Release: v2.5.9 (#8508 )

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
fix(webdav): allow clearing saved configuration
2026-11-02 21:12:13 +08:00 · 2026-11-02 17:26:28 +08:00 · 2026-11-02 17:24:13 +08:00 · 2026-11-02 00:46:06 +08:00 · 2026-11-01 13:08:26 +00:00 · 2026-11-01 12:40:42 +00:00
119 changed files with 2108 additions and 1188 deletions
@@ -4,8 +4,8 @@

  "features": {
    "ghcr.io/devcontainers/features/node:2": {
-      "version": "24.22.1",
-      "pnpmVersion": "12.15.0"
+      "version": "26.13.0",
+      "pnpmVersion": "12.16.1"
    },
    "ghcr.io/devcontainers/features/rust:1": {
      "version": "1.99.1",
@@ -51,7 +51,7 @@ jobs:
      - name: Install Node
        uses: actions/setup-node@v7
        with:
-          node-version: '24.22.1'
+          node-version: '26.13.0'

      - name: Install dependencies
        run: pnpm install --frozen-lockfile
@@ -185,7 +185,7 @@ jobs:
      - name: Install Node
        uses: actions/setup-node@v7
        with:
-          node-version: '24.22.1'
+          node-version: '26.13.0'
          cache: 'pnpm'

      - name: Pnpm Cache
@@ -282,7 +282,7 @@ jobs:
      - name: Install Node
        uses: actions/setup-node@v7
        with:
-          node-version: '24.22.1'
+          node-version: '26.13.0'
          cache: 'pnpm'

      - name: Pnpm Cache
@@ -426,7 +426,7 @@ jobs:
      - name: Install Node
        uses: actions/setup-node@v7
        with:
-          node-version: '24.22.1'
+          node-version: '26.13.0'
          cache: 'pnpm'

      - name: Pnpm Cache
@@ -524,7 +524,7 @@ jobs:
      - name: Install Node
        uses: actions/setup-node@v7
        with:
-          node-version: '24.22.1'
+          node-version: '26.13.0'

      - uses: pnpm/action-setup@v6.1.0
        name: Install pnpm
@@ -0,0 +1,80 @@
+name: Contract Parity
+
+on:
+  pull_request:
+    paths:
+      - "src-tauri/**/*.rs"
+      - "crates/**/*.rs"
+      - "Cargo.toml"
+      - "Cargo.lock"
+      - "src-tauri/Cargo.toml"
+      - "crates/**/Cargo.toml"
+      - "rust-toolchain.toml"
+      - "src-tauri/tauri.conf*.json"
+      - "src/services/bindings.ts"
+      - "scripts/gen-contract.mjs"
+      - "scripts/check-contract-changes.mjs"
+      - "biome.json"
+      - "biome.jsonc"
+      - "package.json"
+      - "pnpm-lock.yaml"
+      - "pnpm-workspace.yaml"
+      - "scripts/contract-inputs.json"
+      - ".github/workflows/contract-parity.yml"
+      - ".husky/pre-push"
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+env:
+  HUSKY: 0
+
+jobs:
+  contract-parity:
+    runs-on: ubuntu-26.04
+    steps:
+      - uses: actions/checkout@v7
+
+      - name: Install Rust Stable
+        uses: dtolnay/rust-toolchain@master
+        with:
+          toolchain: stable
+
+      - name: Rust Cache
+        uses: Swatinem/rust-cache@v2
+        with:
+          prefix-key: 'v1-rust'
+          key: 'rust-shared-stable-ubuntu-22.04-x86_64-unknown-linux-gnu-contract'
+          workspaces: |
+            . -> target
+          cache-all-crates: true
+          cache-workspace-crates: true
+
+      - name: Install dependencies
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y libxslt1.1 libwebkit2gtk-4.1-dev libayatana-appindicator3-dev librsvg2-dev patchelf
+
+      - name: Install pnpm
+        uses: pnpm/action-setup@v6
+        with:
+          run_install: false
+
+      - uses: actions/setup-node@v7
+        with:
+          node-version: '26.13.0'
+          cache: 'pnpm'
+
+      - run: pnpm install --frozen-lockfile
+
+      - name: Provision sidecar placeholders for tauri-build
+        run: |
+          mkdir -p src-tauri/sidecar src-tauri/resources dist
+          touch dist/index.html
+          for bin in clash-verge-service clash-verge-service-install clash-verge-service-uninstall verge-mihomo verge-mihomo-alpha; do
+            touch "src-tauri/sidecar/${bin}-x86_64-unknown-linux-gnu"
+          done
+
+      - name: Check generated contract without changing the checkout
+        run: pnpm gen:contract --check
@@ -43,7 +43,7 @@ jobs:
      - name: Install Node
        uses: actions/setup-node@v7
        with:
-          node-version: '24.22.1'
+          node-version: '26.13.0'

      - uses: pnpm/action-setup@v6
        name: Install pnpm
@@ -103,7 +103,7 @@ jobs:
        if: github.event.inputs[matrix.input] == 'true'
        uses: actions/setup-node@v7
        with:
-          node-version: '24.22.1'
+          node-version: '26.13.0'
          cache: 'pnpm'

      - name: Pnpm Cache
@@ -2,11 +2,23 @@ name: Frontend Check

 on:
  pull_request:
+    paths:
+      - "src/**"
+      - "**/*.js"
+      - "**/*.ts"
+      - "**/*.tsx"
+      - "**/*.css"
+      - "**/*.scss"
+      - "**/*.json"
+      - "**/*.md"
+      - "pnpm-lock.yaml"
+      - "pnpm-workspace.yaml"
+      - "vite.config.*"
+      - ".github/workflows/frontend-check.yml"
  workflow_dispatch:

 permissions:
  contents: read
-  pull-requests: read

 env:
  HUSKY: 0
@@ -17,46 +29,17 @@ jobs:
    steps:
      - uses: actions/checkout@v7

-      - name: Check frontend changes
-        id: check_frontend
-        uses: dorny/paths-filter@v4
-        with:
-          filters: |
-            frontend:
-              - 'src/**'
-              - '**/*.js'
-              - '**/*.ts'
-              - '**/*.tsx'
-              - '**/*.css'
-              - '**/*.scss'
-              - '**/*.json'
-              - '**/*.md'
-              - 'package.json'
-              - 'pnpm-lock.yaml'
-              - 'pnpm-workspace.yaml'
-              - 'knip.json'
-              - 'eslint.config.ts'
-              - 'tsconfig.json'
-              - 'vite.config.*'
-
-      - name: Skip if no frontend changes
-        if: steps.check_frontend.outputs.frontend != 'true'
-        run: echo "No frontend changes, skipping frontend checks."
-
      - name: Install pnpm
-        if: steps.check_frontend.outputs.frontend == 'true'
        uses: pnpm/action-setup@v6
        with:
          run_install: false

      - uses: actions/setup-node@v7
-        if: steps.check_frontend.outputs.frontend == 'true'
        with:
-          node-version: '24.22.1'
+          node-version: '26.13.0'
          cache: 'pnpm'

      - name: Restore pnpm cache
-        if: steps.check_frontend.outputs.frontend == 'true'
        uses: actions/cache@v6
        with:
          path: ~/.pnpm-store
@@ -65,94 +48,21 @@ jobs:
            pnpm-shared-stable-${{ runner.os }}-

      - run: pnpm install --frozen-lockfile
-        if: steps.check_frontend.outputs.frontend == 'true'

      - name: Run Prettier check
-        if: steps.check_frontend.outputs.frontend == 'true'
        run: pnpm format:check

      - name: Run ESLint
-        if: steps.check_frontend.outputs.frontend == 'true'
        run: pnpm lint

      - name: Run TypeScript typecheck
-        if: steps.check_frontend.outputs.frontend == 'true'
        run: pnpm typecheck

      - name: Run tests
-        if: steps.check_frontend.outputs.frontend == 'true'
        run: pnpm test

      - name: Run Knip
-        if: steps.check_frontend.outputs.frontend == 'true'
        run: pnpm knip:check

      - name: Architecture gates (listen/emit only in the event bus, invoke only in services)
-        if: steps.check_frontend.outputs.frontend == 'true'
        run: node scripts/check-architecture.mjs listen emit invoke
-
-  contract-parity:
-    runs-on: ubuntu-26.04
-    steps:
-      - uses: actions/checkout@v7
-
-      - name: Check contract inputs
-        id: check_inputs
-        uses: dorny/paths-filter@v4
-        with:
-          filters: scripts/contract-inputs.json
-
-      - name: Skip if contract inputs unchanged
-        if: steps.check_inputs.outputs.contract != 'true'
-        run: echo "No contract inputs changed, skipping parity check."
-
-      - name: Install Rust Stable
-        if: steps.check_inputs.outputs.contract == 'true'
-        uses: dtolnay/rust-toolchain@master
-        with:
-          toolchain: stable
-
-      - name: Rust Cache
-        if: steps.check_inputs.outputs.contract == 'true'
-        uses: Swatinem/rust-cache@v2
-        with:
-          prefix-key: 'v1-rust'
-          key: 'rust-shared-stable-ubuntu-22.04-x86_64-unknown-linux-gnu-contract'
-          workspaces: |
-            . -> target
-          cache-all-crates: true
-          cache-workspace-crates: true
-
-      - name: Install dependencies
-        if: steps.check_inputs.outputs.contract == 'true'
-        run: |
-          sudo apt-get update
-          sudo apt-get install -y libxslt1.1 libwebkit2gtk-4.1-dev libayatana-appindicator3-dev librsvg2-dev patchelf
-
-      - name: Install pnpm
-        if: steps.check_inputs.outputs.contract == 'true'
-        uses: pnpm/action-setup@v6
-        with:
-          run_install: false
-
-      - uses: actions/setup-node@v7
-        if: steps.check_inputs.outputs.contract == 'true'
-        with:
-          node-version: '24.22.1'
-          cache: 'pnpm'
-
-      - run: pnpm install --frozen-lockfile
-        if: steps.check_inputs.outputs.contract == 'true'
-
-      - name: Provision sidecar placeholders for tauri-build
-        if: steps.check_inputs.outputs.contract == 'true'
-        run: |
-          mkdir -p src-tauri/sidecar src-tauri/resources dist
-          touch dist/index.html
-          for bin in clash-verge-service clash-verge-service-install clash-verge-service-uninstall verge-mihomo verge-mihomo-alpha; do
-            touch "src-tauri/sidecar/${bin}-x86_64-unknown-linux-gnu"
-          done
-
-      - name: Check generated contract without changing the checkout
-        if: steps.check_inputs.outputs.contract == 'true'
-        run: pnpm gen:contract --check
@@ -2,6 +2,14 @@ name: Clippy Lint

 on:
  pull_request:
+    paths:
+      - "src-tauri/**"
+      - "crates/**"
+      - "Cargo.toml"
+      - "Cargo.lock"
+      - "rust-toolchain.toml"
+      - ".cargo/config.toml"
+      - ".github/workflows/lint-clippy.yml"
  workflow_dispatch:
 env:
  HUSKY: 0
@@ -23,28 +31,6 @@ jobs:

    runs-on: ${{ matrix.os }}
    steps:
-      - name: Check src-tauri changes
-        if: github.event_name != 'workflow_dispatch'
-        id: check_changes
-        uses: dorny/paths-filter@v4
-        with:
-          filters: |
-            rust:
-              - 'src-tauri/**'
-
-      - name: Skip if src-tauri not changed
-        if: github.event_name != 'workflow_dispatch' && steps.check_changes.outputs.rust != 'true'
-        run: echo "No src-tauri changes, skipping clippy lint."
-
-      - name: Continue if src-tauri changed
-        if: github.event_name != 'workflow_dispatch' && steps.check_changes.outputs.rust == 'true'
-        run: echo "src-tauri changed, running clippy lint."
-
-      - name: Manual trigger - always run
-        if: github.event_name == 'workflow_dispatch'
-        run: |
-          echo "Manual trigger detected: skipping changes check and running clippy."
-
      - name: Checkout Repository
        uses: actions/checkout@v7

@@ -79,7 +65,7 @@ jobs:
        run: cargo clippy-all

      - name: Run Windows security tests
-        if: matrix.os == 'windows-latest' && (github.event_name == 'workflow_dispatch' || steps.check_changes.outputs.rust == 'true')
+        if: matrix.os == 'windows-latest'
        working-directory: ./src-tauri
        run: cargo test --all-features --target ${{ matrix.target }}

@@ -0,0 +1,79 @@
+name: Prepare Release
+
+on:
+  pull_request_target:
+    types: [edited, closed]
+    branches: [dev]
+  workflow_dispatch:
+    inputs:
+      channel:
+        description: Release channel
+        required: true
+        type: choice
+        options: [rc, stable]
+        default: rc
+      release_tag:
+        description: 'Optional tag: vX.Y.Z-rc[.N] for RC, vX.Y.Z for stable'
+        required: false
+        type: string
+
+permissions:
+  contents: write
+  pull-requests: write
+
+concurrency:
+  group: prepare-release
+  cancel-in-progress: false
+
+jobs:
+  prepare:
+    if: >-
+      ${{ github.event_name == 'workflow_dispatch' ||
+          (github.event.pull_request.head.repo.full_name == github.repository &&
+           github.event.pull_request.user.login == 'github-actions[bot]' &&
+           ((startsWith(github.event.pull_request.head.ref, 'release/v') &&
+             ((github.event.action == 'closed' && github.event.pull_request.merged == true) ||
+              (github.event.changes.body && github.event.pull_request.state == 'open' &&
+               contains(github.event.pull_request.body, '[x] Refresh this PR from latest dev')))) ||
+            (startsWith(github.event.pull_request.head.ref, 'next-dev/v') &&
+             github.event.changes.body && github.event.pull_request.state == 'open' &&
+             (contains(github.event.pull_request.body, '[x] Refresh this PR from latest dev') ||
+              contains(github.event.pull_request.body, '[x] Use the next minor version') !=
+              contains(github.event.changes.body.from, '[x] Use the next minor version'))))) }}
+    runs-on: ubuntu-latest
+    env:
+      GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+    steps:
+      - name: Require the dev branch
+        if: github.event_name == 'workflow_dispatch'
+        env:
+          SOURCE_REF: ${{ github.ref }}
+        run: |
+          if [[ "$SOURCE_REF" != 'refs/heads/dev' ]]; then
+            echo '::error::Run Prepare Release from the dev branch.'
+            exit 1
+          fi
+
+      - uses: actions/checkout@v7
+        with:
+          ref: refs/heads/dev
+          fetch-depth: 0
+
+      - uses: actions/setup-node@v7
+        with:
+          node-version: '26.13.0'
+
+      - uses: pnpm/action-setup@v6
+        if: github.event.action != 'closed'
+        with:
+          run_install: false
+
+      - run: pnpm install --frozen-lockfile --ignore-scripts
+        if: github.event.action != 'closed'
+
+      - name: Create or refresh version or publication PR
+        env:
+          RELEASE_TAG: ${{ inputs.release_tag }}
+          RELEASE_CHANNEL: ${{ inputs.channel }}
+          RELEASE_COMMAND: ${{ github.event.action == 'closed' && 'publish-pr' || startsWith(github.event.pull_request.head.ref, 'next-dev/') && 'next-dev' || 'prepare' }}
+        run: node scripts-workflow/release.mjs "$RELEASE_COMMAND"
@@ -1,6 +1,9 @@
 name: Release Build

 on:
+  pull_request:
+    types: [edited]
+    branches: [main]
  push:
    # -rc tag 时预览发布, 跳过 telegram 通知、跳过 winget 提交、跳过 latest.json 文件更新
    tags:
@@ -11,75 +14,59 @@ env:
  RUST_BACKTRACE: short
  HUSKY: 0
 concurrency:
-  group: '${{ github.workflow }} - ${{ github.head_ref || github.ref }}'
-  cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}
+  group: release-publication
+  cancel-in-progress: false

 jobs:
-  check_tag_version:
-    name: Check Release Tag and package.json Version Consistency
+  prepare_release:
+    name: Approve Snapshot and Prepare Draft Release
+    if: >-
+      ${{ github.event_name == 'push' ||
+          (github.event.changes.body &&
+           github.event.pull_request.head.repo.full_name == github.repository &&
+           github.event.pull_request.user.login == 'github-actions[bot]' &&
+           startsWith(github.event.pull_request.head.ref, 'publish/v') &&
+           contains(github.event.pull_request.body, '[x] Publish this approved release')) }}
    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      pull-requests: read
+    env:
+      GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+    outputs:
+      release_tag: ${{ steps.source.outputs.release_tag }}
+      source_sha: ${{ steps.source.outputs.source_sha }}
+      channel: ${{ steps.source.outputs.channel }}
+      release_id: ${{ steps.draft.outputs.id }}
    steps:
-      - name: Checkout repository
+      - name: Checkout trusted release tooling
        uses: actions/checkout@v7
        with:
+          ref: refs/heads/dev
          fetch-depth: 0
-
-      - name: Check if tag is from main branch
-        run: |
-          TAG_REF="${GITHUB_REF##*/}"
-          echo "Checking if tag $TAG_REF is from main branch..."
-
-          TAG_COMMIT=$(git rev-list -n 1 $TAG_REF)
-          MAIN_COMMITS=$(git rev-list origin/main)
-
-          if echo "$MAIN_COMMITS" | grep -q "$TAG_COMMIT"; then
-            echo "✅ Tag $TAG_REF is from main branch"
-          else
-            echo "❌ Tag $TAG_REF is not from main branch"
-            echo "This release workflow only accepts tags from main branch."
-            exit 1
-          fi
-
-      - name: Check tag and package.json version
-        run: |
-          TAG_REF="${GITHUB_REF_NAME:-${GITHUB_REF##*/}}"
-          echo "Current tag: $TAG_REF"
-
-          PKG_VERSION=$(jq -r .version package.json)
-          echo "package.json version: $PKG_VERSION"
-
-          EXPECTED_TAG="v$PKG_VERSION"
-
-          if [[ "$TAG_REF" != "$EXPECTED_TAG" ]]; then
-            echo "❌ Version mismatch:"
-            echo "   Git tag       : $TAG_REF"
-            echo "   package.json  : $EXPECTED_TAG"
-            exit 1
-          fi
-
-          echo "✅ Tag and package.json version are consistent."
-
-  prepare_release:
-    name: Prepare Draft Release
-    runs-on: ubuntu-latest
-    needs: [check_tag_version]
-    outputs:
-      release_id: ${{ steps.prepare_release.outputs.id }}
-    steps:
-      - name: Create or update draft release
-        id: prepare_release
-        uses: softprops/action-gh-release@v3
+      - uses: actions/setup-node@v7
        with:
-          tag_name: ${{ github.ref_name }}
-          target_commitish: ${{ github.sha }}
-          name: 'Clash Verge Rev ${{ github.ref_name }}'
-          body: 'Draft release, will be updated later.'
-          token: ${{ secrets.GITHUB_TOKEN }}
-          draft: true
-          prerelease: ${{ contains(github.ref_name, '-rc') }}
+          node-version: '26.13.0'
+      - name: Validate source and publish the approved snapshot
+        id: source
+        env:
+          RELEASE_COMMAND: ${{ github.event_name == 'push' && 'validate-tag' || 'publish' }}
+        run: node scripts-workflow/release.mjs "$RELEASE_COMMAND"
+
+      - name: Create or reuse draft release
+        id: draft
+        env:
+          RELEASE_TAG: ${{ steps.source.outputs.release_tag }}
+          SOURCE_SHA: ${{ steps.source.outputs.source_sha }}
+        run: node scripts-workflow/release.mjs prepare-draft

  update_tag:
-    name: Update tag
+    name: Publish Completed Release
+    env:
+      RELEASE_TAG: ${{ needs.prepare_release.outputs.release_tag }}
+    outputs:
+      source_sha: ${{ needs.prepare_release.outputs.source_sha }}
+      channel: ${{ needs.prepare_release.outputs.channel }}
    runs-on: ubuntu-latest
    needs:
      [
@@ -91,6 +78,8 @@ jobs:
    steps:
      - name: Checkout repository
        uses: actions/checkout@v7
+        with:
+          ref: ${{ needs.prepare_release.outputs.source_sha }}

      - name: Group changelog platforms
        run: bash ./scripts-workflow/group_platforms.sh
@@ -103,7 +92,7 @@ jobs:
      - name: Set Env
        run: |
          echo "BUILDTIME=$(TZ=Asia/Shanghai date)" >> $GITHUB_ENV
-          TAG_REF="${GITHUB_REF##*/}"
+          TAG_REF="$RELEASE_TAG"
          echo "TAG_NAME=$TAG_REF" >> $GITHUB_ENV
          VERSION=$(echo "$TAG_REF" | sed 's/^v//')
          echo "VERSION=$VERSION" >> $GITHUB_ENV
@@ -149,10 +138,16 @@ jobs:
          Created at ${{ env.BUILDTIME }}.
          EOF

+      - name: Verify release tag still points to the approved source
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          SOURCE_SHA: ${{ needs.prepare_release.outputs.source_sha }}
+        run: node scripts-workflow/release.mjs verify-target
+
      - name: Publish Release
        env:
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          PRERELEASE: ${{ contains(github.ref_name, '-rc') }}
+          PRERELEASE: ${{ contains(env.RELEASE_TAG, '-rc') }}
        run: |
          release_id="${{ needs.prepare_release.outputs.release_id }}"

@@ -181,6 +176,8 @@ jobs:
  release:
    name: Release Build
    needs: [prepare_release]
+    env:
+      RELEASE_TAG: ${{ needs.prepare_release.outputs.release_tag }}
    strategy:
      fail-fast: false
      matrix:
@@ -200,6 +197,8 @@ jobs:
    steps:
      - name: Checkout Repository
        uses: actions/checkout@v7
+        with:
+          ref: ${{ needs.prepare_release.outputs.source_sha }}

      - name: Install Rust Stable
        uses: dtolnay/rust-toolchain@master
@@ -230,7 +229,7 @@ jobs:
      - name: Install Node
        uses: actions/setup-node@v7
        with:
-          node-version: '24.22.1'
+          node-version: '26.13.0'

      - uses: pnpm/action-setup@v6
        name: Install pnpm
@@ -249,7 +248,6 @@ jobs:
          echo "Rust target ${{ matrix.target }} installed."

      - name: Tauri build
-        # 上游 5.24 修改了 latest.json 的生成逻辑，且依赖 tauri-plugin-update 2.10.0 暂未发布，故锁定在 0.5.23 版本
        uses: tauri-apps/tauri-action@v1.0.0
        env:
          NODE_OPTIONS: '--max_old_space_size=4096'
@@ -264,11 +262,14 @@ jobs:
          APPLE_TEAM_ID: ${{ secrets.APPLE_TEAM_ID }}
        with:
          releaseId: ${{ needs.prepare_release.outputs.release_id }}
-          tagName: ${{ github.ref_name }}
+          tagName: ${{ env.RELEASE_TAG }}
          releaseBody: 'Draft release, will be updated later.'
+          releaseDraft: true
+          prerelease: ${{ needs.prepare_release.outputs.channel == 'rc' }}
+          releaseCommitish: ${{ needs.prepare_release.outputs.source_sha }}
          tauriScript: pnpm
          args: --target ${{ matrix.target }}
-          includeUpdaterJson: true
+          uploadUpdaterJson: ${{ needs.prepare_release.outputs.channel == 'stable' }}

      - name: Attest Windows bundles
        if: matrix.os == 'windows-latest'
@@ -293,6 +294,8 @@ jobs:
  release-for-linux-arm:
    name: Release Build for Linux ARM
    needs: [prepare_release]
+    env:
+      RELEASE_TAG: ${{ needs.prepare_release.outputs.release_tag }}
    strategy:
      fail-fast: false
      matrix:
@@ -307,6 +310,8 @@ jobs:
    steps:
      - name: Checkout Repository
        uses: actions/checkout@v7
+        with:
+          ref: ${{ needs.prepare_release.outputs.source_sha }}

      - name: Install Rust Stable
        uses: dtolnay/rust-toolchain@master
@@ -331,7 +336,7 @@ jobs:
      - name: Install Node
        uses: actions/setup-node@v7
        with:
-          node-version: '24.22.1'
+          node-version: '26.13.0'

      - name: Install pnpm
        uses: pnpm/action-setup@v6
@@ -420,7 +425,7 @@ jobs:
        env:
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: |
-          gh release upload "${{ github.ref_name }}" \
+          gh release upload "$RELEASE_TAG" \
            target/${{ matrix.target }}/release/bundle/deb/*.deb \
            target/${{ matrix.target }}/release/bundle/rpm/*.rpm \
            --clobber
@@ -428,6 +433,8 @@ jobs:
  release-for-fixed-webview2:
    name: Release Build for Fixed WebView2
    needs: [prepare_release]
+    env:
+      RELEASE_TAG: ${{ needs.prepare_release.outputs.release_tag }}
    strategy:
      fail-fast: false
      matrix:
@@ -442,6 +449,8 @@ jobs:
    steps:
      - name: Checkout Repository
        uses: actions/checkout@v7
+        with:
+          ref: ${{ needs.prepare_release.outputs.source_sha }}

      - name: Install Rust Stable
        uses: dtolnay/rust-toolchain@master
@@ -466,7 +475,7 @@ jobs:
      - name: Install Node
        uses: actions/setup-node@v7
        with:
-          node-version: '24.22.1'
+          node-version: '26.13.0'

      - uses: pnpm/action-setup@v6
        name: Install pnpm
@@ -532,22 +541,55 @@ jobs:
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: |
          $files = Get-ChildItem "target\${{ matrix.target }}\release\bundle\nsis\*setup*" | Select-Object -ExpandProperty FullName
-          gh release upload "${{ github.ref_name }}" $files --clobber
+          gh release upload "$env:RELEASE_TAG" $files --clobber
          if ($LASTEXITCODE -ne 0) { exit $LASTEXITCODE }

+  prepare-next-dev:
+    name: Prepare Next Dev Version
+    if: ${{ needs.update_tag.outputs.channel == 'stable' }}
+    needs: [prepare_release, update_tag]
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      pull-requests: write
+    concurrency:
+      group: prepare-release
+      cancel-in-progress: false
+    env:
+      GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      RELEASE_TAG: ${{ needs.prepare_release.outputs.release_tag }}
+      SOURCE_SHA: ${{ needs.prepare_release.outputs.source_sha }}
+    steps:
+      - uses: actions/checkout@v7
+        with:
+          ref: refs/heads/dev
+          fetch-depth: 0
+      - uses: actions/setup-node@v7
+        with:
+          node-version: '26.13.0'
+      - uses: pnpm/action-setup@v6
+        with:
+          run_install: false
+      - name: Prepare version and changelog PR
+        run: |
+          pnpm install --frozen-lockfile --ignore-scripts
+          node scripts-workflow/release.mjs next-dev
+
  release-update:
-    if: ${{ !contains(github.ref_name, '-rc') }}
+    if: ${{ needs.update_tag.outputs.channel == 'stable' }}
    name: Release Update
    runs-on: ubuntu-latest
    needs: [update_tag]
    steps:
      - name: Checkout repository
        uses: actions/checkout@v7
+        with:
+          ref: ${{ needs.update_tag.outputs.source_sha }}

      - name: Install Node
        uses: actions/setup-node@v7
        with:
-          node-version: '24.22.1'
+          node-version: '26.13.0'

      - uses: pnpm/action-setup@v6
        name: Install pnpm
@@ -563,17 +605,19 @@ jobs:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

  release-update-for-fixed-webview2:
-    if: ${{ !contains(github.ref_name, '-rc') }}
+    if: ${{ needs.update_tag.outputs.channel == 'stable' }}
    runs-on: ubuntu-latest
    needs: [update_tag]
    steps:
      - name: Checkout repository
        uses: actions/checkout@v7
+        with:
+          ref: ${{ needs.update_tag.outputs.source_sha }}

      - name: Install Node
        uses: actions/setup-node@v7
        with:
-          node-version: '24.22.1'
+          node-version: '26.13.0'

      - uses: pnpm/action-setup@v6
        name: Install pnpm
@@ -589,7 +633,7 @@ jobs:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

  submit-to-winget:
-    if: ${{ !contains(github.ref_name, '-rc') }}
+    if: ${{ needs.update_tag.outputs.channel == 'stable' }}
    name: Submit to Winget
    runs-on: ubuntu-latest
    needs: [update_tag, release-update]
@@ -597,6 +641,7 @@ jobs:
      - name: Checkout repository
        uses: actions/checkout@v7
        with:
+          ref: ${{ needs.update_tag.outputs.source_sha }}
          fetch-depth: 0
      - name: Get Version
        run: |
@@ -613,7 +658,7 @@ jobs:
          token: ${{ secrets.WINGET_TOKEN  }}

  notify-telegram:
-    if: ${{ !contains(github.ref_name, '-rc') }}
+    if: ${{ needs.update_tag.outputs.channel == 'stable' }}
    name: Notify Telegram
    runs-on: ubuntu-latest
    needs:
@@ -626,6 +671,8 @@ jobs:
    steps:
      - name: Checkout repository
        uses: actions/checkout@v7
+        with:
+          ref: ${{ needs.update_tag.outputs.source_sha }}

      - name: Group changelog platforms
        run: bash ./scripts-workflow/group_platforms.sh
@@ -638,7 +685,7 @@ jobs:
      - name: Install Node
        uses: actions/setup-node@v7
        with:
-          node-version: '24.22.1'
+          node-version: '26.13.0'

      - uses: pnpm/action-setup@v6
        name: Install pnpm
@@ -6,6 +6,12 @@ name: Check Formatting

 on:
  pull_request:
+    paths:
+      - "src-tauri/**"
+      - "**/*.rs"
+      - "rustfmt.toml"
+      - "rust-toolchain.toml"
+      - ".github/workflows/rustfmt.yml"

 permissions:
  contents: read
@@ -19,25 +25,10 @@ jobs:
    steps:
      - uses: actions/checkout@v7

-      - name: Check Rust changes
-        id: check_rust
-        uses: dorny/paths-filter@v4
-        with:
-          filters: |
-            rust:
-              - 'src-tauri/**'
-              - '**/*.rs'
-
-      - name: Skip if no Rust changes
-        if: steps.check_rust.outputs.rust != 'true'
-        run: echo "No Rust changes, skipping rustfmt."
-
      - name: install Rust stable and rustfmt
-        if: steps.check_rust.outputs.rust == 'true'
        uses: dtolnay/rust-toolchain@stable
        with:
          components: rustfmt

      - name: run cargo fmt
-        if: steps.check_rust.outputs.rust == 'true'
        run: cargo fmt --manifest-path ./src-tauri/Cargo.toml --all -- --check
@@ -28,7 +28,7 @@ jobs:
      - name: Install Node
        uses: actions/setup-node@v7
        with:
-          node-version: '24.22.1'
+          node-version: '26.13.0'

      - name: Install pnpm
        uses: pnpm/action-setup@v6
@@ -34,7 +34,7 @@ jobs:
      - name: Install Node
        uses: actions/setup-node@v7
        with:
-          node-version: '24.22.1'
+          node-version: '26.13.0'

      - uses: pnpm/action-setup@v6
        name: Install pnpm
@@ -15,7 +15,7 @@ jobs:
      - name: Install Node
        uses: actions/setup-node@v7
        with:
-          node-version: '24.22.1'
+          node-version: '26.13.0'

      - uses: pnpm/action-setup@v6
        name: Install pnpm
@@ -39,7 +39,7 @@ jobs:
      - name: Install Node
        uses: actions/setup-node@v7
        with:
-          node-version: '24.22.1'
+          node-version: '26.13.0'

      - uses: pnpm/action-setup@v6
        name: Install pnpm
@@ -1,3 +1,3 @@
-nodejs 24.22.1
-pnpm 12.15.0
+nodejs 26.13.0
+pnpm 12.16.1
 rust 1.99.1
@@ -28,7 +28,7 @@ Before contributing, you need to set up your development environment. Follow the
 ### Prerequisites

 1. **Install Rust and Node.js**  
-   Our project requires both Rust and Node.js. Follow the official installation instructions [here](https://tauri.app/start/prerequisites/).
+   Follow the [Tauri prerequisites](https://tauri.app/start/prerequisites/) for your operating system. Use the Node.js version in [`.tool-versions`](.tool-versions); [`rust-toolchain.toml`](rust-toolchain.toml) selects the Rust version and required components when you run Cargo from this repository.

 ### Windows Users

@@ -51,18 +51,21 @@ rustup set default-host x86_64-pc-windows-msvc

 ### Install Node.js Package Manager

-Enable `corepack`:
+[Corepack is no longer bundled with Node.js starting with Node.js 25](https://nodejs.org/api/corepack.html). Install it globally if it is not already available, then enable it:

 ```bash
+npm install --global corepack
 corepack enable
 ```

+Run pnpm from this repository so Corepack selects the version pinned by `packageManager` in [`package.json`](package.json).
+
 ### Install Project Dependencies

 Node.js dependencies:

 ```bash
-pnpm install
+pnpm install --frozen-lockfile
 ```

 Ubuntu-only system packages:
@@ -78,14 +81,24 @@ pnpm run prebuild
 pnpm run prebuild --force  # Re-download and overwrite Mihomo core and service binaries
 ```

+### Prepare the Development Service Source
+
+`pnpm dev` builds the development service from a sibling checkout of [`clash-verge-service-ipc`](https://github.com/clash-verge-rev/clash-verge-service-ipc). The binaries downloaded by `pnpm prebuild` do not replace this source checkout.
+
+Check the `clash_verge_service_ipc` dependency in [`src-tauri/Cargo.toml`](src-tauri/Cargo.toml), then clone the service repository alongside `clash-verge-rev` and check out the matching tag. If the sibling directory already exists, reuse it and check its version rather than overwriting it. Without this checkout, `pnpm dev` fails when it tries to access `../clash-verge-service-ipc/Cargo.toml`.
+
 ### Run the Development Server

+Run these commands from the root of `clash-verge-rev`:
+
 ```bash
-pnpm dev           # Standard
-pnpm dev:diff      # If an app instance already exists
-pnpm dev:tauri     # Run Tauri development mode
+pnpm dev           # Build the development service and start the desktop app
+pnpm dev:diff      # Alias of pnpm dev
+pnpm dev:tauri     # Run Tauri directly with the tauri-dev feature
 ```

+For frontend-only development, use `pnpm web:dev`. It does not start the Rust backend or build the development service.
+
 ### Build the Project

 Standard build:
@@ -33,6 +33,7 @@ dependencies = [
 "cipher",
 "cpubits",
 "cpufeatures 0.3.0",
+ "zeroize",
 ]

 [[package]]
@@ -135,15 +136,6 @@ version = "1.0.104"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "330a5ed07fa54e4702c9d6c4174f74427fc0ef6e214bbd677ae50a5099946470"

-[[package]]
-name = "arbitrary"
-version = "1.4.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c3d036a3c4ab069c7b410a2ce876bd74808d2d0888a82667669f8e783a898bf1"
-dependencies = [
- "derive_arbitrary",
-]
-
 [[package]]
 name = "arboard"
 version = "3.6.1"
@@ -1139,6 +1131,7 @@ dependencies = [
 "serde_json",
 "serde_yaml_ng",
 "sha2 0.11.1",
+ "smartstring",
 "socket2",
 "specta",
 "specta-typescript",
@@ -1168,14 +1161,13 @@ dependencies = [
 "tokio-stream",
 "tokio-util",
 "tracing",
- "tristr",
 "warp",
 "webpki-roots",
 "windows 0.62.2",
 "windows-service",
 "windows-sys 0.61.2",
 "winreg 0.56.0",
- "zip 9.0.4",
+ "zip",
 ]

 [[package]]
@@ -1342,7 +1334,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "117725a109d387c937a1533ce01b450cbde6b88abceea8473c4d7a85853cda3c"
 dependencies = [
 "lazy_static",
- "windows-sys 0.59.0",
+ "windows-sys 0.52.0",
 ]

 [[package]]
@@ -1870,17 +1862,6 @@ dependencies = [
 "serde_core",
 ]

-[[package]]
-name = "derive_arbitrary"
-version = "1.4.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1e567bd82dcff979e4b03460c307b3cdc9e96fde3d73bed1496d2bc75d9dd62a"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn 2.0.119",
-]
-
 [[package]]
 name = "derive_more"
 version = "2.1.1"
@@ -2034,7 +2015,7 @@ dependencies = [
 "libc",
 "option-ext",
 "redox_users 0.5.2",
- "windows-sys 0.61.2",
+ "windows-sys 0.60.2",
 ]

 [[package]]
@@ -2293,7 +2274,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "39cab71617ae0d63f51a36d69f866391735b51691dbda63cf6f96d042b63efeb"
 dependencies = [
 "libc",
- "windows-sys 0.61.2",
+ "windows-sys 0.52.0",
 ]

 [[package]]
@@ -2809,7 +2790,7 @@ dependencies = [
 "gobject-sys 0.21.5",
 "libc",
 "system-deps 7.0.8",
- "windows-sys 0.61.2",
+ "windows-sys 0.52.0",
 ]

 [[package]]
@@ -3363,7 +3344,7 @@ dependencies = [
 "js-sys",
 "log",
 "wasm-bindgen",
- "windows-core 0.62.2",
+ "windows-core 0.61.2",
 ]

 [[package]]
@@ -4051,9 +4032,9 @@ checksum = "112b39cec0b298b6c1999fee3e31427f74f676e4cb9879ed1a121b43661a4154"

 [[package]]
 name = "lzma-rust2"
-version = "0.22.0"
+version = "0.23.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7277c9742229dc25243236d578b6471a798c554512c6f6a04365ec2e87c2a3bb"
+checksum = "f1c46f3fcd2e888afdb01a07efc071cb21300e07c68d32c3e8b01b5c8cb1fcaa"
 dependencies = [
 "sha2 0.11.1",
 ]
@@ -4234,7 +4215,7 @@ dependencies = [
 "png 0.18.1",
 "serde",
 "thiserror 2.0.20",
- "windows-sys 0.61.2",
+ "windows-sys 0.60.2",
 ]

 [[package]]
@@ -4401,7 +4382,7 @@ version = "0.50.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "7957b9740744892f114936ab4a57b3f487491bbeafaf8083688b16841a4240e5"
 dependencies = [
- "windows-sys 0.61.2",
+ "windows-sys 0.60.2",
 ]

 [[package]]
@@ -4878,7 +4859,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "7d8fae84b431384b68627d0f9b3b1245fcf9f46f6c0e3dc902e9dce64edd1967"
 dependencies = [
 "libc",
- "windows-sys 0.61.2",
+ "windows-sys 0.52.0",
 ]

 [[package]]
@@ -5543,7 +5524,7 @@ dependencies = [
 "once_cell",
 "socket2",
 "tracing",
- "windows-sys 0.61.2",
+ "windows-sys 0.52.0",
 ]

 [[package]]
@@ -6047,7 +6028,7 @@ dependencies = [
 "errno",
 "libc",
 "linux-raw-sys 0.4.15",
- "windows-sys 0.59.0",
+ "windows-sys 0.52.0",
 ]

 [[package]]
@@ -6060,7 +6041,7 @@ dependencies = [
 "errno",
 "libc",
 "linux-raw-sys 0.12.1",
- "windows-sys 0.61.2",
+ "windows-sys 0.52.0",
 ]

 [[package]]
@@ -6119,7 +6100,7 @@ dependencies = [
 "security-framework",
 "security-framework-sys",
 "webpki-root-certs",
- "windows-sys 0.61.2",
+ "windows-sys 0.52.0",
 ]

 [[package]]
@@ -6720,6 +6701,18 @@ dependencies = [
 "thiserror 2.0.20",
 ]

+[[package]]
+name = "smartstring"
+version = "1.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3fb72c633efbaa2dd666986505016c32c3044395ceaf881518399d2f4127ee29"
+dependencies = [
+ "autocfg",
+ "serde",
+ "static_assertions",
+ "version_check",
+]
+
 [[package]]
 name = "socket2"
 version = "0.6.5"
@@ -6727,7 +6720,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "c3d1e2c7f27f8d4cb10542a02c49005dbd6e93095799d6f3be745fae9f8fedd4"
 dependencies = [
 "libc",
- "windows-sys 0.61.2",
+ "windows-sys 0.60.2",
 ]

 [[package]]
@@ -7076,9 +7069,9 @@ checksum = "c0e973b34477b7823833469eb0f5a3a60370fef7a453e02d751b59180d0a5a05"

 [[package]]
 name = "tao"
-version = "0.37.1"
+version = "0.37.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f37f381f4e048e6cdf038b5705f8cf14ad108279d46eb968140a7b291aba9400"
+checksum = "d5777b06fe6435126ae8d816eba269e050e1e10d302cf5461e9c49eccabc3548"
 dependencies = [
 "bitflags 2.13.2",
 "block2",
@@ -7563,11 +7556,11 @@ dependencies = [

 [[package]]
 name = "tauri-plugin-updater"
-version = "2.14.0"
+version = "2.14.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7259989d4fe11b2bf51f7d671642249b1837c4ae2da1430dc713ae38f98ceeec"
+checksum = "d957abbcb3f9f6c76d22a3a0f012f30880640d0bccb5634d2b12a9937e4c872b"
 dependencies = [
- "base64 0.22.1",
+ "base64 0.23.1",
 "dirs 7.0.0",
 "flate2",
 "futures-util",
@@ -7592,7 +7585,7 @@ dependencies = [
 "tokio",
 "url",
 "windows-sys 0.61.2",
- "zip 4.6.1",
+ "zip",
 ]

 [[package]]
@@ -7793,10 +7786,10 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "32497e9a4c7b38532efcdebeef879707aa9f794296a4f0244f6f69e9bc8574bd"
 dependencies = [
 "fastrand",
- "getrandom 0.4.3",
+ "getrandom 0.3.4",
 "once_cell",
 "rustix 1.1.4",
- "windows-sys 0.61.2",
+ "windows-sys 0.52.0",
 ]

 [[package]]
@@ -8462,7 +8455,7 @@ dependencies = [
 "png 0.18.1",
 "serde",
 "thiserror 2.0.20",
- "windows-sys 0.61.2",
+ "windows-sys 0.60.2",
 ]

 [[package]]
@@ -8493,14 +8486,6 @@ dependencies = [
 "stable_deref_trait",
 ]

-[[package]]
-name = "tristr"
-version = "0.1.0"
-dependencies = [
- "serde",
- "specta",
-]
-
 [[package]]
 name = "try-lock"
 version = "0.2.5"
@@ -8549,9 +8534,9 @@ dependencies = [

 [[package]]
 name = "typed-path"
-version = "0.12.3"
+version = "0.13.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8e28f89b80c87b8fb0cf04ab448d5dd0dd0ade2f8891bae878de66a75a28600e"
+checksum = "9ce898823d8cd0f028662d2f349694b1af0a5cc9be83f1d213a00d3147445e1e"

 [[package]]
 name = "typeid"
@@ -8579,7 +8564,7 @@ checksum = "f2f6fb2847f6742cd76af783a2a2c49e9375d0a111c7bef6f71cd9e738c72d6e"
 dependencies = [
 "memoffset",
 "tempfile",
- "windows-sys 0.61.2",
+ "windows-sys 0.60.2",
 ]

 [[package]]
@@ -9121,7 +9106,7 @@ version = "0.1.11"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "c2a7b1c03c876122aa43f3020e6c3c3ee5c05081c9a00739faf7503aeba10d22"
 dependencies = [
- "windows-sys 0.61.2",
+ "windows-sys 0.52.0",
 ]

 [[package]]
@@ -9142,7 +9127,7 @@ dependencies = [
 "objc2-foundation",
 "objc2-quartz-core",
 "raw-window-handle",
- "windows-sys 0.61.2",
+ "windows-sys 0.60.2",
 "windows-version",
 ]

@@ -9717,7 +9702,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "7d6f32a0ff4a9f6f01231eb2059cc85479330739333e0e58cadf03b6af2cca10"
 dependencies = [
 "cfg-if",
- "windows-sys 0.61.2",
+ "windows-sys 0.60.2",
 ]

 [[package]]
@@ -9758,11 +9743,11 @@ checksum = "3ad82d2a33cdc9674dc7465672f271e096168fcdbe0f799d9e6db8c5892679dc"

 [[package]]
 name = "wry"
-version = "0.57.0"
+version = "0.57.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a819957a01b3119af85e638a38d242af76dbc87d130dca67bfd0441072e21ff0"
+checksum = "759c50ddad0ef9913bb5496cb9d509a50433a3b78cb0238d61105526589cf0e9"
 dependencies = [
- "base64 0.22.1",
+ "base64 0.23.1",
 "block2",
 "cookie",
 "crossbeam-channel",
@@ -9783,7 +9768,6 @@ dependencies = [
 "objc2-foundation",
 "objc2-ui-kit",
 "objc2-web-kit",
- "once_cell",
 "percent-encoding",
 "raw-window-handle",
 "sha2 0.10.9",
@@ -10050,21 +10034,9 @@ dependencies = [

 [[package]]
 name = "zip"
-version = "4.6.1"
+version = "9.1.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "caa8cd6af31c3b31c6631b8f483848b91589021b28fffe50adada48d4f4d2ed1"
-dependencies = [
- "arbitrary",
- "crc32fast",
- "indexmap 2.14.0",
- "memchr",
-]
-
-[[package]]
-name = "zip"
-version = "9.0.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a954114b47a54df49f83d2722814e86b23d4bb1b54a1b90fb7d92b41619ddc22"
+checksum = "1156b39d142a34b999c2310a50455e0cb3760bf7efad0122f796d813bee26ccb"
 dependencies = [
 "aes",
 "bzip2",
@@ -10083,6 +10055,7 @@ dependencies = [
 "sha1 0.11.0",
 "time",
 "typed-path",
+ "windows-sys 0.61.2",
 "zeroize",
 "zopfli",
 "zstd",
@@ -85,8 +85,9 @@ reqwest = { version = "0.13.5", features = [
 ] }
 rust_iso3166 = "0.2.0"

+smartstring = { version = "1.0.1" }
+
 serde = { version = "1.0.229" }
-tristr = { path = "../tristr", default-features = false, features = ["serde", "specta"] }
 serde_json = { version = "1.0.154" }
 serde_yaml_ng = { version = "0.10.0" }
 bitflags = { version = "2.13.2" }
@@ -1,12 +1,23 @@
 ## v2.5.9

+- **Mihomo(Meta) 内核升级至 v1.19.33**
+
 <details>
 <summary><strong> 🐞 修复问题 </strong></summary>

+- 修复规则扩展包含空列表项时，「编辑规则」界面报错的问题
+- 修复 重启应用后定时自动备份不执行的问题
 - 修复托盘测速与代理页行为不一致的问题，移除托盘「测试延迟」入口
 - 修复通过 URL 导入订阅时，即使导入的订阅并非当前使用的订阅，也会重新加载当前配置
 - 修复 首页 网站测速失败后卡片一直显示测试中
 - 修复 代理 页展开分组后不显示最新测速结果，需切换节点才刷新
+- 修复 代理 在全局模式下无法展开节点组
+- 修复 自定义 CSS 无法修改编辑器字体和字号的问题
+- 修复 WebDAV 设置清空后无法保存
+
+**🍎 macOS**
+
+- macOS：修复 Bigsur 上首页测速和流量图无法显示的问题

 **🐧 Linux**

@@ -18,6 +29,8 @@
 <summary><strong> ✨ 新增功能 </strong></summary>

 - 新增虚拟网卡设置的「DNS 模式」选项，支持配置 mihomo 系统 DNS 行为
+- 新增「IP 信息」自动刷新开关，关闭后仍可手动刷新
+- 新增 Muse AI 解锁检测，针对 Muse AI 特有的 Cloudflare 人机验证增加「Risky」状态标记

 </details>

@@ -11,6 +11,7 @@ mod chatgpt;
 mod claude;
 mod disney_plus;
 mod gemini;
+mod muse;
 mod netflix;
 mod prime_video;
 mod spotify;
@@ -30,6 +31,7 @@ enum UnlockCheck {
    ChatGptWeb,
    Claude,
    Gemini,
+    MuseAi,
    YouTubePremium,
    BahamutAnime,
    Netflix,
@@ -46,6 +48,7 @@ impl UnlockCheck {
        Self::ChatGptWeb,
        Self::Claude,
        Self::Gemini,
+        Self::MuseAi,
        Self::YouTubePremium,
        Self::BahamutAnime,
        Self::Netflix,
@@ -66,6 +69,7 @@ impl UnlockCheck {
            Self::ChatGptWeb => chatgpt::CHATGPT_WEB_NAME,
            Self::Claude => claude::CLAUDE_NAME,
            Self::Gemini => gemini::GEMINI_NAME,
+            Self::MuseAi => muse::MUSE_AI_NAME,
            Self::YouTubePremium => youtube::YOUTUBE_PREMIUM_NAME,
            Self::BahamutAnime => bahamut::BAHAMUT_ANIME_NAME,
            Self::Netflix => netflix::NETFLIX_NAME,
@@ -83,6 +87,7 @@ impl UnlockCheck {
            Self::ChatGptWeb => chatgpt::check_chatgpt(client).await,
            Self::Claude => claude::check_claude(client).await,
            Self::Gemini => gemini::check_gemini(client).await,
+            Self::MuseAi => muse::check_muse_ai(client).await,
            Self::YouTubePremium => youtube::check_youtube_premium(client).await,
            Self::BahamutAnime => bahamut::check_bahamut_anime(client).await,
            Self::Netflix => netflix::check_netflix(client).await,
@@ -0,0 +1,48 @@
+use reqwest::Client;
+
+use crate::utils::{classify_restricted_status, get_trace_location};
+
+use super::UnlockItem;
+
+pub(crate) const MUSE_AI_NAME: &str = "Muse AI";
+
+const MUSE_URL: &str = "https://muse.ai";
+const CLOUDFLARE_TRACE_URL: &str = "https://www.cloudflare.com/cdn-cgi/trace";
+
+// The aymh ("Are You a Human") gateway answers plain HTTP requests with a
+// generic Meta error page that always contains the Facebook logo asset.
+const AYMH_ERROR_MARKERS: &[&str] = &["Sorry, something went wrong", "static.facebook.com/images/logos"];
+
+pub(super) async fn check_muse_ai(client: &Client) -> UnlockItem {
+    // muse.ai itself is served by Vercel, so resolve the exit region through
+    // the generic Cloudflare trace endpoint instead of a service-specific one.
+    let region = get_trace_location(client, CLOUDFLARE_TRACE_URL)
+        .await
+        .map(|code| code.trim().to_ascii_uppercase())
+        .map(|code| UnlockItem::region_label(&code));
+
+    let Ok(response) = client.get(MUSE_URL).send().await else {
+        return UnlockItem::checked(MUSE_AI_NAME, "Failed (Network Connection)", region);
+    };
+
+    let status = response.status();
+    let landed_on_aymh = response.url().host_str() == Some("auth.muse.ai");
+    let body = response.text().await.unwrap_or_default();
+
+    // Every region is redirected to the aymh anti-bot gateway before the app
+    // loads, and a non-browser HTTP client cannot finish the JavaScript
+    // challenge. It returns the Meta error page, so reaching this point only
+    // proves the exit can connect to Muse's auth infrastructure; availability
+    // cannot be verified over plain HTTP and is reported as `Risky`.
+    let behind_anti_bot = landed_on_aymh || AYMH_ERROR_MARKERS.iter().any(|marker| body.contains(marker));
+
+    let result = if behind_anti_bot {
+        "Risky"
+    } else if status.is_success() {
+        "Yes"
+    } else {
+        classify_restricted_status(status).unwrap_or("Failed")
+    };
+
+    UnlockItem::checked(MUSE_AI_NAME, result, region)
+}
@@ -129,6 +129,7 @@ export default defineConfig([
            'eslint.config.ts',
            `vite.config.mts`,
            'scripts/*.mjs',
+            'scripts-workflow/*.mjs',
            'tests/*.ts',
            'src/polyfills/*.js',
            'tests/*.mjs',
@@ -238,6 +239,13 @@ export default defineConfig([
      },
    },
  },
+  {
+    files: ['scripts-workflow/*.mjs'],
+    languageOptions: {
+      globals: globals.node,
+    },
+    rules: { 'es-x/no-object-groupby': 'off' },
+  },
  {
    files: ['scripts/perf/*.{mjs,mts}'],
    languageOptions: {
@@ -14,7 +14,7 @@
    "build:fast": "cross-env NODE_OPTIONS='--max-old-space-size=4096' tauri build -- --profile fast-release",
    "tauri": "tauri",
    "web:dev": "vite",
-    "web:build": "tsc --noEmit && vite build",
+    "web:build": "tsrs -p . --noEmit && vite build",
    "web:serve": "vite preview",
    "prebuild": "node scripts/prebuild.mjs",
    "updater": "node scripts/updater.mjs",
@@ -32,7 +32,7 @@
    "i18n:types": "node scripts/generate-i18n-keys.mjs",
    "gen:contract": "node scripts/gen-contract.mjs",
    "arch:check": "node scripts/check-architecture.mjs listen emit invoke",
-    "typecheck": "tsc --noEmit",
+    "typecheck": "tsrs -p . --noEmit",
    "test": "vitest run",
    "test:watch": "vitest",
    "knip:check": "knip",
@@ -60,7 +60,7 @@
    "@tauri-apps/plugin-fs": "2.7.1",
    "@tauri-apps/plugin-http": "2.8.3",
    "@tauri-apps/plugin-opener": "2.7.2",
-    "@tauri-apps/plugin-updater": "2.14.0",
+    "@tauri-apps/plugin-updater": "2.14.1",
    "ahooks": "^3.10.0",
    "cidr-block": "^2.3.0",
    "compare-versions": "^6.1.1",
@@ -79,12 +79,11 @@
    "react-dom": "19.3.1",
    "react-error-boundary": "6.1.6",
    "react-hook-form": "^7.88.0",
-    "react-i18next": "17.1.8",
+    "react-i18next": "17.1.9",
    "react-markdown": "10.1.0",
    "react-router": "^8.4.0",
    "rehype-raw": "^7.0.0",
    "rehype-sanitize": "^6.0.0",
-    "remark-gfm": "^4.0.1",
    "swr": "^2.5.1",
    "tauri-plugin-mihomo-api": "github:clash-verge-rev/tauri-plugin-mihomo#main",
    "types-pac": "^1.0.3",
@@ -97,7 +96,7 @@
    "@eslint/js": "^10.0.1",
    "@tauri-apps/cli": "2.12.3",
    "@types/lodash-es": "^4.17.12",
-    "@types/node": "^24.13.6",
+    "@types/node": "^26.0.0",
    "@types/react": "19.3.0",
    "@types/react-dom": "19.3.0",
    "@types/validator": "^13.15.10",
@@ -118,23 +117,24 @@
    "eslint-plugin-react-refresh": "^0.5.7",
    "eslint-plugin-sukka": "^10.2.0",
    "eslint-plugin-unused-imports": "^4.4.1",
-    "glob": "^13.0.6",
+    "glob": "^14.0.0",
    "globals": "^17.12.0",
    "https-proxy-agent": "^9.1.0",
    "husky": "^9.1.7",
    "jiti": "^2.7.0",
-    "knip": "6.43.0",
+    "knip": "6.44.1",
    "lint-staged": "^17.5.1",
    "sass": "^1.104.1",
    "tar": "^7.5.22",
    "terser": "^5.51.2",
+    "tsrs": "0.20.0-ts7.1.0-beta",
    "typescript": "^6.0.3",
    "typescript-eslint": "^8.70.0",
    "vite": "^8.3.0",
    "vite-plugin-svgr": "^5.2.0",
    "vitest": "^5.0.1",
    "webdriverio": "10.1.0",
-    "ws": "8.22.0"
+    "ws": "8.22.1"
  },
  "lint-staged": {
    "*.{ts,tsx,js,mjs}": [
@@ -146,5 +146,5 @@
    ]
  },
  "type": "module",
-  "packageManager": "pnpm@12.15.0"
+  "packageManager": "pnpm@12.16.1"
 }
@@ -10,3 +10,11 @@ allowBuilds:
  unrs-resolver: true
 minimumReleaseAgeExclude:
  - dayjs@1.11.21
+  - "@tsrs/darwin-arm64@0.20.0-ts7.1.0-beta"
+  - "@tsrs/darwin-x64@0.20.0-ts7.1.0-beta"
+  - "@tsrs/linux-arm64-gnu@0.20.0-ts7.1.0-beta"
+  - "@tsrs/linux-arm64-musl@0.20.0-ts7.1.0-beta"
+  - "@tsrs/linux-x64-gnu@0.20.0-ts7.1.0-beta"
+  - "@tsrs/linux-x64-musl@0.20.0-ts7.1.0-beta"
+  - "@tsrs/win32-x64@0.20.0-ts7.1.0-beta"
+  - tsrs@0.20.0-ts7.1.0-beta
@@ -79,6 +79,13 @@
      "matchPackageNames": ["typescript"],
      "allowedVersions": "<7.0.0 || >=7.1.0"
    },
+    {
+      "description": "Review tsrs bumps alone; the version encodes the pinned TypeScript release",
+      "matchPackageNames": ["tsrs", "/^@tsrs//"],
+      "groupName": "tsrs",
+      "rangeStrategy": "pin",
+      "automerge": false
+    },
    {
      "description": "Prevent project from supply chain attack",
      "matchDatasources": ["npm"],
@@ -0,0 +1,796 @@
+import { execFileSync } from 'node:child_process'
+import { appendFileSync, readFileSync, writeFileSync } from 'node:fs'
+
+const env = process.env
+const repository = env.GITHUB_REPOSITORY
+const refreshLabel = 'Refresh this PR from latest dev'
+const publishLabel = 'Publish this approved release'
+const minorLabel = 'Use the next minor version'
+const checked = (body, label = refreshLabel) =>
+  (body || '')
+    .split('\n')
+    .some((line) => line.toLowerCase() === `- [x] ${label}`.toLowerCase())
+const versionPattern = '(0|[1-9][0-9]*)\\.(0|[1-9][0-9]*)\\.(0|[1-9][0-9]*)'
+const rcPattern = new RegExp(`^v${versionPattern}-rc(?:\\.(0|[1-9][0-9]*))?$`)
+const stablePattern = new RegExp(`^v${versionPattern}$`)
+const versionFiles = [
+  'package.json',
+  'src-tauri/tauri.conf.json',
+  'src-tauri/Cargo.toml',
+  'Cargo.lock',
+]
+const read = (path) => readFileSync(path, 'utf8')
+const json = (path) => JSON.parse(read(path))
+const run = (command, args, options = {}) =>
+  execFileSync(command, args, { encoding: 'utf8', ...options }).trim()
+const git = (...args) => run('git', args)
+const gitFile = (sha, path) =>
+  execFileSync('git', ['show', `${sha}:${path}`], { encoding: 'utf8' })
+const isRc = (tag) => tag.match(rcPattern)?.[0] === tag
+const isRelease = (tag) => isRc(tag) || stablePattern.test(tag)
+const titleFor = (tag) => `${isRc(tag) ? 'Pre-Release' : 'Release'}: ${tag}`
+const branchTag = (branch, prefix = 'release/') =>
+  branch.startsWith(prefix) && isRelease(branch.slice(prefix.length))
+    ? branch.slice(prefix.length)
+    : undefined
+const latest = (tags) =>
+  tags.sort((a, b) => a.localeCompare(b, 'en', { numeric: true })).at(-1)
+const summary = (text) => appendFileSync(env.GITHUB_STEP_SUMMARY, `${text}\n`)
+const endpoint = (path) =>
+  path === 'graphql' ? path : `repos/${repository}/${path}`
+const list = (path) =>
+  JSON.parse(run('gh', ['api', '--paginate', '--slurp', endpoint(path)])).flat()
+
+function api(path, body, method = 'POST') {
+  const response = run(
+    'gh',
+    ['api', '--method', method, endpoint(path), '--input', '-'],
+    {
+      input: JSON.stringify(body),
+    },
+  )
+  const result = response ? JSON.parse(response) : null
+  if (result?.errors) throw new Error(JSON.stringify(result.errors))
+  return result
+}
+
+const get = (path) => JSON.parse(run('gh', ['api', endpoint(path)]))
+const canWrite = (login) =>
+  ['write', 'maintain', 'admin'].includes(
+    get(`collaborators/${login}/permission`).permission,
+  )
+
+function output(values) {
+  appendFileSync(
+    env.GITHUB_OUTPUT,
+    Object.entries(values)
+      .map(([key, value]) => `${key}=${value}\n`)
+      .join(''),
+  )
+}
+
+function versionPatternFor(path) {
+  if (path.endsWith('.json')) return /("version"\s*:\s*")[^"]+/
+  return path === 'Cargo.lock'
+    ? /(\[\[package\]\]\r?\nname = "clash-verge"\r?\nversion = ")[^"]+/
+    : /(^version\s*=\s*")[^"]+/m
+}
+
+function validateVersions(tag, sha) {
+  for (const path of versionFiles) {
+    const content = sha ? gitFile(sha, path) : read(path)
+    const version = path.endsWith('.json')
+      ? JSON.parse(content).version
+      : content.match(versionPatternFor(path))?.[0].split('"').at(-1)
+    if (`v${version}` !== tag)
+      throw new Error(`${path} version does not match ${tag}.`)
+  }
+}
+
+function validateVersionCommit(tag, sha) {
+  validateVersions(tag, sha)
+  const commit = get(`commits/${sha}`)
+  if (!commit.commit.verification.verified || commit.parents.length !== 1)
+    throw new Error('The version commit must be signed and have one parent.')
+  const title = commit.commit.message.split('\n')[0]
+  if (title.replace(/ \(#\d+\)$/, '') !== titleFor(tag))
+    throw new Error('The final version commit has an unexpected title.')
+  const parent = commit.parents[0].sha
+  const changed = git('diff', '--name-only', parent, sha)
+    .split('\n')
+    .filter(Boolean)
+  if (
+    changed.some((path) => !versionFiles.includes(path)) ||
+    git('diff', '--summary', parent, sha)
+  )
+    throw new Error(
+      'The version commit changes files outside the four version files.',
+    )
+  for (const path of versionFiles) {
+    const before = gitFile(parent, path)
+    const after = gitFile(sha, path)
+    if (
+      before.replace(versionPatternFor(path), '$1VERSION') !==
+      after.replace(versionPatternFor(path), '$1VERSION')
+    )
+      throw new Error(`${path} contains changes other than its version.`)
+  }
+}
+
+function remoteRefs() {
+  return git('ls-remote', '--heads', '--tags', '--refs', 'origin')
+    .split('\n')
+    .filter(Boolean)
+    .map((line) => line.split('\t'))
+}
+
+function fetchBranches() {
+  git(
+    'fetch',
+    '--no-tags',
+    'origin',
+    '+refs/heads/dev:refs/remotes/origin/dev',
+    '+refs/heads/main:refs/remotes/origin/main',
+  )
+}
+
+function discardClosedCandidate(branch, base, prefix) {
+  const candidates = list(
+    `pulls?state=all&base=${base}&head=${repository.split('/')[0]}:${branch}&per_page=100`,
+  )
+  const latest = candidates[0]
+  if (!latest || candidates.some((pr) => pr.state === 'open'))
+    throw new Error(
+      `Branch ${branch} is reserved by an active or unknown candidate.`,
+    )
+  const pr = get(`pulls/${latest.number}`)
+  requireBotPr(pr, base, prefix)
+  if (pr.state !== 'closed' || pr.merged)
+    throw new Error(
+      `Close the unmerged candidate before retrying: ${pr.html_url}`,
+    )
+  updateRefs(pr.base.repo.node_id, [
+    {
+      name: `refs/heads/${branch}`,
+      beforeOid: pr.head.sha,
+      afterOid: '0'.repeat(40),
+    },
+  ])
+  summary(`Released the unused branch from closed PR: ${pr.html_url}`)
+}
+
+function prepare() {
+  let refresh
+  if (env.GITHUB_EVENT_NAME === 'pull_request_target') {
+    const event = json(env.GITHUB_EVENT_PATH)
+    if (checked(event.changes?.body?.from) || !checked(event.pull_request.body))
+      return
+    if (!canWrite(event.sender.login))
+      throw new Error('Refreshing a version PR requires write access.')
+    refresh = get(`pulls/${event.pull_request.number}`)
+    if (refresh.state !== 'open' || !checked(refresh.body)) return
+    requireBotPr(refresh, 'dev', 'release/')
+  }
+  fetchBranches()
+  git('checkout', '--detach', 'origin/dev')
+  const channel = refresh
+    ? isRc(branchTag(refresh.head.ref))
+      ? 'rc'
+      : 'stable'
+    : env.RELEASE_CHANNEL || 'rc'
+  if (!['rc', 'stable'].includes(channel))
+    throw new Error('Unknown release channel.')
+  const requested = refresh
+    ? branchTag(refresh.head.ref)
+    : env.RELEASE_TAG || ''
+  if (
+    requested &&
+    !(channel === 'rc' ? isRc(requested) : stablePattern.test(requested))
+  )
+    throw new Error(
+      channel === 'rc'
+        ? 'Expected vX.Y.Z-rc or vX.Y.Z-rc.N.'
+        : 'Expected vX.Y.Z.',
+    )
+  const existing =
+    !refresh &&
+    list('pulls?state=open&base=dev&per_page=100').find(
+      (pr) =>
+        pr.head.repo?.full_name === repository &&
+        pr.user.login === 'github-actions[bot]' &&
+        branchTag(pr.head.ref) &&
+        isRc(branchTag(pr.head.ref)) === (channel === 'rc') &&
+        (!requested || branchTag(pr.head.ref) === requested),
+    )
+  if (existing) {
+    api(`issues/${existing.number}/labels`, { labels: ['release'] })
+    output({ existing_pr: existing.html_url })
+    summary(
+      `Existing version PR: ${existing.html_url}\nClose it before preparing a replacement; its candidate is unchanged.`,
+    )
+    return
+  }
+  const base = (requested || `v${json('package.json').version}`).split(
+    /[-+]/,
+  )[0]
+  if (!stablePattern.test(base))
+    throw new Error(`Invalid base version: ${base}`)
+  const refs = remoteRefs().map(([, ref]) => ref)
+  const tags = refs
+    .filter((ref) => ref.startsWith('refs/tags/'))
+    .map((ref) => ref.slice(10))
+  const reserved = refs
+    .filter((ref) => ref.startsWith('refs/heads/'))
+    .filter((ref) => !refresh || ref !== `refs/heads/${refresh.head.ref}`)
+    .map(
+      (ref) => branchTag(ref.slice(11)) || branchTag(ref.slice(11), 'publish/'),
+    )
+    .filter(Boolean)
+  const sameBase = (tag) => isRc(tag) && tag.startsWith(`${base}-rc`)
+  const occupied = [...tags, ...reserved]
+  const last = latest(occupied.filter(sameBase))
+  const tag =
+    requested ||
+    (channel === 'stable'
+      ? base
+      : last
+        ? `${base}-rc.${BigInt(last.match(rcPattern)[4] ?? 0) + 1n}`
+        : `${base}-rc`)
+  if (tags.includes(tag)) throw new Error(`Tag ${tag} already exists.`)
+  for (const [prefix, target] of [
+    ['release/', 'dev'],
+    ['publish/', 'main'],
+  ]) {
+    const branch = `${prefix}${tag}`
+    if (refs.includes(`refs/heads/${branch}`) && branch !== refresh?.head.ref)
+      discardClosedCandidate(branch, target, prefix)
+  }
+  const sha = git('rev-parse', 'HEAD')
+  const body = releaseBody(tag, sha, tags, false)
+  summary(body)
+  if (
+    remoteRefs().some(
+      ([, ref]) =>
+        ref === `refs/tags/${tag}` || ref === `refs/heads/publish/${tag}`,
+    )
+  )
+    throw new Error(`Tag ${tag} already exists or is reserved for publication.`)
+  if (json('package.json').version !== tag.slice(1))
+    run('node', ['scripts/release-version.mjs', tag])
+  validateVersions(tag)
+  const title = titleFor(tag)
+  const branch = refresh
+    ? `release-refresh/${env.GITHUB_RUN_ID}-${env.GITHUB_RUN_ATTEMPT}`
+    : `release/${tag}`
+  writeVersionPr({ sha, body, refresh, title, branch, files: versionFiles })
+}
+
+function releaseBody(tag, sha, tags, publishing) {
+  const previous =
+    (isRc(tag) &&
+      latest(
+        tags.filter(
+          (value) =>
+            isRc(value) &&
+            value.startsWith(`${tag.split('-')[0]}-rc`) &&
+            value !== tag,
+        ),
+      )) ||
+    latest(tags.filter((value) => stablePattern.test(value) && value !== tag))
+  const url = `${env.GITHUB_SERVER_URL}/${repository}`
+  let range = sha
+  let comparison = 'No previous release tag'
+  if (previous) {
+    git('fetch', '--no-tags', 'origin', `refs/tags/${previous}`)
+    range = `${git('rev-parse', 'FETCH_HEAD^{commit}')}..${sha}`
+    comparison = `Changes since **${previous}** · [Compare changes](${url}/compare/${previous}...${sha})`
+  }
+  comparison += ` · **${git('rev-list', '--count', range)} commits**`
+  const commits = git('log', '--format=%h %s', range)
+  const groups = Object.groupBy(commits ? commits.split('\n') : [], (line) => {
+    if (/^\S+ chore\(deps\)!?: /i.test(line)) return 'deps'
+    const type = line.match(/^\S+ (\w+)(?:\([^)]*\))?!?: /)?.[1]?.toLowerCase()
+    return type === 'doc' ? 'docs' : type || 'other'
+  })
+  const labels = {
+    fix: 'Fixes',
+    feat: 'Features',
+    perf: 'Performance',
+    revert: 'Reverts',
+    refactor: 'Refactoring',
+    build: 'Build',
+    deps: 'Dependencies',
+    ci: 'CI',
+    docs: 'Documentation',
+    test: 'Tests',
+    chore: 'Maintenance',
+    style: 'Style',
+    other: 'Other',
+  }
+  const names = {
+    macos: 'macOS',
+    windows: 'Windows',
+    ui: 'UI',
+    ci: 'CI',
+    tun: 'TUN',
+  }
+  const order = Object.keys(labels)
+  const rank = (type) =>
+    order.includes(type) ? order.indexOf(type) : order.length
+  const scope =
+    Object.entries(groups)
+      .sort(([a], [b]) => rank(a) - rank(b) || a.localeCompare(b))
+      .map(([type, lines]) => {
+        const entries = lines.map((line) => {
+          const hash = line.slice(0, line.indexOf(' '))
+          const title = line
+            .slice(hash.length + 1)
+            .replace(/\s*\((?:[\w.-]+\/[\w.-]+)?#\d+\)/g, '')
+            .replace(/(?:[\w.-]+\/[\w.-]+)?#\d+\b/g, '')
+            .replace(/\s{2,}/g, ' ')
+            .trim()
+            .replace(
+              /^\w+(?:\(([^)]*)\))?(!)?:\s*/,
+              (_, scope, breaking) =>
+                `${breaking ? 'Breaking: ' : ''}${scope ? `${Object.hasOwn(names, scope) ? names[scope] : scope}: ` : ''}`,
+            )
+            .replaceAll('&', '&amp;')
+            .replaceAll('<', '&lt;')
+            .replaceAll('>', '&gt;')
+            .replace(/[\\`*_[\]]/g, '\\$&')
+          return `- ${title} [#${hash}](${url}/commit/${hash})`
+        })
+        return `### ${Object.hasOwn(labels, type) ? labels[type] : type} · ${lines.length}\n\n${entries.join('\n')}`
+      })
+      .join('\n\n') || 'No new commits.'
+  return `## ${titleFor(tag)}
+
+Source: \`dev\` · [${sha}](${url}/commit/${sha})  \n${comparison}
+${
+  publishing
+    ? `<!-- release-source:${sha} -->
+
+After approval, select the checkbox below to publish.
+Do not use the normal Squash or Rebase merge buttons.
+
+- [ ] ${publishLabel}`
+    : `
+- [ ] ${refreshLabel}
+
+Refreshing requires a new approval.`
+}
+
+## Changes
+
+${scope}
+`
+}
+
+function writeVersionPr({ sha, body, refresh, title, branch, files }) {
+  // Create-only ref and expectedHeadOid prevent replacing another candidate.
+  api('git/refs', { ref: `refs/heads/${branch}`, sha })
+  let pr
+  try {
+    const commit = api('graphql', {
+      query: `mutation($input: CreateCommitOnBranchInput!) {
+      createCommitOnBranch(input: $input) { commit { oid } }
+    }`,
+      variables: {
+        input: {
+          branch: { repositoryNameWithOwner: repository, branchName: branch },
+          expectedHeadOid: sha,
+          message: { headline: title },
+          fileChanges: {
+            additions: files.map((path) => ({
+              path,
+              contents: readFileSync(path).toString('base64'),
+            })),
+          },
+        },
+      },
+    })
+    if (!commit.data?.createCommitOnBranch?.commit?.oid)
+      throw new Error('Signed version commit failed.')
+    if (refresh) {
+      const current = get(`pulls/${refresh.number}`)
+      if (
+        current.state !== 'open' ||
+        current.head.sha !== refresh.head.sha ||
+        current.base.ref !== refresh.base.ref ||
+        current.body !== refresh.body
+      )
+        throw new Error(
+          'The version pull request changed while preparing the update.',
+        )
+      const oid = commit.data.createCommitOnBranch.commit.oid
+      updateRefs(refresh.base.repo.node_id, [
+        {
+          name: `refs/heads/${refresh.head.ref}`,
+          beforeOid: refresh.head.sha,
+          afterOid: oid,
+          force: true,
+        },
+        {
+          name: `refs/heads/${branch}`,
+          beforeOid: oid,
+          afterOid: '0'.repeat(40),
+        },
+      ])
+      for (const review of list(
+        `pulls/${refresh.number}/reviews?per_page=100`,
+      )) {
+        if (review.state === 'APPROVED')
+          api(
+            `pulls/${refresh.number}/reviews/${review.id}/dismissals`,
+            {
+              message:
+                'The version PR was refreshed from dev; please review again.',
+            },
+            'PUT',
+          )
+      }
+      pr = api(`pulls/${refresh.number}`, { title, body }, 'PATCH')
+    } else {
+      pr = api('pulls', {
+        head: branch,
+        base: 'dev',
+        title,
+        body,
+      })
+    }
+  } catch (error) {
+    if (refresh) {
+      try {
+        api(`git/refs/heads/${branch}`, {}, 'DELETE')
+      } catch {}
+    }
+    throw error
+  }
+  api(`issues/${pr.number}/labels`, { labels: ['release'] })
+  summary(`Version pull request: ${pr.html_url}`)
+}
+
+function updateRefs(repositoryId, refUpdates) {
+  api('graphql', {
+    query: `mutation($input: UpdateRefsInput!) { updateRefs(input: $input) { clientMutationId } }`,
+    variables: { input: { repositoryId, refUpdates } },
+  })
+}
+
+function requireBotPr(pr, base, prefix) {
+  const tag = branchTag(pr.head.ref, prefix)
+  if (
+    !tag ||
+    pr.base.ref !== base ||
+    pr.base.repo.full_name !== repository ||
+    pr.head.repo?.full_name !== repository ||
+    pr.user.login !== 'github-actions[bot]'
+  )
+    throw new Error(
+      'Expected a release PR created by this repository workflow.',
+    )
+  return tag
+}
+
+function publishPr() {
+  const event = json(env.GITHUB_EVENT_PATH)
+  const pr = get(`pulls/${event.pull_request.number}`)
+  const tag = requireBotPr(pr, 'dev', 'release/')
+  if (!pr.merged || pr.merge_commit_sha !== event.pull_request.merge_commit_sha)
+    throw new Error('Expected the final merged version commit on dev.')
+  const sha = pr.merge_commit_sha
+  fetchBranches()
+  git('fetch', '--no-tags', 'origin', sha)
+  git('merge-base', '--is-ancestor', sha, 'origin/dev')
+  validateVersionCommit(tag, sha)
+  const branch = `publish/${tag}`
+  const existing = list(
+    `pulls?state=open&base=main&head=${repository.split('/')[0]}:${branch}&per_page=100`,
+  )
+  if (existing.length) {
+    const publication = existing[0]
+    requireBotPr(publication, 'main', 'publish/')
+    if (publication.head.sha !== sha)
+      throw new Error(
+        'This tag is already reserved by a different publication snapshot.',
+      )
+    summary(`Existing publication PR: ${publication.html_url}`)
+    return
+  }
+  const refs = remoteRefs()
+  if (refs.some(([, ref]) => ref === `refs/tags/${tag}`))
+    throw new Error(`Tag ${tag} already exists.`)
+  git('merge-base', '--is-ancestor', 'origin/main', sha)
+  const head = refs.find(([, ref]) => ref === `refs/heads/${branch}`)?.[0]
+  if (head && head !== sha)
+    throw new Error('Publication branch already points to another commit.')
+  if (!head) api('git/refs', { ref: `refs/heads/${branch}`, sha })
+  const body = releaseBody(
+    tag,
+    sha,
+    refs
+      .filter(([, ref]) => ref.startsWith('refs/tags/'))
+      .map(([, ref]) => ref.slice(10)),
+    true,
+  )
+  const publication = api('pulls', {
+    head: branch,
+    base: 'main',
+    title: titleFor(tag),
+    body,
+  })
+  api(`issues/${publication.number}/labels`, { labels: ['release'] })
+  summary(`Publication PR: ${publication.html_url}\n\n${body}`)
+}
+
+function requireApproval(pr, sha) {
+  const reviews = new Map()
+  for (const review of list(`pulls/${pr.number}/reviews?per_page=100`)) {
+    if (['APPROVED', 'CHANGES_REQUESTED', 'DISMISSED'].includes(review.state))
+      reviews.set(review.user.login, review)
+  }
+  let approved = false
+  for (const review of reviews.values()) {
+    if (!canWrite(review.user.login)) continue
+    if (review.state === 'CHANGES_REQUESTED')
+      throw new Error('A reviewer with write access has requested changes.')
+    if (review.state === 'APPROVED' && review.commit_id === sha) approved = true
+  }
+  if (!approved)
+    throw new Error(
+      'The current PR head needs approval from a reviewer with write access.',
+    )
+}
+
+function releaseOutput(tag, sha) {
+  output({
+    release_tag: tag,
+    source_sha: sha,
+    channel: isRc(tag) ? 'rc' : 'stable',
+  })
+}
+
+function publish() {
+  const event = json(env.GITHUB_EVENT_PATH)
+  const tag = requireBotPr(event.pull_request, 'main', 'publish/')
+  if (
+    checked(event.changes?.body?.from, publishLabel) ||
+    !checked(event.pull_request.body, publishLabel)
+  )
+    throw new Error('Publishing requires a new checkbox selection.')
+  if (!canWrite(event.sender.login))
+    throw new Error('Publishing requires write access.')
+  const sha = event.pull_request.head.sha
+  const pr = get(`pulls/${event.pull_request.number}`)
+  requireBotPr(pr, 'main', 'publish/')
+  if (
+    pr.head.sha !== sha ||
+    !checked(pr.body, publishLabel) ||
+    !pr.body.includes(`<!-- release-source:${sha} -->`)
+  )
+    throw new Error(
+      'The publication snapshot changed after the checkbox selection.',
+    )
+  fetchBranches()
+  git('fetch', '--no-tags', 'origin', sha)
+  git('merge-base', '--is-ancestor', sha, 'origin/dev')
+  validateVersionCommit(tag, sha)
+  const marker = `Release workflow run: ${env.GITHUB_RUN_ID}\nSource: ${sha}\nPR: ${pr.number}`
+  const existing = remoteRefs().find(([, ref]) => ref === `refs/tags/${tag}`)
+  if (existing) {
+    const ref = get(`git/ref/tags/${tag}`)
+    const object =
+      ref.object.type === 'tag' && get(`git/tags/${ref.object.sha}`)
+    if (
+      !object ||
+      object.object.type !== 'commit' ||
+      object.object.sha !== sha ||
+      object.message.trim() !== marker ||
+      Number(env.GITHUB_RUN_ATTEMPT) <= 1
+    )
+      throw new Error(
+        'An existing tag can only be recovered by its original release run.',
+      )
+    git('merge-base', '--is-ancestor', sha, 'origin/main')
+    summary(`Resuming ${tag} at ${sha} from this release run.`)
+  } else {
+    if (pr.state !== 'open' || pr.draft)
+      throw new Error('Expected an open, ready publication PR.')
+    requireApproval(pr, sha)
+    const main = git('rev-parse', 'origin/main')
+    git('merge-base', '--is-ancestor', main, sha)
+    git(
+      '-c',
+      'user.name=github-actions[bot]',
+      '-c',
+      'user.email=41898282+github-actions[bot]@users.noreply.github.com',
+      'tag',
+      '--annotate',
+      '--no-sign',
+      '--message',
+      marker,
+      tag,
+      sha,
+    )
+    // GraphQL updateRefs rejects annotated tag objects; Git preserves atomicity.
+    git(
+      'push',
+      '--atomic',
+      `--force-with-lease=refs/heads/main:${main}`,
+      `--force-with-lease=refs/heads/${pr.head.ref}:${sha}`,
+      `--force-with-lease=refs/tags/${tag}:`,
+      'origin',
+      `${sha}:refs/heads/main`,
+      `${sha}:refs/heads/${pr.head.ref}`,
+      `refs/tags/${tag}:refs/tags/${tag}`,
+    )
+    summary(`Fast-forwarded main and tagged ${tag} at approved commit ${sha}.`)
+  }
+  releaseOutput(tag, sha)
+}
+
+function validateTag() {
+  const tag = env.GITHUB_REF_NAME
+  if (!isRelease(tag)) throw new Error('Expected a stable or RC release tag.')
+  fetchBranches()
+  const sha = git('rev-parse', `${env.GITHUB_SHA}^{commit}`)
+  const ref = get(`git/ref/tags/${tag}`)
+  const object = ref.object.type === 'tag' && get(`git/tags/${ref.object.sha}`)
+  if (object && object.message.includes('Release workflow run:'))
+    throw new Error(
+      'Resume the original publication run for workflow-owned tags.',
+    )
+  git('fetch', '--no-tags', 'origin', `refs/tags/${tag}`)
+  if (git('rev-parse', 'FETCH_HEAD^{commit}') !== sha)
+    throw new Error('The tag moved after this run started.')
+  for (const branch of ['main', 'dev'])
+    git('merge-base', '--is-ancestor', sha, `origin/${branch}`)
+  validateVersions(tag, sha)
+  releaseOutput(tag, sha)
+}
+
+function prepareDraft() {
+  const tag = env.RELEASE_TAG
+  verifyTarget()
+  const release = list('releases?per_page=100').find(
+    (release) => release.tag_name === tag,
+  )
+  if (release && !release.draft)
+    throw new Error('This release is already public.')
+  const draft =
+    release ||
+    api('releases', {
+      tag_name: tag,
+      target_commitish: env.SOURCE_SHA,
+      name: `Clash Verge Rev ${tag}`,
+      body: 'Draft release, will be updated later.',
+      draft: true,
+      prerelease: isRc(tag),
+    })
+  output({ id: draft.id })
+}
+
+function verifyTarget(tag = env.RELEASE_TAG, sha = env.SOURCE_SHA) {
+  const ref = get(`git/ref/tags/${tag}`)
+  const target =
+    ref.object.type === 'tag'
+      ? get(`git/tags/${ref.object.sha}`).object
+      : ref.object
+  if (target.type !== 'commit' || target.sha !== sha)
+    throw new Error('The release tag no longer points to the validated source.')
+}
+
+function nextDev() {
+  let refresh
+  let tag = env.RELEASE_TAG
+  let source = env.SOURCE_SHA
+  let minor = false
+  if (env.GITHUB_EVENT_NAME === 'pull_request_target') {
+    const event = json(env.GITHUB_EVENT_PATH)
+    const oldBody = event.changes?.body?.from
+    const body = event.pull_request.body
+    if (
+      checked(oldBody, minorLabel) === checked(body, minorLabel) &&
+      (checked(oldBody) || !checked(body))
+    )
+      return
+    if (!canWrite(event.sender.login))
+      throw new Error('Changing the next dev version requires write access.')
+    refresh = get(`pulls/${event.pull_request.number}`)
+    if (refresh.state !== 'open') return
+    tag = requireBotPr(refresh, 'dev', 'next-dev/')
+    if (
+      refresh.head.sha !== event.pull_request.head.sha ||
+      refresh.body !== body
+    )
+      throw new Error(
+        'The version update PR changed after the checkbox selection.',
+      )
+    minor = checked(body, minorLabel)
+    source = body.match(/<!-- next-dev-source:([a-f0-9]{40}) -->/)?.[1]
+  }
+  if (!stablePattern.test(tag) || !/^[a-f0-9]{40}$/.test(source))
+    throw new Error('The next dev version requires a stable release snapshot.')
+  verifyTarget(tag, source)
+  const release = get(`releases/tags/${tag}`)
+  if (release.draft || release.prerelease)
+    throw new Error('The stable release must be public before preparing dev.')
+  const branch = `next-dev/${tag}`
+  if (!refresh) {
+    const existing = list(
+      `pulls?state=all&base=dev&head=${repository.split('/')[0]}:${branch}&per_page=100`,
+    )[0]
+    if (existing) {
+      requireBotPr(existing, 'dev', 'next-dev/')
+      summary(`Existing dev version PR: ${existing.html_url}`)
+      return
+    }
+  }
+  fetchBranches()
+  git('fetch', '--no-tags', 'origin', source)
+  git('merge-base', '--is-ancestor', source, 'origin/main')
+  git('merge-base', '--is-ancestor', source, 'origin/dev')
+  git('checkout', '--detach', 'origin/dev')
+  const sha = git('rev-parse', 'HEAD')
+  validateVersions(tag, source)
+  validateVersions(tag, sha)
+  if (read('Changelog.md') !== gitFile(source, 'Changelog.md'))
+    throw new Error(
+      'Changelog.md changed after this release. Preserve the unreleased entries and prepare the dev update manually.',
+    )
+  if (
+    !read('Changelog.md').split('\n').includes(`## ${tag}`) ||
+    read('docs/Changelog.history.md').split('\n').includes(`## ${tag}`)
+  )
+    throw new Error('The released changelog is missing or already archived.')
+  const [major, minorVersion, patch] = tag.slice(1).split('.').map(BigInt)
+  const patchTag = `v${major}.${minorVersion}.${patch + 1n}`
+  const minorTag = `v${major}.${minorVersion + 1n}.0`
+  const nextTag = minor ? minorTag : patchTag
+  run('pnpm', ['release-version', nextTag])
+  run('bash', ['scripts-workflow/bump_changelog.sh'])
+  const changelog = read('Changelog.md')
+  if (!changelog.includes('## v(Version Goes Here)'))
+    throw new Error('The changelog template has no version placeholder.')
+  writeFileSync(
+    'Changelog.md',
+    changelog.replace('## v(Version Goes Here)', `## ${nextTag}`),
+  )
+  validateVersions(nextTag)
+  const title = `Dev: ${nextTag}`
+  const body = `## ${title}
+
+After [${tag}](${env.GITHUB_SERVER_URL}/${repository}/releases/tag/${tag}).
+<!-- next-dev-source:${source} -->
+
+Patch: \`${patchTag}\` · Minor: \`${minorTag}\`
+
+- [${minor ? 'x' : ' '}] ${minorLabel}
+- [ ] ${refreshLabel}
+
+Changing the version or refreshing requires a new approval.
+`
+  writeVersionPr({
+    sha,
+    body,
+    refresh,
+    title,
+    branch: refresh
+      ? `next-dev-refresh/${env.GITHUB_RUN_ID}-${env.GITHUB_RUN_ATTEMPT}`
+      : branch,
+    files: [...versionFiles, 'Changelog.md', 'docs/Changelog.history.md'],
+  })
+}
+
+const commands = {
+  prepare,
+  'next-dev': nextDev,
+  'publish-pr': publishPr,
+  publish,
+  'validate-tag': validateTag,
+  'prepare-draft': prepareDraft,
+  'verify-target': verifyTarget,
+}
+const command = commands[process.argv[2]]
+if (!command) throw new Error('Unknown release command.')
+command()
@@ -17,7 +17,7 @@
    "pnpm-lock.yaml",
    "pnpm-workspace.yaml",
    "scripts/contract-inputs.json",
-    ".github/workflows/frontend-check.yml",
+    ".github/workflows/contract-parity.yml",
    ".husky/pre-push"
  ]
 }
@@ -52,9 +52,9 @@ anyhow = { workspace = true }
 tokio = { workspace = true }
 log = { workspace = true }
 serde = { workspace = true, features = ["derive"] }
-tristr = { workspace = true }
 serde_json = { workspace = true }
 serde_yaml_ng = { workspace = true }
+smartstring = { workspace = true, features = ["serde"] }
 bitflags = { workspace = true }
 socket2 = { workspace = true }
 warp = { version = "0.4.3", features = ["server"] }
@@ -79,7 +79,7 @@ tauri-plugin-fs = "2.7.1"
 tauri-plugin-process = "2.4.0"
 tauri-plugin-deep-link = "2.6.2"
 tauri-plugin-window-state = "2.5.0"
-zip = "9.0.4"
+zip = "9.1.3"
 flate2 = "1.1.10"
 reqwest_dav = "0.3.3"
 aes-gcm = { version = "0.11.1" }
@@ -154,7 +154,7 @@ windows-sys.workspace = true
 [target.'cfg(not(any(target_os = "android", target_os = "ios")))'.dependencies]
 tauri-plugin-autostart = "2.7.0"
 tauri-plugin-global-shortcut = "2.4.1"
-tauri-plugin-updater = "2.14.0"
+tauri-plugin-updater = "2.14.1"

 [dev-dependencies]
 criterion = { workspace = true }
@@ -5,8 +5,8 @@ use crate::{
    feat,
    utils::dirs,
 };
+use smartstring::alias::String;
 use tauri::{AppHandle, Manager as _, ipc::Channel};
-use tristr::alias::String;

 #[tauri::command]
 #[specta::specta]
@@ -59,10 +59,10 @@ pub async fn restart_app() -> CmdResult<()> {
 #[specta::specta]
 pub async fn install_update(
    app_handle: AppHandle,
-    version: String,
+    version: std::string::String,
    on_event: Channel<DownloadEvent>,
 ) -> CmdResult<bool> {
-    let version: String = version;
+    let version: String = version.into();
    SilentUpdater::global()
        .install_update(&app_handle, &version, |event| {
            let _ = on_event.send(event);
@@ -79,22 +79,25 @@ pub fn cancel_update_download() {

 #[tauri::command]
 #[specta::specta]
-pub fn get_app_dir() -> CmdResult<String> {
+pub fn get_app_dir() -> CmdResult<std::string::String> {
    let app_home_dir = dirs::app_home_dir().stringify_err()?.to_string_lossy().into();
    Ok(app_home_dir)
 }

 #[tauri::command]
 #[specta::specta]
-pub async fn download_icon_cache(url: String, name: String) -> CmdResult<String> {
-    let url: String = url;
-    let name: String = name;
-    feat::download_icon_cache(url, name).await
+pub async fn download_icon_cache(
+    url: std::string::String,
+    name: std::string::String,
+) -> CmdResult<std::string::String> {
+    let url: String = url.into();
+    let name: String = name.into();
+    feat::download_icon_cache(url, name).await.map(Into::into)
 }

 #[tauri::command]
 #[specta::specta]
-pub async fn copy_icon_file(path: String, icon_info: feat::IconInfo) -> CmdResult<String> {
-    let path: String = path;
-    feat::copy_icon_file(path, icon_info).await
+pub async fn copy_icon_file(path: std::string::String, icon_info: feat::IconInfo) -> CmdResult<std::string::String> {
+    let path: String = path.into();
+    feat::copy_icon_file(path, icon_info).await.map(Into::into)
 }
@@ -1,7 +1,7 @@
 use super::CmdResult;
 use crate::{cmd::StringifyErr as _, feat};
 use feat::LocalBackupFile;
-use tristr::alias::String;
+use smartstring::alias::String;

 #[tauri::command]
 #[specta::specta]
@@ -17,15 +17,15 @@ pub async fn list_local_backup() -> CmdResult<Vec<LocalBackupFile>> {

 #[tauri::command]
 #[specta::specta]
-pub async fn delete_local_backup(filename: String) -> CmdResult<()> {
-    let filename: String = filename;
+pub async fn delete_local_backup(filename: std::string::String) -> CmdResult<()> {
+    let filename: String = filename.into();
    feat::delete_local_backup(filename).await.stringify_err()
 }

 #[tauri::command]
 #[specta::specta]
-pub async fn restore_local_backup(filename: String) -> CmdResult<()> {
-    let filename: String = filename;
+pub async fn restore_local_backup(filename: std::string::String) -> CmdResult<()> {
+    let filename: String = filename.into();
    feat::restore_local_backup(filename)
        .await
        .map_err(|error| super::proxy_aware_error(&error))
@@ -33,15 +33,15 @@ pub async fn restore_local_backup(filename: String) -> CmdResult<()> {

 #[tauri::command]
 #[specta::specta]
-pub async fn import_local_backup(source: String) -> CmdResult<String> {
-    let source: String = source;
-    feat::import_local_backup(source).await.stringify_err()
+pub async fn import_local_backup(source: std::string::String) -> CmdResult<std::string::String> {
+    let source: String = source.into();
+    feat::import_local_backup(source).await.map(Into::into).stringify_err()
 }

 #[tauri::command]
 #[specta::specta]
-pub async fn export_local_backup(filename: String, destination: String) -> CmdResult<()> {
-    let filename: String = filename;
-    let destination: String = destination;
+pub async fn export_local_backup(filename: std::string::String, destination: std::string::String) -> CmdResult<()> {
+    let filename: String = filename.into();
+    let destination: String = destination.into();
    feat::export_local_backup(filename, destination).await.stringify_err()
 }
@@ -12,8 +12,8 @@ use crate::{
    },
 };
 use clash_verge_logging::{Type, logging, logging_error};
+use smartstring::alias::String;
 use tokio::fs;
-use tristr::alias::String;

 #[tauri::command]
 #[specta::specta]
@@ -37,8 +37,8 @@ pub async fn patch_clash_config(payload: crate::ipc::YamlMapping) -> CmdResult {

 #[tauri::command]
 #[specta::specta]
-pub async fn patch_clash_mode(payload: String) -> CmdResult {
-    let payload: String = payload;
+pub async fn patch_clash_mode(payload: std::string::String) -> CmdResult {
+    let payload: String = payload.into();
    feat::change_clash_mode(payload)
        .await
        .with_error_code("CLASH_MODE_UPDATE_FAILED")
@@ -47,14 +47,14 @@ pub async fn patch_clash_mode(payload: String) -> CmdResult {
 /// Reads the saved mode without depending on strict mihomo `/configs` deserialization.
 #[tauri::command]
 #[specta::specta]
-pub async fn get_clash_mode() -> CmdResult<Option<String>> {
+pub async fn get_clash_mode() -> CmdResult<Option<std::string::String>> {
    Ok(Config::clash().await.data_arc().get_mode())
 }

 #[tauri::command]
 #[specta::specta]
-pub async fn change_clash_core(clash_core: String) -> CmdResult<Option<CommandFailure>> {
-    let clash_core: String = clash_core;
+pub async fn change_clash_core(clash_core: std::string::String) -> CmdResult<Option<CommandFailure>> {
+    let clash_core: String = clash_core.into();
    logging!(info, Type::Config, "changing core to {clash_core}");

    match CoreManager::global().change_core(&clash_core).await {
@@ -112,8 +112,8 @@ pub async fn upgrade_clash_core(force: bool) -> CmdResult<feat::CoreUpgradeRepor

 #[tauri::command]
 #[specta::specta]
-pub async fn test_delay(url: String) -> CmdResult<u32> {
-    let url: String = url;
+pub async fn test_delay(url: std::string::String) -> CmdResult<u32> {
+    let url: String = url.into();
    let result = match feat::test_delay(url).await {
        Ok(delay) => delay,
        Err(e) => {
@@ -148,12 +148,12 @@ pub fn take_dns_override_notice() -> bool {
 #[tauri::command]
 #[specta::specta]
 pub async fn set_dns_override(
-    profile_uid: String,
+    profile_uid: std::string::String,
    enabled: bool,
-    confirmation: Option<String>,
+    confirmation: Option<std::string::String>,
 ) -> CmdResult<feat::DnsOverrideOutcome> {
-    let profile_uid: String = profile_uid;
-    let confirmation = confirmation;
+    let profile_uid: String = profile_uid.into();
+    let confirmation = confirmation.map(String::from);
    feat::set_dns_override(profile_uid, enabled, confirmation)
        .await
        .map_err(|error| proxy_aware_coded_error(&error, "DNS_OVERRIDE_UPDATE_FAILED"))
@@ -212,14 +212,14 @@ pub async fn apply_dns_config(apply: bool) -> CmdResult {

 #[tauri::command]
 #[specta::specta]
-pub async fn get_dns_config_content() -> CmdResult<Option<String>> {
+pub async fn get_dns_config_content() -> CmdResult<Option<std::string::String>> {
    use crate::utils::dirs;
    use tokio::fs;

    let dns_path = dirs::app_home_dir().stringify_err()?.join(constants::files::DNS_CONFIG);

    match fs::read_to_string(&dns_path).await {
-        Ok(content) => Ok(Some(content.into())),
+        Ok(content) => Ok(Some(content)),
        Err(error) if error.kind() == std::io::ErrorKind::NotFound => Ok(None),
        Err(error) => Err(CommandFailure::plain(error)),
    }
@@ -244,7 +244,7 @@ pub async fn validate_dns_config() -> CmdResult<ValidationOutcome> {

 #[tauri::command]
 #[specta::specta]
-pub async fn get_clash_logs() -> CmdResult<Vec<String>> {
+pub async fn get_clash_logs() -> CmdResult<Vec<std::string::String>> {
    let logs = CoreManager::global().get_clash_logs().await.unwrap_or_default();
-    Ok(logs.into_iter().collect())
+    Ok(logs)
 }
@@ -2,7 +2,6 @@ pub use clash_verge_media_unlock::UnlockItem;
 use reqwest::{Client, Proxy};
 use std::time::Duration;
 use tauri::{command, ipc::Channel};
-use tristr::alias::String;

 #[command]
 #[specta::specta]
@@ -24,7 +23,7 @@ async fn create_client() -> Result<Client, String> {
        .cookie_store(true)
        .proxy(proxy)
        .build()
-        .map_err(|error| format!("创建HTTP客户端失败: {error}").into())
+        .map_err(|error| format!("创建HTTP客户端失败: {error}"))
 }

 #[command]
@@ -41,7 +40,5 @@ pub async fn check_media_unlock(on_complete: Channel<UnlockItem>) -> Result<Vec<
 #[specta::specta]
 pub async fn check_media_unlock_item(name: String) -> Result<UnlockItem, String> {
    let client = create_client().await?;
-    clash_verge_media_unlock::check_media_unlock_item(&client, &name)
-        .await
-        .map_err(Into::into)
+    clash_verge_media_unlock::check_media_unlock_item(&client, &name).await
 }
@@ -1,5 +1,5 @@
 use anyhow::Result;
-use tristr::alias::String;
+use smartstring::alias::String;

 pub type CmdResult<T = ()> = Result<T, CommandFailure>;

@@ -8,9 +8,9 @@ pub type CmdResult<T = ()> = Result<T, CommandFailure>;
 pub struct CommandFailure {
    /// Stable frontend identifier, when classified.
    #[serde(skip_serializing_if = "Option::is_none")]
-    pub code: Option<String>,
+    pub code: Option<std::string::String>,
    /// Human-readable diagnostic detail.
-    pub detail: String,
+    pub detail: std::string::String,
    /// Requested operation when known by the command.
    #[serde(skip_serializing_if = "Option::is_none")]
    pub operation: Option<crate::core::notification::FailedOperation>,
@@ -20,8 +20,8 @@ impl CommandFailure {
    /// A failure with a stable code.
    pub fn coded(code: &str, detail: impl std::fmt::Display) -> Self {
        Self {
-            code: Some(code.into()),
-            detail: detail.to_string().into(),
+            code: Some(code.to_owned()),
+            detail: detail.to_string(),
            operation: None,
        }
    }
@@ -30,7 +30,7 @@ impl CommandFailure {
    pub fn plain(detail: impl std::fmt::Display) -> Self {
        Self {
            code: None,
-            detail: detail.to_string().into(),
+            detail: detail.to_string(),
            operation: None,
        }
    }
@@ -50,6 +50,16 @@ impl From<&str> for CommandFailure {
    }
 }

+impl From<std::string::String> for CommandFailure {
+    fn from(detail: std::string::String) -> Self {
+        Self {
+            code: None,
+            detail,
+            operation: None,
+        }
+    }
+}
+
 impl From<String> for CommandFailure {
    fn from(detail: String) -> Self {
        Self::plain(detail)
@@ -5,7 +5,6 @@ use crate::core::{proxy_control, sysopt::Sysopt};
 use gethostname::gethostname;
 use sysproxy::{Autoproxy, Sysproxy};
 use tauri_plugin_clash_verge_sysinfo;
-use tristr::alias::String;

 #[tauri::command]
 #[specta::specta]
@@ -25,8 +24,8 @@ pub async fn get_sys_proxy() -> CmdResult<SystemProxy> {

    Ok(SystemProxy {
        enable,
-        server: format!("{host}:{port}").into(),
-        bypass: bypass.into(),
+        server: format!("{host}:{port}"),
+        bypass,
    })
 }

@@ -40,10 +39,7 @@ pub async fn get_auto_proxy() -> CmdResult<AutoProxy> {
    };
    let Autoproxy { enable, url } = auto_proxy;

-    Ok(AutoProxy {
-        enable,
-        url: url.into(),
-    })
+    Ok(AutoProxy { enable, url })
 }

 #[tauri::command]
@@ -56,10 +52,10 @@ pub fn get_embedded_server_port() -> CmdResult<u16> {
 #[specta::specta]
 pub fn get_system_hostname() -> String {
    match gethostname().into_string() {
-        Ok(name) => name.into(),
+        Ok(name) => name,
        Err(os_string) => {
            let fallback = format!("{os_string:?}");
-            fallback.trim_matches('"').into()
+            fallback.trim_matches('"').to_string()
        }
    }
 }
@@ -68,9 +64,6 @@ pub fn get_system_hostname() -> String {
 #[specta::specta]
 pub fn get_network_interfaces() -> Vec<String> {
    tauri_plugin_clash_verge_sysinfo::list_network_interfaces()
-        .into_iter()
-        .map(Into::into)
-        .collect()
 }

 #[tauri::command]
@@ -84,7 +77,7 @@ pub fn get_network_interfaces_info() -> CmdResult<Vec<crate::ipc::NetworkInterfa
    let mut result = Vec::new();

    for interface in interfaces {
-        if names.iter().any(|name| name == &interface.name) {
+        if names.contains(&interface.name) {
            result.push(interface.into());
        }
    }
@@ -19,17 +19,17 @@ use crate::{
 use clash_verge_draft::{Draft, SharedDraft};
 use clash_verge_logging::{Type, logging, logging_error};
 use scopeguard::defer;
+use smartstring::alias::String;
 use std::sync::atomic::{AtomicBool, Ordering};
-use tristr::alias::String;

 static CURRENT_SWITCHING_PROFILE: AtomicBool = AtomicBool::new(false);

-fn profile_import_error(err: &anyhow::Error) -> String {
+fn profile_import_error(err: &anyhow::Error) -> std::string::String {
    if let Some(cause) = err.chain().find(|cause| cause.to_string().contains("TLS 1.0/1.1")) {
-        return cause.to_string().into();
+        return cause.to_string();
    }

-    format!("导入订阅失败: {err:#}").into()
+    format!("导入订阅失败: {err:#}")
 }

 #[tauri::command]
@@ -68,7 +68,7 @@ pub async fn enhance_profiles() -> CmdResult<ValidationOutcome> {
 #[tauri::command]
 #[tracing::instrument(skip_all, level = "info", fields(url = %help::mask_url(&url), uid = tracing::field::Empty))]
 #[specta::specta]
-pub async fn import_profile(url: String, option: Option<PrfOption>) -> CmdResult {
+pub async fn import_profile(url: std::string::String, option: Option<PrfOption>) -> CmdResult {
    let item = &mut match PrfItem::from_url(&url, None, None, option.as_ref()).await {
        Ok(it) => it,
        Err(e) => {
@@ -98,9 +98,9 @@ pub async fn import_profile(url: String, option: Option<PrfOption>) -> CmdResult

 #[tauri::command]
 #[specta::specta]
-pub async fn reorder_profile(active_id: String, over_id: String) -> CmdResult {
-    let active_id: String = active_id;
-    let over_id: String = over_id;
+pub async fn reorder_profile(active_id: std::string::String, over_id: std::string::String) -> CmdResult {
+    let active_id: String = active_id.into();
+    let over_id: String = over_id.into();
    match profiles_reorder_safe(&active_id, &over_id).await {
        Ok(_) => {
            logging!(info, Type::Cmd, "重新排序配置文件: {} -> {}", active_id, over_id);
@@ -121,9 +121,9 @@ pub async fn reorder_profile(active_id: String, over_id: String) -> CmdResult {

 #[tauri::command]
 #[specta::specta]
-pub async fn create_profile(item: ProfileCreate, file_data: Option<String>) -> CmdResult {
+pub async fn create_profile(item: ProfileCreate, file_data: Option<std::string::String>) -> CmdResult {
    let item: PrfItem = item.into();
-    let file_data = file_data;
+    let file_data = file_data.map(String::from);
    match profiles_append_item_with_filedata_safe(&item, file_data).await {
        Ok(_) => {
            profiles_save_file_safe()
@@ -138,8 +138,8 @@ pub async fn create_profile(item: ProfileCreate, file_data: Option<String>) -> C

 #[tauri::command]
 #[specta::specta]
-pub async fn update_profile(index: String, option: Option<PrfOption>) -> CmdResult {
-    let index: String = index;
+pub async fn update_profile(index: std::string::String, option: Option<PrfOption>) -> CmdResult {
+    let index: String = index.into();
    match feat::update_profile(&index, option.as_ref(), true).await {
        Ok(_) => Ok(()),
        Err(e) => {
@@ -151,8 +151,8 @@ pub async fn update_profile(index: String, option: Option<PrfOption>) -> CmdResu

 #[tauri::command]
 #[specta::specta]
-pub async fn delete_profile(index: String) -> CmdResult {
-    let index: String = index;
+pub async fn delete_profile(index: std::string::String) -> CmdResult {
+    let index: String = index.into();
    let profile_write_guard = PROFILE_WRITE_LOCK.lock().await;

    let profiles = Config::profiles().await;
@@ -325,6 +325,7 @@ async fn perform_config_update(
 #[derive(Default, serde::Deserialize, specta::Type)]
 #[serde(default)]
 pub struct ProfileSelection {
+    #[specta(type = Option<std::string::String>)]
    pub current: Option<String>,
 }

@@ -332,9 +333,13 @@ pub struct ProfileSelection {
 #[serde(default)]
 pub struct ProfileCreate {
    #[serde(rename = "type")]
+    #[specta(type = Option<std::string::String>)]
    pub itype: Option<String>,
+    #[specta(type = Option<std::string::String>)]
    pub name: Option<String>,
+    #[specta(type = Option<std::string::String>)]
    pub desc: Option<String>,
+    #[specta(type = Option<std::string::String>)]
    pub url: Option<String>,
    pub option: Option<PrfOption>,
 }
@@ -356,10 +361,15 @@ impl From<ProfileCreate> for PrfItem {
 #[serde(default)]
 pub struct ProfilePatch {
    #[serde(rename = "type")]
+    #[specta(type = Option<std::string::String>)]
    pub itype: Option<String>,
+    #[specta(type = Option<std::string::String>)]
    pub name: Option<String>,
+    #[specta(type = Option<std::string::String>)]
    pub desc: Option<String>,
+    #[specta(type = Option<std::string::String>)]
    pub file: Option<String>,
+    #[specta(type = Option<std::string::String>)]
    pub url: Option<String>,
    pub selected: Option<Vec<crate::config::PrfSelected>>,
    pub extra: Option<crate::config::PrfExtra>,
@@ -426,9 +436,9 @@ pub async fn patch_profiles_config_by_profile_index(profile_index: String) -> Cm

 #[tauri::command]
 #[specta::specta]
-pub async fn patch_profile(index: String, profile: ProfilePatch) -> CmdResult {
+pub async fn patch_profile(index: std::string::String, profile: ProfilePatch) -> CmdResult {
    let profile: PrfItem = profile.into();
-    let index: String = index;
+    let index: String = index.into();
    let profiles = Config::profiles().await;
    let should_refresh_timer = if let Ok(old_profile) = profiles.latest_arc().get_item(&index)
        && let Some(new_option) = profile.option.as_ref()
@@ -469,7 +479,7 @@ pub async fn patch_profile(index: String, profile: ProfilePatch) -> CmdResult {

 #[tauri::command]
 #[specta::specta]
-pub async fn view_profile(index: String) -> CmdResult {
+pub async fn view_profile(index: std::string::String) -> CmdResult {
    let profiles = Config::profiles().await;
    let profiles_ref = profiles.latest_arc();
    let file = profiles_ref
@@ -494,7 +504,7 @@ pub async fn view_profile(index: String) -> CmdResult {

 #[tauri::command]
 #[specta::specta]
-pub async fn read_profile_file(index: String) -> CmdResult<String> {
+pub async fn read_profile_file(index: std::string::String) -> CmdResult<std::string::String> {
    let item = {
        let profiles = Config::profiles().await;
        let profiles_ref = profiles.latest_arc();
@@ -514,7 +524,7 @@ pub async fn read_profile_file(index: String) -> CmdResult<String> {
            .join(file.as_str());
        match tokio::fs::try_exists(&path).await {
            Ok(true) => {}
-            Ok(false) => return Ok(String::new()),
+            Ok(false) => return Ok(std::string::String::new()),
            Err(err) => {
                return Err(coded_error(
                    "PROFILE_READ_FAILED",
@@ -525,12 +535,12 @@ pub async fn read_profile_file(index: String) -> CmdResult<String> {
    }

    let data = item.read_file().await.with_error_code("PROFILE_READ_FAILED")?;
-    Ok(data)
+    Ok(data.into())
 }

 #[tauri::command]
 #[specta::specta]
-pub async fn get_next_update_time(uid: String) -> CmdResult<Option<i64>> {
+pub async fn get_next_update_time(uid: std::string::String) -> CmdResult<Option<i64>> {
    let timer = Timer::global();
    let next_time = timer.get_next_update_time(&uid).await;
    Ok(next_time)
@@ -15,7 +15,6 @@ use std::{
    collections::{BTreeMap, HashSet},
    sync::atomic::{AtomicBool, Ordering},
 };
-use tristr::alias::String;

 /// Merges one selection pair into fresh backend state to avoid stale-list overwrites.
 #[tauri::command]
@@ -49,7 +48,7 @@ fn runtime_group_order(config: Option<&Mapping>) -> Vec<String> {
        .filter_map(|name| name.as_str())
        .filter(|name| !name.is_empty() && *name != "GLOBAL")
        .filter(|name| seen.insert(*name))
-        .map(String::from)
+        .map(str::to_owned)
        .collect()
 }

@@ -64,7 +63,7 @@ fn runtime_group_scopes(config: Option<&Mapping>) -> BTreeMap<String, GroupScope
        .into_iter()
        .flat_map(|providers| providers.keys())
        .filter_map(|name| name.as_str())
-        .map(String::from)
+        .map(str::to_owned)
        .collect::<Vec<_>>();
    all_providers.sort();
    let flag = |group: &Mapping, key: &str| group.get(key).and_then(|value| value.as_bool()) == Some(true);
@@ -76,7 +75,7 @@ fn runtime_group_scopes(config: Option<&Mapping>) -> BTreeMap<String, GroupScope
        .flatten()
        .filter_map(|group| group.as_mapping())
        .filter_map(|group| {
-            let name: String = group.get("name")?.as_str()?.into();
+            let name = group.get("name")?.as_str()?.to_owned();
            let providers = if flag(group, "include-all") || flag(group, "include-all-providers") {
                all_providers.clone()
            } else {
@@ -86,14 +85,14 @@ fn runtime_group_scopes(config: Option<&Mapping>) -> BTreeMap<String, GroupScope
                    .into_iter()
                    .flatten()
                    .filter_map(|provider| provider.as_str())
-                    .map(String::from)
+                    .map(str::to_owned)
                    .collect()
            };
            let exclude_types = group
                .get("exclude-type")
                .and_then(|types| types.as_str())
                .filter(|types| !types.is_empty())
-                .map(|types| types.split('|').map(String::from).collect())
+                .map(|types| types.split('|').map(str::to_owned).collect())
                .unwrap_or_default();
            Some((
                name,
@@ -1,8 +1,8 @@
 use super::CmdResult;
 use crate::{cmd::StringifyErr as _, config::Config, core::CoreManager, utils::yaml_emitter};
 use anyhow::{Context as _, anyhow};
+use smartstring::alias::String;
 use std::collections::HashMap;
-use tristr::alias::String;

 #[tauri::command]
 #[specta::specta]
@@ -17,7 +17,7 @@ pub async fn get_runtime_config() -> CmdResult<Option<crate::ipc::YamlMapping>>

 #[tauri::command]
 #[specta::specta]
-pub async fn get_runtime_yaml() -> CmdResult<String> {
+pub async fn get_runtime_yaml() -> CmdResult<std::string::String> {
    let runtime = Config::runtime().await;
    let runtime = runtime.latest_arc();

@@ -36,17 +36,22 @@ pub async fn get_runtime_logs() -> CmdResult<RuntimeLogs> {

 #[derive(serde::Serialize, specta::Type)]
 #[serde(transparent)]
-pub struct RuntimeLogs(HashMap<String, Vec<(String, String)>>);
+pub struct RuntimeLogs(
+    #[specta(type = HashMap<std::string::String, Vec<(std::string::String, std::string::String)>>)]
+    HashMap<String, Vec<(String, String)>>,
+);

 #[tauri::command]
 #[specta::specta]
-pub fn take_discarded_keys_notice() -> Option<String> {
-    crate::enhance::take_discarded_keys_notice()
+pub fn take_discarded_keys_notice() -> Option<std::string::String> {
+    crate::enhance::take_discarded_keys_notice().map(Into::into)
 }

 #[tauri::command]
 #[specta::specta]
-pub async fn get_runtime_proxy_chain_config(proxy_chain_exit_node: String) -> CmdResult<String> {
+pub async fn get_runtime_proxy_chain_config(
+    proxy_chain_exit_node: std::string::String,
+) -> CmdResult<std::string::String> {
    let runtime = Config::runtime().await;
    let runtime = runtime.latest_arc();

@@ -1,4 +1,4 @@
-use super::{CmdResult, CommandFailure};
+use super::CmdResult;
 use crate::{
    cmd::StringifyErr as _,
    cmd::validate::{ValidationNoticeTarget, handle_validation_notice},
@@ -11,15 +11,18 @@ use crate::{
    utils::dirs,
 };
 use clash_verge_logging::{Type, logging, logging_error};
+use smartstring::alias::String;
 use tokio::fs;
-use tristr::alias::String;

 /// 保存profiles的配置
 #[tauri::command]
 #[specta::specta]
-pub async fn save_profile_file(index: String, file_data: Option<String>) -> CmdResult<ValidationOutcome> {
-    let index: String = index;
-    let file_data = file_data;
+pub async fn save_profile_file(
+    index: std::string::String,
+    file_data: Option<std::string::String>,
+) -> CmdResult<ValidationOutcome> {
+    let index: String = index.into();
+    let file_data = file_data.map(String::from);
    let file_data = match file_data {
        Some(d) => d,
        None => return Ok(ValidationOutcome::Valid),
@@ -150,7 +153,7 @@ async fn handle_saved_profile_file(
        Err(e) => {
            logging!(error, Type::Config, "[cmd配置save] 验证过程发生错误: {e:#}");
            restore_original(file_path, original_content, original_existed).await?;
-            return Err(CommandFailure::plain(e));
+            return Err(e.to_string().into());
        }
    }

@@ -178,7 +181,7 @@ async fn handle_saved_profile_file(
        Err(err) => {
            logging!(error, Type::Config, "[cmd配置save] 运行时配置应用错误: {err:#}");
            restore_original(file_path, original_content, original_existed).await?;
-            Err(CommandFailure::plain(err))
+            Err(err.to_string().into())
        }
    }
 }
@@ -7,7 +7,6 @@ use crate::{
        service::{SERVICE_MANAGER, ServiceStatus, request_runtime_provider_sync},
    },
 };
-use tristr::alias::String;

 #[derive(Debug, PartialEq, Eq, serde::Serialize, specta::Type)]
 #[serde(tag = "status", rename_all = "camelCase")]
@@ -75,7 +74,7 @@ where
    if reasons.is_empty() {
        return Err(proxy_aware_coded_error(&error, error_code));
    }
-    let reason: String = reasons.join("\n").into();
+    let reason = reasons.join("\n");
    fallback(reason.clone())
        .await
        .map_err(|error| proxy_aware_coded_error(&error, "SERVICE_SIDECAR_FAILED"))?;
@@ -180,7 +179,7 @@ mod tests {
            let error = match availability {
                Some(availability) => anyhow::Error::new(InstallationVerificationError {
                    status: InstallationStatus {
-                        service_sha256: std::string::String::new(),
+                        service_sha256: String::new(),
                        protocol: ProtocolInfo::current(),
                        cores: vec![CoreInspection {
                            name: "verge-mihomo.exe".into(),
@@ -204,7 +203,7 @@ mod tests {
                assert_eq!(
                    result,
                    Ok(ServiceInstallOutcome::Sidecar {
-                        reason: format!("verge-mihomo.exe: {reason}").into()
+                        reason: format!("verge-mihomo.exe: {reason}")
                    })
                );
            } else {
@@ -2,7 +2,6 @@ use crate::core::{
    notification::{self, PendingFailure},
    runstate::{RUN_STATE, RunStateView},
 };
-use tristr::alias::String;

 /// Returns one coherent core/service snapshot instead of independently refreshed state.
 #[tauri::command]
@@ -4,14 +4,18 @@ use crate::{
    config::{Config, IVerge},
    core, feat,
 };
-use tristr::alias::String;
+use smartstring::alias::String;

 #[tauri::command]
 #[specta::specta]
-pub async fn save_webdav_config(url: String, username: String, password: String) -> CmdResult<()> {
-    let url: String = url;
-    let username: String = username;
-    let password: String = password;
+pub async fn save_webdav_config(
+    url: std::string::String,
+    username: std::string::String,
+    password: std::string::String,
+) -> CmdResult<()> {
+    let url: String = url.into();
+    let username: String = username.into();
+    let password: String = password.into();
    let patch = IVerge {
        webdav_url: Some(url),
        webdav_username: Some(username),
@@ -44,15 +48,15 @@ pub async fn list_webdav_backup() -> CmdResult<Vec<crate::ipc::WebDavFile>> {

 #[tauri::command]
 #[specta::specta]
-pub async fn delete_webdav_backup(filename: String) -> CmdResult<()> {
-    let filename: String = filename;
+pub async fn delete_webdav_backup(filename: std::string::String) -> CmdResult<()> {
+    let filename: String = filename.into();
    feat::delete_webdav_backup(filename).await.stringify_err()
 }

 #[tauri::command]
 #[specta::specta]
-pub async fn restore_webdav_backup(filename: String) -> CmdResult<()> {
-    let filename: String = filename;
+pub async fn restore_webdav_backup(filename: std::string::String) -> CmdResult<()> {
+    let filename: String = filename.into();
    feat::restore_webdav_backup(filename)
        .await
        .map_err(|error| super::proxy_aware_error(&error))
@@ -10,7 +10,6 @@ use std::{
    net::{IpAddr, Ipv4Addr, SocketAddr},
    str::FromStr as _,
 };
-use tristr::alias::String;

 #[derive(Default, Debug, Clone)]
 pub struct IClashTemp(pub Mapping);
@@ -85,12 +84,12 @@ impl IClashTemp {
        #[cfg(unix)]
        map.insert(
            "external-controller-unix".into(),
-            Self::guard_external_controller_ipc().as_str().into(),
+            Self::guard_external_controller_ipc().into(),
        );
        #[cfg(windows)]
        map.insert(
            "external-controller-pipe".into(),
-            Self::guard_external_controller_ipc().as_str().into(),
+            Self::guard_external_controller_ipc().into(),
        );
        map.insert("tun".into(), tun_config.into());
        cors_map.insert("allow-private-network".into(), true.into());
@@ -135,18 +134,12 @@ impl IClashTemp {
        config.insert("mixed-port".into(), mixed_port.into());
        config.insert("socks-port".into(), socks_port.into());
        config.insert("port".into(), port.into());
-        config.insert("external-controller".into(), ctrl.as_str().into());
+        config.insert("external-controller".into(), ctrl.into());

        #[cfg(unix)]
-        config.insert(
-            "external-controller-unix".into(),
-            external_controller_unix.as_str().into(),
-        );
+        config.insert("external-controller-unix".into(), external_controller_unix.into());
        #[cfg(windows)]
-        config.insert(
-            "external-controller-pipe".into(),
-            external_controller_pipe.as_str().into(),
-        );
+        config.insert("external-controller-pipe".into(), external_controller_pipe.into());
        config
    }

@@ -173,9 +166,9 @@ impl IClashTemp {
            port: Self::guard_port(config),
            server: Self::guard_client_ctrl(config),
            secret: config.get("secret").and_then(|value| match value {
-                Value::String(val_str) => Some(val_str.clone().into()),
-                Value::Bool(val_bool) => Some(val_bool.to_string().into()),
-                Value::Number(val_num) => Some(val_num.to_string().into()),
+                Value::String(val_str) => Some(val_str.clone()),
+                Value::Bool(val_bool) => Some(val_bool.to_string()),
+                Value::Number(val_num) => Some(val_num.to_string()),
                _ => None,
            }),
        }
@@ -187,7 +180,7 @@ impl IClashTemp {
    /// 的严格 `BaseConfig` 反序列化，因此即使核心返回的字段与插件结构体不匹配也能取到。
    pub fn get_mode(&self) -> Option<String> {
        self.0.get("mode").and_then(|value| match value {
-            Value::String(val_str) => Some(val_str.clone().into()),
+            Value::String(val_str) => Some(val_str.clone()),
            _ => None,
        })
    }
@@ -283,7 +276,7 @@ impl IClashTemp {
                        false => Cow::Borrowed(val_str),
                    };

-                    SocketAddr::from_str(&val).ok().map(|s| s.to_string().into())
+                    SocketAddr::from_str(&val).ok().map(|s| s.to_string())
                }
                None => None,
            })
@@ -297,7 +290,7 @@ impl IClashTemp {
                if socket.ip().is_unspecified() {
                    socket.set_ip(IpAddr::V4(Ipv4Addr::new(127, 0, 0, 1)));
                }
-                socket.to_string().into()
+                socket.to_string()
            }
            Err(_) => "127.0.0.1:9097".into(),
        }
@@ -20,10 +20,10 @@ use backon::{ExponentialBuilder, Retryable as _};
 use clash_verge_draft::Draft;
 use clash_verge_logging::{Type, logging, logging_error};
 use serde_yaml_ng::{Mapping, Value};
+use smartstring::alias::String;
 use std::{collections::HashSet, path::PathBuf};
 use tokio::sync::{Mutex, MutexGuard, OnceCell};
 use tokio::time::sleep;
-use tristr::alias::String;

 pub(crate) struct Config {
    clash_config: Draft<IClashTemp>,
@@ -205,7 +205,7 @@ impl Config {
        Self::write_runtime_file(&yaml).await
    }

-    pub(crate) async fn runtime_config_yaml() -> Result<String> {
+    pub(crate) async fn runtime_config_yaml() -> Result<std::string::String> {
        let runtime = Self::runtime().await;
        AsyncHandler::spawn_blocking(move || {
            let runtime_lastest = runtime.latest_arc();
@@ -216,7 +216,7 @@ impl Config {
                .or_else(|| runtime_data.config.as_ref())
                .ok_or_else(|| anyhow!("failed to generate runtime config, might need to restart application"))?;
            let yaml_str = serde_yaml_ng::to_string(config)?;
-            Ok(format!("# Generated by Clash Verge\n\n{}", yaml_str).into())
+            Ok(format!("# Generated by Clash Verge\n\n{}", yaml_str))
        })
        .await
        .map_err(|join| anyhow!("runtime serialization task failed: {join}"))?
@@ -4,8 +4,8 @@ use clash_verge_draft::DraftTransaction;
 use serde::{Deserialize, Serialize};
 use serde_yaml_ng::{Mapping, Value};
 use sha2::{Digest as _, Sha256};
+use smartstring::alias::String;
 use std::sync::atomic::{AtomicBool, Ordering};
-use tristr::alias::String;

 use super::{Config, IVerge};
 use crate::core::handle::Handle;
@@ -110,6 +110,7 @@ impl DnsOverrideState {
 pub struct ProfileDnsSettings {
    pub enabled: bool,
    #[serde(default, skip_serializing_if = "Option::is_none")]
+    #[specta(type = Option<std::string::String>)]
    pub confirmation: Option<String>,
 }

@@ -7,7 +7,6 @@ use base64::{Engine as _, engine::general_purpose::STANDARD};
 use serde::{Deserialize, Deserializer, Serialize, Serializer};
 use std::cell::Cell;
 use std::future::Future;
-use tristr::alias::String;

 const NONCE_LENGTH: usize = 12;

@@ -29,7 +28,7 @@ pub fn encrypt_data(data: &str) -> Result<String, Box<dyn std::error::Error>> {

    let mut combined = nonce.to_vec();
    combined.extend(ciphertext);
-    Ok(STANDARD.encode(combined).into())
+    Ok(STANDARD.encode(combined))
 }

 pub fn decrypt_data(encrypted: &str) -> Result<String, Box<dyn std::error::Error>> {
@@ -47,10 +46,7 @@ pub fn decrypt_data(encrypted: &str) -> Result<String, Box<dyn std::error::Error
        .decrypt(nonce.into(), ciphertext)
        .map_err(|e| format!("Decryption failed: {e}"))?;

-    // from_utf8 exists only on the std String type; the tristr alias shadows the bare name.
-    std::string::String::from_utf8(plaintext)
-        .map_err(|e| e.into())
-        .map(Into::into)
+    String::from_utf8(plaintext).map_err(|e| e.into())
 }

 pub fn serialize_encrypted<T, S>(value: &T, serializer: S) -> Result<S::Ok, S::Error>
@@ -18,7 +18,6 @@ use clash_verge_logging::{Type, logging};
 use parking_lot::Mutex;
 use serde_yaml_ng::Value;
 use std::{collections::HashSet, net::SocketAddr, str::FromStr as _};
-use tristr::alias::String;

 #[derive(Clone, Copy)]
 struct MixedPortFallback {
@@ -142,8 +141,8 @@ impl Config {
    }

    pub(crate) fn block_startup_core(error: &anyhow::Error) {
-        *STARTUP_CORE_BLOCK_REASON.lock() = Some(error.to_string().into());
-        report_fallback_error(error.to_string().into());
+        *STARTUP_CORE_BLOCK_REASON.lock() = Some(error.to_string());
+        report_fallback_error(error.to_string());
    }

    pub(crate) fn startup_core_block_reason() -> Option<String> {
@@ -9,9 +9,9 @@ use crate::{
 use anyhow::{Context as _, Result, bail};
 use serde::{Deserialize, Serialize};
 use serde_yaml_ng::Mapping;
+use smartstring::alias::String;
 use std::time::Duration;
 use tokio::fs;
-use tristr::alias::String;
 // TODO, use other re-export
 use reqwest_dav::re_exports::url::form_urlencoded;
 use tauri::Url;
@@ -30,18 +30,24 @@ pub(super) fn normalize_profile_home_url(raw: &str) -> Option<String> {
 #[derive(Debug, Clone, Deserialize, Serialize, Default, specta::Type)]
 #[serde(default)]
 pub struct PrfItem {
+    #[specta(type = Option<std::string::String>)]
    pub uid: Option<String>,

    /// enum value: remote | local | script | merge
    #[serde(rename = "type")]
+    #[specta(type = Option<std::string::String>)]
    pub itype: Option<String>,
+    #[specta(type = Option<std::string::String>)]
    pub name: Option<String>,
+    #[specta(type = Option<std::string::String>)]
    pub file: Option<String>,

    #[serde(skip_serializing_if = "Option::is_none")]
+    #[specta(type = Option<std::string::String>)]
    pub desc: Option<String>,

    #[serde(skip_serializing_if = "Option::is_none")]
+    #[specta(type = Option<std::string::String>)]
    pub url: Option<String>,

    #[serde(skip_serializing_if = "Option::is_none")]
@@ -56,16 +62,20 @@ pub struct PrfItem {
    pub option: Option<PrfOption>,

    #[serde(skip_serializing_if = "Option::is_none")]
+    #[specta(type = Option<std::string::String>)]
    pub home: Option<String>,

    #[serde(skip)]
+    #[specta(type = Option<std::string::String>)]
    pub file_data: Option<String>,
 }

 #[derive(Default, Debug, Clone, Deserialize, Serialize, PartialEq, Eq, specta::Type)]
 #[serde(default)]
 pub struct PrfSelected {
+    #[specta(type = Option<std::string::String>)]
    pub name: Option<String>,
+    #[specta(type = Option<std::string::String>)]
    pub now: Option<String>,
 }

@@ -81,6 +91,7 @@ pub struct PrfExtra {
 #[serde(default)]
 pub struct PrfOption {
    #[serde(skip_serializing_if = "Option::is_none")]
+    #[specta(type = Option<std::string::String>)]
    pub user_agent: Option<String>,

    #[serde(skip_serializing_if = "Option::is_none")]
@@ -103,10 +114,15 @@ pub struct PrfOption {

    #[serde(skip_serializing_if = "Option::is_none")]
    pub allow_auto_update: Option<bool>,
+    #[specta(type = Option<std::string::String>)]
    pub merge: Option<String>,
+    #[specta(type = Option<std::string::String>)]
    pub script: Option<String>,
+    #[specta(type = Option<std::string::String>)]
    pub rules: Option<String>,
+    #[specta(type = Option<std::string::String>)]
    pub proxies: Option<String>,
+    #[specta(type = Option<std::string::String>)]
    pub groups: Option<String>,
 }

@@ -171,7 +187,7 @@ impl PrfItem {
        file_data: Option<String>,
        option: Option<&PrfOption>,
    ) -> Result<Self> {
-        let uid = help::get_uid("L");
+        let uid = help::get_uid("L").into();
        let file = format!("{uid}.yaml").into();
        let opt_ref = option.as_ref();
        let update_interval = opt_ref.and_then(|o| o.update_interval);
@@ -344,11 +360,11 @@ impl PrfItem {
            .and_then(|value| value.to_str().ok())
            .and_then(normalize_profile_home_url);

-        let uid = help::get_uid("R");
+        let uid = help::get_uid("R").into();
        let file = format!("{uid}.yaml").into();
        let name = name
            .map(|s| s.to_owned())
-            .unwrap_or_else(|| filename.unwrap_or_else(|| "Remote File".into()));
+            .unwrap_or_else(|| filename.map(|s| s.into()).unwrap_or_else(|| "Remote File".into()));
        let data = resp.text();

        let data = data.trim_start_matches('\u{feff}');
@@ -414,7 +430,7 @@ impl PrfItem {
        let (id, template) = if let Some(uid) = uid {
            (uid, tmpl::ITEM_MERGE.into())
        } else {
-            (help::get_uid("m"), tmpl::ITEM_MERGE_EMPTY.into())
+            (help::get_uid("m").into(), tmpl::ITEM_MERGE_EMPTY.into())
        };
        let file = format!("{id}.yaml").into();

@@ -429,7 +445,11 @@ impl PrfItem {
    }

    pub(super) fn from_script(uid: Option<String>) -> Self {
-        let id = if let Some(uid) = uid { uid } else { help::get_uid("s") };
+        let id = if let Some(uid) = uid {
+            uid
+        } else {
+            help::get_uid("s").into()
+        };
        let file = format!("{id}.js").into(); // js ext
        Self {
            uid: Some(id),
@@ -442,7 +462,7 @@ impl PrfItem {
    }

    fn from_rules() -> Self {
-        let uid = help::get_uid("r");
+        let uid = help::get_uid("r").into();
        let file = format!("{uid}.yaml").into(); // yaml ext

        Self {
@@ -456,7 +476,7 @@ impl PrfItem {
    }

    fn from_proxies() -> Self {
-        let uid = help::get_uid("p");
+        let uid = help::get_uid("p").into();
        let file = format!("{uid}.yaml").into(); // yaml ext

        Self {
@@ -470,7 +490,7 @@ impl PrfItem {
    }

    fn from_groups() -> Self {
-        let uid = help::get_uid("g");
+        let uid = help::get_uid("g").into();
        let file = format!("{uid}.yaml").into(); // yaml ext

        Self {
@@ -17,6 +17,7 @@ use clash_verge_logging::{Type, logging};
 use parking_lot::Mutex;
 use serde::{Deserialize, Serialize};
 use serde_yaml_ng::Mapping;
+use smartstring::alias::String;
 use std::num::NonZeroUsize;
 use std::{
    collections::{HashMap, HashSet},
@@ -29,7 +30,6 @@ use std::{
 };
 use tauri_plugin_mihomo::models::{Proxies, ProxyType};
 use tokio::{fs, task::JoinHandle};
-use tristr::alias::String;

 pub(crate) static PROFILE_WRITE_LOCK: tokio::sync::Mutex<()> = tokio::sync::Mutex::const_new(());

@@ -51,6 +51,7 @@ const SELECTED_NODES_FIRST_PASS_BUDGET: Duration = Duration::from_secs(3);
 #[derive(Default, Debug, Clone, Deserialize, Serialize, specta::Type)]
 #[serde(default)]
 pub struct IProfiles {
+    #[specta(type = Option<std::string::String>)]
    pub current: Option<String>,

    pub items: Option<Vec<PrfItem>>,
@@ -114,7 +115,7 @@ impl IProfiles {
                let mut home_changed = false;
                for item in items.iter_mut() {
                    if item.uid.is_none() {
-                        item.uid = Some(help::get_uid("d"));
+                        item.uid = Some(help::get_uid("d").into());
                    }
                    if item.itype.as_deref() == Some("remote") {
                        item.option
@@ -1,6 +1,6 @@
 use serde_yaml_ng::{Mapping, Value};
+use smartstring::alias::String;
 use std::collections::{HashMap, HashSet};
-use tristr::alias::String;

 use crate::enhance::field::use_keys;

@@ -8,7 +8,7 @@ use anyhow::Result;
 use clash_verge_logging::{Type, logging};
 use log::LevelFilter;
 use serde::{Deserialize, Serialize};
-use tristr::alias::String;
+use smartstring::alias::String;

 /// ### `verge.yaml` schema
 #[derive(Default, Debug, Clone, Deserialize, Serialize, specta::Type)]
@@ -20,7 +20,6 @@ use tokio::{
    fs,
    sync::{Mutex, watch},
 };
-use tristr::alias::String;

 const DEFAULT_INTERVAL_HOURS: u64 = 24;
 const MIN_INTERVAL_HOURS: u64 = 1;
@@ -110,7 +109,7 @@ impl AutoBackupManager {
        {
            *self.settings.write() = settings;
        }
-        let _ = self.settings_tx.send(settings);
+        let _ = self.settings_tx.send_replace(settings);
        self.maybe_start_runner(settings);
        Ok(())
    }
@@ -120,7 +119,7 @@ impl AutoBackupManager {
        {
            *self.settings.write() = settings;
        }
-        let _ = self.settings_tx.send(settings);
+        let _ = self.settings_tx.send_replace(settings);
        self.maybe_start_runner(settings);
        Ok(())
    }
@@ -212,7 +211,7 @@ impl AutoBackupManager {
            return Ok(());
        }

-        let file_name = create_local_backup_with_namer(|name| append_auto_suffix(name, trigger.slug())).await?;
+        let file_name = create_local_backup_with_namer(|name| append_auto_suffix(name, trigger.slug()).into()).await?;
        self.last_backup.store(Local::now().timestamp(), Ordering::Release);

        if let Err(err) = cleanup_auto_backups().await {
@@ -240,8 +239,8 @@ impl AutoBackupManager {

 fn append_auto_suffix(file_name: &str, slug: &str) -> String {
    match file_name.rsplit_once('.') {
-        Some((stem, ext)) => format!("{stem}{AUTO_MARKER}{slug}.{ext}").into(),
-        None => format!("{file_name}{AUTO_MARKER}{slug}").into(),
+        Some((stem, ext)) => format!("{stem}{AUTO_MARKER}{slug}.{ext}"),
+        None => format!("{file_name}{AUTO_MARKER}{slug}"),
    }
 }

@@ -5,6 +5,7 @@ use arc_swap::{ArcSwap, ArcSwapOption};
 use backon::{ConstantBuilder, Retryable as _};
 use clash_verge_logging::{Type, logging};
 use reqwest_dav::list_cmd::{ListEntity, ListFile, ListMultiStatus};
+use smartstring::alias::String;
 use std::{
    collections::HashMap,
    env::{consts::OS, temp_dir},
@@ -14,7 +15,6 @@ use std::{
    time::Duration,
 };
 use tokio::{fs, time::timeout};
-use tristr::alias::String;
 use zip::write::SimpleFileOptions;

 const APP_VERSION: &str = env!("CARGO_PKG_VERSION");
@@ -7,6 +7,7 @@ use crate::{config::Config, core::handle, core::lightweight::entry_lightweight_m
 use anyhow::{Result, bail};
 use arc_swap::ArcSwap;
 use clash_verge_logging::{Type, logging};
+use smartstring::alias::String;
 use std::{
    collections::HashMap,
    fmt,
@@ -17,7 +18,6 @@ use std::{
    },
 };
 use tauri_plugin_global_shortcut::{Code, GlobalShortcutExt as _, ShortcutState};
-use tristr::alias::String;

 /// Enum representing all available hotkey functions
 #[derive(Debug, Clone, Copy, PartialEq, Eq, Hash)]
@@ -10,7 +10,6 @@ use std::{
    net::{IpAddr, Ipv4Addr, Ipv6Addr, SocketAddr},
    str::FromStr as _,
 };
-use tristr::alias::String;

 /// The config key of the Mixed Port, named once so callers stop spelling it out.
 pub(crate) const MIXED_PORT_KEY: &str = "mixed-port";
@@ -164,7 +163,7 @@ pub(crate) fn probe_listener(request: &ListenerProbe) -> ListenerProbeOutcome {
        Ok(address) => address,
        Err(error) => {
            return ListenerProbeOutcome::Invalid {
-                message: error.to_string().into(),
+                message: error.to_string(),
            };
        }
    };
@@ -202,7 +201,7 @@ pub(crate) fn probe_proxy_port_change(
            Ok(claims) => claims,
            Err(error) => {
                return ListenerProbeOutcome::Invalid {
-                    message: format!("current proxy listener configuration is invalid: {error:#}").into(),
+                    message: format!("current proxy listener configuration is invalid: {error:#}"),
                };
            }
        }
@@ -213,7 +212,7 @@ pub(crate) fn probe_proxy_port_change(
        Ok(claims) => claims,
        Err(error) => {
            return ListenerProbeOutcome::Invalid {
-                message: format!("candidate proxy listener configuration is invalid: {error:#}").into(),
+                message: format!("candidate proxy listener configuration is invalid: {error:#}"),
            };
        }
    };
@@ -402,8 +401,7 @@ fn probe_claims(claims: &[BindClaim]) -> ListenerProbeOutcome {
                        claim.socket_addr(),
                        transport_name(claim.transport),
                        error
-                    )
-                    .into(),
+                    ),
                };
            }
            Err(error) => {
@@ -414,8 +412,7 @@ fn probe_claims(claims: &[BindClaim]) -> ListenerProbeOutcome {
                        claim.socket_addr(),
                        transport_name(claim.transport),
                        error
-                    )
-                    .into(),
+                    ),
                };
            }
        }
@@ -742,7 +739,7 @@ mod tests {
        let port = listener.local_addr()?.port();
        assert_eq!(
            probe_listener(&ListenerProbe {
-                address: format!("0.0.0.0:{port}").into(),
+                address: format!("0.0.0.0:{port}"),
                transports: vec![ListenerTransport::Tcp],
            }),
            ListenerProbeOutcome::Conflict {
@@ -758,7 +755,7 @@ mod tests {
        let listener = TcpListener::bind((Ipv4Addr::LOCALHOST, 0))?;
        let port = listener.local_addr()?.port();
        let outcome = probe_listener(&ListenerProbe {
-            address: format!("127.0.0.1:{port}").into(),
+            address: format!("127.0.0.1:{port}"),
            transports: vec![ListenerTransport::Tcp],
        });
        assert_eq!(
@@ -776,7 +773,7 @@ mod tests {
        let listener = TcpListener::bind((Ipv4Addr::UNSPECIFIED, 0))?;
        let port = listener.local_addr()?.port();
        let outcome = probe_listener(&ListenerProbe {
-            address: format!("127.0.0.1:{port}").into(),
+            address: format!("127.0.0.1:{port}"),
            transports: vec![ListenerTransport::Tcp],
        });
        assert_eq!(
@@ -812,7 +809,7 @@ mod tests {

        assert_eq!(
            probe_listener(&ListenerProbe {
-                address: format!("127.0.0.1:{port}").into(),
+                address: format!("127.0.0.1:{port}"),
                transports: vec![ListenerTransport::Tcp],
            }),
            ListenerProbeOutcome::Available
@@ -825,7 +822,7 @@ mod tests {
        let socket = UdpSocket::bind((Ipv4Addr::LOCALHOST, 0))?;
        let port = socket.local_addr()?.port();
        let outcome = probe_listener(&ListenerProbe {
-            address: format!("127.0.0.1:{port}").into(),
+            address: format!("127.0.0.1:{port}"),
            transports: vec![ListenerTransport::Udp],
        });
        assert_eq!(
@@ -15,6 +15,7 @@ use clash_verge_draft::DraftTransaction;
 use clash_verge_logging::{Type, logging};
 use clash_verge_service_ipc::StageRuntimeOutcome;
 use scopeguard::defer;
+use smartstring::alias::String;
 use std::{
    collections::HashSet,
    path::PathBuf,
@@ -22,7 +23,6 @@ use std::{
    time::{Duration, Instant},
 };
 use tauri_plugin_mihomo::Error as MihomoError;
-use tristr::alias::String;

 /// A staging result separated from the policy that acts on it.
 #[derive(Debug, Clone, PartialEq, Eq)]
@@ -92,7 +92,7 @@ async fn ask_to_stage(path: &std::path::Path) -> StageAttempt {
    match crate::core::service::stage_runtime_by_service(path).await {
        Ok(StageRequest::Answered(outcome)) => StageAttempt::Answered(outcome),
        Ok(StageRequest::Refused { code, message }) => {
-            let message = message;
+            let message = message.into();
            if StageRequest::is_about_the_bundle(code) {
                StageAttempt::RefusedTheBundle(message)
            } else {
@@ -7,10 +7,10 @@ use crate::core::service::{SERVICE_MANAGER, ServiceStatus};
 use anyhow::Result;
 use clash_verge_logging::{Type, logging};
 use scopeguard::defer;
+use smartstring::alias::String;
 use std::path::Path;
 #[cfg(target_os = "windows")]
 use tauri_plugin_clash_verge_sysinfo::is_current_app_handle_admin;
-use tristr::alias::String;

 #[cfg(any(target_os = "windows", test))]
 const fn should_wait_for_service(tun_enabled: bool, service_ready: bool, is_admin: bool) -> bool {
@@ -194,7 +194,7 @@ async fn run_service_start_with_sidecar_fallback<Start, StartFuture, Check, Chec
    start_service: Start,
    confirm_idle: Check,
    start_sidecar: Fallback,
-    record_unavailable: impl FnOnce(String),
+    record_unavailable: impl FnOnce(std::string::String),
 ) -> Result<()>
 where
    Start: FnOnce() -> StartFuture,
@@ -217,7 +217,7 @@ where
    // A lost start response can hide a running core; the shared check must resolve occupancy.
    if let Err(probe_error) = confirm_idle().await {
        let error = error.context(format!("Sidecar fallback was not safe: {probe_error:#}"));
-        record_unavailable(format!("{error:#}").into());
+        record_unavailable(format!("{error:#}"));
        return Err(error);
    }
    logging!(
@@ -650,7 +650,7 @@ impl CoreManager {
                        |error| self.start_sidecar_after_service_failure(error),
                        |reason| {
                            crate::core::runstate::RUN_STATE
-                                .observe(crate::core::runstate::ServiceHealth::Unavailable(reason.into()));
+                                .observe(crate::core::runstate::ServiceHealth::Unavailable(reason));
                        },
                    )
                    .await
@@ -688,7 +688,7 @@ impl CoreManager {
        }
        let reason = match state.health {
            ServiceHealth::Unavailable(reason) => reason,
-            ServiceHealth::VersionMismatch => "registered service is unavailable or incompatible".into(),
+            ServiceHealth::VersionMismatch => "registered service is unavailable or incompatible".to_owned(),
            _ => return Ok(()),
        };
        if let Err(error) = clash_verge_service_ipc::execution::check_sidecar_available()
@@ -712,7 +712,7 @@ impl CoreManager {
        if Handle::global().is_exiting() {
            return Err(error.context("application exited before Sidecar fallback"));
        }
-        let reason: String = format!("{error:#}").into();
+        let reason = format!("{error:#}");
        RUN_STATE.allow_sidecar_after_service_refusal(reason.clone())?;
        logging!(warn, Type::Core, "Starting Sidecar with Service unavailable: {reason}");
        let result = self.start_core_by_sidecar().await;
@@ -1590,7 +1590,7 @@ mod tests {
                    started.store(true, Ordering::SeqCst);
                    Ok(())
                },
-                |reason| store.observe(ServiceHealth::Unavailable(reason.into())),
+                |reason| store.observe(ServiceHealth::Unavailable(reason)),
            )
            .await;

@@ -16,7 +16,6 @@ use std::num::NonZeroUsize;
 use std::path::Path;
 use tauri_plugin_mihomo::MihomoExt as _;
 use tauri_plugin_shell::ShellExt as _;
-use tristr::alias::String;

 pub(super) fn explain_core_occupancy(error: anyhow::Error) -> anyhow::Error {
    let detail = error.to_string();
@@ -28,7 +27,7 @@ pub(super) fn explain_core_occupancy(error: anyhow::Error) -> anyhow::Error {
 }

 #[cfg(target_os = "windows")]
-fn sidecar_config_without_tun(yaml: &str) -> Result<String> {
+fn sidecar_config_without_tun(yaml: &str) -> Result<std::string::String> {
    use serde_yaml_ng::{Mapping, Value};

    let mut config: Mapping = serde_yaml_ng::from_str(yaml)?;
@@ -41,7 +40,7 @@ fn sidecar_config_without_tun(yaml: &str) -> Result<String> {
    tun.as_mapping_mut()
        .context("invalid Sidecar TUN configuration")?
        .insert(Value::from("enable"), Value::Bool(false));
-    Ok(serde_yaml_ng::to_string(&config)?.into())
+    Ok(serde_yaml_ng::to_string(&config)?)
 }

 const SIDECAR_READINESS_ATTEMPTS: usize = 30;
@@ -154,7 +153,7 @@ impl CoreManager {
    pub async fn get_clash_logs(&self) -> Result<Vec<String>> {
        match *self.get_running_mode() {
            RunningMode::Service => service::get_clash_logs_by_service().await,
-            RunningMode::Sidecar => Ok(CLASH_LOGGER.get_logs().into_iter().map(Into::into).collect()),
+            RunningMode::Sidecar => Ok(CLASH_LOGGER.get_logs()),
            RunningMode::NotRunning => Ok(Vec::new()),
        }
    }
@@ -258,9 +257,7 @@ impl CoreManager {
                match event {
                    tauri_plugin_shell::process::CommandEvent::Stdout(line)
                    | tauri_plugin_shell::process::CommandEvent::Stderr(line) => {
-                        // from_utf8_lossy_owned exists only on the std String type; the tristr
-                        // alias shadows the bare name. LogRing stores std Strings.
-                        let message = std::string::String::from_utf8_lossy_owned(line);
+                        let message = String::from_utf8_lossy_owned(line);
                        Logger::global().writer_sidecar_log(Level::Error, &message);
                        CLASH_LOGGER.append_log(message);
                    }
@@ -268,12 +265,12 @@ impl CoreManager {
                        let _ = terminated.send(());
                        let manager = Self::global();
                        let _ = manager.invalidate_core_readiness_if(core_readiness_generation);
-                        let message: String = if let Some(code) = term.code {
-                            format!("Process terminated with code: {}", code).into()
+                        let message = if let Some(code) = term.code {
+                            format!("Process terminated with code: {}", code)
                        } else if let Some(signal) = term.signal {
-                            format!("Process terminated by signal: {}", signal).into()
+                            format!("Process terminated by signal: {}", signal)
                        } else {
-                            "Process terminated".into()
+                            String::from("Process terminated")
                        };
                        Logger::global().writer_sidecar_log(Level::Info, &message);
                        CLASH_LOGGER.clear_logs();
@@ -1,9 +1,12 @@
 use super::NoticeStatus;
 use crate::{APP_HANDLE, singleton};
-use std::sync::atomic::{AtomicBool, Ordering};
+use smartstring::alias::String;
+use std::sync::{
+    Arc,
+    atomic::{AtomicBool, Ordering},
+};
 use tauri::AppHandle;
 use tauri_plugin_mihomo::{Mihomo, MihomoExt as _};
-use tristr::alias::String;

 use super::notification::{FrontendEvent, NotificationSystem};

@@ -70,7 +73,7 @@ impl Handle {
        Self::send_event(FrontendEvent::ProfileUpdateCompleted { uid });
    }

-    pub fn notice(status: NoticeStatus, message: impl Into<String>) {
+    pub fn notice(status: NoticeStatus, message: impl Into<Arc<str>>) {
        Self::send_event(FrontendEvent::NoticeMessage {
            status,
            message: message.into(),
@@ -3,10 +3,11 @@ use clash_verge_logging::{Type, logging};
 use parking_lot::Mutex;
 #[cfg(test)]
 use serde_json::json;
+use smartstring::alias::String;
+use std::sync::Arc;
 use std::sync::LazyLock;
 use std::{collections::HashMap, future::Future};
 use tauri::{AppHandle, Emitter as _, Manager as _, WebviewWindow};
-use tristr::alias::String;

 #[derive(Debug, Clone)]
 pub enum FrontendEvent<'a> {
@@ -16,7 +17,7 @@ pub enum FrontendEvent<'a> {
    RefreshProxyConfig,
    NoticeMessage {
        status: NoticeStatus,
-        message: String,
+        message: Arc<str>,
    },
    ProfileChanged {
        current_profile_id: &'a String,
@@ -76,8 +77,10 @@ impl FailedOperation {
 #[serde(rename_all = "camelCase")]
 pub struct PendingFailure {
    /// Stable code used as the table key.
+    #[specta(type = std::string::String)]
    pub code: String,
    /// Full diagnostic context chain.
+    #[specta(type = std::string::String)]
    pub detail: String,
    pub operation: FailedOperation,
    /// Monotonic identity for repeated failures under the same code.
@@ -244,6 +247,7 @@ static PENDING_FAILURES: LazyLock<FailureTable> = LazyLock::new(FailureTable::de
 #[derive(Debug, Default, Clone, serde::Serialize, specta::Type)]
 pub struct SidecarFailureSnapshot {
    pub revision: u64,
+    #[specta(type = Option<std::string::String>)]
    pub detail: Option<String>,
 }

@@ -387,7 +391,7 @@ fn sample_frontend_events(uid: &String) -> Vec<(FrontendEvent<'_>, &'static str,
        (
            FrontendEvent::NoticeMessage {
                status: NoticeStatus::Info,
-                message: String::from("ok"),
+                message: Arc::from("ok"),
            },
            "verge://notice-message",
            json!(["info", "ok"]),
@@ -452,16 +456,16 @@ frontend_events! {
    refresh_verge: () = "verge://refresh-verge-config", FrontendEvent::RefreshVerge => ();
    refresh_profiles: () = "verge://refresh-profiles", FrontendEvent::RefreshProfiles => ();
    refresh_proxy: () = "verge://refresh-proxy-config", FrontendEvent::RefreshProxyConfig => ();
-    notice: (NoticeStatus, String) = "verge://notice-message", FrontendEvent::NoticeMessage { status, ref message } => (status, message.clone());
-    profile_changed: String = "profile-changed", FrontendEvent::ProfileChanged { current_profile_id } => current_profile_id.clone();
-    timer_updated: String = "verge://timer-updated", FrontendEvent::TimerUpdated { profile_index } => profile_index.clone();
-    profile_started: ProfileUpdatePayload = "profile-update-started", FrontendEvent::ProfileUpdateStarted { uid } => ProfileUpdatePayload { uid: uid.clone() };
-    profile_completed: ProfileUpdatePayload = "profile-update-completed", FrontendEvent::ProfileUpdateCompleted { uid } => ProfileUpdatePayload { uid: uid.clone() };
+    notice: (NoticeStatus, std::string::String) = "verge://notice-message", FrontendEvent::NoticeMessage { status, ref message } => (status, message.to_string());
+    profile_changed: std::string::String = "profile-changed", FrontendEvent::ProfileChanged { current_profile_id } => current_profile_id.to_string();
+    timer_updated: std::string::String = "verge://timer-updated", FrontendEvent::TimerUpdated { profile_index } => profile_index.to_string();
+    profile_started: ProfileUpdatePayload = "profile-update-started", FrontendEvent::ProfileUpdateStarted { uid } => ProfileUpdatePayload { uid: uid.to_string() };
+    profile_completed: ProfileUpdatePayload = "profile-update-completed", FrontendEvent::ProfileUpdateCompleted { uid } => ProfileUpdatePayload { uid: uid.to_string() };
    run_state: crate::core::runstate::RunStateView = "verge://run-state-changed", FrontendEvent::RunStateChanged { state } => state;
    pending_failures: () = "verge://pending-failures-changed", FrontendEvent::PendingFailuresChanged => ();
 }

 #[derive(serde::Serialize, specta::Type)]
 pub struct ProfileUpdatePayload {
-    pub uid: String,
+    pub uid: std::string::String,
 }
@@ -2,8 +2,6 @@ use crate::utils::dirs;
 use anyhow::{Context as _, Result};
 use clash_verge_service_ipc::{OwnerCredentials, OwnerIdentity};
 use std::path::Path;
-#[cfg(windows)]
-use tristr::alias::String;

 pub(crate) fn current_owner_credentials() -> Result<OwnerCredentials> {
    current_owner_credentials_for_root(&dirs::app_home_dir()?)
@@ -41,16 +39,16 @@ pub(crate) fn current_owner_credentials_for_root(app_root: &Path) -> Result<Owne
 }

 #[cfg(windows)]
-fn windows_owner_credentials(app_data_root: &Path) -> Result<(OwnerIdentity, Option<std::string::String>)> {
+fn windows_owner_credentials(app_data_root: &Path) -> Result<(OwnerIdentity, Option<String>)> {
    let sid = windows_owner::current_sid()?;
    let token = windows_owner::load_or_create_token(app_data_root, &sid)?;
-    Ok((OwnerIdentity::Windows { sid: sid.into() }, Some(token.into())))
+    Ok((OwnerIdentity::Windows { sid }, Some(token)))
 }

 #[cfg(windows)]
 fn windows_current_identity() -> Result<OwnerIdentity> {
    Ok(OwnerIdentity::Windows {
-        sid: windows_owner::current_sid()?.into(),
+        sid: windows_owner::current_sid()?,
    })
 }

@@ -81,7 +79,7 @@ pub(crate) fn repair_app_data_root_owner(app_data_root: &Path) -> Result<()> {
 #[cfg(windows)]
 pub(crate) fn current_user_pipe_sddl() -> Result<String> {
    let sid = windows_owner::current_sid()?;
-    Ok(format!("D:P(A;;GA;;;{sid})(A;;GA;;;SY)(A;;GA;;;BA)").into())
+    Ok(format!("D:P(A;;GA;;;{sid})(A;;GA;;;SY)(A;;GA;;;BA)"))
 }

 #[cfg(windows)]
@@ -646,19 +644,17 @@ mod windows_owner {
        }
        let value = LocalWideString(value);
        let length = (0..).take_while(|index| unsafe { *value.0.add(*index) } != 0).count();
-        // from_utf16 exists only on the std String type; the tristr alias shadows the bare name.
-        std::string::String::from_utf16(unsafe { std::slice::from_raw_parts(value.0, length) })
+        String::from_utf16(unsafe { std::slice::from_raw_parts(value.0, length) })
            .context("process SID is not valid UTF-16")
-            .map(Into::into)
    }

    fn encode_token(token: &[u8; TOKEN_BYTES]) -> String {
-        let mut encoded = std::string::String::with_capacity(TOKEN_BYTES * 2);
+        let mut encoded = String::with_capacity(TOKEN_BYTES * 2);
        for byte in token {
            use std::fmt::Write as _;
            let _ = write!(encoded, "{byte:02x}");
        }
-        encoded.into()
+        encoded
    }

    fn wide_path(path: &Path) -> Result<Vec<u16>> {
@@ -24,7 +24,6 @@ use std::{
    time::Duration,
 };
 use tokio::{sync::Mutex, time::timeout};
-use tristr::alias::String;

 const CLEAR_ATTEMPTS: u32 = 3;
 const CLEAR_RETRY_DELAY: Duration = Duration::from_millis(100);
@@ -321,8 +320,7 @@ fn truncate_utf8(value: &mut String, max_bytes: usize) {
    while !value.is_char_boundary(boundary) {
        boundary -= 1;
    }
-    let truncated = value.as_str()[..boundary].into();
-    *value = truncated;
+    value.truncate(boundary);
 }

 fn service_bypass(verge: &IVerge) -> Result<String> {
@@ -330,11 +328,11 @@ fn service_bypass(verge: &IVerge) -> Result<String> {
    ensure!(!custom.contains('\0'), "system proxy bypass contains NUL");

    let mut bypass = if custom.is_empty() {
-        MACOS_DEFAULT_BYPASS.into()
+        MACOS_DEFAULT_BYPASS.to_owned()
    } else if verge.use_default_bypass.unwrap_or(true) {
-        format!("{MACOS_DEFAULT_BYPASS},{custom}").into()
+        format!("{MACOS_DEFAULT_BYPASS},{custom}")
    } else {
-        custom.into()
+        custom.to_owned()
    };
    truncate_utf8(&mut bypass, MAX_SERVICE_BYPASS_LEN);
    Ok(bypass)
@@ -355,7 +353,7 @@ fn service_proxy_config(verge: &IVerge, mixed_port: u16, pac_port: u16) -> Resul
        Ok(MacosProxyConfig::Global {
            host: LOOPBACK_HOST.to_owned(),
            port: mixed_port,
-            bypass: service_bypass(verge)?.into(),
+            bypass: service_bypass(verge)?,
        })
    }
 }
@@ -370,7 +368,7 @@ fn service_apply_result(requested: &MacosProxyConfig, outcome: ProxyApplyOutcome
        // Direct fallback satisfies a disable request.
        ProxyApplyOutcome::DirectFallback { .. } if matches!(requested, MacosProxyConfig::Disabled) => Ok(()),
        ProxyApplyOutcome::DirectFallback { message } => {
-            Err(SysproxyFailure::DirectFallback { detail: message.into() }.into())
+            Err(SysproxyFailure::DirectFallback { detail: message }.into())
        }
    }
 }
@@ -646,7 +644,7 @@ const GUARD_FAILURES_BEFORE_STOPPING: u32 = 3;

 async fn report_guard_stopped(captured_generation: u64, error: &anyhow::Error) {
    let stopped = anyhow::Error::new(SysproxyFailure::GuardStopped {
-        detail: format!("{error:#}").into(),
+        detail: format!("{error:#}"),
    });
    // Do not publish a late failure from a replaced guard.
    let recorded = SERVICE_PROXY_OPERATIONS
@@ -1108,7 +1106,7 @@ mod tests {
        let requested = MacosProxyConfig::Global {
            host: "127.0.0.1".to_owned(),
            port: 7890,
-            bypass: std::string::String::new(),
+            bypass: String::new(),
        };

        let error = service_apply_result(
@@ -1148,8 +1146,8 @@ mod tests {
        let events = Mutex::new(Vec::new());
        super::settle_table(
            effect,
-            |asked| events.lock().push(format!("retire:{asked:?}").into()),
-            |operation, _| events.lock().push(format!("file:{operation:?}").into()),
+            |asked| events.lock().push(format!("retire:{asked:?}")),
+            |operation, _| events.lock().push(format!("file:{operation:?}")),
        );
        events.into_inner()
    }
@@ -1278,7 +1276,7 @@ mod tests {
        let combined = rollback_failure(
            mappable(),
            anyhow::anyhow!("the service could not set it").context(SysproxyFailure::DirectFallback {
-                detail: "fell back to direct".into(),
+                detail: "fell back to direct".to_owned(),
            }),
        );

@@ -4,7 +4,6 @@ use serde::Serialize;
 use tauri_plugin_mihomo::models::{
    DelayHistory, Proxies, Proxy, ProxyProvider, ProxyProviders, ProxyType, VehicleType,
 };
-use tristr::alias::String;

 pub struct ProxyViewInput {
    pub runtime_group_order: Vec<String>,
@@ -271,7 +270,7 @@ impl ProxyViewBuilder {

        let global = core_groups
            .remove("GLOBAL")
-            .map(|proxy| build_group(String::from("GLOBAL"), proxy, &resolver));
+            .map(|proxy| build_group("GLOBAL".to_owned(), proxy, &resolver));
        let (groups, order_source) = build_ordered_groups(core_groups, runtime_group_order, &resolver);
        let direct = core_node_ids.get("DIRECT").cloned();
        let standalone = build_standalone(&core_node_ids);
@@ -295,7 +294,6 @@ fn partition_core(proxies: Proxies) -> (BTreeMap<String, Proxy>, BTreeMap<String
    let mut nodes = BTreeMap::new();

    for (name, proxy) in proxies.proxies {
-        let name = String::from(name);
        if proxy.all.is_some() {
            groups.insert(name, proxy);
        } else {
@@ -313,7 +311,7 @@ fn build_core_records(
    let mut ids = BTreeMap::new();

    for (index, (name, proxy)) in core_nodes.into_iter().enumerate() {
-        let record_id = String::from(format!("c:{index}"));
+        let record_id = format!("c:{index}");
        ids.insert(name.clone(), record_id.clone());
        records.insert(
            record_id.clone(),
@@ -334,13 +332,7 @@ fn build_provider_records(
    records: &mut BTreeMap<String, ProxyNodeView>,
 ) -> (Vec<ProxyProviderView>, ProviderCandidates) {
    let providers = providers
-        .map(|providers| {
-            providers
-                .providers
-                .into_iter()
-                .map(|(name, provider)| (String::from(name), provider))
-                .collect::<BTreeMap<_, _>>()
-        })
+        .map(|providers| providers.providers.into_iter().collect::<BTreeMap<_, _>>())
        .unwrap_or_default();
    let mut views = Vec::new();
    let mut candidates = BTreeMap::new();
@@ -363,9 +355,9 @@ fn build_provider_records(
        let mut proxy_record_ids = Vec::new();

        for (member_index, proxy) in proxies.into_iter().enumerate() {
-            let record_id = String::from(format!("p:{provider_index}:{member_index}"));
-            let proxy_name = String::from(proxy.name.as_str());
-            let node_name = String::from(proxy.name.as_str());
+            let record_id = format!("p:{provider_index}:{member_index}");
+            let proxy_name = proxy.name.clone();
+            let node_name = proxy.name.clone();
            candidates
                .entry(proxy_name.clone())
                .or_insert_with(Vec::new)
@@ -388,7 +380,7 @@ fn build_provider_records(
        views.push(ProxyProviderView {
            name: provider_name,
            vehicle_type,
-            updated_at: updated_at.map(String::from),
+            updated_at,
            subscription_info: subscription_info.map(|subscription_info| ProxySubscriptionInfo {
                upload: subscription_info.upload,
                download: subscription_info.download,
@@ -425,7 +417,6 @@ fn build_group(name: String, proxy: Proxy, resolver: &MemberResolver<'_>) -> Pro
        .unwrap_or_default()
        .into_iter()
        .map(|member| {
-            let member = String::from(member);
            let (occurrence, scoped) = seen
                .entry(member.clone())
                .or_insert_with(|| (0, resolver.scoped_candidates(&name, &member)));
@@ -438,11 +429,11 @@ fn build_group(name: String, proxy: Proxy, resolver: &MemberResolver<'_>) -> Pro
    ProxyGroupView {
        name,
        proxy_type,
-        now: now.map(String::from),
-        fixed: fixed.map(String::from),
+        now,
+        fixed,
        hidden,
-        icon: icon.map(String::from),
-        test_url: test_url.map(String::from),
+        icon,
+        test_url,
        history,
        capabilities: ProxyCapabilities {
            udp,
@@ -476,10 +467,10 @@ fn build_node(record_id: String, name: String, proxy: Proxy, source: ProxyNodeSo
        name,
        proxy_type,
        history,
-        id: id.map(String::from),
+        id,
        hidden,
-        icon: icon.map(String::from),
-        test_url: test_url.map(String::from),
+        icon,
+        test_url,
        capabilities: ProxyCapabilities {
            udp,
            xudp,
@@ -64,7 +64,7 @@ impl RunStateEnv for RealEnv {
        Ok(ServiceVersionReply {
            core,
            code: response.code,
-            message: response.message.into(),
+            message: response.message,
            protocol: response.data,
        })
    }
@@ -123,7 +123,6 @@ mod fake {

    use super::{PendingAction, RunState, RunStateEnv, ServiceVersionReply};
    use crate::core::manager::RunningMode;
-    use tristr::alias::String;

    /// A fail-closed scripted machine that records outbound effects.
    #[derive(Debug)]
@@ -164,7 +163,7 @@ mod fake {
            self.with_evidence(true).always_replying(Ok(ServiceVersionReply {
                core: Some(clash_verge_service_ipc::CoreAvailability::Ready),
                code: 0,
-                message: "ok".into(),
+                message: "ok".to_owned(),
                protocol: Some(ProtocolInfo::current()),
            }))
        }
@@ -174,7 +173,7 @@ mod fake {
            self.with_evidence(true).always_replying(Ok(ServiceVersionReply {
                core: Some(clash_verge_service_ipc::CoreAvailability::Ready),
                code: 0,
-                message: "ok".into(),
+                message: "ok".to_owned(),
                protocol: None,
            }))
        }
@@ -182,12 +181,12 @@ mod fake {
        #[must_use]
        pub fn service_unreachable(self) -> Self {
            self.with_evidence(true)
-                .always_replying(Err("ipc transport refused".into()))
+                .always_replying(Err("ipc transport refused".to_owned()))
        }

        #[must_use]
        pub fn evidence_unavailable(mut self) -> Self {
-            self.evidence = Err("registry probe failed".into());
+            self.evidence = Err("registry probe failed".to_owned());
            self
        }

@@ -237,7 +236,7 @@ mod fake {

        #[must_use]
        pub fn privileged_operations_fail(self, reason: &str) -> Self {
-            *self.privileged_outcome.lock() = Err(reason.into());
+            *self.privileged_outcome.lock() = Err(reason.to_owned());
            self
        }

@@ -257,7 +256,7 @@ mod fake {
                replies
                    .first()
                    .cloned()
-                    .unwrap_or_else(|| Err("no service configured".into()))
+                    .unwrap_or_else(|| Err("no service configured".to_owned()))
            };
            reply.map_err(|error| anyhow!(error))
        }
@@ -2,7 +2,6 @@
 //! Core lifecycle remains in `CoreManager`.

 use crate::core::manager::RunningMode;
-use tristr::alias::String;

 #[derive(Debug, Clone, Default, PartialEq, Eq)]
 pub enum ServiceHealth {
@@ -173,7 +173,7 @@ impl<E: RunStateEnv> RunStateStore<E> {
                    Type::Service,
                    "failed to inspect trusted service evidence: {error:#}"
                );
-                return ServiceHealth::Unavailable(format!("service detection failed: {error:#}").into());
+                return ServiceHealth::Unavailable(format!("service detection failed: {error:#}"));
            }
        };

@@ -331,7 +331,7 @@ impl<E: RunStateEnv> RunStateStore<E> {
    }

    #[cfg(target_os = "windows")]
-    pub fn allow_sidecar_after_service_refusal(&self, reason: tristr::alias::String) -> Result<()> {
+    pub fn allow_sidecar_after_service_refusal(&self, reason: String) -> Result<()> {
        let mut state = self.service.lock();
        if self.operation_running.load(Ordering::Acquire) || state.service.pending.is_some() {
            bail!("cannot fall back while a service operation is pending");
@@ -496,7 +496,7 @@ mod tests {
        ServiceVersionReply {
            core: Some(clash_verge_service_ipc::CoreAvailability::Ready),
            code: 0,
-            message: "ok".into(),
+            message: "ok".to_owned(),
            protocol: Some(clash_verge_service_ipc::ProtocolInfo::current()),
        }
    }
@@ -713,7 +713,7 @@ mod tests {
        for health in [
            ServiceHealth::NotInstalled,
            ServiceHealth::VersionMismatch,
-            ServiceHealth::Unavailable("boom".into()),
+            ServiceHealth::Unavailable("boom".to_owned()),
        ] {
            let store = with_env(FakeEnv::new());
            store.observe(health.clone());
@@ -858,7 +858,7 @@ mod tests {

    #[tokio::test]
    async fn awaiting_readiness_retries_a_silent_service_then_accepts_its_reply() {
-        let store = with_env(FakeEnv::new().replying(vec![Err("ipc path not ready".into()), Ok(ready_reply())]));
+        let store = with_env(FakeEnv::new().replying(vec![Err("ipc path not ready".to_owned()), Ok(ready_reply())]));

        let state = store
            .await_ready(2, Duration::ZERO)
@@ -9,7 +9,6 @@ use clash_verge_service_ipc::{
 };

 use super::health::ServiceHealth;
-use tristr::alias::String;

 /// What the Service replied to a protocol-version query.
 #[derive(Debug, Clone, PartialEq, Eq)]
@@ -51,7 +50,7 @@ pub fn classify_service_version_reply(reply: &ServiceVersionReply) -> ServiceVer
        return match &reply.core {
            Some(clash_verge_service_ipc::CoreAvailability::Ready) => ServiceVersionCheck::Ready,
            Some(clash_verge_service_ipc::CoreAvailability::Rejected { reason }) => {
-                ServiceVersionCheck::CoreUnavailable(format!("{CORE_REJECTED_PREFIX}{reason}").into())
+                ServiceVersionCheck::CoreUnavailable(format!("{CORE_REJECTED_PREFIX}{reason}"))
            }
            _ => ServiceVersionCheck::CoreUnavailable(
                "the selected approved core is missing or does not match; reinstall the service to repair it".into(),
@@ -78,12 +77,9 @@ pub fn classify_service_version_reply(reply: &ServiceVersionReply) -> ServiceVer
            reply.code, reply.message, client.epoch
        )
    };
-    ServiceVersionCheck::NeedsReinstall(
-        format!(
-            "Service helper version or protocol mismatch: {detail}. Choose Reinstall to uninstall the existing service and install the required version"
-        )
-        .into(),
-    )
+    ServiceVersionCheck::NeedsReinstall(format!(
+        "Service helper version or protocol mismatch: {detail}. Choose Reinstall to uninstall the existing service and install the required version"
+    ))
 }

 /// Classify a version reply into the probe outcome used by [`classify_service_health`].
@@ -108,7 +104,7 @@ pub fn classify_service_health(
    match current {
        CurrentServiceProbe::Ready => ServiceHealth::Ready,
        CurrentServiceProbe::VersionMismatch => ServiceHealth::VersionMismatch,
-        CurrentServiceProbe::Unavailable => ServiceHealth::Unavailable(unavailable_reason.into()),
+        CurrentServiceProbe::Unavailable => ServiceHealth::Unavailable(unavailable_reason.to_owned()),
        CurrentServiceProbe::Missing if has_install_marker => ServiceHealth::VersionMismatch,
        CurrentServiceProbe::Missing => ServiceHealth::NotInstalled,
    }
@@ -123,7 +119,7 @@ mod tests {
        ServiceVersionReply {
            core: Some(clash_verge_service_ipc::CoreAvailability::Ready),
            code: 0,
-            message: "ok".into(),
+            message: "ok".to_owned(),
            protocol: Some(ProtocolInfo::current()),
        }
    }
@@ -158,7 +154,7 @@ mod tests {
        let reply = ServiceVersionReply {
            core: Some(clash_verge_service_ipc::CoreAvailability::Ready),
            code: 0,
-            message: "ok".into(),
+            message: "ok".to_owned(),
            protocol: None,
        };
        let ServiceVersionCheck::NeedsReinstall(detail) = classify_service_version_reply(&reply) else {
@@ -176,7 +172,7 @@ mod tests {
        let reply = ServiceVersionReply {
            core: Some(clash_verge_service_ipc::CoreAvailability::Ready),
            code: 7,
-            message: "nope".into(),
+            message: "nope".to_owned(),
            protocol: Some(ProtocolInfo::current()),
        };
        let ServiceVersionCheck::NeedsReinstall(detail) = classify_service_version_reply(&reply) else {
@@ -192,7 +188,7 @@ mod tests {
        let reply = ServiceVersionReply {
            core: Some(clash_verge_service_ipc::CoreAvailability::Ready),
            code: 0,
-            message: "ok".into(),
+            message: "ok".to_owned(),
            protocol: Some(info),
        };
        assert!(matches!(
@@ -213,7 +209,7 @@ mod tests {
        let reply = ServiceVersionReply {
            core: Some(clash_verge_service_ipc::CoreAvailability::Ready),
            code: 0,
-            message: "ok".into(),
+            message: "ok".to_owned(),
            protocol: Some(info),
        };
        assert!(matches!(
@@ -232,7 +228,7 @@ mod tests {
                let reply = ServiceVersionReply {
                    core: None,
                    code,
-                    message: "unsupported command".into(),
+                    message: "unsupported command".to_owned(),
                    protocol: protocol.clone(),
                };
                let ServiceVersionCheck::NeedsReinstall(detail) = classify_service_version_reply(&reply) else {
@@ -254,7 +250,7 @@ mod tests {
    fn an_unreachable_service_keeps_the_reason() {
        assert_eq!(
            classify_service_health(CurrentServiceProbe::Unavailable, true, "socket refused"),
-            ServiceHealth::Unavailable("socket refused".into())
+            ServiceHealth::Unavailable("socket refused".to_owned())
        );
    }

@@ -5,7 +5,6 @@ use serde_yaml_ng::{Mapping, Value};
 use sha2::{Digest as _, Sha256};
 use std::collections::{BTreeMap, HashSet};
 use std::path::{Component, Path, PathBuf};
-use tristr::alias::String;

 pub(crate) const GEO_ASSETS: &[&str] = &[
    "Country.mmdb",
@@ -65,7 +64,7 @@ struct ProviderPathOwners {
 pub(crate) fn resolve_provider_path_conflicts(config: &mut Mapping, config_root: &Path) -> Result<()> {
    let config_root = std::fs::canonicalize(config_root)?;
    let mut paths = BTreeMap::<String, ProviderPathOwners>::new();
-    let mut reserved: HashSet<String> = GEO_ASSETS.iter().map(|name| (*name).into()).collect();
+    let mut reserved: HashSet<String> = GEO_ASSETS.iter().map(|name| (*name).to_owned()).collect();
    for section in ["proxy-providers", "rule-providers"] {
        let Some(providers) = config.get(section).and_then(Value::as_mapping) else {
            continue;
@@ -90,7 +89,7 @@ pub(crate) fn resolve_provider_path_conflicts(config: &mut Mapping, config_root:
            match (is_remote, provider.get("url").and_then(Value::as_str)) {
                (true, Some(url)) => owners
                    .remote
-                    .entry(url.into())
+                    .entry(url.to_owned())
                    .or_default()
                    .push((section, name.clone())),
                _ => owners.local = true,
@@ -106,7 +105,7 @@ pub(crate) fn resolve_provider_path_conflicts(config: &mut Mapping, config_root:
        for (url, providers) in owners.remote {
            let replacement = allocate_provider_destination(&destination, &url, &mut reserved);
            for (section, name) in providers {
-                config[section][&name]["path"] = Value::String(replacement.clone().into());
+                config[section][&name]["path"] = Value::String(replacement.clone());
                logging!(
                    warn,
                    Type::Config,
@@ -132,16 +131,15 @@ fn allocate_provider_destination(destination: &str, url: &str, reserved: &mut Ha
    let mut suffix = String::new();
    let mut sequence = 0;
    loop {
-        let candidate: String = path
+        let candidate = path
            .with_file_name(format!("cvr-{digest}{suffix}{extension}"))
            .to_string_lossy()
-            .replace('\\', "/")
-            .into();
+            .replace('\\', "/");
        if reserved.insert(candidate.clone()) {
            return candidate;
        }
        sequence += 1;
-        suffix = format!("-{sequence}").into();
+        suffix = format!("-{sequence}");
    }
 }

@@ -169,7 +167,7 @@ fn collect_runtime_parts(mut config: Value, config_root: &Path) -> Result<Runtim
    )?;
    for filename in GEO_ASSETS {
        let source = config_root.join(filename);
-        if source.is_file() && destinations.insert((*filename).into()) {
+        if source.is_file() && destinations.insert((*filename).to_string()) {
            assets.push(RuntimeAsset {
                source: std::fs::canonicalize(&source)?.to_string_lossy().into_owned(),
                destination: (*filename).to_string(),
@@ -230,9 +228,9 @@ fn collect_provider_assets(
                        }
                        remote_providers.push(RemoteProviderRef {
                            section,
-                            name: name.as_str().unwrap_or_default().into(),
+                            name: name.as_str().unwrap_or_default().to_owned(),
                            provider: RemoteProvider {
-                                destination: destination.clone().into(),
+                                destination: destination.clone(),
                                url,
                            },
                        });
@@ -261,13 +259,13 @@ fn collect_provider_assets(
                if destinations.insert(destination.clone()) {
                    assets.push(RuntimeAsset {
                        source: source.to_string_lossy().into_owned(),
-                        destination: destination.clone().into(),
+                        destination: destination.clone(),
                    });
                }
                destination
            }
        };
-        provider.insert(Value::String("path".to_owned()), Value::String(destination.into()));
+        provider.insert(Value::String("path".to_owned()), Value::String(destination));
    }
    Ok(())
 }
@@ -341,7 +339,7 @@ fn normalized_destination(relative: &Path) -> Result<String> {
    if destination.as_os_str().is_empty() {
        bail!("local runtime provider destination is empty");
    }
-    Ok(destination.to_string_lossy().replace('\\', "/").into())
+    Ok(destination.to_string_lossy().replace('\\', "/"))
 }

 #[cfg(test)]
@@ -387,12 +385,12 @@ mod tests {
        for declared in readback {
            assert!(bundle.remote_providers.contains(&declared.provider));
            assert_eq!(
-                config[declared.section][declared.name.as_str()]["path"],
+                config[declared.section][&declared.name]["path"],
                declared.provider.destination
            );
            assert_eq!(
-                config[declared.section][declared.name.as_str()]["url"],
-                original[declared.section][declared.name.as_str()]["url"]
+                config[declared.section][&declared.name]["url"],
+                original[declared.section][&declared.name]["url"]
            );
        }
        std::fs::remove_dir_all(root)?;
@@ -36,7 +36,6 @@ use std::{
    sync::atomic::{AtomicBool, AtomicU64, Ordering},
    time::{Duration, SystemTime, UNIX_EPOCH},
 };
-use tristr::alias::String;

 static OWNER_MONITOR_GENERATION: AtomicU64 = AtomicU64::new(0);
 static ACTIVE_SERVICE_SESSION: Mutex<Option<ActiveServiceSession>> = Mutex::new(None);
@@ -63,7 +62,7 @@ pub(crate) fn is_not_auto_started(reason: &str) -> bool {

 #[cfg(target_os = "windows")]
 pub(crate) fn notify_service_fallback(reason: &str) {
-    *PENDING_SERVICE_FALLBACK_NOTICE.lock() = Some(reason.into());
+    *PENDING_SERVICE_FALLBACK_NOTICE.lock() = Some(reason.to_owned());
    Handle::notice(NoticeStatus::ServiceCoreSidecarFallback, "");
 }

@@ -92,7 +91,7 @@ fn app_data_owner_command(credentials: &OwnerCredentials) -> Option<String> {
        return None;
    };
    let path = credentials.app_data_dir.replace('\'', r"'\''");
-    Some(format!("sudo chown -R {uid}:{gid} '{path}'").into())
+    Some(format!("sudo chown -R {uid}:{gid} '{path}'"))
 }

 /// Capabilities of the service session that owns the running Core.
@@ -244,24 +243,22 @@ fn macos_service_install_markers() -> Vec<String> {
        format!(
            "/Library/LaunchDaemons/{}.plist",
            clash_verge_service_ipc::MACOS_SERVICE_ID
-        )
-        .into(),
+        ),
        format!(
            "/Library/PrivilegedHelperTools/{}.bundle",
            clash_verge_service_ipc::MACOS_SERVICE_ID
-        )
-        .into(),
+        ),
        #[cfg(not(feature = "verge-dev"))]
-        "/Library/LaunchDaemons/io.github.clashverge.helper.plist".into(),
+        "/Library/LaunchDaemons/io.github.clashverge.helper.plist".to_owned(),
        #[cfg(not(feature = "verge-dev"))]
-        "/Library/PrivilegedHelperTools/io.github.clashverge.helper".into(),
+        "/Library/PrivilegedHelperTools/io.github.clashverge.helper".to_owned(),
    ]
 }

 #[cfg(target_os = "macos")]
 fn macos_service_install_marker_exists() -> std::io::Result<bool> {
    for marker in macos_service_install_markers() {
-        if path_entry_exists_without_follow(Path::new(marker.as_str()))? {
+        if path_entry_exists_without_follow(Path::new(&marker))? {
            return Ok(true);
        }
    }
@@ -338,8 +335,7 @@ pub(crate) fn trusted_service_evidence() -> Result<bool> {
            output.status
        );
    }
-    // from_utf8_lossy exists only on the std String type; the tristr alias shadows the bare name.
-    Ok(std::string::String::from_utf8_lossy(&output.stdout).trim() != "not-found")
+    Ok(String::from_utf8_lossy(&output.stdout).trim() != "not-found")
 }

 #[cfg(target_os = "macos")]
@@ -568,12 +564,12 @@ fn service_core_path(clash_core: &str, bin_ext: &str) -> Result<PathBuf> {

 #[cfg(target_os = "macos")]
 fn escape_osascript_double_quoted_string(value: &str) -> String {
-    value.replace('\\', "\\\\").replace('"', "\\\"").into()
+    value.replace('\\', "\\\\").replace('"', "\\\"")
 }

 #[cfg(target_os = "macos")]
 fn shell_single_quote(value: &str) -> String {
-    format!("'{}'", value.replace('\'', r"'\''")).into()
+    format!("'{}'", value.replace('\'', r"'\''"))
 }

 fn packaged_service_tool_path(file_name: &str, packaged_path: impl FnOnce() -> Result<PathBuf>) -> Result<PathBuf> {
@@ -645,7 +641,7 @@ fn uninstall_service() -> Result<()> {
    let status = if linux_running_as_root() {
        StdCommand::new(&uninstall_path).status()?
    } else {
-        let result = StdCommand::new(elevator.as_str())
+        let result = StdCommand::new(&elevator)
            .arg("--disable-internal-agent")
            .arg(&uninstall_path)
            .status()?;
@@ -701,7 +697,7 @@ fn uninstall_service() -> Result<()> {
    }

    let uninstall_path = macos_service_tool_path(&uninstall_path)?;
-    let uninstall_shell: String = uninstall_path.to_string_lossy().into();
+    let uninstall_shell: String = uninstall_path.to_string_lossy().into_owned();

    // clash_verge_i18n::sync_locale(Config::verge().await.latest_arc().language.as_deref());

@@ -847,7 +843,7 @@ pub(super) async fn stage_runtime_by_service(config_file: &Path) -> Result<Stage
    if response.code > 0 {
        return Ok(StageRequest::Refused {
            code: response.code,
-            message: response.message.into(),
+            message: response.message,
        });
    }
    response
@@ -883,7 +879,7 @@ fn record_service_start_refusal<E: RunStateEnv>(
    if store.state().mode == crate::core::manager::RunningMode::NotRunning
        && refusal.code != ServiceErrorCode::ProxyClearFailed as u16
    {
-        store.observe(ServiceHealth::Unavailable(refusal.to_string().into()));
+        store.observe(ServiceHealth::Unavailable(refusal.to_string()));
    }
    refusal.into()
 }
@@ -891,7 +887,7 @@ fn record_service_start_refusal<E: RunStateEnv>(
 /// Sidecar stays blocked until a reinstall replaces the residual helper, so ask for repair.
 pub(super) fn record_residual_service(error: &anyhow::Error) {
    if let Some(residual) = error.downcast_ref::<clash_verge_service_ipc::execution::ResidualServiceError>() {
-        RUN_STATE.observe(ServiceHealth::Unavailable(residual.to_string().into()));
+        RUN_STATE.observe(ServiceHealth::Unavailable(residual.to_string()));
    }
 }

@@ -905,7 +901,7 @@ pub(super) async fn start_with_existing_service(config_file: &Path) -> Result<()
    let proposed_session_token = generate_service_session_token()?;
    let request = StartClashRequest {
        runtime,
-        proposed_session_token: proposed_session_token.clone().into(),
+        proposed_session_token: proposed_session_token.clone(),
        macos_proxy: None,
    };

@@ -943,8 +939,8 @@ pub(super) async fn start_with_existing_service(config_file: &Path) -> Result<()
            &RUN_STATE,
            ServiceStartRefusal {
                code: response.code,
-                core_path: request.runtime.core_path.into(),
-                message: err_msg.into(),
+                core_path: request.runtime.core_path,
+                message: err_msg,
            },
        ));
    }
@@ -956,7 +952,7 @@ pub(super) async fn start_with_existing_service(config_file: &Path) -> Result<()
    *ACTIVE_SERVICE_SESSION.lock() = Some(ActiveServiceSession {
        proof: OwnerSessionProof {
            generation: result.session.generation,
-            token: proposed_session_token.into(),
+            token: proposed_session_token,
        },
        supports_runtime_staging: capabilities.runtime_staging,
        supports_runtime_file_read: capabilities.runtime_file_read,
@@ -1016,10 +1012,7 @@ pub(super) async fn get_clash_logs_by_service() -> Result<Vec<String>> {
        bail!(err_msg);
    }

-    Ok(response
-        .data
-        .map(|logs| logs.into_iter().map(Into::into).collect())
-        .unwrap_or_default())
+    Ok(response.data.unwrap_or_default())
 }

 pub(crate) async fn get_clash_log_snapshot_by_service() -> Result<String> {
@@ -1037,8 +1030,7 @@ pub(crate) async fn get_clash_log_snapshot_by_service() -> Result<String> {
    }
    let encoded = response.data.context("服务未返回核心日志快照")?;
    let content = decode_hex(&encoded).context("服务返回了无效的核心日志快照")?;
-    // from_utf8_lossy_owned exists only on the std String type; the tristr alias shadows the bare name.
-    Ok(std::string::String::from_utf8_lossy_owned(content).into())
+    Ok(String::from_utf8_lossy_owned(content))
 }

 fn decode_hex(encoded: &str) -> Result<Vec<u8>> {
@@ -1352,7 +1344,7 @@ async fn read_chunk(
    }
    Ok(Some(match response.data.context("服务未返回运行时文件")? {
        RuntimeFileOutcome::Absent => (None, 0, None),
-        RuntimeFileOutcome::Chunk { hex, len, mtime_ns } => (Some(hex.into()), len, mtime_ns),
+        RuntimeFileOutcome::Chunk { hex, len, mtime_ns } => (Some(hex), len, mtime_ns),
    }))
 }

@@ -1364,11 +1356,11 @@ async fn provider_load_times() -> Result<ProviderLoadTimes> {
    let proxies = proxies.map_err(|error| anyhow!("failed to query proxy providers: {error}"))?;
    let mut loaded = ProviderLoadTimes::new();
    for (name, provider) in rules.providers {
-        loaded.insert(("rule-providers", name.into()), epoch_nanos(&provider.updated_at));
+        loaded.insert(("rule-providers", name), epoch_nanos(&provider.updated_at));
    }
    for (name, provider) in proxies.providers {
        loaded.insert(
-            ("proxy-providers", name.into()),
+            ("proxy-providers", name),
            provider.updated_at.as_deref().and_then(epoch_nanos),
        );
    }
@@ -1594,7 +1586,7 @@ const fn owner_recovery_policy(reason: OwnerRecoveryReason, is_macos: bool) -> O
 fn mark_service_unavailable_after_owner_loss<E: RunStateEnv>(store: &RunStateStore<E>, reason: OwnerRecoveryReason) {
    if matches!(reason, OwnerRecoveryReason::TransportFailure) {
        store.observe(ServiceHealth::Unavailable(
-            "service control IPC unavailable after sustained transport failure".into(),
+            "service control IPC unavailable after sustained transport failure".to_owned(),
        ));
    }
 }
@@ -1855,7 +1847,7 @@ async fn wait_for_service_ipc() -> Result<()> {
        }
        Err(ReadyWaitError::Unreachable(error)) => {
            tracing::Span::current().record("outcome", "unreachable");
-            RUN_STATE.observe(ServiceHealth::Unavailable(format!("{CONTEXT}: {error:#}").into()));
+            RUN_STATE.observe(ServiceHealth::Unavailable(format!("{CONTEXT}: {error:#}")));
            Err(error).context(CONTEXT)
        }
        Err(ReadyWaitError::Rejected(error)) => {
@@ -2670,7 +2662,7 @@ mod tests {
        let outcome = super::run_action_restoring_sidecar(&store, was_allowed, async {
            store.perform(PendingAction::Install).await?;
            // Simulate `wait_for_service_ipc` recording health before it fails.
-            store.observe(ServiceHealth::Unavailable("service never answered".into()));
+            store.observe(ServiceHealth::Unavailable("service never answered".to_owned()));
            bail!("service IPC did not become available")
        })
        .await;
@@ -8,6 +8,7 @@ use anyhow::Result;
 use clash_verge_logging::{Type, logging};
 use parking_lot::RwLock;
 use scopeguard::defer;
+use smartstring::alias::String;
 use std::{
    sync::{
        Arc,
@@ -17,7 +18,6 @@ use std::{
 };
 use sysproxy::{Autoproxy, GuardMonitor, GuardType, Sysproxy};
 use tokio::sync::Mutex as TokioMutex;
-use tristr::alias::String;

 #[derive(Clone, Copy, Debug, PartialEq, Eq)]
 enum ProxyApplyStep {
@@ -677,8 +677,8 @@ mod tests {
        (calls.into_inner(), result.is_ok())
    }

-    fn failure_text(result: anyhow::Result<()>) -> String {
-        result.map_or_else(|error| format!("{error:#}").into(), |()| String::from("no failure"))
+    fn failure_text(result: anyhow::Result<()>) -> std::string::String {
+        result.map_or_else(|error| format!("{error:#}"), |()| "no failure".to_owned())
    }

    #[test]
@@ -8,6 +8,7 @@ use crate::{
 use anyhow::Result;
 use clash_verge_logging::{Type, logging, logging_error};
 use parking_lot::{Mutex, RwLock};
+use smartstring::alias::String;
 use std::{
    collections::HashMap,
    sync::{
@@ -22,7 +23,6 @@ use tokio::{
 };
 use tokio_stream::StreamExt as _;
 use tokio_util::time::{DelayQueue, delay_queue::Key};
-use tristr::alias::String;

 enum TimerCommand {
    Apply(HashMap<String, TaskSchedule>),
@@ -502,6 +502,7 @@ mod tests {
    use super::{TaskSchedule, Timer, run_timer_profile_update_transition};
    use crate::config::{PrfItem, PrfOption};
    use parking_lot::Mutex;
+    use smartstring::alias::String;
    use std::collections::HashMap;
    use std::{
        sync::{
@@ -514,7 +515,6 @@ mod tests {
    use tokio::sync::Barrier;
    use tokio_stream::StreamExt as _;
    use tokio_util::time::DelayQueue;
-    use tristr::alias::String;

    struct CancellationProbe {
        cancelled: Arc<AtomicBool>,
@@ -19,6 +19,7 @@ use tokio::fs;

 use super::handle;
 use anyhow::Result;
+use smartstring::alias::String;
 use std::borrow::Cow;
 use std::collections::HashMap;
 use std::time::Duration;
@@ -26,7 +27,6 @@ use tauri::{
    AppHandle, Wry,
    menu::{CheckMenuItem, IsMenuItem, MenuEvent, MenuItem, PredefinedMenuItem, Submenu},
 };
-use tristr::alias::String;

 mod menu_def;
 #[cfg(target_os = "macos")]
@@ -11,7 +11,6 @@ use std::{
 };
 use tauri_plugin_updater::{Update, UpdaterExt as _};
 use tokio_util::sync::CancellationToken;
-use tristr::alias::String;

 pub struct SilentUpdater {
    update_ready: AtomicBool,
@@ -56,8 +55,8 @@ impl SilentUpdater {
            .with_context(|| format!("failed to write update cache {}", bin_path.display()))?;

        let meta = UpdateCacheMeta {
-            version: version.into(),
-            downloaded_at: Utc::now().to_rfc3339().into(),
+            version: version.to_string(),
+            downloaded_at: Utc::now().to_rfc3339(),
        };
        let meta_path = cache_dir.join("pending_update.json");
        std::fs::write(&meta_path, serde_json::to_string_pretty(&meta)?)
@@ -134,8 +133,9 @@ fn verify_signature(app_handle: &tauri::AppHandle, bytes: &[u8], signature: &str
    use base64::Engine as _;

    let decode = |value: &str| -> Result<String> {
-        // from_utf8 exists only on the std String type; the tristr alias shadows the bare name.
-        Ok(std::string::String::from_utf8(base64::engine::general_purpose::STANDARD.decode(value)?)?.into())
+        Ok(String::from_utf8(
+            base64::engine::general_purpose::STANDARD.decode(value)?,
+        )?)
    };
    let config: tauri_plugin_updater::Config = serde_json::from_value(
        app_handle
@@ -1,6 +1,7 @@
 use anyhow::Result;
 use scopeguard::defer;
 use serde::Serialize;
+use smartstring::alias::String;
 use std::{
    fmt,
    hash::{DefaultHasher, Hash as _, Hasher as _},
@@ -9,7 +10,6 @@ use std::{
 };
 use tauri_plugin_shell::ShellExt as _;
 use tokio::fs;
-use tristr::alias::String;

 use crate::config::Config;
 use crate::core::handle;
@@ -114,8 +114,14 @@ impl fmt::Display for ValidationSkipReason {
 #[serde(tag = "status", rename_all = "camelCase")]
 pub enum ValidationOutcome {
    Valid,
-    Invalid { kind: ValidationErrorKind, message: String },
-    Skipped { reason: ValidationSkipReason },
+    Invalid {
+        kind: ValidationErrorKind,
+        #[specta(type = std::string::String)]
+        message: String,
+    },
+    Skipped {
+        reason: ValidationSkipReason,
+    },
    Busy,
 }

@@ -4,8 +4,8 @@ use crate::{
    utils::{dirs, help},
 };
 use serde_yaml_ng::Mapping;
+use smartstring::alias::String;
 use tokio::fs;
-use tristr::alias::String;

 #[derive(Debug, Clone)]
 pub struct ChainItem {
@@ -1,5 +1,5 @@
 use serde_yaml_ng::{Mapping, Value};
-use tristr::alias::String;
+use smartstring::alias::String;

 pub const HANDLE_FIELDS: [&str; 12] = [
    "mode",
@@ -26,9 +26,9 @@ use anyhow::{Context as _, Result};
 use clash_verge_logging::{Type, logging};
 use parking_lot::Mutex;
 use serde_yaml_ng::{Mapping, Value};
+use smartstring::alias::String;
 use std::collections::{HashMap, HashSet};
 use tokio::fs;
-use tristr::alias::String;

 type ResultLog = Vec<(String, String)>;
 #[derive(Debug)]
@@ -6,8 +6,8 @@ use boa_engine::{Context, JsString, JsValue, Source, js_string, native_function:
 use clash_verge_logging::{Type, logging};
 use parking_lot::Mutex;
 use serde_yaml_ng::Mapping;
+use smartstring::alias::String;
 use std::sync::Arc;
-use tristr::alias::String;

 const MAX_OUTPUTS: usize = 1000;
 const MAX_OUTPUT_SIZE: usize = 1024 * 1024; // 1MB
@@ -16,7 +16,7 @@ const MAX_LOOP_ITERATIONS: u64 = 10_000_000;
 const SCRIPT_TIMEOUT: std::time::Duration = std::time::Duration::from_secs(5);

 type ScriptResult = (Mapping, Vec<String>, Vec<(String, String)>);
-type EvalOutcome = (Result<Mapping, String>, Vec<(String, String)>);
+type EvalOutcome = (Result<Mapping, std::string::String>, Vec<(String, String)>);

 /// Never fails: exceptions are logged and the input config is returned unchanged.
 pub(super) async fn use_script(script: String, config: Mapping, name: String) -> ScriptResult {
@@ -37,9 +37,9 @@ pub(super) async fn use_script(script: String, config: Mapping, name: String) ->
    let evaluated = AsyncHandler::spawn_blocking(move || eval_script(&script, &json, &name));
    let (outcome, mut logs) = match tokio::time::timeout(SCRIPT_TIMEOUT, evaluated).await {
        Ok(Ok(evaluated)) => evaluated,
-        Ok(Err(join_err)) => (Err(format!("script task panicked: {join_err}").into()), vec![]),
+        Ok(Err(join_err)) => (Err(format!("script task panicked: {join_err}")), vec![]),
        Err(_elapsed) => (
-            Err(format!("script execution timed out after {SCRIPT_TIMEOUT:?}").into()),
+            Err(format!("script execution timed out after {SCRIPT_TIMEOUT:?}")),
            vec![],
        ),
    };
@@ -59,7 +59,7 @@ pub(super) async fn use_script(script: String, config: Mapping, name: String) ->
            (result, changed_keys, logs)
        }
        Err(reason) => {
-            logs.push(("exception".into(), reason));
+            logs.push(("exception".into(), reason.into()));
            (config, vec![], logs)
        }
    }
@@ -79,7 +79,7 @@ fn eval_script(script: &str, config_json: &str, name: &String) -> EvalOutcome {
    let outputs_clone = Arc::clone(&outputs);
    let total_size_clone = Arc::clone(&total_size);

-    let bail = |reason: String| (Err(reason), outputs.lock().to_vec());
+    let bail = |reason: std::string::String| (Err(reason), outputs.lock().to_vec());

    let _ = context.register_global_builtin_callable("__verge_log__".into(), 2, unsafe {
        NativeFunction::from_closure(move |_: &JsValue, args: &[JsValue], context: &mut Context| {
@@ -137,13 +137,13 @@ fn eval_script(script: &str, config_json: &str, name: &String) -> EvalOutcome {
        JsValue::from(JsString::from(config_json)),
        Attribute::all(),
    ) {
-        return bail(format!("failed to bind config for script: {err}").into());
+        return bail(format!("failed to bind config for script: {err}"));
    }

    // 仅处理 name 参数中的特殊字符
    let safe_name = escape_js_string_for_single_quote(name);
    if safe_name.len() > 1024 {
-        return bail("Name parameter too long".into());
+        return bail("Name parameter too long".to_owned());
    }

    let code = format!(
@@ -157,19 +157,19 @@ fn eval_script(script: &str, config_json: &str, name: &String) -> EvalOutcome {

    let result = match context.eval(Source::from_bytes(code.as_str())) {
        Ok(result) if result.is_string() => result,
-        _ => return bail("main function should return object".into()),
+        _ => return bail("main function should return object".to_owned()),
    };
    let result = match result.to_string(&mut context) {
        Ok(result) => result,
-        Err(e) => return bail(format!("Failed to convert JS result to string: {e}").into()),
+        Err(e) => return bail(format!("Failed to convert JS result to string: {e}")),
    };
    let result = match result.to_std_string() {
        Ok(result) => result,
-        Err(_) => return bail("Failed to convert JS string to std string".into()),
+        Err(_) => return bail("Failed to convert JS string to std string".to_owned()),
    };

    if result.len() > MAX_JSON_SIZE {
-        return bail("Script result exceeds maximum allowed size".into());
+        return bail("Script result exceeds maximum allowed size".to_owned());
    }

    match parse_json_safely(&result) {
@@ -180,7 +180,7 @@ fn eval_script(script: &str, config_json: &str, name: &String) -> EvalOutcome {
                Type::Config,
                "Script execution error: {err:#}. Script name: {name}"
            );
-            bail("Script execution failed".into())
+            bail("Script execution failed".to_owned())
        }
    }
 }
@@ -1,7 +1,6 @@
 use serde::{Deserialize, Serialize};
 use serde_yaml_ng::{Mapping, Sequence, Value};
 use std::collections::HashSet;
-use tristr::alias::String;

 #[derive(Debug, Clone, Default, Serialize, Deserialize)]
 pub struct SeqMap {
@@ -13,8 +12,8 @@ pub struct SeqMap {
 fn collect_proxy_names(seq: &Sequence) -> Vec<String> {
    seq.iter()
        .filter_map(|item| match item {
-            Value::Mapping(map) => map.get("name").and_then(Value::as_str).map(Into::into),
-            Value::String(name) => Some(name.to_owned().into()),
+            Value::Mapping(map) => map.get("name").and_then(Value::as_str).map(str::to_owned),
+            Value::String(name) => Some(name.to_owned()),
            _ => None,
        })
        .collect()
@@ -59,10 +58,10 @@ pub fn use_seq(seq: SeqMap, mut config: Mapping, field: &str) -> Mapping {
            .into_iter()
            .filter(|item| {
                if let Value::String(s) = item {
-                    !delete.iter().any(|deleted| deleted == s)
+                    !delete.contains(s)
                } else if let Value::Mapping(m) = item {
                    if let Some(Value::String(name)) = m.get("name") {
-                        !delete.iter().any(|deleted| deleted == name)
+                        !delete.contains(name)
                    } else {
                        true
                    }
@@ -100,7 +99,7 @@ pub fn use_seq(seq: SeqMap, mut config: Mapping, field: &str) -> Mapping {
                        .into_iter()
                        .filter(|p| {
                            if let Value::String(name) = p {
-                                !delete.iter().any(|deleted| deleted == name)
+                                !delete.contains(name)
                            } else {
                                true
                            }
@@ -120,12 +119,12 @@ pub fn use_seq(seq: SeqMap, mut config: Mapping, field: &str) -> Mapping {
                let mut seen_proxy_names = HashSet::new();
                for name in &added_proxy_names {
                    if seen_proxy_names.insert(name.clone()) {
-                        merged_proxies.push(Value::String(name.clone().into()));
+                        merged_proxies.push(Value::String(name.clone()));
                    }
                }
                for value in base_group_proxies {
                    if let Value::String(name) = &value
-                        && !seen_proxy_names.insert(name.to_owned().into())
+                        && !seen_proxy_names.insert(name.to_owned())
                    {
                        continue;
                    }
@@ -181,7 +180,7 @@ proxy-groups:
        let seq = SeqMap {
            prepend: Sequence::new(),
            append: Sequence::new(),
-            delete: vec!["proxy1".into()],
+            delete: vec!["proxy1".to_string()],
        };

        config = use_seq(seq, config, "proxies");
@@ -318,7 +317,7 @@ proxy-groups: "invalid"
        let seq = SeqMap {
            prepend: Sequence::new(),
            append: Sequence::new(),
-            delete: vec!["proxy1".into()],
+            delete: vec!["proxy1".to_string()],
        };

        config = use_seq(seq, config, "proxies");
@@ -12,14 +12,17 @@ use chrono::Utc;
 use clash_verge_logging::{Type, logging, logging_error};
 use reqwest_dav::list_cmd::ListFile;
 use serde::Serialize;
+use smartstring::alias::String;
 use std::path::PathBuf;
 use tokio::fs;
-use tristr::alias::String;

 #[derive(Debug, Serialize, specta::Type)]
 pub struct LocalBackupFile {
+    #[specta(type = std::string::String)]
    pub filename: String,
+    #[specta(type = std::string::String)]
    pub path: String,
+    #[specta(type = std::string::String)]
    pub last_modified: String,
    pub content_length: u64,
 }
@@ -10,8 +10,8 @@ use crate::{
 use bytes::BytesMut;
 use clash_verge_logging::{Type, logging};
 use serde_yaml_ng::{Mapping, Value};
+use smartstring::alias::String;
 use std::sync::{Arc, LazyLock};
-use tristr::alias::String;

 #[allow(clippy::expect_used)]
 static TLS_CONFIG: LazyLock<Arc<rustls::ClientConfig>> = LazyLock::new(|| {
@@ -27,7 +27,7 @@ pub async fn patch_verge(patch: &IVerge, not_save_file: bool) -> Result<()> {

 /// Apply a patch without post-update reconciliation.
 pub(super) async fn apply_verge_patch(patch: &IVerge, not_save_file: bool) -> Result<()> {
-    let config_write = Config::try_lock_config_write()?;
+    let config_write = Config::lock_config_write().await;
    apply_verge_patch_locked(&config_write, patch, not_save_file).await
 }

@@ -21,7 +21,6 @@ use std::{
    process::Command,
    sync::atomic::{AtomicU64, Ordering},
 };
-use tristr::alias::String;

 const RELEASE_VERSION_URL: &str = "https://github.com/MetaCubeX/mihomo/releases/latest/download/version.txt";
 const ALPHA_BASE_URL: &str = "https://github.com/MetaCubeX/mihomo/releases/download/Prerelease-Alpha";
@@ -51,7 +50,7 @@ pub async fn upgrade_core(force: bool) -> Result<CoreUpgradeReport> {
    // A core already broken by the in-place updater cannot report a version; upgrading is the repair.
    let installed = read_core_version(&target).unwrap_or_else(|error| {
        logging!(warn, Type::Core, "core upgrade: unreadable installed core: {error:#}");
-        String::new()
+        std::string::String::new()
    });

    let (proxy, latest) = resolve_latest_version(alpha).await?;
@@ -173,15 +172,14 @@ fn managed_core_path(core: &str) -> Result<PathBuf> {
 }

 /// Pins the package to the resolved version, so a release moving on mid-upgrade cannot 404.
-fn package_url(alpha: bool, version: &str) -> Result<String> {
+fn package_url(alpha: bool, version: &str) -> Result<std::string::String> {
    let asset = asset_base_name(alpha)?;
    let extension = if cfg!(windows) { "zip" } else { "gz" };
    Ok(if alpha {
        format!("{ALPHA_BASE_URL}/{asset}-{version}.{extension}")
    } else {
        format!("{RELEASE_DOWNLOAD_URL}/{version}/{asset}-{version}.{extension}")
-    }
-    .into())
+    })
 }

 /// Mirrors the asset map in `scripts/prebuild.mjs` so an upgrade keeps the build variant
@@ -220,11 +218,11 @@ fn asset_base_name(alpha: bool) -> Result<&'static str> {

 /// Returns the proxy that reached GitHub so the package download reuses it.
 #[tracing::instrument(skip_all, level = "debug", fields(alpha))]
-async fn resolve_latest_version(alpha: bool) -> Result<(ProxyType, String)> {
+async fn resolve_latest_version(alpha: bool) -> Result<(ProxyType, std::string::String)> {
    let url = if alpha {
-        String::from(format!("{ALPHA_BASE_URL}/version.txt"))
+        format!("{ALPHA_BASE_URL}/version.txt")
    } else {
-        String::from(RELEASE_VERSION_URL)
+        RELEASE_VERSION_URL.to_owned()
    };
    let mut last_error = None;

@@ -236,7 +234,7 @@ async fn resolve_latest_version(alpha: bool) -> Result<(ProxyType, String)> {
        match attempt {
            Ok(response) if response.status().is_success() => {
                // An error page answered with 200 must not become a version, nor reach the URL.
-                let version = String::from(response.text().trim());
+                let version = response.text().trim().to_owned();
                if !is_usable_version(&version) {
                    logging!(
                        warn,
@@ -448,7 +446,7 @@ fn new_command(program: impl AsRef<OsStr>) -> Command {
 }

 /// Parses the version out of `Mihomo Meta v1.19.30 darwin arm64 with go1.22.12 ...`.
-fn read_core_version(path: &Path) -> Result<String> {
+fn read_core_version(path: &Path) -> Result<std::string::String> {
    let output = new_command(path)
        .arg("-v")
        .output()
@@ -458,12 +456,11 @@ fn read_core_version(path: &Path) -> Result<String> {
        bail!("{} -v exited with {}", path.display(), output.status);
    }

-    // from_utf8_lossy exists only on the std String type; the tristr alias shadows the bare name.
-    let stdout = std::string::String::from_utf8_lossy(&output.stdout);
+    let stdout = String::from_utf8_lossy(&output.stdout);
    stdout
        .split_whitespace()
        .nth(2)
-        .map(String::from)
+        .map(str::to_owned)
        .with_context(|| format!("unexpected version output from {}: {stdout}", path.display()))
 }

@@ -2,7 +2,7 @@ use crate::core::notify::{Refresh, announce};
 use anyhow::{Result, ensure};
 use clash_verge_draft::DraftTransaction;
 use serde::Serialize;
-use tristr::alias::String;
+use smartstring::alias::String;

 use crate::{
    config::{
@@ -19,7 +19,10 @@ use crate::{
 #[serde(tag = "status", rename_all = "snake_case")]
 pub enum DnsOverrideOutcome {
    Applied,
-    ConfirmationRequired { source: String },
+    ConfirmationRequired {
+        #[specta(type = std::string::String)]
+        source: String,
+    },
 }

 pub async fn set_dns_override(
@@ -1,17 +1,20 @@
 use crate::{
-    cmd::{CmdResult, CommandFailure, StringifyErr as _},
+    cmd::{CmdResult, StringifyErr as _},
    utils::dirs::{self, PathBufExec as _},
 };
 use clash_verge_logging::{Type, logging};
+use smartstring::alias::String;
 use std::path::{Component, Path, PathBuf};
 use tokio::fs;
 use tokio::io::AsyncWriteExt as _;
-use tristr::alias::String;

 #[derive(Debug, serde::Serialize, serde::Deserialize, specta::Type)]
 pub struct IconInfo {
+    #[specta(type = std::string::String)]
    name: String,
+    #[specta(type = std::string::String)]
    previous_t: String,
+    #[specta(type = std::string::String)]
    current_t: String,
 }

@@ -40,7 +43,7 @@ fn ensure_icon_cache_target(icon_cache_dir: &Path, file_name: &str) -> CmdResult
    Ok(icon_path)
 }

-fn normalized_text_prefix(content: &[u8]) -> String {
+fn normalized_text_prefix(content: &[u8]) -> std::string::String {
    let content = content.strip_prefix(&[0xEF, 0xBB, 0xBF]).unwrap_or(content);
    let start = content
        .iter()
@@ -48,8 +51,7 @@ fn normalized_text_prefix(content: &[u8]) -> String {
        .unwrap_or(content.len());
    let end = content.len().min(start.saturating_add(2048));
    let prefix = &content[start..end];
-    // from_utf8_lossy exists only on the std String type; the tristr alias shadows the bare name.
-    std::string::String::from_utf8_lossy(prefix).to_ascii_lowercase().into()
+    std::string::String::from_utf8_lossy(prefix).to_ascii_lowercase()
 }

 fn looks_like_html(content: &[u8]) -> bool {
@@ -93,10 +95,7 @@ pub async fn download_icon_cache(url: String, name: String) -> CmdResult<String>

    if !is_supported_icon_content(&content) {
        let _ = temp_path.remove_if_exists().await;
-        return Err(CommandFailure::plain(format!(
-            "Downloaded content is not a valid image: {}",
-            url.as_str()
-        )));
+        return Err(format!("Downloaded content is not a valid image: {}", url.as_str()).into());
    }

    {
@@ -165,7 +164,7 @@ pub async fn copy_icon_file(path: String, icon_info: IconInfo) -> CmdResult<Stri

        match fs::copy(file_path, &dest_path).await {
            Ok(_) => Ok(dest_path.to_string_lossy().into()),
-            Err(err) => Err(CommandFailure::plain(err)),
+            Err(err) => Err(err.to_string().into()),
        }
    } else {
        Err("file not found".into())
@@ -8,7 +8,7 @@ use crate::{
 };
 use anyhow::{Result, bail};
 use clash_verge_logging::{Type, logging, logging_error};
-use tristr::alias::String;
+use smartstring::alias::String;

 /// Toggle proxy profile
 pub async fn toggle_proxy_profile(profile_index: String) {
@@ -231,7 +231,7 @@ pub async fn update_profile(uid: &String, option: Option<&PrfOption>, is_mannual
                };
                let message = mask_err(&message);
                let message = if profile_persisted {
-                    format!("订阅已保存，但未能确认已应用到内核: {message}").into()
+                    format!("订阅已保存，但未能确认已应用到内核: {message}")
                } else {
                    message
                };
@@ -316,7 +316,6 @@ pub async fn hide() {
    {
        let _ = window.hide();
    }
-    handle::Handle::global().set_activation_policy_accessory();
 }

 #[cfg(test)]
@@ -1,5 +1,4 @@
 use crate::cmd;
-use tristr::alias::String;

 pub fn builder() -> tauri_specta::Builder<tauri::Wry> {
    tauri_specta::Builder::new()
@@ -122,7 +121,7 @@ pub struct WebDavFile {
 impl From<reqwest_dav::list_cmd::ListFile> for WebDavFile {
    fn from(file: reqwest_dav::list_cmd::ListFile) -> Self {
        Self {
-            href: file.href.into(),
+            href: file.href,
            last_modified: file.last_modified,
        }
    }
@@ -149,20 +148,20 @@ pub struct IpAddress {
 impl From<network_interface::NetworkInterface> for NetworkInterfaceView {
    fn from(interface: network_interface::NetworkInterface) -> Self {
        Self {
-            name: interface.name.into(),
+            name: interface.name,
            addr: interface
                .addr
                .into_iter()
                .map(|address| match address {
                    network_interface::Addr::V4(address) => InterfaceAddress::V4(IpAddress {
-                        ip: address.ip.to_string().into(),
+                        ip: address.ip.to_string(),
                    }),
                    network_interface::Addr::V6(address) => InterfaceAddress::V6(IpAddress {
-                        ip: address.ip.to_string().into(),
+                        ip: address.ip.to_string(),
                    }),
                })
                .collect(),
-            mac_addr: interface.mac_addr.map(Into::into),
+            mac_addr: interface.mac_addr,
        }
    }
 }
@@ -289,9 +289,6 @@ pub fn run() -> std::process::ExitCode {
        }

        pub fn handle_window_close(api: &tauri::WindowEvent) {
-            #[cfg(target_os = "macos")]
-            handle::Handle::global().set_activation_policy_accessory();
-
            if core::handle::Handle::global().is_exiting() {
                return;
            }
@@ -11,7 +11,6 @@ use std::{
    str::FromStr,
 };
 use tokio::io::AsyncWriteExt as _;
-use tristr::alias::String;

 pub async fn read_yaml<T: DeserializeOwned>(path: &Path) -> Result<T> {
    if !tokio::fs::try_exists(path).await.unwrap_or(false) {
@@ -35,13 +34,12 @@ pub async fn read_mapping(path: &Path) -> Result<Mapping> {
    let bytes = tokio::fs::read(path)
        .await
        .with_context(|| format!("failed to read the file \"{}\"", path.display()))?;
-    // from_utf8 exists only on the std String type; the tristr alias shadows the bare name.
-    let yaml_str = std::string::String::from_utf8(bytes)
-        .with_context(|| format!("failed to read the file \"{}\"", path.display()))?;
+    let yaml_str =
+        String::from_utf8(bytes).with_context(|| format!("failed to read the file \"{}\"", path.display()))?;
    let label = path.to_path_buf();

    // Parsing a multi-megabyte profile is pure CPU; keep it off the async worker.
-    AsyncHandler::spawn_blocking(move || parse_mapping(yaml_str.into(), label))
+    AsyncHandler::spawn_blocking(move || parse_mapping(yaml_str, label))
        .await
        .map_err(|join| anyhow!("yaml parse task failed: {join}"))?
 }
@@ -141,7 +139,7 @@ const ALPHABET: [char; 62] = [

 pub fn get_uid(prefix: &str) -> String {
    let id = nanoid!(11, &ALPHABET);
-    format!("{prefix}{id}").into()
+    format!("{prefix}{id}")
 }

 pub fn parse_str<T: FromStr>(target: &str, key: &str) -> Option<T> {
@@ -173,7 +171,7 @@ pub fn mask_url(url: &str) -> String {
    let scheme_and_host = &path_part[..host_end];
    let path = &path_part[host_end..]; // starts with '/' or empty

-    let mut result: String = scheme_and_host.into();
+    let mut result = scheme_and_host.to_owned();

    if !path.is_empty() {
        let masked: Vec<&str> = path
@@ -188,8 +186,8 @@ pub fn mask_url(url: &str) -> String {
        let masked_query: Vec<String> = query
            .split('&')
            .map(|param| match param.find('=') {
-                Some(eq) => format!("{}=***", &param[..eq]).into(),
-                None => param.into(),
+                Some(eq) => format!("{}=***", &param[..eq]),
+                None => param.to_owned(),
            })
            .collect();
        result.push_str(&masked_query.join("&"));
@@ -200,8 +198,7 @@ pub fn mask_url(url: &str) -> String {

 /// Masks every HTTP(S) URL embedded in a log string while preserving surrounding text.
 pub fn mask_err(err: &str) -> String {
-    // with_capacity exists only on the std String type; the tristr alias shadows the bare name.
-    let mut result = std::string::String::with_capacity(err.len());
+    let mut result = String::with_capacity(err.len());
    let mut remaining = err;

    loop {
@@ -227,7 +224,7 @@ pub fn mask_err(err: &str) -> String {
        remaining = &remaining[url_end..];
    }

-    result.into()
+    result
 }

 pub fn get_last_part_and_decode(url: &str) -> Option<String> {
@@ -238,8 +235,7 @@ pub fn get_last_part_and_decode(url: &str) -> Option<String> {
    Some(
        percent_encoding::percent_decode_str(last_segment)
            .decode_utf8_lossy()
-            .to_string()
-            .into(),
+            .to_string(),
    )
 }

@@ -281,15 +277,15 @@ pub fn linux_elevator() -> String {
        Ok(output) => {
            if !output.stdout.is_empty() {
                if let Ok(path) = std::str::from_utf8(&output.stdout) {
-                    path.trim().into()
+                    path.trim().to_string()
                } else {
-                    "sudo".into()
+                    "sudo".to_string()
                }
            } else {
-                "sudo".into()
+                "sudo".to_string()
            }
        }
-        Err(_) => "sudo".into(),
+        Err(_) => "sudo".to_string(),
    }
 }

@@ -11,7 +11,6 @@ use std::collections::HashMap;
 use std::env;
 use std::fs;
 use std::path::PathBuf;
-use tristr::alias::String;

 pub fn ensure_mimeapps_entries(desktop_file: &str, schemes: &[&str]) -> Result<()> {
    let Some(path) = mimeapps_list_path() else {
@@ -47,19 +46,19 @@ pub fn ensure_mimeapps_entries(desktop_file: &str, schemes: &[&str]) -> Result<(
            if trimmed.eq_ignore_ascii_case("[Default Applications]") {
                default_present = true;
                current_section = Some(SectionKind::DefaultApplications);
-                output_lines.push("[Default Applications]".into());
+                output_lines.push("[Default Applications]".to_string());
                continue;
            } else if trimmed.eq_ignore_ascii_case("[Added Associations]") {
                current_section = Some(SectionKind::AddedAssociations);
-                output_lines.push("[Added Associations]".into());
+                output_lines.push("[Added Associations]".to_string());
                continue;
            }
        }

        if current_section.is_some() {
-            section_buffer.push(line.into());
+            section_buffer.push(line.to_string());
        } else {
-            output_lines.push(line.into());
+            output_lines.push(line.to_string());
        }
    }

@@ -79,9 +78,9 @@ pub fn ensure_mimeapps_entries(desktop_file: &str, schemes: &[&str]) -> Result<(
        if output_lines.last().is_some_and(|line| !line.is_empty()) {
            output_lines.push(String::new());
        }
-        output_lines.push("[Default Applications]".into());
+        output_lines.push("[Default Applications]".to_string());
        for &scheme in schemes {
-            output_lines.push(format!("x-scheme-handler/{scheme}={desktop_file};").into());
+            output_lines.push(format!("x-scheme-handler/{scheme}={desktop_file};"));
        }
    }

@@ -172,7 +171,7 @@ fn flush_section(
                .split(';')
                .filter_map(|value| {
                    let trimmed = value.trim();
-                    (!trimmed.is_empty()).then(|| trimmed.into())
+                    (!trimmed.is_empty()).then(|| trimmed.to_string())
                })
                .collect();

@@ -188,7 +187,7 @@ fn flush_section(
                    .split(';')
                    .filter_map(|value| {
                        let trimmed = value.trim();
-                        (!trimmed.is_empty()).then(|| trimmed.into())
+                        (!trimmed.is_empty()).then(|| trimmed.to_string())
                    })
                    .collect();

@@ -204,10 +203,10 @@ fn flush_section(
                        merged_values.insert(0, moved);
                    }
                } else {
-                    merged_values.insert(0, desktop_file.into());
+                    merged_values.insert(0, desktop_file.to_string());
                }

-                let mut merged_line: String = format!("{existing_prefix}x-scheme-handler/{scheme}=").into();
+                let mut merged_line = format!("{existing_prefix}x-scheme-handler/{scheme}=");
                merged_line.push_str(&merged_values.join(";"));
                merged_line.push(';');

@@ -223,16 +222,16 @@ fn flush_section(
            if let Some(pos) = values.iter().position(|value| value == desktop_file) {
                if pos != 0 {
                    values.remove(pos);
-                    values.insert(0, desktop_file.into());
+                    values.insert(0, desktop_file.to_string());
                    *changed = true;
                }
            } else {
-                values.insert(0, desktop_file.into());
+                values.insert(0, desktop_file.to_string());
                *changed = true;
            }

            let prefix = line.chars().take_while(|c| c.is_whitespace()).collect::<String>();
-            let mut new_line: String = format!("{prefix}x-scheme-handler/{scheme}=").into();
+            let mut new_line = format!("{prefix}x-scheme-handler/{scheme}=");
            new_line.push_str(&values.join(";"));
            new_line.push(';');

@@ -254,7 +253,7 @@ fn flush_section(
    if ensure_all {
        for &scheme in schemes {
            if !seen.contains_key(scheme) {
-                processed.push(format!("x-scheme-handler/{scheme}={desktop_file};").into());
+                processed.push(format!("x-scheme-handler/{scheme}={desktop_file};"));
                *changed = true;
            }
        }
@@ -5,10 +5,10 @@ use reqwest::{
    Client, Proxy, StatusCode,
    header::{HeaderMap, HeaderValue, USER_AGENT},
 };
+use smartstring::alias::String;
 use std::{sync::Arc, time::Duration};
 use sysproxy::Sysproxy;
 use tauri::Url;
-use tristr::alias::String;

 #[derive(Debug)]
 pub struct HttpResponse {
@@ -57,7 +57,7 @@ impl NetworkManager {

    fn build_client(
        &self,
-        proxy_url: Option<String>,
+        proxy_url: Option<std::string::String>,
        default_headers: HeaderMap,
        accept_invalid_certs: bool,
        timeout_secs: Option<u64>,
@@ -76,7 +76,7 @@ impl NetworkManager {

        // 设置代理
        if let Some(proxy_str) = proxy_url {
-            let proxy = Proxy::all(proxy_str.as_str())?;
+            let proxy = Proxy::all(proxy_str)?;
            builder = builder.proxy(proxy);
        } else {
            builder = builder.no_proxy();
@@ -226,15 +226,15 @@ impl NetworkManager {
        accept_invalid_certs: bool,
        tls_root_mode: TlsRootMode,
    ) -> Result<Client> {
-        let proxy_url: Option<String> = match proxy_type {
+        let proxy_url: Option<std::string::String> = match proxy_type {
            ProxyType::None => None,
            ProxyType::Localhost => {
                let port = MixedPort::desired().await;
-                Some(format!("http://127.0.0.1:{port}").into())
+                Some(format!("http://127.0.0.1:{port}"))
            }
            ProxyType::System => {
                if let Ok(p @ Sysproxy { enable: true, .. }) = Sysproxy::get_system_proxy() {
-                    Some(format!("http://{}:{}", p.host, p.port).into())
+                    Some(format!("http://{}:{}", p.host, p.port))
                } else {
                    None
                }
@@ -1,8 +1,8 @@
 use crate::core::notify::NoticeStatus;
 use anyhow::Result;
 use percent_encoding::percent_decode_str;
+use smartstring::alias::String;
 use tauri::Url;
-use tristr::alias::String;

 use crate::{
    config::{Config, PrfItem, profiles},
@@ -39,7 +39,7 @@ pub(super) async fn resolve_scheme(param: &str) -> Result<()> {
    Ok(())
 }

-fn extract_subscription_info(link_parsed: &Url) -> Option<(String, Option<String>)> {
+fn extract_subscription_info(link_parsed: &Url) -> Option<(std::string::String, Option<String>)> {
    if !matches!(link_parsed.scheme(), "clash" | "clash-verge") {
        return None;
    }
@@ -52,7 +52,7 @@ fn extract_subscription_info(link_parsed: &Url) -> Option<(String, Option<String
    Some((url, name))
 }

-fn extract_subscription_url(link_parsed: &Url) -> Option<String> {
+fn extract_subscription_url(link_parsed: &Url) -> Option<std::string::String> {
    let query = link_parsed.query()?;
    let prefix = "url=";
    let pos = query.find(prefix)?;
@@ -60,15 +60,15 @@ fn extract_subscription_url(link_parsed: &Url) -> Option<String> {
    Some(decode_subscription_url(raw_url))
 }

-fn decode_subscription_url(raw_url: &str) -> String {
+fn decode_subscription_url(raw_url: &str) -> std::string::String {
    // Avoid double-decoding nested subscription URLs; decode only when needed.
    if Url::parse(raw_url).is_ok() {
-        return String::from(raw_url);
+        return raw_url.to_string();
    }

-    let mut candidate = String::from(raw_url);
+    let mut candidate = raw_url.to_string();
    for _ in 0..2 {
-        let next = String::from(percent_decode_str(&candidate).decode_utf8_lossy());
+        let next = percent_decode_str(&candidate).decode_utf8_lossy().to_string();
        if next == candidate {
            break;
        }
@@ -5,7 +5,6 @@ use std::fs;
 use std::os::windows::process::CommandExt as _;
 use std::path::{Path, PathBuf};
 use std::process::{Command, Output};
-use tristr::alias::String;
 use windows::Win32::Globalization::{GetACP, GetOEMCP, MULTI_BYTE_TO_WIDE_CHAR_FLAGS, MultiByteToWideChar};

 const CREATE_NO_WINDOW: u32 = 0x08000000;
@@ -73,11 +72,11 @@ fn get_task_user_id() -> Result<String> {
    if let Some(domain) = domain {
        let domain = domain.trim();
        if !domain.is_empty() {
-            return Ok(format!("{domain}\\{username}").into());
+            return Ok(format!("{domain}\\{username}"));
        }
    }

-    Ok(username.into())
+    Ok(username.to_string())
 }

 fn get_startup_dir() -> Result<PathBuf> {
@@ -119,8 +118,7 @@ fn task_xml_path(mode: TaskMode) -> Result<PathBuf> {
 }

 fn xml_escape(value: &str) -> String {
-    // Per-char pushes must stay on the std String: TriStr growth re-materializes per push.
-    let mut escaped = std::string::String::with_capacity(value.len());
+    let mut escaped = String::with_capacity(value.len());
    for ch in value.chars() {
        match ch {
            '&' => escaped.push_str("&amp;"),
@@ -131,7 +129,7 @@ fn xml_escape(value: &str) -> String {
            _ => escaped.push(ch),
        }
    }
-    escaped.into()
+    escaped
 }

 fn build_task_xml(mode: TaskMode) -> Result<String> {
@@ -184,8 +182,7 @@ fn build_task_xml(mode: TaskMode) -> Result<String> {
        user_id,
        mode.xml_run_level(),
        exe_path
-    )
-    .into())
+    ))
 }

 fn encode_utf16le_with_bom(content: &str) -> Vec<u8> {
@@ -229,13 +226,12 @@ fn decode_with_code_page(bytes: &[u8], code_page: u32) -> Option<String> {
    }

    wide.truncate(written as usize);
-    // from_utf16_lossy exists only on the std String type; the tristr alias shadows the bare name.
-    Some(std::string::String::from_utf16_lossy(&wide).into())
+    Some(String::from_utf16_lossy(&wide))
 }

 fn decode_console_output(bytes: &[u8]) -> String {
    if let Ok(text) = std::str::from_utf8(bytes) {
-        return text.into();
+        return text.to_string();
    }

    let oem = unsafe { GetOEMCP() };
@@ -248,8 +244,7 @@ fn decode_console_output(bytes: &[u8]) -> String {
        return text;
    }

-    // from_utf8_lossy exists only on the std String type; the tristr alias shadows the bare name.
-    std::string::String::from_utf8_lossy(bytes).into()
+    String::from_utf8_lossy(bytes).to_string()
 }

 fn output_message(output: &Output) -> String {
@@ -259,10 +254,10 @@ fn output_message(output: &Output) -> String {
    let stderr = stderr.trim();

    match (stdout.is_empty(), stderr.is_empty()) {
-        (true, true) => "unknown error".into(),
-        (false, true) => stdout.into(),
-        (true, false) => stderr.into(),
-        (false, false) => format!("{stdout} | {stderr}").into(),
+        (true, true) => "unknown error".to_string(),
+        (false, true) => stdout.to_string(),
+        (true, false) => stderr.to_string(),
+        (false, false) => format!("{stdout} | {stderr}"),
    }
 }

@@ -16,7 +16,6 @@ use std::sync::OnceLock;
 use std::sync::atomic::{AtomicBool, Ordering};
 use std::time::Duration;
 use tokio::sync::oneshot;
-use tristr::alias::String;
 use warp::Filter as _;

 const INSTANCE_TOKEN_HEADER: &str = "x-instance-token";
@@ -142,7 +141,7 @@ async fn notify_existing_instance(record: &InstanceRecord) -> bool {
    let request = client.get(format!("http://127.0.0.1:{}/commands/visible", record.port));

    request
-        .header(INSTANCE_TOKEN_HEADER, record.token.as_str())
+        .header(INSTANCE_TOKEN_HEADER, &record.token)
        .send()
        .await
        .is_ok_and(|response| response.status().is_success())
@@ -1,6 +1,5 @@
 use serde::Serialize;
 use serde_yaml_ng::Result;
-use tristr::alias::String;

 pub fn to_mihomo_config_string<T: Serialize>(data: &T) -> Result<String> {
    let yaml = serde_yaml_ng::to_string(data)?;
@@ -8,8 +7,7 @@ pub fn to_mihomo_config_string<T: Serialize>(data: &T) -> Result<String> {
 }

 fn quote_fake_ip_filter_wildcards(yaml: &str) -> String {
-    // with_capacity exists only on the std String type; the tristr alias shadows the bare name.
-    let mut result = std::string::String::with_capacity(yaml.len());
+    let mut result = String::with_capacity(yaml.len());
    let mut in_fake_ip_filter = false;
    let mut fake_ip_filter_indent = 0;

@@ -41,7 +39,7 @@ fn quote_fake_ip_filter_wildcards(yaml: &str) -> String {
        result.push('\n');
    }

-    result.into()
+    result
 }

 fn leading_spaces(line: &str) -> usize {
@@ -52,12 +50,12 @@ fn quote_wildcard_item(item: &str) -> String {
    if !item.starts_with('\"') && !item.starts_with('\'') && contains_wildcard(item) {
        quote_string(item)
    } else {
-        item.into()
+        item.to_string()
    }
 }

 fn quote_string(s: &str) -> String {
-    ("\'".to_string() + s.replace('\'', "''").as_str() + "\'").into()
+    "\'".to_string() + s.replace('\'', "''").as_str() + "\'"
 }

 fn contains_wildcard(value: &str) -> bool {
@@ -4,10 +4,19 @@ import {
  VisibilityOffOutlined,
  VisibilityOutlined,
 } from '@mui/icons-material'
-import { Box, Button, IconButton, Skeleton, Typography } from '@mui/material'
+import {
+  Box,
+  Button,
+  FormControlLabel,
+  IconButton,
+  Skeleton,
+  Switch,
+  Typography,
+} from '@mui/material'
 import { getCurrentWebviewWindow } from '@tauri-apps/api/webviewWindow'
 import { useEffect } from 'foxact/use-abortable-effect'
 import { useIntersection } from 'foxact/use-intersection'
+import { useLocalStorage } from 'foxact/use-local-storage'
 import type { XOR } from 'foxts/ts-xor'
 import {
  forwardRef,
@@ -99,9 +108,13 @@ const IPInfoCardContainer = forwardRef<HTMLElement, React.PropsWithChildren>(
 export const IpInfoCard = () => {
  const { t } = useTranslation()
  const [showIp, setShowIp] = useState(false)
+  const [autoRefresh, setAutoRefresh] = useLocalStorage(
+    'ip-info-auto-refresh',
+    true,
+  )
  const appWindow = useMemo(() => getCurrentWebviewWindow(), [])

-  // Once intersected, refreshes stay enabled until unmount.
+  // Once intersected, the card stays eligible for refresh until unmount.
  const [containerRef, hasIntersected, _resetIntersected] = useIntersection({
    rootMargin: '0px',
  })
@@ -151,6 +164,8 @@ export const IpInfoCard = () => {
  })

  useEffect(() => {
+    if (!autoRefresh) return
+
    let timer: number | null = null

    // Prefer DOM intersection state; Tauri visibility is unreliable on some platforms.
@@ -190,7 +205,7 @@ export const IpInfoCard = () => {
      if (timer != null) clearInterval(timer)
      document.removeEventListener('visibilitychange', onVisibilityChange)
    }
-  }, [hasIntersected])
+  }, [autoRefresh, hasIntersected])

  const toggleShowIp = useCallback(() => {
    setShowIp((prev) => !prev)
@@ -364,12 +379,25 @@ export const IpInfoCard = () => {
              fontSize: '0.7rem',
            }}
          >
-            <Typography variant="caption">
-              {t('home.components.ipInfo.labels.autoRefresh')}
-              {countdown.type === 'countdown'
-                ? `: ${countdown.remainingSeconds}s`
-                : '...'}
-            </Typography>
+            <FormControlLabel
+              sx={{ m: 0 }}
+              control={
+                <Switch
+                  size="small"
+                  checked={autoRefresh}
+                  onChange={(_, checked) => setAutoRefresh(checked)}
+                />
+              }
+              label={
+                <Typography variant="caption">
+                  {t('home.components.ipInfo.labels.autoRefresh')}
+                  {autoRefresh &&
+                    (countdown.type === 'countdown'
+                      ? `: ${countdown.remainingSeconds}s`
+                      : '...')}
+                </Typography>
+              }
+            />
            <Typography
              variant="caption"
              sx={{
@@ -397,9 +397,9 @@ export const RulesEditorViewer = (props: Props) => {
      return
    }

-    setPrependSeq(obj?.prepend || [])
-    setAppendSeq(obj?.append || [])
-    setDeleteSeq(obj?.delete || [])
+    setPrependSeq((obj?.prepend || []).filter((rule) => rule !== null))
+    setAppendSeq((obj?.append || []).filter((rule) => rule !== null))
+    setDeleteSeq((obj?.delete || []).filter((rule) => rule !== null))
    hasLoadedSeqConfigRef.current = true
  }, [property])

@@ -417,9 +417,9 @@ export const RulesEditorViewer = (props: Props) => {

    hasLoadedSeqConfigRef.current = true
    startTransition(() => {
-      setPrependSeq(obj?.prepend ?? [])
-      setAppendSeq(obj?.append ?? [])
-      setDeleteSeq(obj?.delete ?? [])
+      setPrependSeq((obj?.prepend ?? []).filter((rule) => rule !== null))
+      setAppendSeq((obj?.append ?? []).filter((rule) => rule !== null))
+      setDeleteSeq((obj?.delete ?? []).filter((rule) => rule !== null))
    })
    setVisualization(true)
  }
@@ -608,7 +608,7 @@ function NormalProxyGroups(props: { mode: string }) {
        />
      </DragDropProvider>

-      {mode === 'rule' && (
+      {(mode === 'rule' || mode === 'global') && (
        <ProxyGroupNavigator
          proxyGroupNames={proxyGroupNames}
          onGroupLocation={handleGroupLocationByName}
@@ -211,7 +211,7 @@ export const useRenderList = (
    if (!proxyView) return []
    if (isChainMode)
      return selectedGroup ? [selectedGroup] : [CHAIN_DELAY_GROUP]
-    return mode === 'rule' || mode === 'script'
+    return mode === 'rule' || mode === 'global'
      ? proxyView.groups.map(({ name }) => name)
      : proxyView.global
        ? [proxyView.global.name]
@@ -257,7 +257,7 @@ export const useRenderList = (
      }))
    }

-    const useRule = mode === 'rule' || mode === 'script'
+    const useRule = mode === 'rule' || mode === 'global'
    const renderGroups = useRule
      ? proxyView.groups
      : proxyView.global === null
@@ -40,9 +40,9 @@ export const BackupConfigViewer = memo(

    const { register, handleSubmit, watch } = useForm<IWebDavConfig>({
      defaultValues: {
-        url: webdav_url!,
-        username: webdav_username!,
-        password: webdav_password!,
+        url: webdav_url ?? '',
+        username: webdav_username ?? '',
+        password: webdav_password ?? '',
      },
    })
    const url = watch('url')
@@ -50,9 +50,9 @@ export const BackupConfigViewer = memo(
    const password = watch('password')

    const webdavChanged =
-      webdav_url !== url ||
-      webdav_username !== username ||
-      webdav_password !== password
+      (webdav_url ?? '') !== url ||
+      (webdav_username ?? '') !== username ||
+      (webdav_password ?? '') !== password

    const webdavSignature = buildWebdavSignature(verge)
    const webdavStatus = getWebdavStatus(webdavSignature)
@@ -69,9 +69,9 @@ export const BackupConfigViewer = memo(
    }, [webdav_url, webdav_username, webdav_password, onInit, shouldAutoInit])

    const checkForm = () => {
-      const username = usernameRef.current?.value
+      const username = usernameRef.current?.value.trim()
      const password = passwordRef.current?.value
-      const url = urlRef.current?.value
+      const url = urlRef.current?.value.trim()

      if (!url) {
        urlRef.current?.focus()
@@ -95,14 +95,15 @@ export const BackupConfigViewer = memo(
    }

    const save = useLockFn(async (data: IWebDavConfig) => {
-      checkForm()
+      const trimmedUrl = data.url.trim()
+      const trimmedUsername = data.username.trim()
+      const isClearing = !trimmedUrl && !trimmedUsername && !data.password
+      if (!isClearing) checkForm()
      const signature = buildWebdavSignature({
        webdav_url: data.url,
        webdav_username: data.username,
        webdav_password: data.password,
      })
-      const trimmedUrl = data.url.trim()
-      const trimmedUsername = data.username.trim()

      try {
        setLoading(true)
@@ -127,7 +128,7 @@ export const BackupConfigViewer = memo(
        )
        setWebdavStatus(signature, 'unknown')
        showNotice.success('settings.modals.backup.messages.webdavConfigSaved')
-        await onSaveSuccess(signature)
+        if (!isClearing) await onSaveSuccess(signature)
      } catch (error) {
        showNotice.error(
          'settings.modals.backup.messages.webdavConfigSaveFailed',
@@ -223,9 +224,9 @@ export const BackupConfigViewer = memo(
              }}
            >
              {webdavChanged ||
-              webdav_url === undefined ||
-              webdav_username === undefined ||
-              webdav_password === undefined ? (
+              !webdav_url ||
+              !webdav_username ||
+              !webdav_password ? (
                <Button
                  variant="contained"
                  color={'primary'}
--- a/Show More
+++ b/Show More
Author	SHA1	Message	Date
github-actions[bot]andgithub-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>	160bb4fe8e	Release: v2.5.9 (#8508 ) Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>	2026-11-02 17:26:28 +08:00
Tunglies	a5b22fa512	fix(webdav): allow clearing saved configuration Close #8495	2026-11-02 17:24:13 +08:00
Tunglies	07ee0a602a	ci(release): unify RC and stable publication through dev	2026-11-02 00:46:06 +08:00
❤是纱雾酱哟～andrenovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	693f2f7ac7	chore(deps): update npm dependencies (#8490 ) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2026-11-01 13:08:26 +00:00
nrenvo	633f166e46	ci: trigger rust checks when their configuration changes (#8487 )	2026-11-01 12:40:42 +00:00
Tunglies	261178b6d8	fix(updater): render release notes without remark-gfm Remove GFM extensions that require unsupported regular expressions on older WebKit. Keep native Markdown links, existing release-note styling, and HTML sanitization. Closes #8079 Closes #8082	2026-11-01 16:35:01 +08:00
Tunglies	0cae907de6	fix(config): wait for pending configuration writes Serialize Verge patches behind the active configuration writer so toggling the system proxy after TUN does not fail immediately on lock contention. CLose: #6613, #8481, #8357	2026-11-01 16:13:11 +08:00
nrenvo	94942b9105	fix(backup): publish scheduler settings with send_replace (#8386 ) `watch::Sender::send` drops the value when there are no receivers at startup, leaving the scheduler on the default disabled settings. `send_replace` stores it for the runner that subscribes right after.	2026-11-01 07:43:42 +00:00
Tunglies	12f842d038	fix(macos): prevent menu bar flicker when closing the window Keep the application activation policy unchanged when hiding the main window. Lightweight mode still hides the Dock icon. Closes #8319	2026-11-01 15:33:26 +08:00
Tunglies	8e9832712a	doc: clash-verge-rev with mihomo 1.19.33	2026-11-01 14:59:14 +08:00
Tunglies	719f63b57f	chore: update tao and wry	2026-11-01 14:30:28 +08:00
heeeex100	ef784e459d	docs: document complete development setup (#8457 ) * docs: document complete development setup * docs: follow review feedback on toolchain setup	2026-10-30 15:48:33 +00:00
❤是纱雾酱哟～andCopilot	c236f5094e	deps: upgrade updater to remove vulnerable zip (#8476 ) * fix(deps): update updater to patched zip release Upgrade tauri-plugin-updater to 2.14.1 and resolve the lockfile without vulnerable zip 4.6.1. Assisted-by: Copilot SDK Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Signed-off-by: ❤是纱雾酱哟～ <49941141+Dragon1573@users.noreply.github.com> * chore(deps): align updater package versions Upgrade the PNPM updater plugin to match the Rust updater crate at 2.14.1. Assisted-by: Copilot SDK Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Signed-off-by: ❤是纱雾酱哟～ <49941141+Dragon1573@users.noreply.github.com> --------- Signed-off-by: ❤是纱雾酱哟～ <49941141+Dragon1573@users.noreply.github.com> Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>	2026-10-30 15:04:34 +00:00
❤是纱雾酱哟～andrenovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	bdea31a7ca	chore(deps): update dependency pnpm to v12.16.1 (#8475 ) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2026-10-30 15:04:11 +00:00
renovate[bot]andrenovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	44d50eb67d	chore(deps): update rust crate zip to v9.1.3 [security] (#8464 ) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2026-10-30 03:52:54 +00:00
renovate[bot]andrenovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	afd9d4b5a0	chore(deps): update rust crate zip to v9.1.2 [security] (#8461 ) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2026-10-29 22:45:12 +00:00
renovate[bot]andrenovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	8bf20d199c	chore(deps): update rust crate zip to v9.1.1 [security] (#8460 ) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2026-10-29 17:26:16 +00:00
renovate[bot]andrenovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	e156ff09ae	chore(deps): update rust crate zip to v9.1.0 [security] (#8458 ) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2026-10-29 13:39:08 +00:00
renovate[bot]andrenovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	df70146b02	chore(deps): update npm dependencies (#8453 ) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2026-10-29 10:37:26 +00:00
renovate[bot]andrenovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	de22706f3b	chore(deps): update rust crate zip to v9.0.5 [security] (#8454 ) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2026-10-29 08:16:28 +00:00
UddooandTunglies	4b87634da9	fix(macos): restore Big Sur home rendering without Array.at (#8358 ) * fix(macos): restore Big Sur home rendering without Array.at Include the Array.prototype.at polyfill for the declared Safari 14 target so delay and traffic rendering can read their latest records. Fixes clash-verge-rev/clash-verge-rev#8333 AI assistance: Codex generated the change and ran validation; the implementation model identifier and effort are not exposed. Independent review used GPT-6.1-Sol at medium effort. * build(web): auto-detect modern polyfills instead of a manual list modernPolyfills: true lets @vitejs/plugin-legacy derive the polyfill set from the emitted bundle, dependencies included, so post-Safari-14 API coverage no longer depends on remembering to extend the list (#8333, and the dependency-side gaps behind #1126 and #6582). --------- Co-authored-by: Tunglies <77394545+Tunglies@users.noreply.github.com>	2026-10-29 08:04:33 +00:00
❤是纱雾酱哟～andrenovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	c9a6cf240d	chore(deps): update node.js to v26 (#8450 ) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2026-10-29 04:21:49 +00:00
❤是纱雾酱哟～andrenovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	8128227302	chore(deps): update dependency react-i18next to v17.1.9 (#8448 ) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2026-10-28 17:33:10 +00:00
Shubham Padkonde	3953e125b2	fix(profile): ignore null entries in the rules editor (#8432 )	2026-10-27 17:39:05 +00:00
nrenvo	cbd5ed73a5	fix(theme): allow injected CSS to style Monaco view containers (#8385 ) `@scope`'s `to` bound excludes the boundary elements themselves, so rules targeting `.view-lines` never matched. Move the bound to its children with `> *`: the container becomes styleable, its internals stay excluded.	2026-10-27 15:13:58 +00:00
Tunglies	02e5e0e4a6	ci: gate frontend and rust checks by changed paths (#8433 ) The paths-filter output in lint-clippy.yml only gated two echo steps; checkout, toolchain setup and clippy itself ran unconditionally, so frontend-only PRs still burned a 3-runner matrix on a full clippy build plus the logging-check tool install. - lint-clippy/rustfmt/frontend-check: move path filters to workflow level so irrelevant PRs spawn no runner at all - split contract-parity into its own workflow; its trigger set spans both sides and workflow paths cannot vary per job - clippy paths now cover crates/ and workspace Cargo files, which the old src-tauri/ filter missed dev has no required status checks, so path-filtered workflows cannot get stuck in "Expected".	2026-10-27 16:36:49 +08:00
susu-Sugar susu-Sugar Tunglies	0498ba3e4f	fix(proxies): render configured groups in global mode (#8402 ) * fix(proxies): render configured groups in global mode Global mode previously only rendered the synthetic GLOBAL group and sliced off its header, which flattened every user-defined group into a non-expandable proxy row. Configured groups could no longer be opened or inspected. Render the same group list as rule/script mode so every group keeps its own header and expand toggle. Fixes #8376 * style: keep useRule assignment on one line * fix & changelog * fix: hover when global proxy --------- Co-authored-by: susu-Sugar <214122492+susu-Sugar@users.noreply.github.com> Co-authored-by: Tunglies <77394545+Tunglies@users.noreply.github.com>	2026-10-27 01:41:19 +00:00
Tunglies	f39644ee6b	chore(typecheck): replace tsc with tsrs as the typecheck gate (#8428 ) tsrs (Rust port of the TypeScript 7 checker) replaces tsc --noEmit in the typecheck script, web:build, and CI. Measured on this repository: ~0.4s vs ~3.5s wall time and ~280 MB vs ~750 MB peak RSS, with identical zero-diagnostic results on the current tree. The typescript package stays installed: typescript-eslint projectService and scripts/cleanup-unused-i18n.mjs consume its compiler API.	2026-10-27 01:34:29 +00:00
susu-Sugar susu-Sugar ❤是纱雾酱哟～	488f022c05	feat(media-unlock): add Muse AI (muse.ai) detection (#8411 ) * feat(media-unlock): add Muse AI detection muse.ai redirects every region to Meta's aymh anti-bot gateway before the app loads, and a plain HTTP client cannot finish the JavaScript challenge. Report the result as a new Risky status (exit reachable, availability unverifiable) together with the exit region instead of a misleading Yes/No. Signed-off-by: ❤是纱雾酱哟～ <49941141+Dragon1573@users.noreply.github.com> * style(media-unlock): apply rustfmt and biome formatting Signed-off-by: ❤是纱雾酱哟～ <49941141+Dragon1573@users.noreply.github.com> * docs(changelog): Update changelog Signed-off-by: ❤是纱雾酱哟～ <49941141+Dragon1573@users.noreply.github.com> --------- Signed-off-by: ❤是纱雾酱哟～ <49941141+Dragon1573@users.noreply.github.com> Co-authored-by: susu-Sugar <214122492+susu-Sugar@users.noreply.github.com> Co-authored-by: ❤是纱雾酱哟～ <49941141+Dragon1573@users.noreply.github.com>	2026-10-26 17:17:09 +00:00
Ekko82	eefd025806	feat(home): add an IP auto-refresh toggle (#8403 )	2026-10-26 02:04:55 +00:00