mihomo-cli 3.0.0 → 3.3.0

package/dist/index.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
 // src/config.ts
-import { spawnSync } from "child_process";
+import { spawnSync as spawnSync2 } from "child_process";
 import fs4 from "fs";
 
 // node_modules/js-yaml/dist/js-yaml.mjs
@@ -2917,13 +2917,18 @@ function dump(input, options = {}) {
 }
 
 // src/constants.ts
-var AVAILABLE_MIRRORS = ["gh-proxy.org", "v6.gh-proxy.org", "hk.gh-proxy.org", "cdn.gh-proxy.org"];
+var AVAILABLE_MIRRORS = ["v6.gh-proxy.org", "gh-proxy.org", "hk.gh-proxy.org", "cdn.gh-proxy.org"];
+var DEFAULT_MIRROR = "https://v6.gh-proxy.org/";
 var UI_URLS = {
   zash: "https://board.zash.run.place",
   dash: "https://metacubex.github.io/metacubexd",
   yacd: "https://yacd.metacubex.one"
 };
-var LAUNCH_AGENT_LABEL = "com.mihomo-cli.daemon";
+var LAUNCH_DAEMON_LABEL = process.env.MIHOMO_CLI_DAEMON_LABEL || "com.mihomo-cli.daemon";
+var CONTROLLER_PORT = 9090;
+var CONTROLLER_ADDR = `127.0.0.1:${CONTROLLER_PORT}`;
+var CONTROLLER_BASE_URL = `http://${CONTROLLER_ADDR}`;
+var TEST_CONTROLLER_ADDR = "127.0.0.1:29090";
 var TUN_CONFIG = {
   tun: {
     enable: true,
@@ -2937,14 +2942,14 @@ var TUN_CONFIG = {
 var TEST_CONFIG = {
   "mixed-port": 27890,
   "allow-lan": false,
-  "external-controller": "127.0.0.1:29090",
+  "external-controller": TEST_CONTROLLER_ADDR,
   "log-level": "error",
   "geodata-mode": true
 };
 var BASE_CONFIG = {
   "mixed-port": 7890,
   "allow-lan": false,
-  "external-controller": "127.0.0.1:9090",
+  "external-controller": CONTROLLER_ADDR,
   "unified-delay": true,
   "tcp-concurrent": true,
   "geo-auto-update": true,
@@ -2970,10 +2975,11 @@ var DEFAULT_TEST_URL = "http://www.gstatic.com/generate_204";
 var DEFAULT_CLEAN_ROUNDS = 2;
 var AUTO_CLEAN_THRESHOLD = 100;
 var AUTO_CLEAN_THRESHOLD_GITHUB = 50;
+var AUTO_CLEAN_COOLDOWN_HOURS = 12;
 
 // src/overwrite.ts
 import fs3 from "fs";
-import path2 from "path";
+import path3 from "path";
 
 // src/paths.ts
 import fs from "fs";
@@ -3003,8 +3009,8 @@ var PATHS = {
   configStage1Subscription: path.join(DIRS.runtime, "1.subscription.yaml"),
   configStage2Overwrite: path.join(DIRS.runtime, "2.overwrite.yaml"),
   configStage3System: path.join(DIRS.runtime, "3.system.yaml"),
-  // launchd LaunchAgent plist 必须位于真实用户主目录，不受 MIHOMO_CLI_DIR 影响
-  launchAgentPlist: path.join(os.homedir(), "Library", "LaunchAgents", `${LAUNCH_AGENT_LABEL}.plist`)
+  // launchd LaunchDaemon plist 位于系统级 /Library/LaunchDaemons/，root:wheel 拥有，与 homedir / MIHOMO_CLI_DIR 无关
+  launchDaemonPlist: path.join("/Library/LaunchDaemons", `${LAUNCH_DAEMON_LABEL}.plist`)
 };
 var DIRECTORY_TARGETS = {
   root: { path: null, label: "\u6839\u76EE\u5F55" },
@@ -3040,6 +3046,7 @@ function rmrf(dir) {
 
 // src/settings.ts
 import fs2 from "fs";
+import path2 from "path";
 var settingsCache = null;
 function readSettings() {
   if (settingsCache !== null) return settingsCache;
@@ -3092,6 +3099,7 @@ function maskUrl(url) {
     }
     if (parsed.username) parsed.username = "***";
     if (parsed.password) parsed.password = "***";
+    parsed.pathname = parsed.pathname.split("/").map((seg) => seg.length >= 16 ? `${seg.slice(0, 4)}***${seg.slice(-4)}` : seg).join("/");
     return parsed.toString();
   } catch {
     if (url.length > 30) {
@@ -3107,6 +3115,12 @@ function readSubscriptionCache() {
       const content = fs2.readFileSync(PATHS.subscriptionsCacheFile, "utf8");
       return JSON.parse(content);
     } catch {
+      try {
+        fs2.copyFileSync(PATHS.subscriptionsCacheFile, `${PATHS.subscriptionsCacheFile}.bak`);
+        console.warn(`\u8B66\u544A: \u8BA2\u9605\u7F13\u5B58\u683C\u5F0F\u635F\u574F\uFF0C\u5DF2\u5907\u4EFD\u5230 ${PATHS.subscriptionsCacheFile}.bak`);
+      } catch {
+        console.warn("\u8B66\u544A: \u8BA2\u9605\u7F13\u5B58\u683C\u5F0F\u635F\u574F\uFF0C\u5DF2\u5FFD\u7565");
+      }
       return {};
     }
   }
@@ -3143,12 +3157,10 @@ function addSubscription(url, name = "default") {
   validateSubscriptionName(name);
   const settings = readSettings();
   const subs = [...settings.subscriptions || []];
-  const existingIndex = subs.findIndex((s) => s.name === name);
-  if (existingIndex >= 0) {
-    subs[existingIndex] = { name, url };
-  } else {
-    subs.push({ name, url });
+  if (subs.some((s) => s.name === name)) {
+    throw new Error(`\u8BA2\u9605 "${name}" \u5DF2\u5B58\u5728\uFF0C\u8BF7\u6362\u4E2A\u540D\u79F0\uFF08mihomo sub add <url> <\u540D\u79F0>\uFF09\uFF0C\u6216\u5148\u5220\u9664\uFF08mihomo sub remove ${name}\uFF09`);
   }
+  subs.push({ name, url });
   const updates = { subscriptions: subs };
   if (!settings.active_subscription && subs.length === 1) {
     updates.active_subscription = name;
@@ -3173,7 +3185,10 @@ function removeSubscription(name) {
     delete cache[name];
     writeSubscriptionCache(cache);
   }
-  fs2.rmSync(getSubscriptionRawConfigPath(name), { force: true });
+  try {
+    fs2.rmSync(getSubscriptionRawConfigPath(name), { force: true });
+  } catch {
+  }
   return switchedTo;
 }
 function setDefaultSubscription(name) {
@@ -3186,7 +3201,10 @@ function setDefaultSubscription(name) {
   return true;
 }
 function getSubscriptionRawConfigPath(subName) {
-  return `${DIRS.subscriptions}/${subName}.yaml`;
+  if (!SAFE_NAME_RE.test(subName)) {
+    throw new Error(`\u8BA2\u9605\u540D\u79F0\u65E0\u6548: "${subName}"`);
+  }
+  return path2.join(DIRS.subscriptions, `${subName}.yaml`);
 }
 function saveSubscriptionRawConfig(subName, content) {
   ensureDirs();
@@ -3205,6 +3223,7 @@ function parseOverrideKey(key) {
   let forceOverwrite = false;
   let arrayPrepend = false;
   let arrayAppend = false;
+  let arrayMergeByName = false;
   const lastChar = key[key.length - 1];
   const openAngleCount = (key.match(/</g) || []).length;
   const closeAngleCount = (key.match(/>/g) || []).length;
@@ -3225,6 +3244,9 @@ function parseOverrideKey(key) {
     } else {
       actualKey = unwrapped;
     }
+  } else if (actualKey.startsWith("~")) {
+    arrayMergeByName = true;
+    actualKey = actualKey.slice(1);
   } else {
     if (actualKey.startsWith("+")) {
       arrayPrepend = true;
@@ -3235,7 +3257,7 @@ function parseOverrideKey(key) {
       actualKey = actualKey.slice(0, -1);
     }
   }
-  return { key: actualKey, forceOverwrite, arrayPrepend, arrayAppend };
+  return { key: actualKey, forceOverwrite, arrayPrepend, arrayAppend, arrayMergeByName };
 }
 function deepMergeWithOverrides(target, override) {
   let t = target;
@@ -3253,8 +3275,24 @@ function deepMergeWithOverrides(target, override) {
   }
   const result = { ...t };
   for (const [rawKey, value] of Object.entries(override)) {
-    const { key, forceOverwrite, arrayPrepend, arrayAppend } = parseOverrideKey(rawKey);
+    const { key, forceOverwrite, arrayPrepend, arrayAppend, arrayMergeByName } = parseOverrideKey(rawKey);
     const existingValue = result[key];
+    if (arrayMergeByName) {
+      const existingArr = Array.isArray(existingValue) ? existingValue : [];
+      const overrideArr = Array.isArray(value) ? value : [value];
+      const merged = [...existingArr];
+      for (const item of overrideArr) {
+        const name = item && typeof item === "object" && !Array.isArray(item) ? item.name : void 0;
+        const idx = name != null ? merged.findIndex((e) => e && typeof e === "object" && e.name === name) : -1;
+        if (idx >= 0) {
+          merged[idx] = deepMergeWithOverrides(merged[idx], item);
+        } else {
+          merged.push(item);
+        }
+      }
+      result[key] = merged;
+      continue;
+    }
     if (arrayPrepend || arrayAppend) {
       const existingArr = Array.isArray(existingValue) ? existingValue : [];
       const overrideArr = Array.isArray(value) ? value : [value];
@@ -3284,22 +3322,91 @@ function isOverwriteEnabled() {
 function setOverwriteEnabled(enabled) {
   writeSettings({ overwrite_enabled: enabled });
 }
+function isOverwriteFilename(filename) {
+  return filename === "overwrite.yaml" || /^overwrite\..+\.ya?ml$/.test(filename);
+}
+var MATCH_KEYS = /* @__PURE__ */ new Set(["subscription", "url-domain"]);
+function normalizeMatch(raw, fileName) {
+  if (raw == null) return void 0;
+  if (typeof raw !== "object" || Array.isArray(raw)) {
+    console.warn(`\u8B66\u544A: \u8986\u5199\u6587\u4EF6 "${fileName}" \u7684 match \u5FC5\u987B\u662F\u5BF9\u8C61\uFF0C\u5DF2\u5FFD\u7565\u4F5C\u7528\u57DF\u9650\u5B9A`);
+    return void 0;
+  }
+  const result = {};
+  let hasValid = false;
+  for (const [key, value] of Object.entries(raw)) {
+    if (!MATCH_KEYS.has(key)) {
+      console.warn(`\u8B66\u544A: \u8986\u5199\u6587\u4EF6 "${fileName}" \u7684 match \u542B\u672A\u77E5\u952E "${key}"\uFF0C\u5DF2\u5FFD\u7565`);
+      continue;
+    }
+    const arr = (Array.isArray(value) ? value : [value]).filter((v) => typeof v === "string" && v.length > 0);
+    if (arr.length === 0) continue;
+    result[key] = arr;
+    hasValid = true;
+  }
+  return hasValid ? result : void 0;
+}
+function summarizeMatch(match) {
+  if (!match) return void 0;
+  const parts = [];
+  for (const [key, value] of Object.entries(match)) {
+    const vals = Array.isArray(value) ? value : [value];
+    parts.push(`${key}=${vals.join("/")}`);
+  }
+  return parts.length > 0 ? parts.join(", ") : void 0;
+}
+function splitUrlsLocal(url) {
+  return url.split(",").map((u) => u.trim()).filter(Boolean);
+}
+function hostMatchesDomain(host, domain) {
+  const h = host.toLowerCase();
+  const d = domain.toLowerCase();
+  return h === d || h.endsWith(`.${d}`);
+}
+function matchesScope(match, scope) {
+  if (!match) return true;
+  if (match.subscription) {
+    const names = Array.isArray(match.subscription) ? match.subscription : [match.subscription];
+    if (!scope?.subName || !names.includes(scope.subName)) return false;
+  }
+  if (match["url-domain"]) {
+    const domains = Array.isArray(match["url-domain"]) ? match["url-domain"] : [match["url-domain"]];
+    if (!scope?.subUrl) return false;
+    const hosts = [];
+    for (const u of splitUrlsLocal(scope.subUrl)) {
+      try {
+        hosts.push(new URL(u).hostname);
+      } catch {
+      }
+    }
+    if (hosts.length === 0) return false;
+    const ok = domains.some((d) => hosts.some((h) => hostMatchesDomain(h, d)));
+    if (!ok) return false;
+  }
+  return true;
+}
+function filterOverwriteFilesByScope(files, scope) {
+  return files.filter((f) => matchesScope(f.match, scope));
+}
 function loadOverwriteFile() {
   const dir = USER_DATA_DIR;
   if (!fs3.existsSync(dir)) return [];
-  const files = fs3.readdirSync(dir).filter((f) => f === "overwrite.yaml" || /^overwrite\..+\.ya?ml$/.test(f)).sort((a, b) => {
+  const files = fs3.readdirSync(dir).filter(isOverwriteFilename).sort((a, b) => {
     if (a === "overwrite.yaml") return -1;
     if (b === "overwrite.yaml") return 1;
     return a.localeCompare(b);
   });
   const results = [];
   for (const file of files) {
-    const filePath = path2.join(dir, file);
+    const filePath = path3.join(dir, file);
     try {
       const content = fs3.readFileSync(filePath, "utf8");
       const parsed = load(content);
-      if (parsed && typeof parsed === "object") {
-        results.push({ name: file, path: filePath, config: parsed });
+      if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) {
+        const { match, ...config } = parsed;
+        results.push({ name: file, path: filePath, config, match: normalizeMatch(match, file) });
+      } else if (parsed !== null) {
+        console.warn(`\u8B66\u544A: \u8986\u5199\u6587\u4EF6 "${file}" \u9876\u5C42\u5FC5\u987B\u662F\u5BF9\u8C61\uFF0C\u5DF2\u8DF3\u8FC7`);
       }
     } catch (e) {
       console.warn(`\u8B66\u544A: \u8986\u5199\u6587\u4EF6 "${file}" \u89E3\u6790\u5931\u8D25: ${e.message}`);
@@ -3308,9 +3415,9 @@ function loadOverwriteFile() {
   return results;
 }
 function applyOverwrite(baseConfig, preloadedFiles) {
-  if (!isOverwriteEnabled()) return baseConfig;
+  if (!isOverwriteEnabled()) return { ...baseConfig };
   const overwriteFiles = preloadedFiles || loadOverwriteFile();
-  if (overwriteFiles.length === 0) return baseConfig;
+  if (overwriteFiles.length === 0) return { ...baseConfig };
   let result = { ...baseConfig };
   for (const file of overwriteFiles) {
     result = deepMergeWithOverrides(result, file.config);
@@ -3326,11 +3433,271 @@ function listOverwriteFile() {
     files: files.map((f) => ({
       name: f.name,
       path: f.path,
-      keys: Object.keys(f.config || {})
+      keys: Object.keys(f.config || {}),
+      scope: summarizeMatch(f.match)
     }))
   };
 }
 
+// src/utils.ts
+import { spawnSync } from "child_process";
+import { createRequire } from "module";
+var require2 = createRequire(import.meta.url);
+var pkg = require2("../package.json");
+var VERSION = pkg.version;
+var MAX_RESPONSE_BYTES = 50 * 1024 * 1024;
+var sleepBuf = new Int32Array(new SharedArrayBuffer(4));
+var NO_COLOR = process.env.NO_COLOR !== void 0 || !process.stdout.isTTY;
+function colorize(code, str) {
+  if (NO_COLOR) return String(str);
+  return `${code + String(str)}\x1B[0m`;
+}
+var colors = {
+  bold: (s) => colorize("\x1B[1m", s),
+  red: (s) => colorize("\x1B[31m", s),
+  green: (s) => colorize("\x1B[32m", s),
+  yellow: (s) => colorize("\x1B[33m", s),
+  cyan: (s) => colorize("\x1B[36m", s),
+  gray: (s) => colorize("\x1B[90m", s)
+};
+function sleepSync(ms) {
+  Atomics.wait(sleepBuf, 0, 0, ms);
+}
+function sleep(ms) {
+  return new Promise((resolve) => setTimeout(resolve, ms));
+}
+function escapeRegExp(s) {
+  return s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+function shellQuote(s) {
+  return `'${s.replace(/'/g, "'\\''")}'`;
+}
+var TimeoutError = class extends Error {
+  constructor() {
+    super("timeout");
+    this.name = "TimeoutError";
+  }
+};
+function withTimeout(promise, ms) {
+  return new Promise((resolve, reject) => {
+    const timer = setTimeout(() => reject(new TimeoutError()), ms);
+    promise.then(
+      (v) => {
+        clearTimeout(timer);
+        resolve(v);
+      },
+      (e) => {
+        clearTimeout(timer);
+        reject(e);
+      }
+    );
+  });
+}
+function formatBytes(bytes) {
+  if (bytes === void 0 || bytes === null) return "\u672A\u77E5";
+  const num = Number(bytes);
+  if (!Number.isFinite(num) || num < 0) return "\u672A\u77E5";
+  if (num === 0) return "0 B";
+  const k = 1024;
+  const sizes = ["B", "KB", "MB", "GB", "TB"];
+  const i = Math.min(Math.floor(Math.log(num) / Math.log(k)), sizes.length - 1);
+  return `${parseFloat((num / k ** i).toFixed(2))} ${sizes[i]}`;
+}
+function formatTimestamp(ts) {
+  if (ts === void 0 || ts === null) return "\u672A\u77E5";
+  if (ts === 0) return "\u6C38\u4E45";
+  try {
+    return new Date(ts * 1e3).toLocaleString("zh-CN");
+  } catch {
+    return "\u672A\u77E5";
+  }
+}
+function formatLocalTimestamp(d = /* @__PURE__ */ new Date()) {
+  const p = (n) => String(n).padStart(2, "0");
+  return `${d.getFullYear()}-${p(d.getMonth() + 1)}-${p(d.getDate())}_${p(d.getHours())}-${p(d.getMinutes())}-${p(d.getSeconds())}`;
+}
+function formatDate(dateOrIso) {
+  if (dateOrIso === void 0 || dateOrIso === null) return "\u672A\u77E5";
+  try {
+    const d = dateOrIso instanceof Date ? dateOrIso : new Date(dateOrIso);
+    if (Number.isNaN(d.getTime())) return "\u672A\u77E5";
+    return d.toLocaleString("zh-CN");
+  } catch {
+    return "\u672A\u77E5";
+  }
+}
+function hasFlag(args, short, long) {
+  return !!args && (args.includes(short) || long !== void 0 && args.includes(long));
+}
+function parseIntArg(args, short, long, defaultValue) {
+  if (!args) return defaultValue;
+  for (let i = 0; i < args.length; i++) {
+    if (args[i] === short || args[i] === long) {
+      if (i + 1 < args.length) {
+        const val = parseInt(args[i + 1], 10);
+        return Number.isNaN(val) ? defaultValue : val;
+      }
+    } else if (args[i].startsWith(`${long}=`)) {
+      const val = parseInt(args[i].slice(long.length + 1), 10);
+      if (!Number.isNaN(val)) return val;
+    }
+  }
+  return defaultValue;
+}
+var VALUE_FLAGS = /* @__PURE__ */ new Set(["-t", "--timeout", "-j", "--concurrency", "-r", "--rounds", "-n", "--lines", "-u", "--update-timeout"]);
+function extractStartOptions(args) {
+  if (!args) return [];
+  const BOOL_FLAGS = /* @__PURE__ */ new Set(["-s", "--no-update", "--no-clean"]);
+  const out = [];
+  for (let i = 0; i < args.length; i++) {
+    const a = args[i];
+    if (VALUE_FLAGS.has(a)) {
+      out.push(a);
+      if (i + 1 < args.length) out.push(args[++i]);
+    } else if (BOOL_FLAGS.has(a) || /^--(timeout|concurrency|rounds|update-timeout)=/.test(a)) {
+      out.push(a);
+    }
+  }
+  return out;
+}
+function getNonFlagArg(args, startIdx, valueFlags = VALUE_FLAGS) {
+  if (!args) return null;
+  for (let i = startIdx; i < args.length; i++) {
+    const a = args[i];
+    if (a.startsWith("-")) {
+      if (valueFlags.has(a)) i++;
+      continue;
+    }
+    return a;
+  }
+  return null;
+}
+function isProcessRunning(pid) {
+  if (!pid) return false;
+  try {
+    const result = spawnSync("ps", ["-p", String(pid), "-o", "pid="], { encoding: "utf8", timeout: 5e3 });
+    return (result.stdout || "").trim().length > 0;
+  } catch {
+    return false;
+  }
+}
+function isProcessRoot(pid) {
+  if (!pid) return false;
+  try {
+    const result = spawnSync("ps", ["-p", String(pid), "-o", "uid="], { encoding: "utf8", timeout: 5e3 });
+    return (result.stdout || "").trim() === "0";
+  } catch {
+    return false;
+  }
+}
+function createHttpClient(options = {}) {
+  const { timeout = 6e4 } = options;
+  return {
+    async get(url, config) {
+      const controller = new AbortController();
+      const timer = setTimeout(() => controller.abort(), timeout);
+      const signal = config?.signal ? AbortSignal.any([controller.signal, config.signal]) : controller.signal;
+      try {
+        const response = await fetch(url, {
+          signal,
+          headers: { "User-Agent": `mihomo-cli/${VERSION}` }
+        });
+        if (!response.ok) {
+          const error = new Error(`HTTP ${response.status}`);
+          error.response = { status: response.status };
+          try {
+            error.response.data = await response.json();
+          } catch {
+          }
+          throw error;
+        }
+        const declaredLen = Number(response.headers.get("content-length"));
+        if (Number.isFinite(declaredLen) && declaredLen > MAX_RESPONSE_BYTES) {
+          throw new Error(`\u54CD\u5E94\u4F53\u8FC7\u5927\uFF08${formatBytes(declaredLen)}\uFF0C\u4E0A\u9650 ${formatBytes(MAX_RESPONSE_BYTES)}\uFF09`);
+        }
+        const text = await readBodyWithLimit(response, controller);
+        const data = config?.responseType === "json" ? JSON.parse(text) : text;
+        return { data, headers: response.headers, status: response.status };
+      } finally {
+        clearTimeout(timer);
+      }
+    }
+  };
+}
+async function readBodyWithLimit(response, controller) {
+  if (!response.body) return response.text();
+  const reader = response.body.getReader();
+  const chunks = [];
+  let total = 0;
+  try {
+    while (true) {
+      const { done, value } = await reader.read();
+      if (done) break;
+      if (value) {
+        total += value.byteLength;
+        if (total > MAX_RESPONSE_BYTES) {
+          controller.abort();
+          throw new Error(`\u54CD\u5E94\u4F53\u8D85\u8FC7\u5927\u5C0F\u4E0A\u9650\uFF08${formatBytes(MAX_RESPONSE_BYTES)}\uFF09`);
+        }
+        chunks.push(value);
+      }
+    }
+  } finally {
+    reader.releaseLock();
+  }
+  return Buffer.concat(chunks).toString("utf8");
+}
+function normalizeMirrorUrl(val) {
+  if (!val) return null;
+  if (val === "direct" || val === "no" || val === "none") return null;
+  let url = val;
+  if (!url.startsWith("http")) {
+    url = `https://${url}`;
+  }
+  if (!url.endsWith("/")) {
+    url += "/";
+  }
+  return url;
+}
+function parseMirrorArg(args) {
+  if (!args || args.length < 2) {
+    return { mirror: null, isOverride: false, type: "download" };
+  }
+  if (args.includes("--no-mirror") || args.includes("--direct")) {
+    return { mirror: null, isOverride: true, type: "download" };
+  }
+  const mirrorAllEq = args.find((a) => a.startsWith("--mirror-all="));
+  const mirrorAllIdx = args.indexOf("--mirror-all");
+  if (mirrorAllIdx >= 0 || mirrorAllEq) {
+    const inline = mirrorAllEq?.slice("--mirror-all=".length);
+    const nextArg = inline ?? args[mirrorAllIdx + 1];
+    if (!nextArg || nextArg.startsWith("-")) {
+      return { mirror: DEFAULT_MIRROR, isOverride: true, type: "all" };
+    }
+    return { mirror: normalizeMirrorUrl(nextArg), isOverride: true, type: "all" };
+  }
+  const mirrorEq = args.find((a) => a.startsWith("--mirror="));
+  const mirrorIdx = args.indexOf("--mirror");
+  if (mirrorIdx >= 0 || mirrorEq) {
+    const inline = mirrorEq?.slice("--mirror=".length);
+    const nextArg = inline ?? args[mirrorIdx + 1];
+    if (!nextArg || nextArg.startsWith("-")) {
+      return { mirror: DEFAULT_MIRROR, isOverride: true, type: "download" };
+    }
+    return { mirror: normalizeMirrorUrl(nextArg), isOverride: true, type: "download" };
+  }
+  return { mirror: null, isOverride: false, type: "download" };
+}
+function isProxyValid(proxy) {
+  if (!proxy.name || !proxy.server || !proxy.port) return false;
+  if (!proxy.type) return false;
+  if (proxy.type === "ss" && typeof proxy.cipher === "string" && proxy.cipher.startsWith("2022-blake3")) {
+    const pw = String(proxy.password || "");
+    if (!/^[A-Za-z0-9+/\-_]+=*$/.test(pw) || pw.length < 20) return false;
+  }
+  return true;
+}
+
 // src/config.ts
 function parseYamlOrJson(content, errorMsg) {
   if (!content?.trim()) {
@@ -3347,6 +3714,9 @@ function parseYamlOrJson(content, errorMsg) {
     throw new Error(`${errorMsg || "\u5185\u5BB9"}\u683C\u5F0F\u9519\u8BEF\uFF0C\u65E0\u6CD5\u89E3\u6790\u4E3A YAML \u6216 JSON`);
   }
 }
+function dumpYaml(obj) {
+  return dump(obj, { indent: 2, lineWidth: -1, schema: CORE_SCHEMA });
+}
 function collectOverwriteProxyNames(overwriteFiles) {
   const names = [];
   for (const file of overwriteFiles) {
@@ -3354,7 +3724,8 @@ function collectOverwriteProxyNames(overwriteFiles) {
       if ((key === "+proxies" || key === "proxies+") && Array.isArray(value)) {
         for (const proxy of value) {
           if (proxy && typeof proxy === "object" && "name" in proxy) {
-            names.push(proxy.name);
+            const name = proxy.name;
+            if (typeof name === "string" && name.length > 0) names.push(name);
           }
         }
       }
@@ -3367,7 +3738,7 @@ function excludeOverwriteProxiesFromIncludeAll(config, overwriteFiles) {
   if (injectedNames.length === 0) return;
   const groups = config["proxy-groups"];
   if (!groups) return;
-  const excludePattern = injectedNames.map((n) => n.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")).join("|");
+  const excludePattern = injectedNames.map((n) => escapeRegExp(n)).join("|");
   for (const group of groups) {
     if (!group["include-all"] && !group["include-all-proxies"]) continue;
     const existing = group["exclude-filter"];
@@ -3392,6 +3763,16 @@ function deduplicateByName(items) {
   });
   return { result, names, duplicates };
 }
+var NON_TARGET_RULE_TYPES = /* @__PURE__ */ new Set(["SUB-RULE"]);
+function getRuleTarget(rule) {
+  const parts = rule.split(",");
+  if (parts.length < 2) return "";
+  const last = parts[parts.length - 1].trim();
+  if (last.toLowerCase() === "no-resolve" && parts.length >= 3) {
+    return parts[parts.length - 2].trim();
+  }
+  return last;
+}
 function validateConfig(config) {
   const warnings = [];
   const proxies = config.proxies || [];
@@ -3436,9 +3817,9 @@ function validateConfig(config) {
   if (rules.length > 0) {
     const removedRules = [];
     config.rules = rules.filter((rule) => {
-      const parts = rule.split(",");
-      if (parts.length < 2) return true;
-      const target = parts[parts.length - 1].trim();
+      const ruleType = rule.split(",")[0]?.trim().toUpperCase();
+      if (NON_TARGET_RULE_TYPES.has(ruleType)) return true;
+      const target = getRuleTarget(rule);
       if (!target || validNames.has(target)) return true;
       removedRules.push(rule);
       return false;
@@ -3449,13 +3830,14 @@ function validateConfig(config) {
   }
   return warnings;
 }
-function buildConfig(subRawContent, mode) {
+function buildConfig(subRawContent, mode, scope) {
   const subscriptionConfig = parseYamlOrJson(subRawContent, "\u8BA2\u9605\u5185\u5BB9");
   if (!subscriptionConfig) {
     throw new Error("\u8BA2\u9605\u5185\u5BB9\u4E3A\u7A7A");
   }
   const overwriteEnabled = isOverwriteEnabled();
-  const overwriteFiles = overwriteEnabled ? loadOverwriteFile() : [];
+  const allFiles = overwriteEnabled ? loadOverwriteFile() : [];
+  const overwriteFiles = filterOverwriteFilesByScope(allFiles, scope);
   const withOverwrites = applyOverwrite(subscriptionConfig, overwriteFiles);
   if (overwriteFiles.length > 0) {
     excludeOverwriteProxiesFromIncludeAll(withOverwrites, overwriteFiles);
@@ -3466,7 +3848,6 @@ function buildConfig(subRawContent, mode) {
       systemConfig[key] = value;
     }
   }
-  systemConfig["allow-lan"] = false;
   systemConfig["external-controller"] = BASE_CONFIG["external-controller"];
   systemConfig["mixed-port"] = BASE_CONFIG["mixed-port"];
   delete withOverwrites["mixed-port"];
@@ -3475,6 +3856,11 @@ function buildConfig(subRawContent, mode) {
   delete withOverwrites["external-ui"];
   delete withOverwrites["external-ui-name"];
   delete withOverwrites["external-ui-url"];
+  delete withOverwrites.secret;
+  const controllerSecret = readSettings().controller_secret;
+  if (controllerSecret) {
+    systemConfig.secret = controllerSecret;
+  }
   if (mode === "tun") {
     systemConfig.tun = TUN_CONFIG.tun;
     const subDns = withOverwrites.dns || {};
@@ -3485,6 +3871,8 @@ function buildConfig(subRawContent, mode) {
     if (Object.keys(dns).length > 0) {
       systemConfig.dns = dns;
     }
+  } else {
+    delete withOverwrites.tun;
   }
   const merged = { ...withOverwrites, ...systemConfig };
   if (systemConfig.dns) {
@@ -3507,20 +3895,19 @@ function buildConfig(subRawContent, mode) {
 }
 function writeMihomoConfig(configObj) {
   ensureDirs();
-  const content = dump(configObj, { indent: 2, lineWidth: -1, schema: CORE_SCHEMA });
+  const content = dumpYaml(configObj);
   atomicWriteFileSync(PATHS.configFile, content, { mode: 384 });
 }
 function writeDebugConfig(buildResult) {
   ensureDirs();
-  const dumpOpts = { indent: 2, lineWidth: -1, schema: CORE_SCHEMA };
-  fs4.writeFileSync(PATHS.configStage1Subscription, dump(buildResult.subscriptionConfig, dumpOpts), { mode: 384 });
+  fs4.writeFileSync(PATHS.configStage1Subscription, dumpYaml(buildResult.subscriptionConfig), { mode: 384 });
   const overwriteMerged = {};
   for (const f of buildResult.overwriteFiles) {
     Object.assign(overwriteMerged, f.config);
   }
-  const overwriteContent = buildResult.overwriteFiles.length > 0 ? dump(overwriteMerged, dumpOpts) : "# overwrite \u5DF2\u7981\u7528\u6216\u65E0\u8986\u5199\u6587\u4EF6\n";
+  const overwriteContent = buildResult.overwriteFiles.length > 0 ? dumpYaml(overwriteMerged) : "# overwrite \u5DF2\u7981\u7528\u6216\u65E0\u8986\u5199\u6587\u4EF6\n";
   fs4.writeFileSync(PATHS.configStage2Overwrite, overwriteContent, { mode: 384 });
-  fs4.writeFileSync(PATHS.configStage3System, dump(buildResult.systemConfig, dumpOpts), { mode: 384 });
+  fs4.writeFileSync(PATHS.configStage3System, dumpYaml(buildResult.systemConfig), { mode: 384 });
 }
 function hasConfig() {
   return fs4.existsSync(PATHS.configFile);
@@ -3560,7 +3947,7 @@ function getKernelVersion() {
   }
   if (kernelVersionCached) return kernelVersionCache;
   try {
-    const result = spawnSync(PATHS.mihomoBinary, ["-v"], { encoding: "utf8", timeout: 5e3 });
+    const result = spawnSync2(PATHS.mihomoBinary, ["-v"], { encoding: "utf8", timeout: 5e3 });
     const output = `${result.stdout || ""}${result.stderr || ""}`.trim();
     if (output) {
       const match = output.match(/v?[\d]+\.[\d]+\.[\d]+/);
@@ -3579,211 +3966,113 @@ function clearKernelVersionCache() {
   kernelVersionCached = false;
 }
 
-// src/daemon.ts
-import { spawnSync as spawnSync4 } from "child_process";
-import fs6 from "fs";
-import path4 from "path";
-
-// src/process.ts
-import { spawn, spawnSync as spawnSync3 } from "child_process";
-import fs5 from "fs";
-import path3 from "path";
-
-// src/utils.ts
-import { spawnSync as spawnSync2 } from "child_process";
-import { createRequire } from "module";
-var require2 = createRequire(import.meta.url);
-var pkg = require2("../package.json");
-var VERSION = pkg.version;
-var sleepBuf = new Int32Array(new SharedArrayBuffer(4));
-var NO_COLOR = process.env.NO_COLOR !== void 0 || !process.stdout.isTTY;
-function colorize(code, str) {
-  if (NO_COLOR) return String(str);
-  return `${code + String(str)}\x1B[0m`;
-}
-var colors = {
-  bold: (s) => colorize("\x1B[1m", s),
-  red: (s) => colorize("\x1B[31m", s),
-  green: (s) => colorize("\x1B[32m", s),
-  yellow: (s) => colorize("\x1B[33m", s),
-  cyan: (s) => colorize("\x1B[36m", s),
-  gray: (s) => colorize("\x1B[90m", s)
-};
-function sleepSync(ms) {
-  Atomics.wait(sleepBuf, 0, 0, ms);
-}
-function sleep(ms) {
-  return new Promise((resolve) => setTimeout(resolve, ms));
-}
-var TimeoutError = class extends Error {
-  constructor() {
-    super("timeout");
-    this.name = "TimeoutError";
-  }
-};
-function withTimeout(promise, ms) {
-  return new Promise((resolve, reject) => {
-    const timer = setTimeout(() => reject(new TimeoutError()), ms);
-    promise.then(
-      (v) => {
-        clearTimeout(timer);
-        resolve(v);
-      },
-      (e) => {
-        clearTimeout(timer);
-        reject(e);
-      }
-    );
-  });
-}
-function formatBytes(bytes) {
-  if (bytes === void 0 || bytes === null) return "\u672A\u77E5";
-  const num = Number(bytes);
-  if (!Number.isFinite(num) || num < 0) return "\u672A\u77E5";
-  if (num === 0) return "0 B";
-  const k = 1024;
-  const sizes = ["B", "KB", "MB", "GB", "TB"];
-  const i = Math.min(Math.floor(Math.log(num) / Math.log(k)), sizes.length - 1);
-  return `${parseFloat((num / k ** i).toFixed(2))} ${sizes[i]}`;
-}
-function formatTimestamp(ts) {
-  if (ts === void 0 || ts === null) return "\u672A\u77E5";
-  try {
-    return new Date(ts * 1e3).toLocaleString("zh-CN");
-  } catch {
-    return "\u672A\u77E5";
-  }
-}
-function formatDate(dateOrIso) {
-  if (dateOrIso === void 0 || dateOrIso === null) return "\u672A\u77E5";
-  try {
-    const d = dateOrIso instanceof Date ? dateOrIso : new Date(dateOrIso);
-    if (Number.isNaN(d.getTime())) return "\u672A\u77E5";
-    return d.toLocaleString("zh-CN");
-  } catch {
-    return "\u672A\u77E5";
-  }
+// src/commands/help.ts
+function printShortHelp() {
+  console.log(`
+${colors.cyan(colors.bold(`mihomo-cli v${VERSION}`))}  (mihomo help \u67E5\u770B\u5B8C\u6574\u5E2E\u52A9)
+`);
+  console.log(
+    `\u5E38\u7528\u547D\u4EE4:
+  ${colors.bold("start")} [tun|mixed]    \u542F\u52A8/\u5207\u6362\u4EE3\u7406
+  ${colors.bold("sub")} [use|update]     \u8BA2\u9605\u7BA1\u7406
+  ${colors.bold("ow")} [on|off]          \u8986\u5199\u914D\u7F6E
+  ${colors.bold("ui")} [zash|dash|yacd]  \u6253\u5F00 Web UI
+`
+  );
 }
-function hasFlag(args, short, long) {
-  return !!args && (args.includes(short) || args.includes(long));
+var GROUP_TITLES = [
+  ["control", "\u63A7\u5236:"],
+  ["interface", "\u754C\u9762:"],
+  ["subscription", "\u8BA2\u9605:"],
+  ["config", "\u914D\u7F6E:"],
+  ["system", "\u7CFB\u7EDF:"]
+];
+function printHelp(commands) {
+  const lines = [`
+${colors.cyan(colors.bold(`mihomo-cli v${VERSION}`))}`, "", "\u547D\u4EE4\u522B\u540D: mihomo, mhm, mh", "", "\u7528\u6CD5:", "  mihomo <\u547D\u4EE4> [\u9009\u9879]"];
+  for (const [group, title] of GROUP_TITLES) {
+    const usageLines = commands.filter((c) => c.group === group).flatMap((c) => c.usage);
+    if (usageLines.length === 0) continue;
+    lines.push("", colors.cyan(title));
+    for (const u of usageLines) {
+      lines.push(u.startsWith(" ") ? `  ${u}` : `  ${boldFirstToken(u)}`);
+    }
+  }
+  const meta = commands.filter((c) => c.group === "meta").flatMap((c) => c.usage);
+  if (meta.length > 0) {
+    lines.push("", colors.cyan("\u5143:"));
+    for (const u of meta) lines.push(`  ${boldFirstToken(u)}`);
+  }
+  lines.push(
+    "",
+    `${colors.cyan("\u793A\u4F8B:")}`,
+    "  mihomo start              # \u542F\u52A8/\u91CD\u542F Mixed \u6A21\u5F0F",
+    "  mihomo start tun          # \u5207\u6362\u5230 TUN \u900F\u660E\u4EE3\u7406\u6A21\u5F0F",
+    "  mihomo start -s           # \u8DF3\u8FC7\u81EA\u52A8\u66F4\u65B0\u8BA2\u9605",
+    "  mihomo start -u 30000     # \u81EA\u52A8\u66F4\u65B0\u8D85\u65F6 30 \u79D2 (\u9ED8\u8BA4 10s)",
+    "  mihomo daemon on          # \u5F00\u542F\u4FDD\u6D3B\uFF08\u5F00\u673A\u81EA\u542F + \u5D29\u6E83\u91CD\u542F\uFF09",
+    "  mihomo sub add <url>      # \u6DFB\u52A0\u8BA2\u9605 (sub \u662F subscription \u522B\u540D)",
+    "  mihomo ui                 # \u6253\u5F00 Web UI",
+    "",
+    `${colors.cyan("\u5FEB\u6377\u547D\u4EE4:")}`,
+    "  tun = start tun   use = sub use   on/off = ow on/off   open = dir open",
+    "  up = start   down = stop   upd/upgrade = update",
+    "",
+    `${colors.cyan("\u6A21\u5F0F\u8BF4\u660E:")}`,
+    "  mixed  HTTP + SOCKS5 \u6DF7\u5408\u7AEF\u53E3 (\u9ED8\u8BA4)",
+    "  tun    \u900F\u660E\u4EE3\u7406\uFF0C\u5168\u5C40\u81EA\u52A8\u8DEF\u7531\uFF0C\u9700\u8981 sudo",
+    "",
+    `${colors.cyan("\u6570\u636E\u76EE\u5F55:")}`,
+    "  \u73AF\u5883\u53D8\u91CF MIHOMO_CLI_DIR \u53EF\u81EA\u5B9A\u4E49\u4F4D\u7F6E",
+    `  \u9ED8\u8BA4: ${USER_DATA_DIR}`
+  );
+  console.log(lines.join("\n"));
 }
-function parseIntArg(args, short, long, defaultValue) {
-  if (!args) return defaultValue;
-  for (let i = 0; i < args.length; i++) {
-    if (args[i] === short || args[i] === long) {
-      if (i + 1 < args.length) {
-        const val = parseInt(args[i + 1], 10);
-        return Number.isNaN(val) ? defaultValue : val;
-      }
-    }
-  }
-  return defaultValue;
+function boldFirstToken(usage) {
+  const spaceIdx = usage.indexOf(" ");
+  if (spaceIdx < 0) return colors.bold(usage);
+  return `${colors.bold(usage.slice(0, spaceIdx))}${usage.slice(spaceIdx)}`;
 }
-var VALUE_FLAGS = /* @__PURE__ */ new Set(["-t", "--timeout", "-j", "--concurrency", "-r", "--rounds", "-n", "--lines", "-u", "--update-timeout"]);
-function getNonFlagArg(args, startIdx, valueFlags = VALUE_FLAGS) {
-  if (!args) return null;
-  for (let i = startIdx; i < args.length; i++) {
-    const a = args[i];
-    if (a.startsWith("-")) {
-      if (valueFlags.has(a)) i++;
-      continue;
-    }
-    return a;
-  }
-  return null;
+function printVersion() {
+  const kv = getKernelVersion() || "\u672A\u5B89\u88C5";
+  console.log(colors.cyan(colors.bold(`mihomo-cli v${VERSION}`)));
+  console.log(`${colors.gray("\u5185\u6838: ")}${kv}`);
+  console.log(`${colors.gray("\u6570\u636E\u76EE\u5F55: ")}${USER_DATA_DIR}`);
 }
-function isProcessRunning(pid) {
-  if (!pid) return false;
-  try {
-    const result = spawnSync2("ps", ["-p", String(pid), "-o", "pid="], { encoding: "utf8", timeout: 5e3 });
-    return (result.stdout || "").trim().length > 0;
-  } catch {
-    return false;
-  }
+
+// src/daemon.ts
+import { spawnSync as spawnSync4 } from "child_process";
+import fs6 from "fs";
+import path5 from "path";
+
+// src/process.ts
+import { spawn, spawnSync as spawnSync3 } from "child_process";
+import fs5 from "fs";
+import path4 from "path";
+
+// src/lifecycle.ts
+var cleanupFns = /* @__PURE__ */ new Set();
+var silentSigint = false;
+function setSilentSigint(value) {
+  silentSigint = value;
 }
-function isProcessRoot(pid) {
-  if (!pid) return false;
-  try {
-    const result = spawnSync2("ps", ["-p", String(pid), "-o", "uid="], { encoding: "utf8", timeout: 5e3 });
-    return (result.stdout || "").trim() === "0";
-  } catch {
-    return false;
-  }
+function isSilentSigint() {
+  return silentSigint;
 }
-function createHttpClient(options = {}) {
-  const { timeout = 6e4 } = options;
-  return {
-    async get(url, config) {
-      const controller = new AbortController();
-      const timer = setTimeout(() => controller.abort(), timeout);
-      const signal = config?.signal ? AbortSignal.any([controller.signal, config.signal]) : controller.signal;
-      try {
-        const response = await fetch(url, {
-          signal,
-          headers: { "User-Agent": `mihomo-cli/${VERSION}` }
-        });
-        if (!response.ok) {
-          const error = new Error(`HTTP ${response.status}`);
-          error.response = { status: response.status };
-          try {
-            error.response.data = await response.json();
-          } catch {
-          }
-          throw error;
-        }
-        const data = config?.responseType === "json" ? await response.json() : await response.text();
-        return { data, headers: response.headers, status: response.status };
-      } finally {
-        clearTimeout(timer);
-      }
-    }
+function registerCleanup(fn) {
+  cleanupFns.add(fn);
+  return () => {
+    cleanupFns.delete(fn);
   };
 }
-function normalizeMirrorUrl(val) {
-  if (!val) return null;
-  if (val === "direct" || val === "no" || val === "none") return null;
-  let url = val;
-  if (!url.startsWith("http")) {
-    url = `https://${url}`;
-  }
-  if (!url.endsWith("/")) {
-    url += "/";
-  }
-  return url;
-}
-function parseMirrorArg(args) {
-  if (!args || args.length < 2) {
-    return { mirror: null, isOverride: false, type: "download" };
-  }
-  if (args.includes("--no-mirror") || args.includes("--direct")) {
-    return { mirror: null, isOverride: true, type: "download" };
-  }
-  const mirrorAllIdx = args.indexOf("--mirror-all");
-  if (mirrorAllIdx >= 0) {
-    const nextArg = args[mirrorAllIdx + 1];
-    if (!nextArg || nextArg.startsWith("-")) {
-      return { mirror: "https://v6.gh-proxy.org/", isOverride: true, type: "all" };
-    }
-    return { mirror: normalizeMirrorUrl(nextArg), isOverride: true, type: "all" };
-  }
-  const mirrorIdx = args.indexOf("--mirror");
-  if (mirrorIdx >= 0) {
-    const nextArg = args[mirrorIdx + 1];
-    if (!nextArg || nextArg.startsWith("-")) {
-      return { mirror: "https://v6.gh-proxy.org/", isOverride: true, type: "download" };
+function runCleanup() {
+  for (const fn of cleanupFns) {
+    try {
+      fn();
+    } catch {
     }
-    return { mirror: normalizeMirrorUrl(nextArg), isOverride: true, type: "download" };
-  }
-  return { mirror: null, isOverride: false, type: "download" };
-}
-function isProxyValid(proxy) {
-  if (!proxy.name || !proxy.server || !proxy.port) return false;
-  if (!proxy.type) return false;
-  if (proxy.type === "ss" && typeof proxy.cipher === "string" && proxy.cipher.startsWith("2022-blake3")) {
-    const pw = String(proxy.password || "");
-    if (!/^[A-Za-z0-9+/\-_]+=*$/.test(pw) || pw.length < 20) return false;
   }
-  return true;
+  cleanupFns.clear();
 }
 
 // src/process.ts
@@ -3794,9 +4083,7 @@ var SUDO_TIMEOUT_MS = 6e4;
 var TUN_MODE_POST_WAIT_MS = 500;
 var BATCH_KILL_THRESHOLD = 3;
 var DEFAULT_LOG_RETENTION_DAYS = 7;
-function escapeForPgrep(s) {
-  return s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
-}
+var MAIN_INSTANCE_PATTERN = `${escapeRegExp(PATHS.mihomoBinary)}.*${escapeRegExp(PATHS.configFile)}`;
 function clearRuntime() {
   if (fs5.existsSync(DIRS.runtime)) {
     rmrf(DIRS.runtime);
@@ -3816,10 +4103,9 @@ function isRunning() {
   const pid = getPid();
   return pid ? isProcessRunning(pid) : false;
 }
-function getAllMihomoPids() {
-  const binaryPath = PATHS.mihomoBinary;
+function getMihomoPids() {
   try {
-    const result = spawnSync3("pgrep", ["-f", escapeForPgrep(binaryPath)], { encoding: "utf8", timeout: 1e4 });
+    const result = spawnSync3("pgrep", ["-f", MAIN_INSTANCE_PATTERN], { encoding: "utf8", timeout: 1e4 });
     const output = (result.stdout || "").trim();
     if (!output) return [];
     return output.split("\n").filter(Boolean).map((p) => parseInt(p, 10)).filter((p) => Number.isInteger(p) && p > 0);
@@ -3837,7 +4123,7 @@ function isPidFileOwnedByRoot() {
   }
 }
 function checkStaleState() {
-  const allPids = getAllMihomoPids();
+  const allPids = getMihomoPids();
   const hasRootProcess = allPids.some((p) => isProcessRoot(p));
   const hasRootPidFile = isPidFileOwnedByRoot();
   return {
@@ -3848,6 +4134,9 @@ function checkStaleState() {
     needsSudo: hasRootProcess || hasRootPidFile
   };
 }
+function hasRootResidue() {
+  return checkStaleState().needsSudo;
+}
 function savePid(pid) {
   ensureDirs();
   fs5.writeFileSync(PATHS.pidFile, pid.toString(), { mode: 384 });
@@ -3866,29 +4155,16 @@ function clearPid() {
     }
   }
 }
-function killProcess(pid, needsSudo = false) {
+function killProcess(pid) {
   try {
-    if (needsSudo) {
-      const result = spawnSync3("sudo", ["kill", "-9", String(pid)], { stdio: "inherit", timeout: 1e4 });
-      if (result.status === 0) {
-        return true;
-      }
-      try {
-        process.kill(pid, "SIGKILL");
-        return true;
-      } catch {
-        return false;
-      }
-    } else {
-      process.kill(pid, "SIGKILL");
-      return true;
-    }
+    process.kill(pid, "SIGKILL");
+    return true;
   } catch {
     return false;
   }
 }
 function killAllMihomo(forceSudo = false) {
-  const pattern = escapeForPgrep(PATHS.mihomoBinary);
+  const pattern = MAIN_INSTANCE_PATTERN;
   if (forceSudo) {
     try {
       spawnSync3("sudo", ["pkill", "-9", "-f", pattern], { stdio: "inherit", timeout: 15e3 });
@@ -3906,7 +4182,7 @@ function killAllMihomo(forceSudo = false) {
   }
 }
 function cleanupAll(forceSudo = false) {
-  const pids = getAllMihomoPids();
+  const pids = getMihomoPids();
   if (pids.length === 0) {
     clearPid();
     return { killed: 0, failed: 0, remaining: [] };
@@ -3928,7 +4204,7 @@ function cleanupAll(forceSudo = false) {
       killedCount = pids.length;
     } else {
       for (const pid of pids) {
-        if (killProcess(pid, false)) {
+        if (killProcess(pid)) {
           killedCount++;
         } else {
           failedPids.push(pid);
@@ -3937,26 +4213,26 @@ function cleanupAll(forceSudo = false) {
     }
   }
   for (let i = 0; i < PROCESS_WAIT_ATTEMPTS; i++) {
-    if (getAllMihomoPids().length === 0) break;
+    if (getMihomoPids().length === 0) break;
     sleepSync(PROCESS_WAIT_INTERVAL);
   }
   clearPid();
-  return { killed: killedCount, failed: failedPids.length, remaining: getAllMihomoPids() };
+  return { killed: killedCount, failed: failedPids.length, remaining: getMihomoPids() };
 }
 function createTunLaunchScript() {
-  const binary = PATHS.mihomoBinary;
-  const configFile = PATHS.configFile;
-  const logFile = PATHS.logFile;
-  const pidFile = PATHS.pidFile;
-  const dataDir = DIRS.data;
-  const killPattern = escapeForPgrep(binary);
+  const binary = shellQuote(PATHS.mihomoBinary);
+  const configFile = shellQuote(PATHS.configFile);
+  const logFile = shellQuote(PATHS.logFile);
+  const pidFile = shellQuote(PATHS.pidFile);
+  const dataDir = shellQuote(DIRS.data);
+  const killPattern = shellQuote(MAIN_INSTANCE_PATTERN);
   const scriptContent = `#!/bin/bash
-BINARY="${binary}"
-CONFIG_FILE="${configFile}"
-LOG_FILE="${logFile}"
-PID_FILE="${pidFile}"
-DATA_DIR="${dataDir}"
-KILL_PATTERN='${killPattern}'
+BINARY=${binary}
+CONFIG_FILE=${configFile}
+LOG_FILE=${logFile}
+PID_FILE=${pidFile}
+DATA_DIR=${dataDir}
+KILL_PATTERN=${killPattern}
 
 # \u7EC8\u6B62\u65E7\u8FDB\u7A0B
 pkill -9 -f "\${KILL_PATTERN}" 2>/dev/null || true
@@ -3980,14 +4256,15 @@ for i in 1 2 3 4 5; do
   fi
 done
 
-# \u5931\u8D25\uFF0C\u663E\u793A\u65E5\u5FD7
+# \u5931\u8D25\uFF0C\u663E\u793A\u65E5\u5FD7\uFF08\u9000\u51FA\u7801 2\uFF1A\u907F\u5F00 sudo \u7684 1=\u9274\u6743\u5931\u8D25/\u53D6\u6D88\uFF0C\u4F9B\u8C03\u7528\u65B9\u533A\u5206\uFF09
+rm -f "\${PID_FILE}" 2>/dev/null || true
 echo "TUN \u542F\u52A8\u5931\u8D25"
 echo ""
 echo "--- \u65E5\u5FD7 ---"
 tail -25 "\${LOG_FILE}" 2>/dev/null
-exit 1
+exit 2
 `;
-  const scriptPath = path3.join(DIRS.runtime, "launch-tun.sh");
+  const scriptPath = path4.join(DIRS.runtime, "launch-tun.sh");
   fs5.writeFileSync(scriptPath, scriptContent, { mode: 448 });
   return scriptPath;
 }
@@ -4009,7 +4286,7 @@ function getProcessInfo(pid) {
 function getStatus() {
   const running = isRunning();
   const pid = getPid();
-  const allPids = getAllMihomoPids();
+  const allPids = getMihomoPids();
   return {
     running,
     pid: running ? pid : null,
@@ -4043,7 +4320,7 @@ async function startMixedMode(staleState) {
   if (staleState.needsCleanup) {
     if (staleState.needsSudo) {
       console.log("\n\u53D1\u73B0\u9700\u8981 root \u6743\u9650\u6E05\u7406\u7684\u6B8B\u7559\u8FDB\u7A0B/\u6587\u4EF6");
-      console.log("\u8BF7\u5148\u624B\u52A8\u6E05\u7406: sudo pkill -9 mihomo");
+      console.log(`\u8BF7\u5148\u624B\u52A8\u6E05\u7406: sudo pkill -9 mihomo && sudo rm -f ${PATHS.pidFile}`);
       console.log("\u6216\u8005\u5207\u6362\u5230 TUN \u6A21\u5F0F\uFF0C\u542F\u52A8\u65F6\u4F1A\u81EA\u52A8\u6E05\u7406");
       throw new Error("\u5B58\u5728\u9700\u8981 root \u6743\u9650\u6E05\u7406\u7684\u6B8B\u7559");
     }
@@ -4059,14 +4336,30 @@ async function startMixedMode(staleState) {
   const configFile = PATHS.configFile;
   const logFile = PATHS.logFile;
   const args = ["-d", DIRS.data, "-f", configFile];
+  if (fs5.existsSync(logFile)) {
+    try {
+      fs5.accessSync(logFile, fs5.constants.W_OK);
+    } catch {
+      try {
+        fs5.unlinkSync(logFile);
+      } catch {
+      }
+    }
+  }
   const logFd = fs5.openSync(logFile, "a");
   const child = spawn(PATHS.mihomoBinary, args, {
     detached: true,
     stdio: ["ignore", logFd, logFd]
   });
+  child.on("error", () => {
+  });
   fs5.closeSync(logFd);
   child.unref();
   const pid = child.pid;
+  if (!pid) {
+    clearPid();
+    throw new Error("\u542F\u52A8\u5931\u8D25\uFF1A\u65E0\u6CD5\u521B\u5EFA\u5185\u6838\u8FDB\u7A0B\uFF08\u5185\u6838\u4E8C\u8FDB\u5236\u53EF\u80FD\u4E0D\u53EF\u6267\u884C\uFF09");
+  }
   savePid(pid);
   await new Promise((resolve) => setTimeout(resolve, STARTUP_WAIT_MS));
   if (!isRunning()) {
@@ -4107,6 +4400,9 @@ async function startTunMode(staleState) {
     if (e.status === 1) {
       throw new Error("\u5BC6\u7801\u9519\u8BEF\u6216\u53D6\u6D88");
     }
+    if (e.status === 2) {
+      throw new Error("TUN \u542F\u52A8\u5931\u8D25\uFF08\u8BE6\u89C1\u4E0A\u65B9\u65E5\u5FD7\uFF09");
+    }
     throw new Error(e.message);
   }
   try {
@@ -4121,14 +4417,14 @@ async function startTunMode(staleState) {
   return { success: true, pid: finalPid, mode: "tun" };
 }
 function stop(forceSudo = false) {
-  const allPids = getAllMihomoPids();
+  const allPids = getMihomoPids();
   if (allPids.length === 0) {
     clearPid();
     clearRuntime();
     return { success: true, notRunning: true };
   }
   const result = cleanupAll(forceSudo);
-  const remaining = getAllMihomoPids();
+  const remaining = getMihomoPids();
   if (remaining.length > 0) {
     console.log("");
     console.log("\u4ECD\u6709\u8FDB\u7A0B\u6B8B\u7559\uFF0C\u9700\u8981\u624B\u52A8\u6E05\u7406:");
@@ -4152,9 +4448,8 @@ function rotateLog() {
   if (!fs5.existsSync(logFile)) return null;
   const stat = fs5.statSync(logFile);
   if (stat.size === 0) return null;
-  const timestamp = (/* @__PURE__ */ new Date()).toISOString().replace(/T/, "_").replace(/:/g, "-").replace(/\..+/, "");
-  const rotatedName = `mihomo.${timestamp}.log`;
-  const rotatedPath = path3.join(DIRS.logs, rotatedName);
+  const rotatedName = `mihomo.${formatLocalTimestamp()}.log`;
+  const rotatedPath = path4.join(DIRS.logs, rotatedName);
   fs5.renameSync(logFile, rotatedPath);
   return rotatedPath;
 }
@@ -4169,7 +4464,7 @@ function cleanupOldLogs(maxAgeDays = DEFAULT_LOG_RETENTION_DAYS) {
   for (const file of files) {
     if (!file.match(/^mihomo\.\d{4}-\d{2}-\d{2}_\d{2}-\d{2}-\d{2}\.log$/)) continue;
     try {
-      const filePath = path3.join(logsDir, file);
+      const filePath = path4.join(logsDir, file);
       const stat = fs5.statSync(filePath);
       if (now - stat.mtimeMs > maxAgeMs) {
         fs5.unlinkSync(filePath);
@@ -4200,7 +4495,7 @@ function listLogs() {
     const match = file.match(/^mihomo\.(\d{4}-\d{2}-\d{2}_\d{2}-\d{2}-\d{2})\.log$/);
     if (!match) continue;
     try {
-      const filePath = path3.join(logsDir, file);
+      const filePath = path4.join(logsDir, file);
       const stat = fs5.statSync(filePath);
       result.archives.push({
         name: file,
@@ -4216,22 +4511,22 @@ function listLogs() {
   return result;
 }
 function isPathUnderDir(filePath, baseDir) {
-  const resolvedPath = path3.resolve(filePath);
-  const resolvedBase = path3.resolve(baseDir);
-  return resolvedPath === resolvedBase || resolvedPath.startsWith(resolvedBase + path3.sep);
+  const resolvedPath = path4.resolve(filePath);
+  const resolvedBase = path4.resolve(baseDir);
+  return resolvedPath === resolvedBase || resolvedPath.startsWith(resolvedBase + path4.sep);
 }
 function getLogPathByName(name) {
   const logsDir = DIRS.logs;
   let targetName = name;
   if (!name.endsWith(".log")) targetName = `mihomo.${name}.log`;
   if (!targetName.startsWith("mihomo.")) targetName = `mihomo.${targetName}`;
-  const filePath = path3.join(logsDir, targetName);
+  const filePath = path4.join(logsDir, targetName);
   if (fs5.existsSync(filePath) && isPathUnderDir(filePath, logsDir)) return filePath;
   if (fs5.existsSync(logsDir)) {
     const files = fs5.readdirSync(logsDir);
     for (const file of files) {
       if (file.includes(name)) {
-        const candidatePath = path3.join(logsDir, file);
+        const candidatePath = path4.join(logsDir, file);
         if (isPathUnderDir(candidatePath, logsDir)) return candidatePath;
       }
     }
@@ -4272,6 +4567,7 @@ function viewLogWithTail(logPath, options) {
   tailArgs.push("-n", lines.toString());
   tailArgs.push(logPath);
   const tail = spawn("tail", tailArgs, { stdio: "inherit" });
+  if (follow) setSilentSigint(true);
   tail.on("close", () => process.exit(0));
   tail.on("error", (e) => {
     console.error(`\u65E0\u6CD5\u8BFB\u53D6\u65E5\u5FD7: ${e.message}`);
@@ -4280,31 +4576,16 @@ function viewLogWithTail(logPath, options) {
 }
 
 // src/daemon.ts
-var LAUNCHCTL_TIMEOUT_MS = 1e4;
-function launchctl(args) {
-  const result = spawnSync4("launchctl", args, { encoding: "utf8", timeout: LAUNCHCTL_TIMEOUT_MS });
-  return {
-    status: result.status,
-    stdout: result.stdout || "",
-    stderr: result.stderr || ""
-  };
-}
-function getUid() {
-  const uid = process.getuid?.();
-  if (uid === void 0) {
-    throw new Error("\u65E0\u6CD5\u83B7\u53D6\u7528\u6237 UID\uFF0C\u4FDD\u6D3B\u529F\u80FD\u4EC5\u652F\u6301 macOS");
+var SERVICE_TARGET = `system/${LAUNCH_DAEMON_LABEL}`;
+var HOT_RELOAD_TIMEOUT_MS = 5e3;
+var DAEMON_BOOT_WAIT_MS = 500;
+var LOG_ROTATE_MAX_BYTES = 10 * 1024 * 1024;
+function logOversized() {
+  try {
+    return fs6.statSync(PATHS.logFile).size > LOG_ROTATE_MAX_BYTES;
+  } catch {
+    return false;
   }
-  return uid;
-}
-function guiDomain(uid) {
-  return `gui/${uid}`;
-}
-function serviceTarget(uid) {
-  return `gui/${uid}/${LAUNCH_AGENT_LABEL}`;
-}
-function launchctlError(action, result) {
-  const detail = (result.stderr || result.stdout || "").trim() || `\u9000\u51FA\u7801 ${result.status}`;
-  return new Error(`launchctl ${action} \u5931\u8D25: ${detail}`);
 }
 function escapeXml(s) {
   return s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&apos;");
@@ -4317,7 +4598,7 @@ function buildPlist() {
 <plist version="1.0">
 <dict>
   <key>Label</key>
-  <string>${escapeXml(LAUNCH_AGENT_LABEL)}</string>
+  <string>${escapeXml(LAUNCH_DAEMON_LABEL)}</string>
   <key>ProgramArguments</key>
   <array>
 ${argsXml}
@@ -4336,25 +4617,42 @@ ${argsXml}
 </plist>
 `;
 }
+function runSudoScript(scriptBody, opts) {
+  if (!process.stdin.isTTY) {
+    throw new Error("\u5F53\u524D\u73AF\u5883\u65E0\u6CD5\u8F93\u5165\u7BA1\u7406\u5458\u5BC6\u7801\uFF08\u9700\u8981\u5728\u4EA4\u4E92\u5F0F\u7EC8\u7AEF\u8FD0\u884C sudo\uFF09");
+  }
+  ensureDirs();
+  const scriptPath = path5.join(DIRS.runtime, opts.file);
+  fs6.writeFileSync(scriptPath, scriptBody, { mode: 448 });
+  try {
+    const result = spawnSync4("sudo", [scriptPath], { stdio: "inherit", timeout: SUDO_TIMEOUT_MS });
+    if (result.error) throw result.error;
+    if (result.status !== 0) {
+      if (result.status === 1) {
+        throw new Error("\u5DF2\u53D6\u6D88\u6216\u5BC6\u7801\u9519\u8BEF");
+      }
+      if (result.status == null) {
+        throw new Error(`${opts.action}\u88AB\u4E2D\u65AD\uFF08sudo \u8FDB\u7A0B\u88AB\u4FE1\u53F7\u7EC8\u6B62\uFF09`);
+      }
+      const custom = opts.codeMessages?.[result.status];
+      throw new Error(custom || `${opts.action}\u5931\u8D25\uFF08\u9000\u51FA\u7801 ${result.status}\uFF09`);
+    }
+  } finally {
+    try {
+      fs6.unlinkSync(scriptPath);
+    } catch {
+    }
+  }
+}
 function isDaemonEnabled() {
-  return fs6.existsSync(PATHS.launchAgentPlist);
+  return fs6.existsSync(PATHS.launchDaemonPlist);
 }
 function getDaemonStatus() {
   if (!isDaemonEnabled()) {
     return { enabled: false, loaded: false, pid: null };
   }
-  const uid = process.getuid?.();
-  if (uid === void 0) {
-    const pids = getAllMihomoPids();
-    return { enabled: true, loaded: pids.length > 0, pid: pids[0] ?? null };
-  }
-  const result = launchctl(["print", serviceTarget(uid)]);
-  if (result.status !== 0) {
-    return { enabled: true, loaded: false, pid: null };
-  }
-  const pidMatch = result.stdout.match(/\bpid = (\d+)/);
-  const pid = pidMatch ? parseInt(pidMatch[1], 10) : null;
-  return { enabled: true, loaded: true, pid };
+  const rootPids = getMihomoPids().filter(isProcessRoot);
+  return { enabled: true, loaded: rootPids.length > 0, pid: rootPids[0] ?? null };
 }
 function isDaemonRunning(status) {
   return status.loaded && status.pid !== null;
@@ -4366,52 +4664,113 @@ function enableDaemon() {
   if (!fs6.existsSync(PATHS.configFile)) {
     throw new Error("\u672A\u627E\u5230\u8FD0\u884C\u65F6\u914D\u7F6E\uFF0C\u8BF7\u5148\u6DFB\u52A0\u8BA2\u9605");
   }
-  const uid = getUid();
-  launchctl(["bootout", serviceTarget(uid)]);
-  cleanupAll();
-  fs6.mkdirSync(path4.dirname(PATHS.launchAgentPlist), { recursive: true });
-  atomicWriteFileSync(PATHS.launchAgentPlist, buildPlist(), { mode: 384 });
-  const result = launchctl(["bootstrap", guiDomain(uid), PATHS.launchAgentPlist]);
-  if (result.status !== 0) {
-    launchctl(["bootout", serviceTarget(uid)]);
+  ensureDirs();
+  const stagePath = path5.join(DIRS.runtime, "daemon.plist.stage");
+  atomicWriteFileSync(stagePath, buildPlist(), { mode: 384 });
+  const target = shellQuote(SERVICE_TARGET);
+  const plistDest = shellQuote(PATHS.launchDaemonPlist);
+  const stage = shellQuote(stagePath);
+  const pattern = shellQuote(MAIN_INSTANCE_PATTERN);
+  const script = [
+    "#!/bin/bash",
+    `launchctl bootout ${target} 2>/dev/null || true`,
+    `pkill -9 -f ${pattern} 2>/dev/null || true`,
+    "sleep 0.2",
+    `install -m 644 -o root -g wheel ${stage} ${plistDest} || exit 2`,
+    `launchctl bootstrap system ${plistDest} || { launchctl bootout ${target} 2>/dev/null; rm -f ${plistDest}; exit 3; }`,
+    "exit 0",
+    ""
+  ].join("\n");
+  try {
+    runSudoScript(script, {
+      action: "\u542F\u7528\u4FDD\u6D3B",
+      file: "daemon-enable.sh",
+      codeMessages: {
+        2: "\u5B89\u88C5 plist \u5230 /Library/LaunchDaemons \u5931\u8D25",
+        3: "\u88C5\u8F7D\u4FDD\u6D3B\u670D\u52A1\u5931\u8D25\uFF08launchctl bootstrap\uFF09"
+      }
+    });
+  } finally {
     try {
-      fs6.unlinkSync(PATHS.launchAgentPlist);
+      fs6.unlinkSync(stagePath);
     } catch {
     }
-    throw launchctlError("bootstrap", result);
   }
 }
 function disableDaemon() {
-  const uid = process.getuid?.();
-  if (uid !== void 0) {
-    launchctl(["bootout", serviceTarget(uid)]);
+  if (!isDaemonEnabled()) return;
+  const target = shellQuote(SERVICE_TARGET);
+  const plistDest = shellQuote(PATHS.launchDaemonPlist);
+  const logFile = shellQuote(PATHS.logFile);
+  const dataDir = shellQuote(DIRS.data);
+  const script = [
+    "#!/bin/bash",
+    `launchctl bootout ${target} 2>/dev/null || true`,
+    `rm -f ${plistDest}`,
+    `chown "$SUDO_UID:$SUDO_GID" ${logFile} 2>/dev/null || true`,
+    `chown -R "$SUDO_UID:$SUDO_GID" ${dataDir} 2>/dev/null || true`,
+    "exit 0",
+    ""
+  ].join("\n");
+  runSudoScript(script, { action: "\u5173\u95ED\u4FDD\u6D3B", file: "daemon-disable.sh" });
+  const rootPids = getMihomoPids().filter(isProcessRoot);
+  if (rootPids.length > 0) {
+    console.log("");
+    console.log(`\u4ECD\u6709 root \u5185\u6838\u8FDB\u7A0B\u6B8B\u7559 (PID ${rootPids.join(", ")})`);
+    console.log("\u624B\u52A8\u6E05\u7406: sudo pkill -9 mihomo");
   }
+}
+async function tryHotReload() {
+  const controller = new AbortController();
+  const timer = setTimeout(() => controller.abort(), HOT_RELOAD_TIMEOUT_MS);
   try {
-    fs6.unlinkSync(PATHS.launchAgentPlist);
+    const res = await fetch(`${CONTROLLER_BASE_URL}/configs?force=true`, {
+      method: "PUT",
+      headers: { "Content-Type": "application/json" },
+      body: "{}",
+      signal: controller.signal
+    });
+    return res.status === 204 || res.ok;
   } catch {
+    return false;
+  } finally {
+    clearTimeout(timer);
   }
 }
-function restartDaemon() {
-  const uid = getUid();
-  if (!fs6.existsSync(PATHS.launchAgentPlist)) {
+async function restartDaemon() {
+  if (!fs6.existsSync(PATHS.launchDaemonPlist)) {
     throw new Error("\u4FDD\u6D3B\u672A\u542F\u7528\uFF0C\u65E0\u6CD5\u91CD\u542F");
   }
-  if (launchctl(["print", serviceTarget(uid)]).status === 0) {
-    const result2 = launchctl(["kickstart", "-k", serviceTarget(uid)]);
-    if (result2.status !== 0) {
-      throw launchctlError("kickstart", result2);
-    }
-    return;
-  }
-  const result = launchctl(["bootstrap", guiDomain(uid), PATHS.launchAgentPlist]);
-  if (result.status !== 0) {
-    throw launchctlError("bootstrap", result);
-  }
+  if (!logOversized() && await tryHotReload()) return;
+  const target = shellQuote(SERVICE_TARGET);
+  const plistDest = shellQuote(PATHS.launchDaemonPlist);
+  const logFile = shellQuote(PATHS.logFile);
+  const archiveFile = shellQuote(path5.join(DIRS.logs, `mihomo.${formatLocalTimestamp()}.log`));
+  const script = [
+    "#!/bin/bash",
+    `if [ -f ${logFile} ] && [ "$(stat -f%z ${logFile} 2>/dev/null || echo 0)" -gt ${LOG_ROTATE_MAX_BYTES} ]; then`,
+    `  cp ${logFile} ${archiveFile} 2>/dev/null && : > ${logFile}`,
+    "fi",
+    `if launchctl kickstart -k ${target} 2>/dev/null; then exit 0; fi`,
+    `launchctl bootstrap system ${plistDest} || exit 3`,
+    "exit 0",
+    ""
+  ].join("\n");
+  runSudoScript(script, {
+    action: "\u91CD\u542F\u4FDD\u6D3B",
+    file: "daemon-restart.sh",
+    codeMessages: { 3: "\u91CD\u542F\u4FDD\u6D3B\u5931\u8D25\uFF08launchctl bootstrap\uFF09" }
+  });
+  cleanupOldLogs();
 }
 
 // src/subscription.ts
 function isGithubUrl(url) {
-  return /github\.com|raw\.githubusercontent\.com/i.test(url);
+  const githubRe = /github\.com|raw\.githubusercontent\.com/i;
+  if (isMultiUrl(url)) {
+    return splitUrls(url).every((u) => githubRe.test(u));
+  }
+  return githubRe.test(url);
 }
 function getDefaultUpdateInterval(url) {
   return isGithubUrl(url) ? DEFAULT_UPDATE_INTERVAL_HOURS_GITHUB : DEFAULT_UPDATE_INTERVAL_HOURS;
@@ -4419,11 +4778,18 @@ function getDefaultUpdateInterval(url) {
 function resolveUpdateInterval(url, cachedInterval) {
   return cachedInterval && cachedInterval > 0 ? cachedInterval : getDefaultUpdateInterval(url);
 }
-var YAML_DUMP_OPTS = { indent: 2, lineWidth: -1, schema: CORE_SCHEMA };
 var HTTP_CLIENT = createHttpClient({ timeout: 6e4 });
 function isMultiUrl(url) {
   return url.includes(",");
 }
+function isValidHttpUrl(url) {
+  try {
+    const u = new URL(url.trim());
+    return u.protocol === "http:" || u.protocol === "https:";
+  } catch {
+    return false;
+  }
+}
 function splitUrls(url) {
   return url.split(",").map((u) => u.trim()).filter(Boolean);
 }
@@ -4443,7 +4809,7 @@ function saveSubscriptionConfig(subName, parsed) {
   normalizeProxyNamesBeforeSave(parsed);
   parsed.raw.proxies = parsed.proxies;
   parsed.raw["proxy-groups"] = parsed.proxyGroups;
-  saveSubscriptionRawConfig(subName, dump(parsed.raw, YAML_DUMP_OPTS));
+  saveSubscriptionRawConfig(subName, dumpYaml(parsed.raw));
 }
 function parseUserInfo(header) {
   if (!header) return null;
@@ -4539,7 +4905,7 @@ function pickSingleSubscription(subs, pattern) {
   for (const s of subs) console.log(`  ${s.name}`);
   process.exit(1);
 }
-async function downloadSubscription(url, subName = "default", signal) {
+async function downloadSubscription(url, subName = "default", signal, persist = true) {
   let response;
   try {
     response = await HTTP_CLIENT.get(url, { responseType: "text", signal });
@@ -4560,9 +4926,13 @@ async function downloadSubscription(url, subName = "default", signal) {
   }
   const parsed = parseYamlOrJson(content, "\u8BA2\u9605\u5185\u5BB9");
   if (!parsed) throw new Error("\u8BA2\u9605\u5185\u5BB9\u4E3A\u7A7A");
-  saveSubscriptionRawConfig(subName, content);
+  if (persist) {
+    saveSubscriptionRawConfig(subName, content);
+  }
   const meta = extractSubscriptionMeta(response.headers);
-  saveSubscriptionMeta(subName, meta);
+  if (persist) {
+    saveSubscriptionMeta(subName, meta);
+  }
   const proxies = parsed.proxies;
   const proxyGroups = parsed["proxy-groups"];
   return {
@@ -4574,13 +4944,16 @@ async function downloadSubscription(url, subName = "default", signal) {
     username: meta.username
   };
 }
-async function downloadMergedSubscription(urls, subName, signal) {
+async function downloadMergedSubscription(urls, subName, signal, persist = true) {
+  const internal = new AbortController();
+  const combinedSignal = signal ? AbortSignal.any([signal, internal.signal]) : internal.signal;
   const responses = await Promise.all(
     urls.map(async (url, index) => {
       try {
-        const response = await HTTP_CLIENT.get(url, { responseType: "text", signal });
+        const response = await HTTP_CLIENT.get(url, { responseType: "text", signal: combinedSignal });
         return { url, index, response, error: null };
       } catch (e) {
+        internal.abort();
         return { url, index, response: null, error: e };
       }
     })
@@ -4610,10 +4983,14 @@ async function downloadMergedSubscription(urls, subName, signal) {
     }
   }
   base.proxies = baseProxies;
-  const mergedContent = dump(base, YAML_DUMP_OPTS);
-  saveSubscriptionRawConfig(subName, mergedContent);
+  const mergedContent = dumpYaml(base);
+  if (persist) {
+    saveSubscriptionRawConfig(subName, mergedContent);
+  }
   const meta = extractSubscriptionMeta(responses[0].response?.headers);
-  saveSubscriptionMeta(subName, meta);
+  if (persist) {
+    saveSubscriptionMeta(subName, meta);
+  }
   const proxyGroups = base["proxy-groups"];
   return {
     proxies: baseProxies.length,
@@ -4629,7 +5006,8 @@ function prepareConfigForStart(mode, subName = "default") {
   if (!rawContent) {
     throw new Error(`\u672A\u627E\u5230\u8BA2\u9605\u914D\u7F6E "${subName}"\uFF0C\u8BF7\u5148\u6DFB\u52A0\u8BA2\u9605`);
   }
-  const buildResult = buildConfig(rawContent, mode);
+  const subUrl = getSubscriptions().find((s) => s.name === subName)?.url;
+  const buildResult = buildConfig(rawContent, mode, { subName, subUrl });
   if (buildResult.warnings.length > 0) {
     for (const warning of buildResult.warnings) {
       console.log(`${colors.yellow("\u81EA\u52A8\u4FEE\u590D:")} ${warning}`);
@@ -4688,16 +5066,23 @@ async function autoUpdateStaleSubscription(options = {}) {
   }
   const timeoutMs = options.timeout ?? DEFAULT_AUTO_UPDATE_TIMEOUT;
   const controller = new AbortController();
-  let results;
+  const results = [];
+  const updatePromise = Promise.all(
+    staleSubs.map(
+      (sub) => tryUpdateOne(sub, controller.signal).then((r) => {
+        results.push(r);
+        return r;
+      })
+    )
+  );
   try {
-    results = await withTimeout(Promise.all(staleSubs.map((sub) => tryUpdateOne(sub, controller.signal))), timeoutMs);
+    await withTimeout(updatePromise, timeoutMs);
   } catch (e) {
-    if (e instanceof TimeoutError) {
-      controller.abort();
-      console.log(colors.yellow(`\u81EA\u52A8\u66F4\u65B0\u8D85\u65F6 (${timeoutMs / 1e3}s)\uFF0C\u8DF3\u8FC7\u66F4\u65B0\uFF0C\u4F7F\u7528\u7F13\u5B58\u914D\u7F6E`));
-      return { total: staleSubs.length, updated: 0, failed: staleSubs.length };
-    }
-    throw e;
+    if (!(e instanceof TimeoutError)) throw e;
+    controller.abort();
+    await updatePromise.catch(() => {
+    });
+    console.log(colors.yellow(`\u81EA\u52A8\u66F4\u65B0\u8D85\u65F6 (${timeoutMs / 1e3}s)\uFF0C\u5DF2\u5B8C\u6210\u7684\u66F4\u65B0\u751F\u6548\uFF0C\u5176\u4F59\u4F7F\u7528\u7F13\u5B58\u914D\u7F6E`));
   }
   let updatedCount = 0;
   for (const r of results) {
@@ -4706,8 +5091,7 @@ async function autoUpdateStaleSubscription(options = {}) {
   }
   return { total: staleSubs.length, updated: updatedCount, failed: staleSubs.length - updatedCount };
 }
-var API_BASE = `http://${BASE_CONFIG["external-controller"]}`;
-async function testProxyDelay(proxyName, timeout, testUrl, client, apiBase = API_BASE) {
+async function testProxyDelay(proxyName, timeout, testUrl, client, apiBase = CONTROLLER_BASE_URL) {
   const encodedName = encodeURIComponent(proxyName);
   const url = `${apiBase}/proxies/${encodedName}/delay?timeout=${timeout}&url=${encodeURIComponent(testUrl)}`;
   try {
@@ -4729,7 +5113,13 @@ async function testProxyDelay(proxyName, timeout, testUrl, client, apiBase = API
   }
 }
 async function testSubscriptionProxies(subName, options = {}) {
-  const { timeout = DEFAULT_TEST_TIMEOUT, concurrency = DEFAULT_TEST_CONCURRENCY, testUrl = DEFAULT_TEST_URL, apiBase = API_BASE, onResult } = options;
+  const {
+    timeout = DEFAULT_TEST_TIMEOUT,
+    concurrency = DEFAULT_TEST_CONCURRENCY,
+    testUrl = DEFAULT_TEST_URL,
+    apiBase = CONTROLLER_BASE_URL,
+    onResult
+  } = options;
   const { proxies } = options.parsed || loadSubscriptionConfig(subName);
   if (proxies.length === 0) {
     return { total: 0, alive: 0, dead: 0, results: [] };
@@ -4775,6 +5165,19 @@ function normalizeProxyNamesBeforeSave(parsed) {
       group.proxies = group.proxies.map((name) => renameMap.get(name) || name);
     }
   }
+  const rules = parsed.raw.rules;
+  if (Array.isArray(rules)) {
+    parsed.raw.rules = rules.map((rule) => {
+      if (typeof rule !== "string") return rule;
+      const parts = rule.split(",");
+      if (parts.length < 2) return rule;
+      const targetIdx = parts[parts.length - 1].trim().toLowerCase() === "no-resolve" && parts.length >= 3 ? parts.length - 2 : parts.length - 1;
+      const target = parts[targetIdx].trim();
+      const renamed = renameMap.get(target);
+      if (renamed) parts[targetIdx] = renamed;
+      return parts.join(",");
+    });
+  }
   return renameMap.size;
 }
 function cleanDeadProxies(parsed, deadNames) {
@@ -4791,7 +5194,8 @@ function cleanDeadProxies(parsed, deadNames) {
       if (group.proxies.length < before) {
         updatedGroups++;
       }
-      if (group.proxies.length === 0) {
+      const hasOtherSource = group.use || group["include-all"] || group["include-all-proxies"];
+      if (group.proxies.length === 0 && !hasOtherSource) {
         removedGroupNames.add(group.name);
       }
     }
@@ -4803,13 +5207,14 @@ function cleanDeadProxies(parsed, deadNames) {
         group.proxies = group.proxies.filter((name) => !removedGroupNames.has(name));
       }
     }
+  }
+  const removedTargets = /* @__PURE__ */ new Set([...removedGroupNames, ...deadNames]);
+  if (removedTargets.size > 0) {
     const rules = parsed.raw.rules;
     if (Array.isArray(rules)) {
       parsed.raw.rules = rules.filter((rule) => {
         if (typeof rule !== "string") return true;
-        const parts = rule.split(",");
-        if (parts.length < 2) return true;
-        return !removedGroupNames.has(parts[parts.length - 1].trim());
+        return !removedTargets.has(getRuleTarget(rule));
       });
     }
   }
@@ -4904,6 +5309,8 @@ async function cmdDaemon(args) {
       console.error(`${colors.red("\u914D\u7F6E\u9519\u8BEF:")} ${e.message}`);
       process.exit(1);
     }
+    console.log(colors.gray("\u5C06\u8BF7\u6C42\u7BA1\u7406\u5458\u6743\u9650\u4EE5\u5B89\u88C5\u7CFB\u7EDF\u7EA7\u4FDD\u6D3B\u670D\u52A1\uFF08LaunchDaemon\uFF09"));
+    console.log(colors.gray("\u7CFB\u7EDF\u7EA7\u4FDD\u6D3B\u9700\u8981 root\uFF0C\u4EE5\u89E3\u51B3\u5C40\u57DF\u7F51\u8BBF\u95EE\u53D7\u9650\u95EE\u9898"));
     try {
       enableDaemon();
     } catch (e) {
@@ -4913,6 +5320,7 @@ async function cmdDaemon(args) {
     console.log(`${colors.green("\u5DF2\u542F\u7528\u4FDD\u6D3B")} \xB7 ${sub.name} \xB7 ${formatProxySummary(configInfo)}`);
     console.log(colors.gray("\u5F00\u673A\u81EA\u542F + \u5D29\u6E83\u81EA\u52A8\u91CD\u542F\uFF0C\u4EE3\u7406\u5C06\u5728\u540E\u53F0\u5E38\u9A7B"));
     console.log("");
+    await sleep(DAEMON_BOOT_WAIT_MS);
     printDaemonStatus();
     return;
   }
@@ -4923,6 +5331,7 @@ async function cmdDaemon(args) {
       printDaemonStatus();
       return;
     }
+    console.log(colors.gray("\u5C06\u8BF7\u6C42\u7BA1\u7406\u5458\u6743\u9650\u4EE5\u79FB\u9664\u7CFB\u7EDF\u7EA7\u4FDD\u6D3B\u670D\u52A1"));
     try {
       disableDaemon();
     } catch (e) {
@@ -5009,98 +5418,10 @@ function cmdDirectory(args) {
   console.log("");
 }
 
-// src/commands/help.ts
-function printShortHelp() {
-  console.log(`
-${colors.cyan(colors.bold(`mihomo-cli v${VERSION}`))}  (mihomo help \u67E5\u770B\u5B8C\u6574\u5E2E\u52A9)
-`);
-  console.log(
-    `\u5E38\u7528\u547D\u4EE4:
-  ${colors.bold("start")} [tun|mixed]    \u542F\u52A8/\u5207\u6362\u4EE3\u7406
-  ${colors.bold("sub")} [use|update]     \u8BA2\u9605\u7BA1\u7406
-  ${colors.bold("ow")} [on|off]          \u8986\u5199\u914D\u7F6E
-  ${colors.bold("ui")} [zash|dash|yacd]  \u6253\u5F00 Web UI
-`
-  );
-}
-function printHelp() {
-  console.log(
-    `
-${colors.cyan(colors.bold(`mihomo-cli v${VERSION}`))}
-
-\u547D\u4EE4\u522B\u540D: mihomo, mhm, mh
-
-\u7528\u6CD5:
-  mihomo <\u547D\u4EE4> [\u9009\u9879]
-
-${colors.cyan("\u63A7\u5236:")}
-  ${colors.bold("start")} [tun|mixed] [-s] [-u ms]     \u542F\u52A8/\u5207\u6362\u4EE3\u7406 (\u9ED8\u8BA4 mixed)
-        [-r N] [-t ms] [-j N]
-  ${colors.bold("stop")}                         \u505C\u6B62\u4EE3\u7406
-  ${colors.bold("status")}                       \u67E5\u770B\u72B6\u6001
-
-${colors.cyan("\u754C\u9762:")}
-  ${colors.bold("ui")} [zash|dash|yacd]          \u6253\u5F00 Web UI (\u9ED8\u8BA4 zash)
-  ${colors.bold("log")} [-o]                     \u5B9E\u65F6\u65E5\u5FD7\uFF08-o \u6253\u5F00\u6587\u4EF6\uFF09
-  ${colors.bold("logs")} [\u7F16\u53F7] [-n N] [-o]      \u65E5\u5FD7\u5217\u8868\uFF080=\u5F53\u524D\uFF0C1+=\u5F52\u6863\uFF09
-
-${colors.cyan("\u8BA2\u9605:")}
-  ${colors.bold("subscription")}                 \u5217\u51FA\u6240\u6709\u8BA2\u9605\uFF08\u522B\u540D sub\uFF09
-  ${colors.bold("subscription")} use <name>      \u5207\u6362\u5F53\u524D\u8BA2\u9605
-  ${colors.bold("subscription")} add <url> [name]  \u6DFB\u52A0\u8BA2\u9605
-  ${colors.bold("subscription")} update [name]   \u66F4\u65B0\u8BA2\u9605\uFF08\u65E0\u53C2\u66F4\u65B0\u6240\u6709\uFF09
-  ${colors.bold("subscription")} remove <name>   \u5220\u9664\u8BA2\u9605
-  ${colors.bold("subscription")} web [name]      \u6253\u5F00\u8BA2\u9605\u9875\u9762
-  ${colors.bold("subscription")} test [name]     \u6D4B\u8BD5\u8282\u70B9\u8FDE\u901A\u6027
-  ${colors.bold("subscription")} clean [name]    \u6D4B\u901F\u5E76\u6E05\u7406\u5931\u8D25\u8282\u70B9
-  ${colors.bold("test")} [-t ms] [-j N]           \u5FEB\u901F\u6D4B\u8BD5\u5F53\u524D\u8282\u70B9\u8FDE\u901A\u6027
-  ${colors.bold("clean")} [-t ms] [-j N] [-r N]   \u6E05\u7406\u5931\u8D25\u8282\u70B9\u5E76\u81EA\u52A8\u91CD\u542F
-
-${colors.cyan("\u914D\u7F6E:")}
-  ${colors.bold("overwrite")}                   \u67E5\u770B\u8986\u5199\u72B6\u6001\uFF08\u522B\u540D ow\uFF09
-  ${colors.bold("overwrite")} on|off            \u542F\u7528/\u7981\u7528\u8986\u5199\u914D\u7F6E
-  ${colors.bold("directory")}                   \u663E\u793A\u6570\u636E\u76EE\u5F55\u4F4D\u7F6E\uFF08\u522B\u540D dir\uFF09
-  ${colors.bold("directory")} open [target]     \u6253\u5F00\u76EE\u5F55: root|subs|logs|runtime|...
-
-${colors.cyan("\u7CFB\u7EDF:")}
-  ${colors.bold("kernel")} [--mirror [\u955C\u50CF]]         \u66F4\u65B0\u5185\u6838\uFF08\u9ED8\u8BA4\u76F4\u8FDE\uFF0C--mirror \u4F7F\u7528 v6\uFF09
-  ${colors.bold("daemon")} on|off               \u5F00\u673A\u81EA\u542F + \u5D29\u6E83\u91CD\u542F\uFF08\u4EC5 Mixed\uFF09
-  ${colors.bold("daemon")} status               \u67E5\u770B\u4FDD\u6D3B\u72B6\u6001
-  ${colors.bold("update")}                       \u66F4\u65B0 mihomo-cli (npm install -g)
-  ${colors.bold("reset")} [\u76EE\u6807...] [--full]   \u91CD\u7F6E: \u7559\u7A7A\u4FDD\u7559\u8BBE\u7F6E/\u5185\u6838/\u8986\u5199, \u6307\u5B9A\u76EE\u6807\u5220\u5BF9\u5E94\u9879, --full \u5220\u5168\u90E8
-  ${colors.bold("help")}, -h                     \u663E\u793A\u5E2E\u52A9
-  ${colors.bold("version")}, -v                  \u663E\u793A\u7248\u672C
-
-${colors.cyan("\u793A\u4F8B:")}
-  mihomo start              # \u542F\u52A8/\u91CD\u542F Mixed \u6A21\u5F0F
-  mihomo start tun          # \u5207\u6362\u5230 TUN \u900F\u660E\u4EE3\u7406\u6A21\u5F0F
-  mihomo start -s           # \u8DF3\u8FC7\u81EA\u52A8\u66F4\u65B0\u8BA2\u9605
-  mihomo start -u 30000     # \u81EA\u52A8\u66F4\u65B0\u8D85\u65F6 30 \u79D2 (\u9ED8\u8BA4 10s)
-  mihomo daemon on          # \u5F00\u542F\u4FDD\u6D3B\uFF08\u5F00\u673A\u81EA\u542F + \u5D29\u6E83\u91CD\u542F\uFF09
-  mihomo sub add <url>      # \u6DFB\u52A0\u8BA2\u9605 (sub \u662F subscription \u522B\u540D)
-  mihomo ui                 # \u6253\u5F00 Web UI
-
-${colors.cyan("\u6A21\u5F0F\u8BF4\u660E:")}
-  mixed  HTTP + SOCKS5 \u6DF7\u5408\u7AEF\u53E3 (\u9ED8\u8BA4)
-  tun    \u900F\u660E\u4EE3\u7406\uFF0C\u5168\u5C40\u81EA\u52A8\u8DEF\u7531\uFF0C\u9700\u8981 sudo
-
-${colors.cyan("\u6570\u636E\u76EE\u5F55:")}
-  \u73AF\u5883\u53D8\u91CF MIHOMO_CLI_DIR \u53EF\u81EA\u5B9A\u4E49\u4F4D\u7F6E
-  \u9ED8\u8BA4: ${USER_DATA_DIR}
-`
-  );
-}
-function printVersion() {
-  const kv = getKernelVersion() || "\u672A\u5B89\u88C5";
-  console.log(colors.cyan(colors.bold(`mihomo-cli v${VERSION}`)));
-  console.log(`${colors.gray("\u5185\u6838: ")}${kv}`);
-  console.log(`${colors.gray("\u6570\u636E\u76EE\u5F55: ")}${USER_DATA_DIR}`);
-}
-
 // src/kernel.ts
 import { spawnSync as spawnSync5 } from "child_process";
 import fs7 from "fs";
-import path5 from "path";
+import path6 from "path";
 
 // node_modules/compare-versions/lib/esm/utils.js
 var semver = /^[v^~<>=]*?(\d+)(?:\.([x*]|\d+)(?:\.([x*]|\d+)(?:\.([x*]|\d+))?(?:-([\da-z\-]+(?:\.[\da-z\-]+)*))?(?:\+[\da-z\-]+(?:\.[\da-z\-]+)*)?)?)?$/i;
@@ -5185,7 +5506,7 @@ function findMatchingAsset(assets, platform, arch) {
     const nameWithoutGz = a.name.slice(0, -3);
     const parts = nameWithoutGz.split("-");
     const lastPart = parts[parts.length - 1];
-    return /^v?\d+\.\d+\.\d+/.test(lastPart) && !nameWithoutGz.includes("-go");
+    return /^v?\d+\.\d+\.\d+/.test(lastPart) && !nameWithoutGz.includes("-go") && !nameWithoutGz.includes("-compatible");
   });
   return standardAsset || matchingAssets[0];
 }
@@ -5228,7 +5549,7 @@ function findBinaryInDir(dir, maxDepth = 4) {
   if (maxDepth <= 0) return null;
   const files = fs7.readdirSync(dir);
   for (const f of files) {
-    const fullPath = path5.join(dir, f);
+    const fullPath = path6.join(dir, f);
     const stat = fs7.statSync(fullPath);
     if (stat.isDirectory()) {
       const found = findBinaryInDir(fullPath, maxDepth - 1);
@@ -5255,7 +5576,7 @@ async function downloadKernel(progressCallback, mirror, releaseInfo) {
   \u5E73\u53F0: ${platform}, \u67B6\u6784: ${arch}${hint}`);
   }
   const downloadUrl = withMirror(asset.browser_download_url, mirror);
-  const tempPath = path5.join(DIRS.kernel, asset.name);
+  const tempPath = path6.join(DIRS.kernel, asset.name);
   const sizeMB = (asset.size / 1024 / 1024).toFixed(2);
   if (mirror && progressCallback) {
     progressCallback("\u63D0\u793A: \u7ECF\u7B2C\u4E09\u65B9\u955C\u50CF\u4E2D\u8F6C\u4E0B\u8F7D\uFF0C\u65E0\u6CD5\u9A8C\u8BC1\u6765\u6E90\u5B8C\u6574\u6027\uFF0C\u5EFA\u8BAE\u76F4\u8FDE\u6216\u81EA\u884C\u6821\u9A8C\u4EA7\u7269");
@@ -5268,6 +5589,12 @@ async function downloadKernel(progressCallback, mirror, releaseInfo) {
     ["-L", "--progress-bar", "--connect-timeout", "30", "--max-time", String(Math.floor(KERNEL_DOWNLOAD_TIMEOUT / 1e3)), "-o", tempPath, downloadUrl],
     { stdio: "inherit" }
   );
+  if (curlResult.error) {
+    if (curlResult.error.code === "ENOENT") {
+      throw new Error("\u672A\u627E\u5230 curl \u547D\u4EE4\uFF0C\u8BF7\u5148\u5B89\u88C5 curl \u540E\u91CD\u8BD5");
+    }
+    throw new Error(`\u4E0B\u8F7D\u5931\u8D25: ${curlResult.error.message}`);
+  }
   if (curlResult.status !== 0) {
     try {
       fs7.unlinkSync(tempPath);
@@ -5285,12 +5612,21 @@ async function downloadKernel(progressCallback, mirror, releaseInfo) {
   let extractedBinary = null;
   try {
     if (tempPath.endsWith(".tar.gz") || tempPath.endsWith(".tgz")) {
+      const listResult = spawnSync5("tar", ["-tzf", tempPath], { encoding: "utf8", timeout: 6e4 });
+      if (listResult.error) throw listResult.error;
+      if (listResult.status !== 0) throw new Error(`tar \u5217\u8868\u9000\u51FA\u7801 ${listResult.status}`);
+      const entries = (listResult.stdout || "").split("\n").filter(Boolean);
+      for (const entry of entries) {
+        if (entry.startsWith("/") || entry.split("/").includes("..")) {
+          throw new Error(`\u5F52\u6863\u542B\u975E\u6CD5\u8DEF\u5F84\u6761\u76EE: ${entry}`);
+        }
+      }
       const tarResult = spawnSync5("tar", ["-xzf", tempPath, "-C", extractPath], { stdio: ["ignore", "ignore", "inherit"], timeout: 6e4 });
       if (tarResult.error) throw tarResult.error;
       if (tarResult.status !== 0) throw new Error(`tar \u9000\u51FA\u7801 ${tarResult.status}`);
     } else if (tempPath.endsWith(".gz")) {
-      const baseName = path5.basename(tempPath, ".gz");
-      const outputPath = path5.join(extractPath, baseName);
+      const baseName = path6.basename(tempPath, ".gz");
+      const outputPath = path6.join(extractPath, baseName);
       const gzipResult = spawnSync5("gzip", ["-dc", tempPath], { maxBuffer: 256 * 1024 * 1024, timeout: 6e4 });
       if (gzipResult.error) throw gzipResult.error;
       if (gzipResult.status !== 0) throw new Error(`gzip \u9000\u51FA\u7801 ${gzipResult.status}`);
@@ -5357,20 +5693,8 @@ async function cmdKernel(args) {
   if (effectiveMirror) {
     const mirrorDesc = mirrorInfo.type === "all" ? " (API\u548C\u4E0B\u8F7D\u5747\u4F7F\u7528\u955C\u50CF)" : " (\u4E0B\u8F7D\u65F6\u4F7F\u7528\u955C\u50CF)";
     console.log(`\u955C\u50CF: ${effectiveMirror}${mirrorDesc}`);
+    console.log("");
   }
-  console.log("\n\u63D0\u793A: \u5982\u679C\u4E0B\u8F7D\u901F\u5EA6\u8FC7\u6162\u6216\u76F4\u8FDE\u5931\u8D25\uFF0C\u53EF\u4F7F\u7528 --mirror \u53C2\u6570\u901A\u8FC7\u955C\u50CF\u4E0B\u8F7D");
-  console.log("\n\u7528\u6CD5:");
-  console.log("  mihomo kernel                    # \u76F4\u8FDE");
-  console.log("  mihomo kernel --mirror           # \u4E0B\u8F7D\u4F7F\u7528\u9ED8\u8BA4\u955C\u50CF (v6.gh-proxy.org)");
-  console.log("  mihomo kernel --mirror hk.gh-proxy.org  # \u4E0B\u8F7D\u4F7F\u7528\u6307\u5B9A\u955C\u50CF");
-  console.log("  mihomo kernel --mirror-all       # API\u8BF7\u6C42\u548C\u4E0B\u8F7D\u90FD\u4F7F\u7528\u9ED8\u8BA4\u955C\u50CF");
-  console.log("  mihomo kernel --mirror-all hk.gh-proxy.org  # API\u548C\u4E0B\u8F7D\u90FD\u4F7F\u7528\u6307\u5B9A\u955C\u50CF");
-  console.log("\n\u53EF\u7528\u955C\u50CF:");
-  for (const m of AVAILABLE_MIRRORS) {
-    const isCurrent = effectiveMirror && (effectiveMirror.includes(`//${m}/`) || effectiveMirror.includes(`//${m}:`) || effectiveMirror.endsWith(`//${m}`));
-    console.log(`  ${m}${isCurrent ? " (\u5F53\u524D)" : ""}`);
-  }
-  console.log("");
   console.log("\u68C0\u67E5\u5185\u6838\u66F4\u65B0...");
   try {
     const apiMirror = mirrorInfo.type === "all" ? effectiveMirror : null;
@@ -5397,6 +5721,13 @@ async function cmdKernel(args) {
         console.error(`\u6587\u6863: ${err.response.data.documentation_url}`);
       }
     }
+    if (!effectiveMirror) {
+      console.error("");
+      console.error("\u63D0\u793A: \u76F4\u8FDE\u5931\u8D25\u6216\u4E0B\u8F7D\u8FC7\u6162\u65F6\u53EF\u4F7F\u7528\u955C\u50CF:");
+      console.error("  mihomo kernel --mirror [\u955C\u50CF]     # \u4E0B\u8F7D\u8D70\u955C\u50CF\uFF08\u9ED8\u8BA4 v6.gh-proxy.org\uFF09");
+      console.error("  mihomo kernel --mirror-all [\u955C\u50CF] # API \u548C\u4E0B\u8F7D\u90FD\u8D70\u955C\u50CF");
+      console.error(`  \u53EF\u7528\u955C\u50CF: ${AVAILABLE_MIRRORS.join(", ")}`);
+    }
     process.exit(1);
   }
 }
@@ -5486,19 +5817,116 @@ function cmdLogs(args) {
 // src/commands/overwrite.ts
 import path7 from "path";
 
+// src/runtime.ts
+function getRuntimeMode() {
+  if (isDaemonEnabled()) return "mixed";
+  return getConfigInfo()?.tun ? "tun" : "mixed";
+}
+function getRunningState() {
+  if (isDaemonEnabled()) {
+    const daemon = getDaemonStatus();
+    return { running: isDaemonRunning(daemon), pid: daemon.pid, daemon: true };
+  }
+  const status = getStatus();
+  return { running: status.running, pid: status.pid, daemon: false };
+}
+function isRestartNeededOnChange() {
+  return isDaemonEnabled() || getStatus().running;
+}
+async function launchOrRestart(mode) {
+  if (isDaemonEnabled()) {
+    await restartDaemon();
+    await sleep(DAEMON_BOOT_WAIT_MS);
+    return getDaemonStatus().pid;
+  }
+  const result = await start(mode);
+  return result.pid;
+}
+
+// src/progress.ts
+var IS_TTY = process.stdout.isTTY === true;
+var BAR_WIDTH = 20;
+function createProgressPrinter(totalRounds = 1) {
+  let alive = 0;
+  let dead = 0;
+  const resultMap = /* @__PURE__ */ new Map();
+  function render(done, total) {
+    if (!IS_TTY) return;
+    const pct = Math.round(done / total * 100);
+    const filled = Math.round(done / total * BAR_WIDTH);
+    const bar = "\u2588".repeat(filled) + "\u2591".repeat(BAR_WIDTH - filled);
+    process.stdout.write(`\r${bar} ${done}/${total} (${pct}%) | ${colors.green(`\u2713${alive}`)} ${colors.red(`\u2717${dead}`)}`);
+  }
+  return {
+    onResult(result, index, total, round = 1) {
+      if (resultMap.size === 0 && totalRounds > 1) {
+        console.log(`--- \u7B2C 1 \u8F6E\u6D4B\u8BD5 (${total} \u4E2A\u8282\u70B9) ---`);
+      }
+      const prev = resultMap.get(result.name);
+      if (prev) {
+        if (prev.result.delay !== null) alive--;
+        else dead--;
+      }
+      if (result.delay !== null) alive++;
+      else dead++;
+      resultMap.set(result.name, { result, round });
+      render(index + 1, total);
+    },
+    onRetryRound(round, count) {
+      if (IS_TTY) {
+        process.stdout.write("\n");
+      }
+      console.log(`--- \u7B2C ${round} \u8F6E\u91CD\u8BD5 (${count} \u4E2A\u8282\u70B9) ---`);
+      alive = 0;
+      dead = 0;
+    },
+    finish() {
+      if (IS_TTY) {
+        process.stdout.write("\n");
+      }
+      console.log("");
+      if (!IS_TTY) return;
+      const entries = [...resultMap.values()];
+      entries.sort((a, b) => a.result.name.localeCompare(b.result.name));
+      const total = entries.length;
+      console.log("\u8282\u70B9\u6700\u7EC8\u72B6\u6001:");
+      for (let i = 0; i < entries.length; i++) {
+        const { result, round } = entries[i];
+        const prefix = `[${i + 1}/${total}]`;
+        if (result.delay !== null) {
+          const delayColor = result.delay < 300 ? colors.green : result.delay < 800 ? colors.yellow : colors.red;
+          const retryNote = round > 1 ? colors.gray(` (\u7B2C${round}\u8F6E\u901A\u8FC7)`) : "";
+          console.log(`${prefix} ${colors.green("\u2713")} ${result.name} ${delayColor(`${result.delay}ms`)}${retryNote}`);
+        } else {
+          console.log(`${prefix} ${colors.red("\u2717")} ${result.name} ${colors.gray(result.error || "timeout")}`);
+        }
+      }
+      console.log("");
+    }
+  };
+}
+function formatCleanSummary(result) {
+  const parts = [`\u79FB\u9664 ${result.removedProxies} \u4E2A\u8282\u70B9`];
+  if (result.removedGroups > 0) parts.push(`\u5220\u9664 ${result.removedGroups} \u4E2A\u7A7A\u5206\u7EC4`);
+  if (result.updatedGroups > 0) parts.push(`\u66F4\u65B0 ${result.updatedGroups} \u4E2A\u5206\u7EC4`);
+  return parts.join(", ");
+}
+function formatTestSummary(summary) {
+  return `\u7ED3\u679C: ${colors.green(`${summary.alive} \u5B58\u6D3B`)} / ${colors.red(`${summary.dead} \u5931\u8D25`)} / ${summary.total} \u603B\u8BA1`;
+}
+
 // src/commands/status.ts
 function printStatus() {
   const status = getStatus();
-  const daemon = getDaemonStatus();
+  const state = getRunningState();
   const info = getConfigInfo();
   const overwriteEnabled = isOverwriteEnabled();
   const overwriteFiles = listOverwriteFile().files;
   const activeSub = getActiveSubscription();
-  const running = daemon.enabled ? isDaemonRunning(daemon) : status.running;
-  const pid = daemon.enabled ? daemon.pid : status.pid;
+  const { running, pid, daemon: daemonManaged } = state;
   console.log("");
   let modeLabel = "";
-  if (info && running) {
+  if (info) {
     modeLabel = colors.cyan(info.tun ? " (TUN)" : " (Mixed)");
   }
   const statusText = running ? colors.green("\u25CF \u8FD0\u884C\u4E2D") : colors.yellow("\u4E0D\u5728\u8FD0\u884C");
@@ -5506,12 +5934,15 @@ function printStatus() {
   console.log(`${colors.gray("\u5185\u6838: ")}${status.kernelVersion || "\u672A\u5B89\u88C5"}`);
   if (pid) {
     console.log(`${colors.gray("PID:  ")}${pid}`);
-    if (!daemon.enabled && status.processInfo) {
+    if (!daemonManaged && status.processInfo) {
       console.log(`${colors.gray("\u5185\u5B58: ")}${status.processInfo.memory}`);
     }
   }
   if (info) {
-    if (info.mixedPort) {
+    if (info.tun) {
+      const extra = info.mixedPort ? `\uFF0C\u53E6\u76D1\u542C ${info.mixedPort}` : "";
+      console.log(`${colors.gray("\u7AEF\u53E3: ")}TUN \u63A5\u7BA1${extra}`);
+    } else if (info.mixedPort) {
       console.log(`${colors.gray("\u7AEF\u53E3: ")}${info.mixedPort}`);
     } else {
       const ports = [];
@@ -5537,7 +5968,7 @@ function printStatus() {
   } else {
     console.log(`${colors.gray("\u8986\u5199: ")}${colors.yellow("\u5DF2\u7981\u7528")}`);
   }
-  if (daemon.enabled) {
+  if (isDaemonEnabled()) {
     console.log(`${colors.gray("\u4FDD\u6D3B: ")}${colors.green("\u5DF2\u542F\u7528")} ${colors.gray("(\u5F00\u673A\u81EA\u542F + \u5D29\u6E83\u91CD\u542F)")}`);
   }
   console.log("");
@@ -5557,7 +5988,7 @@ async function cmdStop() {
     console.log("\u76F4\u63A5\u505C\u6B62\u4F1A\u88AB\u81EA\u52A8\u91CD\u65B0\u62C9\u8D77\uFF0C\u8BF7\u7528: mihomo daemon off");
     return;
   }
-  const pids = getAllMihomoPids();
+  const pids = getMihomoPids();
   if (pids.length === 0) {
     console.log(colors.yellow("\u4E0D\u5728\u8FD0\u884C"));
     return;
@@ -5567,915 +5998,859 @@ async function cmdStop() {
   console.log(colors.green("\u5DF2\u505C\u6B62\u8FDB\u7A0B"));
 }
 
-// src/test-instance.ts
-import { spawn as spawn2 } from "child_process";
-import fs8 from "fs";
-import path6 from "path";
-
-// src/lifecycle.ts
-var cleanupFns = /* @__PURE__ */ new Set();
-function registerCleanup(fn) {
-  cleanupFns.add(fn);
-  return () => {
-    cleanupFns.delete(fn);
-  };
-}
-function runCleanup() {
-  for (const fn of cleanupFns) {
-    try {
-      fn();
-    } catch {
-    }
+// src/commands/start.ts
+async function cmdStart(args) {
+  if (!hasKernel()) {
+    console.error('\u9519\u8BEF: \u672A\u627E\u5230\u5185\u6838\uFF0C\u8BF7\u8FD0\u884C "mihomo kernel"');
+    process.exit(1);
   }
-  cleanupFns.clear();
-}
-
-// src/test-instance.ts
-var TEST_DIR = path6.join(USER_DATA_DIR, "test");
-var TEST_DIRS = {
-  data: path6.join(TEST_DIR, "data"),
-  runtime: path6.join(TEST_DIR, "runtime")
-};
-var TEST_PATHS = {
-  configFile: path6.join(TEST_DIRS.runtime, "config.yaml"),
-  pidFile: path6.join(TEST_DIRS.runtime, "pid"),
-  logFile: path6.join(TEST_DIR, "test.log")
-};
-var TEST_API = `http://${TEST_CONFIG["external-controller"]}`;
-function ensureTestDirs() {
-  for (const dir of Object.values(TEST_DIRS)) {
-    fs8.mkdirSync(dir, { recursive: true, mode: 448 });
+  const targetMode = args[1] === "tun" ? "tun" : "mixed";
+  const daemonEnabled = isDaemonEnabled();
+  if (targetMode === "tun" && daemonEnabled) {
+    console.error(`${colors.red("\u9519\u8BEF:")} \u4FDD\u6D3B\u5DF2\u542F\u7528\uFF08\u4EC5\u652F\u6301 Mixed \u6A21\u5F0F\uFF09\uFF0C\u65E0\u6CD5\u542F\u52A8 TUN`);
+    console.error("\u8BF7\u5148\u5173\u95ED\u4FDD\u6D3B: mihomo daemon off");
+    process.exit(1);
   }
-}
-function cleanupTestDir() {
-  rmrf(TEST_DIR);
-}
-function buildTestConfig(subName) {
-  ensureTestDirs();
-  const rawContent = readSubscriptionRawConfig(subName);
-  if (!rawContent) {
-    throw new Error(`\u672A\u627E\u5230\u8BA2\u9605\u914D\u7F6E "${subName}"`);
+  const rounds = parseIntArg(args, "-r", "--rounds", DEFAULT_CLEAN_ROUNDS);
+  const timeout = parseIntArg(args, "-t", "--timeout", DEFAULT_TEST_TIMEOUT);
+  const concurrency = parseIntArg(args, "-j", "--concurrency", DEFAULT_TEST_CONCURRENCY);
+  const skipUpdate = hasFlag(args, "-s", "--no-update");
+  const skipClean = hasFlag(args, "--no-clean");
+  const updateTimeout = parseIntArg(args, "-u", "--update-timeout", DEFAULT_AUTO_UPDATE_TIMEOUT);
+  const sub = getActiveSubscription();
+  if (!sub) {
+    console.error("\u9519\u8BEF: \u6CA1\u6709\u8BA2\u9605\uFF0C\u8BF7\u5148\u6DFB\u52A0\u8BA2\u9605");
+    process.exit(1);
   }
-  const parsed = parseYamlOrJson(rawContent, "\u8BA2\u9605\u5185\u5BB9");
-  const proxies = (parsed.proxies || []).filter(isProxyValid);
-  if (proxies.length === 0) {
-    throw new Error(`\u8BA2\u9605 "${subName}" \u6CA1\u6709\u6709\u6548\u8282\u70B9`);
+  if (!skipUpdate) {
+    await autoUpdateStaleSubscription({ timeout: updateTimeout });
   }
-  const nameCount = /* @__PURE__ */ new Map();
-  for (const proxy of proxies) {
-    const count = (nameCount.get(proxy.name) || 0) + 1;
-    nameCount.set(proxy.name, count);
-    if (count > 1) {
-      proxy.name = `${proxy.name} #${count}`;
-    }
-  }
-  const config = {
-    ...TEST_CONFIG,
-    proxies,
-    "proxy-groups": [
-      {
-        name: "PROXY",
-        type: "select",
-        proxies: proxies.map((p) => p.name)
-      }
-    ],
-    rules: ["MATCH,PROXY"]
-  };
-  const content = dump(config, { indent: 2, lineWidth: -1, schema: CORE_SCHEMA });
-  fs8.writeFileSync(TEST_PATHS.configFile, content, { mode: 384 });
-}
-async function startTestInstance() {
-  const binary = PATHS.mihomoBinary;
-  if (!fs8.existsSync(binary)) throw new Error("\u672A\u627E\u5230 mihomo \u5185\u6838");
-  stopTestInstance();
-  const logFd = fs8.openSync(TEST_PATHS.logFile, "a");
-  const child = spawn2(binary, ["-d", TEST_DIRS.data, "-f", TEST_PATHS.configFile], {
-    detached: true,
-    stdio: ["ignore", logFd, logFd]
-  });
-  fs8.closeSync(logFd);
-  child.unref();
-  const pid = child.pid;
-  fs8.writeFileSync(TEST_PATHS.pidFile, pid.toString(), { mode: 384 });
-  const client = createHttpClient({ timeout: 2e3 });
-  let ready = false;
-  for (let i = 0; i < 60; i++) {
-    if (!isProcessRunning(pid)) break;
-    try {
-      await client.get(`${TEST_API}/version`);
-      ready = true;
-      break;
-    } catch {
-      await sleep(500);
+  if (!daemonEnabled) {
+    if (hasRootResidue()) {
+      console.error(`${colors.red("\u9519\u8BEF:")} \u5B58\u5728\u9700\u8981 root \u6743\u9650\u6E05\u7406\u7684\u6B8B\u7559\u8FDB\u7A0B/\u6587\u4EF6`);
+      console.error(`\u8BF7\u5148\u624B\u52A8\u6E05\u7406: sudo pkill -9 mihomo && sudo rm -f ${PATHS.pidFile}`);
+      console.error("\u6216\u5207\u6362\u5230 TUN \u6A21\u5F0F\u542F\u52A8\uFF08\u81EA\u52A8\u6E05\u7406\uFF09: mihomo start tun");
+      process.exit(1);
     }
-  }
-  if (!isProcessRunning(pid)) {
-    let errorDetail = "";
-    try {
-      errorDetail = fs8.readFileSync(TEST_PATHS.logFile, "utf8").slice(-1e3);
-    } catch {
+    const status = getStatus();
+    const hasProcess = status.running || status.allProcesses.length > 0;
+    if (hasProcess) {
+      const count = status.allProcesses.length > 0 ? status.allProcesses.length : 1;
+      console.log(`\u505C\u6B62 ${count} \u4E2A\u8FDB\u7A0B...`);
     }
-    throw new Error(`\u6D4B\u8BD5\u5B9E\u4F8B\u542F\u52A8\u5931\u8D25${errorDetail ? `
-${errorDetail}` : ""}`);
-  }
-  if (!ready) {
-    throw new Error("\u6D4B\u8BD5\u5B9E\u4F8B\u542F\u52A8\u8D85\u65F6\uFF0CAPI \u672A\u54CD\u5E94");
-  }
-}
-function stopTestInstance() {
-  let pid;
-  try {
-    pid = parseInt(fs8.readFileSync(TEST_PATHS.pidFile, "utf8").trim(), 10);
-  } catch {
-    return;
-  }
-  if (pid > 0 && isProcessRunning(pid)) {
-    process.kill(pid, "SIGKILL");
-    for (let i = 0; i < 20; i++) {
-      if (!isProcessRunning(pid)) break;
-      sleepSync(100);
+    handleStopResult(stop());
+    if (hasProcess) {
+      console.log(`${colors.green("\u5DF2\u505C\u6B62\u8FDB\u7A0B")}
+`);
     }
   }
+  let configInfo;
   try {
-    fs8.unlinkSync(TEST_PATHS.pidFile);
-  } catch {
+    configInfo = prepareConfigForStart(targetMode, sub.name);
+  } catch (e) {
+    console.error(`${colors.red("\u914D\u7F6E\u9519\u8BEF:")} ${e.message}`);
+    process.exit(1);
   }
-}
-async function withTestInstance(subName, fn) {
-  cleanupTestDir();
-  buildTestConfig(subName);
-  const unregister = registerCleanup(() => {
-    stopTestInstance();
-    cleanupTestDir();
-  });
+  const modeLabel = targetMode === "tun" ? "TUN" : "Mixed";
+  console.log([colors.cyan(modeLabel), sub.name, formatProxySummary(configInfo)].join(" \xB7 "));
   try {
-    await startTestInstance();
-    return await fn(TEST_API);
-  } finally {
-    unregister();
-    stopTestInstance();
-    cleanupTestDir();
-  }
-}
-
-// src/commands/subscription.ts
-var IS_TTY = process.stdout.isTTY === true;
-var BAR_WIDTH = 20;
-function createProgressPrinter(totalRounds = 1) {
-  let alive = 0;
-  let dead = 0;
-  const resultMap = /* @__PURE__ */ new Map();
-  function render(done, total) {
-    if (!IS_TTY) return;
-    const pct = Math.round(done / total * 100);
-    const filled = Math.round(done / total * BAR_WIDTH);
-    const bar = "\u2588".repeat(filled) + "\u2591".repeat(BAR_WIDTH - filled);
-    process.stdout.write(`\r${bar} ${done}/${total} (${pct}%) | ${colors.green(`\u2713${alive}`)} ${colors.red(`\u2717${dead}`)}`);
+    const pid = await launchOrRestart(targetMode);
+    const label = daemonEnabled ? "\u5DF2\u542F\u52A8 (\u4FDD\u6D3B)" : "\u5DF2\u542F\u52A8";
+    console.log(`${colors.green(label)}${pid ? ` (PID ${pid})` : ""}`);
+  } catch (e) {
+    const msg = e.message;
+    const lines = msg.split("\n");
+    console.error(`${colors.red("\u542F\u52A8\u5931\u8D25:")} ${lines[0]}`);
+    if (lines.length > 1) {
+      for (const line of lines.slice(1)) console.error(line);
+    }
+    process.exit(1);
   }
-  return {
-    onResult(result, index, total, round = 1) {
-      if (resultMap.size === 0 && totalRounds > 1) {
-        console.log(`--- \u7B2C 1 \u8F6E\u6D4B\u8BD5 (${total} \u4E2A\u8282\u70B9) ---`);
-      }
-      if (result.delay !== null) alive++;
-      else dead++;
-      resultMap.set(result.name, { result, round });
-      render(index + 1, total);
-    },
-    onRetryRound(round, count) {
-      if (IS_TTY) {
-        process.stdout.write("\n");
-      }
-      console.log(`--- \u7B2C ${round} \u8F6E\u91CD\u8BD5 (${count} \u4E2A\u8282\u70B9) ---`);
-      alive = 0;
-      dead = 0;
-    },
-    finish() {
-      if (IS_TTY) {
-        process.stdout.write("\n");
-      }
+  const cleanThreshold = isGithubUrl(sub.url) ? AUTO_CLEAN_THRESHOLD_GITHUB : AUTO_CLEAN_THRESHOLD;
+  if (!skipClean && configInfo.proxies > cleanThreshold) {
+    const cache = readSubscriptionCache();
+    const lastCleanAt = cache[sub.name]?.last_auto_clean_at;
+    const withinCooldown = !!lastCleanAt && Date.now() - new Date(lastCleanAt).getTime() < AUTO_CLEAN_COOLDOWN_HOURS * 60 * 60 * 1e3;
+    if (!withinCooldown) {
       console.log("");
-      const entries = [...resultMap.values()];
-      entries.sort((a, b) => a.result.name.localeCompare(b.result.name));
-      const total = entries.length;
-      console.log("\u8282\u70B9\u6700\u7EC8\u72B6\u6001:");
-      for (let i = 0; i < entries.length; i++) {
-        const { result, round } = entries[i];
-        const prefix = `[${i + 1}/${total}]`;
-        if (result.delay !== null) {
-          const delayColor = result.delay < 300 ? colors.green : result.delay < 800 ? colors.yellow : colors.red;
-          const retryNote = round > 1 ? colors.gray(` (\u7B2C${round}\u8F6E\u901A\u8FC7)`) : "";
-          console.log(`${prefix} ${colors.green("\u2713")} ${result.name} ${delayColor(`${result.delay}ms`)}${retryNote}`);
-        } else {
-          console.log(`${prefix} ${colors.red("\u2717")} ${result.name} ${colors.gray(result.error || "timeout")}`);
+      console.log(`\u8282\u70B9\u6570 ${configInfo.proxies} \u8D85\u8FC7 ${cleanThreshold}\uFF0C\u81EA\u52A8\u6E05\u7406\uFF08${AUTO_CLEAN_COOLDOWN_HOURS}h \u5185\u4EC5\u4E00\u6B21\uFF0C--no-clean \u8DF3\u8FC7\uFF09...`);
+      console.log("");
+      await sleep(1e3);
+      const progress = createProgressPrinter(rounds);
+      const cleanResult = await autoCleanSubscription(sub.name, {
+        timeout,
+        concurrency,
+        rounds,
+        onResult: progress.onResult,
+        onRetryRound: progress.onRetryRound
+      });
+      progress.finish();
+      console.log(formatTestSummary(cleanResult.summary));
+      if (cleanResult.skipped) {
+        console.log(colors.yellow("\u5B58\u6D3B\u8282\u70B9\u4E0D\u8DB3 1%\uFF0C\u8DF3\u8FC7\u6E05\u7406\u3002\u8BF7\u68C0\u67E5\u539F\u59CB\u8BA2\u9605\u662F\u5426\u6709\u6548"));
+      } else if (cleanResult.removedProxies > 0) {
+        console.log(`${colors.green("\u5DF2\u6E05\u7406")}: ${formatCleanSummary(cleanResult)}`);
+        console.log("");
+        console.log("\u91CD\u65B0\u52A0\u8F7D\u914D\u7F6E...");
+        if (!daemonEnabled) handleStopResult(stop());
+        try {
+          configInfo = prepareConfigForStart(targetMode, sub.name);
+          const pid = await launchOrRestart(targetMode);
+          console.log(`${colors.green("\u5DF2\u91CD\u542F")}${pid ? ` (PID ${pid})` : ""} \xB7 ${formatProxySummary(configInfo)}`);
+        } catch (e) {
+          console.error(`${colors.red("\u91CD\u542F\u5931\u8D25:")} ${e.message.split("\n")[0]}`);
+          process.exit(1);
         }
       }
-      console.log("");
+      saveSubscriptionCache(sub.name, { last_auto_clean_at: (/* @__PURE__ */ new Date()).toISOString() });
     }
-  };
-}
-function formatCleanSummary(result) {
-  const parts = [`\u79FB\u9664 ${result.removedProxies} \u4E2A\u8282\u70B9`];
-  if (result.removedGroups > 0) parts.push(`\u5220\u9664 ${result.removedGroups} \u4E2A\u7A7A\u5206\u7EC4`);
-  if (result.updatedGroups > 0) parts.push(`\u66F4\u65B0 ${result.updatedGroups} \u4E2A\u5206\u7EC4`);
-  return parts.join(", ");
-}
-function formatTestSummary(summary) {
-  return `\u7ED3\u679C: ${colors.green(`${summary.alive} \u5B58\u6D3B`)} / ${colors.red(`${summary.dead} \u5931\u8D25`)} / ${summary.total} \u603B\u8BA1`;
-}
-function githubRepoUrl(rawUrl) {
-  const match = rawUrl.match(/raw\.githubusercontent\.com\/([^/]+\/[^/]+)/);
-  if (match) return `https://github.com/${match[1]}`;
-  return null;
-}
-function resolveTestTarget(args) {
-  const subs = getSubscriptions();
-  if (subs.length === 0) {
-    console.error("\u9519\u8BEF: \u6CA1\u6709\u8BA2\u9605");
-    process.exit(1);
-  }
-  const nameArg = getNonFlagArg(args, 2);
-  const timeout = parseIntArg(args, "-t", "--timeout", DEFAULT_TEST_TIMEOUT);
-  const concurrency = parseIntArg(args, "-j", "--concurrency", DEFAULT_TEST_CONCURRENCY);
-  let target;
-  if (nameArg) {
-    const matches = findSubscriptionFuzzy(subs, nameArg);
-    target = pickSingleSubscription(matches, nameArg);
-  } else {
-    const activeSub = getActiveSubscription();
-    if (!activeSub) {
-      console.error("\u9519\u8BEF: \u6CA1\u6709\u6D3B\u8DC3\u8BA2\u9605\uFF0C\u8BF7\u6307\u5B9A\u8BA2\u9605\u540D\u79F0");
-      process.exit(1);
-    }
-    target = activeSub;
   }
-  return { target, timeout, concurrency };
+  printStatus();
 }
-async function printSubscriptionList(options) {
-  if (options?.autoUpdate !== false) {
-    const updateResult = await autoUpdateStaleSubscription();
-    if (updateResult.total > 0) console.log("");
-  }
-  const subs = getSubscriptionsWithCache();
-  if (subs.length === 0) {
-    console.log("\u6CA1\u6709\u8BA2\u9605");
+
+// src/commands/overwrite.ts
+function printOverwriteList() {
+  const info = listOverwriteFile();
+  const statusText = info.enabled ? colors.green("\u5DF2\u542F\u7528") : colors.yellow("\u5DF2\u7981\u7528");
+  console.log(`${colors.gray("\u72B6\u6001: ")}${statusText}`);
+  console.log(`${colors.gray("\u4F4D\u7F6E: ")}${info.dir}`);
+  console.log("");
+  if (info.files.length === 0) {
+    console.log("\u6682\u65E0\u8986\u5199\u6587\u4EF6");
     console.log("");
-    console.log("\u6DFB\u52A0\u8BA2\u9605: mihomo sub add <url> [name]");
+    console.log(`\u7528\u6CD5\u793A\u4F8B: \u521B\u5EFA\u6587\u4EF6 ${path7.join(info.dir, "overwrite.yaml")}`);
+    console.log(`         \u6216        ${path7.join(info.dir, "overwrite.dns.yaml")}`);
     console.log("");
-    return;
-  }
-  const activeSub = getActiveSubscription();
-  console.log(colors.cyan("\u8BA2\u9605\u5217\u8868:"));
-  subs.forEach((s, i) => {
-    const time = formatDate(s.updated_at);
-    const defaultMark = activeSub && s.name === activeSub.name ? colors.green(" [\u4F7F\u7528\u4E2D]") : "";
-    const mergeBadge = isMultiUrl(s.url) ? colors.cyan(` [\u5408\u5E76 ${splitUrls(s.url).length} \u6E90]`) : "";
-    const interval = resolveUpdateInterval(s.url, s.update_interval);
-    console.log(`  ${i + 1}. ${s.name}${defaultMark}${mergeBadge}`);
-    console.log(`    ${colors.gray("\u66F4\u65B0: ")}${time} (\u95F4\u9694: ${interval}h)`);
-    if (s.username) {
-      console.log(`    ${colors.gray("\u7528\u6237: ")}${s.username}`);
-    }
-    if (s.download !== void 0 || s.total !== void 0) {
-      const used = (s.upload || 0) + (s.download || 0);
-      const usedStr = formatBytes(used);
-      const totalStr = formatBytes(s.total);
-      let percentStr = "";
-      if (s.total && s.total > 0) {
-        const percent = Math.min(used / s.total * 100, 100);
-        percentStr = ` (${percent.toFixed(1)}%)`;
-      }
-      console.log(`    ${colors.gray("\u6D41\u91CF: ")}${usedStr} / ${totalStr}${percentStr}`);
-    }
-    if (s.expire !== void 0) {
-      console.log(`    ${colors.gray("\u5230\u671F: ")}${formatTimestamp(s.expire)}`);
-    }
-    if (s.web_page_url) {
-      console.log(`    ${colors.gray("\u9875\u9762: ")}${s.web_page_url}`);
-    }
-  });
-  console.log("");
-  console.log("\u5207\u6362\u8BA2\u9605: mihomo sub use <name>");
-  console.log("\u65B0\u589E\u8BA2\u9605: mihomo sub add <url> [name]");
-  console.log("\u66F4\u65B0\u8BA2\u9605: mihomo sub update [name]");
-  console.log("\u5220\u9664\u8BA2\u9605: mihomo sub remove <name>");
-  console.log("\u6D4B\u8BD5\u8282\u70B9: mihomo sub test [name]");
-  console.log("\u6E05\u7406\u8282\u70B9: mihomo sub clean [name]");
-  console.log("\u6253\u5F00\u9875\u9762: mihomo sub web [name]");
-  console.log("");
-}
-async function cmdSubscription(args) {
-  const action = args[1];
-  if (!action || action === "list") {
-    await printSubscriptionList();
-    return;
-  }
-  if (action === "add") {
-    const url = args[2];
-    const name = args[3] || "default";
-    if (!url) {
-      console.error("\u9519\u8BEF: \u8BF7\u63D0\u4F9B\u6709\u6548\u7684\u8BA2\u9605 URL");
-      process.exit(1);
-    }
-    if (isMultiUrl(url)) {
-      const urls = splitUrls(url);
-      for (const u of urls) {
-        if (!u.startsWith("http")) {
-          console.error(`\u9519\u8BEF: \u65E0\u6548\u7684 URL: ${u}`);
-          process.exit(1);
-        }
-      }
-      console.log(`\u6DFB\u52A0\u5408\u5E76\u8BA2\u9605: ${name} (${urls.length} \u4E2A\u6E90)`);
-      try {
-        addSubscription(url, name);
-        setDefaultSubscription(name);
-        const info = await downloadMergedSubscription(urls, name);
-        console.log(`\u5DF2\u6DFB\u52A0\u5E76\u5207\u6362\u5230 "${name}" (${formatProxySummary(info)}, \u5408\u5E76 ${urls.length} \u6E90)`);
-      } catch (e) {
-        console.error(`\u6DFB\u52A0\u5931\u8D25: ${e.message}`);
-        process.exit(1);
-      }
-    } else {
-      if (!url.startsWith("http")) {
-        console.error("\u9519\u8BEF: \u8BF7\u63D0\u4F9B\u6709\u6548\u7684\u8BA2\u9605 URL");
-        process.exit(1);
+  } else {
+    console.log(`${colors.cyan("\u8986\u5199\u6587\u4EF6")} (${info.files.length} \u4E2A\uFF0C\u6309\u987A\u5E8F\u52A0\u8F7D):`);
+    console.log("");
+    info.files.forEach((f, i) => {
+      const num = i < 10 ? ` ${i}` : `${i}`;
+      console.log(`  ${num}. ${f.name}`);
+      if (f.scope) {
+        console.log(`    ${colors.gray("\u4F5C\u7528\u57DF: ")}${f.scope}`);
       }
-      console.log(`\u6DFB\u52A0\u8BA2\u9605: ${name}`);
-      try {
-        addSubscription(url, name);
-        setDefaultSubscription(name);
-        const info = await downloadSubscription(url, name);
-        const repoUrl = githubRepoUrl(url);
-        if (repoUrl) saveSubscriptionCache(name, { web_page_url: repoUrl });
-        console.log(`\u5DF2\u6DFB\u52A0\u5E76\u5207\u6362\u5230 "${name}" (${formatProxySummary(info)})`);
-      } catch (e) {
-        console.error(`\u6DFB\u52A0\u5931\u8D25: ${e.message}`);
-        process.exit(1);
+      if (f.keys.length > 0) {
+        console.log(`    ${colors.gray("\u5B57\u6BB5: ")}${f.keys.join(", ")}`);
       }
-    }
+    });
     console.log("");
-    await printSubscriptionList();
-    return;
   }
-  if (action === "update") {
-    const name = args[2];
-    const subs = getSubscriptions();
-    if (subs.length === 0) {
-      console.error("\u9519\u8BEF: \u6CA1\u6709\u8BA2\u9605");
-      process.exit(1);
-    }
-    if (!name) {
-      console.log(`\u66F4\u65B0\u6240\u6709 ${subs.length} \u4E2A\u8BA2\u9605...`);
-      const results = await Promise.all(subs.map((sub) => tryUpdateOne(sub)));
-      let ok = 0;
-      for (const r of results) {
-        if (r.success) ok++;
-        printUpdateResult(r);
-      }
-      if (ok === 0) process.exit(1);
+  console.log("\u542F\u7528\u8986\u5199: mihomo ow on");
+  console.log("\u7981\u7528\u8986\u5199: mihomo ow off");
+  console.log("");
+}
+async function cmdOverwrite(args) {
+  const action = args?.[1];
+  const currentMode = getRuntimeMode();
+  const restartNeeded = isRestartNeededOnChange();
+  if (action === "on" || action === "enable") {
+    if (isOverwriteEnabled()) {
+      console.log("\u8986\u5199\u914D\u7F6E\u5DF2\u662F\u542F\u7528\u72B6\u6001");
       console.log("");
-      await printSubscriptionList();
+      printOverwriteList();
       return;
     }
-    const matches = findSubscriptionFuzzy(subs, name);
-    const target = pickSingleSubscription(matches, name);
-    console.log(`\u66F4\u65B0\u8BA2\u9605: ${target.name}`);
-    const result = await tryUpdateOne(target);
-    if (!result.success) {
-      console.error(`\u66F4\u65B0\u5931\u8D25: ${(result.error || "").split("\n")[0]}`);
-      process.exit(1);
+    setOverwriteEnabled(true);
+    console.log("\u5DF2\u542F\u7528\u8986\u5199\u914D\u7F6E");
+    if (restartNeeded) {
+      console.log("");
+      await cmdStart(["start", currentMode, ...extractStartOptions(args)]);
+      return;
     }
-    console.log(`\u5DF2\u66F4\u65B0 (${formatProxySummary(result)})`);
     console.log("");
-    await printSubscriptionList();
+    printOverwriteList();
     return;
   }
-  if (action === "use") {
-    const name = args[2];
-    const subs = getSubscriptions();
-    if (!name) {
-      console.error("\u9519\u8BEF: \u8BF7\u6307\u5B9A\u8BA2\u9605\u540D\u79F0");
-      if (subs.length > 0) {
-        console.log("\n\u53EF\u7528\u8BA2\u9605:");
-        for (const s of subs) console.log(`  ${s.name}`);
-      }
-      process.exit(1);
-    }
-    const matches = findSubscriptionFuzzy(subs, name);
-    const target = pickSingleSubscription(matches, name);
-    const currentDefault = getActiveSubscription();
-    const isAlreadyDefault = currentDefault && currentDefault.name === target.name;
-    if (isAlreadyDefault) {
-      console.log(`"${target.name}" \u5DF2\u662F\u5F53\u524D\u4F7F\u7528\u7684\u8BA2\u9605`);
+  if (action === "off" || action === "disable") {
+    if (!isOverwriteEnabled()) {
+      console.log("\u8986\u5199\u914D\u7F6E\u5DF2\u662F\u7981\u7528\u72B6\u6001");
       console.log("");
-      await printSubscriptionList();
+      printOverwriteList();
       return;
     }
-    const status = getStatus();
-    const configInfo = getConfigInfo();
-    const currentMode = isDaemonEnabled() ? "mixed" : configInfo?.tun ? "tun" : "mixed";
-    const success = setDefaultSubscription(target.name);
-    if (success) {
-      console.log(`\u5DF2\u5207\u6362\u5230 "${target.name}"`);
-    } else {
-      console.error(`\u9519\u8BEF: \u672A\u627E\u5230\u8BA2\u9605 "${name}"`);
-      process.exit(1);
-    }
-    if (status.running || isDaemonEnabled()) {
+    setOverwriteEnabled(false);
+    console.log("\u5DF2\u7981\u7528\u8986\u5199\u914D\u7F6E");
+    if (restartNeeded) {
       console.log("");
-      await cmdStart(["start", currentMode]);
+      await cmdStart(["start", currentMode, ...extractStartOptions(args)]);
       return;
     }
     console.log("");
-    await printSubscriptionList();
+    printOverwriteList();
     return;
   }
-  if (action === "web" || action === "open") {
-    const name = args[2];
-    const subs = getSubscriptionsWithCache();
-    if (subs.length === 0) {
-      console.error("\u9519\u8BEF: \u6CA1\u6709\u8BA2\u9605");
+  console.log("");
+  printOverwriteList();
+}
+
+// src/commands/reset.ts
+import fs8 from "fs";
+import readline from "readline";
+var RESET_TARGETS = [
+  {
+    id: "subs",
+    aliases: ["sub", "subs", "subscription", "subscriptions"],
+    label: "\u8BA2\u9605",
+    paths: () => [DIRS.subscriptions],
+    needsStop: true,
+    // 同步清空 settings 里的订阅列表：只删缓存文件会留下"列表存在但无配置"的半重置状态
+    // （start 会报"未找到订阅配置"）。active_subscription 一并清除
+    onAfter: () => writeSettings({ subscriptions: void 0, active_subscription: void 0 })
+  },
+  {
+    id: "logs",
+    aliases: ["log", "logs"],
+    label: "\u65E5\u5FD7",
+    paths: () => [DIRS.logs],
+    needsStop: false
+  },
+  {
+    id: "data",
+    aliases: ["data"],
+    label: "\u8FD0\u884C\u6570\u636E",
+    paths: () => [DIRS.data],
+    needsStop: true
+  },
+  {
+    id: "runtime",
+    aliases: ["runtime"],
+    label: "\u8FD0\u884C\u65F6",
+    paths: () => [DIRS.runtime],
+    needsStop: true
+  },
+  {
+    id: "settings",
+    aliases: ["setting", "settings", "config"],
+    label: "\u8BBE\u7F6E",
+    paths: () => [PATHS.settingsFile],
+    needsStop: false
+  },
+  {
+    id: "kernel",
+    aliases: ["kernel", "core"],
+    label: "\u5185\u6838",
+    paths: () => [DIRS.kernel],
+    needsStop: false,
+    onAfter: () => clearKernelVersionCache(),
+    checkEmpty: () => !hasKernel(),
+    emptyMsg: "\u5185\u6838\u672A\u5B89\u88C5\uFF0C\u65E0\u9700\u5220\u9664",
+    warnIfRunning: true
+  },
+  {
+    id: "overwrites",
+    aliases: ["overwrite", "overwrites", "ow"],
+    label: "\u8986\u5199",
+    paths: () => {
+      const dir = USER_DATA_DIR;
+      if (!fs8.existsSync(dir)) return [];
+      return fs8.readdirSync(dir).filter(isOverwriteFilename).map((f) => `${dir}/${f}`);
+    },
+    needsStop: false
+  },
+  {
+    id: "daemon",
+    aliases: ["daemon"],
+    label: "\u4FDD\u6D3B",
+    // 卸载由确认后的 disablesDaemon 段统一处理（需 sudo，受取消保护）；
+    // 此处 paths 返回空（plist 在系统目录，用户态删不掉，且不应提前删破坏卸载），
+    // onAfter 因幂等守卫（plist 已删）成为 no-op，仅作单独 reset 未走前段时的兜底。
+    paths: () => [],
+    needsStop: false,
+    onAfter: () => disableDaemon(),
+    checkEmpty: () => !isDaemonEnabled(),
+    emptyMsg: "\u4FDD\u6D3B\u672A\u542F\u7528\uFF0C\u65E0\u9700\u5220\u9664"
+  }
+];
+function resolveResetTargets(names) {
+  const matched = [];
+  const unmatched = [];
+  for (const name of names) {
+    const t = RESET_TARGETS.find((t2) => t2.aliases.includes(name.toLowerCase()));
+    if (t) {
+      if (!matched.find((m) => m.id === t.id)) matched.push(t);
+    } else {
+      unmatched.push(name);
+    }
+  }
+  return { matched, unmatched };
+}
+async function confirmPrompt(question) {
+  const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
+  const answer = await new Promise((resolve) => {
+    rl.question(`${question} (y/N) `, (a) => {
+      rl.close();
+      resolve(a);
+    });
+  });
+  return answer.toLowerCase() === "y" || answer.toLowerCase() === "yes";
+}
+async function cmdReset(args) {
+  const flags = (args || []).filter((a) => a.startsWith("-"));
+  const names = (args || []).slice(1).filter((a) => !a.startsWith("-"));
+  const KNOWN_FLAGS = /* @__PURE__ */ new Set(["--full", "--yes", "-y"]);
+  const unknownFlags = flags.filter((f) => !KNOWN_FLAGS.has(f));
+  if (unknownFlags.length > 0) {
+    console.error(`\u9519\u8BEF: \u672A\u77E5\u7684\u9009\u9879: ${unknownFlags.join(", ")}`);
+    console.log("");
+    console.log("\u53EF\u7528\u9009\u9879: --full\uFF08\u5220\u5168\u90E8\uFF09, -y/--yes\uFF08\u8DF3\u8FC7\u786E\u8BA4\uFF09");
+    process.exit(1);
+  }
+  const fullReset = flags.includes("--full");
+  const skipConfirm = flags.includes("--yes") || flags.includes("-y");
+  let targets;
+  if (fullReset) {
+    targets = RESET_TARGETS;
+  } else if (names.length > 0) {
+    const { matched, unmatched } = resolveResetTargets(names);
+    if (unmatched.length > 0) {
+      console.error(`\u9519\u8BEF: \u672A\u77E5\u7684\u91CD\u7F6E\u76EE\u6807: ${unmatched.join(", ")}`);
+      console.log("");
+      console.log(`\u53EF\u7528\u76EE\u6807: ${RESET_TARGETS.map((t) => t.aliases[0]).join(", ")}`);
+      console.log("");
+      console.log("\u793A\u4F8B:");
+      console.log("  mihomo reset sub log      # \u5220\u9664\u8BA2\u9605\u548C\u65E5\u5FD7");
+      console.log("  mihomo reset kernel       # \u53EA\u5220\u5185\u6838");
+      console.log("  mihomo reset --full       # \u5220\u9664\u5168\u90E8");
+      console.log("  mihomo reset              # \u5220\u9664\u5168\u90E8\uFF08\u4FDD\u7559\u8BBE\u7F6E\u3001\u5185\u6838\u3001\u8986\u5199\uFF09");
       process.exit(1);
     }
-    let target;
-    if (name) {
-      const matches = findSubscriptionFuzzy(subs, name);
-      target = pickSingleSubscription(matches, name);
-    } else {
-      target = getActiveSubscription() || subs[0];
+    targets = matched;
+  } else {
+    targets = RESET_TARGETS.filter((t) => !["settings", "kernel", "overwrites", "daemon"].includes(t.id));
+  }
+  for (const t of targets) {
+    if (t.checkEmpty?.()) {
+      if (targets.length === 1) {
+        console.log(t.emptyMsg);
+        return;
+      }
     }
-    const cached = subs.find((s) => s.name === target.name);
-    let webPageUrl = cached?.web_page_url;
-    if (!webPageUrl) {
-      console.log("\u8BA2\u9605\u4FE1\u606F\u4E2D\u7F3A\u5C11\u9875\u9762\u5730\u5740\uFF0C\u6B63\u5728\u66F4\u65B0\u8BA2\u9605...");
-      try {
-        await downloadSubscription(target.url, target.name);
-        const cache = readSubscriptionCache();
-        if (cache[target.name]?.web_page_url) {
-          webPageUrl = cache[target.name].web_page_url;
-        } else {
-          console.error("\u9519\u8BEF: \u8BE5\u8BA2\u9605\u6CA1\u6709\u63D0\u4F9B\u9875\u9762\u5730\u5740");
-          process.exit(1);
+  }
+  const needsStop = targets.some((t) => t.needsStop);
+  const warnRunning = targets.some((t) => t.warnIfRunning);
+  const kernelTargeted = targets.some((t) => t.id === "kernel");
+  const daemonTargeted = targets.some((t) => t.id === "daemon");
+  const disablesDaemon = needsStop || kernelTargeted || daemonTargeted;
+  const pids = needsStop || warnRunning ? getMihomoPids() : [];
+  if (warnRunning && pids.length > 0) {
+    console.log(colors.yellow(`\u8B66\u544A: mihomo \u6B63\u5728\u8FD0\u884C (PID ${pids.join(", ")})\uFF0C\u5220\u9664\u5185\u6838\u540E\u5C06\u65E0\u6CD5\u91CD\u65B0\u542F\u52A8`));
+  }
+  if (disablesDaemon && isDaemonEnabled()) {
+    console.log(colors.yellow("\u4FDD\u6D3B\u5DF2\u542F\u7528\uFF0C\u91CD\u7F6E\u5C06\u4E00\u5E76\u5173\u95ED\u4FDD\u6D3B\uFF08\u79FB\u9664\u5F00\u673A\u81EA\u542F\uFF09"));
+  }
+  console.log(`\u5C06\u5220\u9664: ${targets.map((t) => t.label).join("\u3001")}`);
+  if (!skipConfirm && !await confirmPrompt("\u786E\u8BA4?")) {
+    console.log("\u5DF2\u53D6\u6D88");
+    return;
+  }
+  if (disablesDaemon && isDaemonEnabled()) {
+    try {
+      disableDaemon();
+    } catch (e) {
+      console.error(`${colors.red("\u4FDD\u6D3B\u5173\u95ED\u5DF2\u53D6\u6D88\uFF0C\u91CD\u7F6E\u4E2D\u6B62:")} ${e.message.split("\n")[0]}`);
+      return;
+    }
+  }
+  if (needsStop && getMihomoPids().length > 0) {
+    console.log("\u505C\u6B62\u8FDB\u7A0B...");
+    cleanupAll();
+    for (let i = 0; i < PROCESS_WAIT_ATTEMPTS; i++) {
+      if (getMihomoPids().length === 0) break;
+      await new Promise((r) => setTimeout(r, PROCESS_WAIT_INTERVAL));
+    }
+  }
+  for (const t of targets) {
+    for (const p of t.paths()) {
+      if (fs8.existsSync(p)) {
+        try {
+          rmrf(p);
+        } catch (e) {
+          console.warn(`  \u8B66\u544A: \u65E0\u6CD5\u5220\u9664 ${p}: ${e.message}`);
         }
-      } catch (e) {
-        console.error(`\u66F4\u65B0\u5931\u8D25: ${e.message}`);
-        process.exit(1);
       }
     }
-    console.log(`\u6253\u5F00\u8BA2\u9605\u9875\u9762: ${webPageUrl}`);
-    const opened = openUrl(webPageUrl);
-    if (!opened) {
-      console.log("\u8BF7\u624B\u52A8\u8BBF\u95EE\u4E0A\u9762\u7684\u5730\u5740");
+    t.onAfter?.();
+  }
+  ensureDirs();
+  if (targets.some((t) => t.id === "settings")) {
+    invalidateSettingsCache();
+  }
+  console.log(colors.green(`\u5DF2\u91CD\u7F6E: ${targets.map((t) => t.label).join("\u3001")}`));
+}
+
+// src/test-instance.ts
+import { spawn as spawn2 } from "child_process";
+import fs9 from "fs";
+import path8 from "path";
+var TEST_DIR = path8.join(USER_DATA_DIR, "test");
+var TEST_DIRS = {
+  data: path8.join(TEST_DIR, "data"),
+  runtime: path8.join(TEST_DIR, "runtime")
+};
+var TEST_PATHS = {
+  configFile: path8.join(TEST_DIRS.runtime, "config.yaml"),
+  pidFile: path8.join(TEST_DIRS.runtime, "pid"),
+  logFile: path8.join(TEST_DIR, "test.log")
+};
+var TEST_API = `http://${TEST_CONFIG["external-controller"]}`;
+function ensureTestDirs() {
+  for (const dir of Object.values(TEST_DIRS)) {
+    fs9.mkdirSync(dir, { recursive: true, mode: 448 });
+  }
+}
+function cleanupTestDir() {
+  rmrf(TEST_DIR);
+}
+function buildTestConfig(subName) {
+  ensureTestDirs();
+  const rawContent = readSubscriptionRawConfig(subName);
+  if (!rawContent) {
+    throw new Error(`\u672A\u627E\u5230\u8BA2\u9605\u914D\u7F6E "${subName}"`);
+  }
+  const parsed = parseYamlOrJson(rawContent, "\u8BA2\u9605\u5185\u5BB9");
+  const proxies = (parsed.proxies || []).filter(isProxyValid);
+  if (proxies.length === 0) {
+    throw new Error(`\u8BA2\u9605 "${subName}" \u6CA1\u6709\u6709\u6548\u8282\u70B9`);
+  }
+  const nameCount = /* @__PURE__ */ new Map();
+  for (const proxy of proxies) {
+    const count = (nameCount.get(proxy.name) || 0) + 1;
+    nameCount.set(proxy.name, count);
+    if (count > 1) {
+      proxy.name = `${proxy.name} #${count}`;
     }
-    return;
   }
-  if (action === "remove" || action === "rm" || action === "delete") {
-    const name = args[2];
-    const subs = getSubscriptions();
-    if (!name) {
-      console.error("\u9519\u8BEF: \u8BF7\u6307\u5B9A\u8981\u5220\u9664\u7684\u8BA2\u9605\u540D\u79F0");
-      if (subs.length > 0) {
-        console.log("\n\u53EF\u7528\u8BA2\u9605:");
-        for (const s of subs) console.log(`  ${s.name}`);
+  const config = {
+    ...TEST_CONFIG,
+    proxies,
+    "proxy-groups": [
+      {
+        name: "PROXY",
+        type: "select",
+        proxies: proxies.map((p) => p.name)
       }
-      process.exit(1);
+    ],
+    rules: ["MATCH,PROXY"]
+  };
+  const content = dumpYaml(config);
+  fs9.writeFileSync(TEST_PATHS.configFile, content, { mode: 384 });
+}
+async function startTestInstance() {
+  const binary = PATHS.mihomoBinary;
+  if (!fs9.existsSync(binary)) throw new Error('\u672A\u627E\u5230 mihomo \u5185\u6838\uFF0C\u8BF7\u5148\u8FD0\u884C "mihomo kernel" \u4E0B\u8F7D');
+  stopTestInstance();
+  const logFd = fs9.openSync(TEST_PATHS.logFile, "a");
+  const child = spawn2(binary, ["-d", TEST_DIRS.data, "-f", TEST_PATHS.configFile], {
+    detached: true,
+    stdio: ["ignore", logFd, logFd]
+  });
+  child.on("error", () => {
+  });
+  fs9.closeSync(logFd);
+  child.unref();
+  const pid = child.pid;
+  if (!pid) throw new Error("\u6D4B\u8BD5\u5B9E\u4F8B\u542F\u52A8\u5931\u8D25\uFF1A\u65E0\u6CD5\u521B\u5EFA\u8FDB\u7A0B\uFF08\u5185\u6838\u4E8C\u8FDB\u5236\u53EF\u80FD\u4E0D\u53EF\u6267\u884C\uFF09");
+  fs9.writeFileSync(TEST_PATHS.pidFile, pid.toString(), { mode: 384 });
+  const client = createHttpClient({ timeout: 2e3 });
+  let ready = false;
+  for (let i = 0; i < 60; i++) {
+    if (!isProcessRunning(pid)) break;
+    try {
+      await client.get(`${TEST_API}/version`);
+      ready = true;
+      break;
+    } catch {
+      await sleep(500);
     }
-    const matches = findSubscriptionFuzzy(subs, name);
-    const target = pickSingleSubscription(matches, name);
-    const switchedTo = removeSubscription(target.name);
-    console.log(`\u5DF2\u5220\u9664\u8BA2\u9605 "${target.name}"`);
-    if (switchedTo) {
-      console.log(`\u5DF2\u81EA\u52A8\u5207\u6362\u5230 "${switchedTo}"`);
+  }
+  if (!isProcessRunning(pid)) {
+    let errorDetail = "";
+    try {
+      errorDetail = fs9.readFileSync(TEST_PATHS.logFile, "utf8").slice(-1e3);
+    } catch {
     }
-    console.log("");
-    await printSubscriptionList({ autoUpdate: false });
+    throw new Error(`\u6D4B\u8BD5\u5B9E\u4F8B\u542F\u52A8\u5931\u8D25${errorDetail ? `
+${errorDetail}` : ""}`);
+  }
+  if (!ready) {
+    throw new Error("\u6D4B\u8BD5\u5B9E\u4F8B\u542F\u52A8\u8D85\u65F6\uFF0CAPI \u672A\u54CD\u5E94");
+  }
+}
+function stopTestInstance() {
+  let pid;
+  try {
+    pid = parseInt(fs9.readFileSync(TEST_PATHS.pidFile, "utf8").trim(), 10);
+  } catch {
     return;
   }
-  if (action === "clean") {
-    const { target, timeout, concurrency } = resolveTestTarget(args);
-    const rounds = parseIntArg(args, "-r", "--rounds", DEFAULT_CLEAN_ROUNDS);
-    console.log(`\u6E05\u7406\u8BA2\u9605 "${target.name}"...`);
-    console.log(`\u8D85\u65F6: ${timeout}ms  \u5E76\u53D1: ${concurrency}`);
-    console.log("");
-    const progress = createProgressPrinter(rounds);
-    const result = await withTestInstance(target.name, async (apiBase) => {
-      return autoCleanSubscription(target.name, {
-        timeout,
-        concurrency,
-        rounds,
-        apiBase,
-        onResult: progress.onResult,
-        onRetryRound: progress.onRetryRound
-      });
-    });
-    progress.finish();
-    console.log(formatTestSummary(result.summary));
-    if (result.skipped) {
-      console.log("");
-      console.log(colors.yellow("\u5B58\u6D3B\u8282\u70B9\u4E0D\u8DB3 1%\uFF0C\u8DF3\u8FC7\u6E05\u7406\u3002\u8BF7\u68C0\u67E5\u539F\u59CB\u8BA2\u9605\u662F\u5426\u6709\u6548"));
-    } else if (result.removedProxies > 0) {
-      console.log(`${colors.green("\u5DF2\u6E05\u7406")}: ${formatCleanSummary(result)}`);
-      const status = getStatus();
-      if (status.running) {
-        console.log("");
-        console.log("\u63D0\u793A: \u9700\u8981\u91CD\u542F mihomo \u4F7F\u66F4\u6539\u751F\u6548 (mihomo start)");
-      }
+  if (pid > 0 && isProcessRunning(pid)) {
+    process.kill(pid, "SIGKILL");
+    for (let i = 0; i < 20; i++) {
+      if (!isProcessRunning(pid)) break;
+      sleepSync(100);
     }
-    return;
   }
-  if (action === "test") {
-    const { target, timeout, concurrency } = resolveTestTarget(args);
-    console.log(`\u6D4B\u8BD5\u8BA2\u9605 "${target.name}" \u7684\u8282\u70B9\u8FDE\u901A\u6027...`);
-    console.log(`\u8D85\u65F6: ${timeout}ms  \u5E76\u53D1: ${concurrency}`);
-    console.log("");
-    const progress = createProgressPrinter();
-    const summary = await withTestInstance(target.name, async (apiBase) => {
-      return testSubscriptionProxies(target.name, {
-        timeout,
-        concurrency,
-        apiBase,
-        onResult: progress.onResult
-      });
-    });
-    progress.finish();
-    console.log(formatTestSummary(summary));
-    return;
+  try {
+    fs9.unlinkSync(TEST_PATHS.pidFile);
+  } catch {
   }
-  console.error("\u9519\u8BEF: \u672A\u77E5\u7684\u8BA2\u9605\u547D\u4EE4");
-  console.log("\u7528\u6CD5: mihomo sub [list|use|add|update|remove|web|test|clean]");
-  process.exit(1);
 }
-
-// src/commands/start.ts
-var DAEMON_RESTART_WAIT_MS = 500;
-async function cmdStart(args) {
-  if (!hasKernel()) {
-    console.error('\u9519\u8BEF: \u672A\u627E\u5230\u5185\u6838\uFF0C\u8BF7\u8FD0\u884C "mihomo kernel"');
-    process.exit(1);
+async function withTestInstance(subName, fn) {
+  cleanupTestDir();
+  buildTestConfig(subName);
+  const unregister = registerCleanup(() => {
+    stopTestInstance();
+    cleanupTestDir();
+  });
+  try {
+    await startTestInstance();
+    return await fn(TEST_API);
+  } finally {
+    unregister();
+    stopTestInstance();
+    cleanupTestDir();
   }
-  const targetMode = args[1] === "tun" ? "tun" : "mixed";
-  const daemonEnabled = isDaemonEnabled();
-  if (targetMode === "tun" && daemonEnabled) {
-    console.error(`${colors.red("\u9519\u8BEF:")} \u4FDD\u6D3B\u5DF2\u542F\u7528\uFF08\u4EC5\u652F\u6301 Mixed \u6A21\u5F0F\uFF09\uFF0C\u65E0\u6CD5\u542F\u52A8 TUN`);
-    console.error("\u8BF7\u5148\u5173\u95ED\u4FDD\u6D3B: mihomo daemon off");
+}
+
+// src/commands/subscription.ts
+function githubRepoUrl(rawUrl) {
+  const match = rawUrl.match(/raw\.githubusercontent\.com\/([^/]+\/[^/]+)/);
+  if (match) return `https://github.com/${match[1]}`;
+  return null;
+}
+function resolveTestTarget(args) {
+  const subs = getSubscriptions();
+  if (subs.length === 0) {
+    console.error("\u9519\u8BEF: \u6CA1\u6709\u8BA2\u9605");
     process.exit(1);
   }
-  const rounds = parseIntArg(args, "-r", "--rounds", DEFAULT_CLEAN_ROUNDS);
+  const nameArg = getNonFlagArg(args, 2);
   const timeout = parseIntArg(args, "-t", "--timeout", DEFAULT_TEST_TIMEOUT);
   const concurrency = parseIntArg(args, "-j", "--concurrency", DEFAULT_TEST_CONCURRENCY);
-  const skipUpdate = hasFlag(args, "-s", "--no-update");
-  const updateTimeout = parseIntArg(args, "-u", "--update-timeout", DEFAULT_AUTO_UPDATE_TIMEOUT);
-  const sub = getActiveSubscription();
-  if (!sub) {
-    console.error("\u9519\u8BEF: \u6CA1\u6709\u8BA2\u9605\uFF0C\u8BF7\u5148\u6DFB\u52A0\u8BA2\u9605");
-    process.exit(1);
+  let target;
+  if (nameArg) {
+    const matches = findSubscriptionFuzzy(subs, nameArg);
+    target = pickSingleSubscription(matches, nameArg);
+  } else {
+    const activeSub = getActiveSubscription();
+    if (!activeSub) {
+      console.error("\u9519\u8BEF: \u6CA1\u6709\u6D3B\u8DC3\u8BA2\u9605\uFF0C\u8BF7\u6307\u5B9A\u8BA2\u9605\u540D\u79F0");
+      process.exit(1);
+    }
+    target = activeSub;
   }
-  if (!skipUpdate) {
-    await autoUpdateStaleSubscription({ timeout: updateTimeout });
+  return { target, timeout, concurrency };
+}
+function printRestartHintIfRunning() {
+  if (getRunningState().running) {
+    console.log(colors.yellow("\u63D0\u793A: \u8FD0\u884C\u4E2D\u7684\u5B9E\u4F8B\u4ECD\u4F7F\u7528\u65E7\u914D\u7F6E\uFF0C\u6267\u884C mihomo start \u4F7F\u66F4\u65B0\u751F\u6548"));
+    console.log("");
   }
-  async function launchOrRestart() {
-    if (daemonEnabled) {
-      restartDaemon();
-      await sleep(DAEMON_RESTART_WAIT_MS);
-      return getDaemonStatus().pid;
-    }
-    const result = await start(targetMode);
-    return result.pid;
+}
+function printSubscriptionList() {
+  const subs = getSubscriptionsWithCache();
+  if (subs.length === 0) {
+    console.log("\u6CA1\u6709\u8BA2\u9605");
+    console.log("");
+    console.log("\u6DFB\u52A0\u8BA2\u9605: mihomo sub add <url> [name]");
+    console.log("");
+    return;
   }
-  if (!daemonEnabled) {
-    const status = getStatus();
-    const hasProcess = status.running || status.allProcesses.length > 0;
-    if (hasProcess) {
-      const count = status.allProcesses.length > 0 ? status.allProcesses.length : 1;
-      console.log(`\u505C\u6B62 ${count} \u4E2A\u8FDB\u7A0B...`);
+  const activeSub = getActiveSubscription();
+  console.log(colors.cyan("\u8BA2\u9605\u5217\u8868:"));
+  subs.forEach((s, i) => {
+    const time = formatDate(s.updated_at);
+    const defaultMark = activeSub && s.name === activeSub.name ? colors.green(" [\u4F7F\u7528\u4E2D]") : "";
+    const mergeBadge = isMultiUrl(s.url) ? colors.cyan(` [\u5408\u5E76 ${splitUrls(s.url).length} \u6E90]`) : "";
+    const interval = resolveUpdateInterval(s.url, s.update_interval);
+    console.log(`  ${i + 1}. ${s.name}${defaultMark}${mergeBadge}`);
+    console.log(`    ${colors.gray("\u66F4\u65B0: ")}${time} (\u95F4\u9694: ${interval}h)`);
+    if (s.username) {
+      console.log(`    ${colors.gray("\u7528\u6237: ")}${s.username}`);
     }
-    handleStopResult(stop());
-    if (hasProcess) {
-      console.log(`${colors.green("\u5DF2\u505C\u6B62\u8FDB\u7A0B")}
-`);
+    if (s.download !== void 0 || s.total !== void 0) {
+      const used = (s.upload || 0) + (s.download || 0);
+      const usedStr = formatBytes(used);
+      const totalStr = formatBytes(s.total);
+      let percentStr = "";
+      if (s.total && s.total > 0) {
+        const percent = Math.min(used / s.total * 100, 100);
+        percentStr = ` (${percent.toFixed(1)}%)`;
+      }
+      console.log(`    ${colors.gray("\u6D41\u91CF: ")}${usedStr} / ${totalStr}${percentStr}`);
     }
+    if (s.expire !== void 0) {
+      console.log(`    ${colors.gray("\u5230\u671F: ")}${formatTimestamp(s.expire)}`);
+    }
+    if (s.web_page_url) {
+      console.log(`    ${colors.gray("\u9875\u9762: ")}${s.web_page_url}`);
+    }
+  });
+  console.log("");
+  console.log("\u5207\u6362\u8BA2\u9605: mihomo sub use <name>");
+  console.log("\u65B0\u589E\u8BA2\u9605: mihomo sub add <url> [name]");
+  console.log("\u66F4\u65B0\u8BA2\u9605: mihomo sub update [name]");
+  console.log("\u5220\u9664\u8BA2\u9605: mihomo sub remove <name>");
+  console.log("\u6D4B\u8BD5\u8282\u70B9: mihomo sub test [name]");
+  console.log("\u6E05\u7406\u8282\u70B9: mihomo sub clean [name]");
+  console.log("\u6253\u5F00\u9875\u9762: mihomo sub web [name]");
+  console.log("");
+}
+async function cmdSubscription(args) {
+  const action = args[1];
+  if (!action || action === "list") {
+    printSubscriptionList();
+    return;
   }
-  let configInfo;
-  try {
-    configInfo = prepareConfigForStart(targetMode, sub.name);
-  } catch (e) {
-    console.error(`${colors.red("\u914D\u7F6E\u9519\u8BEF:")} ${e.message}`);
-    process.exit(1);
-  }
-  const modeLabel = targetMode === "tun" ? "TUN" : "Mixed";
-  console.log([colors.cyan(modeLabel), sub.name, formatProxySummary(configInfo)].join(" \xB7 "));
-  try {
-    const pid = await launchOrRestart();
-    const label = daemonEnabled ? "\u5DF2\u542F\u52A8 (\u4FDD\u6D3B)" : "\u5DF2\u542F\u52A8";
-    console.log(`${colors.green(label)}${pid ? ` (PID ${pid})` : ""}`);
-  } catch (e) {
-    const msg = e.message;
-    const lines = msg.split("\n");
-    console.error(`${colors.red("\u542F\u52A8\u5931\u8D25:")} ${lines[0]}`);
-    if (lines.length > 1) {
-      for (const line of lines.slice(1)) console.error(line);
+  if (action === "add") {
+    const url = args[2]?.trim();
+    const name = args[3] || "default";
+    if (!url) {
+      console.error("\u9519\u8BEF: \u8BF7\u63D0\u4F9B\u6709\u6548\u7684\u8BA2\u9605 URL");
+      process.exit(1);
     }
-    process.exit(1);
-  }
-  const cleanThreshold = isGithubUrl(sub.url) ? AUTO_CLEAN_THRESHOLD_GITHUB : AUTO_CLEAN_THRESHOLD;
-  if (configInfo.proxies > cleanThreshold) {
-    console.log("");
-    console.log(`\u8282\u70B9\u6570 ${configInfo.proxies} \u8D85\u8FC7 ${cleanThreshold}\uFF0C\u81EA\u52A8\u6E05\u7406...`);
-    console.log("");
-    await sleep(1e3);
-    const progress = createProgressPrinter(rounds);
-    const cleanResult = await autoCleanSubscription(sub.name, {
-      timeout,
-      concurrency,
-      rounds,
-      onResult: progress.onResult,
-      onRetryRound: progress.onRetryRound
-    });
-    progress.finish();
-    console.log(formatTestSummary(cleanResult.summary));
-    if (cleanResult.skipped) {
-      console.log(colors.yellow("\u5B58\u6D3B\u8282\u70B9\u4E0D\u8DB3 1%\uFF0C\u8DF3\u8FC7\u6E05\u7406\u3002\u8BF7\u68C0\u67E5\u539F\u59CB\u8BA2\u9605\u662F\u5426\u6709\u6548"));
-    } else if (cleanResult.removedProxies > 0) {
-      console.log(`${colors.green("\u5DF2\u6E05\u7406")}: ${formatCleanSummary(cleanResult)}`);
-      console.log("");
-      console.log("\u91CD\u65B0\u52A0\u8F7D\u914D\u7F6E...");
-      if (!daemonEnabled) handleStopResult(stop());
+    if (isMultiUrl(url)) {
+      const urls = splitUrls(url);
+      if (urls.length === 0) {
+        console.error("\u9519\u8BEF: \u8BF7\u63D0\u4F9B\u6709\u6548\u7684\u8BA2\u9605 URL");
+        process.exit(1);
+      }
+      for (const u of urls) {
+        if (!isValidHttpUrl(u)) {
+          console.error(`\u9519\u8BEF: \u65E0\u6548\u7684 URL: ${u}`);
+          process.exit(1);
+        }
+      }
+      const normalizedUrl = urls.join(",");
+      console.log(`\u6DFB\u52A0\u5408\u5E76\u8BA2\u9605: ${name} (${urls.length} \u4E2A\u6E90)`);
       try {
-        configInfo = prepareConfigForStart(targetMode, sub.name);
-        const pid = await launchOrRestart();
-        console.log(`${colors.green("\u5DF2\u91CD\u542F")}${pid ? ` (PID ${pid})` : ""} \xB7 ${formatProxySummary(configInfo)}`);
+        addSubscription(normalizedUrl, name);
+        setDefaultSubscription(name);
+        const info = await downloadMergedSubscription(urls, name);
+        console.log(`\u5DF2\u6DFB\u52A0\u5E76\u5207\u6362\u5230 "${name}" (${formatProxySummary(info)}, \u5408\u5E76 ${urls.length} \u6E90)`);
       } catch (e) {
-        console.error(`${colors.red("\u91CD\u542F\u5931\u8D25:")} ${e.message.split("\n")[0]}`);
+        removeSubscription(name);
+        console.error(`\u6DFB\u52A0\u5931\u8D25: ${e.message}`);
         process.exit(1);
       }
-    }
-  }
-  printStatus();
-}
-
-// src/commands/overwrite.ts
-function printOverwriteList() {
-  const info = listOverwriteFile();
-  const statusText = info.enabled ? colors.green("\u5DF2\u542F\u7528") : colors.yellow("\u5DF2\u7981\u7528");
-  console.log(`${colors.gray("\u72B6\u6001: ")}${statusText}`);
-  console.log(`${colors.gray("\u4F4D\u7F6E: ")}${info.dir}`);
-  console.log("");
-  if (info.files.length === 0) {
-    console.log("\u6682\u65E0\u8986\u5199\u6587\u4EF6");
-    console.log("");
-    console.log(`\u7528\u6CD5\u793A\u4F8B: \u521B\u5EFA\u6587\u4EF6 ${path7.join(info.dir, "overwrite.yaml")}`);
-    console.log(`         \u6216        ${path7.join(info.dir, "overwrite.dns.yaml")}`);
-    console.log("");
-  } else {
-    console.log(`${colors.cyan("\u8986\u5199\u6587\u4EF6")} (${info.files.length} \u4E2A\uFF0C\u6309\u987A\u5E8F\u52A0\u8F7D):`);
-    console.log("");
-    info.files.forEach((f, i) => {
-      const num = i < 10 ? ` ${i}` : `${i}`;
-      console.log(`  ${num}. ${f.name}`);
-      if (f.keys.length > 0) {
-        console.log(`    ${colors.gray("\u5B57\u6BB5: ")}${f.keys.join(", ")}`);
+    } else {
+      if (!isValidHttpUrl(url)) {
+        console.error("\u9519\u8BEF: \u8BF7\u63D0\u4F9B\u6709\u6548\u7684\u8BA2\u9605 URL\uFF08\u9700\u4EE5 http:// \u6216 https:// \u5F00\u5934\uFF09");
+        process.exit(1);
+      }
+      console.log(`\u6DFB\u52A0\u8BA2\u9605: ${name}`);
+      try {
+        addSubscription(url, name);
+        setDefaultSubscription(name);
+        const info = await downloadSubscription(url, name);
+        const repoUrl = githubRepoUrl(url);
+        if (repoUrl) saveSubscriptionCache(name, { web_page_url: repoUrl });
+        console.log(`\u5DF2\u6DFB\u52A0\u5E76\u5207\u6362\u5230 "${name}" (${formatProxySummary(info)})`);
+      } catch (e) {
+        removeSubscription(name);
+        console.error(`\u6DFB\u52A0\u5931\u8D25: ${e.message}`);
+        process.exit(1);
       }
-    });
-    console.log("");
-  }
-  console.log("\u542F\u7528\u8986\u5199: mihomo ow on");
-  console.log("\u7981\u7528\u8986\u5199: mihomo ow off");
-  console.log("");
-}
-async function cmdOverwrite(args) {
-  const action = args?.[1];
-  const status = getStatus();
-  const configInfo = getConfigInfo();
-  const currentMode = isDaemonEnabled() ? "mixed" : configInfo?.tun ? "tun" : "mixed";
-  if (action === "on" || action === "enable") {
-    if (isOverwriteEnabled()) {
-      console.log("\u8986\u5199\u914D\u7F6E\u5DF2\u662F\u542F\u7528\u72B6\u6001");
-      console.log("");
-      printOverwriteList();
-      return;
-    }
-    setOverwriteEnabled(true);
-    console.log("\u5DF2\u542F\u7528\u8986\u5199\u914D\u7F6E");
-    if (status.running || isDaemonEnabled()) {
-      console.log("");
-      await cmdStart(["start", currentMode]);
-      return;
     }
     console.log("");
-    printOverwriteList();
+    printSubscriptionList();
     return;
   }
-  if (action === "off" || action === "disable") {
-    if (!isOverwriteEnabled()) {
-      console.log("\u8986\u5199\u914D\u7F6E\u5DF2\u662F\u7981\u7528\u72B6\u6001");
-      console.log("");
-      printOverwriteList();
-      return;
+  if (action === "update") {
+    const name = args[2];
+    const subs = getSubscriptions();
+    if (subs.length === 0) {
+      console.error("\u9519\u8BEF: \u6CA1\u6709\u8BA2\u9605");
+      process.exit(1);
     }
-    setOverwriteEnabled(false);
-    console.log("\u5DF2\u7981\u7528\u8986\u5199\u914D\u7F6E");
-    if (status.running || isDaemonEnabled()) {
+    if (!name) {
+      console.log(`\u66F4\u65B0\u6240\u6709 ${subs.length} \u4E2A\u8BA2\u9605...`);
+      const results = await Promise.all(subs.map((sub) => tryUpdateOne(sub)));
+      let ok = 0;
+      for (const r of results) {
+        if (r.success) ok++;
+        printUpdateResult(r);
+      }
+      if (ok === 0) process.exit(1);
       console.log("");
-      await cmdStart(["start", currentMode]);
+      printRestartHintIfRunning();
+      printSubscriptionList();
       return;
     }
+    const matches = findSubscriptionFuzzy(subs, name);
+    const target = pickSingleSubscription(matches, name);
+    console.log(`\u66F4\u65B0\u8BA2\u9605: ${target.name}`);
+    const result = await tryUpdateOne(target);
+    if (!result.success) {
+      console.error(`\u66F4\u65B0\u5931\u8D25: ${(result.error || "").split("\n")[0]}`);
+      process.exit(1);
+    }
+    console.log(`\u5DF2\u66F4\u65B0 (${formatProxySummary(result)})`);
     console.log("");
-    printOverwriteList();
+    printRestartHintIfRunning();
+    printSubscriptionList();
     return;
   }
-  console.log("");
-  printOverwriteList();
-}
-
-// src/commands/reset.ts
-import fs9 from "fs";
-import readline from "readline";
-var RESET_TARGETS = [
-  {
-    id: "subs",
-    aliases: ["sub", "subs", "subscription", "subscriptions"],
-    label: "\u8BA2\u9605",
-    paths: () => [DIRS.subscriptions],
-    needsStop: true
-  },
-  {
-    id: "logs",
-    aliases: ["log", "logs"],
-    label: "\u65E5\u5FD7",
-    paths: () => [DIRS.logs],
-    needsStop: false
-  },
-  {
-    id: "data",
-    aliases: ["data"],
-    label: "\u8FD0\u884C\u6570\u636E",
-    paths: () => [DIRS.data],
-    needsStop: true
-  },
-  {
-    id: "runtime",
-    aliases: ["runtime"],
-    label: "\u8FD0\u884C\u65F6",
-    paths: () => [DIRS.runtime],
-    needsStop: true
-  },
-  {
-    id: "settings",
-    aliases: ["setting", "settings", "config"],
-    label: "\u8BBE\u7F6E",
-    paths: () => [PATHS.settingsFile],
-    needsStop: false
-  },
-  {
-    id: "kernel",
-    aliases: ["kernel", "core"],
-    label: "\u5185\u6838",
-    paths: () => [DIRS.kernel],
-    needsStop: false,
-    onAfter: () => clearKernelVersionCache(),
-    checkEmpty: () => !hasKernel(),
-    emptyMsg: "\u5185\u6838\u672A\u5B89\u88C5\uFF0C\u65E0\u9700\u5220\u9664",
-    warnIfRunning: true
-  },
-  {
-    id: "overwrites",
-    aliases: ["overwrite", "overwrites", "ow"],
-    label: "\u8986\u5199",
-    paths: () => {
-      const dir = USER_DATA_DIR;
-      if (!fs9.existsSync(dir)) return [];
-      return fs9.readdirSync(dir).filter((f) => f === "overwrite.yaml" || /^overwrite\..+\.ya?ml$/.test(f)).map((f) => `${dir}/${f}`);
-    },
-    needsStop: false
-  },
-  {
-    id: "daemon",
-    aliases: ["daemon"],
-    label: "\u4FDD\u6D3B",
-    // 删除全部交给 onAfter：disableDaemon 会先 bootout 卸载、再删 plist、再兜底清理进程，
-    // 顺序正确（先卸载再删文件）；此处返回空避免提前删掉 plist 破坏卸载。
-    paths: () => [],
-    needsStop: false,
-    onAfter: () => disableDaemon(),
-    checkEmpty: () => !isDaemonEnabled(),
-    emptyMsg: "\u4FDD\u6D3B\u672A\u542F\u7528\uFF0C\u65E0\u9700\u5220\u9664"
-  }
-];
-function resolveResetTargets(names) {
-  const matched = [];
-  const unmatched = [];
-  for (const name of names) {
-    const t = RESET_TARGETS.find((t2) => t2.aliases.includes(name.toLowerCase()));
-    if (t) {
-      if (!matched.find((m) => m.id === t.id)) matched.push(t);
-    } else {
-      unmatched.push(name);
+  if (action === "use") {
+    const name = args[2];
+    const subs = getSubscriptions();
+    if (!name) {
+      console.error("\u9519\u8BEF: \u8BF7\u6307\u5B9A\u8BA2\u9605\u540D\u79F0");
+      if (subs.length > 0) {
+        console.log("\n\u53EF\u7528\u8BA2\u9605:");
+        for (const s of subs) console.log(`  ${s.name}`);
+      }
+      process.exit(1);
     }
-  }
-  return { matched, unmatched };
-}
-async function confirmPrompt(question) {
-  const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
-  const answer = await new Promise((resolve) => {
-    rl.question(`${question} (y/N) `, (a) => {
-      rl.close();
-      resolve(a);
-    });
-  });
-  return answer.toLowerCase() === "y" || answer.toLowerCase() === "yes";
-}
-async function cmdReset(args) {
-  const flags = (args || []).filter((a) => a.startsWith("-"));
-  const names = (args || []).slice(1).filter((a) => !a.startsWith("-"));
-  const fullReset = flags.includes("--full") || flags.includes("-f");
-  const skipConfirm = flags.includes("--yes") || flags.includes("-y");
-  let targets;
-  if (fullReset) {
-    targets = RESET_TARGETS;
-  } else if (names.length > 0) {
-    const { matched, unmatched } = resolveResetTargets(names);
-    if (unmatched.length > 0) {
-      console.error(`\u9519\u8BEF: \u672A\u77E5\u7684\u91CD\u7F6E\u76EE\u6807: ${unmatched.join(", ")}`);
-      console.log("");
-      console.log(`\u53EF\u7528\u76EE\u6807: ${RESET_TARGETS.map((t) => t.aliases[0]).join(", ")}`);
+    const matches = findSubscriptionFuzzy(subs, name);
+    const target = pickSingleSubscription(matches, name);
+    const currentDefault = getActiveSubscription();
+    const isAlreadyDefault = currentDefault && currentDefault.name === target.name;
+    if (isAlreadyDefault) {
+      console.log(`"${target.name}" \u5DF2\u662F\u5F53\u524D\u4F7F\u7528\u7684\u8BA2\u9605`);
       console.log("");
-      console.log("\u793A\u4F8B:");
-      console.log("  mihomo reset sub log      # \u5220\u9664\u8BA2\u9605\u548C\u65E5\u5FD7");
-      console.log("  mihomo reset kernel       # \u53EA\u5220\u5185\u6838");
-      console.log("  mihomo reset --full       # \u5220\u9664\u5168\u90E8");
-      console.log("  mihomo reset              # \u5220\u9664\u5168\u90E8\uFF08\u4FDD\u7559\u8BBE\u7F6E\u3001\u5185\u6838\u3001\u8986\u5199\uFF09");
+      printSubscriptionList();
+      return;
+    }
+    const currentMode = getRuntimeMode();
+    const restartNeeded = isRestartNeededOnChange();
+    const success = setDefaultSubscription(target.name);
+    if (success) {
+      console.log(`\u5DF2\u5207\u6362\u5230 "${target.name}"`);
+    } else {
+      console.error(`\u9519\u8BEF: \u672A\u627E\u5230\u8BA2\u9605 "${name}"`);
       process.exit(1);
     }
-    targets = matched;
-  } else {
-    targets = RESET_TARGETS.filter((t) => !["settings", "kernel", "overwrites", "daemon"].includes(t.id));
+    if (restartNeeded) {
+      console.log("");
+      await cmdStart(["start", currentMode, ...extractStartOptions(args)]);
+      return;
+    }
+    console.log("");
+    printSubscriptionList();
+    return;
   }
-  for (const t of targets) {
-    if (t.checkEmpty?.()) {
-      if (targets.length === 1) {
-        console.log(t.emptyMsg);
-        return;
+  if (action === "web" || action === "open") {
+    const name = args[2];
+    const subs = getSubscriptionsWithCache();
+    if (subs.length === 0) {
+      console.error("\u9519\u8BEF: \u6CA1\u6709\u8BA2\u9605");
+      process.exit(1);
+    }
+    let target;
+    if (name) {
+      const matches = findSubscriptionFuzzy(subs, name);
+      target = pickSingleSubscription(matches, name);
+    } else {
+      target = getActiveSubscription() || subs[0];
+    }
+    const cached = subs.find((s) => s.name === target.name);
+    let webPageUrl = cached?.web_page_url;
+    if (!webPageUrl) {
+      console.log("\u8BA2\u9605\u4FE1\u606F\u4E2D\u7F3A\u5C11\u9875\u9762\u5730\u5740\uFF0C\u6B63\u5728\u67E5\u8BE2\u8BA2\u9605...");
+      try {
+        const info = isMultiUrl(target.url) ? await downloadMergedSubscription(splitUrls(target.url), target.name, void 0, false) : await downloadSubscription(target.url, target.name, void 0, false);
+        if (info.webPageUrl) {
+          webPageUrl = info.webPageUrl;
+        } else {
+          console.error("\u9519\u8BEF: \u8BE5\u8BA2\u9605\u6CA1\u6709\u63D0\u4F9B\u9875\u9762\u5730\u5740");
+          process.exit(1);
+        }
+      } catch (e) {
+        console.error(`\u67E5\u8BE2\u5931\u8D25: ${e.message}`);
+        process.exit(1);
       }
     }
-  }
-  const needsStop = targets.some((t) => t.needsStop);
-  const warnRunning = targets.some((t) => t.warnIfRunning);
-  const kernelTargeted = targets.some((t) => t.id === "kernel");
-  const disablesDaemon = needsStop || kernelTargeted;
-  const pids = needsStop || warnRunning ? getAllMihomoPids() : [];
-  if (warnRunning && pids.length > 0) {
-    console.log(colors.yellow(`\u8B66\u544A: mihomo \u6B63\u5728\u8FD0\u884C (PID ${pids.join(", ")})\uFF0C\u5220\u9664\u5185\u6838\u540E\u5C06\u65E0\u6CD5\u91CD\u65B0\u542F\u52A8`));
-  }
-  if (disablesDaemon && isDaemonEnabled()) {
-    console.log(colors.yellow("\u4FDD\u6D3B\u5DF2\u542F\u7528\uFF0C\u91CD\u7F6E\u5C06\u4E00\u5E76\u5173\u95ED\u4FDD\u6D3B\uFF08\u79FB\u9664\u5F00\u673A\u81EA\u542F\uFF09"));
-  }
-  console.log(`\u5C06\u5220\u9664: ${targets.map((t) => t.label).join("\u3001")}`);
-  if (!skipConfirm && !await confirmPrompt("\u786E\u8BA4?")) {
-    console.log("\u5DF2\u53D6\u6D88");
+    console.log(`\u6253\u5F00\u8BA2\u9605\u9875\u9762: ${webPageUrl}`);
+    const opened = openUrl(webPageUrl);
+    if (!opened) {
+      console.log("\u8BF7\u624B\u52A8\u8BBF\u95EE\u4E0A\u9762\u7684\u5730\u5740");
+    }
     return;
   }
-  if (disablesDaemon && isDaemonEnabled()) {
-    disableDaemon();
-  }
-  if (needsStop && getAllMihomoPids().length > 0) {
-    console.log("\u505C\u6B62\u8FDB\u7A0B...");
-    cleanupAll();
-    for (let i = 0; i < PROCESS_WAIT_ATTEMPTS; i++) {
-      if (getAllMihomoPids().length === 0) break;
-      await new Promise((r) => setTimeout(r, PROCESS_WAIT_INTERVAL));
+  if (action === "remove" || action === "rm" || action === "delete") {
+    const name = args[2];
+    const subs = getSubscriptions();
+    if (!name) {
+      console.error("\u9519\u8BEF: \u8BF7\u6307\u5B9A\u8981\u5220\u9664\u7684\u8BA2\u9605\u540D\u79F0");
+      if (subs.length > 0) {
+        console.log("\n\u53EF\u7528\u8BA2\u9605:");
+        for (const s of subs) console.log(`  ${s.name}`);
+      }
+      process.exit(1);
+    }
+    const matches = findSubscriptionFuzzy(subs, name);
+    const target = pickSingleSubscription(matches, name);
+    const switchedTo = removeSubscription(target.name);
+    console.log(`\u5DF2\u5220\u9664\u8BA2\u9605 "${target.name}"`);
+    if (switchedTo) {
+      console.log(`\u5DF2\u81EA\u52A8\u5207\u6362\u5230 "${switchedTo}"`);
     }
+    console.log("");
+    printSubscriptionList();
+    return;
   }
-  for (const t of targets) {
-    for (const p of t.paths()) {
-      if (fs9.existsSync(p)) {
-        try {
-          rmrf(p);
-        } catch (e) {
-          console.warn(`  \u8B66\u544A: \u65E0\u6CD5\u5220\u9664 ${p}: ${e.message}`);
-        }
+  if (action === "clean") {
+    const { target, timeout, concurrency } = resolveTestTarget(args);
+    const rounds = parseIntArg(args, "-r", "--rounds", DEFAULT_CLEAN_ROUNDS);
+    console.log(`\u6E05\u7406\u8BA2\u9605 "${target.name}"...`);
+    console.log(`\u8D85\u65F6: ${timeout}ms  \u5E76\u53D1: ${concurrency}`);
+    console.log("");
+    const progress = createProgressPrinter(rounds);
+    const result = await withTestInstance(target.name, async (apiBase) => {
+      return autoCleanSubscription(target.name, {
+        timeout,
+        concurrency,
+        rounds,
+        apiBase,
+        onResult: progress.onResult,
+        onRetryRound: progress.onRetryRound
+      });
+    });
+    progress.finish();
+    console.log(formatTestSummary(result.summary));
+    if (result.skipped) {
+      console.log("");
+      console.log(colors.yellow("\u5B58\u6D3B\u8282\u70B9\u4E0D\u8DB3 1%\uFF0C\u8DF3\u8FC7\u6E05\u7406\u3002\u8BF7\u68C0\u67E5\u539F\u59CB\u8BA2\u9605\u662F\u5426\u6709\u6548"));
+    } else if (result.removedProxies > 0) {
+      console.log(`${colors.green("\u5DF2\u6E05\u7406")}: ${formatCleanSummary(result)}`);
+      if (getRunningState().running) {
+        console.log("");
+        console.log("\u63D0\u793A: \u9700\u8981\u91CD\u542F mihomo \u4F7F\u66F4\u6539\u751F\u6548 (mihomo start)");
       }
     }
-    t.onAfter?.();
+    return;
   }
-  ensureDirs();
-  if (targets.some((t) => t.id === "settings")) {
-    invalidateSettingsCache();
+  if (action === "test") {
+    const { target, timeout, concurrency } = resolveTestTarget(args);
+    console.log(`\u6D4B\u8BD5\u8BA2\u9605 "${target.name}" \u7684\u8282\u70B9\u8FDE\u901A\u6027...`);
+    console.log(`\u8D85\u65F6: ${timeout}ms  \u5E76\u53D1: ${concurrency}`);
+    console.log("");
+    const progress = createProgressPrinter();
+    const summary = await withTestInstance(target.name, async (apiBase) => {
+      return testSubscriptionProxies(target.name, {
+        timeout,
+        concurrency,
+        apiBase,
+        onResult: progress.onResult
+      });
+    });
+    progress.finish();
+    console.log(formatTestSummary(summary));
+    return;
   }
-  console.log(colors.green(`\u5DF2\u91CD\u7F6E: ${targets.map((t) => t.label).join("\u3001")}`));
+  console.error("\u9519\u8BEF: \u672A\u77E5\u7684\u8BA2\u9605\u547D\u4EE4");
+  console.log("\u7528\u6CD5: mihomo sub [list|use|add|update|remove|web|test|clean]");
+  process.exit(1);
 }
 
 // src/commands/test.ts
 function requireRunning() {
-  if (isDaemonEnabled()) {
-    if (!isDaemonRunning(getDaemonStatus())) {
-      console.error("\u9519\u8BEF: mihomo \u672A\u8FD0\u884C\uFF0C\u8BF7\u5148\u542F\u52A8 (mihomo daemon on)");
-      process.exit(1);
-    }
-    return;
-  }
-  const status = getStatus();
-  if (!status.running) {
-    console.error("\u9519\u8BEF: mihomo \u672A\u8FD0\u884C\uFF0C\u8BF7\u5148\u542F\u52A8 (mihomo start)");
+  const state = getRunningState();
+  if (!state.running) {
+    const hint = state.daemon ? "mihomo daemon on" : "mihomo start";
+    console.error(`\u9519\u8BEF: mihomo \u672A\u8FD0\u884C\uFF0C\u8BF7\u5148\u542F\u52A8 (${hint})`);
     process.exit(1);
   }
 }
@@ -6532,21 +6907,24 @@ async function cmdClean(args) {
     console.log(`${colors.green("\u5DF2\u6E05\u7406")}: ${formatCleanSummary(result)}`);
     console.log("");
     console.log("\u91CD\u542F mihomo \u4F7F\u66F4\u6539\u751F\u6548...");
-    if (isDaemonEnabled()) {
-      const configInfo = prepareConfigForStart("mixed", activeSub.name);
-      try {
-        restartDaemon();
-      } catch (e) {
-        console.error(`${colors.red("\u91CD\u542F\u5931\u8D25:")} ${e.message.split("\n")[0]}`);
-        process.exit(1);
+    const mode = getRuntimeMode();
+    const daemonManaged = isDaemonEnabled();
+    try {
+      if (!daemonManaged) {
+        if (hasRootResidue()) {
+          console.error(`${colors.red("\u9519\u8BEF:")} \u4E3B\u5B9E\u4F8B\u4EE5 root \u8FD0\u884C\uFF08TUN\uFF09\uFF0C\u505C\u6B62\u5B83\u9700\u8981 sudo`);
+          console.error("\u8BF7\u6539\u7528 mihomo sub clean\uFF08\u9694\u79BB\u5B9E\u4F8B\u6D4B\u901F\uFF0C\u65E0\u9700\u505C\u6B62\u4E3B\u5B9E\u4F8B\uFF09");
+          process.exit(1);
+        }
+        handleStopResult(stop());
       }
-      console.log(`${colors.green("\u5DF2\u91CD\u542F (\u4FDD\u6D3B)")} \xB7 ${formatProxySummary(configInfo)}`);
-    } else {
-      const currentMode = getConfigInfo()?.tun ? "tun" : "mixed";
-      handleStopResult(stop());
-      const configInfo = prepareConfigForStart(currentMode, activeSub.name);
-      const startResult = await start(currentMode);
-      console.log(`${colors.green("\u5DF2\u91CD\u542F")} (PID ${startResult.pid}) \xB7 ${formatProxySummary(configInfo)}`);
+      const configInfo = prepareConfigForStart(mode, activeSub.name);
+      const pid = await launchOrRestart(mode);
+      const label = daemonManaged ? "\u5DF2\u91CD\u542F (\u4FDD\u6D3B)" : "\u5DF2\u91CD\u542F";
+      console.log(`${colors.green(label)}${pid ? ` (PID ${pid})` : ""} \xB7 ${formatProxySummary(configInfo)}`);
+    } catch (e) {
+      console.error(`${colors.red("\u91CD\u542F\u5931\u8D25:")} ${e.message.split("\n")[0]}`);
+      process.exit(1);
     }
   }
 }
@@ -6562,6 +6940,10 @@ function cmdUI(args) {
   const url = UI_URLS[uiName];
   console.log(`\u6253\u5F00 Web UI: ${uiName}`);
   console.log(`\u5730\u5740: ${url}`);
+  const secret = readSettings().controller_secret;
+  if (secret) {
+    console.log("\u5DF2\u914D\u7F6E\u8BBF\u95EE\u5BC6\u94A5\uFF08UI \u8FDE\u63A5 127.0.0.1:9090 \u65F6\u9700\u8F93\u5165\uFF0C\u5BC6\u94A5\u89C1 settings.json\uFF09");
+  }
   const success = openUrl(url);
   if (!success) {
     console.log("\u8BF7\u624B\u52A8\u8BBF\u95EE\u4E0A\u9762\u7684\u5730\u5740");
@@ -6583,11 +6965,16 @@ async function cmdUpdate() {
       if (code === 0) {
         resolve();
       } else {
+        console.error("\u66F4\u65B0\u5931\u8D25\u3002\u82E5\u4E3A\u6743\u9650\u95EE\u9898\uFF08EACCES\uFF09\uFF0C\u53EF\u5C1D\u8BD5: sudo npm install -g mihomo-cli");
         process.exit(code || 1);
       }
     });
     npm.on("error", (e) => {
-      console.error(`\u6267\u884C\u5931\u8D25: ${e.message}`);
+      if (e.message.includes("EACCES") || e.message.includes("permission")) {
+        console.error("\u6743\u9650\u4E0D\u8DB3\uFF0C\u53EF\u5C1D\u8BD5: sudo npm install -g mihomo-cli");
+      } else {
+        console.error(`\u6267\u884C\u5931\u8D25: ${e.message}`);
+      }
       process.exit(1);
     });
   });
@@ -6607,9 +6994,204 @@ async function cmdUpdate() {
   }
 }
 
+// src/commands/registry.ts
+var COMMANDS = [
+  // === 控制 ===
+  {
+    name: "start",
+    aliases: ["up"],
+    handler: cmdStart,
+    group: "control",
+    usage: ["start [tun|mixed] [-s] [-u ms]     \u542F\u52A8/\u5207\u6362\u4EE3\u7406 (\u9ED8\u8BA4 mixed)", "      [-r N] [-t ms] [-j N] [--no-clean]"]
+  },
+  {
+    name: "tun",
+    aliases: [],
+    handler: cmdStart,
+    rewrite: (args) => ["start", "tun", ...args.slice(1)],
+    group: "control",
+    usage: []
+  },
+  {
+    name: "stop",
+    aliases: ["down"],
+    handler: cmdStop,
+    group: "control",
+    usage: ["stop                         \u505C\u6B62\u4EE3\u7406"]
+  },
+  {
+    name: "status",
+    aliases: [],
+    handler: printStatus,
+    group: "control",
+    usage: ["status                       \u67E5\u770B\u72B6\u6001"]
+  },
+  // === 界面 ===
+  {
+    name: "ui",
+    aliases: [],
+    handler: cmdUI,
+    group: "interface",
+    usage: ["ui [zash|dash|yacd]          \u6253\u5F00 Web UI (\u9ED8\u8BA4 zash)"]
+  },
+  {
+    name: "log",
+    aliases: [],
+    handler: cmdLog,
+    group: "interface",
+    usage: ["log [-o]                     \u5B9E\u65F6\u65E5\u5FD7\uFF08-o \u6253\u5F00\u6587\u4EF6\uFF09"]
+  },
+  {
+    name: "logs",
+    aliases: [],
+    handler: cmdLogs,
+    group: "interface",
+    usage: ["logs [\u7F16\u53F7] [-n N] [-o]      \u65E5\u5FD7\u5217\u8868\uFF080=\u5F53\u524D\uFF0C1+=\u5F52\u6863\uFF09"]
+  },
+  // === 订阅 ===
+  {
+    name: "subscription",
+    aliases: ["sub", "subscriptions"],
+    handler: cmdSubscription,
+    group: "subscription",
+    usage: [
+      "subscription                 \u5217\u51FA\u6240\u6709\u8BA2\u9605\uFF08\u522B\u540D sub\uFF09",
+      "subscription use <name>      \u5207\u6362\u5F53\u524D\u8BA2\u9605",
+      "subscription add <url> [name]  \u6DFB\u52A0\u8BA2\u9605",
+      "subscription update [name]   \u66F4\u65B0\u8BA2\u9605\uFF08\u65E0\u53C2\u66F4\u65B0\u6240\u6709\uFF09",
+      "subscription remove <name>   \u5220\u9664\u8BA2\u9605",
+      "subscription web [name]      \u6253\u5F00\u8BA2\u9605\u9875\u9762",
+      "subscription test [name]     \u6D4B\u8BD5\u8282\u70B9\uFF08\u72EC\u7ACB\u5B9E\u4F8B\uFF0C\u65E0\u9700\u8FD0\u884C\uFF09",
+      "subscription clean [name]    \u6D4B\u901F\u6E05\u7406\uFF08\u72EC\u7ACB\u5B9E\u4F8B\uFF0C\u4E0D\u52A8\u4E3B\u5B9E\u4F8B\uFF09"
+    ]
+  },
+  {
+    name: "use",
+    aliases: [],
+    handler: cmdSubscription,
+    rewrite: (args) => ["sub", "use", ...args.slice(1)],
+    group: "subscription",
+    usage: []
+  },
+  {
+    name: "test",
+    aliases: [],
+    handler: cmdTest,
+    group: "subscription",
+    usage: ["test [-t ms] [-j N]           \u6D4B\u8BD5\u5F53\u524D\u8282\u70B9\uFF08\u7ECF\u8FD0\u884C\u4E2D\u7684\u4E3B\u5B9E\u4F8B\uFF09"]
+  },
+  {
+    name: "clean",
+    aliases: [],
+    handler: cmdClean,
+    group: "subscription",
+    usage: ["clean [-t ms] [-j N] [-r N]   \u6E05\u7406\u5931\u8D25\u8282\u70B9\u5E76\u91CD\u542F\uFF08\u7ECF\u4E3B\u5B9E\u4F8B\uFF09"]
+  },
+  // === 配置 ===
+  {
+    name: "overwrite",
+    aliases: ["ow"],
+    handler: cmdOverwrite,
+    group: "config",
+    usage: ["overwrite                   \u67E5\u770B\u8986\u5199\u72B6\u6001\uFF08\u522B\u540D ow\uFF09", "overwrite on|off            \u542F\u7528/\u7981\u7528\u8986\u5199\u914D\u7F6E"]
+  },
+  {
+    name: "on",
+    aliases: [],
+    handler: cmdOverwrite,
+    rewrite: () => ["ow", "on"],
+    group: "config",
+    usage: []
+  },
+  {
+    name: "off",
+    aliases: [],
+    handler: cmdOverwrite,
+    rewrite: () => ["ow", "off"],
+    group: "config",
+    usage: []
+  },
+  {
+    name: "directory",
+    aliases: ["dir", "dirs", "directories"],
+    handler: cmdDirectory,
+    group: "config",
+    usage: ["directory                   \u663E\u793A\u6570\u636E\u76EE\u5F55\u4F4D\u7F6E\uFF08\u522B\u540D dir\uFF09", "directory open [target]     \u6253\u5F00\u76EE\u5F55: root|subs|logs|runtime|..."]
+  },
+  {
+    name: "open",
+    aliases: [],
+    handler: cmdDirectory,
+    rewrite: (args) => ["dir", "open", ...args.slice(1)],
+    group: "config",
+    usage: []
+  },
+  // === 系统 ===
+  {
+    name: "kernel",
+    aliases: [],
+    handler: cmdKernel,
+    group: "system",
+    usage: ["kernel [--mirror [\u955C\u50CF]]         \u66F4\u65B0\u5185\u6838\uFF08\u9ED8\u8BA4\u76F4\u8FDE\uFF0C--mirror \u4F7F\u7528 v6\uFF09"]
+  },
+  {
+    name: "daemon",
+    aliases: [],
+    handler: cmdDaemon,
+    group: "system",
+    usage: ["daemon on|off               \u5F00\u673A\u81EA\u542F + \u5D29\u6E83\u91CD\u542F\uFF08\u4EC5 Mixed\uFF0C\u9700\u7BA1\u7406\u5458\u5BC6\u7801\uFF09", "daemon status               \u67E5\u770B\u4FDD\u6D3B\u72B6\u6001"]
+  },
+  {
+    name: "update",
+    aliases: ["upd", "upgrade"],
+    handler: cmdUpdate,
+    group: "system",
+    usage: ["update                       \u66F4\u65B0 mihomo-cli (npm install -g)"]
+  },
+  {
+    name: "reset",
+    aliases: [],
+    handler: cmdReset,
+    group: "system",
+    usage: ["reset [\u76EE\u6807...] [--full] [-y]   \u91CD\u7F6E: \u7559\u7A7A\u4FDD\u7559\u8BBE\u7F6E/\u5185\u6838/\u8986\u5199, \u6307\u5B9A\u76EE\u6807\u5220\u5BF9\u5E94\u9879, --full \u5220\u5168\u90E8, -y \u8DF3\u8FC7\u786E\u8BA4"]
+  },
+  // === meta(不在分组清单展示,help 末尾单列) ===
+  {
+    name: "help",
+    aliases: ["-h", "--help"],
+    handler: () => printHelp(COMMANDS),
+    group: "meta",
+    usage: ["help, -h                     \u663E\u793A\u5E2E\u52A9"]
+  },
+  {
+    name: "version",
+    aliases: ["-v", "--version"],
+    handler: printVersion,
+    group: "meta",
+    usage: ["version, -v                  \u663E\u793A\u7248\u672C"]
+  }
+];
+var COMMAND_INDEX = (() => {
+  const index = /* @__PURE__ */ new Map();
+  for (const cmd of COMMANDS) {
+    for (const token of [cmd.name, ...cmd.aliases]) {
+      if (index.has(token)) {
+        throw new Error(`\u547D\u4EE4\u6CE8\u518C\u8868\u5B58\u5728\u91CD\u590D token: "${token}"\uFF08${index.get(token)?.name} \u4E0E ${cmd.name}\uFF09`);
+      }
+      index.set(token, cmd);
+    }
+  }
+  return index;
+})();
+function findCommand(token) {
+  return COMMAND_INDEX.get(token);
+}
+
 // src/index.ts
 process.on("SIGINT", () => {
-  console.log("\n\u6B63\u5728\u9000\u51FA...");
+  if (!isSilentSigint()) {
+    console.log("\n\u6B63\u5728\u9000\u51FA...");
+  }
   runCleanup();
   process.exit(130);
 });
@@ -6623,12 +7205,14 @@ process.on("uncaughtException", (e) => {
   if (e.stack) {
     console.error(e.stack.split("\n").slice(1).join("\n"));
   }
+  runCleanup();
   process.exit(1);
 });
 process.on("unhandledRejection", (reason) => {
   const msg = reason instanceof Error ? reason.message : String(reason);
   console.error(`
 \u672A\u5904\u7406\u7684 Promise \u62D2\u7EDD: ${msg}`);
+  runCleanup();
   process.exit(1);
 });
 function clearProxyEnv() {
@@ -6648,94 +7232,18 @@ async function main() {
     printShortHelp();
     return;
   }
-  const cmd = args[0].toLowerCase();
-  if (["help", "-h", "--help"].includes(cmd)) {
-    printHelp();
-    return;
-  }
-  if (["version", "-v", "--version"].includes(cmd)) {
-    printVersion();
-    return;
-  }
-  switch (cmd) {
-    case "up":
-    case "start":
-      await cmdStart(args);
-      break;
-    case "tun":
-      await cmdStart(["start", "tun", ...args.slice(1)]);
-      break;
-    case "down":
-    case "stop":
-      await cmdStop();
-      break;
-    case "status":
-      printStatus();
-      break;
-    case "log":
-      cmdLog(args);
-      break;
-    case "logs":
-      cmdLogs(args);
-      break;
-    case "open":
-      cmdDirectory(["dir", "open", ...args.slice(1)]);
-      break;
-    case "ui":
-      cmdUI(args);
-      break;
-    case "kernel":
-      await cmdKernel(args);
-      break;
-    case "upd":
-    case "update":
-    case "upgrade":
-      await cmdUpdate();
-      break;
-    case "use":
-      await cmdSubscription(["sub", "use", ...args.slice(1)]);
-      break;
-    case "sub":
-    case "subscription":
-    case "subscriptions":
-      await cmdSubscription(args);
-      break;
-    case "dir":
-    case "dirs":
-    case "directory":
-    case "directories":
-      cmdDirectory(args);
-      break;
-    case "reset":
-      await cmdReset(args);
-      break;
-    case "daemon":
-      await cmdDaemon(args);
-      break;
-    case "on":
-      await cmdOverwrite(["ow", "on"]);
-      break;
-    case "off":
-      await cmdOverwrite(["ow", "off"]);
-      break;
-    case "ow":
-    case "overwrite":
-      await cmdOverwrite(args);
-      break;
-    case "test":
-      await cmdTest(args);
-      break;
-    case "clean":
-      await cmdClean(args);
-      break;
-    default:
-      console.error(`\u672A\u77E5\u547D\u4EE4: ${cmd}`);
-      console.error('\u4F7F\u7528 "mihomo help" \u67E5\u770B\u5E2E\u52A9');
-      process.exit(1);
+  const token = args[0].toLowerCase();
+  const command = findCommand(token);
+  if (!command) {
+    console.error(`\u672A\u77E5\u547D\u4EE4: ${token}`);
+    console.error('\u4F7F\u7528 "mihomo help" \u67E5\u770B\u5E2E\u52A9');
+    process.exit(1);
   }
+  await command.handler(command.rewrite ? command.rewrite(args) : args);
 }
 main().catch((e) => {
   console.error(`\u9519\u8BEF: ${e.message}`);
+  runCleanup();
   process.exit(1);
 });
 /*! Bundled license information: