@linxin666/dsh-remote-web-ui 0.1.14 → 0.1.16

package/README.i18n.yaml

@@ -2,5 +2,5 @@
 # side as of the last confirmed-consistent state. Both languages carry equal authority;
 # after editing either side, bring the other along and re-record with:
 #   node scripts/verify-docs.mjs --write <dir>
-README.md: 97f5f6b000e12fd89ad8723fd25306075a10df06
-README.zh.md: 30c7d55a4f31e914091318c3205d23f3b9979f60
+README.md: c1e5ea0deaca90a5a188342db0d38256f5917369
+README.zh.md: 9be2fbeb481ea23f05aa06f732234b2310c3d16a

package/README.md

@@ -38,12 +38,16 @@ actions, and the update panel that probes and runs the update.
 - **Remote update**: the download trigger in the sidebar foot (left of the
   phone icon) opens the update panel, which probes the npm registry for the
   installed `@linxin666/dsh-*` family releases. When a newer release exists
-  the panel runs the update automatically (`pnpm update` inside the owning
-  dsh profile; when pnpm is missing it falls back to `corepack pnpm` and
-  then `npx --yes pnpm`, and on Windows the command runs through `cmd.exe`
-  so npm-installed `.cmd` shims resolve; the loopback-only
+  the panel runs the update automatically (`pnpm update --latest` inside the
+  owning dsh profile; when pnpm is missing it falls back to `corepack pnpm`
+  and then `npx --yes pnpm`, and on Windows the command runs through
+  `cmd.exe` so npm-installed `.cmd` shims resolve; the loopback-only
   `/api/update/status` + `/api/update/run` endpoints drive it) and asks for
-  a dsh web restart to pick it up. Local
+  a dsh web restart to pick it up. After a green pnpm exit the installed
+  versions are re-checked against the registry: a green exit that left every
+  version in place (e.g. the pnpm `minimumReleaseAge` gate silently skipping
+  same-day releases) is reported as a stale update with configuration
+  guidance instead of a false success. Local
   link installs (development mode) are detected and report the npm state
   without updating.
 

package/README.zh.md

@@ -13,7 +13,7 @@
 - **手机侧**：扫码将手机与一次性、限时令牌绑定，并落地到 **`/m` 独立移动端界面**——一款专为小屏设计的轻客户端（见[截图](#截图)），而不是把桌面 UI 塞进手机。链接携带 `workspace` 参数，手机落地到桌面正在查看的同一工作区。
 - **安全**：一个有效的一次性令牌（刷新会使旧链接失效；已接受的令牌不可复用；令牌会过期）。停止会撤销每一台已配对设备与当前令牌——已配对设备在下一次请求时被切断。当插件 `requirePairingForLan` 门开启（默认）时，每个非 loopback 的 `/api` 请求必须携带有效的已配对设备 cookie，因此二维码是进入暴露在局域网上的 dsh web 的唯一途径。
 - **实时状态**：桌面面板经 SSE 流实时镜像配对状态（等待 → 已连接 → 已断开）。
-- **远程更新**：侧边栏底部的下载触发按钮（手机图标左侧）打开更新面板，它探测 npm registry 上已安装的 `@linxin666/dsh-*` 全家桶版本。当存在较新版本时，面板自动执行更新（在所属 dsh profile 内 `pnpm update`；pnpm 缺失时依次回退 `corepack pnpm`、`npx --yes pnpm`，Windows 上经 `cmd.exe` 执行以解析 npm 安装的 `.cmd` shim；由仅 loopback 的 `/api/update/status` + `/api/update/run` 端点驱动）并请求重启 dsh web 以生效。本地 link 安装（开发模式）会被探测到，只报告 npm 状态而不更新。
+- **远程更新**：侧边栏底部的下载触发按钮（手机图标左侧）打开更新面板，它探测 npm registry 上已安装的 `@linxin666/dsh-*` 全家桶版本。当存在较新版本时，面板自动执行更新（在所属 dsh profile 内 `pnpm update --latest`；pnpm 缺失时依次回退 `corepack pnpm`、`npx --yes pnpm`，Windows 上经 `cmd.exe` 执行以解析 npm 安装的 `.cmd` shim；由仅 loopback 的 `/api/update/status` + `/api/update/run` 端点驱动）并请求重启 dsh web 以生效。pnpm 绿色退出后还会对照 registry 复核已装版本：绿色退出但版本纹丝不动（例如 pnpm 的 `minimumReleaseAge` 门禁静默跳过同日发布的新版本）会报告为「未更新成功」并附配置指引，而不是误报成功。本地 link 安装（开发模式）会被探测到，只报告 npm 状态而不更新。
 
 ## 截图
 

package/lib/client.js

@@ -1877,6 +1877,8 @@ window.__ModuleLoader__.load({
 				case "not-found": return t("update.error.notFound");
 				case "link": return t("update.error.link");
 				case "pnpm-failed": return t("update.error.pnpmFailed", { code: String(result.exitCode ?? "?") });
+				case "stale": return t("update.error.stale");
+				case "verify-failed": return t("update.error.verifyFailed");
 				default: return result.error ?? t("update.error.unknown");
 			}
 		}
@@ -2217,7 +2219,7 @@ window.__ModuleLoader__.load({
 		}
 		//#endregion
 		//#region \0dsh-css:packages/dsh-remote-web-ui/src/client/settings-card.module.css.mjs
-		const css = ".Kwoi6G_card{border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-3);border-radius:12px;list-style:none;transition:border-color .16s,background .16s}.Kwoi6G_card:hover{border-color:var(--dsw-alias-label-dimmed)}.Kwoi6G_cardOpen{background:var(--dsw-alias-bg-layer-2);border-color:var(--dsw-alias-label-dimmed)}.Kwoi6G_header{appearance:none;width:100%;font:inherit;color:inherit;text-align:left;cursor:pointer;background:0 0;border:0;border-radius:12px;align-items:center;gap:12px;padding:14px 16px;display:flex}.Kwoi6G_header:focus-visible{outline:2px solid var(--dsw-alias-brand-primary);outline-offset:-2px}.Kwoi6G_headText{flex-direction:column;flex:1;gap:4px;min-width:0;display:flex}.Kwoi6G_name{color:var(--dsw-alias-label-primary);font-size:15px;font-weight:600;line-height:1.4}.Kwoi6G_description{color:var(--dsw-alias-label-tertiary);font-size:13px;line-height:1.5}.Kwoi6G_pending{white-space:nowrap;background:var(--dsw-alias-bg-module-platform);color:var(--dsw-alias-label-secondary);border-radius:999px;flex:none;padding:1px 8px;font-size:11px;font-weight:500;line-height:17px}.Kwoi6G_chevron{color:var(--dsw-alias-label-tertiary);flex:none;transition:transform .16s}.Kwoi6G_chevronOpen{transform:rotate(180deg)}.Kwoi6G_body{border-top:1px solid var(--dsw-alias-border-l2);margin:0 16px;padding-bottom:8px}.Kwoi6G_readOnly{color:var(--dsw-alias-label-tertiary);margin:12px 0 0;font-size:12px;line-height:1.5}.Kwoi6G_notExposed{color:var(--dsw-alias-state-warn-primary);margin:12px 0 0;font-size:12px;line-height:1.5}.Kwoi6G_footer{border-top:1px solid var(--dsw-alias-border-l2);justify-content:flex-end;align-items:center;gap:8px;padding:12px 0 4px;display:flex}.Kwoi6G_failed{min-width:0;color:var(--dsw-alias-label-error);flex:1;margin:0;font-size:12px;line-height:1.5}.Kwoi6G_discard,.Kwoi6G_save{appearance:none;font:inherit;cursor:pointer;border:1px solid #0000;border-radius:8px;padding:5px 14px;font-size:13px;line-height:1.5}.Kwoi6G_discard{border-color:var(--dsw-alias-border-l2);color:var(--dsw-alias-label-secondary);background:0 0}.Kwoi6G_discard:hover:not(:disabled){color:var(--dsw-alias-label-primary);border-color:var(--dsw-alias-label-dimmed)}.Kwoi6G_save{background:var(--dsw-alias-label-primary);color:var(--dsw-alias-bg-layer-3)}.Kwoi6G_discard:disabled,.Kwoi6G_save:disabled{opacity:.4;cursor:default}.Kwoi6G_discard:focus-visible,.Kwoi6G_save:focus-visible{outline:2px solid var(--dsw-alias-brand-primary);outline-offset:1px}.Kwoi6G_field{flex-direction:column;gap:6px;padding:12px 0;display:flex}.Kwoi6G_field+.Kwoi6G_field{border-top:1px solid var(--dsw-alias-border-l2)}.Kwoi6G_head{align-items:center;gap:8px;display:flex}.Kwoi6G_label{min-width:0;color:var(--dsw-alias-label-primary);flex:1;font-size:13px;font-weight:500;line-height:1.5}.Kwoi6G_badges{align-items:center;gap:8px;display:inline-flex}.Kwoi6G_badge{white-space:nowrap;background:var(--dsw-alias-bg-module-platform);color:var(--dsw-alias-label-secondary);border-radius:999px;padding:1px 8px;font-size:11px;font-weight:500;line-height:17px}.Kwoi6G_reset{font:inherit;color:var(--dsw-alias-label-secondary);cursor:pointer;background:0 0;border:none;padding:0;font-size:12px;line-height:1.5}.Kwoi6G_reset:hover:not(:disabled){color:var(--dsw-alias-label-primary)}.Kwoi6G_reset:disabled{cursor:default}.Kwoi6G_reset:focus-visible{outline:2px solid var(--dsw-alias-brand-primary);outline-offset:2px}.Kwoi6G_input,.Kwoi6G_select{border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-3);height:34px;font:inherit;color:var(--dsw-alias-label-primary);border-radius:8px;padding:0 12px;font-size:13px;line-height:1.5}.Kwoi6G_input:focus-visible,.Kwoi6G_select:focus-visible{border-color:var(--dsw-alias-brand-primary);outline:none}.Kwoi6G_input:disabled,.Kwoi6G_select:disabled{color:var(--dsw-alias-label-tertiary);cursor:default}.Kwoi6G_inputInvalid{border:1px solid var(--dsw-alias-label-error);background:var(--dsw-alias-bg-layer-3);height:34px;font:inherit;color:var(--dsw-alias-label-primary);border-radius:8px;padding:0 12px;font-size:13px;line-height:1.5}.Kwoi6G_inputInvalid:focus-visible{outline:2px solid var(--dsw-alias-label-error);outline-offset:1px;border-color:var(--dsw-alias-label-error)}.Kwoi6G_invalid{color:var(--dsw-alias-label-error);margin:0;font-size:12px;line-height:1.5}.Kwoi6G_hint{color:var(--dsw-alias-label-tertiary);margin:0;font-size:12px;line-height:1.5}@media (prefers-reduced-motion:reduce){.Kwoi6G_card,.Kwoi6G_header,.Kwoi6G_chevron,.Kwoi6G_chevronOpen,.Kwoi6G_discard,.Kwoi6G_save{transition:none}}";
+		const css = ".Kwoi6G_card{border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-3);border-radius:12px;list-style:none;transition:border-color .16s,background .16s}.Kwoi6G_card:hover{border-color:var(--dsw-alias-label-dimmed)}.Kwoi6G_cardOpen{background:var(--dsw-alias-bg-layer-2);border-color:var(--dsw-alias-label-dimmed)}.Kwoi6G_header{appearance:none;width:100%;font:inherit;color:inherit;text-align:left;cursor:pointer;background:0 0;border:0;border-radius:12px;align-items:center;gap:12px;padding:14px 16px;display:flex}.Kwoi6G_header:focus-visible{outline:2px solid var(--dsw-alias-brand-primary);outline-offset:-2px}.Kwoi6G_headText{flex-direction:column;flex:1;gap:4px;min-width:0;display:flex}.Kwoi6G_name{color:var(--dsw-alias-label-primary);font-size:15px;font-weight:600;line-height:1.4}.Kwoi6G_description{color:var(--dsw-alias-label-tertiary);font-size:13px;line-height:1.5}.Kwoi6G_pending{white-space:nowrap;background:var(--dsw-alias-bg-module-platform);color:var(--dsw-alias-label-secondary);border-radius:999px;flex:none;padding:1px 8px;font-size:11px;font-weight:500;line-height:17px}.Kwoi6G_chevron{color:var(--dsw-alias-label-tertiary);flex:none;transition:transform .16s}.Kwoi6G_chevronOpen{transform:rotate(180deg)}.Kwoi6G_body{border-top:1px solid var(--dsw-alias-border-l2);margin:0 16px;padding-bottom:8px}.Kwoi6G_readOnly{color:var(--dsw-alias-label-tertiary);margin:12px 0 0;font-size:12px;line-height:1.5}.Kwoi6G_notExposed{color:var(--dsw-alias-state-warn-primary);margin:12px 0 0;font-size:12px;line-height:1.5}.Kwoi6G_footer{border-top:1px solid var(--dsw-alias-border-l2);justify-content:flex-end;align-items:center;gap:8px;padding:12px 0 4px;display:flex}.Kwoi6G_failed{min-width:0;color:var(--dsw-alias-label-error);text-overflow:ellipsis;white-space:nowrap;flex:1;margin:0;font-size:12px;line-height:1.5;overflow:hidden}.Kwoi6G_discard,.Kwoi6G_save{appearance:none;font:inherit;cursor:pointer;border:1px solid #0000;border-radius:8px;padding:5px 14px;font-size:13px;line-height:1.5}.Kwoi6G_discard{border-color:var(--dsw-alias-border-l2);color:var(--dsw-alias-label-secondary);background:0 0}.Kwoi6G_discard:hover:not(:disabled){color:var(--dsw-alias-label-primary);border-color:var(--dsw-alias-label-dimmed)}.Kwoi6G_save{background:var(--dsw-alias-label-primary);color:var(--dsw-alias-bg-layer-3)}.Kwoi6G_discard:disabled,.Kwoi6G_save:disabled{opacity:.4;cursor:default}.Kwoi6G_discard:focus-visible,.Kwoi6G_save:focus-visible{outline:2px solid var(--dsw-alias-brand-primary);outline-offset:1px}.Kwoi6G_field{flex-direction:column;gap:6px;padding:12px 0;display:flex}.Kwoi6G_field+.Kwoi6G_field{border-top:1px solid var(--dsw-alias-border-l2)}.Kwoi6G_head{align-items:center;gap:8px;display:flex}.Kwoi6G_label{min-width:0;color:var(--dsw-alias-label-primary);flex:1;font-size:13px;font-weight:500;line-height:1.5}.Kwoi6G_badges{align-items:center;gap:8px;display:inline-flex}.Kwoi6G_badge{white-space:nowrap;background:var(--dsw-alias-bg-module-platform);color:var(--dsw-alias-label-secondary);border-radius:999px;padding:1px 8px;font-size:11px;font-weight:500;line-height:17px}.Kwoi6G_reset{font:inherit;color:var(--dsw-alias-label-secondary);cursor:pointer;background:0 0;border:none;padding:0;font-size:12px;line-height:1.5}.Kwoi6G_reset:hover:not(:disabled){color:var(--dsw-alias-label-primary)}.Kwoi6G_reset:disabled{cursor:default}.Kwoi6G_reset:focus-visible{outline:2px solid var(--dsw-alias-brand-primary);outline-offset:2px;outline:2px solid var(--dsw-alias-brand-primary);outline-offset:2px}.Kwoi6G_input,.Kwoi6G_select{border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-3);height:34px;font:inherit;color:var(--dsw-alias-label-primary);border-radius:8px;padding:0 12px;font-size:13px;line-height:1.5}.Kwoi6G_input:focus-visible,.Kwoi6G_select:focus-visible{border-color:var(--dsw-alias-brand-primary);outline:none}.Kwoi6G_input:disabled,.Kwoi6G_select:disabled{color:var(--dsw-alias-label-tertiary);cursor:default}.Kwoi6G_inputInvalid{border:1px solid var(--dsw-alias-label-error);background:var(--dsw-alias-bg-layer-3);height:34px;font:inherit;color:var(--dsw-alias-label-primary);border-radius:8px;padding:0 12px;font-size:13px;line-height:1.5}.Kwoi6G_inputInvalid:focus-visible{outline:2px solid var(--dsw-alias-label-error);outline-offset:1px;border-color:var(--dsw-alias-label-error)}.Kwoi6G_invalid{color:var(--dsw-alias-label-error);margin:0;font-size:12px;line-height:1.5}.Kwoi6G_hint{color:var(--dsw-alias-label-tertiary);margin:0;font-size:12px;line-height:1.5}@media (prefers-reduced-motion:reduce){.Kwoi6G_card,.Kwoi6G_header,.Kwoi6G_chevron,.Kwoi6G_chevronOpen,.Kwoi6G_discard,.Kwoi6G_save{transition:none}}";
 		const tagId = "@linxin666/dsh-remote-web-ui/settings-card.module.css";
 		if (typeof document !== "undefined" && document.querySelector("style[data-plugin-css=" + JSON.stringify(tagId) + "]") === null) {
 			const tag = document.createElement("style");
@@ -2258,12 +2260,12 @@ window.__ModuleLoader__.load({
 		//#endregion
 		//#region src/client/PluginSettingsCard.tsx
 		/**
-		* Shared chrome for the plugin settings card: a disclosure header naming the
-		* plugin and what its settings govern, the controls inside, and the save that
-		* writes them. Renders nothing while the namespace is unavailable — a
+		* Family-shared chrome for plugin settings cards: a disclosure header naming
+		* the plugin and what its settings govern, the controls inside, and the save
+		* that writes them. Renders nothing while the namespace is unavailable — a
 		* deployment that does not compose the owning plugin should show no trace of
-		* it. Mirrors the official ui-plugin-config PluginCard in a self-contained
-		* slice (this package must not depend on a sibling UI package).
+		* it. Inlined into each consumer's client bundle; mirrors the official
+		* ui-plugin-config PluginCard in a self-contained slice.
 		*/
 		/**
 		* Render one plugin settings card.
@@ -2275,6 +2277,7 @@ window.__ModuleLoader__.load({
 			const { state } = props;
 			if (!state.available) return null;
 			const title = props.t(props.titleKey);
+			const description = props.t(props.descriptionKey);
 			const blocked = !state.dirty || state.invalid || state.saving;
 			const cardClass = open ? `${settings_card_module_css_default.cardOpen} ${settings_card_module_css_default.card}` : settings_card_module_css_default.card;
 			if (!state.exposed) return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("li", {
@@ -2291,10 +2294,12 @@ window.__ModuleLoader__.load({
 						className: settings_card_module_css_default.headText,
 						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
 							className: settings_card_module_css_default.name,
+							title,
 							children: title
 						}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
 							className: settings_card_module_css_default.description,
-							children: props.t(props.descriptionKey)
+							title: description,
+							children: description
 						})]
 					}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("svg", {
 						width: "14",
@@ -2332,14 +2337,17 @@ window.__ModuleLoader__.load({
 							className: settings_card_module_css_default.headText,
 							children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
 								className: settings_card_module_css_default.name,
+								title,
 								children: title
 							}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
 								className: settings_card_module_css_default.description,
-								children: props.t(props.descriptionKey)
+								title: description,
+								children: description
 							})]
 						}),
 						state.dirty ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
 							className: settings_card_module_css_default.pending,
+							title: props.t("settings.unsaved"),
 							children: props.t("settings.unsaved")
 						}) : null,
 						/* @__PURE__ */ (0, react_jsx_runtime.jsx)("svg", {
@@ -2367,10 +2375,10 @@ window.__ModuleLoader__.load({
 						/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 							className: settings_card_module_css_default.footer,
 							children: [
-								state.failed ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+								state.failed ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("p", {
 									className: settings_card_module_css_default.failed,
 									role: "status",
-									children: props.t("settings.saveFailed")
+									children: [props.t("settings.saveFailed"), state.failedReason ? " - " + state.failedReason : ""]
 								}) : null,
 								/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
 									type: "button",
@@ -2494,8 +2502,9 @@ window.__ModuleLoader__.load({
 		}
 		//#endregion
 		//#region src/client/settings-form.ts
-		/** A whole-number field. An empty draft clears the field; any other draft that is not a finite number blocks the save. */
-		function numberField(field) {
+		/** A whole- or decimal-number field. An empty draft clears the field; any other draft that is not a finite number within the constraints blocks the save. */
+		function numberField(field, constraints = {}) {
+			const { integer = false, min } = constraints;
 			return {
 				field,
 				format: (value) => typeof value === "number" ? String(value) : "",
@@ -2503,10 +2512,13 @@ window.__ModuleLoader__.load({
 					const trimmed = text.trim();
 					if (trimmed === "") return { kind: "clear" };
 					const parsed = Number(trimmed);
-					return Number.isFinite(parsed) ? {
+					if (!Number.isFinite(parsed)) return void 0;
+					if (integer && !Number.isInteger(parsed)) return void 0;
+					if (min !== void 0 && parsed < min) return void 0;
+					return {
 						kind: "set",
 						value: parsed
-					} : void 0;
+					};
 				}
 			};
 		}
@@ -2530,11 +2542,13 @@ window.__ModuleLoader__.load({
 				field,
 				format: (value) => typeof value === "boolean" ? String(value) : "",
 				parse: (text) => {
-					if (text === "true") return {
+					const trimmed = text.trim();
+					if (trimmed === "") return { kind: "clear" };
+					if (trimmed === "true") return {
 						kind: "set",
 						value: true
 					};
-					if (text === "false") return {
+					if (trimmed === "false") return {
 						kind: "set",
 						value: false
 					};
@@ -2556,6 +2570,7 @@ window.__ModuleLoader__.load({
 			listeners = /* @__PURE__ */ new Set();
 			saving = false;
 			failed = false;
+			failedReason;
 			/** @param scope - the bound settings scope for this card's namespace. */
 			constructor(scope, specs) {
 				this.scope = scope;
@@ -2583,7 +2598,8 @@ window.__ModuleLoader__.load({
 					dirty: plan.length > 0,
 					invalid: plan.some((item) => item.run === void 0),
 					saving: this.saving,
-					failed: this.failed
+					failed: this.failed,
+					...this.failedReason === void 0 ? {} : { failedReason: this.failedReason }
 				};
 			}
 			/** Read one field's state from the effective section and its staged draft. */
@@ -2624,28 +2640,50 @@ window.__ModuleLoader__.load({
 						if (this.staged.size === 0 && !this.failed) return;
 						this.staged.clear();
 						this.failed = false;
+						this.failedReason = void 0;
 						this.publish();
 					}
 				};
 			}
 			/**
 			* Write every staged edit, then re-seed from what the Host accepted.
+			*
+			* When the scope carries the optional batch surface (the dsh-web-ui
+			* bridge scope), every planned write rides one mutation so cross-field
+			* validate hooks (baseURL+model) judge the batch as a unit instead of
+			* deadlocking on per-field writes. Otherwise the per-field loop runs.
+			* A field lands only when the Host reports it held the staged value; a
+			* landed field's draft is dropped, a failed one stays staged for the user.
 			* @returns settlement after every write and the read-back.
 			*/
 			async save() {
 				const plan = this.plan();
-				const writes = plan.flatMap((item) => item.run === void 0 ? [] : [item.run]);
-				if (plan.length === 0 || this.saving || writes.length !== plan.length) return;
+				const valid = plan.filter((item) => item.run !== void 0);
+				if (plan.length === 0 || this.saving || valid.length !== plan.length) return;
+				const plannedWrites = valid.map((item) => item.op);
+				const fields = new Set(plan.map((item) => item.field));
 				this.saving = true;
 				this.failed = false;
+				this.failedReason = void 0;
 				this.publish();
-				let landed = true;
-				for (const write of writes) landed = await write() && landed;
-				if (landed) this.staged.clear();
+				const landed = /* @__PURE__ */ new Set();
+				const batch = this.batchedScope();
+				if (batch !== void 0) {
+					const result = await batch.mutate(plannedWrites);
+					if (result.ok) {
+						for (const field of result.fields) if (field.landed) landed.add(field.field);
+					} else this.failedReason = result.message;
+				} else for (const item of valid) if (await item.run()) landed.add(item.field);
+				for (const field of fields) if (landed.has(field)) this.staged.delete(field);
 				this.saving = false;
-				this.failed = !landed;
+				this.failed = landed.size !== fields.size;
 				this.publish();
 			}
+			/** The scope's batch surface when it supports one; undefined conservatively otherwise. */
+			batchedScope() {
+				const candidate = this.scope;
+				return typeof candidate?.mutate === "function" ? candidate : void 0;
+			}
 			/**
 			* Every staged edit a save would write. An entry whose draft is not a value
 			* its field accepts carries no write: the form is still dirty, and the save
@@ -2660,6 +2698,10 @@ window.__ModuleLoader__.load({
 					if (staged.clear) {
 						if (this.stored(field)) plan.push({
 							field,
+							op: {
+								field,
+								op: "unset"
+							},
 							run: () => this.clear(field)
 						});
 						continue;
@@ -2668,14 +2710,27 @@ window.__ModuleLoader__.load({
 					const write = spec.parse(staged.text);
 					if (write === void 0) plan.push({
 						field,
+						op: {
+							field,
+							op: "unset"
+						},
 						run: void 0
 					});
 					else if (write.kind === "clear") plan.push({
 						field,
+						op: {
+							field,
+							op: "unset"
+						},
 						run: () => this.clear(field)
 					});
 					else plan.push({
 						field,
+						op: {
+							field,
+							op: "set",
+							value: write.value
+						},
 						run: () => this.store(field, write.value)
 					});
 				}
@@ -2687,11 +2742,13 @@ window.__ModuleLoader__.load({
 			}
 			async store(field, value) {
 				await this.scope.set(field, value);
+				if (this.specOf(field).secret) return true;
 				return this.userLayer()?.[field] === value;
 			}
 			stage(field, edit) {
 				this.staged.set(field, edit);
 				this.failed = false;
+				this.failedReason = void 0;
 				this.publish();
 			}
 			specOf(field) {
@@ -3027,6 +3084,8 @@ window.__ModuleLoader__.load({
 			"update.error.notFound": "未找到 dsh-web-ui 聚合包安装，无法更新。",
 			"update.error.link": "当前为本地开发模式（链接安装），无法自动更新。",
 			"update.error.pnpmFailed": "更新执行失败（pnpm 退出码 {code}），详见下方输出。",
+			"update.error.stale": "更新命令已执行，但安装版本未变化。常见原因：pnpm 11 的 minimumReleaseAge 门禁会静默跳过发布不足 24 小时的新版本。请在 profile 目录（~/.dsh/profiles/<profile>）的 pnpm-workspace.yaml 中配置 minimumReleaseAgeExclude（例如 \"@linxin666/*\"）或 minimumReleaseAge: 0 后重新点击更新。",
+			"update.error.verifyFailed": "更新命令已执行，但无法核对安装后的版本（可能是 registry 探测失败或安装路径变化）。请查看下方输出，或稍后重试。",
 			"update.error.unknown": "更新失败，请重试。"
 		};
 		/** English dictionary, checked complete against the zh key set. */
@@ -3129,6 +3188,8 @@ window.__ModuleLoader__.load({
 			"update.error.notFound": "The dsh-web-ui aggregate package is not installed; nothing to update.",
 			"update.error.link": "Local development mode (link install) — automatic update is unavailable.",
 			"update.error.pnpmFailed": "The update failed (pnpm exited with code {code}); see the output below.",
+			"update.error.stale": "The update command ran but the installed versions did not change. Likely cause: the pnpm 11 minimumReleaseAge gate silently skips releases published less than 24 hours ago. Add minimumReleaseAgeExclude (e.g. \"@linxin666/*\") or set minimumReleaseAge: 0 in pnpm-workspace.yaml under the profile directory (~/.dsh/profiles/<profile>), then run the update again.",
+			"update.error.verifyFailed": "The update command ran but the installed versions could not be verified afterwards (registry probe failed or the install path changed). Inspect the output below, or retry later.",
 			"update.error.unknown": "Update failed; try again."
 		};
 		//#endregion