#系统架构

%%{init: {'themeVariables': {'fontSize': '9px', 'nodeBorder': '1px', 'clusterBorder': '1px', 'edgeLabelHeight': '8px'}}}%%
graph TB
    subgraph Frontend["前端层 (Frontend Layer)"]
        direction LR
        main_js["main.js<br/>应用入口"]
        ui_js["src/ui/<br/>71 个 UI 模块"]
        api_js["api.js<br/>IPC + REST 封装"]
        ws_js["websocket.js<br/>流量流"]
        mod_js["src/modules/<br/>连接 / 流量图 / 后端事件"]
        i18n_js["i18n.js<br/>14 种语言"]
    end

    subgraph Bridge["Tauri IPC 桥接层 (Bridge Layer)"]
        direction LR
        cmd_registry["generate_handler!<br/>180 个命令"]
        event_sys["emit_to_main<br/>15 个后端事件"]
        state_mgr["Tauri State<br/>托管状态"]
        rate_lim["RateLimiter<br/>命令限流"]
    end

    subgraph Backend["Rust 后端层 (Backend Layer)"]
        direction LR
        lib_rs["lib.rs<br/>入口 / 设置 / 生命周期"]
        core_mgr["core_manager.rs<br/>→ core/ 子模块"]
        prism_rs["prism.rs<br/>→ prism/ Prism Engine"]
        sys_proxy["sys_proxy.rs<br/>系统代理"]
        tray_rs["tray.rs<br/>系统托盘"]
        updater["updater.rs<br/>内核 / Geo / 客户端更新"]
        more_rs["elevation / process_icon /<br/>network_coordinator / backup ..."]
        zcore["crates/core<br/>zephyr-core 纯逻辑"]
    end

    subgraph Core["Mihomo 内核层 (Core Layer)"]
        direction LR
        rest_api["RESTful API<br/>127.0.0.1:9090"]
        http_stream["HTTP Streaming<br/>/traffic"]
        tun["TUN 虚拟网卡"]
        rule_engine["规则引擎"]
        dns_resolver["DNS 解析"]
    end

    Frontend -->|"invoke() / listen()"| Bridge
    Bridge -->|"Command Handlers"| Backend
    Backend -->|"进程启动<br/>REST API<br/>系统 API"| Core
    Core -->|"HTTP Streaming<br/>JSON 响应"| Frontend

    style Frontend fill:#e3f2fd,stroke:#1565c0,color:#0d47a1
    style Bridge fill:#fff3e0,stroke:#e65100,color:#bf360c
    style Backend fill:#e8f5e9,stroke:#2e7d32,color:#1b5e20
    style Core fill:#fce4ec,stroke:#c62828,color:#b71c1c

%%{init: {'themeVariables': {'fontSize': '10px', 'actorTextColor': '#ccc', 'signalColor': '#666', 'labelTextColor': '#999', 'labelBoxBkgColor': '#333', 'labelBoxBorderColor': '#555', 'lineColor': '#666', 'actorBkg': '#333', 'actorBorder': '#555', 'actorTextColor': '#ccc', 'signalTextColor': '#ccc', 'noteBkgColor': '#333', 'noteTextColor': '#ccc', 'noteBorderColor': '#555'}}}%%
sequenceDiagram
    participant User as 用户
    participant View as View (DOM)
    participant VM as ViewModel (src/ui/)
    participant Store as appStore / Bus
    participant API as api.js
    participant IPC as Tauri IPC Bridge
    participant Rust as Rust Command Handler
    participant Core as Mihomo Core / 文件系统

    User->>View: 点击 UI 元素
    View->>VM: addEventListener 回调
    VM->>VM: 状态校验 / 参数组装
    VM->>API: invoke(COMMANDS.X, params)
    API->>IPC: __TAURI_INTERNALS__.invoke()
    IPC->>Rust: Command Handler 分发
    Rust->>Rust: 限流检查（部分命令）
    Rust->>Core: 操作 Mihomo 或读写文件
    Core-->>Rust: 返回结果
    Rust-->>IPC: Result<T, String> 序列化
    IPC-->>API: Promise resolve / reject
    API-->>VM: 返回结果
    VM->>Store: appStore.set() / Bus.emit()
    Store->>View: bind() 订阅 → 更新 DOM
    View-->>User: 界面重新渲染

%%{init: {'themeVariables': {'fontSize': '10px', 'nodeBorder': '1px', 'clusterBorder': '1px', 'edgeLabelHeight': '10px'}, 'flowchart': {'curve': 'basis', 'nodeSpacing': 15, 'rankSpacing': 25}}}%%
graph LR
    subgraph CommandPath["命令通路 (请求-响应)"]
        A["用户操作"] --> B["src/ui/<br/>事件处理"]
        B --> C["api.js<br/>invoke"]
        C --> D["Tauri IPC Bridge"]
        D --> E["Rust Command Handler"]
        E --> F["core/ · prism/ · sys_proxy<br/>tray · updater · elevation ..."]
        F --> G["Result&lt;T, String&gt;<br/>返回前端"]
    end

    subgraph TrafficPath["流量监控通路 (推送流)"]
        H["Mihomo Core"] --> I["GET /traffic<br/>HTTP Streaming"]
        I --> J["websocket.js<br/>fetch ReadableStream"]
        J --> K["滑动窗口<br/>60 数据点"]
        K --> L["modules/traffic-chart.js<br/>Canvas 2D"]
        L --> M["requestAnimationFrame<br/>节流渲染"]
    end

    style CommandPath fill:#e3f2fd,stroke:#1565c0,color:#0d47a1
    style TrafficPath fill:#fce4ec,stroke:#c62828,color:#b71c1c

%%{init: {'themeVariables': {'fontSize': '9px', 'nodeBorder': '1px', 'clusterBorder': '1px', 'edgeLabelHeight': '8px'}, 'flowchart': {'curve': 'basis', 'nodeSpacing': 12, 'rankSpacing': 15}}}%%
flowchart TD
    A["start_core(config_path, custom_args, secret?, force?)"] --> B{"获取 CORE_STARTING 锁"}
    B -->|"被占用"| B2["每 200ms 重试<br/>超过 10s 强制重置"]
    B2 --> B
    B -->|"获取成功"| C{"macOS：TUN 已开启<br/>且同一配置的 root 内核仍健康?"}
    C -->|"是（非 force）"| REUSE["直接复用<br/>返回已记录的 secret + port"]
    C -->|"否"| D["连接排空<br/>DELETE /connections"]
    D --> E["停止旧内核<br/>kill_mihomo()<br/>（macOS TUN 根进程走提权路径）"]
    E --> F{"macOS?"}
    F -->|"是"| G["等待 API 端口释放<br/>最多 5 秒"]
    F -->|"否"| H
    G --> H["生成 / 采用 API Secret<br/>32 位字母数字"]
    H --> I["prepare_runtime_config()<br/>注入 external-controller + secret<br/>合并 settings.json 全局偏好"]
    I --> J["写入 core/run_config.yaml"]
    J --> K["预检：mihomo -t -f run_config.yaml"]
    K -->|"失败"| ERR1["返回错误<br/>日志可在错误卡片中查看"]
    K -->|"通过"| L{"需要 TUN 且为 macOS?"}
    L -->|"是"| ROOT["restart_core_as_root<br/>管理员授权后以 root 启动"]
    L -->|"否"| M["spawn_with_cache_retry<br/>启动 zephyr-mihomo<br/>cache.db 锁冲突时重试"]
    M --> N["孤儿防护<br/>Windows Job Object<br/>Unix 进程组 + PR_SET_PDEATHSIG"]
    N --> O["认证健康检查<br/>GET /version + Bearer<br/>错误令牌必须返回 401<br/>最多 20 次，50ms→1s 退避"]
    ROOT --> O
    O -->|"失败"| ERR2["终止子进程<br/>返回错误"]
    O -->|"通过"| P["写入 CoreData<br/>通知网络协调器 / 刷新托盘图标"]
    P --> Q["返回 CoreStartResult<br/>secret + port + active_config"]

    style ERR1 fill:#ffcdd2,stroke:#c62828,color:#b71c1c
    style ERR2 fill:#ffcdd2,stroke:#c62828,color:#b71c1c
    style REUSE fill:#c8e6c9,stroke:#2e7d32,color:#1b5e20
    style Q fill:#c8e6c9,stroke:#2e7d32,color:#1b5e20

%%{init: {'themeVariables': {'fontSize': '10px', 'actorTextColor': '#ccc', 'signalColor': '#666', 'labelTextColor': '#999', 'labelBoxBkgColor': '#333', 'labelBoxBorderColor': '#555', 'lineColor': '#666', 'actorBkg': '#333', 'actorBorder': '#555', 'actorTextColor': '#ccc', 'signalTextColor': '#ccc', 'noteBkgColor': '#333', 'noteTextColor': '#ccc', 'noteBorderColor': '#555'}}}%%
sequenceDiagram
    participant FE as 前端 (ui/settings/subscriptions.js)
    participant TI as Tauri IPC
    participant SUB as core/subscription.rs
    participant NET as 网络 (直连 / Mihomo)
    participant SAN as zephyr-core 清洗
    participant FS as 文件系统

    FE->>TI: invoke("download_sub", {name, url?, userAgent?, overwrite?})
    TI->>SUB: download_sub()
    Note over SUB: 限流：5 秒内只允许一次
    SUB->>SUB: URL 为空时从 metadata.json 解析<br/>URL / 名称合法性校验

    alt Tier 1：直连
        SUB->>NET: DNS 预解析 + IP 校验 + DNS pinning
        NET-->>SUB: 响应
    else Tier 2：经 Mihomo mixed-port 代理
        SUB->>NET: HTTP GET via 托管内核
        NET-->>SUB: 响应
    else Tier 3：临时切到 global 模式
        SUB->>NET: 切换 GLOBAL 到可用节点后重试<br/>完成或中断时自动恢复原模式与选择
        NET-->>SUB: 响应
    end

    SUB->>SUB: 拒绝空响应 / Base64 自动解码
    SUB->>SAN: quote_short_id_values + serde_yaml 解析<br/>remove_dangerous_keys
    SAN-->>SUB: 清洗后的 YAML
    SUB->>SUB: 新订阅：Content-Disposition / 规则推断名称<br/>sanitize_config_file_name + 路径校验
    SUB->>FS: 临时文件 → 原子替换<br/>（encrypt_configs 开启时加密写入）<br/>更新 metadata.json（URL 以 AES-256-GCM 加密）
    FS-->>SUB: 完成
    SUB-->>FE: DownloadSubResult

%%{init: {'themeVariables': {'fontSize': '10px', 'actorTextColor': '#ccc', 'signalColor': '#666', 'labelTextColor': '#999', 'labelBoxBkgColor': '#333', 'labelBoxBorderColor': '#555', 'lineColor': '#666', 'actorBkg': '#333', 'actorBorder': '#555', 'actorTextColor': '#ccc', 'signalTextColor': '#ccc', 'noteBkgColor': '#333', 'noteTextColor': '#ccc', 'noteBorderColor': '#555'}}}%%
sequenceDiagram
    participant FE as 前端 (src/ui/)
    participant TI as Tauri IPC
    participant CFG as config_manager.rs
    participant ZC as zephyr-core merge
    participant FILE as run_config.yaml / 订阅文件
    participant API as Mihomo API

    FE->>TI: invoke("update_config", {patch})
    TI->>CFG: update_config(patch)
    CFG->>ZC: update_config_core(patch)
    ZC->>FILE: 读取 run_config.yaml
    ZC->>ZC: JSON → YAML
    ZC->>ZC: remove_dangerous_keys<br/>提取安全键（external-controller / secret / tun.enable）
    ZC->>ZC: merge_yaml（深度上限 50，null 表示删除键）
    ZC->>ZC: 再次清洗 + 恢复安全键
    ZC->>FILE: 写回 run_config.yaml
    CFG->>FILE: 把同一补丁合并进当前订阅文件<br/>（保持其加密形态）
    CFG->>API: PUT /configs?force=true {path}
    API-->>CFG: 2xx / 错误
    CFG-->>FE: ConfigUpdateResult { files_saved, hot_reload_success, message }

%%{init: {'themeVariables': {'fontSize': '9px', 'nodeBorder': '1px', 'clusterBorder': '1px', 'edgeLabelHeight': '8px'}, 'flowchart': {'curve': 'basis', 'nodeSpacing': 12, 'rankSpacing': 15}}}%%
flowchart TD
    A["enable_sysproxy(server, bypass?)"] --> B["validate_proxy_server<br/>仅允许 127.0.0.1 / localhost / ::1<br/>拒绝端口 0"]
    B --> C{"地址合法?"}
    C -->|"不合法"| ERR["返回错误"]
    C -->|"合法"| D{"平台"}
    D -->|"Windows"| E["Windows 分支"]
    D -->|"macOS"| F["macOS 分支"]
    D -->|"Linux"| G["Linux 分支"]

    subgraph Win["Windows -- 注册表写入"]
        E1["备份 HKCU Internet Settings<br/>ProxyEnable / ProxyServer / ProxyOverride"]
        E2["写入新值"]
        E3["InternetSetOptionW<br/>SETTINGS_CHANGED + REFRESH"]
        E4{"成功?"}
        E5["失败时回滚备份值"]
        E1 --> E2 --> E3 --> E4
        E4 -->|"失败"| E5
    end

    subgraph Mac["macOS -- networksetup 逐服务"]
        F1["列出所有网络服务<br/>跳过已禁用服务"]
        F2["Web / Secure Web / SOCKS 代理<br/>-setwebproxy / -setsecurewebproxy<br/>-setsocksfirewallproxy"]
        F3["打开对应开关"]
        F1 --> F2 --> F3
    end

    subgraph Lin["Linux -- 对所有可用桌面环境逐一尝试"]
        G1["GNOME：gsettings<br/>org.gnome.system.proxy"]
        G2["KDE：kwriteconfig6/5 写 kioslaverc<br/>dbus 通知 KIODaemon / KWin"]
        G3["XFCE：xfconf-query"]
        G4{"任一成功?"}
        G1 --> G4
        G2 --> G4
        G3 --> G4
    end

    E --> Win
    F --> Mac
    G --> Lin

    E4 -->|"成功"| OWN["写入所有权标记<br/>.sys-proxy-ownership"]
    F3 --> OWN
    G4 -->|"是"| OWN
    G4 -->|"否"| ERR
    OWN --> DONE["返回 Ok"]

    style ERR fill:#ffcdd2,stroke:#c62828,color:#b71c1c
    style DONE fill:#c8e6c9,stroke:#2e7d32,color:#1b5e20
    style Win fill:#e3f2fd,stroke:#1565c0,color:#0d47a1
    style Mac fill:#fff3e0,stroke:#e65100,color:#bf360c
    style Lin fill:#e8f5e9,stroke:#2e7d32,color:#1b5e20

%%{init: {'themeVariables': {'fontSize': '9px', 'nodeBorder': '1px', 'clusterBorder': '1px', 'edgeLabelHeight': '8px'}, 'flowchart': {'curve': 'basis', 'nodeSpacing': 12, 'rankSpacing': 15}}}%%
flowchart TD
    A0["模块加载<br/>initBackendEventListeners()<br/>注册全局 error / unhandledrejection 转发"] --> A["initApp()"]
    A --> S0["Step 0: 等待后端事件监听就绪<br/>重置瞬态锁（isNetworkUpdating 等）"]
    S0 --> B["Step 1: 禁用右键菜单<br/>（拖拽区除外）"]
    B --> C["Step 2: applyTranslations()"]
    C --> D["Step 3: initWindowControls()"]
    D --> E["Step 4: 50ms 后显示窗口<br/>silent_start 时保持隐藏"]
    E --> F["Step 5: startCoreAndConfigure()<br/>invoke(start_core) → 设置 API 基址与 secret<br/>失败时显示错误卡片，重试直到成功"]
    F --> G["Step 6: 初始化 UI 模块<br/>initNavigation（各页面懒加载回调）<br/>initNavTooltips / initNoSubscriptionState / initChart<br/>initTrayEventListeners / initProxyToggle / initDnsRewriteToggle<br/>initModeSelector / initTunToggle / initProxyControls / initPlugins<br/>initSettings / initUwpExemption / autoApplyIfNeeded<br/>initNodeWheel / initHomeStats / initHeaderFit / initTablistKeys<br/>initShortcutSettings → initReactiveBindings"]
    G --> H["Step 7: Deep Link / 全局快捷键监听<br/>浏览器 online/offline → notify_network_change<br/>监听 network-state-changed"]
    H --> I["Step 8: is_machine_key_persisted<br/>未持久化则提示"]
    I --> J["Step 9: syncCoreConfig + updateTrayStatus + updateTrayMenu<br/>startUnifiedSync()（10s 周期）"]
    J --> K["Step 10: 控制台首页激活（若启用）<br/>scheduleAutoUpdateCheck()"]
    K --> L["Step 11: connectTraffic()<br/>/traffic 流 → 图表 + Bus TRAFFIC_UPDATE"]
    L --> M["Step 12: 监听 core-restarted-after-resume<br/>HOME_PAGE_MODE_CHANGED 等 Bus 事件<br/>注册 cleanup"]
    M --> N["Step 13: 心跳 heartbeat<br/>每 15s 一次 + 窗口获得焦点时"]

    style F fill:#fff3e0,stroke:#e65100,color:#bf360c
    style N fill:#c8e6c9,stroke:#2e7d32,color:#1b5e20

%%{init: {'themeVariables': {'fontSize': '9px', 'nodeBorder': '1px', 'clusterBorder': '1px', 'edgeLabelHeight': '8px'}, 'flowchart': {'curve': 'basis', 'nodeSpacing': 12, 'rankSpacing': 15}}}%%
flowchart TD
    subgraph Fingerprint["机器指纹采集"]
        FP1["Windows: MachineGuid + C 盘卷序列号"]
        FP2["macOS: IOPlatformUUID + IOPlatformSerialNumber"]
        FP3["Linux: /etc/machine-id + board_serial"]
    end

    FP1 --> COMBINE{"采集到指纹?"}
    FP2 --> COMBINE
    FP3 --> COMBINE

    COMBINE -->|"是"| JOIN["以 | 拼接"]
    JOIN --> PBKDF2["PBKDF2-HMAC-SHA256<br/>盐值: Zephyr_AES256_Key_Derivation<br/>迭代: 100,000 次<br/>输出: 32 字节"]
    COMBINE -->|"否"| FILE{"已有 .machine_key 文件?"}
    FILE -->|"是"| READ["读取 hex 编码的随机密钥"]
    FILE -->|"否"| GEN["生成 32 字节随机密钥<br/>hex 写入 .machine_key"]
    GEN -->|"写入失败"| SESSION["会话级密钥<br/>is_machine_key_persisted = false"]

    PBKDF2 --> KEY["32 字节 AES 密钥<br/>进程内缓存（OnceLock）"]
    READ --> KEY
    GEN --> KEY
    SESSION --> KEY

    KEY --> AES["AES-256-GCM<br/>12 字节随机 Nonce"]
    AES --> OUT["Base64( v2: + Nonce + Ciphertext + Tag )"]

    style Fingerprint fill:#e3f2fd,stroke:#1565c0,color:#0d47a1
    style PBKDF2 fill:#fff3e0,stroke:#e65100,color:#bf360c
    style AES fill:#e8f5e9,stroke:#2e7d32,color:#1b5e20
    style SESSION fill:#ffcdd2,stroke:#c62828,color:#b71c1c

%%{init: {'themeVariables': {'fontSize': '10px', 'nodeBorder': '1px', 'clusterBorder': '1px', 'edgeLabelHeight': '10px'}, 'flowchart': {'curve': 'basis', 'nodeSpacing': 12, 'rankSpacing': 25}}}%%
graph LR
    subgraph Backend["Rust 后端"]
        E1["backend-event / prism-event"]
        E2["profiles-imported"]
        E3["tray-sysproxy-changed / tray-tun-changed<br/>tray-mode-changed / tray-subscription-changed<br/>tray-proxy-changed"]
        E4["tray-copy-env-done / tray-copy-env-failed"]
        E5["core-download-status"]
        E6["core-restarted-after-resume"]
        E7["deep-link"]
        E8["global-shortcut"]
        E9["network-state-changed"]
    end

    subgraph Frontend["前端监听模块"]
        H1["modules/backend-events.js<br/>日志缓冲 + 错误 Toast"]
        H2["ui/settings.js<br/>刷新订阅列表"]
        H3["ui/tray.js<br/>同步开关 / 模式 / 订阅 / 节点"]
        H4["ui/tray.js<br/>复制结果提示"]
        H5["ui/settings.js + ui/update-dialog.js<br/>更新进度"]
        H6["main.js<br/>切换 API 基址与 secret 并恢复状态"]
        H7["ui/deep-link.js<br/>take_pending_deep_links"]
        H8["ui/global-shortcut.js<br/>执行快捷键动作"]
        H9["main.js<br/>记录网络变化日志"]
    end

    E1 --> H1
    E2 --> H2
    E3 --> H3
    E4 --> H4
    E5 --> H5
    E6 --> H6
    E7 --> H7
    E8 --> H8
    E9 --> H9

    style Backend fill:#e8f5e9,stroke:#2e7d32,color:#1b5e20
    style Frontend fill:#e3f2fd,stroke:#1565c0,color:#0d47a1

%%{init: {'themeVariables': {'fontSize': '9px', 'nodeBorder': '1px', 'clusterBorder': '1px', 'edgeLabelHeight': '8px'}}}%%
graph TD
    subgraph TauriState["Tauri State (全局注入)"]
        MS["MihomoState"]
        SS["SettingsState"]
        TS["TrayState"]
        PS["PrismState"]
        SCH["SchedulerState"]
        NC["NetworkCoordinatorHandle"]
    end

    subgraph CoreStructs["核心数据结构"]
        CD["CoreData<br/>process / secret / port<br/>proxy_endpoint / started_at"]
        PE["ProxyEndpoint<br/>port + scheme"]
        ST["Settings<br/>40 个字段"]
        TMS["TrayMenuState<br/>sys_proxy / tun / mode<br/>config / proxy / labels"]
        AP["AppPaths<br/>app_data / core / profiles"]
        CI["ConfigInfo<br/>name / url_display / sub_info"]
    end

    subgraph ResultStructs["返回值结构"]
        CSR["CoreStartResult<br/>secret + port + active_config"]
        CUR["ConfigUpdateResult"]
        RLR["ReadLogResult"]
    end

    MS --> CD
    CD --> PE
    SS --> ST
    TS --> TMS
    CD --> CSR
    AP --> CI

    style TauriState fill:#fff3e0,stroke:#e65100,color:#bf360c
    style CoreStructs fill:#e3f2fd,stroke:#1565c0,color:#0d47a1
    style ResultStructs fill:#e8f5e9,stroke:#2e7d32,color:#1b5e20

%%{init: {'themeVariables': {'fontSize': '9px', 'nodeBorder': '1px', 'clusterBorder': '1px', 'edgeLabelHeight': '8px'}}}%%
graph TD
    subgraph CommandFlow["命令通路 (请求-响应)"]
        direction LR
        CF1["用户操作"] --> CF2["api.js invoke()"]
        CF2 --> CF3["Tauri IPC"]
        CF3 --> CF4["Rust Handler"]
        CF4 --> CF5["Mihomo / 文件系统"]
        CF5 --> CF6["Result 回传"]
        CF6 --> CF7["appStore / Bus"]
        CF7 --> CF8["DOM 更新"]
    end

    subgraph ConfigFlow["配置写入通路 (热重载)"]
        direction LR
        CG1["UI 表单"] --> CG2["update_config(patch)"]
        CG2 --> CG3["清洗 + merge_yaml"]
        CG3 --> CG4["写 run_config.yaml<br/>+ 当前订阅文件"]
        CG4 --> CG5["PUT /configs?force=true"]
    end

    subgraph SettingsFlow["设置写入通路"]
        direction LR
        SF1["ui/settings-helpers.js<br/>串行队列"] --> SF2["patch_settings"]
        SF2 --> SF3["SettingsState 副本修改"]
        SF3 --> SF4["settings.json 原子写入"]
        SF4 --> SF5["成功后发布到内存"]
    end

    subgraph TrafficFlow["流量监控通路 (推送流)"]
        direction LR
        TF1["Mihomo"] --> TF2["GET /traffic"]
        TF2 --> TF3["websocket.js<br/>ReadableStream"]
        TF3 --> TF4["60 点滑动窗口"]
        TF4 --> TF5["traffic-chart.js<br/>Canvas 2D"]
    end

    subgraph SyncFlow["周期同步 (10s)"]
        direction LR
        SY1["startUnifiedSync"] --> SY2["get_sys_proxy<br/>get_tray_proxy_status<br/>has_sysproxy_ownership"]
        SY2 --> SY3["修正 UI 状态<br/>按所有权恢复代理<br/>校正托盘图标"]
    end

    style CommandFlow fill:#e3f2fd,stroke:#1565c0,color:#0d47a1
    style ConfigFlow fill:#fff3e0,stroke:#e65100,color:#bf360c
    style SettingsFlow fill:#f3e5f5,stroke:#6a1b9a,color:#4a148c
    style TrafficFlow fill:#fce4ec,stroke:#c62828,color:#b71c1c
    style SyncFlow fill:#e8f5e9,stroke:#2e7d32,color:#1b5e20

%%{init: {'themeVariables': {'fontSize': '9px', 'nodeBorder': '1px', 'clusterBorder': '1px', 'edgeLabelHeight': '8px'}}}%%
graph TB
    LIB["lib.rs<br/>入口 · 命令注册 · 状态管理"]

    LIB --> CM["core_manager.rs → core/<br/>进程 · 订阅 · 加密 · TUN · 日志"]
    LIB --> CFG["config_manager.rs<br/>运行配置热重载"]
    LIB --> PRISM["prism.rs → prism/<br/>Prism Engine"]
    LIB --> TR["tray.rs<br/>托盘"]
    LIB --> UP["updater.rs<br/>更新"]
    LIB --> SP["sys_proxy.rs<br/>系统代理"]
    LIB --> ELEV["elevation.rs<br/>Windows 提权重启"]
    LIB --> PI["process_icon.rs<br/>应用图标"]
    LIB --> NCO["network_coordinator/<br/>网络切换协调"]
    LIB --> MISC["deep_link · global_shortcut<br/>os_notification · backup<br/>uwp_loopback · webview_recovery"]
    LIB --> BE["backend_event.rs<br/>结构化事件"]

    TR --> SP
    TR --> CM
    UP --> CM
    UP --> MS["minisign_verify.rs"]
    CFG --> CM
    PRISM --> CM
    NCO --> PRISM
    CM --> NCO
    ELEV --> SP

    CM --> ZC["crates/core<br/>zephyr-core"]
    CFG --> ZC
    PRISM --> ZC
    LIB --> ZC

    subgraph TauriPlugins["Tauri 插件"]
        P1["autostart（便携模式不加载）"]
        P2["dialog · opener"]
        P3["global-shortcut · notification"]
        P4["window-state"]
        P5["single-instance（仅 release）"]
    end
    LIB --> TauriPlugins

    style LIB fill:#fff3e0,stroke:#e65100,color:#bf360c
    style CM fill:#e3f2fd,stroke:#1565c0,color:#0d47a1
    style CFG fill:#e8f5e9,stroke:#2e7d32,color:#1b5e20
    style SP fill:#fce4ec,stroke:#c62828,color:#b71c1c
    style TR fill:#f3e5f5,stroke:#6a1b9a,color:#4a148c
    style UP fill:#e0f7fa,stroke:#00695c,color:#004d40
    style PRISM fill:#e8eaf6,stroke:#283593,color:#1a237e
    style ZC fill:#efebe9,stroke:#4e342e,color:#3e2723

%%{init: {'themeVariables': {'fontSize': '9px', 'nodeBorder': '1px', 'clusterBorder': '1px', 'edgeLabelHeight': '8px'}, 'flowchart': {'curve': 'basis', 'nodeSpacing': 12, 'rankSpacing': 15}}}%%
flowchart TD
    A["run()"] --> B["平台预处理<br/>Windows：等待被替换的旧实例退出（提权重启）<br/>Linux：WebKit 渲染 / Wayland 环境变量"]
    B --> C["设置 Panic Hook"]
    C --> D["加载插件<br/>autostart（非便携）/ dialog / opener<br/>global-shortcut / notification / window-state<br/>single-instance（release，转发 clash:// 参数）"]
    D --> E["manage：MihomoState / TrayState / RateLimiter<br/>ShortcutRegistry / WebviewHealth / ExplicitExitFlag"]
    E --> F["setup()"]
    F --> F1["初始化事件句柄与 core 事件桥<br/>Windows AppUserModelID"]
    F1 --> F2["ensure_app_storage + 路径脱敏<br/>按配置初始化 TUN 标志"]
    F2 --> F3["读取 / 迁移 settings.json → SettingsState<br/>按设置启用日志持久化"]
    F3 --> F4["后台校准订阅文件加密状态"]
    F4 --> F5["PrismState / 订阅调度器 / 网络协调器"]
    F5 --> F6["init_tray<br/>Windows 监听任务栏主题"]
    F6 --> F7["处理命令行 deep link<br/>Windows 武装 WebView2 崩溃恢复"]
    F7 --> G["on_window_event + invoke_handler（180 个命令）"]
    G --> H["build + run 事件循环<br/>ExitRequested / Exit / Resumed"]

    style A fill:#fff3e0,stroke:#e65100,color:#bf360c
    style F fill:#e8f5e9,stroke:#2e7d32,color:#1b5e20
    style H fill:#c8e6c9,stroke:#2e7d32,color:#1b5e20

%%{init: {'themeVariables': {'fontSize': '9px', 'nodeBorder': '1px', 'clusterBorder': '1px', 'edgeLabelHeight': '8px'}, 'flowchart': {'curve': 'basis', 'nodeSpacing': 12, 'rankSpacing': 15}}}%%
flowchart TD
    A["get_latest_version()"] --> B["GitHub REST API 获取最新 Release<br/>失败时回退 releases.atom"]
    B --> C["按平台 / 架构选择资产<br/>x86_64 支持 v3 时优先 v3"]
    C --> D["前端比较版本并调用 update_core(url)"]
    D --> E{"URL 是官方<br/>MetaCubeX/mihomo Release?"}
    E -->|"否"| ERR1["拒绝"]
    E -->|"是"| F["流式下载到随机命名临时文件<br/>emit core-download-status"]
    F --> G["SHA-256 校验<br/>（GitHub 资产 digest）"]
    G -->|"不匹配"| ERR2["删除临时文件并报错"]
    G -->|"通过"| H["解压 .zip（Windows）/ .gz（其他）<br/>拒绝符号链接 / 压缩炸弹 / 非预期文件"]
    H --> I["停止内核（失败则中止更新）"]
    I --> J["旧二进制 → 备份<br/>新二进制 → 正式路径<br/>设置可执行权限"]
    J --> K["start_core 重启内核"]
    K -->|"成功"| L["删除备份<br/>emit Core ready"]
    K -->|"失败"| M["回滚备份二进制"]

    style ERR1 fill:#ffcdd2,stroke:#c62828,color:#b71c1c
    style ERR2 fill:#ffcdd2,stroke:#c62828,color:#b71c1c
    style M fill:#ffcdd2,stroke:#c62828,color:#b71c1c
    style L fill:#c8e6c9,stroke:#2e7d32,color:#1b5e20

%%{init: {'themeVariables': {'fontSize': '9px', 'nodeBorder': '1px', 'clusterBorder': '1px', 'edgeLabelHeight': '8px'}}}%%
graph TD
    MAIN["main.js<br/>应用入口"] --> API["api.js<br/>IPC + REST"]
    MAIN --> I18N["i18n.js"]
    MAIN --> WS["websocket.js<br/>/traffic 流"]
    MAIN --> BEV["modules/backend-events.js"]
    MAIN --> CHART["modules/traffic-chart.js"]
    MAIN --> CONN["modules/connections.js<br/>进入页面时初始化"]
    MAIN --> UI["src/ui/<br/>页面与组件"]
    MAIN -.->|"动态 import()"| LAZY["ui/logs.js · ui/rule-library.js<br/>ui/advanced.js · ui/lifecycle.js"]

    UI -->|"import"| API
    UI -->|"import"| STORE["ui/state.js · ui/events.js<br/>appStore / Bus"]
    UI -->|"import"| UTILS["src/utils/"]
    UI -->|"import"| SHARED["@zephyr/shared<br/>COMMANDS"]
    API --> SHARED
    WS --> API
    CONN --> API

    style MAIN fill:#fff3e0,stroke:#e65100,color:#bf360c
    style API fill:#e8f5e9,stroke:#2e7d32,color:#1b5e20
    style I18N fill:#f3e5f5,stroke:#6a1b9a,color:#4a148c
    style WS fill:#fce4ec,stroke:#c62828,color:#b71c1c
    style UI fill:#e3f2fd,stroke:#1565c0,color:#0d47a1
    style LAZY fill:#e0f2f1,stroke:#00695c,color:#004d40
    style SHARED fill:#efebe9,stroke:#4e342e,color:#3e2723
    style UTILS fill:#fff8e1,stroke:#f57f17,color:#e65100

%%{init: {'themeVariables': {'fontSize': '9px', 'nodeBorder': '1px', 'clusterBorder': '1px', 'edgeLabelHeight': '8px'}}}%%
graph TD
    subgraph Startup["启动阶段"]
        S1["Rust 初始化<br/>插件 + State + Panic Hook<br/>setup：设置 / Prism / 调度器 / 协调器 / 托盘"]
        S2["主窗口（无边框，初始隐藏）"]
        S3["前端 initApp<br/>启动内核 → 初始化模块 → 监听事件"]
        S4["显示窗口（silent_start 时只留托盘）"]
        S1 --> S2 --> S3 --> S4
    end

    subgraph Running["运行阶段"]
        R1["命令处理<br/>invoke → Command → 返回"]
        R2["事件推送<br/>emit → listen → UI 更新"]
        R3["周期同步 10s<br/>系统代理 / 托盘状态 / 所有权恢复"]
        R4["流量监控<br/>/traffic → Canvas"]
        R5["订阅调度器<br/>按订阅间隔自动更新"]
        R6["网络切换协调<br/>自动应用 Prism 规则"]
        R7["心跳 15s<br/>WebView 失效则重建窗口"]
        R8["系统唤醒<br/>探测内核，必要时重启"]
    end

    subgraph Close["关闭窗口"]
        C1{"close_to_tray?"}
        C2{"轻量模式且<br/>无更新保持?"}
        C3["销毁 WebView<br/>托盘点击时重建"]
        C4["隐藏窗口"]
        C1 -->|"是"| C2
        C2 -->|"是"| C3
        C2 -->|"否"| C4
    end

    subgraph Shutdown["退出阶段"]
        Q1["托盘「退出」或关闭（close_to_tray 关闭）<br/>设置 ExplicitExitFlag"]
        Q2["停止内核<br/>清除系统代理与所有权标记"]
        Q3["RunEvent::Exit<br/>关闭订阅调度器<br/>kill_mihomo()"]
        Q4["macOS：仅清理本应用确认过的 root 内核"]
        Q5["进程退出"]
        Q1 --> Q2 --> Q3 --> Q4 --> Q5
    end

    Startup --> Running
    Running --> Close
    C1 -->|"否"| Shutdown
    Running --> Shutdown

    style Startup fill:#e8f5e9,stroke:#2e7d32,color:#1b5e20
    style Running fill:#e3f2fd,stroke:#1565c0,color:#0d47a1
    style Close fill:#fff3e0,stroke:#e65100,color:#bf360c
    style Shutdown fill:#fce4ec,stroke:#c62828,color:#b71c1c