docs: update Changelog.md

fix(setting): default system titlebar to enabled if undefined
feat(bindings): add enable_system_titlebar option to Verge types
2026-10-28 00:42:08 +08:00 · 2026-10-13 19:55:45 +08:00 · 2026-10-12 21:17:53 +08:00 · 2026-10-12 21:16:06 +08:00 · 2026-10-12 20:59:57 +08:00 · 2026-10-12 20:05:02 +08:00
176 changed files with 3983 additions and 2681 deletions
@@ -4,11 +4,11 @@

  "features": {
    "ghcr.io/devcontainers/features/node:2": {
-      "version": "24.22.1",
-      "pnpmVersion": "12.15.0"
+      "version": "24.21.0",
+      "pnpmVersion": "12.11.2"
    },
    "ghcr.io/devcontainers/features/rust:1": {
-      "version": "1.99.1",
+      "version": "1.99.0",
      "profile": "default"
    },
    "ghcr.io/devcontainers/features/git:1": {},
@@ -1,33 +0,0 @@
-# Issue Guidelines / Issue 提交指引
-
-Use these suggestions to make reports easier to assess. State what you observed
-and what you could not verify; unknown details are fine.
-
-以下建议有助于维护者评估问题。请说明实际观察到的现象和无法确认的部分；未知信息可以留空。
-
- Search existing issues by symptom, conditions, and outcome. Add new evidence
-  to an existing report when it describes the same problem.
-  按现象、条件和结果搜索已有 Issue。若描述的是同一问题，请在原 Issue 中补充新证据。
- Keep each issue to one distinct user problem or requested outcome. Split
-  unrelated findings instead of bundling an audit or checklist.
-  每个 Issue 聚焦一个独立的问题或需求结果；无关发现请拆开，不要把审计清单打包成一个 Issue。
- For bugs, include the version, operating system, steps, and actual versus
-  expected behavior when known. A root-cause diagnosis is not required. Share
-  only relevant logs and redact tokens or personal information.
-  反馈 Bug 时，尽可能提供版本、操作系统、复现步骤及实际与预期行为。无需先判断根因；只提供相关日志，并遮盖令牌和个人信息。
- For feature requests, describe the user task, current limitation, desired
-  outcome, and affected platforms. An implementation proposal is optional.
-  提交功能请求时，请描述用户要完成的任务、当前限制、期望结果和适用平台；实现方案不是必填项。
- Separate observations from guesses. An AI or scanner finding is a hypothesis
-  until its affected configuration, concrete impact, and supporting evidence
-  are stated; do not present a list of theoretical risks as confirmed bugs.
-  区分观察结果和推测。AI 或扫描器的发现应先视为假设；请说明受影响的配置、具体影响和支持证据，不要把理论风险清单写成已确认的 Bug。
- Do not post secrets, personal data, or sensitive exploit details in a public
-  issue. Ask maintainers how to share sensitive security information safely.
-  请勿在公开 Issue 中发布密钥、个人信息或敏感利用细节；如涉及安全敏感信息，请先询问维护者如何安全提供。
- AI assistance is welcome; human contributors do not need to disclose it. If
-  an AI agent or automation creates or co-authors an issue, add a final body line
-  such as `Assisted by: GPT-5.6 High`. Omit effort when the runtime does not
-  report it. Disclosure is transparency only, not evidence for or against issue
-  quality.
-  欢迎使用 AI 辅助，人工提交者无需披露。如果 Issue 由 AI Agent 或自动化创建或共同撰写，请在正文末尾添加披露行，例如 `Assisted by: GPT-5.6 High`。运行环境未提供 effort 时可省略。披露仅用于提高透明度，不作为 Issue 质量的正面或负面证据。
@@ -10,8 +10,6 @@ body:
      value: |
        ## 在提交问题之前，请确认以下事项：

-        提交前可参考 [Issue 提交指引](https://github.com/clash-verge-rev/clash-verge-rev/blob/dev/.github/ISSUE_GUIDELINES.md)，说明可观察到的问题和证据；不确定的原因请标为猜测。
-
        1. 请 **确保** 您已经查阅了 [Clash Verge Rev 官方文档](https://clash-verge-rev.github.io/guide/term.html)  以及 [常见问题](https://clash-verge-rev.github.io/faq/windows.html)
        2. 请 **确保** [已有的问题](https://github.com/clash-verge-rev/clash-verge-rev/issues?q=is%3Aissue) 中没有人提交过相似 issue，否则请在已有的 issue 下进行讨论
        3. 请 **务必** 给 issue 填写一个简洁明了的标题，以便他人快速检索
@@ -21,8 +19,6 @@ body:

        ## Before submitting the issue, please make sure of the following checklist:

-        See the [Issue guidelines](https://github.com/clash-verge-rev/clash-verge-rev/blob/dev/.github/ISSUE_GUIDELINES.md) for how to describe observed behavior and evidence; mark uncertain causes as hypotheses.
-
        1. Please make sure you have read the [Clash Verge Rev official documentation](https://clash-verge-rev.github.io/guide/term.html) and [FAQ](https://clash-verge-rev.github.io/faq/windows.html)
        2. Please make sure there is no similar issue in the [existing issues](https://github.com/clash-verge-rev/clash-verge-rev/issues?q=is%3Aissue), otherwise please discuss under the existing issue
        3. Please be sure to fill in a concise and clear title for the issue so that others can quickly search
@@ -9,16 +9,12 @@ body:
    attributes:
      value: |
        ## 在提交问题之前，请确认以下事项：
-        可参考 [Issue 提交指引](https://github.com/clash-verge-rev/clash-verge-rev/blob/dev/.github/ISSUE_GUIDELINES.md)，描述用户任务、当前限制和期望结果。
-
        1. 请 **确保** 您已经查阅了 [Clash Verge Rev 官方文档](https://clash-verge-rev.github.io/guide/term.html) 确认软件不存在类似的功能
        2. 请 **确保** [已有的问题](https://github.com/clash-verge-rev/clash-verge-rev/issues?q=is%3Aissue) 中没有人提交过相似 issue，否则请在已有的 issue 下进行讨论
        3. 请 **务必** 给issue填写一个简洁明了的标题，以便他人快速检索
        4. 请 **务必** 先下载 [AutoBuild](https://github.com/clash-verge-rev/clash-verge-rev/releases/tag/autobuild) 版本测试，确保该功能还未实现
        5. 请 **务必** 按照模板规范详细描述问题，否则 issue 将会被关闭
        ## Before submitting the issue, please make sure of the following checklist:
-        See the [Issue guidelines](https://github.com/clash-verge-rev/clash-verge-rev/blob/dev/.github/ISSUE_GUIDELINES.md) for describing the user task, current limitation, and desired outcome.
-
        1. Please make sure you have read the [Clash Verge Rev official documentation](https://clash-verge-rev.github.io/guide/term.html) to confirm that the software does not have similar functions
        2. Please make sure there is no similar issue in the [existing issues](https://github.com/clash-verge-rev/clash-verge-rev/issues?q=is%3Aissue), otherwise please discuss under the existing issue
        3. Please be sure to fill in a concise and clear title for the issue so that others can quickly search
@@ -1,12 +1,6 @@
 ## Problem

-What breaks or what is missing. Product bug fixes and features require a
-pre-existing issue; link it here (`Fixes #123` only when this PR fully resolves
-it). Maintenance work (such as chore, perf, docs, refactor, test, CI/build,
-dependency, style, routine localization, or release changes) does not require
-an issue link; link one when it defines the scope. For reverts, link the PR or
-commit being reverted. For security-sensitive fixes that cannot be tracked
-publicly, follow maintainer-approved private tracking.
+What breaks or what is missing. Link the issue if one exists (`Fixes #123`).

 ## Approach

@@ -51,7 +51,7 @@ jobs:
      - name: Install Node
        uses: actions/setup-node@v7
        with:
-          node-version: '24.22.1'
+          node-version: '24.21.0'

      - name: Install dependencies
        run: pnpm install --frozen-lockfile
@@ -154,7 +154,7 @@ jobs:
      - name: Install Rust Stable
        uses: dtolnay/rust-toolchain@master
        with:
-          toolchain: '1.99.1'
+          toolchain: '1.99.0'
          targets: ${{ matrix.target }}

      - name: Add Rust Target
@@ -185,7 +185,7 @@ jobs:
      - name: Install Node
        uses: actions/setup-node@v7
        with:
-          node-version: '24.22.1'
+          node-version: '24.21.0'
          cache: 'pnpm'

      - name: Pnpm Cache
@@ -206,7 +206,7 @@ jobs:

      - name: Add Rust Target
        run: |
-          rustup target add ${{ matrix.target }} --toolchain 1.99.1 || rustup target add ${{ matrix.target }}
+          rustup target add ${{ matrix.target }} --toolchain 1.99.0 || rustup target add ${{ matrix.target }}
          rustup target list --installed
          echo "Rust target ${{ matrix.target }} installed."

@@ -257,7 +257,7 @@ jobs:
      - name: Install Rust Stable
        uses: dtolnay/rust-toolchain@master
        with:
-          toolchain: '1.99.1'
+          toolchain: '1.99.0'
          targets: ${{ matrix.target }}

      - name: Add Rust Target
@@ -282,7 +282,7 @@ jobs:
      - name: Install Node
        uses: actions/setup-node@v7
        with:
-          node-version: '24.22.1'
+          node-version: '24.21.0'
          cache: 'pnpm'

      - name: Pnpm Cache
@@ -347,7 +347,7 @@ jobs:

      - name: Add Rust Target
        run: |
-          rustup target add ${{ matrix.target }} --toolchain 1.99.1 || rustup target add ${{ matrix.target }}
+          rustup target add ${{ matrix.target }} --toolchain 1.99.0 || rustup target add ${{ matrix.target }}
          rustup target list --installed
          echo "Rust target ${{ matrix.target }} installed."

@@ -426,7 +426,7 @@ jobs:
      - name: Install Node
        uses: actions/setup-node@v7
        with:
-          node-version: '24.22.1'
+          node-version: '24.21.0'
          cache: 'pnpm'

      - name: Pnpm Cache
@@ -454,7 +454,7 @@ jobs:

      - name: Add Rust Target
        run: |
-          rustup target add ${{ matrix.target }} --toolchain 1.99.1 || rustup target add ${{ matrix.target }}
+          rustup target add ${{ matrix.target }} --toolchain 1.99.0 || rustup target add ${{ matrix.target }}
          rustup target list --installed
          echo "Rust target ${{ matrix.target }} installed."

@@ -524,7 +524,7 @@ jobs:
      - name: Install Node
        uses: actions/setup-node@v7
        with:
-          node-version: '24.22.1'
+          node-version: '24.21.0'

      - uses: pnpm/action-setup@v6.1.0
        name: Install pnpm
@@ -1,80 +0,0 @@
-name: Contract Parity
-
-on:
-  pull_request:
-    paths:
-      - "src-tauri/**/*.rs"
-      - "crates/**/*.rs"
-      - "Cargo.toml"
-      - "Cargo.lock"
-      - "src-tauri/Cargo.toml"
-      - "crates/**/Cargo.toml"
-      - "rust-toolchain.toml"
-      - "src-tauri/tauri.conf*.json"
-      - "src/services/bindings.ts"
-      - "scripts/gen-contract.mjs"
-      - "scripts/check-contract-changes.mjs"
-      - "biome.json"
-      - "biome.jsonc"
-      - "package.json"
-      - "pnpm-lock.yaml"
-      - "pnpm-workspace.yaml"
-      - "scripts/contract-inputs.json"
-      - ".github/workflows/contract-parity.yml"
-      - ".husky/pre-push"
-  workflow_dispatch:
-
-permissions:
-  contents: read
-
-env:
-  HUSKY: 0
-
-jobs:
-  contract-parity:
-    runs-on: ubuntu-26.04
-    steps:
-      - uses: actions/checkout@v7
-
-      - name: Install Rust Stable
-        uses: dtolnay/rust-toolchain@master
-        with:
-          toolchain: stable
-
-      - name: Rust Cache
-        uses: Swatinem/rust-cache@v2
-        with:
-          prefix-key: 'v1-rust'
-          key: 'rust-shared-stable-ubuntu-22.04-x86_64-unknown-linux-gnu-contract'
-          workspaces: |
-            . -> target
-          cache-all-crates: true
-          cache-workspace-crates: true
-
-      - name: Install dependencies
-        run: |
-          sudo apt-get update
-          sudo apt-get install -y libxslt1.1 libwebkit2gtk-4.1-dev libayatana-appindicator3-dev librsvg2-dev patchelf
-
-      - name: Install pnpm
-        uses: pnpm/action-setup@v6
-        with:
-          run_install: false
-
-      - uses: actions/setup-node@v7
-        with:
-          node-version: '24.22.1'
-          cache: 'pnpm'
-
-      - run: pnpm install --frozen-lockfile
-
-      - name: Provision sidecar placeholders for tauri-build
-        run: |
-          mkdir -p src-tauri/sidecar src-tauri/resources dist
-          touch dist/index.html
-          for bin in clash-verge-service clash-verge-service-install clash-verge-service-uninstall verge-mihomo verge-mihomo-alpha; do
-            touch "src-tauri/sidecar/${bin}-x86_64-unknown-linux-gnu"
-          done
-
-      - name: Check generated contract without changing the checkout
-        run: pnpm gen:contract --check
@@ -43,7 +43,7 @@ jobs:
      - name: Install Node
        uses: actions/setup-node@v7
        with:
-          node-version: '24.22.1'
+          node-version: '24.21.0'

      - uses: pnpm/action-setup@v6
        name: Install pnpm
@@ -74,7 +74,7 @@ jobs:

      - name: Install Rust Stable
        if: github.event.inputs[matrix.input] == 'true'
-        uses: dtolnay/rust-toolchain@1.99.1
+        uses: dtolnay/rust-toolchain@1.99.0

      - name: Rust Cache
        uses: Swatinem/rust-cache@v2
@@ -103,7 +103,7 @@ jobs:
        if: github.event.inputs[matrix.input] == 'true'
        uses: actions/setup-node@v7
        with:
-          node-version: '24.22.1'
+          node-version: '24.21.0'
          cache: 'pnpm'

      - name: Pnpm Cache
@@ -129,7 +129,7 @@ jobs:
        if: github.event.inputs[matrix.input] == 'true'
        run: |
          # Ensure cross target is installed for the pinned toolchain; fallback without explicit toolchain if needed
-          rustup target add ${{ matrix.target }} --toolchain 1.99.1 || rustup target add ${{ matrix.target }}
+          rustup target add ${{ matrix.target }} --toolchain 1.99.0 || rustup target add ${{ matrix.target }}
          rustup target list --installed
          echo "Rust target ${{ matrix.target }} installed."

@@ -2,23 +2,11 @@ name: Frontend Check

 on:
  pull_request:
-    paths:
-      - "src/**"
-      - "**/*.js"
-      - "**/*.ts"
-      - "**/*.tsx"
-      - "**/*.css"
-      - "**/*.scss"
-      - "**/*.json"
-      - "**/*.md"
-      - "pnpm-lock.yaml"
-      - "pnpm-workspace.yaml"
-      - "vite.config.*"
-      - ".github/workflows/frontend-check.yml"
  workflow_dispatch:

 permissions:
  contents: read
+  pull-requests: read

 env:
  HUSKY: 0
@@ -29,17 +17,46 @@ jobs:
    steps:
      - uses: actions/checkout@v7

+      - name: Check frontend changes
+        id: check_frontend
+        uses: dorny/paths-filter@v4
+        with:
+          filters: |
+            frontend:
+              - 'src/**'
+              - '**/*.js'
+              - '**/*.ts'
+              - '**/*.tsx'
+              - '**/*.css'
+              - '**/*.scss'
+              - '**/*.json'
+              - '**/*.md'
+              - 'package.json'
+              - 'pnpm-lock.yaml'
+              - 'pnpm-workspace.yaml'
+              - 'knip.json'
+              - 'eslint.config.ts'
+              - 'tsconfig.json'
+              - 'vite.config.*'
+
+      - name: Skip if no frontend changes
+        if: steps.check_frontend.outputs.frontend != 'true'
+        run: echo "No frontend changes, skipping frontend checks."
+
      - name: Install pnpm
+        if: steps.check_frontend.outputs.frontend == 'true'
        uses: pnpm/action-setup@v6
        with:
          run_install: false

      - uses: actions/setup-node@v7
+        if: steps.check_frontend.outputs.frontend == 'true'
        with:
-          node-version: '24.22.1'
+          node-version: '24.21.0'
          cache: 'pnpm'

      - name: Restore pnpm cache
+        if: steps.check_frontend.outputs.frontend == 'true'
        uses: actions/cache@v6
        with:
          path: ~/.pnpm-store
@@ -48,21 +65,94 @@ jobs:
            pnpm-shared-stable-${{ runner.os }}-

      - run: pnpm install --frozen-lockfile
+        if: steps.check_frontend.outputs.frontend == 'true'

      - name: Run Prettier check
+        if: steps.check_frontend.outputs.frontend == 'true'
        run: pnpm format:check

      - name: Run ESLint
+        if: steps.check_frontend.outputs.frontend == 'true'
        run: pnpm lint

      - name: Run TypeScript typecheck
+        if: steps.check_frontend.outputs.frontend == 'true'
        run: pnpm typecheck

      - name: Run tests
+        if: steps.check_frontend.outputs.frontend == 'true'
        run: pnpm test

      - name: Run Knip
+        if: steps.check_frontend.outputs.frontend == 'true'
        run: pnpm knip:check

      - name: Architecture gates (listen/emit only in the event bus, invoke only in services)
+        if: steps.check_frontend.outputs.frontend == 'true'
        run: node scripts/check-architecture.mjs listen emit invoke
+
+  contract-parity:
+    runs-on: ubuntu-26.04
+    steps:
+      - uses: actions/checkout@v7
+
+      - name: Check contract inputs
+        id: check_inputs
+        uses: dorny/paths-filter@v4
+        with:
+          filters: scripts/contract-inputs.json
+
+      - name: Skip if contract inputs unchanged
+        if: steps.check_inputs.outputs.contract != 'true'
+        run: echo "No contract inputs changed, skipping parity check."
+
+      - name: Install Rust Stable
+        if: steps.check_inputs.outputs.contract == 'true'
+        uses: dtolnay/rust-toolchain@master
+        with:
+          toolchain: stable
+
+      - name: Rust Cache
+        if: steps.check_inputs.outputs.contract == 'true'
+        uses: Swatinem/rust-cache@v2
+        with:
+          prefix-key: 'v1-rust'
+          key: 'rust-shared-stable-ubuntu-22.04-x86_64-unknown-linux-gnu-contract'
+          workspaces: |
+            . -> target
+          cache-all-crates: true
+          cache-workspace-crates: true
+
+      - name: Install dependencies
+        if: steps.check_inputs.outputs.contract == 'true'
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y libxslt1.1 libwebkit2gtk-4.1-dev libayatana-appindicator3-dev librsvg2-dev patchelf
+
+      - name: Install pnpm
+        if: steps.check_inputs.outputs.contract == 'true'
+        uses: pnpm/action-setup@v6
+        with:
+          run_install: false
+
+      - uses: actions/setup-node@v7
+        if: steps.check_inputs.outputs.contract == 'true'
+        with:
+          node-version: '24.21.0'
+          cache: 'pnpm'
+
+      - run: pnpm install --frozen-lockfile
+        if: steps.check_inputs.outputs.contract == 'true'
+
+      - name: Provision sidecar placeholders for tauri-build
+        if: steps.check_inputs.outputs.contract == 'true'
+        run: |
+          mkdir -p src-tauri/sidecar src-tauri/resources dist
+          touch dist/index.html
+          for bin in clash-verge-service clash-verge-service-install clash-verge-service-uninstall verge-mihomo verge-mihomo-alpha; do
+            touch "src-tauri/sidecar/${bin}-x86_64-unknown-linux-gnu"
+          done
+
+      - name: Check generated contract without changing the checkout
+        if: steps.check_inputs.outputs.contract == 'true'
+        run: pnpm gen:contract --check
@@ -2,13 +2,6 @@ name: Clippy Lint

 on:
  pull_request:
-    paths:
-      - "src-tauri/**"
-      - "crates/**"
-      - "Cargo.toml"
-      - "Cargo.lock"
-      - "rust-toolchain.toml"
-      - ".github/workflows/lint-clippy.yml"
  workflow_dispatch:
 env:
  HUSKY: 0
@@ -30,6 +23,28 @@ jobs:

    runs-on: ${{ matrix.os }}
    steps:
+      - name: Check src-tauri changes
+        if: github.event_name != 'workflow_dispatch'
+        id: check_changes
+        uses: dorny/paths-filter@v4
+        with:
+          filters: |
+            rust:
+              - 'src-tauri/**'
+
+      - name: Skip if src-tauri not changed
+        if: github.event_name != 'workflow_dispatch' && steps.check_changes.outputs.rust != 'true'
+        run: echo "No src-tauri changes, skipping clippy lint."
+
+      - name: Continue if src-tauri changed
+        if: github.event_name != 'workflow_dispatch' && steps.check_changes.outputs.rust == 'true'
+        run: echo "src-tauri changed, running clippy lint."
+
+      - name: Manual trigger - always run
+        if: github.event_name == 'workflow_dispatch'
+        run: |
+          echo "Manual trigger detected: skipping changes check and running clippy."
+
      - name: Checkout Repository
        uses: actions/checkout@v7

@@ -64,7 +79,7 @@ jobs:
        run: cargo clippy-all

      - name: Run Windows security tests
-        if: matrix.os == 'windows-latest'
+        if: matrix.os == 'windows-latest' && (github.event_name == 'workflow_dispatch' || steps.check_changes.outputs.rust == 'true')
        working-directory: ./src-tauri
        run: cargo test --all-features --target ${{ matrix.target }}

@@ -204,7 +204,7 @@ jobs:
      - name: Install Rust Stable
        uses: dtolnay/rust-toolchain@master
        with:
-          toolchain: '1.99.1'
+          toolchain: '1.99.0'
          targets: ${{ matrix.target }}

      - name: Add Rust Target
@@ -230,7 +230,7 @@ jobs:
      - name: Install Node
        uses: actions/setup-node@v7
        with:
-          node-version: '24.22.1'
+          node-version: '24.21.0'

      - uses: pnpm/action-setup@v6
        name: Install pnpm
@@ -244,7 +244,7 @@ jobs:

      - name: Add Rust Target
        run: |
-          rustup target add ${{ matrix.target }} --toolchain 1.99.1 || rustup target add ${{ matrix.target }}
+          rustup target add ${{ matrix.target }} --toolchain 1.99.0 || rustup target add ${{ matrix.target }}
          rustup target list --installed
          echo "Rust target ${{ matrix.target }} installed."

@@ -311,7 +311,7 @@ jobs:
      - name: Install Rust Stable
        uses: dtolnay/rust-toolchain@master
        with:
-          toolchain: '1.99.1'
+          toolchain: '1.99.0'
          targets: ${{ matrix.target }}

      - name: Add Rust Target
@@ -331,7 +331,7 @@ jobs:
      - name: Install Node
        uses: actions/setup-node@v7
        with:
-          node-version: '24.22.1'
+          node-version: '24.21.0'

      - name: Install pnpm
        uses: pnpm/action-setup@v6
@@ -389,7 +389,7 @@ jobs:

      - name: Add Rust Target
        run: |
-          rustup target add ${{ matrix.target }} --toolchain 1.99.1 || rustup target add ${{ matrix.target }}
+          rustup target add ${{ matrix.target }} --toolchain 1.99.0 || rustup target add ${{ matrix.target }}
          rustup target list --installed
          echo "Rust target ${{ matrix.target }} installed."

@@ -446,7 +446,7 @@ jobs:
      - name: Install Rust Stable
        uses: dtolnay/rust-toolchain@master
        with:
-          toolchain: '1.99.1'
+          toolchain: '1.99.0'
          targets: ${{ matrix.target }}

      - name: Add Rust Target
@@ -466,7 +466,7 @@ jobs:
      - name: Install Node
        uses: actions/setup-node@v7
        with:
-          node-version: '24.22.1'
+          node-version: '24.21.0'

      - uses: pnpm/action-setup@v6
        name: Install pnpm
@@ -487,7 +487,7 @@ jobs:

      - name: Add Rust Target
        run: |
-          rustup target add ${{ matrix.target }} --toolchain 1.99.1 || rustup target add ${{ matrix.target }}
+          rustup target add ${{ matrix.target }} --toolchain 1.99.0 || rustup target add ${{ matrix.target }}
          rustup target list --installed
          echo "Rust target ${{ matrix.target }} installed."

@@ -547,7 +547,7 @@ jobs:
      - name: Install Node
        uses: actions/setup-node@v7
        with:
-          node-version: '24.22.1'
+          node-version: '24.21.0'

      - uses: pnpm/action-setup@v6
        name: Install pnpm
@@ -573,7 +573,7 @@ jobs:
      - name: Install Node
        uses: actions/setup-node@v7
        with:
-          node-version: '24.22.1'
+          node-version: '24.21.0'

      - uses: pnpm/action-setup@v6
        name: Install pnpm
@@ -638,7 +638,7 @@ jobs:
      - name: Install Node
        uses: actions/setup-node@v7
        with:
-          node-version: '24.22.1'
+          node-version: '24.21.0'

      - uses: pnpm/action-setup@v6
        name: Install pnpm
@@ -6,10 +6,6 @@ name: Check Formatting

 on:
  pull_request:
-    paths:
-      - "src-tauri/**"
-      - "**/*.rs"
-      - ".github/workflows/rustfmt.yml"

 permissions:
  contents: read
@@ -23,10 +19,25 @@ jobs:
    steps:
      - uses: actions/checkout@v7

+      - name: Check Rust changes
+        id: check_rust
+        uses: dorny/paths-filter@v4
+        with:
+          filters: |
+            rust:
+              - 'src-tauri/**'
+              - '**/*.rs'
+
+      - name: Skip if no Rust changes
+        if: steps.check_rust.outputs.rust != 'true'
+        run: echo "No Rust changes, skipping rustfmt."
+
      - name: install Rust stable and rustfmt
+        if: steps.check_rust.outputs.rust == 'true'
        uses: dtolnay/rust-toolchain@stable
        with:
          components: rustfmt

      - name: run cargo fmt
+        if: steps.check_rust.outputs.rust == 'true'
        run: cargo fmt --manifest-path ./src-tauri/Cargo.toml --all -- --check
@@ -22,13 +22,13 @@ jobs:
      - name: Install Rust
        uses: dtolnay/rust-toolchain@master
        with:
-          toolchain: '1.99.1'
+          toolchain: '1.99.0'
          targets: x86_64-pc-windows-msvc

      - name: Install Node
        uses: actions/setup-node@v7
        with:
-          node-version: '24.22.1'
+          node-version: '24.21.0'

      - name: Install pnpm
        uses: pnpm/action-setup@v6
@@ -34,7 +34,7 @@ jobs:
      - name: Install Node
        uses: actions/setup-node@v7
        with:
-          node-version: '24.22.1'
+          node-version: '24.21.0'

      - uses: pnpm/action-setup@v6
        name: Install pnpm
@@ -15,7 +15,7 @@ jobs:
      - name: Install Node
        uses: actions/setup-node@v7
        with:
-          node-version: '24.22.1'
+          node-version: '24.21.0'

      - uses: pnpm/action-setup@v6
        name: Install pnpm
@@ -39,7 +39,7 @@ jobs:
      - name: Install Node
        uses: actions/setup-node@v7
        with:
-          node-version: '24.22.1'
+          node-version: '24.21.0'

      - uses: pnpm/action-setup@v6
        name: Install pnpm
@@ -1,3 +1,3 @@
-nodejs 24.22.1
-pnpm 12.15.0
-rust 1.99.1
+nodejs 24.21.0
+pnpm 12.11.2
+rust 1.99.0
@@ -18,25 +18,22 @@ These rules apply to every change, whether human- or agent-authored. They match
 the ownership evidence the AI-slop review evaluates (see
 [`pr-ai-slop-review.md`](.github/workflows/pr-ai-slop-review.md)).

-1. **Issue first.** Product bug fixes and features require a pre-existing issue;
-   self-scoped maintenance work does not. Follow the PR template for linkage and
-   revert references. If a required issue is missing, ask maintainers to open or
-   approve one before implementing. For security-sensitive fixes that cannot be
-   tracked publicly, follow maintainer-approved private tracking.
+1. **Issue first.** Non-trivial changes require a pre-existing issue describing
+   the problem. If none exists, ask the maintainers to open or approve one
+   before implementing.
 2. **Scope discipline.** Every changed file must be justifiable from the linked
-   issue or the stated PR scope. No drive-by refactors, renames, formatting
-   churn, or dependency bumps unrelated to the work.
+   issue. No drive-by refactors, renames, formatting churn, or dependency bumps
+   unrelated to the problem being fixed.
 3. **Author accountability.** AI assistance is welcome, but the contributor owns
   the result: understand the change, describe the problem and approach in your
   own words, and verify the change against the reported behavior before
   submitting.
 4. **Tests are justified, not default.** Do not add tests, test scaffolding, or
-   speculative defensive code unless the linked issue or stated task demands
-   them. When a test is genuinely necessary — it reproduces the reported
-   regression or guards behavior whose breakage would otherwise go unnoticed —
-   keep it minimal and state in the PR body why it is needed. Bulk test files
-   and defensive programming for hypothetical failure modes are PR bloat, not
-   rigor.
+   speculative defensive code unless the linked issue demands them. When a test
+   is genuinely necessary — it reproduces the reported regression or guards
+   behavior whose breakage would otherwise go unnoticed — keep it minimal and
+   state in the PR body why it is needed. Bulk test files and defensive
+   programming for hypothetical failure modes are PR bloat, not rigor.
 5. **Comments state constraints, not narration.** Write a comment only for a
   non-obvious constraint the code cannot express; never restate what the code
   does.
@@ -47,12 +44,13 @@ the ownership evidence the AI-slop review evaluates (see
   real evidence instead: reproduction steps, failure output, targeted tests.
 8. **Minimal diffs.** Match the surrounding code's style, naming, and comment
   density. Do not introduce new dependencies or restructure working code unless
-   the linked issue or stated task demands it.
-9. **Disclose AI automation.** When an agent creates or co-creates a PR or Issue,
-   append a final body line with the model and effort used (e.g.
-   `Assisted by: GPT-5.6 High`). Effort may be omitted when the runtime does not
-   report it. Human contributors are not asked to disclose AI assistance.
-   Disclosure is transparency only and carries no positive or negative weight.
+   the issue demands it.
+9. **Disclose AI automation.** When an agent produces or co-produces a change,
+   append a footer line to the PR body with the model and effort used (e.g.
+   `Assisted by: GPT-5.6 High`). The PR template intentionally omits this line —
+   the agent adds it itself, humans are not asked to declare anything. Effort may
+   be omitted when the runtime does not report it. Disclosure is transparency
+   only; it does not substitute for any rule above.
 10. **Compiled workflows.** The AI-slop review policy in
    [pr-ai-slop-review.md](.github/workflows/pr-ai-slop-review.md) is compiled:
    after editing it, run `gh aw compile` and commit the regenerated
@@ -61,10 +59,8 @@ the ownership evidence the AI-slop review evaluates (see
    [`template/Changelog.md`](template/Changelog.md): one line per
    user-visible change, no internals.

-## Issue and PR Workflows
+## Pull Request Shape

-When drafting, triaging, splitting, or implementing from a community issue, use
-the conditional checklist in [`.github/ISSUE_GUIDELINES.md`](.github/ISSUE_GUIDELINES.md).
-Do not make GitHub issue changes without explicit authorization. For PRs, follow
-the directly loaded [PR template](.github/PULL_REQUEST_TEMPLATE.md); do not
-duplicate its prompts here.
+Describe three things, briefly: the problem (with issue link), why this approach
+solves it, and what changed. See
+[`PULL_REQUEST_TEMPLATE.md`](.github/PULL_REQUEST_TEMPLATE.md).
@@ -1119,7 +1119,7 @@ dependencies = [
 "getrandom 0.4.3",
 "libc",
 "log",
- "minisign-verify",
+ "minisign-verify 0.3.0",
 "nanoid",
 "network-interface",
 "objc2",
@@ -1138,7 +1138,7 @@ dependencies = [
 "serde",
 "serde_json",
 "serde_yaml_ng",
- "sha2 0.11.1",
+ "sha2 0.11.0",
 "smartstring",
 "socket2",
 "specta",
@@ -1175,7 +1175,7 @@ dependencies = [
 "windows-service",
 "windows-sys 0.61.2",
 "winreg 0.56.0",
- "zip 9.0.4",
+ "zip 9.0.1",
 ]

 [[package]]
@@ -1247,7 +1247,7 @@ dependencies = [
 "once_cell",
 "serde",
 "serde_json",
- "sha2 0.11.1",
+ "sha2 0.11.0",
 "strum",
 "strum_macros",
 "sysproxy",
@@ -1462,12 +1462,9 @@ dependencies = [

 [[package]]
 name = "constant_time_eq"
-version = "0.6.1"
+version = "0.4.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9eb6feb175df65d0a3ccd3e73484e940d0ac664e8034f0519fd49a93db3071d9"
-dependencies = [
- "rustversion",
-]
+checksum = "3d52eff69cd5e647efe296129160853a42795992097e8af39800e1060caeea9b"

 [[package]]
 name = "cookie"
@@ -3954,9 +3951,9 @@ checksum = "34b357333733e8260735ba5894eb928c02ecc69c78715f01a8019e7fa7f2db4c"

 [[package]]
 name = "libc"
-version = "0.2.191"
+version = "0.2.190"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "65cd87c9a6d60536580b316ad985726104730a5151c99845f2490428ef91240a"
+checksum = "ce5d3ddc6d3fa000eb1536d85e147bfe31aacaba692ed6a876f95cb7c855be78"

 [[package]]
 name = "libdbus-sys"
@@ -4051,11 +4048,11 @@ checksum = "112b39cec0b298b6c1999fee3e31427f74f676e4cb9879ed1a121b43661a4154"

 [[package]]
 name = "lzma-rust2"
-version = "0.22.0"
+version = "0.21.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7277c9742229dc25243236d578b6471a798c554512c6f6a04365ec2e87c2a3bb"
+checksum = "fde178a3caf126c440fa15628147772d8ee590a39477d711353fbe2e58a73a5b"
 dependencies = [
- "sha2 0.11.1",
+ "sha2 0.11.0",
 ]

 [[package]]
@@ -4170,6 +4167,12 @@ dependencies = [
 "unicase",
 ]

+[[package]]
+name = "minisign-verify"
+version = "0.2.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "22f9645cb765ea72b8111f36c522475d2daa0d22c957a9826437e97534bc4e9e"
+
 [[package]]
 name = "minisign-verify"
 version = "0.3.0"
@@ -5340,9 +5343,9 @@ checksum = "439ee305def115ba05938db6eb1644ff94165c5ab5e9420d1c1bcedbba909391"

 [[package]]
 name = "ppmd-rust"
-version = "1.5.0"
+version = "1.4.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "196a7c80b9a7652aba7cc070827516c2abe4ccdf53d128e1944003cf5726cff1"
+checksum = "efca4c95a19a79d1c98f791f10aebd5c1363b473244630bb7dbde1dc98455a24"

 [[package]]
 name = "ppv-lite86"
@@ -5993,13 +5996,12 @@ dependencies = [

 [[package]]
 name = "rust-ini"
-version = "0.21.1"
+version = "0.21.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4e310ef0e1b6eeb79169a1171daf9abcb87a2e17c03bee2c4bb100b55c75409f"
+checksum = "796e8d2b6696392a43bea58116b667fb4c29727dc5abd27d6acf338bb4f688c7"
 dependencies = [
 "cfg-if",
 "ordered-multimap",
- "trim-in-place",
 ]

 [[package]]
@@ -6065,9 +6067,9 @@ dependencies = [

 [[package]]
 name = "rustls"
-version = "0.23.46"
+version = "0.23.45"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "48e13bd8c0e9365c43cfa5c9e8f9ad49d3c8444926c9aac819e0e4dc503c8fdf"
+checksum = "0d41d731c7d2f962d1ccc364cec258de3c0e93b38c2fb3ba97ac74513048d634"
 dependencies = [
 "aws-lc-rs",
 "log",
@@ -6408,9 +6410,9 @@ dependencies = [

 [[package]]
 name = "serde_json"
-version = "1.0.154"
+version = "1.0.151"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e7e9cc8b1b85264074fbcc02a88680c4096b1e47df8f739dceb03bf482f04bd6"
+checksum = "c841b55ecdae098c80dcae9cf767f6f8a0c2cdb3416bbef72181df4d0fe73f14"
 dependencies = [
 "itoa",
 "memchr",
@@ -6595,9 +6597,9 @@ dependencies = [

 [[package]]
 name = "sha2"
-version = "0.11.1"
+version = "0.11.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "47d7069beb7d6ac7b9acd1039986e73443f24234f41074da099d6f994ac9ad19"
+checksum = "446ba717509524cb3f22f17ecc096f10f4822d76ab5c0b9822c5f9c284e825f4"
 dependencies = [
 "cfg-if",
 "cpufeatures 0.3.0",
@@ -6620,6 +6622,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "1e362d9935bc50f019969e2f9ecd66786612daae13e8f277be7bfb66e8bed3f7"
 dependencies = [
 "libc",
+ "sigchld",
 "windows-sys 0.60.2",
 ]

@@ -6639,6 +6642,17 @@ version = "2.0.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "f8fadd59c855ef2080decdef8ff161eb6661b86933c9d82e5ba29dc602a55aba"

+[[package]]
+name = "sigchld"
+version = "0.2.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "47106eded3c154e70176fc83df9737335c94ce22f821c32d17ed1db1f83badb1"
+dependencies = [
+ "libc",
+ "os_pipe",
+ "signal-hook 0.3.18",
+]
+
 [[package]]
 name = "signal-hook"
 version = "0.1.17"
@@ -6649,6 +6663,16 @@ dependencies = [
 "signal-hook-registry",
 ]

+[[package]]
+name = "signal-hook"
+version = "0.3.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d881a16cf4426aa584979d30bd82cb33429027e42122b169753d6ef1085ed6e2"
+dependencies = [
+ "libc",
+ "signal-hook-registry",
+]
+
 [[package]]
 name = "signal-hook-registry"
 version = "1.4.8"
@@ -6854,12 +6878,6 @@ version = "1.1.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "a2eb9349b6444b326872e140eb1cf5e7c522154d69e7a0ffb0fb81c06b37543f"

-[[package]]
-name = "static_vcruntime"
-version = "3.0.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ff7589a1859b09232522bb9edf076ca7fcf14ded96685d3fa629db73023ffbb7"
-
 [[package]]
 name = "string_cache"
 version = "0.9.0"
@@ -6919,9 +6937,9 @@ checksum = "13c2bddecc57b384dee18652358fb23172facb8a2c51ccc10d74c157bdea3292"

 [[package]]
 name = "swift-rs"
-version = "1.0.9"
+version = "1.0.8"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "cefd87076fd385308ee4aff597256c902f1fbb4d031de1558efc12f8ffefadd9"
+checksum = "e45c444e496845d3f2a351146bff59aae4975b2280238df1dfaa0c7d1846f38e"
 dependencies = [
 "base64 0.21.7",
 "serde",
@@ -7168,9 +7186,9 @@ checksum = "adb6935a6f5c20170eeceb1a3835a49e12e19d792f6dd344ccc76a985ca5a6ca"

 [[package]]
 name = "tauri"
-version = "2.12.4"
+version = "2.12.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f316751027fc2644221d1a448564d519efb07067fda584879d9cda966391d212"
+checksum = "ed99ee9694a2deb776d91cae48ac7411ddfc89ecae2f9b5041111d8c88f2ace9"
 dependencies = [
 "anyhow",
 "bytes",
@@ -7216,16 +7234,16 @@ dependencies = [
 "tray-icon",
 "url",
 "webkit2gtk",
- "webview2-com",
+ "webview2-com 0.39.1",
 "window-vibrancy",
 "windows 0.62.2",
 ]

 [[package]]
 name = "tauri-build"
-version = "2.7.3"
+version = "2.7.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "641dd5fd297c99ab92717b0428cca5b9c6f960b2ac96ca131b3eebc9d70b8ddc"
+checksum = "59563ca5b331fd97f27ee9672ec8d36d33bb3c9e2c9f6710a1a5687256052e45"
 dependencies = [
 "anyhow",
 "cargo_toml",
@@ -7237,8 +7255,6 @@ dependencies = [
 "semver 1.0.28",
 "serde",
 "serde_json",
- "static_vcruntime",
- "strsim",
 "tauri-utils",
 "tauri-winres",
 "walkdir",
@@ -7246,11 +7262,11 @@ dependencies = [

 [[package]]
 name = "tauri-codegen"
-version = "2.7.3"
+version = "2.7.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a6585c5b536c00f039d12ce70a9755172d5423bbcfd3969863baa70314c3e02f"
+checksum = "e50213e463086ecc283d7e9f51c30cc0fd304ad457425158018be26dbf0d0a80"
 dependencies = [
- "base64 0.23.1",
+ "base64 0.22.1",
 "brotli",
 "ico",
 "json-patch",
@@ -7273,9 +7289,9 @@ dependencies = [

 [[package]]
 name = "tauri-macros"
-version = "2.7.3"
+version = "2.7.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e2e83a0cfa1bae376e8fbbdc0b1692707aed50cd6072ce85cae4789af5d6c19f"
+checksum = "8129fb43bb6e0d6b73ad3315cd172beaab17cd28899c594b1b32c80edbbfd99c"
 dependencies = [
 "heck 0.5.0",
 "proc-macro2",
@@ -7331,9 +7347,9 @@ dependencies = [

 [[package]]
 name = "tauri-plugin-clipboard-manager"
-version = "2.5.0"
+version = "2.4.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9be5ed8d94c33afe8377e885119069f6508780659271d0a25cfc54d441f2bc81"
+checksum = "333d3b6beeb1c2c7fc040233d4ea7b6c03a9f8f039592b7400833c43fb5b568a"
 dependencies = [
 "arboard",
 "log",
@@ -7346,9 +7362,9 @@ dependencies = [

 [[package]]
 name = "tauri-plugin-deep-link"
-version = "2.6.2"
+version = "2.6.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1b3c64e24ebcbc63aaa2d88a9c51e2507084b46620baf39ecb0baa0738a08bb4"
+checksum = "4ac7a92a46ab5c88f44532ca50906d6e448a948d4ddf8c5376ab125e3260f736"
 dependencies = [
 "dunce",
 "plist",
@@ -7394,9 +7410,9 @@ dependencies = [

 [[package]]
 name = "tauri-plugin-dialog"
-version = "2.8.3"
+version = "2.8.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b7461aaacf1901915ea7b9f5cd74f8224a351ed96af0a62c07fce934003cb34b"
+checksum = "daf9a5c92e39bdd84f22f6be9230e39d0c4e140345f71ffe6058dca4f71127cf"
 dependencies = [
 "log",
 "raw-window-handle",
@@ -7412,9 +7428,9 @@ dependencies = [

 [[package]]
 name = "tauri-plugin-fs"
-version = "2.7.1"
+version = "2.6.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5d58eb1d4984e535f47a642ffec09a2da6f5c18a12b5902d12126cb7626d628b"
+checksum = "466eb32466fe5021b6728b06862f9ff14a9f7e1af890047654e03a96d7c0e1bb"
 dependencies = [
 "anyhow",
 "dunce",
@@ -7436,9 +7452,9 @@ dependencies = [

 [[package]]
 name = "tauri-plugin-global-shortcut"
-version = "2.4.1"
+version = "2.4.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "93ff17919fe09852d269bd37b1d3d2e993b9dbb514afe7acbf3346c1d3627e2d"
+checksum = "0bd2e1f725891a1613af8f25bf918ba3357654b0fd3f2d794c0ce76cbdd92ed2"
 dependencies = [
 "global-hotkey",
 "log",
@@ -7451,9 +7467,9 @@ dependencies = [

 [[package]]
 name = "tauri-plugin-http"
-version = "2.8.3"
+version = "2.8.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2c57e3451553f95a1db3bfed6a358a77ce5080b6399a242c6eadac113f97abd2"
+checksum = "93e9d6b3319e101bc1be27cfa0fb4054d7784a12509c67ead0033b82180e5ed1"
 dependencies = [
 "bytes",
 "cookie_store",
@@ -7470,13 +7486,13 @@ dependencies = [
 "thiserror 2.0.20",
 "tokio",
 "url",
- "urlpattern",
+ "urlpattern 0.3.0",
 ]

 [[package]]
 name = "tauri-plugin-mihomo"
 version = "0.6.0"
-source = "git+https://github.com/clash-verge-rev/tauri-plugin-mihomo?rev=7a03d16f4d39b1bb885b7babe66b9e153e34b615#7a03d16f4d39b1bb885b7babe66b9e153e34b615"
+source = "git+https://github.com/clash-verge-rev/tauri-plugin-mihomo?branch=main#7a03d16f4d39b1bb885b7babe66b9e153e34b615"
 dependencies = [
 "arc-swap",
 "clashmap",
@@ -7500,9 +7516,9 @@ dependencies = [

 [[package]]
 name = "tauri-plugin-notification"
-version = "2.7.0"
+version = "2.5.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b939d7b19c8af1381a72ef8474b3aba2b56c1ddac2c23f0c8e96abbcf86b198b"
+checksum = "533770889abb60a0407d5a32096182f0e6463f5a3dfaa675be94580aa14070e1"
 dependencies = [
 "log",
 "notify-rust",
@@ -7515,14 +7531,13 @@ dependencies = [
 "thiserror 2.0.20",
 "time",
 "url",
- "zbus",
 ]

 [[package]]
 name = "tauri-plugin-opener"
-version = "2.7.2"
+version = "2.7.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "53810be1b4fed22bb6ac3f4cab5a2b80d9391d1af436bda145607532bc0bb219"
+checksum = "d39404b2572927e0d3ed30a7ca226037f7508d22e79c96ee6ef0d42b6a4b3345"
 dependencies = [
 "dunce",
 "glob",
@@ -7552,12 +7567,11 @@ dependencies = [

 [[package]]
 name = "tauri-plugin-shell"
-version = "2.5.0"
+version = "2.4.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8567d42b2c7264355daa1df415ec77f52aa42e885924c86a969be2e920e05521"
+checksum = "094bdbc47e5efe36544ba21b3a53ab5c724150236cf55e6c9be46191deb6eab6"
 dependencies = [
 "encoding_rs",
- "libc",
 "log",
 "open",
 "os_pipe",
@@ -7570,14 +7584,13 @@ dependencies = [
 "tauri-plugin",
 "thiserror 2.0.20",
 "tokio",
- "windows-sys 0.60.2",
 ]

 [[package]]
 name = "tauri-plugin-updater"
-version = "2.14.0"
+version = "2.13.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7259989d4fe11b2bf51f7d671642249b1837c4ae2da1430dc713ae38f98ceeec"
+checksum = "3cb0b2ea3e85ca287990d3859a29cc5cb18024240fd78f62e027fb7963670f18"
 dependencies = [
 "base64 0.22.1",
 "dirs 7.0.0",
@@ -7585,9 +7598,8 @@ dependencies = [
 "futures-util",
 "http",
 "infer",
- "libc",
 "log",
- "minisign-verify",
+ "minisign-verify 0.2.5",
 "osakit",
 "percent-encoding",
 "reqwest 0.13.5",
@@ -7609,9 +7621,9 @@ dependencies = [

 [[package]]
 name = "tauri-plugin-wdio-webdriver"
-version = "1.5.0"
+version = "1.4.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4f76676d510d271d80abcf8b0552987b5b4f0eae5e3f906e9b5660d43c97c62e"
+checksum = "52c5e97428174a52b7f4357bbc4535fcce52c6a06c8ee7a379502f7cda1b6045"
 dependencies = [
 "async-trait",
 "axum",
@@ -7635,9 +7647,9 @@ dependencies = [
 "tracing",
 "uuid",
 "webkit2gtk",
- "webview2-com",
- "windows 0.62.2",
- "windows-core 0.62.2",
+ "webview2-com 0.38.2",
+ "windows 0.61.3",
+ "windows-core 0.61.2",
 ]

 [[package]]
@@ -7657,9 +7669,9 @@ dependencies = [

 [[package]]
 name = "tauri-runtime"
-version = "2.12.2"
+version = "2.12.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7c55766d99cea69055904d1735b93c2049302b2e09effd462120deb5581d78e9"
+checksum = "c2a57a2a9b8c8b7fc00d35b510fe808ded7f9f1b44fc1cdda6aee38632ea5413"
 dependencies = [
 "cookie",
 "dpi",
@@ -7676,15 +7688,15 @@ dependencies = [
 "thiserror 2.0.20",
 "url",
 "webkit2gtk",
- "webview2-com",
+ "webview2-com 0.39.1",
 "windows 0.62.2",
 ]

 [[package]]
 name = "tauri-runtime-wry"
-version = "2.12.2"
+version = "2.12.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8d61892587aea2a85245bcaec98c6fe46268874c0a0deae5535fb71ca7b93eae"
+checksum = "7f9e7e0c9f80a5130773cfabb6df4dc924518fb1b2c923726966804634b57d22"
 dependencies = [
 "gtk",
 "http",
@@ -7702,7 +7714,7 @@ dependencies = [
 "tracing",
 "url",
 "webkit2gtk",
- "webview2-com",
+ "webview2-com 0.39.1",
 "windows 0.62.2",
 "wry",
 ]
@@ -7740,9 +7752,9 @@ dependencies = [

 [[package]]
 name = "tauri-utils"
-version = "2.10.2"
+version = "2.10.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "362ab21cd4cc713f2a02b1a9b5688198b1541cfb6907c4281e9190e0f0ef4aa3"
+checksum = "2ff55a614843b9a3f010f211df637c94df2607175b8d0f6e0f4a7c19e18621ee"
 dependencies = [
 "anyhow",
 "brotli",
@@ -7771,7 +7783,7 @@ dependencies = [
 "thiserror 2.0.20",
 "toml 1.1.6+spec-1.1.0",
 "url",
- "urlpattern",
+ "urlpattern 0.6.0",
 "uuid",
 "walkdir",
 ]
@@ -7890,7 +7902,7 @@ dependencies = [
 "regex",
 "semver 0.11.0",
 "sha2 0.9.9",
- "signal-hook",
+ "signal-hook 0.1.17",
 "terminfo",
 "termios",
 "thiserror 1.0.69",
@@ -8061,9 +8073,9 @@ checksum = "1f3ccbac311fea05f86f61904b462b55fb3df8837a366dfc601a0161d0532f20"

 [[package]]
 name = "tokio"
-version = "1.53.3"
+version = "1.53.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ce3335fa71841cda333a58d7615b03901380ecf09d59b3296d21f8bbac0dde4e"
+checksum = "e95f91fcc7a621e8b030f6aa23c71fe9838ae2fb4d8118b75602a328f5144044"
 dependencies = [
 "bytes",
 "libc",
@@ -8123,9 +8135,9 @@ dependencies = [

 [[package]]
 name = "tokio-util"
-version = "0.7.20"
+version = "0.7.19"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e464cf451ba96ebfc6f9b6542f17ee8b8956e33f1e40d9690624e59d7a7f8a4b"
+checksum = "494815d09bf52b5548659851081238f0ca39ff638363907596da739561c62c52"
 dependencies = [
 "bytes",
 "futures-core",
@@ -8488,12 +8500,6 @@ dependencies = [
 "petgraph",
 ]

-[[package]]
-name = "trim-in-place"
-version = "0.1.8"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "daa60874b45b168f67f3f9ba1ee821ad77144d6fa19cef1cd1874a7450a948da"
-
 [[package]]
 name = "triomphe"
 version = "0.1.16"
@@ -8586,6 +8592,47 @@ dependencies = [
 "windows-sys 0.61.2",
 ]

+[[package]]
+name = "unic-char-property"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a8c57a407d9b6fa02b4795eb81c5b6652060a15a7903ea981f3d723e6c0be221"
+dependencies = [
+ "unic-char-range",
+]
+
+[[package]]
+name = "unic-char-range"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0398022d5f700414f6b899e10b8348231abf9173fa93144cbc1a43b9793c1fbc"
+
+[[package]]
+name = "unic-common"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "80d7ff825a6a654ee85a63e80f92f054f904f21e7d12da4e22f9834a4aaa35bc"
+
+[[package]]
+name = "unic-ucd-ident"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e230a37c0381caa9219d67cf063aa3a375ffed5bf541a452db16e744bdab6987"
+dependencies = [
+ "unic-char-property",
+ "unic-char-range",
+ "unic-ucd-version",
+]
+
+[[package]]
+name = "unic-ucd-version"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "96bd2f2237fe450fcd0a1d2f5f4e91711124f7857ba2e964247776ebeeb7b0c4"
+dependencies = [
+ "unic-common",
+]
+
 [[package]]
 name = "unicase"
 version = "2.9.0"
@@ -8645,6 +8692,18 @@ dependencies = [
 "serde_derive",
 ]

+[[package]]
+name = "urlpattern"
+version = "0.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "70acd30e3aa1450bc2eece896ce2ad0d178e9c079493819301573dae3c37ba6d"
+dependencies = [
+ "regex",
+ "serde",
+ "unic-ucd-ident",
+ "url",
+]
+
 [[package]]
 name = "urlpattern"
 version = "0.6.0"
@@ -9036,6 +9095,20 @@ dependencies = [
 "rustls-pki-types",
 ]

+[[package]]
+name = "webview2-com"
+version = "0.38.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7130243a7a5b33c54a444e54842e6a9e133de08b5ad7b5861cd8ed9a6a5bc96a"
+dependencies = [
+ "webview2-com-macros",
+ "webview2-com-sys 0.38.2",
+ "windows 0.61.3",
+ "windows-core 0.61.2",
+ "windows-implement",
+ "windows-interface",
+]
+
 [[package]]
 name = "webview2-com"
 version = "0.39.1"
@@ -9043,7 +9116,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "3f89fca7a704cee10dcb3654c1dbb8941d1783132f1917358af75bec37a7d7e6"
 dependencies = [
 "webview2-com-macros",
- "webview2-com-sys",
+ "webview2-com-sys 0.39.1",
 "windows 0.62.2",
 "windows-core 0.62.2",
 ]
@@ -9059,6 +9132,17 @@ dependencies = [
 "syn 2.0.119",
 ]

+[[package]]
+name = "webview2-com-sys"
+version = "0.38.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "381336cfffd772377d291702245447a5251a2ffa5bad679c99e61bc48bacbf9c"
+dependencies = [
+ "thiserror 2.0.20",
+ "windows 0.61.3",
+ "windows-core 0.61.2",
+]
+
 [[package]]
 name = "webview2-com-sys"
 version = "0.39.1"
@@ -9798,7 +9882,7 @@ dependencies = [
 "url",
 "webkit2gtk",
 "webkit2gtk-sys",
- "webview2-com",
+ "webview2-com 0.39.1",
 "windows 0.62.2",
 "windows-core 0.62.2",
 "windows-version",
@@ -10066,9 +10150,9 @@ dependencies = [

 [[package]]
 name = "zip"
-version = "9.0.4"
+version = "9.0.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a954114b47a54df49f83d2722814e86b23d4bb1b54a1b90fb7d92b41619ddc22"
+checksum = "e49ade69c4434c55dd651d36fe05f38e0578db948b773cbc01c48c4b5e560692"
 dependencies = [
 "aes",
 "bzip2",
@@ -10118,27 +10202,27 @@ dependencies = [

 [[package]]
 name = "zstd"
-version = "0.14.3"
+version = "0.13.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "db3ae9bf90af6e40197bef767eeefc46ad6397420fe873830bd85e5fbbfb3c70"
+checksum = "e91ee311a569c327171651566e07972200e76fcfe2242a4fa446149a3881c08a"
 dependencies = [
 "zstd-safe",
 ]

 [[package]]
 name = "zstd-safe"
-version = "8.2.0"
+version = "7.2.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ded520f16b29e1a9b771c722221b2b0a0398c2316d9bb3c42b458a5414d7434b"
+checksum = "8f49c4d5f0abb602a93fb8736af2a4f4dd9512e36f7f570d66e65ff867ed3b9d"
 dependencies = [
 "zstd-sys",
 ]

 [[package]]
 name = "zstd-sys"
-version = "2.1.2+zstd.1.5.7"
+version = "2.0.16+zstd.1.5.7"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "481ada9c543b2323cbb7bbdbb5249177fbf0188ed959ed2c15e4b22421c84ed3"
+checksum = "91e19ebc2adc8f83e43039e79776e3fda8ca919132d68a1fed6a5faca2683748"
 dependencies = [
 "cc",
 "pkg-config",
@@ -61,13 +61,13 @@ tracing-estuary = { git = "https://github.com/Tunglies/tracing-estuary.git", bra
 tauri-plugin-clash-verge-sysinfo = { path = "crates/tauri-plugin-clash-verge-sysinfo" }
 tracing = "0.1.44"

-tauri = { version = "2.12.4" }
-tauri-plugin-clipboard-manager = "2.5.0"
+tauri = { version = "2.12.1" }
+tauri-plugin-clipboard-manager = "2.4.1"
 parking_lot = { version = "0.12.5", features = ["hardware-lock-elision"] }
 anyhow = "1.0.104"
 chrono = "0.4.45"
 criterion = { version = "0.8.2", features = ["async_tokio"] }
-tokio = { version = "1.53.3", features = [
+tokio = { version = "1.53.2", features = [
  "rt-multi-thread",
  "macros",
  "time",
@@ -88,7 +88,7 @@ rust_iso3166 = "0.2.0"
 smartstring = { version = "1.0.1" }

 serde = { version = "1.0.229" }
-serde_json = { version = "1.0.154" }
+serde_json = { version = "1.0.151" }
 serde_yaml_ng = { version = "0.10.0" }
 bitflags = { version = "2.13.2" }
 socket2 = "0.6.5"
@@ -3,34 +3,21 @@
 <details>
 <summary><strong> 🐞 修复问题 </strong></summary>

- 修复托盘测速与代理页行为不一致的问题，移除托盘「测试延迟」入口
- 修复通过 URL 导入订阅时，即使导入的订阅并非当前使用的订阅，也会重新加载当前配置
- 修复 首页 网站测速失败后卡片一直显示测试中
- 修复 代理 页展开分组后不显示最新测速结果，需切换节点才刷新
- 修复 代理 在全局模式下无法展开节点组
- 修复 自定义 CSS 无法修改编辑器字体和字号的问题
- 修复恢复备份的同时修改配置，可能导致配置丢失或错乱的问题
- 修复切换规则模式与配置变更并发时可能丢失或错乱的问题
-
-**🐧 Linux**
-
- Linux：修复 deb/rpm 安装包错误包含多余的 `frontend-contract` 可执行文件，导致下游重新打包失败的问题
+- 修复通过 URL 导入订阅时，即使导入的订阅并非当前使用的订阅，也会重新加载当前配置的问题
+- 修复「首页」网站测速失败后卡片一直显示测试中的问题

 </details>

 <details>
 <summary><strong> ✨ 新增功能 </strong></summary>

- 新增虚拟网卡设置的「DNS 模式」选项，支持配置 mihomo 系统 DNS 行为
- 新增「IP 信息」自动刷新开关，关闭后仍可手动刷新
- 新增 Muse AI 解锁检测，针对 Muse AI 特有的 Cloudflare 人机验证增加「Risky」状态标记

 </details>

 <details>
 <summary><strong> 🚀 优化改进 </strong></summary>

- 优化「链式代理」：开启前需确认网速影响提示，空面板新增「关闭」按钮
+- 记住「启用系统标题栏」设置，Windows/macOS 即时生效，Linux 重启后生效

 **🖥️ Windows**

@@ -70,6 +70,8 @@ tray:
  global: عام
  profiles: الملفات التعريفية
  proxies: وكلاء
+  testLatency: اختبار التأخير
+  testingLatency: جارٍ اختبار التأخير…
  systemProxy: وكيل النظام
  tunMode: وضع TUN
  closeAllConnections: إغلاق كل الاتصالات
@@ -70,6 +70,8 @@ tray:
  global: Global
  profiles: Profile
  proxies: Proxy
+  testLatency: Latenz testen
+  testingLatency: Latenz wird getestet…
  systemProxy: Systemproxy
  tunMode: TUN-Modus
  closeAllConnections: Alle Verbindungen schließen
@@ -70,6 +70,8 @@ tray:
  global: Global
  profiles: Profiles
  proxies: Proxies
+  testLatency: Test Latency
+  testingLatency: Testing latency…
  systemProxy: System Proxy
  tunMode: TUN Mode
  closeAllConnections: Close All Connections
@@ -70,6 +70,8 @@ tray:
  global: Global
  profiles: Perfiles
  proxies: Proxies
+  testLatency: Probar latencia
+  testingLatency: Probando latencia…
  systemProxy: Proxy del sistema
  tunMode: Modo TUN
  closeAllConnections: Cerrar todas las conexiones
@@ -70,6 +70,8 @@ tray:
  global: سراسری
  profiles: پروفایل‌ها
  proxies: پروکسی‌ها
+  testLatency: آزمایش تأخیر
+  testingLatency: در حال آزمایش تأخیر…
  systemProxy: پروکسی سیستم
  tunMode: حالت TUN
  closeAllConnections: بستن همه اتصال‌ها
@@ -70,6 +70,8 @@ tray:
  global: Global
  profiles: Profil
  proxies: Proksi
+  testLatency: Uji Latensi
+  testingLatency: Menguji latensi…
  systemProxy: Proksi Sistem
  tunMode: Mode TUN
  closeAllConnections: Tutup Semua Koneksi
@@ -70,6 +70,8 @@ tray:
  global: グローバル
  profiles: プロファイル
  proxies: プロキシ
+  testLatency: 遅延テスト
+  testingLatency: 遅延をテスト中…
  systemProxy: システムプロキシ
  tunMode: TUN モード
  closeAllConnections: すべての接続を閉じる
@@ -70,6 +70,8 @@ tray:
  global: 글로벌
  profiles: 프로필
  proxies: 프록시
+  testLatency: 지연 테스트
+  testingLatency: 지연 테스트 중…
  systemProxy: 시스템 프록시
  tunMode: TUN 모드
  closeAllConnections: 모든 연결 닫기
@@ -70,6 +70,8 @@ tray:
  global: Global
  profiles: Perfis
  proxies: Proxies
+  testLatency: Test Latency
+  testingLatency: Testing latency…
  systemProxy: Proxy do sistema
  tunMode: Modo TUN
  closeAllConnections: Fechar todas as conexões
@@ -70,6 +70,8 @@ tray:
  global: Глобальный
  profiles: Профили
  proxies: Прокси
+  testLatency: Проверить задержку
+  testingLatency: Проверка задержки…
  systemProxy: Системный прокси
  tunMode: Режим TUN
  closeAllConnections: Закрыть все соединения
@@ -70,6 +70,8 @@ tray:
  global: Küresel
  profiles: Profiller
  proxies: Vekil'ler
+  testLatency: Gecikmeyi Test Et
+  testingLatency: Gecikme test ediliyor…
  systemProxy: Sistem Vekil'i
  tunMode: TUN Modu
  closeAllConnections: Tüm Bağlantıları Kapat
@@ -70,6 +70,8 @@ tray:
  global: Глобаль
  profiles: Профильләр
  proxies: Проксилар
+  testLatency: Кичектерүне тикшерү
+  testingLatency: Кичектерү тикшерелә…
  systemProxy: Системалы прокси
  tunMode: TUN режимы
  closeAllConnections: Барлык тоташуларны ябу
@@ -70,6 +70,8 @@ tray:
  global: 全局
  profiles: 订阅
  proxies: 代理
+  testLatency: 测试延迟
+  testingLatency: 正在测试延迟…
  systemProxy: 系统代理
  tunMode: TUN 模式
  closeAllConnections: 关闭所有连接
@@ -70,6 +70,8 @@ tray:
  global: 全域
  profiles: 訂閱
  proxies: 代理
+  testLatency: 測試延遲
+  testingLatency: 正在測試延遲…
  systemProxy: 系統代理
  tunMode: 虛擬網路介面卡模式
  closeAllConnections: 關閉所有連線
@@ -11,7 +11,6 @@ mod chatgpt;
 mod claude;
 mod disney_plus;
 mod gemini;
-mod muse;
 mod netflix;
 mod prime_video;
 mod spotify;
@@ -31,7 +30,6 @@ enum UnlockCheck {
    ChatGptWeb,
    Claude,
    Gemini,
-    MuseAi,
    YouTubePremium,
    BahamutAnime,
    Netflix,
@@ -48,7 +46,6 @@ impl UnlockCheck {
        Self::ChatGptWeb,
        Self::Claude,
        Self::Gemini,
-        Self::MuseAi,
        Self::YouTubePremium,
        Self::BahamutAnime,
        Self::Netflix,
@@ -69,7 +66,6 @@ impl UnlockCheck {
            Self::ChatGptWeb => chatgpt::CHATGPT_WEB_NAME,
            Self::Claude => claude::CLAUDE_NAME,
            Self::Gemini => gemini::GEMINI_NAME,
-            Self::MuseAi => muse::MUSE_AI_NAME,
            Self::YouTubePremium => youtube::YOUTUBE_PREMIUM_NAME,
            Self::BahamutAnime => bahamut::BAHAMUT_ANIME_NAME,
            Self::Netflix => netflix::NETFLIX_NAME,
@@ -87,7 +83,6 @@ impl UnlockCheck {
            Self::ChatGptWeb => chatgpt::check_chatgpt(client).await,
            Self::Claude => claude::check_claude(client).await,
            Self::Gemini => gemini::check_gemini(client).await,
-            Self::MuseAi => muse::check_muse_ai(client).await,
            Self::YouTubePremium => youtube::check_youtube_premium(client).await,
            Self::BahamutAnime => bahamut::check_bahamut_anime(client).await,
            Self::Netflix => netflix::check_netflix(client).await,
@@ -1,48 +0,0 @@
-use reqwest::Client;
-
-use crate::utils::{classify_restricted_status, get_trace_location};
-
-use super::UnlockItem;
-
-pub(crate) const MUSE_AI_NAME: &str = "Muse AI";
-
-const MUSE_URL: &str = "https://muse.ai";
-const CLOUDFLARE_TRACE_URL: &str = "https://www.cloudflare.com/cdn-cgi/trace";
-
-// The aymh ("Are You a Human") gateway answers plain HTTP requests with a
-// generic Meta error page that always contains the Facebook logo asset.
-const AYMH_ERROR_MARKERS: &[&str] = &["Sorry, something went wrong", "static.facebook.com/images/logos"];
-
-pub(super) async fn check_muse_ai(client: &Client) -> UnlockItem {
-    // muse.ai itself is served by Vercel, so resolve the exit region through
-    // the generic Cloudflare trace endpoint instead of a service-specific one.
-    let region = get_trace_location(client, CLOUDFLARE_TRACE_URL)
-        .await
-        .map(|code| code.trim().to_ascii_uppercase())
-        .map(|code| UnlockItem::region_label(&code));
-
-    let Ok(response) = client.get(MUSE_URL).send().await else {
-        return UnlockItem::checked(MUSE_AI_NAME, "Failed (Network Connection)", region);
-    };
-
-    let status = response.status();
-    let landed_on_aymh = response.url().host_str() == Some("auth.muse.ai");
-    let body = response.text().await.unwrap_or_default();
-
-    // Every region is redirected to the aymh anti-bot gateway before the app
-    // loads, and a non-browser HTTP client cannot finish the JavaScript
-    // challenge. It returns the Meta error page, so reaching this point only
-    // proves the exit can connect to Muse's auth infrastructure; availability
-    // cannot be verified over plain HTTP and is reported as `Risky`.
-    let behind_anti_bot = landed_on_aymh || AYMH_ERROR_MARKERS.iter().any(|marker| body.contains(marker));
-
-    let result = if behind_anti_bot {
-        "Risky"
-    } else if status.is_success() {
-        "Yes"
-    } else {
-        classify_restricted_status(status).unwrap_or("Failed")
-    };
-
-    UnlockItem::checked(MUSE_AI_NAME, result, region)
-}
@@ -1,15 +1,3 @@
-//! Linux-only termination signal bridge.
-//!
-//! Upstream Tauri delivers session-end and termination events to the app on
-//! Windows and macOS, but has no equivalent on Linux: a desktop session may
-//! end without any window or run event reaching the process. Linux builds
-//! keep this crate to listen for SIGTERM, SIGINT and SIGHUP and forward them
-//! to the app quit flow, so system proxy and TUN cleanup still runs before
-//! the process dies. Non-Linux builds compile this crate to nothing and must
-//! not depend on it.
-
-#![cfg(target_os = "linux")]
-
 use std::sync::{
    OnceLock,
    atomic::{AtomicBool, Ordering},
@@ -17,13 +5,20 @@ use std::sync::{

 use clash_verge_logging::{Type, logging};

+#[cfg(unix)]
 mod unix;
+#[cfg(windows)]
+mod windows;

 pub(crate) static RUNTIME: OnceLock<Option<tokio::runtime::Runtime>> = OnceLock::new();
 pub(crate) static SHUTDOWN_LATCH: ShutdownLatch = ShutdownLatch::new();

-/// Serializes signal-triggered cleanups: a signal arriving while a quit
-/// attempt is still in flight is dropped instead of overlapping it.
+#[derive(Clone, Copy, Debug, Eq, PartialEq)]
+pub enum ShutdownOutcome {
+    Committed,
+    Canceled,
+}
+
 pub(crate) struct ShutdownLatch {
    is_cleaning_up: AtomicBool,
 }
@@ -41,18 +36,17 @@ impl ShutdownLatch {
            .is_ok()
    }

-    fn finish(&self) {
-        self.is_cleaning_up.store(false, Ordering::Release);
+    fn finish(&self, outcome: ShutdownOutcome) {
+        if matches!(outcome, ShutdownOutcome::Canceled) {
+            self.is_cleaning_up.store(false, Ordering::Release);
+        }
    }
 }

-/// Spawns the Linux signal loop on a dedicated runtime so it survives the
-/// teardown of any app-owned runtime. The handler runs once per accepted
-/// signal; the quit flow it invokes owns the exit-or-cancel decision.
 pub fn register<F, Fut>(f: F)
 where
    F: Fn() -> Fut + Send + Sync + 'static,
-    Fut: Future<Output = ()> + Send + 'static,
+    Fut: Future<Output = ShutdownOutcome> + Send + 'static,
 {
    RUNTIME.get_or_init(|| match tokio::runtime::Runtime::new() {
        Ok(rt) => Some(rt),
@@ -67,22 +61,36 @@ where
        }
    });

+    #[cfg(unix)]
    unix::register(f);
+
+    #[cfg(windows)]
+    windows::register(f);
 }

 #[cfg(test)]
 mod tests {
-    use super::ShutdownLatch;
+    use super::{ShutdownLatch, ShutdownOutcome};

    #[test]
-    fn finished_attempt_releases_latch_for_the_next_signal() {
+    fn canceled_shutdown_releases_latch_and_permits_next_attempt() {
        let latch = ShutdownLatch::new();

        assert!(latch.try_begin());
        assert!(!latch.try_begin());

-        latch.finish();
+        latch.finish(ShutdownOutcome::Canceled);

        assert!(latch.try_begin());
    }
+
+    #[test]
+    fn committed_shutdown_retains_latch_and_suppresses_repeats() {
+        let latch = ShutdownLatch::new();
+
+        assert!(latch.try_begin());
+        latch.finish(ShutdownOutcome::Committed);
+
+        assert!(!latch.try_begin());
+    }
 }
@@ -1,12 +1,12 @@
 use clash_verge_logging::{Type, logging};
 use tokio::signal::unix::{SignalKind, signal};

-use crate::{RUNTIME, SHUTDOWN_LATCH};
+use crate::{RUNTIME, SHUTDOWN_LATCH, ShutdownOutcome};

 pub fn register<F, Fut>(f: F)
 where
    F: Fn() -> Fut + Send + Sync + 'static,
-    Fut: Future<Output = ()> + Send + 'static,
+    Fut: Future<Output = ShutdownOutcome> + Send + 'static,
 {
    if let Some(Some(rt)) = RUNTIME.get() {
        rt.spawn(async move {
@@ -60,8 +60,7 @@ where
                }
                logging!(info, Type::SystemSignal, "Caught signal {}", signal_name);

-                f().await;
-                SHUTDOWN_LATCH.finish();
+                SHUTDOWN_LATCH.finish(f().await);
            }
        });
    } else {
@@ -0,0 +1,83 @@
+use clash_verge_logging::{Type, logging};
+use tokio::signal::windows;
+
+use crate::{RUNTIME, SHUTDOWN_LATCH, ShutdownOutcome};
+
+pub fn register<F, Fut>(f: F)
+where
+    F: Fn() -> Fut + Send + Sync + 'static,
+    Fut: Future<Output = ShutdownOutcome> + Send + 'static,
+{
+    if let Some(Some(rt)) = RUNTIME.get() {
+        rt.spawn(async move {
+            let mut ctrl_c = match windows::ctrl_c() {
+                Ok(s) => s,
+                Err(e) => {
+                    logging!(error, Type::SystemSignal, "Failed to register Ctrl+C: {}", e);
+                    return;
+                }
+            };
+
+            let mut ctrl_close = match windows::ctrl_close() {
+                Ok(s) => s,
+                Err(e) => {
+                    logging!(error, Type::SystemSignal, "Failed to register Ctrl+Close: {}", e);
+                    return;
+                }
+            };
+
+            let mut ctrl_shutdown = match windows::ctrl_shutdown() {
+                Ok(s) => s,
+                Err(e) => {
+                    logging!(error, Type::SystemSignal, "Failed to register Ctrl+Shutdown: {}", e);
+                    return;
+                }
+            };
+
+            let mut ctrl_logoff = match windows::ctrl_logoff() {
+                Ok(s) => s,
+                Err(e) => {
+                    logging!(error, Type::SystemSignal, "Failed to register Ctrl+Logoff: {}", e);
+                    return;
+                }
+            };
+
+            loop {
+                let signal_name;
+                tokio::select! {
+                    _ = ctrl_c.recv() => {
+                        signal_name = "Ctrl+C";
+                    }
+                    _ = ctrl_close.recv() => {
+                        signal_name = "Ctrl+Close";
+                    }
+                    _ = ctrl_shutdown.recv() => {
+                        signal_name = "Ctrl+Shutdown";
+                    }
+                    _ = ctrl_logoff.recv() => {
+                        signal_name = "Ctrl+Logoff";
+                    }
+                }
+
+                if !SHUTDOWN_LATCH.try_begin() {
+                    logging!(
+                        info,
+                        Type::SystemSignal,
+                        "Already shutting down, ignoring repeated signal: {}",
+                        signal_name
+                    );
+                    continue;
+                }
+                logging!(info, Type::SystemSignal, "Caught Windows signal: {}", signal_name);
+
+                SHUTDOWN_LATCH.finish(f().await);
+            }
+        });
+    } else {
+        logging!(
+            error,
+            Type::SystemSignal,
+            "register shutdown signal failed, RUNTIME is not available"
+        );
+    }
+}
@@ -15,7 +15,7 @@ serde = { workspace = true, features = ["derive"] }
 sysinfo = { version = "0.39.6", features = ["network", "system"] }

 [target.'cfg(not(windows))'.dependencies]
-libc = "0.2.191"
+libc = "0.2.190"

 [target.'cfg(windows)'.dependencies]
 deelevate = { workspace = true }
@@ -14,7 +14,7 @@
    "build:fast": "cross-env NODE_OPTIONS='--max-old-space-size=4096' tauri build -- --profile fast-release",
    "tauri": "tauri",
    "web:dev": "vite",
-    "web:build": "tsrs -p . --noEmit && vite build",
+    "web:build": "tsc --noEmit && vite build",
    "web:serve": "vite preview",
    "prebuild": "node scripts/prebuild.mjs",
    "updater": "node scripts/updater.mjs",
@@ -32,7 +32,7 @@
    "i18n:types": "node scripts/generate-i18n-keys.mjs",
    "gen:contract": "node scripts/gen-contract.mjs",
    "arch:check": "node scripts/check-architecture.mjs listen emit invoke",
-    "typecheck": "tsrs -p . --noEmit",
+    "typecheck": "tsc --noEmit",
    "test": "vitest run",
    "test:watch": "vitest",
    "knip:check": "knip",
@@ -54,13 +54,13 @@
    "@mui/icons-material": "^9.4.0",
    "@mui/material": "^9.4.0",
    "@tanstack/react-virtual": "^3.14.13",
-    "@tauri-apps/api": "2.12.4",
-    "@tauri-apps/plugin-clipboard-manager": "2.5.0",
-    "@tauri-apps/plugin-dialog": "2.8.3",
-    "@tauri-apps/plugin-fs": "2.7.1",
-    "@tauri-apps/plugin-http": "2.8.3",
-    "@tauri-apps/plugin-opener": "2.7.2",
-    "@tauri-apps/plugin-updater": "2.14.0",
+    "@tauri-apps/api": "2.12.1",
+    "@tauri-apps/plugin-clipboard-manager": "2.4.0",
+    "@tauri-apps/plugin-dialog": "2.8.0",
+    "@tauri-apps/plugin-fs": "2.6.0",
+    "@tauri-apps/plugin-http": "2.8.0",
+    "@tauri-apps/plugin-opener": "2.7.0",
+    "@tauri-apps/plugin-updater": "2.13.1",
    "ahooks": "^3.10.0",
    "cidr-block": "^2.3.0",
    "compare-versions": "^6.1.1",
@@ -75,11 +75,11 @@
    "monaco-yaml": "^5.5.1",
    "nanoid": "^6.0.1",
    "qrcode.react": "^4.2.0",
-    "react": "19.3.1",
-    "react-dom": "19.3.1",
+    "react": "19.3.0",
+    "react-dom": "19.3.0",
    "react-error-boundary": "6.1.6",
    "react-hook-form": "^7.88.0",
-    "react-i18next": "17.1.8",
+    "react-i18next": "17.0.15",
    "react-markdown": "10.1.0",
    "react-router": "^8.4.0",
    "rehype-raw": "^7.0.0",
@@ -95,7 +95,7 @@
    "@biomejs/biome": "^2.5.14",
    "@eslint-react/eslint-plugin": "^5.20.5",
    "@eslint/js": "^10.0.1",
-    "@tauri-apps/cli": "2.12.3",
+    "@tauri-apps/cli": "2.12.1",
    "@types/lodash-es": "^4.17.12",
    "@types/node": "^24.13.6",
    "@types/react": "19.3.0",
@@ -103,7 +103,7 @@
    "@types/validator": "^13.15.10",
    "@vitejs/plugin-legacy": "^8.2.3",
    "@vitejs/plugin-react": "^6.1.1",
-    "@wdio/tauri-service": "1.5.0",
+    "@wdio/tauri-service": "1.4.0",
    "adm-zip": "^0.6.1",
    "axios": "^1.20.0",
    "cli-color": "^2.0.4",
@@ -123,18 +123,17 @@
    "https-proxy-agent": "^9.1.0",
    "husky": "^9.1.7",
    "jiti": "^2.7.0",
-    "knip": "6.43.0",
+    "knip": "6.39.0",
    "lint-staged": "^17.5.1",
    "sass": "^1.104.1",
    "tar": "^7.5.22",
    "terser": "^5.51.2",
-    "tsrs": "0.20.0-ts7.1.0-beta",
    "typescript": "^6.0.3",
    "typescript-eslint": "^8.70.0",
    "vite": "^8.3.0",
    "vite-plugin-svgr": "^5.2.0",
    "vitest": "^5.0.1",
-    "webdriverio": "10.1.0",
+    "webdriverio": "10.0.0",
    "ws": "8.22.0"
  },
  "lint-staged": {
@@ -147,5 +146,5 @@
    ]
  },
  "type": "module",
-  "packageManager": "pnpm@12.15.0"
+  "packageManager": "pnpm@12.11.2"
 }
@@ -10,11 +10,3 @@ allowBuilds:
  unrs-resolver: true
 minimumReleaseAgeExclude:
  - dayjs@1.11.21
-  - "@tsrs/darwin-arm64@0.20.0-ts7.1.0-beta"
-  - "@tsrs/darwin-x64@0.20.0-ts7.1.0-beta"
-  - "@tsrs/linux-arm64-gnu@0.20.0-ts7.1.0-beta"
-  - "@tsrs/linux-arm64-musl@0.20.0-ts7.1.0-beta"
-  - "@tsrs/linux-x64-gnu@0.20.0-ts7.1.0-beta"
-  - "@tsrs/linux-x64-musl@0.20.0-ts7.1.0-beta"
-  - "@tsrs/win32-x64@0.20.0-ts7.1.0-beta"
-  - tsrs@0.20.0-ts7.1.0-beta
@@ -45,17 +45,6 @@
      "matchManagers": ["npm"],
      "groupName": "npm dependencies"
    },
-    {
-      "description": "Update Tauri npm packages and Cargo crates together so frontend and backend stay in sync",
-      "matchPackageNames": [
-        "@tauri-apps/**",
-        "@wdio/tauri-service",
-        "tauri",
-        "tauri-*"
-      ],
-      "groupName": "tauri",
-      "addLabels": ["tauri"]
-    },
    {
      "description": "Group all GitHub Actions updates into a single PR",
      "matchManagers": ["github-actions"],
@@ -79,13 +68,6 @@
      "matchPackageNames": ["typescript"],
      "allowedVersions": "<7.0.0 || >=7.1.0"
    },
-    {
-      "description": "Review tsrs bumps alone; the version encodes the pinned TypeScript release",
-      "matchPackageNames": ["tsrs", "/^@tsrs//"],
-      "groupName": "tsrs",
-      "rangeStrategy": "pin",
-      "automerge": false
-    },
    {
      "description": "Prevent project from supply chain attack",
      "matchDatasources": ["npm"],
@@ -1,3 +1,3 @@
 [toolchain]
-channel = "1.99.1"
+channel = "1.99.0"
 components = ["rustfmt", "clippy"]
@@ -17,7 +17,7 @@
    "pnpm-lock.yaml",
    "pnpm-workspace.yaml",
    "scripts/contract-inputs.json",
-    ".github/workflows/contract-parity.yml",
+    ".github/workflows/frontend-check.yml",
    ".husky/pre-push"
  ]
 }
@@ -22,7 +22,7 @@ try {
      'run',
      '-p',
      'clash-verge',
-      '--example',
+      '--bin',
      'frontend-contract',
      '--locked',
      '-q',
@@ -434,13 +434,12 @@ for (let iteration = 0; iteration < repeat && !interrupted; iteration++) {
      devicePixelRatio,
    ])
    run.viewport = { dom: viewport, driver: await browser.getWindowRect() }
-    const driverScale = run.viewport.driver.width / 1000
    assert(
-      viewport[0] === 1000 &&
+      run.viewport.driver.width / viewport[2] === 1000 &&
+        run.viewport.driver.height / viewport[2] === 700 &&
+        viewport[0] === 1000 &&
        viewport[1] > 0 &&
-        viewport[1] <= 700 &&
-        (driverScale === 1 || driverScale === viewport[2]) &&
-        run.viewport.driver.height / driverScale === 700,
+        viewport[1] <= 700,
      `unexpected window dimensions: ${JSON.stringify(run.viewport)}`,
    )
    assert(
@@ -29,12 +29,13 @@ perf-harness = ["dep:tauri-plugin-wdio-webdriver"]
 identifier = "io.github.clash-verge-rev.clash-verge-rev"

 [build-dependencies]
-tauri-build = { version = "2.7.3", features = [] }
+tauri-build = { version = "2.7.1", features = [] }

 [dependencies]
 clash-verge-draft = { workspace = true }
 clash-verge-media-unlock = { workspace = true }
 clash-verge-logging = { workspace = true }
+clash-verge-signal = { workspace = true }
 clash-verge-i18n = { workspace = true }
 clash-verge-limiter = { workspace = true }
 tauri-plugin-clash-verge-sysinfo = { workspace = true }
@@ -72,55 +73,51 @@ sysproxy = { git = "https://github.com/clash-verge-rev/sysproxy-rs.git", branch
  "guard",
 ] }
 network-interface = { version = "2.0.5", features = ["serde"] }
-tauri-plugin-shell = "2.5.0"
-tauri-plugin-opener = "2.7.2"
-tauri-plugin-dialog = "2.8.3"
-tauri-plugin-fs = "2.7.1"
+tauri-plugin-shell = "2.4.0"
+tauri-plugin-opener = "2.7.0"
+tauri-plugin-dialog = "2.8.1"
+tauri-plugin-fs = "2.6.0"
 tauri-plugin-process = "2.4.0"
-tauri-plugin-deep-link = "2.6.2"
+tauri-plugin-deep-link = "2.6.1"
 tauri-plugin-window-state = "2.5.0"
-zip = "9.0.4"
+zip = "9.0.1"
 flate2 = "1.1.10"
 reqwest_dav = "0.3.3"
 aes-gcm = { version = "0.11.1" }
 base64 = "0.23.1"
 minisign-verify = "0.3.0"
-sha2 = "0.11.1"
+sha2 = "0.11"
 getrandom = "0.4.3"
 futures = "0.3.34"
 gethostname = "1.1.0"
 scopeguard = "1.2.0"
-tauri-plugin-notification = "2.7.0"
+tauri-plugin-notification = "2.5.1"
 tokio-stream = "0.1.19"
 backon = { version = "1.6.0", features = ["tokio-sleep"] }
-tauri-plugin-http = "2.8.3"
+tauri-plugin-http = "2.8.0"
 tracing = { workspace = true }
 tauri-plugin-devtools = { version = "2.2.2", optional = true }
-tauri-plugin-mihomo = { git = "https://github.com/clash-verge-rev/tauri-plugin-mihomo", rev = "7a03d16f4d39b1bb885b7babe66b9e153e34b615" }
+tauri-plugin-mihomo = { git = "https://github.com/clash-verge-rev/tauri-plugin-mihomo", branch = "main" }
 async-trait = "0.1.92"
 clash_verge_service_ipc = { git = "https://github.com/clash-verge-rev/clash-verge-service-ipc.git", tag = "v2.7.6", version = "2.7.6", features = [
  "client",
 ] }
 arc-swap = "1.9.2"
 tokio-rustls = "0.26.6"
-rustls = { version = "0.23.46", features = ["ring"] }
+rustls = { version = "0.23.45", features = ["ring"] }
 webpki-roots = "1.0.9"
 dark-light = "3.0.0"
 bytes = "1.12.1"
-tokio-util = { version = "0.7.20", features = ["time"] }
+tokio-util = { version = "0.7.19", features = ["time"] }
 specta = { version = "=2.0.0-rc.25", features = ["derive", "function", "serde_json"] }
 tauri-specta = { version = "=2.0.0-rc.25", features = ["derive", "typescript"] }
 specta-typescript = "=0.0.12"

 [target.'cfg(unix)'.dependencies]
-libc = "0.2.191"
-
-[target.'cfg(target_os = "linux")'.dependencies]
-# Upstream has no session-end signal support on Linux; see crates/clash-verge-signal.
-clash-verge-signal = { workspace = true }
+libc = "0.2.190"

 [target.'cfg(target_os = "macos")'.dependencies]
-tauri-plugin-wdio-webdriver = { version = "=1.5.0", optional = true }
+tauri-plugin-wdio-webdriver = { version = "=1.4.0", optional = true }
 objc2 = "0.6.5"
 objc2-foundation = { version = "0.3.2", features = [
  "NSString",
@@ -153,8 +150,8 @@ windows-sys.workspace = true

 [target.'cfg(not(any(target_os = "android", target_os = "ios")))'.dependencies]
 tauri-plugin-autostart = "2.7.0"
-tauri-plugin-global-shortcut = "2.4.1"
-tauri-plugin-updater = "2.14.0"
+tauri-plugin-global-shortcut = "2.4.0"
+tauri-plugin-updater = "2.13.1"

 [dev-dependencies]
 criterion = { workspace = true }
@@ -1,9 +1,10 @@
 fn main() -> Result<(), Box<dyn std::error::Error>> {
    if std::env::var("CARGO_CFG_TARGET_OS").as_deref() == Ok("windows")
        && std::env::var("CARGO_CFG_TARGET_ENV").as_deref() == Ok("msvc")
+        && std::env::var_os("CARGO_FEATURE_CLIPPY").is_some()
    {
-        // Tauri's resource is linked to the app binary, but not to Rust unit-test harnesses or examples.
-        // Give non-app targets their own manifest so tests and examples can resolve TaskDialogIndirect.
+        // Tauri's resource is linked to the app binary, but not to Rust unit-test harnesses.
+        // Give mock-context builds their own manifest so tests can resolve TaskDialogIndirect.
        let out_dir = std::env::var_os("OUT_DIR").ok_or_else(|| std::io::Error::other("OUT_DIR is not set"))?;
        let manifest_path = std::path::PathBuf::from(out_dir).join("windows-test-manifest.xml");
        std::fs::write(
@@ -24,14 +25,8 @@ fn main() -> Result<(), Box<dyn std::error::Error>> {
 </assembly>
 "#,
        )?;
-        let manifest_display = manifest_path.display();
-        if std::env::var_os("CARGO_FEATURE_CLIPPY").is_some() {
-            println!("cargo:rustc-link-arg=/MANIFEST:EMBED");
-            println!("cargo:rustc-link-arg=/MANIFESTINPUT:{manifest_display}");
-        } else {
-            println!("cargo:rustc-link-arg-examples=/MANIFEST:EMBED");
-            println!("cargo:rustc-link-arg-examples=/MANIFESTINPUT:{manifest_display}");
-        }
+        println!("cargo:rustc-link-arg=/MANIFEST:EMBED");
+        println!("cargo:rustc-link-arg=/MANIFESTINPUT:{}", manifest_path.display());
    }

    #[cfg(feature = "clippy")]
@@ -1,5 +1,3 @@
-// Dev-only target: Tauri ships everything under src/bin/ to /usr/bin in deb/rpm
-// bundles (PR #8131), so this generator must stay an example, never a bin.
 fn main() -> Result<(), Box<dyn std::error::Error>> {
    let mut args = std::env::args_os().skip(1);
    let output = args
@@ -282,9 +282,7 @@ async fn handle_validation_failure(
 ) -> CmdResult<ValidationOutcome> {
    logging!(warn, Type::Cmd, "配置验证失败: {}", outcome);
    discard_and_restore(current_profile).await?;
-    if !matches!(outcome, ValidationOutcome::Busy) {
-        handle_validation_notice(&outcome, ValidationNoticeTarget::Runtime, "运行时配置");
-    }
+    handle_validation_notice(&outcome, ValidationNoticeTarget::Runtime, "运行时配置");
    Ok(outcome)
 }

@@ -313,6 +311,9 @@ async fn perform_config_update(
    current_value: Option<&String>,
    current_profile: Option<&String>,
 ) -> CmdResult<ValidationOutcome> {
+    defer! {
+        CURRENT_SWITCHING_PROFILE.store(false, Ordering::Release);
+    }
    let update_result = run_profile_config_update_transition(|| CoreManager::global().update_config_forced()).await;

    match update_result {
@@ -372,6 +373,8 @@ pub struct ProfilePatch {
    #[specta(type = Option<std::string::String>)]
    pub url: Option<String>,
    pub selected: Option<Vec<crate::config::PrfSelected>>,
+    #[specta(type = Option<std::collections::BTreeMap<std::string::String, std::string::String>>)]
+    pub latency_test_urls: Option<std::collections::BTreeMap<String, String>>,
    pub extra: Option<crate::config::PrfExtra>,
    pub updated: Option<usize>,
    pub option: Option<PrfOption>,
@@ -386,6 +389,7 @@ impl From<ProfilePatch> for PrfItem {
            file: patch.file,
            url: patch.url,
            selected: patch.selected,
+            latency_test_urls: patch.latency_test_urls,
            extra: patch.extra,
            updated: patch.updated,
            option: patch.option,
@@ -405,9 +409,6 @@ pub async fn patch_profiles_config(profiles: ProfileSelection) -> CmdResult<Vali
        logging!(info, Type::Cmd, "当前正在切换配置，放弃请求");
        return Ok(ValidationOutcome::Busy);
    }
-    defer! {
-        CURRENT_SWITCHING_PROFILE.store(false, Ordering::Release);
-    }
    let _profile_write_guard = PROFILE_WRITE_LOCK.lock().await;

    let profiles = IProfiles {
@@ -108,20 +108,32 @@ fn runtime_group_scopes(config: Option<&Mapping>) -> BTreeMap<String, GroupScope
 #[tauri::command]
 #[specta::specta]
 pub async fn get_proxy_view() -> CmdResult<ProxyViewV1> {
+    proxy_view(None).await
+}
+
+pub(crate) async fn proxy_view(provider_timeout: Option<std::time::Duration>) -> CmdResult<ProxyViewV1> {
    let runtime = Config::runtime().await;
    let latest_runtime = runtime.latest_arc();
    let runtime_group_order = runtime_group_order(latest_runtime.config.as_ref());
    let group_scopes = runtime_group_scopes(latest_runtime.config.as_ref());

    let mihomo = Handle::mihomo();
-    let (proxies, providers) = tokio::join!(mihomo.get_proxies(), mihomo.get_proxy_providers(),);
+    let (proxies, providers) = tokio::join!(mihomo.get_proxies(), async {
+        match provider_timeout {
+            Some(timeout) => tokio::time::timeout(timeout, mihomo.get_proxy_providers())
+                .await
+                .ok()
+                .and_then(Result::ok),
+            None => mihomo.get_proxy_providers().await.ok(),
+        }
+    });
    let proxies = proxies.stringify_err()?;

    Ok(ProxyViewBuilder::build(ProxyViewInput {
        runtime_group_order,
        group_scopes,
        proxies,
-        providers: providers.ok(),
+        providers,
    }))
 }

@@ -184,41 +184,84 @@ impl IClashTemp {
            _ => None,
        })
    }
-    fn guard_port_value(config: &Mapping, key: &str, default: u16) -> u16 {
+    #[cfg(not(target_os = "windows"))]
+    fn guard_redir_port(config: &Mapping) -> u16 {
        let mut port = config
-            .get(key)
+            .get("redir-port")
            .and_then(|value| match value {
                Value::String(val_str) => val_str.parse().ok(),
                Value::Number(val_num) => val_num.as_u64().map(|u| u as u16),
                _ => None,
            })
-            .unwrap_or(default);
+            .unwrap_or(7895);
        if port == 0 {
-            port = default;
+            port = 7895;
        }
        port
    }

-    #[cfg(not(target_os = "windows"))]
-    fn guard_redir_port(config: &Mapping) -> u16 {
-        Self::guard_port_value(config, "redir-port", network::ports::DEFAULT_REDIR)
-    }
-
    #[cfg(target_os = "linux")]
    fn guard_tproxy_port(config: &Mapping) -> u16 {
-        Self::guard_port_value(config, "tproxy-port", network::ports::DEFAULT_TPROXY)
+        let mut port = config
+            .get("tproxy-port")
+            .and_then(|value| match value {
+                Value::String(val_str) => val_str.parse().ok(),
+                Value::Number(val_num) => val_num.as_u64().map(|u| u as u16),
+                _ => None,
+            })
+            .unwrap_or(network::ports::DEFAULT_TPROXY);
+        if port == 0 {
+            port = network::ports::DEFAULT_TPROXY;
+        }
+        port
    }

    fn guard_mixed_port(config: &Mapping) -> u16 {
-        Self::guard_port_value(config, "mixed-port", network::ports::DEFAULT_MIXED)
+        let raw_value = config.get("mixed-port");
+
+        let mut port = raw_value
+            .and_then(|value| match value {
+                Value::String(val_str) => val_str.parse().ok(),
+                Value::Number(val_num) => val_num.as_u64().map(|u| u as u16),
+                _ => None,
+            })
+            .unwrap_or(network::ports::DEFAULT_MIXED);
+
+        if port == 0 {
+            port = network::ports::DEFAULT_MIXED;
+        }
+
+        port
    }

    fn guard_socks_port(config: &Mapping) -> u16 {
-        Self::guard_port_value(config, "socks-port", network::ports::DEFAULT_SOCKS)
+        let mut port = config
+            .get("socks-port")
+            .and_then(|value| match value {
+                Value::String(val_str) => val_str.parse().ok(),
+                Value::Number(val_num) => val_num.as_u64().map(|u| u as u16),
+                _ => None,
+            })
+            .unwrap_or(7898);
+        if port == 0 {
+            port = 7898;
+        }
+        port
    }

    fn guard_port(config: &Mapping) -> u16 {
-        Self::guard_port_value(config, "port", network::ports::DEFAULT_HTTP)
+        let mut port = config
+            .get("port")
+            .and_then(|value| match value {
+                Value::String(val_str) => val_str.parse().ok(),
+                Value::Number(val_num) => val_num.as_u64().map(|u| u as u16),
+                _ => None,
+            })
+            .unwrap_or(7899);
+        if port == 0 {
+            port = 7899;
+        }
+        port
    }

    pub(super) fn guard_server_ctrl(config: &Mapping) -> String {
@@ -14,15 +14,6 @@ mod verge;
 pub(crate) use self::config::Config;
 pub use self::{clash::*, encrypt::*, mixed_port::*, prfitem::*, profiles::*, verge::*};

-macro_rules! patch_opt_field {
-    ($lv:expr, $rv:expr, $key:tt) => {
-        if ($rv.$key).is_some() {
-            $lv.$key = $rv.$key.clone();
-        }
-    };
-}
-pub(crate) use patch_opt_field;
-
 pub const DEFAULT_PAC: &str = r#"function FindProxyForURL(url, host) {
  return "PROXY 127.0.0.1:%mixed-port%; SOCKS5 127.0.0.1:%mixed-port%; DIRECT;";
 }
@@ -1,5 +1,3 @@
-use super::patch_opt_field;
-
 use crate::{
    config::profiles,
    utils::{
@@ -55,6 +53,10 @@ pub struct PrfItem {
    #[serde(skip_serializing_if = "Option::is_none")]
    pub selected: Option<Vec<PrfSelected>>,

+    #[serde(skip_serializing_if = "Option::is_none")]
+    #[specta(type = Option<std::collections::BTreeMap<std::string::String, std::string::String>>)]
+    pub latency_test_urls: Option<std::collections::BTreeMap<String, String>>,
+
    #[serde(skip_serializing_if = "Option::is_none")]
    pub extra: Option<PrfExtra>,

@@ -133,18 +135,19 @@ impl PrfOption {
        match (one, other) {
            (Some(a_ref), Some(b_ref)) => {
                let mut result = a_ref.clone();
-                patch_opt_field!(result, b_ref, user_agent);
-                patch_opt_field!(result, b_ref, with_proxy);
-                patch_opt_field!(result, b_ref, self_proxy);
-                patch_opt_field!(result, b_ref, danger_accept_invalid_certs);
-                patch_opt_field!(result, b_ref, allow_auto_update);
-                patch_opt_field!(result, b_ref, update_interval);
-                patch_opt_field!(result, b_ref, merge);
-                patch_opt_field!(result, b_ref, script);
-                patch_opt_field!(result, b_ref, rules);
-                patch_opt_field!(result, b_ref, proxies);
-                patch_opt_field!(result, b_ref, groups);
-                patch_opt_field!(result, b_ref, timeout_seconds);
+                result.user_agent = b_ref.user_agent.clone().or(result.user_agent);
+                result.with_proxy = b_ref.with_proxy.or(result.with_proxy);
+                result.self_proxy = b_ref.self_proxy.or(result.self_proxy);
+                result.danger_accept_invalid_certs =
+                    b_ref.danger_accept_invalid_certs.or(result.danger_accept_invalid_certs);
+                result.allow_auto_update = b_ref.allow_auto_update.or(result.allow_auto_update);
+                result.update_interval = b_ref.update_interval.or(result.update_interval);
+                result.merge = b_ref.merge.clone().or(result.merge);
+                result.script = b_ref.script.clone().or(result.script);
+                result.rules = b_ref.rules.clone().or(result.rules);
+                result.proxies = b_ref.proxies.clone().or(result.proxies);
+                result.groups = b_ref.groups.clone().or(result.groups);
+                result.timeout_seconds = b_ref.timeout_seconds.or(result.timeout_seconds);
                Some(result)
            }
            (Some(a_ref), None) => Some(a_ref.clone()),
@@ -182,36 +185,6 @@ impl PrfItem {
        }
    }

-    async fn append_companion_item(item: &mut Self) -> Result<Option<String>> {
-        profiles::profiles_append_item_safe(item).await?;
-        Ok(item.uid.clone())
-    }
-
-    async fn ensure_companion_items(
-        merge: &mut Option<String>,
-        script: &mut Option<String>,
-        rules: &mut Option<String>,
-        proxies: &mut Option<String>,
-        groups: &mut Option<String>,
-    ) -> Result<()> {
-        if merge.is_none() {
-            *merge = Self::append_companion_item(&mut Self::from_merge(None)).await?;
-        }
-        if script.is_none() {
-            *script = Self::append_companion_item(&mut Self::from_script(None)).await?;
-        }
-        if rules.is_none() {
-            *rules = Self::append_companion_item(&mut Self::from_rules()).await?;
-        }
-        if proxies.is_none() {
-            *proxies = Self::append_companion_item(&mut Self::from_proxies()).await?;
-        }
-        if groups.is_none() {
-            *groups = Self::append_companion_item(&mut Self::from_groups()).await?;
-        }
-        Ok(())
-    }
-
    async fn from_local(
        name: String,
        desc: String,
@@ -228,7 +201,31 @@ impl PrfItem {
        let mut proxies = opt_ref.and_then(|o| o.proxies.clone());
        let mut groups = opt_ref.and_then(|o| o.groups.clone());

-        Self::ensure_companion_items(&mut merge, &mut script, &mut rules, &mut proxies, &mut groups).await?;
+        if merge.is_none() {
+            let merge_item = &mut Self::from_merge(None);
+            profiles::profiles_append_item_safe(merge_item).await?;
+            merge = merge_item.uid.clone();
+        }
+        if script.is_none() {
+            let script_item = &mut Self::from_script(None);
+            profiles::profiles_append_item_safe(script_item).await?;
+            script = script_item.uid.clone();
+        }
+        if rules.is_none() {
+            let rules_item = &mut Self::from_rules();
+            profiles::profiles_append_item_safe(rules_item).await?;
+            rules = rules_item.uid.clone();
+        }
+        if proxies.is_none() {
+            let proxies_item = &mut Self::from_proxies();
+            profiles::profiles_append_item_safe(proxies_item).await?;
+            proxies = proxies_item.uid.clone();
+        }
+        if groups.is_none() {
+            let groups_item = &mut Self::from_groups();
+            profiles::profiles_append_item_safe(groups_item).await?;
+            groups = groups_item.uid.clone();
+        }
        Ok(Self {
            uid: Some(uid),
            itype: Some("local".into()),
@@ -236,6 +233,7 @@ impl PrfItem {
            desc: Some(desc),
            file: Some(file),
            url: None,
+            latency_test_urls: None,
            selected: None,
            extra: None,
            option: Some(PrfOption {
@@ -382,7 +380,31 @@ impl PrfItem {
            bail!("profile does not contain `proxies` or `proxy-providers`");
        }

-        Self::ensure_companion_items(&mut merge, &mut script, &mut rules, &mut proxies, &mut groups).await?;
+        if merge.is_none() {
+            let merge_item = &mut Self::from_merge(None);
+            profiles::profiles_append_item_safe(merge_item).await?;
+            merge = merge_item.uid.clone();
+        }
+        if script.is_none() {
+            let script_item = &mut Self::from_script(None);
+            profiles::profiles_append_item_safe(script_item).await?;
+            script = script_item.uid.clone();
+        }
+        if rules.is_none() {
+            let rules_item = &mut Self::from_rules();
+            profiles::profiles_append_item_safe(rules_item).await?;
+            rules = rules_item.uid.clone();
+        }
+        if proxies.is_none() {
+            let proxies_item = &mut Self::from_proxies();
+            profiles::profiles_append_item_safe(proxies_item).await?;
+            proxies = proxies_item.uid.clone();
+        }
+        if groups.is_none() {
+            let groups_item = &mut Self::from_groups();
+            profiles::profiles_append_item_safe(groups_item).await?;
+            groups = groups_item.uid.clone();
+        }

        Ok(Self {
            uid: Some(uid),
@@ -391,6 +413,7 @@ impl PrfItem {
            desc: desc.cloned(),
            file: Some(file),
            url: Some(url.as_str().into()),
+            latency_test_urls: None,
            selected: None,
            extra,
            option: Some(PrfOption {
@@ -444,30 +467,46 @@ impl PrfItem {
        }
    }

-    fn from_seq_item(prefix: &str, itype: &str, template: &str) -> Self {
-        let uid = help::get_uid(prefix).into();
+    fn from_rules() -> Self {
+        let uid = help::get_uid("r").into();
        let file = format!("{uid}.yaml").into(); // yaml ext

        Self {
            uid: Some(uid),
-            itype: Some(itype.into()),
+            itype: Some("rules".into()),
            file: Some(file),
            updated: Some(chrono::Local::now().timestamp() as usize),
-            file_data: Some(template.into()),
+            file_data: Some(tmpl::ITEM_RULES.into()),
            ..Default::default()
        }
    }

-    fn from_rules() -> Self {
-        Self::from_seq_item("r", "rules", tmpl::ITEM_RULES)
-    }
-
    fn from_proxies() -> Self {
-        Self::from_seq_item("p", "proxies", tmpl::ITEM_PROXIES)
+        let uid = help::get_uid("p").into();
+        let file = format!("{uid}.yaml").into(); // yaml ext
+
+        Self {
+            uid: Some(uid),
+            itype: Some("proxies".into()),
+            file: Some(file),
+            updated: Some(chrono::Local::now().timestamp() as usize),
+            file_data: Some(tmpl::ITEM_PROXIES.into()),
+            ..Default::default()
+        }
    }

    fn from_groups() -> Self {
-        Self::from_seq_item("g", "groups", tmpl::ITEM_GROUPS)
+        let uid = help::get_uid("g").into();
+        let file = format!("{uid}.yaml").into(); // yaml ext
+
+        Self {
+            uid: Some(uid),
+            itype: Some("groups".into()),
+            file: Some(file),
+            updated: Some(chrono::Local::now().timestamp() as usize),
+            file_data: Some(tmpl::ITEM_GROUPS.into()),
+            ..Default::default()
+        }
    }

    pub(crate) async fn read_file(&self) -> Result<String> {
@@ -483,20 +522,26 @@ impl PrfItem {
    }
 }

-macro_rules! current_field {
-    ($name:ident, $field:ident) => {
-        pub(crate) fn $name(&self) -> Option<&String> {
-            self.option.as_ref().and_then(|o| o.$field.as_ref())
-        }
-    };
-}
-
 impl PrfItem {
-    current_field!(current_merge, merge);
-    current_field!(current_script, script);
-    current_field!(current_rules, rules);
-    current_field!(current_proxies, proxies);
-    current_field!(current_groups, groups);
+    pub(crate) fn current_merge(&self) -> Option<&String> {
+        self.option.as_ref().and_then(|o| o.merge.as_ref())
+    }
+
+    pub(crate) fn current_script(&self) -> Option<&String> {
+        self.option.as_ref().and_then(|o| o.script.as_ref())
+    }
+
+    pub(crate) fn current_rules(&self) -> Option<&String> {
+        self.option.as_ref().and_then(|o| o.rules.as_ref())
+    }
+
+    pub(crate) fn current_proxies(&self) -> Option<&String> {
+        self.option.as_ref().and_then(|o| o.proxies.as_ref())
+    }
+
+    pub(crate) fn current_groups(&self) -> Option<&String> {
+        self.option.as_ref().and_then(|o| o.groups.as_ref())
+    }
 }

 fn allow_auto_update_enabled(option: Option<&PrfOption>) -> bool {
@@ -1,5 +1,5 @@
 use super::{
-    PrfOption, patch_opt_field,
+    PrfOption,
    prfitem::{PrfItem, PrfSelected, normalize_profile_home_url},
 };
 use crate::core::notify::{Refresh, announce};
@@ -86,6 +86,14 @@ impl ProfileDeletePlan {
    }
 }

+macro_rules! patch {
+    ($lv: expr, $rv: expr, $key: tt) => {
+        if ($rv.$key).is_some() {
+            $lv.$key = $rv.$key.to_owned();
+        }
+    };
+}
+
 impl IProfiles {
    fn take_item_file_by_uid(items: &mut Vec<PrfItem>, target_uid: Option<&str>) -> Option<String> {
        let index = items.iter().position(|item| item.uid.as_deref() == target_uid)?;
@@ -236,15 +244,16 @@ impl IProfiles {

        for each in items.iter_mut() {
            if each.uid.as_deref() == Some(uid) {
-                patch_opt_field!(each, item, itype);
-                patch_opt_field!(each, item, name);
-                patch_opt_field!(each, item, desc);
-                patch_opt_field!(each, item, file);
-                patch_opt_field!(each, item, url);
-                patch_opt_field!(each, item, selected);
-                patch_opt_field!(each, item, extra);
-                patch_opt_field!(each, item, updated);
-                patch_opt_field!(each, item, option);
+                patch!(each, item, itype);
+                patch!(each, item, name);
+                patch!(each, item, desc);
+                patch!(each, item, file);
+                patch!(each, item, url);
+                patch!(each, item, selected);
+                patch!(each, item, latency_test_urls);
+                patch!(each, item, extra);
+                patch!(each, item, updated);
+                patch!(each, item, option);

                self.items = Some(items);
                return self.save_file().await;
@@ -412,21 +421,6 @@ pub(crate) async fn profiles_append_item_with_filedata_safe(item: &PrfItem, file
    profiles_append_item_safe(item).await
 }

-/// Applies `edit` to the committed profiles; commits only when the edit succeeds.
-async fn with_profiles_edit<F, Fut>(edit: F) -> Result<()>
-where
-    F: FnOnce(IProfiles) -> Fut + Send,
-    Fut: std::future::Future<Output = Result<IProfiles>> + Send,
-{
-    Config::profiles()
-        .await
-        .with_data_modify(|profiles| async move {
-            let profiles = edit(profiles).await?;
-            Ok((profiles, ()))
-        })
-        .await
-}
-
 pub(crate) async fn profiles_append_item_safe(item: &mut PrfItem) -> Result<()> {
    let profiles = Config::profiles().await;
    profiles_append_item_to_safe(&profiles, item).await
@@ -442,19 +436,43 @@ pub(super) async fn profiles_append_item_to_safe(profiles: &Draft<IProfiles>, it
 }

 pub(crate) async fn profiles_patch_item_safe(index: &str, item: &PrfItem) -> Result<()> {
-    with_profiles_edit(|mut profiles| async move { profiles.patch_item(index, item).await.map(|_| profiles) }).await
+    Config::profiles()
+        .await
+        .with_data_modify(|mut profiles| async move {
+            profiles.patch_item(index, item).await?;
+            Ok((profiles, ()))
+        })
+        .await
 }

 pub(crate) async fn profiles_reorder_safe(active_id: &str, over_id: &str) -> Result<()> {
-    with_profiles_edit(|mut profiles| async move { profiles.reorder(active_id, over_id).await.map(|_| profiles) }).await
+    Config::profiles()
+        .await
+        .with_data_modify(|mut profiles| async move {
+            profiles.reorder(active_id, over_id).await?;
+            Ok((profiles, ()))
+        })
+        .await
 }

 pub(crate) async fn profiles_save_file_safe() -> Result<()> {
-    with_profiles_edit(|profiles| async move { profiles.save_file().await.map(|_| profiles) }).await
+    Config::profiles()
+        .await
+        .with_data_modify(|profiles| async move {
+            profiles.save_file().await?;
+            Ok((profiles, ()))
+        })
+        .await
 }

 pub(crate) async fn profiles_update_item_safe(index: &str, item: &mut PrfItem) -> Result<()> {
-    with_profiles_edit(|mut profiles| async move { profiles.update_item(index, item).await.map(|_| profiles) }).await
+    Config::profiles()
+        .await
+        .with_data_modify(|mut profiles| async move {
+            profiles.update_item(index, item).await?;
+            Ok((profiles, ()))
+        })
+        .await
 }

 #[derive(Debug, PartialEq, Eq)]
@@ -696,21 +714,19 @@ where
    Ok(())
 }

-fn current_item_mut(profiles: &mut IProfiles) -> Option<&mut PrfItem> {
-    let current = profiles.current.clone()?;
-    profiles
-        .items
-        .as_mut()?
-        .iter_mut()
-        .find(|item| item.uid.as_ref() == Some(&current))
-}
-
 /// Records a backend-made selection so the next core start restores it.
 pub(crate) async fn record_selected_node(group_name: &str, node: &str) -> Result<()> {
    let group_name = String::from(group_name);
    let node = String::from(node);
    persist_selected_update(true, move |mut profiles| async move {
-        let Some(item) = current_item_mut(&mut profiles) else {
+        let Some(current) = profiles.current.clone() else {
+            return Ok((profiles, false));
+        };
+        let Some(item) = profiles
+            .items
+            .as_mut()
+            .and_then(|items| items.iter_mut().find(|item| item.uid.as_ref() == Some(&current)))
+        else {
            return Ok((profiles, false));
        };

@@ -745,7 +761,14 @@ fn remove_selected_node(selected: &mut Vec<PrfSelected>, group_name: &str) -> bo

 pub(crate) async fn forget_selected_node(group_name: &str) -> Result<()> {
    persist_selected_update(true, move |mut profiles| async move {
-        let Some(item) = current_item_mut(&mut profiles) else {
+        let Some(current) = profiles.current.clone() else {
+            return Ok((profiles, false));
+        };
+        let Some(item) = profiles
+            .items
+            .as_mut()
+            .and_then(|items| items.iter_mut().find(|item| item.uid.as_ref() == Some(&current)))
+        else {
            return Ok((profiles, false));
        };

@@ -1,6 +1,6 @@
 use crate::config::Config;
 use crate::{
-    config::{DEFAULT_PAC, deserialize_encrypted, patch_opt_field, serialize_encrypted},
+    config::{DEFAULT_PAC, deserialize_encrypted, serialize_encrypted},
    constants::network,
    utils::{dirs, help},
 };
@@ -73,6 +73,9 @@ pub struct IVerge {

    pub collapse_navbar: Option<bool>,

+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub enable_system_titlebar: Option<bool>,
+
    pub sysproxy_tray_icon: Option<bool>,

    pub tun_tray_icon: Option<bool>,
@@ -374,6 +377,7 @@ impl IVerge {
            menu_icon: Some("monochrome".into()),
            notice_position: Some("top-right".into()),
            collapse_navbar: Some(false),
+            enable_system_titlebar: Some(true),
            common_tray_icon: Some(false),
            sysproxy_tray_icon: Some(false),
            tun_tray_icon: Some(false),
@@ -432,90 +436,99 @@ impl IVerge {

    #[allow(clippy::cognitive_complexity)]
    pub fn patch_config(&mut self, patch: &Self) {
-        patch_opt_field!(self, patch, app_log_level);
-        patch_opt_field!(self, patch, app_log_max_size);
-        patch_opt_field!(self, patch, app_log_max_count);
+        macro_rules! patch {
+            ($key: tt) => {
+                if patch.$key.is_some() {
+                    self.$key = patch.$key.clone();
+                }
+            };
+        }

-        patch_opt_field!(self, patch, language);
-        patch_opt_field!(self, patch, theme_mode);
-        patch_opt_field!(self, patch, tray_event);
-        patch_opt_field!(self, patch, env_type);
-        patch_opt_field!(self, patch, start_page);
-        patch_opt_field!(self, patch, startup_script);
-        patch_opt_field!(self, patch, traffic_graph);
-        patch_opt_field!(self, patch, enable_memory_usage);
-        patch_opt_field!(self, patch, enable_group_icon);
-        patch_opt_field!(self, patch, pause_render_traffic_stats_on_blur);
+        patch!(app_log_level);
+        patch!(app_log_max_size);
+        patch!(app_log_max_count);
+
+        patch!(language);
+        patch!(theme_mode);
+        patch!(tray_event);
+        patch!(env_type);
+        patch!(start_page);
+        patch!(startup_script);
+        patch!(traffic_graph);
+        patch!(enable_memory_usage);
+        patch!(enable_group_icon);
+        patch!(pause_render_traffic_stats_on_blur);
        #[cfg(target_os = "macos")]
-        patch_opt_field!(self, patch, tray_icon);
-        patch_opt_field!(self, patch, menu_icon);
-        patch_opt_field!(self, patch, menu_order);
-        patch_opt_field!(self, patch, proxy_group_tools_position);
-        patch_opt_field!(self, patch, notice_position);
-        patch_opt_field!(self, patch, collapse_navbar);
-        patch_opt_field!(self, patch, common_tray_icon);
-        patch_opt_field!(self, patch, sysproxy_tray_icon);
-        patch_opt_field!(self, patch, tun_tray_icon);
+        patch!(tray_icon);
+        patch!(menu_icon);
+        patch!(menu_order);
+        patch!(proxy_group_tools_position);
+        patch!(notice_position);
+        patch!(collapse_navbar);
+        patch!(enable_system_titlebar);
+        patch!(common_tray_icon);
+        patch!(sysproxy_tray_icon);
+        patch!(tun_tray_icon);

-        patch_opt_field!(self, patch, enable_tun_mode);
-        patch_opt_field!(self, patch, enable_auto_launch);
-        patch_opt_field!(self, patch, enable_silent_start);
-        patch_opt_field!(self, patch, enable_hover_jump_navigator);
-        patch_opt_field!(self, patch, hover_jump_navigator_delay);
+        patch!(enable_tun_mode);
+        patch!(enable_auto_launch);
+        patch!(enable_silent_start);
+        patch!(enable_hover_jump_navigator);
+        patch!(hover_jump_navigator_delay);
        #[cfg(not(target_os = "windows"))]
-        patch_opt_field!(self, patch, verge_redir_port);
+        patch!(verge_redir_port);
        #[cfg(not(target_os = "windows"))]
-        patch_opt_field!(self, patch, verge_redir_enabled);
+        patch!(verge_redir_enabled);
        #[cfg(target_os = "linux")]
-        patch_opt_field!(self, patch, verge_tproxy_port);
+        patch!(verge_tproxy_port);
        #[cfg(target_os = "linux")]
-        patch_opt_field!(self, patch, verge_tproxy_enabled);
-        patch_opt_field!(self, patch, verge_mixed_port);
-        patch_opt_field!(self, patch, verge_socks_port);
-        patch_opt_field!(self, patch, verge_socks_enabled);
-        patch_opt_field!(self, patch, verge_port);
-        patch_opt_field!(self, patch, verge_http_enabled);
-        patch_opt_field!(self, patch, enable_system_proxy);
-        patch_opt_field!(self, patch, enable_proxy_guard);
-        patch_opt_field!(self, patch, enable_bypass_check);
-        patch_opt_field!(self, patch, use_default_bypass);
-        patch_opt_field!(self, patch, system_proxy_bypass);
-        patch_opt_field!(self, patch, proxy_guard_duration);
-        patch_opt_field!(self, patch, proxy_auto_config);
-        patch_opt_field!(self, patch, pac_file_content);
-        patch_opt_field!(self, patch, proxy_host);
-        patch_opt_field!(self, patch, theme_setting);
-        patch_opt_field!(self, patch, web_ui_list);
-        patch_opt_field!(self, patch, clash_core);
-        patch_opt_field!(self, patch, hotkeys);
-        patch_opt_field!(self, patch, enable_global_hotkey);
+        patch!(verge_tproxy_enabled);
+        patch!(verge_mixed_port);
+        patch!(verge_socks_port);
+        patch!(verge_socks_enabled);
+        patch!(verge_port);
+        patch!(verge_http_enabled);
+        patch!(enable_system_proxy);
+        patch!(enable_proxy_guard);
+        patch!(enable_bypass_check);
+        patch!(use_default_bypass);
+        patch!(system_proxy_bypass);
+        patch!(proxy_guard_duration);
+        patch!(proxy_auto_config);
+        patch!(pac_file_content);
+        patch!(proxy_host);
+        patch!(theme_setting);
+        patch!(web_ui_list);
+        patch!(clash_core);
+        patch!(hotkeys);
+        patch!(enable_global_hotkey);

-        patch_opt_field!(self, patch, auto_close_connection);
-        patch_opt_field!(self, patch, auto_check_update);
-        patch_opt_field!(self, patch, default_latency_test);
-        patch_opt_field!(self, patch, default_latency_timeout);
-        patch_opt_field!(self, patch, enable_auto_delay_detection);
-        patch_opt_field!(self, patch, auto_delay_detection_interval_minutes);
-        patch_opt_field!(self, patch, enable_builtin_enhanced);
-        patch_opt_field!(self, patch, proxy_layout_column);
-        patch_opt_field!(self, patch, test_list);
-        patch_opt_field!(self, patch, auto_log_clean);
-        patch_opt_field!(self, patch, enable_auto_backup_schedule);
-        patch_opt_field!(self, patch, auto_backup_interval_hours);
-        patch_opt_field!(self, patch, auto_backup_on_change);
+        patch!(auto_close_connection);
+        patch!(auto_check_update);
+        patch!(default_latency_test);
+        patch!(default_latency_timeout);
+        patch!(enable_auto_delay_detection);
+        patch!(auto_delay_detection_interval_minutes);
+        patch!(enable_builtin_enhanced);
+        patch!(proxy_layout_column);
+        patch!(test_list);
+        patch!(auto_log_clean);
+        patch!(enable_auto_backup_schedule);
+        patch!(auto_backup_interval_hours);
+        patch!(auto_backup_on_change);

-        patch_opt_field!(self, patch, webdav_url);
-        patch_opt_field!(self, patch, webdav_username);
-        patch_opt_field!(self, patch, webdav_password);
+        patch!(webdav_url);
+        patch!(webdav_username);
+        patch!(webdav_password);
        #[cfg(target_os = "macos")]
-        patch_opt_field!(self, patch, enable_tray_speed);
-        patch_opt_field!(self, patch, tray_proxy_groups_display_mode);
-        patch_opt_field!(self, patch, tray_inline_outbound_modes);
-        patch_opt_field!(self, patch, enable_auto_light_weight_mode);
-        patch_opt_field!(self, patch, auto_light_weight_minutes);
-        patch_opt_field!(self, patch, enable_dns_settings);
-        patch_opt_field!(self, patch, home_cards);
-        patch_opt_field!(self, patch, enable_external_controller);
+        patch!(enable_tray_speed);
+        patch!(tray_proxy_groups_display_mode);
+        patch!(tray_inline_outbound_modes);
+        patch!(enable_auto_light_weight_mode);
+        patch!(auto_light_weight_minutes);
+        patch!(enable_dns_settings);
+        patch!(home_cards);
+        patch!(enable_external_controller);
    }

    pub fn get_log_level(&self) -> LevelFilter {
@@ -14,13 +14,6 @@ pub mod network {
    }
 }

-pub mod proxy {
-    /// Single source of the macOS default bypass list; both proxy backends compose from it.
-    #[cfg(target_os = "macos")]
-    pub const MACOS_DEFAULT_BYPASS: &str =
-        "127.0.0.1,192.168.0.0/16,10.0.0.0/8,172.16.0.0/12,localhost,*.local,*.crashlytics.com,<local>";
-}
-
 pub mod timing {
    use super::Duration;

@@ -82,7 +75,6 @@ pub mod tun {
        "auto-redirect",
        "auto-detect-interface",
        "dns-hijack",
-        "dns-mode",
        "strict-route",
        "mtu",
    ];
@@ -7,10 +7,11 @@ use crate::{
 use anyhow::Result;
 use chrono::Local;
 use clash_verge_logging::{Type, logging};
+use parking_lot::RwLock;
 use std::{
    path::PathBuf,
    sync::{
-        OnceLock,
+        Arc, OnceLock,
        atomic::{AtomicBool, AtomicI64, Ordering},
    },
    time::{Duration, UNIX_EPOCH},
@@ -81,9 +82,8 @@ impl Default for AutoBackupSettings {
 }

 pub struct AutoBackupManager {
+    settings: Arc<RwLock<AutoBackupSettings>>,
    settings_tx: watch::Sender<AutoBackupSettings>,
-    // The watch channel is the single settings store; no duplicate copies.
-    settings_rx: watch::Receiver<AutoBackupSettings>,
    runner_started: AtomicBool,
    exec_lock: Mutex<()>,
    last_backup: AtomicI64,
@@ -93,10 +93,10 @@ impl AutoBackupManager {
    pub fn global() -> &'static Self {
        static INSTANCE: OnceLock<AutoBackupManager> = OnceLock::new();
        INSTANCE.get_or_init(|| {
-            let (settings_tx, settings_rx) = watch::channel(AutoBackupSettings::default());
+            let (tx, _rx) = watch::channel(AutoBackupSettings::default());
            Self {
-                settings_tx,
-                settings_rx,
+                settings: Arc::new(RwLock::new(AutoBackupSettings::default())),
+                settings_tx: tx,
                runner_started: AtomicBool::new(false),
                exec_lock: Mutex::new(()),
                last_backup: AtomicI64::new(0),
@@ -106,6 +106,9 @@ impl AutoBackupManager {

    pub async fn init(&self) -> Result<()> {
        let settings = Self::load_settings().await;
+        {
+            *self.settings.write() = settings;
+        }
        let _ = self.settings_tx.send(settings);
        self.maybe_start_runner(settings);
        Ok(())
@@ -113,6 +116,9 @@ impl AutoBackupManager {

    pub async fn refresh_settings(&self) -> Result<()> {
        let settings = Self::load_settings().await;
+        {
+            *self.settings.write() = settings;
+        }
        let _ = self.settings_tx.send(settings);
        self.maybe_start_runner(settings);
        Ok(())
@@ -187,7 +193,7 @@ impl AutoBackupManager {
    }

    async fn execute_trigger(&self, trigger: AutoBackupTrigger) -> Result<()> {
-        let snapshot = *self.settings_rx.borrow();
+        let snapshot = *self.settings.read();

        if trigger.is_schedule() && !snapshot.schedule_enabled {
            return Ok(());
@@ -466,3 +466,12 @@ impl Hotkey {
        (del_list, add_list)
    }
 }
+
+impl Drop for Hotkey {
+    fn drop(&mut self) {
+        let app_handle = handle::Handle::app_handle();
+        if let Err(e) = app_handle.global_shortcut().unregister_all() {
+            logging!(error, Type::Hotkey, "Error unregistering all hotkeys: {:?}", e);
+        }
+    }
+}
@@ -40,47 +40,8 @@ impl LightweightState {

 static LIGHTWEIGHT_STATE: AtomicU8 = AtomicU8::new(LightweightState::Normal as u8);

-struct WindowListener {
-    handler_id: AtomicU32,
-    event: &'static str,
-    label: &'static str,
-}
-
-impl WindowListener {
-    fn setup(&self, on_event: impl Fn() + Send + 'static) {
-        if let Some(window) = WindowManager::get_main_window() {
-            let previous_handler_id = self.handler_id.swap(0, Ordering::AcqRel);
-            if previous_handler_id != 0 {
-                window.unlisten(previous_handler_id);
-                logging!(debug, Type::Lightweight, "覆盖旧的{}监听", self.label);
-            }
-            let handler_id = window.listen(self.event, move |_event| on_event());
-            self.handler_id.store(handler_id, Ordering::Release);
-        }
-    }
-
-    fn cancel(&self) {
-        let id = self.handler_id.swap(0, Ordering::AcqRel);
-        if id != 0 {
-            if let Some(window) = WindowManager::get_main_window() {
-                window.unlisten(id);
-            }
-            logging!(debug, Type::Lightweight, "取消了{}监听", self.label);
-        }
-    }
-}
-
-static WINDOW_CLOSE_LISTENER: WindowListener = WindowListener {
-    handler_id: AtomicU32::new(0),
-    event: "tauri://close-requested",
-    label: "窗口关闭",
-};
-
-static WEBVIEW_FOCUS_LISTENER: WindowListener = WindowListener {
-    handler_id: AtomicU32::new(0),
-    event: "tauri://focus",
-    label: "窗口焦点",
-};
+static WINDOW_CLOSE_HANDLER_ID: AtomicU32 = AtomicU32::new(0);
+static WEBVIEW_FOCUS_HANDLER_ID: AtomicU32 = AtomicU32::new(0);

 static CANCEL_TX: Mutex<Option<oneshot::Sender<()>>> = Mutex::new(None);

@@ -193,27 +154,55 @@ pub async fn add_light_weight_timer() {
 }

 fn setup_window_close_listener() {
-    WINDOW_CLOSE_LISTENER.setup(|| {
-        std::mem::drop(AsyncHandler::spawn(|| async {
-            setup_light_weight_timer().await;
-        }));
-        logging!(info, Type::Lightweight, "监听到关闭请求，开始轻量模式计时");
-    });
+    if let Some(window) = WindowManager::get_main_window() {
+        let previous_handler_id = WINDOW_CLOSE_HANDLER_ID.swap(0, Ordering::AcqRel);
+        if previous_handler_id != 0 {
+            window.unlisten(previous_handler_id);
+            logging!(debug, Type::Lightweight, "覆盖旧的窗口关闭监听");
+        }
+        let handler_id = window.listen("tauri://close-requested", move |_event| {
+            std::mem::drop(AsyncHandler::spawn(|| async {
+                setup_light_weight_timer().await;
+            }));
+            logging!(info, Type::Lightweight, "监听到关闭请求，开始轻量模式计时");
+        });
+        WINDOW_CLOSE_HANDLER_ID.store(handler_id, Ordering::Release);
+    }
 }

 fn cancel_window_close_listener() {
-    WINDOW_CLOSE_LISTENER.cancel();
+    let id = WINDOW_CLOSE_HANDLER_ID.swap(0, Ordering::AcqRel);
+    if id != 0 {
+        if let Some(window) = WindowManager::get_main_window() {
+            window.unlisten(id);
+        }
+        logging!(debug, Type::Lightweight, "取消了窗口关闭监听");
+    }
 }

 fn setup_webview_focus_listener() {
-    WEBVIEW_FOCUS_LISTENER.setup(|| {
-        cancel_light_weight_timer();
-        logging!(debug, Type::Lightweight, "监听到窗口获得焦点，取消轻量模式计时");
-    });
+    if let Some(window) = WindowManager::get_main_window() {
+        let previous_handler_id = WEBVIEW_FOCUS_HANDLER_ID.swap(0, Ordering::AcqRel);
+        if previous_handler_id != 0 {
+            window.unlisten(previous_handler_id);
+            logging!(debug, Type::Lightweight, "覆盖旧的窗口焦点监听");
+        }
+        let handler_id = window.listen("tauri://focus", move |_event| {
+            cancel_light_weight_timer();
+            logging!(debug, Type::Lightweight, "监听到窗口获得焦点，取消轻量模式计时");
+        });
+        WEBVIEW_FOCUS_HANDLER_ID.store(handler_id, Ordering::Release);
+    }
 }

 fn cancel_webview_focus_listener() {
-    WEBVIEW_FOCUS_LISTENER.cancel();
+    let id = WEBVIEW_FOCUS_HANDLER_ID.swap(0, Ordering::AcqRel);
+    if id != 0 {
+        if let Some(window) = WindowManager::get_main_window() {
+            window.unlisten(id);
+        }
+        logging!(debug, Type::Lightweight, "取消了窗口焦点监听");
+    }
 }

 async fn setup_light_weight_timer() {
@@ -6,7 +6,7 @@ use crate::{
        notification::{self, FailedOperation},
        runstate::RUN_STATE,
        service,
-        sysopt::{Sysopt, format_bypass},
+        sysopt::Sysopt,
    },
    process::AsyncHandler,
    utils::{
@@ -204,6 +204,8 @@ const fn refusal_classification(service_usable: Option<bool>) -> SysproxyFailure
 }

 const LOOPBACK_HOST: &str = "127.0.0.1";
+const MACOS_DEFAULT_BYPASS: &str =
+    "127.0.0.1,192.168.0.0/16,10.0.0.0/8,172.16.0.0/12,localhost,*.local,*.crashlytics.com,<local>";
 const MAX_SERVICE_BYPASS_LEN: usize = 8192;

 static SERVICE_PROXY_OPERATIONS: ServiceProxyOperations = ServiceProxyOperations::new();
@@ -325,7 +327,13 @@ fn service_bypass(verge: &IVerge) -> Result<String> {
    let custom = verge.system_proxy_bypass.as_deref().unwrap_or("");
    ensure!(!custom.contains('\0'), "system proxy bypass contains NUL");

-    let mut bypass: String = format_bypass(verge.use_default_bypass.unwrap_or(true), custom).into();
+    let mut bypass = if custom.is_empty() {
+        MACOS_DEFAULT_BYPASS.to_owned()
+    } else if verge.use_default_bypass.unwrap_or(true) {
+        format!("{MACOS_DEFAULT_BYPASS},{custom}")
+    } else {
+        custom.to_owned()
+    };
    truncate_utf8(&mut bypass, MAX_SERVICE_BYPASS_LEN);
    Ok(bypass)
 }
@@ -1,8 +1,8 @@
-use std::collections::{BTreeMap, BTreeSet};
+use std::collections::{BTreeMap, BTreeSet, HashMap};

-use serde::Serialize;
+use serde::{Serialize, Serializer, ser::SerializeMap as _};
 use tauri_plugin_mihomo::models::{
-    DelayHistory, Proxies, Proxy, ProxyProvider, ProxyProviders, ProxyType, VehicleType,
+    DelayHistory, Extra, Proxies, Proxy, ProxyProvider, ProxyProviders, ProxyType, VehicleType,
 };

 pub struct ProxyViewInput {
@@ -57,6 +57,28 @@ pub struct ProxyCapabilities {
    pub smux: bool,
 }

+#[derive(Serialize, specta::Type)]
+struct ProxyLatencyHistory<'a> {
+    #[specta(type = Vec<crate::ipc::DelayHistory>)]
+    history: &'a [DelayHistory],
+}
+
+fn serialize_proxy_latency_history<S: Serializer>(
+    extra: &HashMap<String, Extra>,
+    serializer: S,
+) -> Result<S::Ok, S::Error> {
+    let mut map = serializer.serialize_map(Some(extra.len()))?;
+    for (url, extra) in extra {
+        map.serialize_entry(
+            url,
+            &ProxyLatencyHistory {
+                history: &extra.history,
+            },
+        )?;
+    }
+    map.end()
+}
+
 #[derive(Debug, PartialEq, Eq, Serialize, specta::Type)]
 #[serde(rename_all = "camelCase")]
 pub struct ProxyGroupView {
@@ -76,6 +98,9 @@ pub struct ProxyGroupView {
    pub test_url: Option<String>,
    #[specta(type = Vec<crate::ipc::DelayHistory>)]
    pub history: Vec<DelayHistory>,
+    #[serde(serialize_with = "serialize_proxy_latency_history")]
+    #[specta(type = HashMap<String, ProxyLatencyHistory<'static>>)]
+    pub extra: HashMap<String, Extra>,
    #[serde(flatten)]
    pub capabilities: ProxyCapabilities,
    pub members: Vec<ProxyMemberRef>,
@@ -91,6 +116,9 @@ pub struct ProxyNodeView {
    pub proxy_type: ProxyType,
    #[specta(type = Vec<crate::ipc::DelayHistory>)]
    pub history: Vec<DelayHistory>,
+    #[serde(serialize_with = "serialize_proxy_latency_history")]
+    #[specta(type = HashMap<String, ProxyLatencyHistory<'static>>)]
+    pub extra: HashMap<String, Extra>,
    #[serde(skip_serializing_if = "Option::is_none")]
    pub id: Option<String>,
    #[serde(skip_serializing_if = "Option::is_none")]
@@ -256,7 +284,7 @@ impl ProxyViewBuilder {
        } else {
            ProxyViewProviderState::Unavailable
        };
-        let (mut core_groups, core_nodes) = partition_core(proxies);
+        let (mut core_groups, core_nodes) = partition_core(proxies, providers.is_some());
        let (mut records, core_node_ids) = build_core_records(core_nodes);
        let (providers, provider_candidates) = build_provider_records(providers, &mut records);
        let resolver = MemberResolver {
@@ -289,14 +317,14 @@ impl ProxyViewBuilder {
    }
 }

-fn partition_core(proxies: Proxies) -> (BTreeMap<String, Proxy>, BTreeMap<String, Proxy>) {
+fn partition_core(proxies: Proxies, providers_available: bool) -> (BTreeMap<String, Proxy>, BTreeMap<String, Proxy>) {
    let mut groups = BTreeMap::new();
    let mut nodes = BTreeMap::new();

    for (name, proxy) in proxies.proxies {
        if proxy.all.is_some() {
            groups.insert(name, proxy);
-        } else {
+        } else if !providers_available || proxy.provider_name.is_empty() {
            nodes.insert(name, proxy);
        }
    }
@@ -403,6 +431,7 @@ fn build_group(name: String, proxy: Proxy, resolver: &MemberResolver<'_>) -> Pro
        now,
        test_url,
        history,
+        extra,
        udp,
        xudp,
        tfo,
@@ -435,6 +464,7 @@ fn build_group(name: String, proxy: Proxy, resolver: &MemberResolver<'_>) -> Pro
        icon,
        test_url,
        history,
+        extra,
        capabilities: ProxyCapabilities {
            udp,
            xudp,
@@ -453,6 +483,7 @@ fn build_node(record_id: String, name: String, proxy: Proxy, source: ProxyNodeSo
        icon,
        test_url,
        history,
+        extra,
        udp,
        xudp,
        tfo,
@@ -467,6 +498,7 @@ fn build_node(record_id: String, name: String, proxy: Proxy, source: ProxyNodeSo
        name,
        proxy_type,
        history,
+        extra,
        id,
        hidden,
        icon,
@@ -520,3 +552,62 @@ fn build_standalone(core_node_ids: &BTreeMap<String, String>) -> Vec<String> {
    );
    standalone
 }
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+    use serde_json::json;
+
+    #[test]
+    fn provider_echo_in_proxies_does_not_override_group_membership() -> anyhow::Result<()> {
+        let view = ProxyViewBuilder::build(ProxyViewInput {
+            runtime_group_order: vec!["A".into(), "B".into()],
+            group_scopes: ["A", "B"]
+                .into_iter()
+                .map(|name| {
+                    (
+                        name.into(),
+                        GroupScope {
+                            providers: vec![name.into()],
+                            exclude_types: vec![],
+                        },
+                    )
+                })
+                .collect(),
+            proxies: serde_json::from_value(json!({"proxies": {
+                "A": {"all": ["node"], "type": "Selector"},
+                "B": {"all": ["node"], "type": "Selector"},
+                "node": {"name": "node", "provider-name": "A", "history": [{"time": "2026-10-08T00:00:00Z", "delay": 32}]}
+            }}))?,
+            providers: Some(serde_json::from_value(json!({"providers": {
+                "A": {"vehicleType": "Inline", "proxies": [{"name": "node", "history": [{"time": "2026-10-08T00:00:00Z", "delay": 32}]}]},
+                "B": {"vehicleType": "Inline", "proxies": [{"name": "node", "history": [{"time": "2026-10-08T00:00:00Z", "delay": 123}]}]}
+            }}))?),
+        });
+        for (group, expected) in view.groups.iter().zip([32, 123]) {
+            let ProxyMemberRef::Node { record_id, .. } = &group.members[0] else {
+                anyhow::bail!("Expected node")
+            };
+            let record = &view.records[record_id];
+            assert_eq!(record.history.last().map(|entry| entry.delay), Some(expected));
+            assert!(
+                matches!(&record.source, ProxyNodeSource::Provider { provider_name, .. } if provider_name == &group.name)
+            );
+        }
+        Ok(())
+    }
+    #[test]
+    fn unavailable_provider_keeps_core_echo_interactable() -> anyhow::Result<()> {
+        let view = ProxyViewBuilder::build(ProxyViewInput {
+            runtime_group_order: vec!["A".into()],
+            group_scopes: BTreeMap::new(),
+            proxies: serde_json::from_value(json!({"proxies": {
+                "A": {"all": ["node"], "type": "Selector"},
+                "node": {"name": "node", "provider-name": "provider"}
+            }}))?,
+            providers: None,
+        });
+        assert!(matches!(&view.groups[0].members[0], ProxyMemberRef::Node { .. }));
+        Ok(())
+    }
+}
@@ -593,71 +593,50 @@ fn packaged_service_tool_path(file_name: &str, packaged_path: impl FnOnce() -> R
 }

 #[cfg(target_os = "windows")]
-pub(super) fn run_maybe_elevated(program: &Path, hide_window: bool) -> Result<std::process::ExitStatus> {
+fn uninstall_service() -> Result<()> {
+    logging!(info, Type::Service, "uninstall service");
+
    use deelevate::{PrivilegeLevel, Token};
    use runas::Command as RunasCommand;
    use std::os::windows::process::CommandExt as _;

-    let token = Token::with_current_process()?;
-    let level = token.privilege_level()?;
-    let status = match level {
-        PrivilegeLevel::NotPrivileged => {
-            let mut command = RunasCommand::new(program);
-            if hide_window {
-                command.show(false);
-            }
-            command.status()?
-        }
-        _ => {
-            let mut command = StdCommand::new(program);
-            if hide_window {
-                // 0x08000000 is CREATE_NO_WINDOW, the direct counterpart of runas's show(false).
-                command.creation_flags(0x08000000);
-            }
-            command.status()?
-        }
-    };
-    Ok(status)
-}
+    let uninstall_path = packaged_service_tool_path("clash-verge-service-uninstall.exe", || {
+        Ok(dirs::service_path()?.with_file_name("clash-verge-service-uninstall.exe"))
+    })?;

-fn uninstaller_tool_path(file_name: &str, packaged_path: impl FnOnce() -> Result<PathBuf>) -> Result<PathBuf> {
-    let uninstall_path = packaged_service_tool_path(file_name, packaged_path)?;
    if !uninstall_path.exists() {
        bail!(format!("uninstaller not found: {uninstall_path:?}"));
    }
-    Ok(uninstall_path)
-}

-fn ensure_uninstall_success(status: &std::process::ExitStatus) -> Result<()> {
+    let token = Token::with_current_process()?;
+    let level = token.privilege_level()?;
+    let status = match level {
+        PrivilegeLevel::NotPrivileged => RunasCommand::new(uninstall_path).show(false).status()?,
+        _ => StdCommand::new(uninstall_path).creation_flags(0x08000000).status()?,
+    };
+
    if !status.success() {
        bail!(
            "failed to uninstall service with status {}",
            status.code().unwrap_or(-1)
        );
    }
+
    Ok(())
 }

-#[cfg(target_os = "windows")]
-fn uninstall_service() -> Result<()> {
-    logging!(info, Type::Service, "uninstall service");
-
-    let uninstall_path = uninstaller_tool_path("clash-verge-service-uninstall.exe", || {
-        Ok(dirs::service_path()?.with_file_name("clash-verge-service-uninstall.exe"))
-    })?;
-
-    let status = run_maybe_elevated(&uninstall_path, true)?;
-    ensure_uninstall_success(&status)
-}
-
 #[cfg(target_os = "linux")]
 fn uninstall_service() -> Result<()> {
    logging!(info, Type::Service, "uninstall service");

-    let uninstall_path = uninstaller_tool_path("clash-verge-service-uninstall", || {
+    let uninstall_path = packaged_service_tool_path("clash-verge-service-uninstall", || {
        Ok(tauri::utils::platform::current_exe()?.with_file_name("clash-verge-service-uninstall"))
    })?;

+    if !uninstall_path.exists() {
+        bail!(format!("uninstaller not found: {uninstall_path:?}"));
+    }
+
    let elevator = crate::utils::help::linux_elevator();
    let status = if linux_running_as_root() {
        StdCommand::new(&uninstall_path).status()?
@@ -687,7 +666,14 @@ fn uninstall_service() -> Result<()> {
        status.code().unwrap_or(-1)
    );

-    ensure_uninstall_success(&status)
+    if !status.success() {
+        bail!(
+            "failed to uninstall service with status {}",
+            status.code().unwrap_or(-1)
+        );
+    }
+
+    Ok(())
 }

 #[cfg(target_os = "linux")]
@@ -702,10 +688,14 @@ fn linux_running_as_root() -> bool {
 fn uninstall_service() -> Result<()> {
    logging!(info, Type::Service, "uninstall service");

-    let uninstall_path = uninstaller_tool_path("clash-verge-service-uninstall", || {
+    let uninstall_path = packaged_service_tool_path("clash-verge-service-uninstall", || {
        Ok(dirs::service_path()?.with_file_name("clash-verge-service-uninstall"))
    })?;

+    if !uninstall_path.exists() {
+        bail!(format!("uninstaller not found: {uninstall_path:?}"));
+    }
+
    let uninstall_path = macos_service_tool_path(&uninstall_path)?;
    let uninstall_shell: String = uninstall_path.to_string_lossy().into_owned();

@@ -721,7 +711,14 @@ fn uninstall_service() -> Result<()> {

    let status = StdCommand::new("osascript").args(vec!["-e", &command]).status()?;

-    ensure_uninstall_success(&status)
+    if !status.success() {
+        bail!(
+            "failed to uninstall service with status {}",
+            status.code().unwrap_or(-1)
+        );
+    }
+
+    Ok(())
 }

 fn install_service() -> Result<()> {
@@ -241,19 +241,20 @@ async fn current_os_proxy_state(sys: Sysproxy, auto: Autoproxy) -> OsProxyState
 }

 pub(crate) struct Sysopt {
-    // Owns the proxy target pair; every reader and writer goes through this lock.
-    update_lock: TokioMutex<(Sysproxy, Autoproxy)>,
+    update_lock: TokioMutex<()>,
    guard_operation_lock: TokioMutex<()>,
    reset_sysproxy: AtomicBool,
+    inner_proxy: Arc<RwLock<(Sysproxy, Autoproxy)>>,
    guard: Arc<RwLock<GuardMonitor>>,
 }

 impl Default for Sysopt {
    fn default() -> Self {
        Self {
-            update_lock: TokioMutex::new((Sysproxy::default(), Autoproxy::default())),
+            update_lock: TokioMutex::new(()),
            guard_operation_lock: TokioMutex::new(()),
            reset_sysproxy: AtomicBool::new(false),
+            inner_proxy: Arc::new(RwLock::new((Sysproxy::default(), Autoproxy::default()))),
            guard: Arc::new(RwLock::new(GuardMonitor::new(GuardType::None, Duration::from_secs(30)))),
        }
    }
@@ -268,9 +269,10 @@ static DEFAULT_BYPASS: &str = "localhost,127.0.0.1,192.168.0.0/16,10.0.0.0/8,172
 #[cfg(any(target_os = "linux", target_os = "macos"))]
 static BYPASS_SEPARATOR: &str = ",";
 #[cfg(target_os = "macos")]
-static DEFAULT_BYPASS: &str = crate::constants::proxy::MACOS_DEFAULT_BYPASS;
+static DEFAULT_BYPASS: &str =
+    "127.0.0.1,192.168.0.0/16,10.0.0.0/8,172.16.0.0/12,localhost,*.local,*.crashlytics.com,<local>";

-pub(super) fn format_bypass(use_default: bool, custom_bypass: &str) -> String {
+fn format_bypass(use_default: bool, custom_bypass: &str) -> String {
    if custom_bypass.is_empty() {
        DEFAULT_BYPASS.into()
    } else if use_default {
@@ -359,7 +361,7 @@ impl Sysopt {
            }
        }
        while self.access_guard().read().get_state().is_pendding() {
-            tokio::time::sleep(Duration::from_millis(10)).await;
+            tokio::task::yield_now().await;
        }
        // `start()` false may also mean a guard was already running.
        !self.access_guard().read().get_state().is_stopped()
@@ -411,17 +413,14 @@ impl Sysopt {
    }

    /// init the sysproxy
-    #[allow(
-        clippy::significant_drop_tightening,
-        reason = "the update lock must stay held until the OS write finishes; wait_idle relies on it"
-    )]
    pub(super) async fn update_sysproxy(&self) -> Result<()> {
-        let mut inner_proxy = self.update_lock.lock().await;
+        let _lock = self.update_lock.lock().await;
        let verge = Config::verge().await.latest_arc();
        // Configured, not live: this runs while the Core is being started or restarted, and
        // asking a Core that is not up yet would only fall back here anyway.
        let port = MixedPort::desired().await;
        let pac_port = server::embedded_server_port()?;
+        // 先 await, 避免持有锁导致的 Send 问题
        let bypass = get_bypass().await;

        let (sys_enable, pac_enable, proxy_host, proxy_guard) = (
@@ -432,7 +431,7 @@ impl Sysopt {
        );

        let (sys, auto, guard_type) = {
-            let (sys, auto) = &mut *inner_proxy;
+            let (sys, auto) = &mut *self.inner_proxy.write();
            sys.host = proxy_host.into();
            sys.port = port;
            sys.bypass = bypass.into();
@@ -529,10 +528,6 @@ impl Sysopt {
    }

    /// reset the sysproxy
-    #[allow(
-        clippy::significant_drop_tightening,
-        reason = "the update lock must stay held until the disable finishes; wait_idle relies on it"
-    )]
    pub(super) async fn reset_sysproxy(&self) -> Result<()> {
        if self
            .reset_sysproxy
@@ -544,13 +539,13 @@ impl Sysopt {
        defer! {
            self.reset_sysproxy.store(false, Ordering::SeqCst);
        }
-        let mut inner_proxy = self.update_lock.lock().await;
+        let _lock = self.update_lock.lock().await;
        let _guard_operation = self.guard_operation_lock.lock().await;
        let drained = self.stop_proxy_guard_locked().await;

        // 直接关闭所有代理
        let (sys, auto) = {
-            let (sys, auto) = &mut *inner_proxy;
+            let (sys, auto) = &mut *self.inner_proxy.write();
            sys.enable = false;
            auto.enable = false;
            (sys.clone(), auto.clone())
@@ -0,0 +1,156 @@
+use super::Tray;
+use crate::{
+    Type, cmd,
+    config::Config,
+    core::{
+        handle,
+        notify::{Refresh, announce},
+        proxy_view::{ProxyMemberRef, ProxyNodeSource},
+    },
+    logging,
+};
+
+const TRAY_DELAY_TEST_CONCURRENCY: usize = 10;
+const TRAY_DEFAULT_LATENCY_URL: &str = "http://cp.cloudflare.com/generate_204";
+
+fn is_latency_test_url(raw: &str) -> bool {
+    let raw = raw.trim();
+    raw.split_once("://")
+        .is_some_and(|(scheme, _)| scheme.eq_ignore_ascii_case("http") || scheme.eq_ignore_ascii_case("https"))
+        && tauri::Url::parse(raw).is_ok_and(|url| url.has_host() && matches!(url.scheme(), "http" | "https"))
+}
+
+pub(super) fn test_url(
+    group: &crate::core::proxy_view::ProxyGroupView,
+    verge: &crate::config::IVerge,
+    profiles: &crate::config::IProfiles,
+) -> String {
+    let custom_url = profiles
+        .current
+        .as_ref()
+        .and_then(|uid| profiles.get_item(uid).ok())
+        .and_then(|profile| profile.latency_test_urls.as_ref())
+        .and_then(|urls| urls.get(group.name.as_str()))
+        .map(|url| url.as_str())
+        .filter(|url| !url.trim().is_empty());
+    let group_url = group.test_url.as_deref().filter(|url| !url.trim().is_empty());
+    let default_url = verge
+        .default_latency_test
+        .as_deref()
+        .filter(|url| !url.trim().is_empty());
+    custom_url
+        .or(group_url)
+        .or(default_url)
+        .filter(|&url| is_latency_test_url(url))
+        .unwrap_or(TRAY_DEFAULT_LATENCY_URL)
+        .trim()
+        .to_owned()
+}
+
+static RUNNING: parking_lot::Mutex<std::collections::BTreeSet<String>> =
+    parking_lot::Mutex::new(std::collections::BTreeSet::new());
+
+pub(super) fn is_running(group_name: &str) -> bool {
+    RUNNING.lock().contains(group_name)
+}
+
+pub(super) async fn test_proxy_group_delay(group_name: &str) {
+    if !RUNNING.lock().insert(group_name.to_owned()) {
+        return;
+    }
+    Tray::global().refresh_latency_item(group_name);
+    let _running = scopeguard::guard(group_name, |name| {
+        RUNNING.lock().remove(name);
+        Tray::global().refresh_latency_item(name);
+    });
+    use futures::{StreamExt as _, stream};
+
+    let view = match cmd::proxy::get_proxy_view().await {
+        Ok(view) => view,
+        Err(err) => {
+            logging!(warn, Type::Tray, "Failed to read proxies for tray latency test: {err}");
+            return;
+        }
+    };
+    let verge = Config::verge().await.latest_arc();
+
+    let group = view
+        .groups
+        .iter()
+        .chain(view.global.iter())
+        .find(|group| group.name.as_str() == group_name);
+    let Some(group) = group else {
+        logging!(warn, Type::Tray, "Tray latency test group not found: {group_name}");
+        return;
+    };
+
+    let profiles = Config::profiles().await.latest_arc();
+    let url = test_url(group, &verge, &profiles);
+    let timeout = verge
+        .default_latency_timeout
+        .filter(|timeout| *timeout > 0)
+        .unwrap_or(10000) as u32;
+
+    let mut targets: Vec<(std::string::String, Option<std::string::String>)> = Vec::with_capacity(group.members.len());
+    for member in &group.members {
+        match member {
+            ProxyMemberRef::Node { name, record_id } => match view.records.get(record_id).map(|node| &node.source) {
+                Some(ProxyNodeSource::Provider {
+                    provider_name,
+                    proxy_name,
+                }) => targets.push((proxy_name.clone(), Some(provider_name.clone()))),
+                _ => targets.push((name.clone(), None)),
+            },
+            ProxyMemberRef::Group { name } => targets.push((name.clone(), None)),
+            ProxyMemberRef::Unresolved { .. } => {}
+        }
+    }
+    let mihomo = handle::Handle::mihomo();
+
+    stream::iter(targets.into_iter().map(move |(member, provider)| {
+        let url = url.clone();
+        async move {
+            let result = match provider {
+                Some(provider_name) => {
+                    mihomo
+                        .healthcheck_node_in_provider(&provider_name, &member, &url, timeout)
+                        .await
+                }
+                None => mihomo.delay_proxy_by_name(&member, &url, timeout).await,
+            };
+            if let Err(err) = result {
+                logging!(debug, Type::Tray, "Tray latency test failed: {member} - {err}");
+            }
+        }
+    }))
+    .buffer_unordered(TRAY_DELAY_TEST_CONCURRENCY)
+    .for_each(|()| std::future::ready(()))
+    .await;
+
+    if let Err(err) = cmd::proxy::sync_tray_proxy_selection().await {
+        logging!(warn, Type::Tray, "Failed to refresh tray after latency test: {err}");
+    }
+
+    announce(Refresh::Proxies);
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    #[test]
+    fn latency_urls_require_a_valid_http_host_and_port() {
+        for invalid in [
+            "http://?",
+            "http://host:invalid",
+            "http://bad host/",
+            "ftp://localhost",
+            "http:localhost",
+        ] {
+            assert!(!is_latency_test_url(invalid), "{invalid}");
+        }
+        for valid in ["http://localhost/", " https://example.com/ ", "HTTP://localhost:8080/"] {
+            assert!(is_latency_test_url(valid), "{valid}");
+        }
+    }
+}
@@ -32,6 +32,7 @@ define_menu! {
    outbound_modes => OUTBOUND_MODES, "tray_outbound_modes", "tray.outboundModes",
    profiles => PROFILES, "tray_profiles", "tray.profiles",
    proxies => PROXIES, "tray_proxies", "tray.proxies",
+    test_latency => TEST_LATENCY, "tray_test_latency", "tray.testLatency",
    system_proxy => SYSTEM_PROXY, "tray_system_proxy", "tray.systemProxy",
    tun_mode => TUN_MODE, "tray_tun_mode", "tray.tunMode",
    close_all_connections => CLOSE_ALL_CONNECTIONS, "tray_close_all_connections", "tray.closeAllConnections",
@@ -1,5 +1,6 @@
 use crate::config::{IProfilePreview, IVerge};
 use crate::core::lightweight;
+use crate::core::proxy_view::{ProxyGroupView, ProxyMemberRef, ProxyNodeSource, ProxyViewProviderState, ProxyViewV1};
 use crate::core::tray::menu_def::TrayAction;
 use crate::process::AsyncHandler;
 use crate::singleton;
@@ -14,7 +15,6 @@ use crate::{
 use clash_verge_limiter::{Limiter, SystemClock, SystemLimiter};
 use clash_verge_logging::logging_error;
 use tauri::tray::{MouseButton, MouseButtonState, TrayIcon, TrayIconBuilder, TrayIconEvent};
-use tauri_plugin_mihomo::models::Proxies;
 use tokio::fs;

 use super::handle;
@@ -28,6 +28,7 @@ use tauri::{
    menu::{CheckMenuItem, IsMenuItem, MenuEvent, MenuItem, PredefinedMenuItem, Submenu},
 };

+mod latency;
 mod menu_def;
 #[cfg(target_os = "macos")]
 mod speed_task;
@@ -55,8 +56,25 @@ enum IconKind {
    Tun,
 }

+struct LatencyMenuItem {
+    item: MenuItem<Wry>,
+    running: bool,
+    proxies: Vec<ProxyLatencyItem>,
+    provider_state: ProxyViewProviderState,
+}
+
+struct ProxyLatencyItem {
+    item: CheckMenuItem<Wry>,
+    name: std::string::String,
+    provider_name: Option<std::string::String>,
+    text: std::string::String,
+}
+
 pub struct Tray {
    limiter: SystemLimiter,
+    proxy_hover_limiter: SystemLimiter,
+    menu_update: tokio::sync::Mutex<()>,
+    latency_items: parking_lot::Mutex<HashMap<std::string::String, LatencyMenuItem>>,
    #[cfg(target_os = "macos")]
    speed_controller: speed_task::TraySpeedController,
 }
@@ -130,6 +148,9 @@ impl Default for Tray {
    fn default() -> Self {
        Self {
            limiter: Limiter::new(Duration::from_millis(TRAY_CLICK_DEBOUNCE_MS), SystemClock),
+            proxy_hover_limiter: Limiter::new(Duration::from_secs(1), SystemClock),
+            menu_update: tokio::sync::Mutex::new(()),
+            latency_items: parking_lot::Mutex::new(HashMap::new()),
            #[cfg(target_os = "macos")]
            speed_controller: speed_task::TraySpeedController::new(),
        }
@@ -195,6 +216,7 @@ impl Tray {
    }

    async fn update_menu_internal(&self, app_handle: &AppHandle, include_proxy_groups: bool) -> Result<()> {
+        let _update = self.menu_update.lock().await;
        let Some(tray) = app_handle.tray_by_id(TRAY_ID) else {
            logging!(warn, Type::Tray, "Failed to update tray menu: tray not found");
            return Ok(());
@@ -219,29 +241,133 @@ impl Tray {
        let profiles_preview = profiles_arc.profiles_preview().unwrap_or_default();
        let is_lightweight_mode = is_in_lightweight_mode();

-        logging_error!(
-            Type::Tray,
-            tray.set_menu(Some(
-                create_tray_menu(
-                    app_handle,
-                    Some(mode.as_str()),
-                    *system_proxy,
-                    *tun_mode,
-                    tun_mode_available,
-                    profiles_preview,
-                    TrayMenuOptions {
-                        is_lightweight_mode,
-                        include_proxy_groups,
-                    },
-                )
-                .await?,
-            ))
-        );
+        let (menu, latency_items) = create_tray_menu(
+            app_handle,
+            Some(mode.as_str()),
+            *system_proxy,
+            *tun_mode,
+            tun_mode_available,
+            profiles_preview,
+            TrayMenuOptions {
+                is_lightweight_mode,
+                include_proxy_groups,
+            },
+        )
+        .await?;
+        tray.set_menu(Some(menu))?;
+        let groups: Vec<_> = latency_items.keys().cloned().collect();
+        *self.latency_items.lock() = latency_items;
+        for group in groups {
+            self.refresh_latency_item(&group);
+        }

        logging!(debug, Type::Tray, "托盘菜单更新成功");
        Ok(())
    }

+    async fn refresh_proxy_items(&'static self) {
+        let Ok(update) = self.menu_update.try_lock() else {
+            return;
+        };
+        if self.latency_items.lock().is_empty() || handle::Handle::global().is_exiting() {
+            return;
+        }
+        let Ok(Ok(view)) = tokio::time::timeout(
+            Duration::from_secs(1),
+            cmd::proxy::proxy_view(Some(Duration::from_millis(750))),
+        )
+        .await
+        else {
+            return;
+        };
+        if self
+            .latency_items
+            .lock()
+            .values()
+            .any(|entry| entry.provider_state != view.provider_state)
+        {
+            // Provider fallback changes member identities; rebuild through the existing queue.
+            drop(update);
+            logging_error!(Type::Tray, cmd::proxy::sync_tray_proxy_selection().await);
+            return;
+        }
+        let verge = Config::verge().await.latest_arc();
+        let profiles = Config::profiles().await.latest_arc();
+        logging_error!(
+            Type::Tray,
+            handle::Handle::app_handle().run_on_main_thread(move || {
+                // Keep rebuilding serialized until these handles have received their snapshot.
+                let _update = update;
+                let mut items = self.latency_items.lock();
+                for (group_name, entry) in items.iter_mut() {
+                    let Some(group) = find_group(&view, group_name) else {
+                        continue;
+                    };
+                    let url = latency::test_url(group, &verge, &profiles);
+                    let mut members = HashMap::with_capacity(group.members.len());
+                    for member in &group.members {
+                        members
+                            .entry((member_name(member), member_provider(&view, member)))
+                            .or_insert(member);
+                    }
+                    for proxy in &mut entry.proxies {
+                        let Some(member) = members.get(&(proxy.name.as_str(), proxy.provider_name.as_deref())) else {
+                            continue;
+                        };
+                        let text = proxy_item_text(&view, member, &url, &verge);
+                        let checked = group.now.as_ref() == Some(&proxy.name);
+                        if text != proxy.text {
+                            match proxy.item.set_text(&text) {
+                                Ok(()) => proxy.text = text,
+                                Err(err) => logging!(warn, Type::Tray, "Failed to refresh proxy latency: {err}"),
+                            }
+                        }
+                        match proxy.item.is_checked() {
+                            Ok(current) if current != checked => {
+                                logging_error!(Type::Tray, proxy.item.set_checked(checked))
+                            }
+                            Err(err) => logging!(warn, Type::Tray, "Failed to read proxy selection: {err}"),
+                            _ => {}
+                        }
+                    }
+                }
+            })
+        );
+    }
+
+    fn refresh_latency_item(&self, group_name: &str) {
+        let group_name = group_name.to_owned();
+        logging_error!(
+            Type::Tray,
+            handle::Handle::app_handle().run_on_main_thread(move || {
+                Self::global().refresh_latency_item_on_main_thread(&group_name);
+            })
+        );
+    }
+
+    fn refresh_latency_item_on_main_thread(&self, group_name: &str) {
+        let running = latency::is_running(group_name);
+        let item = {
+            let mut items = self.latency_items.lock();
+            items.get_mut(group_name).and_then(|entry| {
+                if entry.running == running {
+                    return None;
+                }
+                entry.running = running;
+                Some(entry.item.clone())
+            })
+        };
+        if let Some(item) = item {
+            let label = if running {
+                clash_verge_i18n::t!("tray.testingLatency")
+            } else {
+                clash_verge_i18n::t!("tray.testLatency")
+            };
+            logging_error!(Type::Tray, item.set_text(label));
+            logging_error!(Type::Tray, item.set_enabled(!running));
+        }
+    }
+
    pub async fn update_icon(&self, verge: &IVerge) -> Result<()> {
        if handle::Handle::global().is_exiting() {
            logging!(debug, Type::Tray, "应用正在退出，跳过托盘图标更新");
@@ -422,11 +548,12 @@ fn create_hotkeys(hotkeys: &Option<Vec<String>>) -> HashMap<&str, &str> {
                    let mut parts = item.split(',');
                    match (parts.next(), parts.next()) {
                        (Some(func), Some(key)) => {
-                            // 托盘菜单的 `accelerator` 在 Linux/Windows 下不支持小键盘按键，Windows 下也不支持 Win 键（前端上报为 `CMD`）
-                            let uppercase_key = key.to_uppercase();
-                            let unsupported =
-                                uppercase_key.contains("NUMPAD") || (cfg!(windows) && uppercase_key.contains("CMD"));
-                            if unsupported { None } else { Some((func, key)) }
+                            // 托盘菜单中的 `accelerator` 属性，在 Linux/Windows 中都不支持小键盘按键的解析
+                            if key.to_uppercase().contains("NUMPAD") {
+                                None
+                            } else {
+                                Some((func, key))
+                            }
                        }
                        _ => None,
                    }
@@ -456,96 +583,175 @@ fn create_profile_menu_item(
        .collect()
 }

+const UNTESTED_DELAY_TEXT: &str = "-ms";
+const TIMEOUT_DELAY_TEXT: &str = "T/O";
+const TRAY_GROUP_DEPTH_LIMIT: usize = 8;
+
+const fn member_name(member: &ProxyMemberRef) -> &str {
+    match member {
+        ProxyMemberRef::Node { name, .. }
+        | ProxyMemberRef::Group { name }
+        | ProxyMemberRef::Unresolved { name, .. } => name.as_str(),
+    }
+}
+
+fn find_group<'a>(view: &'a ProxyViewV1, name: &str) -> Option<&'a ProxyGroupView> {
+    view.groups
+        .iter()
+        .chain(view.global.iter())
+        .find(|group| group.name.as_str() == name)
+}
+
+/// The delay recorded for `url`, falling back to the node's latest measurement under any URL, so a
+/// node the core tested on its own still shows a value.
+fn node_delay(view: &ProxyViewV1, record_id: &str, url: &str) -> Option<u16> {
+    view.records
+        .get(record_id)
+        .map(|node| node.extra.get(url).map_or(&node.history, |extra| &extra.history))
+        .and_then(|history| history.last())
+        .map(|history| history.delay)
+}
+
+/// A group row shows the delay of the node the group currently selects. The core never writes a
+/// history for the group itself, so `now` is followed until the chain reaches a node.
+fn selected_member_delay(view: &ProxyViewV1, group_name: &str, url: &str) -> Option<u16> {
+    let mut current = group_name;
+    for _ in 0..TRAY_GROUP_DEPTH_LIMIT {
+        let Some(group) = find_group(view, current) else { break };
+        let Some(now) = group.now.as_deref().filter(|now| !now.is_empty() && *now != current) else {
+            break;
+        };
+        let Some(member) = group.members.iter().find(|member| member_name(member) == now) else {
+            break;
+        };
+        match member {
+            ProxyMemberRef::Node { record_id, .. } => return node_delay(view, record_id, url),
+            ProxyMemberRef::Group { name } => current = name.as_str(),
+            ProxyMemberRef::Unresolved { .. } => break,
+        }
+    }
+    find_group(view, group_name)
+        .map(|group| group.extra.get(url).map_or(&group.history, |extra| &extra.history))
+        .and_then(|history| history.last())
+        .map(|history| history.delay)
+}
+
+fn member_provider<'a>(view: &'a ProxyViewV1, member: &ProxyMemberRef) -> Option<&'a str> {
+    let ProxyMemberRef::Node { record_id, .. } = member else {
+        return None;
+    };
+    match &view.records.get(record_id)?.source {
+        ProxyNodeSource::Provider { provider_name, .. } => Some(provider_name),
+        ProxyNodeSource::Core { .. } => None,
+    }
+}
+
+fn proxy_item_text(view: &ProxyViewV1, member: &ProxyMemberRef, url: &str, verge: &IVerge) -> std::string::String {
+    let timeout = verge
+        .default_latency_timeout
+        .filter(|timeout| *timeout > 0)
+        .unwrap_or(10000);
+    let delay = match member {
+        ProxyMemberRef::Node { record_id, .. } => node_delay(view, record_id, url),
+        ProxyMemberRef::Group { name } => selected_member_delay(view, name, url),
+        ProxyMemberRef::Unresolved { .. } => None,
+    };
+    let delay_text = delay.map_or_else(
+        || UNTESTED_DELAY_TEXT.to_owned(),
+        |delay| {
+            if delay == 0 || u32::from(delay) >= timeout as u32 {
+                TIMEOUT_DELAY_TEXT.to_owned()
+            } else {
+                format!("{delay}ms")
+            }
+        },
+    );
+    format!("{}   | {delay_text}", member_name(member))
+}
+
 fn create_subcreate_proxy_menu_item(
    app_handle: &AppHandle,
    proxy_mode: &str,
-    proxy_group_order_map: Option<HashMap<String, usize>>,
-    proxy_nodes_data: Option<Proxies>,
+    view: Option<ProxyViewV1>,
+    latency_items: &mut HashMap<std::string::String, LatencyMenuItem>,
+    texts: &MenuTexts,
+    verge: &IVerge,
+    profiles: &crate::config::IProfiles,
 ) -> Vec<Submenu<Wry>> {
-    let proxy_submenus: Vec<Submenu<Wry>> = {
-        let mut submenus: Vec<(String, usize, Submenu<Wry>)> = Vec::new();
-
-        // TODO: 应用启动时，内核还未启动完全，无法获取代理节点信息
-        if let Some(proxy_nodes_data) = proxy_nodes_data {
-            for (group_name, group_data) in proxy_nodes_data.proxies.iter() {
-                let should_show = match proxy_mode {
-                    "global" => group_name == "GLOBAL",
-                    _ => group_name != "GLOBAL",
-                } && !group_data.hidden.unwrap_or_default();
-
-                if !should_show {
-                    continue;
-                }
-
-                let Some(all_proxies) = group_data.all.as_ref() else {
-                    continue;
-                };
-
-                let now_proxy = group_data.now.as_deref().unwrap_or_default();
-
-                let group_items: Vec<CheckMenuItem<Wry>> = all_proxies
-                    .iter()
-                    .filter_map(|proxy_str| {
-                        let is_selected = *proxy_str == now_proxy;
-                        let item_id = format!("proxy_{}_{}", group_name, proxy_str);
-
-                        let delay_text = proxy_nodes_data
-                            .proxies
-                            .get(proxy_str)
-                            .and_then(|h| h.history.last())
-                            .map(|h| match h.delay {
-                                0 => "-ms".into(),
-                                delay if delay >= 10000 => "-ms".into(),
-                                _ => format!("{}ms", h.delay),
-                            })
-                            .unwrap_or_else(|| "-ms".into());
-
-                        let display_text = format!("{}   | {}", proxy_str, delay_text);
-
-                        CheckMenuItem::with_id(app_handle, item_id, display_text, true, is_selected, None::<&str>)
-                            .map_err(|e| logging!(warn, Type::Tray, "Failed to create proxy menu item: {}", e))
-                            .ok()
-                    })
-                    .collect();
-
-                if group_items.is_empty() {
-                    continue;
-                }
-
-                let group_display_name = group_name.to_string();
-
-                let group_items_refs: Vec<&dyn IsMenuItem<Wry>> =
-                    group_items.iter().map(|item| item as &dyn IsMenuItem<Wry>).collect();
-
-                if let Ok(submenu) = Submenu::with_id_and_items(
-                    app_handle,
-                    format!("proxy_group_{}", group_name),
-                    group_display_name,
-                    true,
-                    &group_items_refs,
-                ) {
-                    let insertion_index = submenus.len();
-                    submenus.push((group_name.into(), insertion_index, submenu));
-                } else {
-                    logging!(warn, Type::Tray, "Failed to create proxy group submenu: {}", group_name);
-                }
+    let Some(view) = view else { return Vec::new() };
+    view.groups
+        .iter()
+        .chain(view.global.iter())
+        .filter_map(|group| {
+            if group.hidden.unwrap_or_default() || (proxy_mode == "global") != (group.name == "GLOBAL") {
+                return None;
            }
-        }
-
-        if let Some(order_map) = proxy_group_order_map.as_ref() {
-            submenus.sort_by(|(name_a, original_index_a, _), (name_b, original_index_b, _)| {
-                match (order_map.get(name_a), order_map.get(name_b)) {
-                    (Some(index_a), Some(index_b)) => index_a.cmp(index_b),
-                    (Some(_), None) => std::cmp::Ordering::Less,
-                    (None, Some(_)) => std::cmp::Ordering::Greater,
-                    (None, None) => original_index_a.cmp(original_index_b),
-                }
-            });
-        }
-
-        submenus.into_iter().map(|(_, _, submenu)| submenu).collect()
-    };
-    proxy_submenus
+            let url = latency::test_url(group, verge, profiles);
+            let proxies: Vec<ProxyLatencyItem> = group
+                .members
+                .iter()
+                .filter_map(|member| {
+                    let name = member_name(member);
+                    let text = proxy_item_text(&view, member, &url, verge);
+                    let checked = group.now.as_deref() == Some(name);
+                    CheckMenuItem::with_id(
+                        app_handle,
+                        format!("proxy_{}_{}", group.name, name),
+                        &text,
+                        true,
+                        checked,
+                        None::<&str>,
+                    )
+                    .map(|item| ProxyLatencyItem {
+                        item,
+                        name: name.to_owned(),
+                        provider_name: member_provider(&view, member).map(str::to_owned),
+                        text,
+                    })
+                    .map_err(|e| logging!(warn, Type::Tray, "Failed to create proxy menu item: {e}"))
+                    .ok()
+                })
+                .collect();
+            let group_items: Vec<_> = proxies.iter().map(|proxy| proxy.item.clone()).collect();
+            if group_items.is_empty() {
+                return None;
+            }
+            let running = latency::is_running(&group.name);
+            let test_item = MenuItem::with_id(
+                app_handle,
+                format!("{}_{}", MenuIds::TEST_LATENCY, group.name),
+                if running {
+                    clash_verge_i18n::t!("tray.testingLatency")
+                } else {
+                    texts.test_latency.clone()
+                },
+                !running,
+                None::<&str>,
+            )
+            .ok()?;
+            latency_items.insert(
+                group.name.clone(),
+                LatencyMenuItem {
+                    item: test_item.clone(),
+                    running,
+                    proxies,
+                    provider_state: view.provider_state,
+                },
+            );
+            let separator = PredefinedMenuItem::separator(app_handle).ok()?;
+            let mut items: Vec<&dyn IsMenuItem<Wry>> = vec![&test_item, &separator];
+            items.extend(group_items.iter().map(|item| item as &dyn IsMenuItem<Wry>));
+            Submenu::with_id_and_items(
+                app_handle,
+                format!("proxy_group_{}", group.name),
+                &group.name,
+                true,
+                &items,
+            )
+            .map_err(|e| logging!(warn, Type::Tray, "Failed to create proxy group submenu: {e}"))
+            .ok()
+        })
+        .collect()
 }

 fn create_proxy_menu_item(
@@ -592,54 +798,37 @@ async fn create_tray_menu(
    tun_mode_available: bool,
    profiles_preview: Vec<IProfilePreview<'_>>,
    options: TrayMenuOptions,
-) -> Result<tauri::menu::Menu<Wry>> {
+) -> Result<(tauri::menu::Menu<Wry>, HashMap<std::string::String, LatencyMenuItem>)> {
    let current_proxy_mode = mode.unwrap_or("");

    let mut verge_settings = Config::verge().await.latest_arc();
    let fetch_proxy_groups =
        options.include_proxy_groups && verge_settings.tray_proxy_groups_display_mode.as_deref() != Some("disable");

-    // TODO: should update tray menu again when it was timeout error
-    let (proxy_nodes_data, runtime_proxy_groups_order) = if fetch_proxy_groups {
-        let proxy_nodes_data =
-            tokio::time::timeout(Duration::from_millis(1000), handle::Handle::mihomo().get_proxies())
-                .await
-                .map_or(None, |res| res.ok());
-
-        let runtime = Config::runtime().await.latest_arc();
-        let runtime_proxy_groups_order = runtime.config.as_ref().map(|config| {
-            config
-                .get("proxy-groups")
-                .and_then(|groups| groups.as_sequence())
-                .map(|groups| {
-                    groups
-                        .iter()
-                        .filter_map(|group| group.get("name"))
-                        .filter_map(|name| name.as_str())
-                        .enumerate()
-                        .map(|(index, name)| (name.into(), index))
-                        .collect::<HashMap<String, usize>>()
-                })
-                .unwrap_or_default()
-        });
-
-        (proxy_nodes_data, runtime_proxy_groups_order)
+    // Proxy data must remain optional so a stopped Core cannot roll back unrelated settings.
+    let proxy_view = if fetch_proxy_groups {
+        tokio::time::timeout(
+            Duration::from_millis(1000),
+            cmd::proxy::proxy_view(Some(Duration::from_millis(750))),
+        )
+        .await
+        .ok()
+        .and_then(Result::ok)
    } else {
-        (None, None)
+        None
    };

    if fetch_proxy_groups {
        verge_settings = Config::verge().await.latest_arc();
    }

+    let profiles_config = Config::profiles().await.latest_arc();
+
    let tray_proxy_groups_display_mode = verge_settings
        .tray_proxy_groups_display_mode
        .as_deref()
        .unwrap_or("default");
-    let include_proxy_groups =
-        options.include_proxy_groups && verge_settings.tray_proxy_groups_display_mode.as_deref() != Some("disable");
-
-    let proxy_group_order_map = runtime_proxy_groups_order;
+    let include_proxy_groups = options.include_proxy_groups && tray_proxy_groups_display_mode != "disable";

    let show_outbound_modes_inline = verge_settings.tray_inline_outbound_modes.unwrap_or(false);

@@ -720,9 +909,17 @@ async fn create_tray_menu(
        &profile_menu_items_refs,
    )?;

+    let mut latency_items = HashMap::new();
    let (proxies_menu, inline_proxy_items) = if include_proxy_groups {
-        let proxy_sub_menus =
-            create_subcreate_proxy_menu_item(app_handle, current_proxy_mode, proxy_group_order_map, proxy_nodes_data);
+        let proxy_sub_menus = create_subcreate_proxy_menu_item(
+            app_handle,
+            current_proxy_mode,
+            proxy_view,
+            &mut latency_items,
+            &texts,
+            &verge_settings,
+            &profiles_config,
+        );

        match tray_proxy_groups_display_mode {
            "default" => create_proxy_menu_item(app_handle, false, proxy_sub_menus, &texts.proxies)?,
@@ -866,10 +1063,25 @@ async fn create_tray_menu(
    ]);

    let menu = tauri::menu::MenuBuilder::new(app_handle).items(&menu_items).build()?;
-    Ok(menu)
+    Ok((menu, latency_items))
 }

 fn on_tray_icon_event(_tray_icon: &TrayIcon, tray_event: TrayIconEvent) {
+    let refresh_proxies = match tray_event {
+        TrayIconEvent::Enter { .. } => Tray::global().proxy_hover_limiter.check(),
+        TrayIconEvent::Click {
+            button: MouseButton::Left | MouseButton::Right,
+            button_state: MouseButtonState::Down,
+            ..
+        } => true,
+        _ => false,
+    };
+    if refresh_proxies {
+        AsyncHandler::spawn(|| async {
+            Tray::global().refresh_proxy_items().await;
+        });
+    }
+
    if matches!(
        tray_event,
        TrayIconEvent::Move { .. } | TrayIconEvent::Leave { .. } | TrayIconEvent::Enter { .. }
@@ -991,6 +1203,15 @@ fn on_menu_event(_: &AppHandle, event: MenuEvent) {
                };
                feat::toggle_proxy_profile(profile_index.into()).await;
            }
+            id if id.starts_with(MenuIds::TEST_LATENCY) => {
+                let group_name = id
+                    .strip_prefix(MenuIds::TEST_LATENCY)
+                    .and_then(|rest| rest.strip_prefix('_'));
+                if let Some(group_name) = group_name {
+                    logging!(info, Type::Tray, "Tray menu: test group latency {}", group_name);
+                    latency::test_proxy_group_delay(group_name).await;
+                }
+            }
            id if id.starts_with("proxy_") => {
                let rest = match id.strip_prefix("proxy_") {
                    Some(r) => r,
@@ -1,7 +1,10 @@
 #![cfg(target_os = "windows")]

-use crate::{core::service, utils::dirs};
+use crate::utils::dirs;
 use anyhow::{Result, bail};
+use deelevate::{PrivilegeLevel, Token};
+use runas::Command as RunasCommand;
+use std::process::Command as StdCommand;

 pub fn invoke_uwptools() -> Result<()> {
    let resource_dir = dirs::app_resources_dir()?;
@@ -11,7 +14,13 @@ pub fn invoke_uwptools() -> Result<()> {
        bail!("enableLoopback exe not found");
    }

-    service::run_maybe_elevated(&tool_path, false)?;
+    let token = Token::with_current_process()?;
+    let level = token.privilege_level()?;
+
+    match level {
+        PrivilegeLevel::NotPrivileged => RunasCommand::new(tool_path).status()?,
+        _ => StdCommand::new(tool_path).status()?,
+    };

    Ok(())
 }
@@ -0,0 +1,8 @@
+// This function is exported for use by the Clash core
+// eslint-disable-next-line unused-imports/no-unused-vars
+function main(config, _name) {
+  if (config.mode === 'script') {
+    config.mode = 'rule'
+  }
+  return config
+}
@@ -0,0 +1,12 @@
+// This function is exported for use by the Clash core
+// eslint-disable-next-line unused-imports/no-unused-vars
+function main(config, _name) {
+  if (Array.isArray(config.proxies)) {
+    config.proxies.forEach((p, i) => {
+      if (p.type === 'hysteria' && typeof p.alpn === 'string') {
+        config.proxies[i].alpn = [p.alpn]
+      }
+    })
+  }
+  return config
+}
@@ -24,8 +24,8 @@ pub enum ChainType {

 #[derive(Debug, Clone)]
 pub enum ChainSupport {
-    Mihomo,
-    MihomoAlpha,
+    ClashMeta,
+    ClashMetaAlpha,
 }

 // Helper trait to allow async conversion
@@ -53,14 +53,26 @@ impl AsyncChainItemFrom for Option<ChainItem> {
                uid,
                data: ChainType::Merge(help::read_mapping(&path).await.ok()?),
            }),
-            "rules" | "proxies" | "groups" => {
+            "rules" => {
                let seq_map = help::read_yaml::<SeqMap>(&path).await.ok()?;
-                let data = match itype {
-                    "rules" => ChainType::Rules(seq_map),
-                    "proxies" => ChainType::Proxies(seq_map),
-                    _ => ChainType::Groups(seq_map),
-                };
-                Some(ChainItem { uid, data })
+                Some(ChainItem {
+                    uid,
+                    data: ChainType::Rules(seq_map),
+                })
+            }
+            "proxies" => {
+                let seq_map = help::read_yaml::<SeqMap>(&path).await.ok()?;
+                Some(ChainItem {
+                    uid,
+                    data: ChainType::Proxies(seq_map),
+                })
+            }
+            "groups" => {
+                let seq_map = help::read_yaml::<SeqMap>(&path).await.ok()?;
+                Some(ChainItem {
+                    uid,
+                    data: ChainType::Groups(seq_map),
+                })
            }
            _ => None,
        }
@@ -69,15 +81,23 @@ impl AsyncChainItemFrom for Option<ChainItem> {
 impl ChainItem {
    /// 内建支持一些脚本
    pub fn builtin() -> Vec<(ChainSupport, Self)> {
-        // data intentionally empty: the enhance loop dispatches on uid to native implementations
-        let hy_alpn = Self::to_script("verge_hy_alpn", "");
-        let meta_guard = Self::to_script("verge_meta_guard", "");
+        // meta 的一些处理
+        let meta_guard = Self::to_script("verge_meta_guard", include_str!("./builtin/meta_guard.js"));
+
+        // meta 1.13.2 alpn string 转 数组
+        let hy_alpn = Self::to_script("verge_hy_alpn", include_str!("./builtin/meta_hy_alpn.js"));
+
+        // meta 的一些处理
+        let meta_guard_alpha = Self::to_script("verge_meta_guard", include_str!("./builtin/meta_guard.js"));
+
+        // meta 1.13.2 alpn string 转 数组
+        let hy_alpn_alpha = Self::to_script("verge_hy_alpn", include_str!("./builtin/meta_hy_alpn.js"));

        vec![
-            (ChainSupport::Mihomo, hy_alpn.clone()),
-            (ChainSupport::Mihomo, meta_guard.clone()),
-            (ChainSupport::MihomoAlpha, hy_alpn),
-            (ChainSupport::MihomoAlpha, meta_guard),
+            (ChainSupport::ClashMeta, hy_alpn),
+            (ChainSupport::ClashMeta, meta_guard),
+            (ChainSupport::ClashMetaAlpha, hy_alpn_alpha),
+            (ChainSupport::ClashMetaAlpha, meta_guard_alpha),
        ]
    }

@@ -94,7 +114,7 @@ impl ChainSupport {
        match core {
            Some(core) => matches!(
                (self, core.as_str()),
-                (Self::Mihomo, "verge-mihomo") | (Self::MihomoAlpha, "verge-mihomo-alpha")
+                (Self::ClashMeta, "verge-mihomo") | (Self::ClashMetaAlpha, "verge-mihomo-alpha")
            ),
            None => true,
        }
@@ -24,7 +24,18 @@ fn lowercase_key(key: &str) -> Value {
    Value::from(key.as_str())
 }

-pub fn use_lowercase(config: Mapping) -> Mapping {
+pub fn use_lowercase(config: &Mapping) -> Mapping {
+    let mut lowercased = Mapping::new();
+
+    for (key, value) in config.into_iter() {
+        if let Some(key_str) = key.as_str() {
+            lowercased.insert(lowercase_key(key_str), value.clone());
+        }
+    }
+    lowercased
+}
+
+pub fn use_lowercase_owned(config: Mapping) -> Mapping {
    let mut lowercased = Mapping::new();

    for (key, value) in config {
@@ -17,7 +17,7 @@ fn deep_merge(a: &mut Value, b: Value) {
 }

 pub fn use_merge(merge: &Mapping, mut config: Mapping) -> Mapping {
-    for (key, value) in use_lowercase(merge.clone()) {
+    for (key, value) in use_lowercase(merge) {
        match (config.get_mut(&key), value) {
            (Some(Value::Mapping(existing)), Value::Mapping(overlay)) if key.as_str() == Some("dns") => {
                existing.extend(overlay);
@@ -8,7 +8,7 @@ mod tun;

 use self::{
    chain::{AsyncChainItemFrom as _, ChainItem, ChainType},
-    field::{use_keys, use_lowercase, use_sort},
+    field::{use_keys, use_lowercase_owned, use_sort},
    merge::use_merge,
    script::use_script,
    seq::{SeqMap, use_seq},
@@ -199,25 +199,35 @@ async fn collect_profile_items(profiles: &IProfiles) -> Result<ProfileItems> {

    let name = current_item.name.clone().unwrap_or_default();

-    let ProfileItems {
-        merge_item: default_merge,
-        script_item: default_script,
-        rules_item: default_rules,
-        proxies_item: default_proxies,
-        groups_item: default_groups,
-        global_merge: default_global_merge,
-        global_script: default_global_script,
-        ..
-    } = ProfileItems::default();
-
    let (merge_item, script_item, rules_item, proxies_item, groups_item, global_merge, global_script) = tokio::join!(
-        chain_item_or_default(profiles.get_item(&merge_uid).ok(), || default_merge,),
-        chain_item_or_default(profiles.get_item(&script_uid).ok(), || default_script,),
-        chain_item_or_default(profiles.get_item(&rules_uid).ok(), || default_rules,),
-        chain_item_or_default(profiles.get_item(&proxies_uid).ok(), || default_proxies,),
-        chain_item_or_default(profiles.get_item(&groups_uid).ok(), || default_groups,),
-        chain_item_or_default(profiles.get_item("Merge").ok(), || default_global_merge,),
-        chain_item_or_default(profiles.get_item("Script").ok(), || default_global_script,),
+        chain_item_or_default(profiles.get_item(&merge_uid).ok(), || ChainItem {
+            uid: "".into(),
+            data: ChainType::Merge(Mapping::new()),
+        },),
+        chain_item_or_default(profiles.get_item(&script_uid).ok(), || ChainItem {
+            uid: "".into(),
+            data: ChainType::Script(tmpl::ITEM_SCRIPT.into()),
+        },),
+        chain_item_or_default(profiles.get_item(&rules_uid).ok(), || ChainItem {
+            uid: "".into(),
+            data: ChainType::Rules(SeqMap::default()),
+        },),
+        chain_item_or_default(profiles.get_item(&proxies_uid).ok(), || ChainItem {
+            uid: "".into(),
+            data: ChainType::Proxies(SeqMap::default()),
+        },),
+        chain_item_or_default(profiles.get_item(&groups_uid).ok(), || ChainItem {
+            uid: "".into(),
+            data: ChainType::Groups(SeqMap::default()),
+        },),
+        chain_item_or_default(profiles.get_item("Merge").ok(), || ChainItem {
+            uid: "Merge".into(),
+            data: ChainType::Merge(Mapping::new()),
+        },),
+        chain_item_or_default(profiles.get_item("Script").ok(), || ChainItem {
+            uid: "Script".into(),
+            data: ChainType::Script(tmpl::ITEM_SCRIPT.into()),
+        },),
    );

    Ok(ProfileItems {
@@ -233,16 +243,16 @@ async fn collect_profile_items(profiles: &IProfiles) -> Result<ProfileItems> {
    })
 }

-async fn process_override_items(
+async fn process_global_items(
    mut config: Mapping,
    mut exists_keys: Vec<String>,
    mut result_map: HashMap<String, ResultLog>,
-    merge_item: ChainItem,
-    script_item: ChainItem,
+    global_merge: ChainItem,
+    global_script: ChainItem,
    profile_name: &String,
    authoritative: &AuthoritativeFields,
 ) -> (Mapping, Vec<String>, HashMap<String, ResultLog>) {
-    if let ChainType::Merge(merge) = merge_item.data {
+    if let ChainType::Merge(merge) = global_merge.data {
        exists_keys.extend(use_keys(&merge));
        let before = authoritative.current(&config);
        config = use_merge(&merge, config);
@@ -252,11 +262,11 @@ async fn process_override_items(
            .map(discarded_note)
            .collect();
        if !notes.is_empty() {
-            result_map.entry(merge_item.uid).or_default().extend(notes);
+            result_map.entry(global_merge.uid).or_default().extend(notes);
        }
    }

-    if let ChainType::Script(script) = script_item.data {
+    if let ChainType::Script(script) = global_script.data {
        let before = authoritative.current(&config);
        let (res_config, changed_keys, mut logs) = use_script(script, config, profile_name.clone()).await;
        exists_keys.extend(changed_keys);
@@ -267,7 +277,7 @@ async fn process_override_items(
                .into_iter()
                .map(discarded_note),
        );
-        result_map.insert(script_item.uid, logs);
+        result_map.insert(global_script.uid, logs);
    }

    (config, exists_keys, result_map)
@@ -534,6 +544,46 @@ fn ensure_lan_bind_address(mut config: Mapping) -> Mapping {
    config
 }

+async fn process_profile_items(
+    mut config: Mapping,
+    mut exists_keys: Vec<String>,
+    mut result_map: HashMap<String, ResultLog>,
+    merge_item: ChainItem,
+    script_item: ChainItem,
+    profile_name: &String,
+    authoritative: &AuthoritativeFields,
+) -> (Mapping, Vec<String>, HashMap<String, ResultLog>) {
+    if let ChainType::Merge(merge) = merge_item.data {
+        exists_keys.extend(use_keys(&merge));
+        let before = authoritative.current(&config);
+        config = use_merge(&merge, config);
+        let notes: ResultLog = authoritative
+            .overridden(&before, &authoritative.current(&config))
+            .into_iter()
+            .map(discarded_note)
+            .collect();
+        if !notes.is_empty() {
+            result_map.entry(merge_item.uid).or_default().extend(notes);
+        }
+    }
+
+    if let ChainType::Script(script) = script_item.data {
+        let before = authoritative.current(&config);
+        let (res_config, changed_keys, mut logs) = use_script(script, config, profile_name.clone()).await;
+        exists_keys.extend(changed_keys);
+        config = res_config;
+        logs.extend(
+            authoritative
+                .overridden(&before, &authoritative.current(&config))
+                .into_iter()
+                .map(discarded_note),
+        );
+        result_map.insert(script_item.uid, logs);
+    }
+
+    (config, exists_keys, result_map)
+}
+
 /// Merges the app's clash config over the profile; switches are parameters to keep it pure.
 fn merge_default_config(
    mut config: Mapping,
@@ -614,7 +664,7 @@ fn apply_builtin_scripts(mut config: Mapping, clash_core: Option<String>, enable
            .collect();
        if !items.is_empty() {
            // The JS path saw a lowercased view; lowercase once, only when a builtin runs.
-            config = use_lowercase(config);
+            config = use_lowercase_owned(config);
            for item in items {
                logging!(debug, Type::Core, "run builtin script {}", item.uid);
                config = match item.uid.as_str() {
@@ -885,7 +935,7 @@ pub async fn enhance(

    let authoritative = AuthoritativeFields::capture(&config, &gui_tun_keys, dns_settings);

-    let (config, exists_keys, result_map) = process_override_items(
+    let (config, exists_keys, result_map) = process_global_items(
        config,
        exists_keys,
        result_map,
@@ -896,7 +946,7 @@ pub async fn enhance(
    )
    .await;

-    let (config, exists_keys, result_map) = process_override_items(
+    let (config, exists_keys, result_map) = process_profile_items(
        config,
        exists_keys,
        result_map,
@@ -1378,7 +1428,7 @@ mod authoritative_field_tests {
 mod tests {
    use super::{
        AuthoritativeFields, ChainItem, ChainType, Mapping, cleanup_proxy_groups, ensure_lan_bind_address,
-        process_override_items, use_keys,
+        process_global_items, process_profile_items, use_keys,
    };
    use std::collections::HashMap;

@@ -1426,7 +1476,7 @@ mod tests {
                data: ChainType::Merge(merge.clone()),
            };
            let profile_name = "test-profile".into();
-            let (config, keys, logs) = process_override_items(
+            let (config, keys, logs) = process_global_items(
                config,
                vec![],
                HashMap::new(),
@@ -1436,7 +1486,7 @@ mod tests {
                &authoritative,
            )
            .await;
-            let (config, _, logs) = process_override_items(
+            let (config, _, logs) = process_profile_items(
                config,
                keys,
                logs,
@@ -1514,7 +1564,7 @@ mod tests {

        let profile_name = "test-profile".into();
        let authoritative = AuthoritativeFields::capture(&config, &[], Mapping::new());
-        let (config, exists_keys, result_map) = process_override_items(
+        let (config, exists_keys, result_map) = process_global_items(
            config,
            exists_keys,
            HashMap::new(),
@@ -1524,7 +1574,7 @@ mod tests {
            &authoritative,
        )
        .await;
-        let (config, exists_keys, _) = process_override_items(
+        let (config, exists_keys, _) = process_profile_items(
            config,
            exists_keys,
            result_map,
@@ -1,6 +1,6 @@
 use crate::{process::AsyncHandler, utils::tmpl};

-use super::field::use_lowercase;
+use super::field::{use_lowercase, use_lowercase_owned};
 use anyhow::{Error, Result};
 use boa_engine::{Context, JsString, JsValue, Source, js_string, native_function::NativeFunction, property::Attribute};
 use clash_verge_logging::{Type, logging};
@@ -22,10 +22,10 @@ type EvalOutcome = (Result<Mapping, std::string::String>, Vec<(String, String)>)
 pub(super) async fn use_script(script: String, config: Mapping, name: String) -> ScriptResult {
    // The template is identity-plus-lowercasing; skip the Boa round-trip.
    if script == tmpl::ITEM_SCRIPT {
-        return (use_lowercase(config), vec![], vec![]);
+        return (use_lowercase_owned(config), vec![], vec![]);
    }

-    let json = match serde_json::to_string(&use_lowercase(config.clone())) {
+    let json = match serde_json::to_string(&use_lowercase(&config)) {
        Ok(json) if json.len() <= MAX_JSON_SIZE => json,
        Ok(_) => {
            let message = "Configuration size exceeds maximum allowed size";
@@ -173,7 +173,7 @@ fn eval_script(script: &str, config_json: &str, name: &String) -> EvalOutcome {
    }

    match parse_json_safely(&result) {
-        Ok(config) => (Ok(use_lowercase(config)), outputs.lock().to_vec()),
+        Ok(config) => (Ok(use_lowercase_owned(config)), outputs.lock().to_vec()),
        Err(err) => {
            logging!(
                error,
@@ -28,7 +28,7 @@ pub fn use_tun(mut config: Mapping, enable: bool) -> Mapping {
            .and_then(|v| v.as_str())
            .unwrap_or("fake-ip");

-        if current_mode == "fake-ip" {
+        if current_mode == "fake-ip" || !dns_val.contains_key(Value::from("enhanced-mode")) {
            revise!(dns_val, "enable", true);
            revise!(dns_val, "ipv6", ipv6_val);

@@ -33,9 +33,6 @@ async fn finalize_restored_verge_config(
    webdav_username: Option<String>,
    webdav_password: Option<String>,
 ) -> Result<()> {
-    // The lock must cover every restored layer; an unlocked apply races a concurrently staged draft.
-    let config_write = Config::lock_config_write().await;
-
    // A broken restored `verge.yaml` is a restore failure, not a reason to load defaults.
    let mut restored = help::read_yaml::<IVerge>(&verge_path()?).await?;
    restored.webdav_url = webdav_url;
@@ -46,42 +43,43 @@ async fn finalize_restored_verge_config(
    let restored_clash = IClashTemp::new().await;
    let clash_draft = Config::clash().await;
    clash_draft.edit_draft(|d| {
-        *d = restored_clash;
+        *d = restored_clash.clone();
    });
    clash_draft.apply();

    let restored_profiles = IProfiles::new().await;
    let profiles_draft = Config::profiles().await;
    profiles_draft.edit_draft(|d| {
-        *d = restored_profiles;
+        *d = restored_profiles.clone();
    });
    profiles_draft.apply();

    let verge_draft = Config::verge().await;
-    verge_draft.edit_draft(|d| {
-        *d = restored.clone();
-    });
-    verge_draft.apply();
+    {
+        // Hold the write lock so a concurrent patch cannot stage a draft the proxy write reads.
+        let _config_write = Config::lock_config_write().await;
+        verge_draft.edit_draft(|d| {
+            *d = restored.clone();
+        });
+        verge_draft.apply();

-    // Turn it off here; a failing core side effect below would otherwise skip this step.
-    if !restored.enable_system_proxy.unwrap_or_default() {
-        let result = async {
-            let _lifecycle = CoreManager::global().lifecycle_lock.lock().await;
-            proxy_control::apply().await?;
-            proxy_control::refresh_guard().await
-        }
-        .await;
-        if let Err(err) = result {
-            logging!(error, Type::Backup, "Failed to turn the system proxy off: {err:#}");
-            if SystemProxyStateUnknown::is_in(&err) {
-                return Err(err);
+        // Turn it off here; a failing core side effect below would otherwise skip this step.
+        if !restored.enable_system_proxy.unwrap_or_default() {
+            let result = async {
+                let _lifecycle = CoreManager::global().lifecycle_lock.lock().await;
+                proxy_control::apply().await?;
+                proxy_control::refresh_guard().await
+            }
+            .await;
+            if let Err(err) = result {
+                logging!(error, Type::Backup, "Failed to turn the system proxy off: {err:#}");
+                if SystemProxyStateUnknown::is_in(&err) {
+                    return Err(err);
+                }
            }
        }
    }

-    // `patch_verge` re-acquires the lock through `try_lock_config_write`.
-    drop(config_write);
-
    // Run configuration side effects without rewriting the already-restored file.
    if let Err(err) = super::patch_verge(&restored, true).await {
        logging!(error, Type::Backup, "Failed to apply restored verge config: {err:#}");
@@ -136,35 +134,14 @@ pub async fn delete_webdav_backup(filename: String) -> Result<()> {
    })
 }

-/// Backup creation strips the WebDAV credentials, so the live ones are kept.
-async fn restore_backup_archive(path: PathBuf) -> Result<()> {
-    let (webdav_url, webdav_username, webdav_password) = {
-        let verge = Config::verge().await;
-        let verge = verge.latest_arc();
-        (
-            verge.webdav_url.clone(),
-            verge.webdav_username.clone(),
-            verge.webdav_password.clone(),
-        )
-    };
-
-    let home_dir = app_home_dir()?;
-    AsyncHandler::spawn_blocking(move || -> Result<()> {
-        let file = std::fs::File::open(&path)?;
-        let mut zip = zip::ZipArchive::new(file)?;
-        zip.extract(&home_dir)?;
-        Ok(())
-    })
-    .await
-    .map_err(|join| anyhow!("backup extraction task failed: {join}"))??;
-
-    // Held for the config-data transition only; extraction is plain filesystem work.
-    let _profile_write = crate::config::profiles::PROFILE_WRITE_LOCK.lock().await;
-    finalize_restored_verge_config(webdav_url, webdav_username, webdav_password).await
-}
-
 #[tracing::instrument(skip_all, level = "info", fields(filename = %filename))]
 pub async fn restore_webdav_backup(filename: String) -> Result<()> {
+    let verge = Config::verge().await;
+    let verge_data = verge.latest_arc();
+    let webdav_url = verge_data.webdav_url.clone();
+    let webdav_username = verge_data.webdav_username.clone();
+    let webdav_password = verge_data.webdav_password.clone();
+
    let backup_storage_path = app_home_dir()
        .map_err(|e| anyhow::anyhow!("Failed to get app home dir: {e}"))?
        .join(filename.as_str());
@@ -181,7 +158,12 @@ pub async fn restore_webdav_backup(filename: String) -> Result<()> {
            err
        })?;

-    let res = restore_backup_archive(backup_storage_path.clone()).await;
+    let value = backup_storage_path.clone();
+    let file = AsyncHandler::spawn_blocking(move || std::fs::File::open(&value)).await??;
+    let mut zip = zip::ZipArchive::new(file)?;
+    let _profile_write = crate::config::profiles::PROFILE_WRITE_LOCK.lock().await;
+    zip.extract(app_home_dir()?)?;
+    let res = finalize_restored_verge_config(webdav_url, webdav_username, webdav_password).await;
    let _ = backup_storage_path.remove_if_exists().await;
    res
 }
@@ -350,7 +332,22 @@ pub async fn restore_local_backup(filename: String) -> Result<()> {
        return Err(anyhow!("Backup file not found: {}", filename));
    }

-    restore_backup_archive(target_path).await
+    let (webdav_url, webdav_username, webdav_password) = {
+        let verge = Config::verge().await;
+        let verge = verge.latest_arc();
+        (
+            verge.webdav_url.clone(),
+            verge.webdav_username.clone(),
+            verge.webdav_password.clone(),
+        )
+    };
+
+    let file = AsyncHandler::spawn_blocking(move || std::fs::File::open(&target_path)).await??;
+    let mut zip = zip::ZipArchive::new(file)?;
+    let _profile_write = crate::config::profiles::PROFILE_WRITE_LOCK.lock().await;
+    zip.extract(app_home_dir()?)?;
+    finalize_restored_verge_config(webdav_url, webdav_username, webdav_password).await?;
+    Ok(())
 }

 #[tracing::instrument(skip_all, level = "info", fields(filename = %filename, destination = %destination))]
@@ -3,7 +3,7 @@ use crate::core::notify::{Refresh, announce};
 use crate::{
    config::{Config, MixedPort},
    core::{CoreManager, handle, tray},
-    feat::run_exit_cleanup_flow,
+    feat::clean_async,
    process::AsyncHandler,
    utils,
 };
@@ -14,8 +14,15 @@ use smartstring::alias::String;
 use std::sync::{Arc, LazyLock};

 #[allow(clippy::expect_used)]
-static TLS_CONFIG: LazyLock<Arc<rustls::ClientConfig>> =
-    LazyLock::new(|| Arc::new(utils::network::build_webpki_rooted_tls_config().expect("Failed to set TLS versions")));
+static TLS_CONFIG: LazyLock<Arc<rustls::ClientConfig>> = LazyLock::new(|| {
+    let root_store = rustls::RootCertStore::from_iter(webpki_roots::TLS_SERVER_ROOTS.iter().cloned());
+    let config = rustls::ClientConfig::builder_with_provider(Arc::new(rustls::crypto::ring::default_provider()))
+        .with_safe_default_protocol_versions()
+        .expect("Failed to set TLS versions")
+        .with_root_certificates(root_store)
+        .with_no_client_auth();
+    Arc::new(config)
+});

 pub async fn restart_clash_core() {
    match CoreManager::global().restart_core().await {
@@ -31,9 +38,38 @@ pub async fn restart_clash_core() {

 pub async fn restart_app() {
    logging!(debug, Type::System, "启动重启应用流程");
-    let cleanup_result = run_exit_cleanup_flow(NoticeStatus::AppRestartCoreStopFailed).await;
+    handle::Handle::global().set_is_exiting();
+
+    Config::apply_all_and_save_file().await;
+
+    let cleanup_result = clean_async().await;
+
+    logging!(
+        info,
+        Type::System,
+        "资源清理完成，退出代码: {}",
+        if cleanup_result.all_success { 0 } else { 1 }
+    );

    if !cleanup_result.core_stopped {
+        handle::Handle::global().clear_is_exiting();
+        // A failed stop may still have marked the core stopped, and exit cleanup skipped the DNS restore.
+        // A core that kept running keeps its DNS, whatever an unapplied config draft says.
+        #[cfg(target_os = "macos")]
+        {
+            let manager = CoreManager::global();
+            let _lifecycle = manager.lifecycle_lock.lock().await;
+            if matches!(
+                *manager.get_running_mode(),
+                crate::core::manager::RunningMode::NotRunning
+            ) {
+                crate::utils::resolve::dns::sync_public_dns().await;
+            }
+        }
+        handle::Handle::notice(
+            NoticeStatus::AppRestartCoreStopFailed,
+            cleanup_result.stop_error.unwrap_or_default(),
+        );
        return;
    }

@@ -67,14 +103,11 @@ pub async fn change_clash_mode(mode: String) -> Result<(), String> {
    }

    let clash = Config::clash().await;
-    // Serialize with patch transactions: an unlocked commit can flush a staged draft mid-rollback.
-    let save_result = {
-        let _config_write = Config::lock_config_write().await;
-        clash.edit_draft(|d| d.patch_config(&mapping));
-        clash.apply();
-        clash.data_arc().save_config().await
-    };
-    if save_result.is_ok() {
+    clash.edit_draft(|d| d.patch_config(&mapping));
+    clash.apply();
+
+    let clash_data = clash.data_arc();
+    if clash_data.save_config().await.is_ok() {
        announce(Refresh::Clash);
        tray::Tray::global().update_menu_and_icon().await;
    }
@@ -67,6 +67,7 @@ verge_registry! {
    proxy_group_tools_position => NoEffect;
    notice_position => NoEffect;
    collapse_navbar => NoEffect;
+    enable_system_titlebar => NoEffect;
    sysproxy_tray_icon => [TrayIcon];
    tun_tray_icon => [TrayIcon];
    enable_tun_mode => Tun;
@@ -47,11 +47,26 @@ pub async fn switch_proxy_node(group_name: &str, proxy_name: &str) {
            record_switched_node(group_name, proxy_name).await;
            announce(Refresh::Proxies);
            let _ = tray::Tray::global().update_menu().await;
+            return;
        }
        Err(err) => {
            logging!(error, Type::Tray, "切换代理失败: {err:?}");
        }
    }
+
+    match handle::Handle::mihomo()
+        .select_node_for_group(group_name, proxy_name)
+        .await
+    {
+        Ok(_) => {
+            logging!(info, Type::Tray, "代理切换回退成功: {} -> {}", group_name, proxy_name);
+            record_switched_node(group_name, proxy_name).await;
+            let _ = tray::Tray::global().update_menu().await;
+        }
+        Err(err) => {
+            logging!(error, Type::Tray, "代理切换最终失败: {err:?}");
+        }
+    }
 }

 async fn should_update_profile(uid: &String, ignore_auto_update: bool) -> Result<Option<(String, Option<PrfOption>)>> {
@@ -130,7 +130,9 @@ pub async fn open_or_close_dashboard() {
    logging!(info, Type::Window, "Window toggle result: {result:?}");
 }

-pub(crate) async fn run_exit_cleanup_flow(stop_failed_notice: NoticeStatus) -> CleanupResult {
+pub async fn quit() -> clash_verge_signal::ShutdownOutcome {
+    logging!(debug, Type::System, "启动退出流程");
+    // 设置退出标志
    handle::Handle::global().set_is_exiting();

    Config::apply_all_and_save_file().await;
@@ -160,21 +162,16 @@ pub(crate) async fn run_exit_cleanup_flow(stop_failed_notice: NoticeStatus) -> C
            }
        }
        handle::Handle::notice(
-            stop_failed_notice,
-            cleanup_result.stop_error.clone().unwrap_or_default(),
+            NoticeStatus::AppQuitCoreStopFailed,
+            cleanup_result.stop_error.unwrap_or_default(),
        );
+        return clash_verge_signal::ShutdownOutcome::Canceled;
    }

-    cleanup_result
-}
-
-pub async fn quit() {
-    logging!(debug, Type::System, "启动退出流程");
-    let cleanup_result = run_exit_cleanup_flow(NoticeStatus::AppQuitCoreStopFailed).await;
-
    utils::server::shutdown_embedded_server();
    let app_handle = handle::Handle::app_handle();
    app_handle.exit(if cleanup_result.all_success { 0 } else { 1 });
+    clash_verge_signal::ShutdownOutcome::Committed
 }

 pub async fn clean_async() -> CleanupResult {
@@ -116,9 +116,13 @@ mod app_init {
    /// Setup window state management
    pub fn setup_window_state(app: &tauri::App) -> Result<(), Box<dyn std::error::Error>> {
        logging!(debug, Type::Setup, "初始化窗口状态管理...");
+        // Decorations are config-driven (`enable_system_titlebar`); restoring a stale
+        // value here would override the builder's `.decorations(...)` on window recreate.
+        let state_flags =
+            tauri_plugin_window_state::StateFlags::all() & !tauri_plugin_window_state::StateFlags::DECORATIONS;
        let window_state_plugin = tauri_plugin_window_state::Builder::new()
            .with_filename(files::WINDOW_STATE)
-            .with_state_flags(tauri_plugin_window_state::StateFlags::default())
+            .with_state_flags(state_flags)
            .build();
        app.handle().plugin(window_state_plugin)?;
        Ok(())
@@ -230,7 +234,6 @@ pub fn run() -> std::process::ExitCode {
            if let Err(panic) = std::panic::catch_unwind(std::panic::AssertUnwindSafe(|| {
                resolve::resolve_setup_async();
                resolve::resolve_setup_sync();
-                #[cfg(target_os = "linux")]
                resolve::init_signal();
            })) {
                log_setup_panic("window-core", panic);
@@ -16,7 +16,7 @@ fn main() -> ExitCode {
 #[cfg(not(all(feature = "perf-harness", target_os = "macos")))]
 fn main() -> ExitCode {
    let default_parallelism = std::thread::available_parallelism().map(|n| n.get()).unwrap_or(1);
-    let worker_limit = std::cmp::min(default_parallelism, 4);
+    let worker_limit = std::cmp::min(default_parallelism, 8);
    let blocking_limit = 2 * worker_limit;

    #[allow(clippy::unwrap_used)]
@@ -354,6 +354,7 @@ pub(super) async fn init_dns_config() -> Result<()> {
                Value::String("*.arpa".into()),
                Value::String("time.*.com".into()),
                Value::String("ntp.*.com".into()),
+                Value::String("time.*.com".into()),
                Value::String("+.market.xiaomi.com".into()),
                Value::String("localhost.ptlogin2.qq.com".into()),
                Value::String("*.msftncsi.com".into()),
@@ -508,9 +509,11 @@ pub async fn init_resources() -> Result<()> {
    let app_dir = dirs::app_home_dir()?;
    let res_dir = dirs::app_resources_dir()?;

-    // app_home is created by `ensure_directories` in `init_config`, which always runs first.
+    if !app_dir.exists() {
+        std::mem::drop(fs::create_dir_all(&app_dir).await);
+    }
    if !res_dir.exists() {
-        fs::create_dir_all(&res_dir).await?;
+        std::mem::drop(fs::create_dir_all(&res_dir).await);
    }

    let file_list = ["Country.mmdb", "ASN.mmdb", "geoip.dat", "geosite.dat"];
@@ -48,17 +48,6 @@ enum TlsRootMode {
    StaticWebpkiRoots,
 }

-/// ALPN stays unset: raw TLS connectors offer none, while reqwest needs the h2 offer.
-pub(crate) fn build_webpki_rooted_tls_config() -> Result<rustls::ClientConfig> {
-    let root_store = rustls::RootCertStore::from_iter(webpki_roots::TLS_SERVER_ROOTS.iter().cloned());
-    let config = rustls::ClientConfig::builder_with_provider(Arc::new(rustls::crypto::ring::default_provider()))
-        .with_safe_default_protocol_versions()?
-        .with_root_certificates(root_store)
-        .with_no_client_auth();
-
-    Ok(config)
-}
-
 pub struct NetworkManager;

 impl NetworkManager {
@@ -113,7 +102,13 @@ impl NetworkManager {
    }

    fn build_static_webpki_tls_config() -> Result<rustls::ClientConfig> {
-        let mut config = build_webpki_rooted_tls_config()?;
+        let root_store = rustls::RootCertStore::from_iter(webpki_roots::TLS_SERVER_ROOTS.iter().cloned());
+        let mut config =
+            rustls::ClientConfig::builder_with_provider(Arc::new(rustls::crypto::ring::default_provider()))
+                .with_safe_default_protocol_versions()?
+                .with_root_certificates(root_store)
+                .with_no_client_auth();
+
        config.alpn_protocols = vec![b"h2".to_vec(), b"http/1.1".to_vec()];

        Ok(config)
@@ -160,23 +155,6 @@ impl NetworkManager {
        detail.contains("protocolversion") || detail.contains("protocol version")
    }

-    /// `allow_fallback` stays false when the caller already disabled certificate verification.
-    async fn request_with_static_webpki_fallback<T, F, Fut>(allow_fallback: bool, mut request: F) -> Result<T>
-    where
-        F: FnMut(TlsRootMode) -> Fut,
-        Fut: std::future::Future<Output = Result<T>>,
-    {
-        match request(TlsRootMode::PlatformVerifier).await {
-            Ok(value) => Ok(value),
-            Err(err) if allow_fallback && Self::should_retry_with_static_webpki_roots(&err) => {
-                request(TlsRootMode::StaticWebpkiRoots).await.map_err(|fallback_err| {
-                    fallback_err.context("static webpki roots fallback failed after platform TLS verifier failed")
-                })
-            }
-            Err(err) => Err(err),
-        }
-    }
-
    async fn get_with_tls_mode(
        &self,
        url: &str,
@@ -286,21 +264,34 @@ impl NetworkManager {
        user_agent: Option<String>,
        accept_invalid_certs: bool,
    ) -> Result<HttpResponse> {
-        Self::request_with_static_webpki_fallback(!accept_invalid_certs, |tls_root_mode| {
-            let user_agent = user_agent.clone();
-            async move {
-                self.get_with_tls_mode(
+        let platform_result = self
+            .get_with_tls_mode(
+                url,
+                proxy_type,
+                timeout_secs,
+                user_agent.clone(),
+                accept_invalid_certs,
+                TlsRootMode::PlatformVerifier,
+            )
+            .await;
+
+        match platform_result {
+            Ok(response) => Ok(response),
+            Err(err) if !accept_invalid_certs && Self::should_retry_with_static_webpki_roots(&err) => self
+                .get_with_tls_mode(
                    url,
                    proxy_type,
                    timeout_secs,
                    user_agent,
                    accept_invalid_certs,
-                    tls_root_mode,
+                    TlsRootMode::StaticWebpkiRoots,
                )
                .await
-            }
-        })
-        .await
+                .map_err(|fallback_err| {
+                    fallback_err.context("static webpki roots fallback failed after platform TLS verifier failed")
+                }),
+            Err(err) => Err(err),
+        }
    }

    async fn get_bytes_with_tls_mode(
@@ -349,10 +340,19 @@ impl NetworkManager {
        timeout_secs: Option<u64>,
        max_bytes: usize,
    ) -> Result<Vec<u8>> {
-        Self::request_with_static_webpki_fallback(true, |tls_root_mode| async move {
-            self.get_bytes_with_tls_mode(url, proxy_type, timeout_secs, max_bytes, tls_root_mode)
+        let platform_result = self
+            .get_bytes_with_tls_mode(url, proxy_type, timeout_secs, max_bytes, TlsRootMode::PlatformVerifier)
+            .await;
+
+        match platform_result {
+            Ok(body) => Ok(body),
+            Err(err) if Self::should_retry_with_static_webpki_roots(&err) => self
+                .get_bytes_with_tls_mode(url, proxy_type, timeout_secs, max_bytes, TlsRootMode::StaticWebpkiRoots)
                .await
-        })
-        .await
+                .map_err(|fallback_err| {
+                    fallback_err.context("static webpki roots fallback failed after platform TLS verifier failed")
+                }),
+            Err(err) => Err(err),
+        }
    }
 }
@@ -1,6 +1,8 @@
 use crate::core::notify::NoticeStatus;
 use std::sync::atomic::{AtomicBool, Ordering};

+use anyhow::Result;
+
 use crate::{
    config::Config,
    core::{
@@ -18,6 +20,7 @@ use crate::{
    utils::{init, server, window_manager::WindowManager},
 };
 use clash_verge_logging::{Type, logging, logging_error};
+use clash_verge_signal;

 #[cfg(target_os = "macos")]
 pub mod dns;
@@ -95,6 +98,18 @@ async fn resolve_setup() {
    resolve_done();
 }

+pub async fn resolve_reset_async() -> Result<(), anyhow::Error> {
+    CoreManager::global().stop_core().await?;
+
+    #[cfg(target_os = "macos")]
+    {
+        use dns::restore_public_dns;
+        restore_public_dns().await?;
+    }
+
+    Ok(())
+}
+
 fn init_scheme() {
    logging_error!(Type::Setup, init::init_scheme());
 }
@@ -174,8 +189,6 @@ async fn init_silent_updater() {
    logging!(info, Type::Setup, "Silent updater initialized");
 }

-// Upstream has no session-end signal support on Linux; see crates/clash-verge-signal.
-#[cfg(target_os = "linux")]
 pub(crate) fn init_signal() {
    logging!(debug, Type::Setup, "Initializing signal handlers...");
    clash_verge_signal::register(feat::quit);
@@ -19,11 +19,6 @@ const DEFAULT_HEIGHT: f64 = 700.0;
 const MINIMAL_WIDTH: f64 = 520.0;
 const MINIMAL_HEIGHT: f64 = 520.0;

-#[cfg(target_os = "linux")]
-const DEFAULT_DECORATIONS: bool = false;
-#[cfg(not(target_os = "linux"))]
-const DEFAULT_DECORATIONS: bool = true;
-
 const fn restored_window_size_is_too_small(width: u32, height: u32) -> bool {
    width < MINIMAL_WIDTH as u32 || height < MINIMAL_HEIGHT as u32
 }
@@ -49,6 +44,7 @@ pub async fn build_new_window() -> Result<WebviewWindow, String> {

    let config = Config::verge().await;
    let latest = config.latest_arc();
+    let decorations = latest.enable_system_titlebar.unwrap_or(true);
    let start_page = latest.start_page.as_deref().unwrap_or("/");
    let initial_theme_mode = match latest.theme_mode.as_deref() {
        Some("dark") => "dark",
@@ -83,7 +79,7 @@ pub async fn build_new_window() -> Result<WebviewWindow, String> {
    )
    .title("Clash Verge")
    .center()
-    .decorations(DEFAULT_DECORATIONS)
+    .decorations(decorations)
    .fullscreen(false)
    .inner_size(DEFAULT_WIDTH, DEFAULT_HEIGHT)
    .min_inner_size(MINIMAL_WIDTH, MINIMAL_HEIGHT)
@@ -39,6 +39,8 @@ static INSTANCE_LOCK: OnceLock<std::fs::File> = OnceLock::new();
 const PAC_INITIAL_AVAILABLE: bool = false;
 static PAC_AVAILABLE: AtomicBool = AtomicBool::new(PAC_INITIAL_AVAILABLE);
 static COMMANDS_READY: AtomicBool = AtomicBool::new(false);
+#[cfg(feature = "verge-dev")]
+static DEV_QUIT_REQUESTED: AtomicBool = AtomicBool::new(false);

 #[derive(Debug, Clone, Copy, PartialEq, Eq)]
 pub enum SingletonDisposition {
@@ -162,12 +164,55 @@ fn instance_auth(token: String) -> impl warp::Filter<Extract = (), Error = warp:
        .untuple_one()
 }

+#[cfg(feature = "verge-dev")]
+fn dev_quit_route<F>(
+    token: String,
+    commands_ready: &'static AtomicBool,
+    quit_requested: &'static AtomicBool,
+    trigger: F,
+) -> impl warp::Filter<Extract = (impl warp::Reply,), Error = warp::Rejection> + Clone
+where
+    F: Fn() + Clone + Send + Sync + 'static,
+{
+    instance_auth(token)
+        .and(warp::path!("commands" / "dev" / "quit"))
+        .and(warp::post())
+        .and_then(move || {
+            let trigger = trigger.clone();
+            async move {
+                if !commands_ready.load(Ordering::Acquire) {
+                    return Ok::<_, warp::Rejection>(warp::reply::with_status(
+                        String::from("starting"),
+                        warp::http::StatusCode::SERVICE_UNAVAILABLE,
+                    ));
+                }
+                if quit_requested
+                    .compare_exchange(false, true, Ordering::AcqRel, Ordering::Acquire)
+                    .is_ok()
+                {
+                    trigger();
+                }
+                Ok(warp::reply::with_status(
+                    String::from("accepted"),
+                    warp::http::StatusCode::ACCEPTED,
+                ))
+            }
+        })
+}
+
+#[cfg(feature = "verge-dev")]
+fn release_dev_quit_latch(quit_requested: &AtomicBool, outcome: clash_verge_signal::ShutdownOutcome) {
+    if matches!(outcome, clash_verge_signal::ShutdownOutcome::Canceled) {
+        quit_requested.store(false, Ordering::Release);
+    }
+}
+
 fn start_embedded_server(listener: tokio::net::TcpListener, token: String) {
    let (shutdown_tx, shutdown_rx) = oneshot::channel();
    let _ = SHUTDOWN_SENDER.set(Mutex::new(Some(shutdown_tx)));

    #[cfg(feature = "verge-dev")]
-    let auth = instance_auth(token);
+    let auth = instance_auth(token.clone());
    #[cfg(not(feature = "verge-dev"))]
    let auth = instance_auth(token);

@@ -233,6 +278,12 @@ fn start_embedded_server(listener: tokio::net::TcpListener, token: String) {
        });

    let commands = auth.clone().and(visible).or(auth.and(scheme)).or(pac);
+    #[cfg(feature = "verge-dev")]
+    let commands = commands.or(dev_quit_route(token, &COMMANDS_READY, &DEV_QUIT_REQUESTED, || {
+        AsyncHandler::spawn(|| async {
+            release_dev_quit_latch(&DEV_QUIT_REQUESTED, crate::feat::quit().await);
+        });
+    }));
    AsyncHandler::spawn(move || async move {
        warp::serve(commands)
            .incoming(listener)
@@ -27,12 +27,8 @@ const TRAY_STATUS_ITEM_EXTRA_WIDTH: f64 = 30.0;
 const TRAY_STATUS_ITEM_MIN_LENGTH: f64 = 58.0;
 const NS_VARIABLE_STATUS_ITEM_LENGTH: f64 = -1.0;

-/// (button_height, mono_advance, attributes).
-type CachedAttrs = (f64, f64, Retained<NSDictionary<NSString, AnyObject>>);
-
 thread_local! {
    static LAST_DISPLAY_STR: RefCell<String> = const { RefCell::new(String::new()) };
-    static CACHED_ATTRS: RefCell<Option<CachedAttrs>> = const { RefCell::new(None) };
 }

 fn format_tray_speed(up: u64, down: u64) -> String {
@@ -78,26 +74,8 @@ fn create_attributed_string(
    }
 }

-/// Attributes and per-glyph advance, rebuilt only when the button height changes.
-fn cached_attributes(button_height: f64) -> (f64, Retained<NSDictionary<NSString, AnyObject>>) {
-    CACHED_ATTRS.with(|cache| {
-        if let Some((height, advance, attrs)) = cache.borrow().as_ref()
-            && *height == button_height
-        {
-            return (*advance, attrs.clone());
-        }
-        let attrs = build_attributes(button_height);
-        let probe = NSString::from_str("0");
-        let advance = create_attributed_string(&probe, Some(&attrs)).size().width;
-        *cache.borrow_mut() = Some((button_height, advance, attrs.clone()));
-        (advance, attrs)
-    })
-}
-
-/// Longest line times the monospaced advance; matches `size().width` for the ASCII-only speed text.
-fn arithmetic_width(text: &str, advance: f64) -> f64 {
-    let glyphs = text.split('\n').map(str::len).max().unwrap_or(0) as f64;
-    glyphs * advance
+fn status_item_length_for_speed(attr_str: &NSAttributedString) -> f64 {
+    (attr_str.size().width.ceil() + TRAY_STATUS_ITEM_EXTRA_WIDTH).max(TRAY_STATUS_ITEM_MIN_LENGTH)
 }

 fn sync_click_target_frame(button: &NSStatusBarButton) {
@@ -111,7 +89,7 @@ fn sync_click_target_frame(button: &NSStatusBarButton) {
 }

 /// `with_inner_tray_icon` should run this on the main thread; fail safely if it does not.
-fn apply_status_item_attributed_title(status_item: &NSStatusItem, text: &str, show_speed: bool) {
+fn apply_status_item_attributed_title(status_item: &NSStatusItem, text: &NSString, show_speed: bool) {
    let Some(mtm) = MainThreadMarker::new() else {
        logging!(warn, Type::Tray, "托盘速率富文本设置跳过：非主线程调用");
        return;
@@ -119,19 +97,17 @@ fn apply_status_item_attributed_title(status_item: &NSStatusItem, text: &str, sh
    let Some(button) = status_item.button(mtm) else {
        return;
    };
-    let ns_string = NSString::from_str(text);
    let attr_str = if show_speed {
-        let (advance, attrs) = cached_attributes(button.bounds().size.height);
+        let attrs = build_attributes(button.bounds().size.height);
        let attrs: &NSDictionary<NSString, AnyObject> = &attrs;
-        let attr_str = create_attributed_string(&ns_string, Some(attrs));
-        let width = arithmetic_width(text, advance);
-        let length = (width.ceil() + TRAY_STATUS_ITEM_EXTRA_WIDTH).max(TRAY_STATUS_ITEM_MIN_LENGTH);
+        let attr_str = create_attributed_string(text, Some(attrs));
+        let length = status_item_length_for_speed(&attr_str);
        if status_item.length() != length {
            status_item.setLength(length);
        }
        attr_str
    } else {
-        create_attributed_string(&ns_string, None)
+        create_attributed_string(text, None)
    };
    button.setAttributedTitle(&attr_str);
    sync_click_target_frame(&button);
@@ -145,7 +121,8 @@ pub fn set_speed_attributed_title(status_item: &NSStatusItem, up: u64, down: u64
            return;
        }
        *last = speed_text;
-        apply_status_item_attributed_title(status_item, last.as_str(), true);
+        let ns_string = NSString::from_str(last.as_str());
+        apply_status_item_attributed_title(status_item, &ns_string, true);
    });
 }

@@ -153,6 +130,7 @@ pub fn clear_speed_attributed_title(status_item: &NSStatusItem) {
    LAST_DISPLAY_STR.with(|last| {
        last.borrow_mut().clear();
    });
+    let empty = NSString::from_str("");
    status_item.setLength(NS_VARIABLE_STATUS_ITEM_LENGTH);
-    apply_status_item_attributed_title(status_item, "", false);
+    apply_status_item_attributed_title(status_item, &empty, false);
 }
@@ -202,15 +202,9 @@
      width: 100%;
      display: flex;
      justify-content: flex-end;
-      padding: 10px;
      box-sizing: border-box;
      height: 36px;
      border-bottom: 1px solid var(--divider-color);
-
-      &-drag-region {
-        align-self: stretch;
-        flex: 1 1 auto;
-      }
    }

    .layout-content__left .the-logo {
@@ -235,16 +229,9 @@
      width: 100%;
      display: flex;
      justify-content: flex-start;
-      padding: 10px;
      box-sizing: border-box;
      height: 36px;
      border-bottom: 1px solid var(--divider-color);
-
-      &-drag-region {
-        align-self: stretch;
-        flex: 1 1 auto;
-        order: 1;
-      }
    }

    .layout-content__left {
@@ -47,7 +47,10 @@ import {
  useCoreDataStatus,
  useProxiesData,
 } from '@/providers/app-data-context'
+import { syncTrayProxySelection } from '@/services/cmds'
 import delayManager from '@/services/delay'
+import { mutate } from '@/services/mutate'
+import { profileTestUrls } from '@/services/proxy-test-url'
 import {
  findCurrentGroupMember,
  getRecord,
@@ -675,6 +678,20 @@ export const CurrentProxyCard = () => {
    [proxyView],
  )

+  useEffect(() => {
+    if (!selectedGroup) return
+    const customUrl = currentProfile
+      ? profileTestUrls(currentProfile)[selectedGroup.name]
+      : undefined
+    delayManager.setUrl(
+      selectedGroup.name,
+      customUrl?.trim() ||
+        selectedGroup.testUrl?.trim() ||
+        verge?.default_latency_test?.trim() ||
+        'http://cp.cloudflare.com/generate_204',
+    )
+  }, [selectedGroup, currentProfile, verge?.default_latency_test])
+
  const unsortedProxyOptions = useMemo(
    () => optionsForGroup(selectedGroup),
    [optionsForGroup, selectedGroup],
@@ -907,6 +924,12 @@ export const CurrentProxyCard = () => {
    }

    refreshProxy()
+    mutate(() => syncTrayProxySelection(), {
+      id: 'sync-tray-selection',
+      errorNotice: false,
+    }).catch((error) => {
+      console.error('[CurrentProxyCard] Failed to sync tray latency:', error)
+    })
  })

  const proxyOptions = useMemo(
@@ -4,19 +4,10 @@ import {
  VisibilityOffOutlined,
  VisibilityOutlined,
 } from '@mui/icons-material'
-import {
-  Box,
-  Button,
-  FormControlLabel,
-  IconButton,
-  Skeleton,
-  Switch,
-  Typography,
-} from '@mui/material'
+import { Box, Button, IconButton, Skeleton, Typography } from '@mui/material'
 import { getCurrentWebviewWindow } from '@tauri-apps/api/webviewWindow'
 import { useEffect } from 'foxact/use-abortable-effect'
 import { useIntersection } from 'foxact/use-intersection'
-import { useLocalStorage } from 'foxact/use-local-storage'
 import type { XOR } from 'foxts/ts-xor'
 import {
  forwardRef,
@@ -108,13 +99,9 @@ const IPInfoCardContainer = forwardRef<HTMLElement, React.PropsWithChildren>(
 export const IpInfoCard = () => {
  const { t } = useTranslation()
  const [showIp, setShowIp] = useState(false)
-  const [autoRefresh, setAutoRefresh] = useLocalStorage(
-    'ip-info-auto-refresh',
-    true,
-  )
  const appWindow = useMemo(() => getCurrentWebviewWindow(), [])

-  // Once intersected, the card stays eligible for refresh until unmount.
+  // Once intersected, refreshes stay enabled until unmount.
  const [containerRef, hasIntersected, _resetIntersected] = useIntersection({
    rootMargin: '0px',
  })
@@ -164,8 +151,6 @@ export const IpInfoCard = () => {
  })

  useEffect(() => {
-    if (!autoRefresh) return
-
    let timer: number | null = null

    // Prefer DOM intersection state; Tauri visibility is unreliable on some platforms.
@@ -205,7 +190,7 @@ export const IpInfoCard = () => {
      if (timer != null) clearInterval(timer)
      document.removeEventListener('visibilitychange', onVisibilityChange)
    }
-  }, [autoRefresh, hasIntersected])
+  }, [hasIntersected])

  const toggleShowIp = useCallback(() => {
    setShowIp((prev) => !prev)
@@ -379,25 +364,12 @@ export const IpInfoCard = () => {
              fontSize: '0.7rem',
            }}
          >
-            <FormControlLabel
-              sx={{ m: 0 }}
-              control={
-                <Switch
-                  size="small"
-                  checked={autoRefresh}
-                  onChange={(_, checked) => setAutoRefresh(checked)}
-                />
-              }
-              label={
-                <Typography variant="caption">
-                  {t('home.components.ipInfo.labels.autoRefresh')}
-                  {autoRefresh &&
-                    (countdown.type === 'countdown'
-                      ? `: ${countdown.remainingSeconds}s`
-                      : '...')}
-                </Typography>
-              }
-            />
+            <Typography variant="caption">
+              {t('home.components.ipInfo.labels.autoRefresh')}
+              {countdown.type === 'countdown'
+                ? `: ${countdown.remainingSeconds}s`
+                : '...'}
+            </Typography>
            <Typography
              variant="caption"
              sx={{
@@ -1,13 +1,13 @@
 import { Close, CropSquare, FilterNone, Minimize } from '@mui/icons-material'
 import { Box, IconButton } from '@mui/material'
+import { getCurrentWindow } from '@tauri-apps/api/window'
 import {
-  forwardRef,
+  type MouseEvent,
  type PointerEvent,
  useCallback,
-  useImperativeHandle,
+  useEffect,
 } from 'react'

-import { useWindowControls } from '@/hooks/use-window'
 import getSystem from '@/utils/get-system'

 const RESIZE_HANDLES = [
@@ -21,9 +21,7 @@ const RESIZE_HANDLES = [
  { direction: 'NorthWest', position: 'north-west' },
 ] as const

-export const WindowResizeHandles = () => {
-  const { currentWindow, maximized } = useWindowControls()
-
+export const WindowResizeHandles = ({ maximized }: { maximized: boolean }) => {
  const startResizeDragging = useCallback(
    (event: PointerEvent<HTMLDivElement>) => {
      if (event.button !== 0) return
@@ -33,14 +31,14 @@ export const WindowResizeHandles = () => {
      const handle = RESIZE_HANDLES.find((item) => item.direction === direction)

      if (handle) {
-        void currentWindow
+        void getCurrentWindow()
          .startResizeDragging(handle.direction)
          .catch((error) =>
            console.warn('[WindowResizeHandles] 调整窗口大小失败:', error),
          )
      }
    },
-    [currentWindow],
+    [],
  )

  if (getSystem() !== 'linux' || maximized) return null
@@ -63,44 +61,77 @@ export const WindowResizeHandles = () => {
  )
 }

-export const WindowControls = forwardRef(function WindowControls(props, ref) {
+export const WindowControls = ({
+  maximized,
+  setMaximized,
+}: {
+  maximized: boolean
+  setMaximized: (value: boolean) => void
+}) => {
  const OS = getSystem()
-  const {
-    currentWindow,
-    maximized,
-    minimize,
-    close,
-    toggleFullscreen,
-    toggleMaximize,
-  } = useWindowControls()

-  useImperativeHandle(
-    ref,
-    () => ({
-      currentWindow,
-      maximized,
-      minimize,
-      close,
-      toggleFullscreen,
-      toggleMaximize,
-    }),
-    [
-      currentWindow,
-      maximized,
-      minimize,
-      close,
-      toggleFullscreen,
-      toggleMaximize,
-    ],
+  const close = useCallback(async () => {
+    // Delay one frame so the UI can clear :hover before the window hides.
+    await new Promise((resolve) => setTimeout(resolve, 20))
+    await getCurrentWindow().close()
+  }, [])
+
+  const minimize = useCallback(async () => {
+    // Delay one frame so the UI can clear :hover before the window hides.
+    await new Promise((resolve) => setTimeout(resolve, 10))
+    await getCurrentWindow().minimize()
+  }, [])
+
+  const toggleMaximize = useCallback(async () => {
+    const currentWindow = getCurrentWindow()
+    if (await currentWindow.isMaximized()) {
+      await currentWindow.unmaximize()
+      setMaximized(false)
+    } else {
+      await currentWindow.maximize()
+      setMaximized(true)
+    }
+  }, [setMaximized])
+
+  useEffect(() => {
+    getCurrentWindow().setMinimizable(true)
+  }, [])
+
+  const handleTitlebarMouseDown = useCallback(
+    (event: MouseEvent<HTMLDivElement>) => {
+      // Left button only, and only on the first press: detail 2 is the second
+      // press of a double-click, which `handleTitlebarDoubleClick` turns into maximize.
+      if (event.button !== 0 || event.detail !== 1) return
+      // Only the empty bar area drags; the control buttons keep their own clicks.
+      if (event.target !== event.currentTarget) return
+      event.preventDefault()
+      void getCurrentWindow()
+        .startDragging()
+        .catch((error) => console.warn('[WindowControls] 开始拖动失败:', error))
+    },
+    [],
  )

-  // 通过前端对 tauri 窗口进行翻转全屏时会短暂地与系统图标重叠渲染。
-  // 这可能是上游缺陷，保险起见跨平台以窗口的最大化翻转为准。
+  const handleTitlebarDoubleClick = useCallback(
+    (event: MouseEvent<HTMLDivElement>) => {
+      if (event.target !== event.currentTarget) return
+      void toggleMaximize().catch((error) =>
+        console.warn('[WindowControls] 切换最大化失败:', error),
+      )
+    },
+    [toggleMaximize],
+  )

  return (
    <Box
+      onMouseDown={handleTitlebarMouseDown}
+      onDoubleClick={handleTitlebarDoubleClick}
      sx={{
        display: 'flex',
+        justifyContent: OS === 'macos' ? 'flex-start' : 'flex-end',
+        width: '100%',
+        height: '100%',
+        px: 1,
        gap: 1,
        alignItems: 'center',
        '> button': {
@@ -186,4 +217,4 @@ export const WindowControls = forwardRef(function WindowControls(props, ref) {
      )}
    </Box>
  )
-})
+}
@@ -75,7 +75,6 @@ interface ProxyChainProps {
  onMarkUnsavedChanges?: () => void
  mode?: string
  selectedGroup?: string | null
-  onExitChainMode: () => void
 }

 interface ProxyChainItemProps {
@@ -332,7 +331,6 @@ export const ProxyChain = ({
  onMarkUnsavedChanges,
  mode,
  selectedGroup,
-  onExitChainMode,
 }: ProxyChainProps) => {
  const theme = useTheme()
  const { t } = useTranslation()
@@ -698,18 +696,13 @@ export const ProxyChain = ({
          <Box
            sx={{
              display: 'flex',
-              flexDirection: 'column',
              alignItems: 'center',
              justifyContent: 'center',
-              gap: 2,
              height: '100%',
              color: theme.palette.text.secondary,
            }}
          >
            <Typography>{t('proxies.page.chain.empty')}</Typography>
-            <Button size="small" variant="outlined" onClick={onExitChainMode}>
-              {t('shared.actions.close')}
-            </Button>
          </Box>
        ) : (
          <DragDropProvider
@@ -9,7 +9,7 @@ import VisibilityOffRounded from '@mui/icons-material/VisibilityOffRounded'
 import VisibilityRounded from '@mui/icons-material/VisibilityRounded'
 import WifiTetheringOffRounded from '@mui/icons-material/WifiTetheringOffRounded'
 import WifiTetheringRounded from '@mui/icons-material/WifiTetheringRounded'
-import { Box, IconButton, type SxProps, TextField } from '@mui/material'
+import { Box, IconButton, type SxProps } from '@mui/material'
 import { useDebounceFn } from 'ahooks'
 import { memo, useEffect, useRef } from 'react'
 import { flushSync } from 'react-dom'
@@ -18,10 +18,11 @@ import { useTranslation } from 'react-i18next'
 import { useVerge } from '@/hooks/use-verge'
 import delayManager from '@/services/delay'
 import { showNotice } from '@/services/notice-service'
-import { isValidUrl } from '@/utils/network'
+import { isValidLatencyTestUrl } from '@/utils/network'

 import { BaseSearchBox, type SearchState } from '../base'

+import { ProxyTestUrlInput } from './proxy-test-url-input'
 import type { ProxySortType } from './use-filter-sort'
 import type { HeadState } from './use-head-state'

@@ -69,7 +70,10 @@ export const ProxyGroupTools = memo(function ProxyGroupTools(props: Props) {
  const inputRef = useRef<HTMLInputElement>(null)

  useEffect(() => {
-    delayManager.setUrl(groupName, testUrl?.trim() || url || defaultLatencyUrl)
+    delayManager.setUrl(
+      groupName,
+      testUrl?.trim() || url?.trim() || defaultLatencyUrl,
+    )
  }, [groupName, testUrl, defaultLatencyUrl, url])

  // 过滤输入是高频操作，且每次都会触发整组代理的重新过滤/排序与虚拟列表重渲染，
@@ -112,7 +116,8 @@ export const ProxyGroupTools = memo(function ProxyGroupTools(props: Props) {
      )}

      {textState === 'url' && (
-        <TextField
+        <ProxyTestUrlInput
+          name={groupName}
          inputRef={inputRef}
          autoComplete="new-password"
          hiddenLabel
@@ -125,7 +130,7 @@ export const ProxyGroupTools = memo(function ProxyGroupTools(props: Props) {
            e.preventDefault()
            e.stopPropagation()
          }}
-          onChange={(e) => onHeadState({ testUrl: e.target.value })}
+          onCommit={(testUrl) => onHeadState({ testUrl })}
          sx={{ flex: '1 1 auto', input: { py: 0.65, px: 1 } }}
        />
      )}
@@ -176,7 +181,7 @@ export const ProxyGroupTools = memo(function ProxyGroupTools(props: Props) {
          if (testUrl?.trim() && textState !== 'filter') {
            onHeadState({ textState: 'url' })
          }
-          if (testUrl?.trim() && !isValidUrl(testUrl)) {
+          if (testUrl?.trim() && !isValidLatencyTestUrl(testUrl)) {
            showNotice.warning('proxies.feedback.warnings.invalidTestUrl')
            return
          }
@@ -77,7 +77,6 @@ interface GroupSelectMenuProps {
 interface ProxyGroupsChainProps {
  mode: string
  chainConfigData?: string | null
-  onExitChainMode: () => void
  availableGroups: any[]
  activeSelectedGroup: string | null
  showScrollTop: boolean
@@ -306,7 +305,6 @@ export function ProxyGroupsChain(props: ProxyGroupsChainProps) {
  const {
    mode,
    chainConfigData,
-    onExitChainMode,
    availableGroups,
    activeSelectedGroup,
    showScrollTop,
@@ -523,7 +521,6 @@ export function ProxyGroupsChain(props: ProxyGroupsChainProps) {
            chainConfigData={chainConfigData}
            mode={mode}
            selectedGroup={activeSelectedGroup}
-            onExitChainMode={onExitChainMode}
          />
        </Box>
      </Box>
@@ -23,7 +23,9 @@ import { useProfiles } from '@/hooks/use-profiles'
 import { useProxySelection } from '@/hooks/use-proxy-selection'
 import { useVerge } from '@/hooks/use-verge'
 import { useProxiesData, useSystemData } from '@/providers/app-data-context'
+import { syncTrayProxySelection } from '@/services/cmds'
 import delayManager from '@/services/delay'
+import { mutate } from '@/services/mutate'
 import {
  isInteractableMember,
  resolveMember,
@@ -42,7 +44,6 @@ import {
  ProxyGroupNavigator,
 } from './proxy-group-navigator'
 import { ProxyRender } from './proxy-render'
-import type { HeadState } from './use-head-state'
 import {
  PROXY_GROUP_HEADER_SENSORS,
  useProxyGroupHeaderLayout,
@@ -69,7 +70,6 @@ interface Props {
  mode: string
  isChainMode?: boolean
  chainConfigData?: string | null
-  onExitChainMode: () => void
 }

 function useEmptyRenderList() {
@@ -90,11 +90,11 @@ function useProxyRenderState(
 ) {
  const { verge } = useVerge()
  const { proxyView } = useProxiesData()
-  const {
-    renderList,
-    onProxies,
-    onHeadState: setListHeadState,
-  } = useRenderList(mode, isChainMode, activeSelectedGroup)
+  const { renderList, onProxies, onHeadState } = useRenderList(
+    mode,
+    isChainMode,
+    activeSelectedGroup,
+  )
  const scrollPositionKey = useMemo(
    () =>
      isChainMode
@@ -103,14 +103,6 @@ function useProxyRenderState(
    [activeSelectedGroup, isChainMode, mode],
  )

-  const onHeadState = useCallback(
-    (groupName: string, patch: Partial<HeadState>) => {
-      if (patch.open) onProxies()
-      setListHeadState(groupName, patch)
-    },
-    [onProxies, setListHeadState],
-  )
-
  const timeout = verge?.default_latency_timeout || 10000

  const handleCheckAll = useStableCallback(
@@ -143,6 +135,12 @@ function useProxyRenderState(
        console.error(`[ProxyGroups] 延迟测试出错，组: ${groupName}`, error)
      } finally {
        onProxies()
+        mutate(() => syncTrayProxySelection(), {
+          id: 'sync-tray-selection',
+          errorNotice: false,
+        }).catch((error) => {
+          console.error('[ProxyGroups] Failed to sync tray latency:', error)
+        })
      }
    }),
  )
@@ -192,9 +190,8 @@ function useProxyRenderState(
 function ChainProxyGroups(props: {
  mode: string
  chainConfigData?: string | null
-  onExitChainMode: () => void
 }) {
-  const { mode, chainConfigData, onExitChainMode } = props
+  const { mode, chainConfigData } = props
  const { proxyView } = useProxiesData()
  const [selectedGroup, setSelectedGroup] = useState<string | null>(null)

@@ -349,7 +346,6 @@ function ChainProxyGroups(props: {
      <ProxyGroupsChain
        mode={mode}
        chainConfigData={chainConfigData}
-        onExitChainMode={onExitChainMode}
        availableGroups={availableGroups}
        activeSelectedGroup={activeSelectedGroup}
        showScrollTop={showScrollTop}
@@ -608,7 +604,7 @@ function NormalProxyGroups(props: { mode: string }) {
        />
      </DragDropProvider>

-      {(mode === 'rule' || mode === 'global') && (
+      {mode === 'rule' && (
        <ProxyGroupNavigator
          proxyGroupNames={proxyGroupNames}
          onGroupLocation={handleGroupLocationByName}
@@ -621,7 +617,7 @@ function NormalProxyGroups(props: { mode: string }) {
 }

 export const ProxyGroups = (props: Props) => {
-  const { mode, isChainMode = false, chainConfigData, onExitChainMode } = props
+  const { mode, isChainMode = false, chainConfigData } = props
  const { profiles, isLoading: isProfilesLoading } = useProfiles()
  const { isProxyViewPending } = useProxiesData()
  const { isRunningModePending } = useSystemData()
@@ -643,11 +639,7 @@ export const ProxyGroups = (props: Props) => {
      return <ProxyEmptyState reason={listState.reason} />
    case 'render':
      return isChainMode ? (
-        <ChainProxyGroups
-          mode={mode}
-          chainConfigData={chainConfigData}
-          onExitChainMode={onExitChainMode}
-        />
+        <ChainProxyGroups mode={mode} chainConfigData={chainConfigData} />
      ) : (
        <NormalProxyGroups mode={mode} />
      )
--- a/Show More
+++ b/Show More
Author	SHA1	Message	Date
oomeow	da050d3e7e	docs: update Changelog.md	2026-10-13 19:55:45 +08:00
oomeow	9a7b15eb15	fix(setting): default system titlebar to enabled if undefined	2026-10-12 21:17:53 +08:00
oomeow	98072a17a3	feat(bindings): add enable_system_titlebar option to Verge types	2026-10-12 21:16:06 +08:00
oomeow	32a093e44b	Merge remote-tracking branch 'origin/dev' into refactor/custom-titlebar	2026-10-12 20:59:57 +08:00
oomeow	7ecec42f4d	feat(window): add persistent system titlebar setting - persist enable_system_titlebar in verge config and apply it to window decorations - replace window provider/context with useWindowMaximized hook and inline controls - add i18n field and tooltip for the setting across locales	2026-10-12 20:05:02 +08:00