+  return commands.restoreWebdavBackup(filename)
 }

 export async function restoreLocalBackup(filename: string) {
-  return invoke<void>('restore_local_backup', { filename })
+  return commands.restoreLocalBackup(filename)
 }

 export async function importLocalBackup(source: string) {
-  return invoke<string>('import_local_backup', { source })
+  return commands.importLocalBackup(source)
 }

 export async function exportLocalBackup(filename: string, destination: string) {
-  return invoke<void>('export_local_backup', { filename, destination })
+  return commands.exportLocalBackup(filename, destination)
 }

 export async function saveWebdavConfig(
@@ -429,177 +433,82 @@ export async function saveWebdavConfig(
  username: string,
  password: string,
 ) {
-  return invoke<void>('save_webdav_config', {
-    url,
-    username,
-    password,
-  })
+  return commands.saveWebdavConfig(url, username, password)
 }

 export async function listWebDavBackup() {
-  const list: IWebDavFile[] = await invoke<IWebDavFile[]>('list_webdav_backup')
-  list.forEach((item) => {
-    item.filename = item.href.split('/').pop() as string
-  })
-  return list
+  return (await commands.listWebdavBackup()).map((item) => ({
+    ...item,
+    filename: item.href.split('/').pop() ?? '',
+  }))
 }

 export async function listLocalBackup() {
-  return invoke<ILocalBackupFile[]>('list_local_backup')
+  return commands.listLocalBackup()
 }

-export type RunningMode = 'Service' | 'Sidecar' | 'NotRunning'
-
-type ServiceHealth =
-  | 'unknown'
-  | 'ready'
-  | 'notInstalled'
-  | 'versionMismatch'
-  | 'unavailable'
-
-type PendingServiceAction =
-  | 'install'
-  | 'uninstall'
-  | 'reinstall'
-  | 'forceReinstall'
-
 /** Consistent core/service snapshot with backend-derived availability flags. */
-export interface RunState {
-  mode: RunningMode
-  service: ServiceHealth
-  serviceUnavailableReason: string | null
-  pendingAction: PendingServiceAction | null
-  sidecarAllowed: boolean
-  isAdmin: boolean
-  opInFlight: boolean
-  serviceUsable: boolean
-  tunCapable: boolean
-  serviceNeedsAttention: boolean
-}

 export const getRuntimeState = async () => {
-  return invoke<RunState>('get_runtime_state')
-}
-
-export type FailedOperation =
-  | 'systemProxyEnable'
-  | 'systemProxyDisable'
-  | 'systemProxyRestore'
-  | 'systemProxyGuard'
-
-export interface PendingFailure {
-  code: string
-  detail: string
-  operation: FailedOperation
-  sequence: number
+  return commands.getRuntimeState()
 }

 export const getPendingFailures = async () => {
-  return invoke<PendingFailure[]>('get_pending_failures')
-}
-
-export interface SidecarFailureSnapshot {
-  revision: number
-  detail: string | null
+  return commands.getPendingFailures()
 }

 export const getSidecarFailure = async () => {
-  return invoke<SidecarFailureSnapshot>('get_sidecar_failure')
+  return commands.getSidecarFailure()
 }

 export const getAppUptime = async () => {
-  return invoke<number>('get_app_uptime')
+  return commands.getAppUptime()
 }

-export type ServiceInstallOutcome =
-  | { status: 'installed' }
-  | { status: 'sidecar'; reason: string }
-
 export const installService = async () => {
-  return invoke<ServiceInstallOutcome>('install_service')
+  return commands.installService()
 }

 export const uninstallService = async () => {
-  return invoke<void>('uninstall_service')
+  return commands.uninstallService()
 }

 export const reinstallService = async () => {
-  return invoke<ServiceInstallOutcome>('reinstall_service')
+  return commands.reinstallService()
 }

 export const repairService = async () => {
-  return invoke<ServiceInstallOutcome>('repair_service')
+  return commands.repairService()
 }

 export const continueWithSidecar = async () => {
-  return invoke<void>('continue_with_sidecar')
+  return commands.continueWithSidecar()
 }

 export const entry_lightweight_mode = async () => {
-  return invoke<void>('entry_lightweight_mode')
+  return commands.entryLightweightMode()
 }

 export async function getNextUpdateTime(uid: string) {
-  return invoke<number | null>('get_next_update_time', { uid })
+  return commands.getNextUpdateTime(uid)
 }

-interface ToggleableProxyPort {
-  enabled: boolean
-  port: number
-}
-
-export interface ProxyPortSettings {
-  mixedPort: number
-  socks: ToggleableProxyPort
-  http: ToggleableProxyPort
-  redir: ToggleableProxyPort
-  tproxy: ToggleableProxyPort
-}
-
-export type ListenerTransport = 'tcp' | 'udp'
-
-export interface ListenerProbe {
-  address: string
-  transports: ListenerTransport[]
-}
-
-export type ListenerProbeOutcome =
-  | { status: 'available' }
-  | {
-      status: 'conflict'
-      port: number
-      transport: ListenerTransport
-    }
-  | { status: 'invalid'; message: string }
-  | { status: 'indeterminate'; message: string }
-
-export type SaveProxyPortsOutcome =
-  | { status: 'saved' }
-  | { status: 'conflict'; port: number; transport: ListenerTransport }
-
 export const probeListener = async (request: ListenerProbe) => {
-  return invoke<ListenerProbeOutcome>('probe_listener', { request })
+  return commands.probeListener(request)
 }

 export const saveProxyPorts = async (settings: ProxyPortSettings) => {
-  return invoke<SaveProxyPortsOutcome>('save_proxy_ports', { settings })
-}
-
-export interface UnlockItem {
-  name: string
-  status: string
-  region?: string | null
-  check_time?: string | null
+  return commands.saveProxyPorts(settings)
 }

 export async function getUnlockItems() {
-  return invoke<UnlockItem[]>('get_unlock_items')
+  return commands.getUnlockItems()
 }

 export async function checkMediaUnlock(onComplete: Channel<UnlockItem>) {
-  return invoke<UnlockItem[]>('check_media_unlock', { onComplete })
+  return commands.checkMediaUnlock(onComplete)
 }

 export async function checkMediaUnlockItem(name: string) {
-  return invoke<UnlockItem>('check_media_unlock_item', { name })
+  return commands.checkMediaUnlockItem(name)
 }
@@ -1,56 +1 @@
-// @generated by scripts/gen-contract.mjs from the backend wire contract. DO NOT EDIT.
-// Regen: pnpm gen:contract
-
-import type { RunState } from './cmds'
-
-/** Wire status strings from NoticeStatus; keep in sync via `pnpm gen:contract`. */
-export type NoticeStatus =
-  | 'info'
-  | 'import_sub_url::ok'
-  | 'import_sub_url::error'
-  | 'set_config::error'
-  | 'core_start::error'
-  | 'service_core::repair_required'
-  | 'service_core::app_data_not_owned'
-  | 'service_core::sidecar_fallback'
-  | 'dns_override::auto_disabled'
-  | 'enhance::discarded_keys'
-  | 'tun_mode::auto_disabled'
-  | 'tun_mode::auto_disable_failed'
-  | 'app_restart::core_stop_failed'
-  | 'app_quit::core_stop_failed'
-  | 'update_with_clash_proxy'
-  | 'update_failed_even_with_clash'
-  | 'reactivate_profiles::error'
-  | 'update_failed'
-  | 'config_validate::boot_error'
-  | 'config_validate::error'
-  | 'config_validate::process_terminated'
-  | 'config_validate::script_error'
-  | 'config_validate::script_syntax_error'
-  | 'config_validate::script_missing_main'
-  | 'config_validate::file_not_found'
-  | 'config_validate::yaml_syntax_error'
-  | 'config_validate::yaml_read_error'
-  | 'config_validate::yaml_mapping_error'
-  | 'config_validate::merge_syntax_error'
-  | 'config_validate::merge_mapping_error'
-  | 'config_core::change_success'
-  | 'config_core::change_error'
-  | 'mixed_port::fallback'
-  | 'mixed_port::fallback_error'
-
-/** Event name → payload type for every backend-emitted event. */
-export interface VergeEventPayloads {
-  'verge://refresh-clash-config': string
-  'verge://refresh-verge-config': string
-  'verge://refresh-profiles': string
-  'verge://refresh-proxy-config': null
-  'verge://notice-message': [NoticeStatus, string]
-  'verge://timer-updated': string
-  'verge://run-state-changed': RunState
-  'verge://pending-failures-changed': null
-  'profile-changed': string
-  'profile-update-started': { uid: string }
-  'profile-update-completed': { uid: string }
-}
+export type { NoticeStatus, VergeEventPayloads } from './bindings'
@@ -66,7 +66,6 @@ test('uses newer core history after a tray test without hiding an active page te
  const cached = delayManager.setDelay(member, 'tray-group', 50)
  member.node.extra = {
    [delayManager.getUrl('tray-group')]: {
-      alive: true,
      history: [
        { time: new Date(cached.updatedAt + 1000).toISOString(), delay: 300 },
      ],
@@ -107,13 +106,11 @@ test('another URL cannot replace a group measurement, but a newer matching URL c
    history: [{ time: newer, delay: 126 }],
    extra: {
      'http://localhost/a': {
-        alive: true,
        history: [
          { time: new Date(cached.updatedAt - 1000).toISOString(), delay: 49 },
        ],
      },
      'http://localhost/b': {
-        alive: true,
        history: [{ time: newer, delay: 126 }],
      },
    },
@@ -122,7 +119,6 @@ test('another URL cannot replace a group measurement, but a newer matching URL c
  Object.assign(member.node, {
    extra: {
      'http://localhost/a': {
-        alive: true,
        history: [{ time: newer, delay: 75 }],
      },
    },
@@ -190,7 +186,7 @@ test('unmeasured selectors show automatic history without replacing a manual URL
    { time: new Date(Date.now() + 1000).toISOString(), delay: 126 },
  ]
  member.node.extra = {
-    'http://localhost/automatic': { alive: true, history: member.node.history },
+    'http://localhost/automatic': { history: member.node.history },
  }
  expect(delayManager.getDelayFix(member, 'selector')).toBe(126)
  delayManager.setDelay(member, 'selector', 50)
@@ -305,11 +305,7 @@ function extractDisplayText(input: unknown): string | undefined {
  }
 }

-export interface CommandFailure {
-  code?: string
-  operation?: FailedOperation
-  detail: string
-}
+import type { CommandFailure_Serialize as CommandFailure } from './bindings'

 function isCommandFailure(input: unknown): input is CommandFailure {
  if (typeof input !== 'object' || input === null) return false
@@ -495,11 +491,11 @@ const baseShowNotice = (
 }

 function failureCode(input: unknown): string | undefined {
-  return isCommandFailure(input) ? input.code : undefined
+  return isCommandFailure(input) ? input.code! : undefined
 }

 function failureOperation(input: unknown): FailedOperation | undefined {
-  return isCommandFailure(input) ? input.operation : undefined
+  return isCommandFailure(input) ? input.operation! : undefined
 }

 /**
@@ -32,6 +32,10 @@ test('committed edits retain their profile and merge with fresh saved URLs', asy
    items: [
      {
        uid: 'old-profile',
+        type: null,
+        name: null,
+        file: null,
+        updated: null,
        latency_test_urls: { untouched: 'https://example.com/' },
      },
    ],
@@ -49,7 +53,16 @@ test('committed edits retain their profile and merge with fresh saved URLs', asy

 test('migration cannot overwrite a previously saved or cleared override', async () => {
  vi.mocked(getProfiles).mockResolvedValue({
-    items: [{ uid: 'p', latency_test_urls: { A: '' } }],
+    items: [
+      {
+        uid: 'p',
+        type: null,
+        name: null,
+        file: null,
+        updated: null,
+        latency_test_urls: { A: '' },
+      },
+    ],
  })
  await saveProfileTestUrls('p', { A: 'http://localhost/stale' }, true)
  expect(patchProfile).not.toHaveBeenCalled()
@@ -59,14 +72,18 @@ test('pending edits survive a reload and older save acknowledgements', async ()
  vi.useFakeTimers()
  const profile = {
    uid: 'pending-profile',
+    type: null,
+    name: null,
+    file: null,
+    updated: null,
    latency_test_urls: { A: 'http://localhost/old' },
  }
  vi.mocked(getProfiles).mockResolvedValue({ items: [profile] })
  let finish!: () => void
  vi.mocked(patchProfile).mockImplementationOnce(
    () =>
-      new Promise<void>((resolve) => {
-        finish = resolve
+      new Promise<null>((resolve) => {
+        finish = () => resolve(null)
      }),
  )
  const first = commitProfileTestUrl(profile.uid, 'A', 'http://localhost/new')
@@ -90,6 +107,10 @@ test('pending edits survive a reload and older save acknowledgements', async ()
 test('a failed save preserves the committed input across profile refreshes', async () => {
  const profile = {
    uid: 'failed-profile',
+    type: null,
+    name: null,
+    file: null,
+    updated: null,
    latency_test_urls: { A: 'http://localhost/old' },
  }
  vi.mocked(getProfiles).mockResolvedValue({ items: [profile] })
--- a/Show More
+++ b/Show More
Author	SHA1	Message	Date
renovate[bot]	ff288b21d3	chore(deps): update cargo dependencies	2026-10-12 06:28:55 +00:00
Tunglies	6e08a77a84	refactor(backend): specta ipc bindings (#8195 ) * refactor(ipc): generate bindings with Specta * fix(profile): project IPC inputs to consumed fields * fix(events): remove unused refresh payloads * fix(webdav): return only consumed backup metadata * fix(network): trim unused interface metadata * fix(sysinfo): return only displayed system fields * chore(knip): check generated runtime exports * fix(proxy): confirm runtime chain updates before UI changes * fix(clipboard): propagate proxy environment copy failures * refactor(dns): remove ignored runtime patch * refactor(core): trim unused upgrade response fields * refactor(ipc): avoid redundant response copies * refactor(proxy): clarify automatic proxy query naming * chore(tests): remove added IPC regression tests * refactor(ipc): enforce typed command boundaries * chore(contract): check generated bindings before push * refactor(ipc): remove unused proxy liveness payloads	2026-10-12 06:16:05 +00:00
❤是纱雾酱哟～andrenovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	27efaf34f4	chore(deps): update dependency pnpm to v12.11.2 (#8252 ) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2026-10-11 16:06:46 +00:00
renovate[bot]andrenovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	585c67f8c5	chore(deps): update rust crate zip to v9 (#8248 ) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2026-10-11 13:23:40 +00:00
oomeowand❤是纱雾酱哟～	d6a2717fc4	fix(profiles): skip reloading current profile on URL import (#8092 ) Co-authored-by: ❤是纱雾酱哟～ <49941141+Dragon1573@users.noreply.github.com>	2026-10-11 12:01:50 +00:00
MrHardandClaude Opus 5.5	84312a5cd1	fix(sysproxy): bypass .local by default on Windows (#8054 ) Hostnames such as mi13.local are resolved by mDNS on the local network, which the proxy core cannot do, so they failed with 'couldn't find ip' while the system proxy was on. The macOS default already bypasses .local. Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-10 16:32:27 +00:00
Magicapple	63ee674dcb	fix(ui): disable auto-capitalization for rule content input (#8052 ) On macOS, WKWebView applies system auto-capitalization to text inputs, so typing a lowercase rule payload (e.g. a domain) in the rule editor dialog turned its first letter into uppercase and required a manual correction. Apply the same input-hint attributes already used by other text fields in the app (autoComplete/autoCorrect/autoCapitalize/spellCheck) to the rule content field. Fixes #8038	2026-10-10 15:40:21 +00:00
wonfen	52dca35acb	ci(signpath): add manual Windows test signing workflow (#8239 )	2026-10-10 09:16:30 +00:00
wonfen	44477d97d4	fix(deps): remove obsolete tray-icon patch	2026-10-09 13:53:14 +08:00
wonfen	0fefa7a7ff	chore: bump version	2026-10-09 13:43:50 +08:00
❤是纱雾酱哟～andrenovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	b6d94d45d5	chore(deps): update dependency pnpm to v12.10.1 (#8217 ) * chore(deps): update dependency pnpm to v12.10.1 * fix(knip): remove unnecessary function `export` Remove export for function `readLegacyTestUrls`, as it didn't be imported somewhere else Assisted-by: vscode-copilot-sdk:copilot:claude-haiku-5.5 codegraph Signed-off-by: ❤是纱雾酱哟～ <49941141+Dragon1573@users.noreply.github.com> --------- Signed-off-by: ❤是纱雾酱哟～ <49941141+Dragon1573@users.noreply.github.com> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2026-10-09 04:11:48 +00:00
aq	9975322b9b	fix(ci): handle plain Copilot 429 in PR review (#8116 ) * fix(ci): handle plain Copilot 429 in PR review Recognize unclassified CLI rate-limit output in the existing non-blocking quota guard. Regenerate the pinned gh-aw workflow so review checks do not fail when Copilot cannot accept a request. * fix(ci): avoid duplicate quota predicates in Copilot review	2026-10-09 03:05:12 +00:00