diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
new file mode 100644
index 0000000..6871253
--- /dev/null
+++ b/.github/workflows/build.yml
@@ -0,0 +1,99 @@
+# Verify all release targets build (no packaging). Run on push to main and on pull_request.
+name: Build (all targets)
+
+on:
+  push:
+    branches: [main, master]
+  pull_request:
+    branches: [main, master]
+
+env:
+  BINARY_NAME: proxy-convert
+  RUST_BACKTRACE: 1
+
+jobs:
+  build:
+    name: Build ${{ matrix.target }}
+    runs-on: ${{ matrix.runner || matrix.os }}
+    strategy:
+      fail-fast: false
+      matrix:
+        include:
+          - os: ubuntu-latest
+            target: x86_64-unknown-linux-gnu
+          - os: ubuntu-latest
+            target: aarch64-unknown-linux-gnu
+          - os: ubuntu-latest
+            target: x86_64-unknown-linux-musl
+          - os: macos-14
+            target: x86_64-apple-darwin
+          - os: macos-14
+            target: aarch64-apple-darwin
+          - os: windows-latest
+            target: x86_64-pc-windows-msvc
+          - os: windows-latest
+            target: aarch64-pc-windows-msvc
+            runner: windows-11-arm
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Install Rust toolchain
+        uses: dtolnay/rust-toolchain@v1
+        with:
+          toolchain: stable
+          targets: ${{ matrix.target }}
+
+      - name: Cache cargo
+        uses: Swatinem/rust-cache@v2.8.2
+        with:
+          key: ${{ matrix.target }}
+
+      - name: Install Linux deps (glibc cross)
+        if: matrix.os == 'ubuntu-latest' && matrix.target == 'aarch64-unknown-linux-gnu'
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y gcc-aarch64-linux-gnu g++-aarch64-linux-gnu libc6-dev-arm64-cross binutils-aarch64-linux-gnu
+
+      - name: Set env for Linux aarch64 cross
+        if: matrix.os == 'ubuntu-latest' && matrix.target == 'aarch64-unknown-linux-gnu'
+        run: |
+          echo "CC_aarch64_unknown_linux_gnu=aarch64-linux-gnu-gcc" >> $GITHUB_ENV
+          echo "CXX_aarch64_unknown_linux_gnu=aarch64-linux-gnu-g++" >> $GITHUB_ENV
+          echo "AR_aarch64_unknown_linux_gnu=aarch64-linux-gnu-ar" >> $GITHUB_ENV
+          echo "RANLIB_aarch64_unknown_linux_gnu=aarch64-linux-gnu-ranlib" >> $GITHUB_ENV
+          echo "CARGO_TARGET_AARCH64_UNKNOWN_LINUX_GNU_LINKER=aarch64-linux-gnu-gcc" >> $GITHUB_ENV
+
+      - name: Install musl (x86_64)
+        if: matrix.os == 'ubuntu-latest' && matrix.target == 'x86_64-unknown-linux-musl'
+        run: sudo apt-get update && sudo apt-get install -y musl-tools
+
+      - name: Set env for musl (x86_64)
+        if: matrix.os == 'ubuntu-latest' && matrix.target == 'x86_64-unknown-linux-musl'
+        run: echo "CARGO_TARGET_X86_64_UNKNOWN_LINUX_MUSL_LINKER=musl-gcc" >> $GITHUB_ENV
+
+      - name: Build
+        run: cargo build --release --target ${{ matrix.target }} --verbose
+
+      - name: Test binary
+        shell: bash
+        run: |
+          if [ "${{ matrix.os }}" = "windows-latest" ]; then
+            exe="target/${{ matrix.target }}/release/${{ env.BINARY_NAME }}.exe"
+          else
+            exe="target/${{ matrix.target }}/release/${{ env.BINARY_NAME }}"
+          fi
+          if [ ! -f "$exe" ]; then
+            echo "Binary not found: $exe"
+            exit 1
+          fi
+          # Only run binary on native target (cross-compiled binaries cannot run on host)
+          if [ "${{ matrix.os }}" = "ubuntu-latest" ] && [ "${{ matrix.target }}" = "x86_64-unknown-linux-gnu" ]; then
+            "$exe" --version
+          elif [ "${{ matrix.os }}" = "windows-latest" ] && { [ "${{ matrix.target }}" = "x86_64-pc-windows-msvc" ] || [ "${{ matrix.target }}" = "aarch64-pc-windows-msvc" ]; }; then
+            "$exe" --version
+          elif [ "${{ matrix.os }}" = "macos-14" ] && [ "${{ matrix.target }}" = "aarch64-apple-darwin" ]; then
+            "$exe" --version
+          else
+            echo "Skipping execution (cross-compiled target)."
+          fi
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index db5dcf2..0451d61 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -5,105 +5,125 @@ on:
     tags:
       - 'v*'
 
+env:
+  BINARY_NAME: proxy-convert
+  RUST_BACKTRACE: 1
+
 jobs:
   build:
-    name: Build on ${{ matrix.os }} - ${{ matrix.target }}
-    runs-on: ${{ matrix.os }}
+    name: Build ${{ matrix.target }}
+    runs-on: ${{ matrix.runner || matrix.os }}
     strategy:
+      fail-fast: false
       matrix:
         include:
+          # Linux glibc + musl static
           - os: ubuntu-latest
             target: x86_64-unknown-linux-gnu
-          # - os: ubuntu-latest
-          #   target: aarch64-unknown-linux-gnu
-          - os: macos-latest
+          - os: ubuntu-latest
+            target: aarch64-unknown-linux-gnu
+          - os: ubuntu-latest
+            target: x86_64-unknown-linux-musl
+          # macOS
+          - os: macos-14
             target: x86_64-apple-darwin
-          - os: macos-latest
+          - os: macos-14
             target: aarch64-apple-darwin
+          # Windows (aarch64 使用 windows-11-arm runner，os 名称仍为 windows-latest)
           - os: windows-latest
             target: x86_64-pc-windows-msvc
+          - os: windows-latest
+            target: aarch64-pc-windows-msvc
+            runner: windows-11-arm
 
     steps:
-      - name: Checkout code
+      - name: Checkout
         uses: actions/checkout@v4
 
-      - name: Install system dependencies (Ubuntu only)
-        if: matrix.os == 'ubuntu-latest'
-        run: |
-          sudo apt-get update
-          sudo apt-get install -y build-essential
-          sudo apt-get install -y libssl-dev
-          if [ "${{ matrix.target }}" == "aarch64-unknown-linux-gnu" ]; then
-            sudo apt-get install -y gcc-aarch64-linux-gnu
-            sudo apt-get install -y g++-aarch64-linux-gnu
-            sudo apt-get install -y libc6-dev-arm64-cross
-          fi
+      - name: Install Rust toolchain
+        uses: dtolnay/rust-toolchain@v1
+        with:
+          toolchain: stable
+          targets: ${{ matrix.target }}
+
+      - name: Cache cargo
+        uses: Swatinem/rust-cache@v2.8.2
+        with:
+          key: ${{ matrix.target }}
+          shared-key: release
 
-      - name: Set up Rust
+      - name: Install Linux deps (glibc cross)
+        if: matrix.os == 'ubuntu-latest' && matrix.target == 'aarch64-unknown-linux-gnu'
         run: |
-          rustup update stable
-          rustup target add ${{ matrix.target }}
+          sudo apt-get update
+          sudo apt-get install -y gcc-aarch64-linux-gnu g++-aarch64-linux-gnu libc6-dev-arm64-cross binutils-aarch64-linux-gnu
 
-      - name: Set environment variables for ARM cross-compilation (Ubuntu only)
+      - name: Set env for Linux aarch64 cross (glibc)
         if: matrix.os == 'ubuntu-latest' && matrix.target == 'aarch64-unknown-linux-gnu'
         run: |
           echo "CC_aarch64_unknown_linux_gnu=aarch64-linux-gnu-gcc" >> $GITHUB_ENV
           echo "CXX_aarch64_unknown_linux_gnu=aarch64-linux-gnu-g++" >> $GITHUB_ENV
           echo "AR_aarch64_unknown_linux_gnu=aarch64-linux-gnu-ar" >> $GITHUB_ENV
           echo "RANLIB_aarch64_unknown_linux_gnu=aarch64-linux-gnu-ranlib" >> $GITHUB_ENV
-          echo "PKG_CONFIG_ALLOW_CROSS=1" >> $GITHUB_ENV
-          echo "PKG_CONFIG_SYSROOT_DIR=/usr/aarch64-linux-gnu" >> $GITHUB_ENV
+          echo "CARGO_TARGET_AARCH64_UNKNOWN_LINUX_GNU_LINKER=aarch64-linux-gnu-gcc" >> $GITHUB_ENV
 
-      - name: Build project
+      - name: Install musl (Linux static, x86_64 only)
+        if: matrix.os == 'ubuntu-latest' && matrix.target == 'x86_64-unknown-linux-musl'
+        run: sudo apt-get update && sudo apt-get install -y musl-tools
+
+      - name: Set env for musl (x86_64)
+        if: matrix.os == 'ubuntu-latest' && matrix.target == 'x86_64-unknown-linux-musl'
+        run: echo "CARGO_TARGET_X86_64_UNKNOWN_LINUX_MUSL_LINKER=musl-gcc" >> $GITHUB_ENV
+
+      - name: Build
         run: cargo build --release --target ${{ matrix.target }} --verbose
 
       - name: Test binary
+        shell: bash
         run: |
-          if [ "${{ matrix.os }}" == "windows-latest" ]; then
-            binary_path=$(find target/${{ matrix.target }}/release -maxdepth 1 -type f -name "*.exe" | head -n 1)
+          if [ "${{ matrix.os }}" = "windows-latest" ]; then
+            exe="target/${{ matrix.target }}/release/${{ env.BINARY_NAME }}.exe"
           else
-            binary_path=$(find target/${{ matrix.target }}/release -maxdepth 1 -type f \( -perm -u=x -o -perm -g=x -o -perm -o=x \) | head -n 1)
+            exe="target/${{ matrix.target }}/release/${{ env.BINARY_NAME }}"
           fi
-          if [ -n "$binary_path" ]; then
-            $binary_path --version
-          else
-            echo "No executable binary found."
+          if [ ! -f "$exe" ]; then
+            echo "Binary not found: $exe"
             exit 1
           fi
-        shell: bash
-        env:
-          RUST_BACKTRACE: 1
+          # Only run binary on native target (cross-compiled binaries cannot run on host)
+          if [ "${{ matrix.os }}" = "ubuntu-latest" ] && [ "${{ matrix.target }}" = "x86_64-unknown-linux-gnu" ]; then
+            "$exe" --version
+          elif [ "${{ matrix.os }}" = "windows-latest" ] && { [ "${{ matrix.target }}" = "x86_64-pc-windows-msvc" ] || [ "${{ matrix.target }}" = "aarch64-pc-windows-msvc" ]; }; then
+            "$exe" --version
+          elif [ "${{ matrix.os }}" = "macos-14" ] && [ "${{ matrix.target }}" = "aarch64-apple-darwin" ]; then
+            "$exe" --version
+          else
+            echo "Skipping execution (cross-compiled target)."
+          fi
 
-      - name: Package binary
+      - name: Package
         shell: bash
         run: |
-          if [ "${{ matrix.os }}" == "windows-latest" ]; then
-            binary_path=$(find target/${{ matrix.target }}/release -maxdepth 1 -type f -name "*.exe" | head -n 1)
-            binary_name=$(basename "$binary_path")
+          if [ "${{ matrix.os }}" = "windows-latest" ]; then
+            exe="target/${{ matrix.target }}/release/${{ env.BINARY_NAME }}.exe"
+            out="${{ env.BINARY_NAME }}-${{ matrix.target }}.zip"
+            mkdir -p release
+            cp "$exe" release/
+            (cd release && 7z a "$out" "${{ env.BINARY_NAME }}.exe")
           else
-            binary_path=$(find target/${{ matrix.target }}/release -maxdepth 1 -type f \( -perm -u=x -o -perm -g=x -o -perm -o=x \) | head -n 1)
-            binary_name=$(basename "$binary_path")
+            exe="target/${{ matrix.target }}/release/${{ env.BINARY_NAME }}"
+            out="${{ env.BINARY_NAME }}-${{ matrix.target }}.tar.gz"
+            mkdir -p release
+            cp "$exe" release/
+            (cd release && tar czvf "$out" "${{ env.BINARY_NAME }}")
           fi
-          mkdir -p ./release
-          cp "$binary_path" release/"$binary_name"
-          cd release
-          if [ "${{ matrix.os }}" == "windows-latest" ]; then
-            7z a "$binary_name-${{ matrix.target }}.zip" "$binary_name"
-            echo "Packaged file: ./release/$binary_name-${{ matrix.target }}.zip"
-          else
-            tar czvf "$binary_name-${{ matrix.target }}.tar.gz" "$binary_name"
-            echo "Packaged file: ./release/$binary_name-${{ matrix.target }}.tar.gz"
-          fi
-          cd ..
-      
+          echo "PACKAGE_PATH=release/$out" >> $GITHUB_ENV
+
       - name: Upload artifact
         uses: actions/upload-artifact@v4
         with:
           name: ${{ matrix.target }}
-          path: |
-            release/*.zip
-            release/*.tar.gz
-          if-no-files-found: error
+          path: ${{ env.PACKAGE_PATH }}
 
   release:
     name: Create Release
@@ -113,13 +133,12 @@ jobs:
       contents: write
 
     steps:
-      - name: Download all artifacts
+      - name: Download artifacts
         uses: actions/download-artifact@v4
         with:
           path: artifacts
 
       - name: Create Release
-        id: create_release
         uses: softprops/action-gh-release@v2
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
@@ -129,5 +148,5 @@ jobs:
           draft: false
           prerelease: false
           files: |
-            artifacts/**/*.zip
-            artifacts/**/*.tar.gz  
\ No newline at end of file
+            artifacts/*/*.tar.gz
+            artifacts/*/*.zip
diff --git a/Cargo.lock b/Cargo.lock
index cc5dbda..cc73f07 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -3,25 +3,31 @@
 version = 4
 
 [[package]]
-name = "addr2line"
-version = "0.24.2"
+name = "ahash"
+version = "0.8.12"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "dfbe277e56a376000877090da837660b4427aad530e3028d44e0bffe4f89a1c1"
+checksum = "5a15f179cd60c4584b8a8c596927aadc462e27f2ca70c04e0071964a73ba7a75"
 dependencies = [
- "gimli",
+ "cfg-if",
+ "once_cell",
+ "version_check",
+ "zerocopy",
 ]
 
 [[package]]
-name = "adler2"
-version = "2.0.0"
+name = "aho-corasick"
+version = "1.1.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "512761e0bb2578dd7380c6baaa0f4ce03e84f95e960231d1dec8bf4d7d6e2627"
+checksum = "ddd31a130427c27518df266943a5308ed92d4b226cc639f5a8f1002816174301"
+dependencies = [
+ "memchr",
+]
 
 [[package]]
-name = "android-tzdata"
-version = "0.1.1"
+name = "allocator-api2"
+version = "0.2.21"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e999941b234f3131b00bc13c22d06e8c5ff726d1b6318ac7eb276997bbb4fef0"
+checksum = "683d7910e743518b0e34f1186f92494becacb047c7b6bf616c96772180fef923"
 
 [[package]]
 name = "android_system_properties"
@@ -34,9 +40,9 @@ dependencies = [
 
 [[package]]
 name = "anstream"
-version = "0.6.18"
+version = "0.6.21"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8acc5369981196006228e28809f761875c0327210a891e941f4c683b3a99529b"
+checksum = "43d5b281e737544384e969a5ccad3f1cdd24b48086a0fc1b2a5262a26b8f4f4a"
 dependencies = [
  "anstyle",
  "anstyle-parse",
@@ -49,60 +55,106 @@ dependencies = [
 
 [[package]]
 name = "anstyle"
-version = "1.0.10"
+version = "1.0.13"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "55cc3b69f167a1ef2e161439aa98aed94e6028e5f9a59be9a6ffb47aef1651f9"
+checksum = "5192cca8006f1fd4f7237516f40fa183bb07f8fbdfedaa0036de5ea9b0b45e78"
 
 [[package]]
 name = "anstyle-parse"
-version = "0.2.6"
+version = "0.2.7"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3b2d16507662817a6a20a9ea92df6652ee4f94f914589377d69f3b21bc5798a9"
+checksum = "4e7644824f0aa2c7b9384579234ef10eb7efb6a0deb83f9630a49594dd9c15c2"
 dependencies = [
  "utf8parse",
 ]
 
 [[package]]
 name = "anstyle-query"
-version = "1.1.2"
+version = "1.1.5"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "79947af37f4177cfead1110013d678905c37501914fba0efea834c3fe9a8d60c"
+checksum = "40c48f72fd53cd289104fc64099abca73db4166ad86ea0b4341abe65af83dadc"
 dependencies = [
- "windows-sys 0.59.0",
+ "windows-sys 0.61.2",
 ]
 
 [[package]]
 name = "anstyle-wincon"
-version = "3.0.7"
+version = "3.0.11"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ca3534e77181a9cc07539ad51f2141fe32f6c3ffd4df76db8ad92346b003ae4e"
+checksum = "291e6a250ff86cd4a820112fb8898808a366d8f9f58ce16d1f538353ad55747d"
 dependencies = [
  "anstyle",
- "once_cell",
- "windows-sys 0.59.0",
+ "once_cell_polyfill",
+ "windows-sys 0.61.2",
 ]
 
 [[package]]
-name = "autocfg"
-version = "1.4.0"
+name = "anyhow"
+version = "1.0.100"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a23eb6b1614318a8071c9b2521f36b424b2c83db5eb3a0fead4a6c0809af6e61"
+
+[[package]]
+name = "arraydeque"
+version = "0.5.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ace50bade8e6234aa140d9a2f552bbee1db4d353f69b8217bc503490fc1a9f26"
+checksum = "7d902e3d592a523def97af8f317b08ce16b7ab854c1985a0c671e6f15cebc236"
 
 [[package]]
-name = "backtrace"
-version = "0.3.74"
+name = "assert-json-diff"
+version = "2.0.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8d82cb332cdfaed17ae235a638438ac4d4839913cc2af585c3c6746e8f8bee1a"
+checksum = "47e4f2b81832e72834d7518d8487a0396a28cc408186a2e8854c0f98011faf12"
 dependencies = [
- "addr2line",
- "cfg-if",
- "libc",
- "miniz_oxide",
- "object",
- "rustc-demangle",
- "windows-targets 0.52.6",
+ "serde",
+ "serde_json",
+]
+
+[[package]]
+name = "async-stream"
+version = "0.3.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0b5a71a6f37880a80d1d7f19efd781e4b5de42c88f0722cc13bcb6cc2cfe8476"
+dependencies = [
+ "async-stream-impl",
+ "futures-core",
+ "pin-project-lite",
 ]
 
+[[package]]
+name = "async-stream-impl"
+version = "0.3.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c7c24de15d275a1ecfd47a380fb4d5ec9bfe0933f309ed5e705b775596a3574d"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "async-trait"
+version = "0.1.89"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9035ad2d096bed7955a320ee7e2230574d28fd3c3a0f186cbea1ff3c7eed5dbb"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "atomic-waker"
+version = "1.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1505bd5d3d116872e7271a6d4e16d81d0c8570876c8de68093a09ac269d8aac0"
+
+[[package]]
+name = "autocfg"
+version = "1.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c08606f8c3cbf4ce6ec8e28fb0014a2c086708fe954eaa885384a6165172e7e8"
+
 [[package]]
 name = "base64"
 version = "0.22.1"
@@ -111,36 +163,85 @@ checksum = "72b3254f16251a8381aa12e40e3c4d2f0199f8c6508fbecb9d91f575e0fbb8c6"
 
 [[package]]
 name = "bitflags"
-version = "2.9.0"
+version = "2.10.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "812e12b5285cc515a9c72a5c1d3b6d46a19dac5acfef5265968c166106e31dd3"
+dependencies = [
+ "serde_core",
+]
+
+[[package]]
+name = "block-buffer"
+version = "0.10.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5c8214115b7bf84099f1309324e63141d4c5d7cc26862f97a0a857dbefe165bd"
+checksum = "3078c7629b62d3f0439517fa394996acacc5cbc91c5a20d8c658e77abd503a71"
+dependencies = [
+ "generic-array",
+]
 
 [[package]]
 name = "bumpalo"
-version = "3.17.0"
+version = "3.19.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1628fb46dfa0b37568d12e5edd512553eccf6a22a78e8bde00bb4aed84d5bdbf"
+checksum = "5dd9dc738b7a8311c7ade152424974d8115f2cdad61e8dab8dac9f2362298510"
 
 [[package]]
 name = "bytes"
-version = "1.10.1"
+version = "1.11.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b35204fbdc0b3f4446b89fc1ac2cf84a8a68971995d0bf2e925ec7cd960f9cb3"
+
+[[package]]
+name = "cached"
+version = "0.56.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "801927ee168e17809ab8901d9f01f700cd7d8d6a6527997fee44e4b0327a253c"
+dependencies = [
+ "ahash",
+ "async-trait",
+ "cached_proc_macro",
+ "cached_proc_macro_types",
+ "futures",
+ "hashbrown 0.15.5",
+ "once_cell",
+ "thiserror",
+ "tokio",
+ "web-time",
+]
+
+[[package]]
+name = "cached_proc_macro"
+version = "0.25.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d71b6127be86fdcfddb610f7182ac57211d4b18a3e9c82eb2d17662f2227ad6a"
+checksum = "9225bdcf4e4a9a4c08bf16607908eb2fbf746828d5e0b5e019726dbf6571f201"
+dependencies = [
+ "darling 0.20.11",
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "cached_proc_macro_types"
+version = "0.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ade8366b8bd5ba243f0a58f036cc0ca8a2f069cff1a2351ef1cac6b083e16fc0"
 
 [[package]]
 name = "cc"
-version = "1.2.17"
+version = "1.2.51"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1fcb57c740ae1daf453ae85f16e37396f672b039e00d9d866e07ddb24e328e3a"
+checksum = "7a0aeaff4ff1a90589618835a598e545176939b97874f7abc7851caa0618f203"
 dependencies = [
+ "find-msvc-tools",
  "shlex",
 ]
 
 [[package]]
 name = "cfg-if"
-version = "1.0.0"
+version = "1.0.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "baf1de4339761588bc0619e3cbc0120ee582ebb74b53b4efbf79117bd2da40fd"
+checksum = "9330f8b2ff13f34540b44e946ef35111825727b38d33286ef986142615121801"
 
 [[package]]
 name = "cfg_aliases"
@@ -150,22 +251,23 @@ checksum = "613afe47fcd5fac7ccf1db93babcb082c5994d996f20b8b159f2ad1658eb5724"
 
 [[package]]
 name = "chrono"
-version = "0.4.40"
+version = "0.4.42"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1a7964611d71df112cb1730f2ee67324fcf4d0fc6606acbbe9bfe06df124637c"
+checksum = "145052bdd345b87320e369255277e3fb5152762ad123a901ef5c262dd38fe8d2"
 dependencies = [
- "android-tzdata",
  "iana-time-zone",
+ "js-sys",
  "num-traits",
  "serde",
+ "wasm-bindgen",
  "windows-link",
 ]
 
 [[package]]
 name = "clap"
-version = "4.5.34"
+version = "4.5.53"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e958897981290da2a852763fe9cdb89cd36977a5d729023127095fa94d95e2ff"
+checksum = "c9e340e012a1bf4935f5282ed1436d1489548e8f72308207ea5df0e23d2d03f8"
 dependencies = [
  "clap_builder",
  "clap_derive",
@@ -173,9 +275,9 @@ dependencies = [
 
 [[package]]
 name = "clap_builder"
-version = "4.5.34"
+version = "4.5.53"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "83b0f35019843db2160b5bb19ae09b4e6411ac33fc6a712003c33e03090e2489"
+checksum = "d76b5d13eaa18c901fd2f7fca939fefe3a0727a953561fefdf3b2922b8569d00"
 dependencies = [
  "anstream",
  "anstyle",
@@ -185,9 +287,9 @@ dependencies = [
 
 [[package]]
 name = "clap_derive"
-version = "4.5.32"
+version = "4.5.49"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "09176aae279615badda0765c0c0b3f6ed53f4709118af73cf4655d85d1530cd7"
+checksum = "2a0b5487afeab2deb2ff4e03a807ad1a03ac532ff5a2cee5d86884440c7f7671"
 dependencies = [
  "heck",
  "proc-macro2",
@@ -197,15 +299,74 @@ dependencies = [
 
 [[package]]
 name = "clap_lex"
-version = "0.7.4"
+version = "0.7.6"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f46ad14479a25103f283c0f10005961cf086d8dc42205bb44c46ac563475dca6"
+checksum = "a1d728cc89cf3aee9ff92b05e62b19ee65a02b5702cff7d5a377e32c6ae29d8d"
 
 [[package]]
 name = "colorchoice"
-version = "1.0.3"
+version = "1.0.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b05b61dc5112cbb17e4b6cd61790d9845d13888356391624cbe7e41efeac1e75"
+
+[[package]]
+name = "config"
+version = "0.15.19"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b30fa8254caad766fc03cb0ccae691e14bf3bd72bfff27f72802ce729551b3d6"
+dependencies = [
+ "async-trait",
+ "convert_case",
+ "json5",
+ "pathdiff",
+ "ron",
+ "rust-ini",
+ "serde-untagged",
+ "serde_core",
+ "serde_json",
+ "toml",
+ "winnow",
+ "yaml-rust2",
+]
+
+[[package]]
+name = "const-random"
+version = "0.1.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "87e00182fe74b066627d63b85fd550ac2998d4b0bd86bfed477a0ae4c7c71359"
+dependencies = [
+ "const-random-macro",
+]
+
+[[package]]
+name = "const-random-macro"
+version = "0.1.16"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f9d839f2a20b0aee515dc581a6172f2321f96cab76c1a38a4c584a194955390e"
+dependencies = [
+ "getrandom 0.2.16",
+ "once_cell",
+ "tiny-keccak",
+]
+
+[[package]]
+name = "convert_case"
+version = "0.6.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5b63caa9aa9397e2d9480a9b13673856c78d8ac123288526c37d7839f2a86990"
+checksum = "ec182b0ca2f35d8fc196cf3404988fd8b8c739a4d270ff118a398feb0cbec1ca"
+dependencies = [
+ "unicode-segmentation",
+]
+
+[[package]]
+name = "core-foundation"
+version = "0.10.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b2a6cd9ae233e7f62ba4e9353e81a88df7fc8a5987b8d445b4d90c879bd156f6"
+dependencies = [
+ "core-foundation-sys",
+ "libc",
+]
 
 [[package]]
 name = "core-foundation-sys"
@@ -213,14 +374,49 @@ version = "0.8.7"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "773648b94d0e5d620f64f280777445740e61fe701025087ec8b57f45c791888b"
 
+[[package]]
+name = "cpufeatures"
+version = "0.2.17"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "59ed5838eebb26a2bb2e58f6d5b5316989ae9d08bab10e0e6d103e656d1b0280"
+dependencies = [
+ "libc",
+]
+
+[[package]]
+name = "crunchy"
+version = "0.2.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "460fbee9c2c2f33933d720630a6a0bac33ba7053db5344fac858d4b8952d77d5"
+
+[[package]]
+name = "crypto-common"
+version = "0.1.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "78c8292055d1c1df0cce5d180393dc8cce0abec0a7102adb6c7b1eef6016d60a"
+dependencies = [
+ "generic-array",
+ "typenum",
+]
+
 [[package]]
 name = "darling"
 version = "0.20.11"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "fc7f46116c46ff9ab3eb1597a45688b6715c6e628b5c133e288e709a29bcb4ee"
 dependencies = [
- "darling_core",
- "darling_macro",
+ "darling_core 0.20.11",
+ "darling_macro 0.20.11",
+]
+
+[[package]]
+name = "darling"
+version = "0.21.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9cdf337090841a411e2a7f3deb9187445851f91b309c0c0a29e05f74a00a48c0"
+dependencies = [
+ "darling_core 0.21.3",
+ "darling_macro 0.21.3",
 ]
 
 [[package]]
@@ -237,25 +433,99 @@ dependencies = [
  "syn",
 ]
 
+[[package]]
+name = "darling_core"
+version = "0.21.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1247195ecd7e3c85f83c8d2a366e4210d588e802133e1e355180a9870b517ea4"
+dependencies = [
+ "fnv",
+ "ident_case",
+ "proc-macro2",
+ "quote",
+ "strsim",
+ "syn",
+]
+
 [[package]]
 name = "darling_macro"
 version = "0.20.11"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "fc34b93ccb385b40dc71c6fceac4b2ad23662c7eeb248cf10d529b7e055b6ead"
 dependencies = [
- "darling_core",
+ "darling_core 0.20.11",
  "quote",
  "syn",
 ]
 
+[[package]]
+name = "darling_macro"
+version = "0.21.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d38308df82d1080de0afee5d069fa14b0326a88c14f15c5ccda35b4a6c414c81"
+dependencies = [
+ "darling_core 0.21.3",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "deadpool"
+version = "0.12.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0be2b1d1d6ec8d846f05e137292d0b89133caf95ef33695424c09568bdd39b1b"
+dependencies = [
+ "deadpool-runtime",
+ "lazy_static",
+ "num_cpus",
+ "tokio",
+]
+
+[[package]]
+name = "deadpool-runtime"
+version = "0.1.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "092966b41edc516079bdf31ec78a2e0588d1d0c08f78b91d8307215928642b2b"
+
 [[package]]
 name = "deranged"
-version = "0.4.1"
+version = "0.5.5"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "28cfac68e08048ae1883171632c2aef3ebc555621ae56fbccce1cbf22dd7f058"
+checksum = "ececcb659e7ba858fb4f10388c250a7252eb0a27373f1a72b8748afdd248e587"
 dependencies = [
  "powerfmt",
- "serde",
+ "serde_core",
+]
+
+[[package]]
+name = "digest"
+version = "0.10.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9ed9a281f7bc9b7576e61468ba615a66a5c8cfdff42420a70aa82701a3b1e292"
+dependencies = [
+ "block-buffer",
+ "crypto-common",
+]
+
+[[package]]
+name = "dirs"
+version = "6.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c3e8aa94d75141228480295a7d0e7feb620b1a5ad9f12bc40be62411e38cce4e"
+dependencies = [
+ "dirs-sys",
+]
+
+[[package]]
+name = "dirs-sys"
+version = "0.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e01a3366d27ee9890022452ee61b2b63a67e6f13f58900b651ff5665f0bb1fab"
+dependencies = [
+ "libc",
+ "option-ext",
+ "redox_users",
+ "windows-sys 0.61.2",
 ]
 
 [[package]]
@@ -269,27 +539,105 @@ dependencies = [
  "syn",
 ]
 
+[[package]]
+name = "dlv-list"
+version = "0.5.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "442039f5147480ba31067cb00ada1adae6892028e40e45fc5de7b7df6dcc1b5f"
+dependencies = [
+ "const-random",
+]
+
+[[package]]
+name = "dyn-clone"
+version = "1.0.20"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d0881ea181b1df73ff77ffaaf9c7544ecc11e82fba9b5f27b262a3c73a332555"
+
+[[package]]
+name = "encoding_rs"
+version = "0.8.35"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "75030f3c4f45dafd7586dd6780965a8c7e8e285a5ecb86713e63a79c5b2766f3"
+dependencies = [
+ "cfg-if",
+]
+
 [[package]]
 name = "equivalent"
 version = "1.0.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "877a4ace8713b0bcf2a4e7eec82529c029f1d0619886d18145fea96c3ffe5c0f"
 
+[[package]]
+name = "erased-serde"
+version = "0.4.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "89e8918065695684b2b0702da20382d5ae6065cf3327bc2d6436bd49a71ce9f3"
+dependencies = [
+ "serde",
+ "serde_core",
+ "typeid",
+]
+
+[[package]]
+name = "errno"
+version = "0.3.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "39cab71617ae0d63f51a36d69f866391735b51691dbda63cf6f96d042b63efeb"
+dependencies = [
+ "libc",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "fastrand"
+version = "2.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "37909eebbb50d72f9059c3b6d82c0463f2ff062c9e95845c43a6c9c0355411be"
+
+[[package]]
+name = "find-msvc-tools"
+version = "0.1.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "645cbb3a84e60b7531617d5ae4e57f7e27308f6445f5abf653209ea76dec8dff"
+
 [[package]]
 name = "fnv"
 version = "1.0.7"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "3f9eec918d3f24069decb9af1554cad7c880e2da24a9afd88aca000531ab82c1"
 
+[[package]]
+name = "foldhash"
+version = "0.1.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d9c4f5dac5e15c24eb999c26181a6ca40b39fe946cbe4c263c7209467bc83af2"
+
 [[package]]
 name = "form_urlencoded"
-version = "1.2.1"
+version = "1.2.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e13624c2627564efccf4934284bdd98cbaa14e79b0b5a141218e507b3a823456"
+checksum = "cb4cb245038516f5f85277875cdaa4f7d2c9a0fa0468de06ed190163b1581fcf"
 dependencies = [
  "percent-encoding",
 ]
 
+[[package]]
+name = "futures"
+version = "0.3.31"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "65bc07b1a8bc7c85c5f2e110c476c7389b4554ba72af57d8445ea63a576b0876"
+dependencies = [
+ "futures-channel",
+ "futures-core",
+ "futures-executor",
+ "futures-io",
+ "futures-sink",
+ "futures-task",
+ "futures-util",
+]
+
 [[package]]
 name = "futures-channel"
 version = "0.3.31"
@@ -306,12 +654,34 @@ version = "0.3.31"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "05f29059c0c2090612e8d742178b0580d2dc940c837851ad723096f87af6663e"
 
+[[package]]
+name = "futures-executor"
+version = "0.3.31"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1e28d1d997f585e54aebc3f97d39e72338912123a67330d723fdbb564d646c9f"
+dependencies = [
+ "futures-core",
+ "futures-task",
+ "futures-util",
+]
+
 [[package]]
 name = "futures-io"
 version = "0.3.31"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "9e5c1b78ca4aae1ac06c48a526a655760685149f0d465d21f37abfe57ce075c6"
 
+[[package]]
+name = "futures-macro"
+version = "0.3.31"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "162ee34ebcb7c64a8abebc059ce0fee27c2262618d7b60ed8faf72fef13c3650"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
 [[package]]
 name = "futures-sink"
 version = "0.3.31"
@@ -330,8 +700,10 @@ version = "0.3.31"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "9fa08315bb612088cc391249efdc3bc77536f16c91f6cf495e6fbe85b20a4a81"
 dependencies = [
+ "futures-channel",
  "futures-core",
  "futures-io",
+ "futures-macro",
  "futures-sink",
  "futures-task",
  "memchr",
@@ -340,38 +712,61 @@ dependencies = [
  "slab",
 ]
 
+[[package]]
+name = "generic-array"
+version = "0.14.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "85649ca51fd72272d7821adaf274ad91c288277713d9c18820d8499a7ff69e9a"
+dependencies = [
+ "typenum",
+ "version_check",
+]
+
 [[package]]
 name = "getrandom"
-version = "0.2.15"
+version = "0.2.16"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c4567c8db10ae91089c99af84c68c38da3ec2f087c3f82960bcdbf3656b6f4d7"
+checksum = "335ff9f135e4384c8150d6f27c6daed433577f86b4750418338c01a1a2528592"
 dependencies = [
  "cfg-if",
  "js-sys",
  "libc",
- "wasi 0.11.0+wasi-snapshot-preview1",
+ "wasi",
  "wasm-bindgen",
 ]
 
 [[package]]
 name = "getrandom"
-version = "0.3.2"
+version = "0.3.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "73fea8450eea4bac3940448fb7ae50d91f034f941199fcd9d909a5a07aa455f0"
+checksum = "899def5c37c4fd7b2664648c28120ecec138e4d395b459e5ca34f9cce2dd77fd"
 dependencies = [
  "cfg-if",
  "js-sys",
  "libc",
  "r-efi",
- "wasi 0.14.2+wasi-0.2.4",
+ "wasip2",
  "wasm-bindgen",
 ]
 
 [[package]]
-name = "gimli"
-version = "0.31.1"
+name = "h2"
+version = "0.4.12"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "07e28edb80900c19c28f1072f2e8aeca7fa06b23cd4169cefe1af5aa3260783f"
+checksum = "f3c0b69cfcb4e1b9f1bf2f53f95f766e4661169728ec61cd3fe5a0166f2d1386"
+dependencies = [
+ "atomic-waker",
+ "bytes",
+ "fnv",
+ "futures-core",
+ "futures-sink",
+ "http",
+ "indexmap 2.12.1",
+ "slab",
+ "tokio",
+ "tokio-util",
+ "tracing",
+]
 
 [[package]]
 name = "hashbrown"
@@ -381,9 +776,35 @@ checksum = "8a9ee70c43aaf417c914396645a0fa852624801b24ebb7ae78fe8272889ac888"
 
 [[package]]
 name = "hashbrown"
-version = "0.15.2"
+version = "0.14.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e5274423e17b7c9fc20b6e7e208532f9b19825d82dfd615708b70edd83df41f1"
+
+[[package]]
+name = "hashbrown"
+version = "0.15.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9229cfe53dfd69f0609a49f65461bd93001ea1ef889cd5529dd176593f5338a1"
+dependencies = [
+ "allocator-api2",
+ "equivalent",
+ "foldhash",
+]
+
+[[package]]
+name = "hashbrown"
+version = "0.16.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "bf151400ff0baff5465007dd2f3e717f3fe502074ca563069ce3a6629d07b289"
+checksum = "841d1cc9bed7f9236f321df977030373f4a4163ae1a7dbfe1a51a2c1a51d9100"
+
+[[package]]
+name = "hashlink"
+version = "0.10.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7382cf6263419f2d8df38c55d7da83da5c18aef87fc7a7fc1fb1e344edfe14c1"
+dependencies = [
+ "hashbrown 0.15.5",
+]
 
 [[package]]
 name = "heck"
@@ -391,6 +812,12 @@ version = "0.5.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "2304e00983f87ffb38b55b444b5e3b60a884b5d30c0fca7d82fe33449bbe55ea"
 
+[[package]]
+name = "hermit-abi"
+version = "0.5.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fc0fef456e4baa96da950455cd02c081ca953b141298e41db3fc7e36b1da849c"
+
 [[package]]
 name = "hex"
 version = "0.4.3"
@@ -399,12 +826,11 @@ checksum = "7f24254aa9a54b5c858eaee2f5bccdb46aaf0e486a595ed5fd8f86ba55232a70"
 
 [[package]]
 name = "http"
-version = "1.3.1"
+version = "1.4.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f4a85d31aea989eead29a3aaf9e1115a180df8282431156e533de47660892565"
+checksum = "e3ba2a386d7f85a81f119ad7498ebe444d2e22c2af0b86b069416ace48b3311a"
 dependencies = [
  "bytes",
- "fnv",
  "itoa",
 ]
 
@@ -437,20 +863,30 @@ version = "1.10.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "6dbf3de79e51f3d586ab4cb9d5c3e2c14aa28ed23d180cf89b4df0454a69cc87"
 
+[[package]]
+name = "httpdate"
+version = "1.0.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "df3b46402a9d5adb4c86a0cf463f42e19994e3ee891101b1841f30a545cb49a9"
+
 [[package]]
 name = "hyper"
-version = "1.6.0"
+version = "1.8.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "cc2b571658e38e0c01b1fdca3bbbe93c00d3d71693ff2770043f8c29bc7d6f80"
+checksum = "2ab2d4f250c3d7b1c9fcdff1cece94ea4e2dfbec68614f7b87cb205f24ca9d11"
 dependencies = [
+ "atomic-waker",
  "bytes",
  "futures-channel",
- "futures-util",
+ "futures-core",
+ "h2",
  "http",
  "http-body",
  "httparse",
+ "httpdate",
  "itoa",
  "pin-project-lite",
+ "pin-utils",
  "smallvec",
  "tokio",
  "want",
@@ -458,15 +894,15 @@ dependencies = [
 
 [[package]]
 name = "hyper-rustls"
-version = "0.27.5"
+version = "0.27.7"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2d191583f3da1305256f22463b9bb0471acad48a4e534a5218b9963e9c1f59b2"
+checksum = "e3c93eb611681b207e1fe55d5a71ecf91572ec8a6705cdb6857f7d8d5242cf58"
 dependencies = [
- "futures-util",
  "http",
  "hyper",
  "hyper-util",
  "rustls",
+ "rustls-native-certs",
  "rustls-pki-types",
  "tokio",
  "tokio-rustls",
@@ -476,16 +912,21 @@ dependencies = [
 
 [[package]]
 name = "hyper-util"
-version = "0.1.10"
+version = "0.1.19"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "df2dcfbe0677734ab2f3ffa7fa7bfd4706bfdc1ef393f2ee30184aed67e631b4"
+checksum = "727805d60e7938b76b826a6ef209eb70eaa1812794f9424d4a4e2d740662df5f"
 dependencies = [
+ "base64",
  "bytes",
  "futures-channel",
+ "futures-core",
  "futures-util",
  "http",
  "http-body",
  "hyper",
+ "ipnet",
+ "libc",
+ "percent-encoding",
  "pin-project-lite",
  "socket2",
  "tokio",
@@ -495,9 +936,9 @@ dependencies = [
 
 [[package]]
 name = "iana-time-zone"
-version = "0.1.62"
+version = "0.1.64"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b2fd658b06e56721792c5df4475705b6cda790e9298d19d2f8af083457bcd127"
+checksum = "33e57f83510bb73707521ebaffa789ec8caf86f9657cad665b092b581d40e9fb"
 dependencies = [
  "android_system_properties",
  "core-foundation-sys",
@@ -519,21 +960,22 @@ dependencies = [
 
 [[package]]
 name = "icu_collections"
-version = "1.5.0"
+version = "2.1.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "db2fa452206ebee18c4b5c2274dbf1de17008e874b4dc4f0aea9d01ca79e4526"
+checksum = "4c6b649701667bbe825c3b7e6388cb521c23d88644678e83c0c4d0a621a34b43"
 dependencies = [
  "displaydoc",
+ "potential_utf",
  "yoke",
  "zerofrom",
  "zerovec",
 ]
 
 [[package]]
-name = "icu_locid"
-version = "1.5.0"
+name = "icu_locale_core"
+version = "2.1.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "13acbb8371917fc971be86fc8057c41a64b521c184808a698c02acc242dbf637"
+checksum = "edba7861004dd3714265b4db54a3c390e880ab658fec5f7db895fae2046b5bb6"
 dependencies = [
  "displaydoc",
  "litemap",
@@ -542,261 +984,386 @@ dependencies = [
  "zerovec",
 ]
 
-[[package]]
-name = "icu_locid_transform"
-version = "1.5.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "01d11ac35de8e40fdeda00d9e1e9d92525f3f9d887cdd7aa81d727596788b54e"
-dependencies = [
- "displaydoc",
- "icu_locid",
- "icu_locid_transform_data",
- "icu_provider",
- "tinystr",
- "zerovec",
-]
-
-[[package]]
-name = "icu_locid_transform_data"
-version = "1.5.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7515e6d781098bf9f7205ab3fc7e9709d34554ae0b21ddbcb5febfa4bc7df11d"
-
 [[package]]
 name = "icu_normalizer"
-version = "1.5.0"
+version = "2.1.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "19ce3e0da2ec68599d193c93d088142efd7f9c5d6fc9b803774855747dc6a84f"
+checksum = "5f6c8828b67bf8908d82127b2054ea1b4427ff0230ee9141c54251934ab1b599"
 dependencies = [
- "displaydoc",
  "icu_collections",
  "icu_normalizer_data",
  "icu_properties",
  "icu_provider",
  "smallvec",
- "utf16_iter",
- "utf8_iter",
- "write16",
  "zerovec",
 ]
 
 [[package]]
 name = "icu_normalizer_data"
-version = "1.5.1"
+version = "2.1.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c5e8338228bdc8ab83303f16b797e177953730f601a96c25d10cb3ab0daa0cb7"
+checksum = "7aedcccd01fc5fe81e6b489c15b247b8b0690feb23304303a9e560f37efc560a"
 
 [[package]]
 name = "icu_properties"
-version = "1.5.1"
+version = "2.1.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "93d6020766cfc6302c15dbbc9c8778c37e62c14427cb7f6e601d849e092aeef5"
+checksum = "020bfc02fe870ec3a66d93e677ccca0562506e5872c650f893269e08615d74ec"
 dependencies = [
- "displaydoc",
  "icu_collections",
- "icu_locid_transform",
+ "icu_locale_core",
  "icu_properties_data",
  "icu_provider",
- "tinystr",
+ "zerotrie",
  "zerovec",
 ]
 
 [[package]]
 name = "icu_properties_data"
-version = "1.5.1"
+version = "2.1.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "85fb8799753b75aee8d2a21d7c14d9f38921b54b3dbda10f5a3c7a7b82dba5e2"
+checksum = "616c294cf8d725c6afcd8f55abc17c56464ef6211f9ed59cccffe534129c77af"
 
 [[package]]
 name = "icu_provider"
-version = "1.5.0"
+version = "2.1.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6ed421c8a8ef78d3e2dbc98a973be2f3770cb42b606e3ab18d6237c4dfde68d9"
+checksum = "85962cf0ce02e1e0a629cc34e7ca3e373ce20dda4c4d7294bbd0bf1fdb59e614"
 dependencies = [
  "displaydoc",
- "icu_locid",
- "icu_provider_macros",
- "stable_deref_trait",
- "tinystr",
+ "icu_locale_core",
  "writeable",
  "yoke",
  "zerofrom",
+ "zerotrie",
  "zerovec",
 ]
 
 [[package]]
-name = "icu_provider_macros"
-version = "1.5.0"
+name = "ident_case"
+version = "1.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b9e0384b61958566e926dc50660321d12159025e767c18e043daf26b70104c39"
+
+[[package]]
+name = "idna"
+version = "1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3b0875f23caa03898994f6ddc501886a45c7d3d62d04d2d90788d47be1b1e4de"
+dependencies = [
+ "idna_adapter",
+ "smallvec",
+ "utf8_iter",
+]
+
+[[package]]
+name = "idna_adapter"
+version = "1.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3acae9609540aa318d1bc588455225fb2085b9ed0c4f6bd0d9d5bcd86f1a0344"
+dependencies = [
+ "icu_normalizer",
+ "icu_properties",
+]
+
+[[package]]
+name = "indexmap"
+version = "1.9.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bd070e393353796e801d209ad339e89596eb4c8d430d18ede6a1cced8fafbd99"
+dependencies = [
+ "autocfg",
+ "hashbrown 0.12.3",
+ "serde",
+]
+
+[[package]]
+name = "indexmap"
+version = "2.12.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0ad4bb2b565bca0645f4d68c5c9af97fba094e9791da685bf83cb5f3ce74acf2"
+dependencies = [
+ "equivalent",
+ "hashbrown 0.16.1",
+ "serde",
+ "serde_core",
+]
+
+[[package]]
+name = "ipnet"
+version = "2.11.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "469fb0b9cefa57e3ef31275ee7cacb78f2fdca44e4765491884a2b119d4eb130"
+
+[[package]]
+name = "iri-string"
+version = "0.7.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4f867b9d1d896b67beb18518eda36fdb77a32ea590de864f1325b294a6d14397"
+dependencies = [
+ "memchr",
+ "serde",
+]
+
+[[package]]
+name = "is_terminal_polyfill"
+version = "1.70.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a6cb138bb79a146c1bd460005623e142ef0181e3d0219cb493e02f7d08a35695"
+
+[[package]]
+name = "itoa"
+version = "1.0.16"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7ee5b5339afb4c41626dde77b7a611bd4f2c202b897852b4bcf5d03eddc61010"
+
+[[package]]
+name = "js-sys"
+version = "0.3.83"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "464a3709c7f55f1f721e5389aa6ea4e3bc6aba669353300af094b29ffbdde1d8"
+dependencies = [
+ "once_cell",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "json5"
+version = "0.4.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "96b0db21af676c1ce64250b5f40f3ce2cf27e4e47cb91ed91eb6fe9350b430c1"
+dependencies = [
+ "pest",
+ "pest_derive",
+ "serde",
+]
+
+[[package]]
+name = "lazy_static"
+version = "1.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bbd2bcb4c963f2ddae06a2efc7e9f3591312473c50c6685e1f298068316e66fe"
+
+[[package]]
+name = "libc"
+version = "0.2.178"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "37c93d8daa9d8a012fd8ab92f088405fb202ea0b6ab73ee2482ae66af4f42091"
+
+[[package]]
+name = "libredox"
+version = "0.1.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "df15f6eac291ed1cf25865b1ee60399f57e7c227e7f51bdbd4c5270396a9ed50"
+dependencies = [
+ "bitflags",
+ "libc",
+]
+
+[[package]]
+name = "linux-raw-sys"
+version = "0.11.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "df1d3c3b53da64cf5760482273a98e575c651a67eec7f77df96b5b642de8f039"
+
+[[package]]
+name = "litemap"
+version = "0.8.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6373607a59f0be73a39b6fe456b8192fcc3585f602af20751600e974dd455e77"
+
+[[package]]
+name = "lock_api"
+version = "0.4.14"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1ec89e9337638ecdc08744df490b221a7399bf8d164eb52a665454e60e075ad6"
+checksum = "224399e74b87b5f3557511d98dff8b14089b3dadafcab6bb93eab67d3aace965"
 dependencies = [
- "proc-macro2",
- "quote",
- "syn",
+ "scopeguard",
 ]
 
 [[package]]
-name = "ident_case"
-version = "1.0.1"
+name = "log"
+version = "0.4.29"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b9e0384b61958566e926dc50660321d12159025e767c18e043daf26b70104c39"
+checksum = "5e5032e24019045c762d3c0f28f5b6b8bbf38563a65908389bf7978758920897"
 
 [[package]]
-name = "idna"
-version = "1.0.3"
+name = "lru-slab"
+version = "0.1.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "686f825264d630750a544639377bae737628043f20d38bbc029e8f29ea968a7e"
-dependencies = [
- "idna_adapter",
- "smallvec",
- "utf8_iter",
-]
+checksum = "112b39cec0b298b6c1999fee3e31427f74f676e4cb9879ed1a121b43661a4154"
 
 [[package]]
-name = "idna_adapter"
-version = "1.2.0"
+name = "matchers"
+version = "0.2.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "daca1df1c957320b2cf139ac61e7bd64fed304c5040df000a745aa1de3b4ef71"
+checksum = "d1525a2a28c7f4fa0fc98bb91ae755d1e2d1505079e05539e35bc876b5d65ae9"
 dependencies = [
- "icu_normalizer",
- "icu_properties",
+ "regex-automata",
 ]
 
 [[package]]
-name = "indexmap"
-version = "1.9.3"
+name = "memchr"
+version = "2.7.6"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "bd070e393353796e801d209ad339e89596eb4c8d430d18ede6a1cced8fafbd99"
-dependencies = [
- "autocfg",
- "hashbrown 0.12.3",
- "serde",
-]
+checksum = "f52b00d39961fc5b2736ea853c9cc86238e165017a493d1d5c8eac6bdc4cc273"
 
 [[package]]
-name = "indexmap"
-version = "2.8.0"
+name = "mio"
+version = "1.1.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3954d50fe15b02142bf25d3b8bdadb634ec3948f103d04ffe3031bc8fe9d7058"
+checksum = "a69bcab0ad47271a0234d9422b131806bf3968021e5dc9328caf2d4cd58557fc"
 dependencies = [
- "equivalent",
- "hashbrown 0.15.2",
- "serde",
+ "libc",
+ "wasi",
+ "windows-sys 0.61.2",
 ]
 
 [[package]]
-name = "ipnet"
-version = "2.11.0"
+name = "nu-ansi-term"
+version = "0.50.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "469fb0b9cefa57e3ef31275ee7cacb78f2fdca44e4765491884a2b119d4eb130"
+checksum = "7957b9740744892f114936ab4a57b3f487491bbeafaf8083688b16841a4240e5"
+dependencies = [
+ "windows-sys 0.61.2",
+]
 
 [[package]]
-name = "is_terminal_polyfill"
-version = "1.70.1"
+name = "num-conv"
+version = "0.1.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7943c866cc5cd64cbc25b2e01621d07fa8eb2a1a23160ee81ce38704e97b8ecf"
+checksum = "51d515d32fb182ee37cda2ccdcb92950d6a3c2893aa280e540671c2cd0f3b1d9"
 
 [[package]]
-name = "itoa"
-version = "1.0.15"
+name = "num-traits"
+version = "0.2.19"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4a5f13b858c8d314ee3e8f639011f7ccefe71f97f96e50151fb991f267928e2c"
+checksum = "071dfc062690e90b734c0b2273ce72ad0ffa95f0c74596bc250dcfd960262841"
+dependencies = [
+ "autocfg",
+]
 
 [[package]]
-name = "js-sys"
-version = "0.3.77"
+name = "num_cpus"
+version = "1.17.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1cfaf33c695fc6e08064efbc1f72ec937429614f25eef83af942d0e227c3a28f"
+checksum = "91df4bbde75afed763b708b7eee1e8e7651e02d97f6d5dd763e89367e957b23b"
 dependencies = [
- "once_cell",
- "wasm-bindgen",
+ "hermit-abi",
+ "libc",
 ]
 
 [[package]]
-name = "libc"
-version = "0.2.171"
+name = "once_cell"
+version = "1.21.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c19937216e9d3aa9956d9bb8dfc0b0c8beb6058fc4f7a4dc4d850edf86a237d6"
+checksum = "42f5e15c9953c5e4ccceeb2e7382a716482c34515315f7b03532b8b4e8393d2d"
 
 [[package]]
-name = "litemap"
-version = "0.7.5"
+name = "once_cell_polyfill"
+version = "1.70.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "23fb14cb19457329c82206317a5663005a4d404783dc74f4252769b0d5f42856"
+checksum = "384b8ab6d37215f3c5301a95a4accb5d64aa607f1fcb26a11b5303878451b4fe"
 
 [[package]]
-name = "log"
-version = "0.4.27"
+name = "openssl-probe"
+version = "0.1.6"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "13dc2df351e3202783a1fe0d44375f7295ffb4049267b0f3018346dc122a1d94"
+checksum = "d05e27ee213611ffe7d6348b942e8f942b37114c00cc03cec254295a4a17852e"
 
 [[package]]
-name = "memchr"
-version = "2.7.4"
+name = "option-ext"
+version = "0.2.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "78ca9ab1a0babb1e7d5695e3530886289c18cf2f87ec19a575a0abdce112e3a3"
+checksum = "04744f49eae99ab78e0d5c0b603ab218f515ea8cfe5a456d7629ad883a3b6e7d"
 
 [[package]]
-name = "mime"
-version = "0.3.17"
+name = "ordered-multimap"
+version = "0.7.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6877bb514081ee2a7ff5ef9de3281f14a4dd4bceac4c09388074a6b5df8a139a"
+checksum = "49203cdcae0030493bad186b28da2fa25645fa276a51b6fec8010d281e02ef79"
+dependencies = [
+ "dlv-list",
+ "hashbrown 0.14.5",
+]
 
 [[package]]
-name = "miniz_oxide"
-version = "0.8.5"
+name = "parking_lot"
+version = "0.12.5"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8e3e04debbb59698c15bacbb6d93584a8c0ca9cc3213cb423d31f760d8843ce5"
+checksum = "93857453250e3077bd71ff98b6a65ea6621a19bb0f559a85248955ac12c45a1a"
 dependencies = [
- "adler2",
+ "lock_api",
+ "parking_lot_core",
 ]
 
 [[package]]
-name = "mio"
-version = "1.0.3"
+name = "parking_lot_core"
+version = "0.9.12"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2886843bf800fba2e3377cff24abf6379b4c4d5c6681eaf9ea5b0d15090450bd"
+checksum = "2621685985a2ebf1c516881c026032ac7deafcda1a2c9b7850dc81e3dfcb64c1"
 dependencies = [
+ "cfg-if",
  "libc",
- "wasi 0.11.0+wasi-snapshot-preview1",
- "windows-sys 0.52.0",
+ "redox_syscall",
+ "smallvec",
+ "windows-link",
 ]
 
 [[package]]
-name = "num-conv"
-version = "0.1.0"
+name = "pathdiff"
+version = "0.2.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "51d515d32fb182ee37cda2ccdcb92950d6a3c2893aa280e540671c2cd0f3b1d9"
+checksum = "df94ce210e5bc13cb6651479fa48d14f601d9858cfe0467f43ae157023b938d3"
 
 [[package]]
-name = "num-traits"
-version = "0.2.19"
+name = "percent-encoding"
+version = "2.3.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "071dfc062690e90b734c0b2273ce72ad0ffa95f0c74596bc250dcfd960262841"
+checksum = "9b4f627cb1b25917193a259e49bdad08f671f8d9708acfd5fe0a8c1455d87220"
+
+[[package]]
+name = "pest"
+version = "2.8.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cbcfd20a6d4eeba40179f05735784ad32bdaef05ce8e8af05f180d45bb3e7e22"
 dependencies = [
- "autocfg",
+ "memchr",
+ "ucd-trie",
 ]
 
 [[package]]
-name = "object"
-version = "0.36.7"
+name = "pest_derive"
+version = "2.8.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "62948e14d923ea95ea2c7c86c71013138b66525b86bdc08d2dcc262bdb497b87"
+checksum = "51f72981ade67b1ca6adc26ec221be9f463f2b5839c7508998daa17c23d94d7f"
 dependencies = [
- "memchr",
+ "pest",
+ "pest_generator",
 ]
 
 [[package]]
-name = "once_cell"
-version = "1.21.3"
+name = "pest_generator"
+version = "2.8.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "42f5e15c9953c5e4ccceeb2e7382a716482c34515315f7b03532b8b4e8393d2d"
+checksum = "dee9efd8cdb50d719a80088b76f81aec7c41ed6d522ee750178f83883d271625"
+dependencies = [
+ "pest",
+ "pest_meta",
+ "proc-macro2",
+ "quote",
+ "syn",
+]
 
 [[package]]
-name = "percent-encoding"
-version = "2.3.1"
+name = "pest_meta"
+version = "2.8.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e3148f5046208a5d56bcfc03053e3ca6334e51da8dfb19b6cdc8b306fae3283e"
+checksum = "bf1d70880e76bdc13ba52eafa6239ce793d85c8e43896507e43dd8984ff05b82"
+dependencies = [
+ "pest",
+ "sha2",
+]
 
 [[package]]
 name = "pin-project-lite"
@@ -810,6 +1377,15 @@ version = "0.1.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "8b870d8c151b6f2fb93e84a13146138f05d02ed11c7e7c54f8826aaaf7c9f184"
 
+[[package]]
+name = "potential_utf"
+version = "0.1.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b73949432f5e2a09657003c25bca5e19a0e9c84f8058ca374f49e0ebe605af77"
+dependencies = [
+ "zerovec",
+]
+
 [[package]]
 name = "powerfmt"
 version = "0.2.0"
@@ -827,18 +1403,47 @@ dependencies = [
 
 [[package]]
 name = "proc-macro2"
-version = "1.0.94"
+version = "1.0.103"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a31971752e70b8b2686d7e46ec17fb38dad4051d94024c88df49b667caea9c84"
+checksum = "5ee95bc4ef87b8d5ba32e8b7714ccc834865276eab0aed5c9958d00ec45f49e8"
 dependencies = [
  "unicode-ident",
 ]
 
+[[package]]
+name = "proxy-convert"
+version = "2.0.0"
+dependencies = [
+ "anyhow",
+ "base64",
+ "cached",
+ "chrono",
+ "clap",
+ "config",
+ "dirs",
+ "indexmap 2.12.1",
+ "regex",
+ "reqwest",
+ "serde",
+ "serde_json",
+ "serde_with",
+ "serde_yaml",
+ "tempfile",
+ "thiserror",
+ "tokio",
+ "tokio-test",
+ "tracing",
+ "tracing-subscriber",
+ "url",
+ "urlencoding",
+ "wiremock",
+]
+
 [[package]]
 name = "quinn"
-version = "0.11.7"
+version = "0.11.9"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c3bd15a6f2967aef83887dcb9fec0014580467e33720d073560cf015a5683012"
+checksum = "b9e20a958963c291dc322d98411f541009df2ced7b5a4f2bd52337638cfccf20"
 dependencies = [
  "bytes",
  "cfg_aliases",
@@ -856,12 +1461,13 @@ dependencies = [
 
 [[package]]
 name = "quinn-proto"
-version = "0.11.10"
+version = "0.11.13"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b820744eb4dc9b57a3398183639c511b5a26d2ed702cedd3febaa1393caa22cc"
+checksum = "f1906b49b0c3bc04b5fe5d86a77925ae6524a19b816ae38ce1e426255f1d8a31"
 dependencies = [
  "bytes",
- "getrandom 0.3.2",
+ "getrandom 0.3.4",
+ "lru-slab",
  "rand",
  "ring",
  "rustc-hash",
@@ -876,42 +1482,41 @@ dependencies = [
 
 [[package]]
 name = "quinn-udp"
-version = "0.5.11"
+version = "0.5.14"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "541d0f57c6ec747a90738a52741d3221f7960e8ac2f0ff4b1a63680e033b4ab5"
+checksum = "addec6a0dcad8a8d96a771f815f0eaf55f9d1805756410b39f5fa81332574cbd"
 dependencies = [
  "cfg_aliases",
  "libc",
  "once_cell",
  "socket2",
  "tracing",
- "windows-sys 0.59.0",
+ "windows-sys 0.60.2",
 ]
 
 [[package]]
 name = "quote"
-version = "1.0.40"
+version = "1.0.42"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1885c039570dc00dcb4ff087a89e185fd56bae234ddc7f056a945bf36467248d"
+checksum = "a338cc41d27e6cc6dce6cefc13a0729dfbb81c262b1f519331575dd80ef3067f"
 dependencies = [
  "proc-macro2",
 ]
 
 [[package]]
 name = "r-efi"
-version = "5.2.0"
+version = "5.3.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "74765f6d916ee2faa39bc8e68e4f3ed8949b48cccdac59983d287a7cb71ce9c5"
+checksum = "69cdb34c158ceb288df11e18b4bd39de994f6657d83847bdffdbd7f346754b0f"
 
 [[package]]
 name = "rand"
-version = "0.9.0"
+version = "0.9.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3779b94aeb87e8bd4e834cee3650289ee9e0d5677f976ecdb6d219e5f4f6cd94"
+checksum = "6db2770f06117d490610c7488547d543617b21bfa07796d7a12f6f1bd53850d1"
 dependencies = [
  "rand_chacha",
  "rand_core",
- "zerocopy",
 ]
 
 [[package]]
@@ -930,36 +1535,100 @@ version = "0.9.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "99d9a13982dcf210057a8a78572b2217b667c3beacbf3a0d8b454f6f82837d38"
 dependencies = [
- "getrandom 0.3.2",
+ "getrandom 0.3.4",
+]
+
+[[package]]
+name = "redox_syscall"
+version = "0.5.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ed2bf2547551a7053d6fdfafda3f938979645c44812fbfcda098faae3f1a362d"
+dependencies = [
+ "bitflags",
+]
+
+[[package]]
+name = "redox_users"
+version = "0.5.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a4e608c6638b9c18977b00b475ac1f28d14e84b27d8d42f70e0bf1e3dec127ac"
+dependencies = [
+ "getrandom 0.2.16",
+ "libredox",
+ "thiserror",
+]
+
+[[package]]
+name = "ref-cast"
+version = "1.0.25"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f354300ae66f76f1c85c5f84693f0ce81d747e2c3f21a45fef496d89c960bf7d"
+dependencies = [
+ "ref-cast-impl",
+]
+
+[[package]]
+name = "ref-cast-impl"
+version = "1.0.25"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b7186006dcb21920990093f30e3dea63b7d6e977bf1256be20c3563a5db070da"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "regex"
+version = "1.12.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "843bc0191f75f3e22651ae5f1e72939ab2f72a4bc30fa80a066bd66edefc24d4"
+dependencies = [
+ "aho-corasick",
+ "memchr",
+ "regex-automata",
+ "regex-syntax",
+]
+
+[[package]]
+name = "regex-automata"
+version = "0.4.13"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5276caf25ac86c8d810222b3dbb938e512c55c6831a10f3e6ed1c93b84041f1c"
+dependencies = [
+ "aho-corasick",
+ "memchr",
+ "regex-syntax",
 ]
 
+[[package]]
+name = "regex-syntax"
+version = "0.8.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7a2d987857b319362043e95f5353c0535c1f58eec5336fdfcf626430af7def58"
+
 [[package]]
 name = "reqwest"
-version = "0.12.15"
+version = "0.12.28"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d19c46a6fdd48bc4dab94b6103fccc55d34c67cc0ad04653aad4ea2a07cd7bbb"
+checksum = "eddd3ca559203180a307f12d114c268abf583f59b03cb906fd0b3ff8646c1147"
 dependencies = [
  "base64",
  "bytes",
- "futures-channel",
  "futures-core",
- "futures-util",
  "http",
  "http-body",
  "http-body-util",
  "hyper",
  "hyper-rustls",
  "hyper-util",
- "ipnet",
  "js-sys",
  "log",
- "mime",
- "once_cell",
  "percent-encoding",
  "pin-project-lite",
  "quinn",
  "rustls",
- "rustls-pemfile",
+ "rustls-native-certs",
  "rustls-pki-types",
  "serde",
  "serde_json",
@@ -968,13 +1637,13 @@ dependencies = [
  "tokio",
  "tokio-rustls",
  "tower",
+ "tower-http",
  "tower-service",
  "url",
  "wasm-bindgen",
  "wasm-bindgen-futures",
  "web-sys",
  "webpki-roots",
- "windows-registry",
 ]
 
 [[package]]
@@ -985,17 +1654,35 @@ checksum = "a4689e6c2294d81e88dc6261c768b63bc4fcdb852be6d1352498b114f61383b7"
 dependencies = [
  "cc",
  "cfg-if",
- "getrandom 0.2.15",
+ "getrandom 0.2.16",
  "libc",
  "untrusted",
  "windows-sys 0.52.0",
 ]
 
 [[package]]
-name = "rustc-demangle"
-version = "0.1.24"
+name = "ron"
+version = "0.12.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fd490c5b18261893f14449cbd28cb9c0b637aebf161cd77900bfdedaff21ec32"
+dependencies = [
+ "bitflags",
+ "once_cell",
+ "serde",
+ "serde_derive",
+ "typeid",
+ "unicode-ident",
+]
+
+[[package]]
+name = "rust-ini"
+version = "0.21.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "719b953e2095829ee67db738b3bfa9fa368c94900df327b3f07fe6e794d2fe1f"
+checksum = "796e8d2b6696392a43bea58116b667fb4c29727dc5abd27d6acf338bb4f688c7"
+dependencies = [
+ "cfg-if",
+ "ordered-multimap",
+]
 
 [[package]]
 name = "rustc-hash"
@@ -1003,11 +1690,24 @@ version = "2.1.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "357703d41365b4b27c590e3ed91eabb1b663f07c4c084095e60cbed4362dff0d"
 
+[[package]]
+name = "rustix"
+version = "1.1.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "146c9e247ccc180c1f61615433868c99f3de3ae256a30a43b49f67c2d9171f34"
+dependencies = [
+ "bitflags",
+ "errno",
+ "libc",
+ "linux-raw-sys",
+ "windows-sys 0.61.2",
+]
+
 [[package]]
 name = "rustls"
-version = "0.23.25"
+version = "0.23.35"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "822ee9188ac4ec04a2f0531e55d035fb2de73f18b41a63c70c2712503b6fb13c"
+checksum = "533f54bc6a7d4f647e46ad909549eda97bf5afc1585190ef692b4286b198bd8f"
 dependencies = [
  "once_cell",
  "ring",
@@ -1018,28 +1718,32 @@ dependencies = [
 ]
 
 [[package]]
-name = "rustls-pemfile"
-version = "2.2.0"
+name = "rustls-native-certs"
+version = "0.8.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "dce314e5fee3f39953d46bb63bb8a46d40c2f8fb7cc5a3b6cab2bde9721d6e50"
+checksum = "9980d917ebb0c0536119ba501e90834767bffc3d60641457fd84a1f3fd337923"
 dependencies = [
+ "openssl-probe",
  "rustls-pki-types",
+ "schannel",
+ "security-framework",
 ]
 
 [[package]]
 name = "rustls-pki-types"
-version = "1.11.0"
+version = "1.13.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "917ce264624a4b4db1c364dcc35bfca9ded014d0a958cd47ad3e960e988ea51c"
+checksum = "21e6f2ab2928ca4291b86736a8bd920a277a399bba1589409d72154ff87c1282"
 dependencies = [
  "web-time",
+ "zeroize",
 ]
 
 [[package]]
 name = "rustls-webpki"
-version = "0.103.1"
+version = "0.103.8"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "fef8b8769aaccf73098557a87cd1816b4f9c7c16811c9c77142aa695c16f2c03"
+checksum = "2ffdfa2f5286e2247234e03f680868ac2815974dc39e00ea15adc445d0aafe52"
 dependencies = [
  "ring",
  "rustls-pki-types",
@@ -1048,30 +1752,114 @@ dependencies = [
 
 [[package]]
 name = "rustversion"
-version = "1.0.20"
+version = "1.0.22"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "eded382c5f5f786b989652c49544c4877d9f015cc22e145a5ea8ea66c2921cd2"
+checksum = "b39cdef0fa800fc44525c84ccb54a029961a8215f9619753635a9c0d2538d46d"
 
 [[package]]
 name = "ryu"
-version = "1.0.20"
+version = "1.0.21"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "62049b2877bf12821e8f9ad256ee38fdc31db7387ec2d3b3f403024de2034aea"
+
+[[package]]
+name = "schannel"
+version = "0.1.28"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "891d81b926048e76efe18581bf793546b4c0eaf8448d72be8de2bbee5fd166e1"
+dependencies = [
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "schemars"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4cd191f9397d57d581cddd31014772520aa448f65ef991055d7f61582c65165f"
+dependencies = [
+ "dyn-clone",
+ "ref-cast",
+ "serde",
+ "serde_json",
+]
+
+[[package]]
+name = "schemars"
+version = "1.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "54e910108742c57a770f492731f99be216a52fadd361b06c8fb59d74ccc267d2"
+dependencies = [
+ "dyn-clone",
+ "ref-cast",
+ "serde",
+ "serde_json",
+]
+
+[[package]]
+name = "scopeguard"
+version = "1.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "94143f37725109f92c262ed2cf5e59bce7498c01bcc1502d7b9afe439a4e9f49"
+
+[[package]]
+name = "security-framework"
+version = "3.5.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "28d3b2b1366ec20994f1fd18c3c594f05c5dd4bc44d8bb0c1c632c8d6829481f"
+checksum = "b3297343eaf830f66ede390ea39da1d462b6b0c1b000f420d0a83f898bbbe6ef"
+dependencies = [
+ "bitflags",
+ "core-foundation",
+ "core-foundation-sys",
+ "libc",
+ "security-framework-sys",
+]
+
+[[package]]
+name = "security-framework-sys"
+version = "2.15.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cc1f0cbffaac4852523ce30d8bd3c5cdc873501d96ff467ca09b6767bb8cd5c0"
+dependencies = [
+ "core-foundation-sys",
+ "libc",
+]
 
 [[package]]
 name = "serde"
-version = "1.0.219"
+version = "1.0.228"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9a8e94ea7f378bd32cbbd37198a4a91436180c5bb472411e48b5ec2e2124ae9e"
+dependencies = [
+ "serde_core",
+ "serde_derive",
+]
+
+[[package]]
+name = "serde-untagged"
+version = "0.1.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f9faf48a4a2d2693be24c6289dbe26552776eb7737074e6722891fadbe6c5058"
+dependencies = [
+ "erased-serde",
+ "serde",
+ "serde_core",
+ "typeid",
+]
+
+[[package]]
+name = "serde_core"
+version = "1.0.228"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5f0e2c6ed6606019b4e29e69dbaba95b11854410e5347d525002456dbbb786b6"
+checksum = "41d385c7d4ca58e59fc732af25c3983b67ac852c1a25000afe1175de458b67ad"
 dependencies = [
  "serde_derive",
 ]
 
 [[package]]
 name = "serde_derive"
-version = "1.0.219"
+version = "1.0.228"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5b0276cf7f2c73365f7157c8123c21cd9a50fbbd844757af28ca1f5925fc2a00"
+checksum = "d540f220d3187173da220f885ab66608367b6574e925011a9353e4badda91d79"
 dependencies = [
  "proc-macro2",
  "quote",
@@ -1080,14 +1868,25 @@ dependencies = [
 
 [[package]]
 name = "serde_json"
-version = "1.0.140"
+version = "1.0.147"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6af14725505314343e673e9ecb7cd7e8a36aa9791eb936235a3567cc31447ae4"
+dependencies = [
+ "indexmap 2.12.1",
+ "itoa",
+ "memchr",
+ "serde",
+ "serde_core",
+ "zmij",
+]
+
+[[package]]
+name = "serde_spanned"
+version = "1.0.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "20068b6e96dc6c9bd23e01df8827e6c7e1f2fddd43c21810382803c136b99373"
+checksum = "f8bbf91e5a4d6315eee45e704372590b30e260ee83af6639d64557f51b067776"
 dependencies = [
- "itoa",
- "memchr",
- "ryu",
- "serde",
+ "serde_core",
 ]
 
 [[package]]
@@ -1104,17 +1903,18 @@ dependencies = [
 
 [[package]]
 name = "serde_with"
-version = "3.12.0"
+version = "3.16.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d6b6f7f2fcb69f747921f79f3926bd1e203fce4fef62c268dd3abfb6d86029aa"
+checksum = "4fa237f2807440d238e0364a218270b98f767a00d3dada77b1c53ae88940e2e7"
 dependencies = [
  "base64",
  "chrono",
  "hex",
  "indexmap 1.9.3",
- "indexmap 2.8.0",
- "serde",
- "serde_derive",
+ "indexmap 2.12.1",
+ "schemars 0.9.0",
+ "schemars 1.2.0",
+ "serde_core",
  "serde_json",
  "serde_with_macros",
  "time",
@@ -1122,11 +1922,11 @@ dependencies = [
 
 [[package]]
 name = "serde_with_macros"
-version = "3.12.0"
+version = "3.16.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8d00caa5193a3c8362ac2b73be6b9e768aa5a4b2f721d8f4b339600c3cb51f8e"
+checksum = "52a8e3ca0ca629121f70ab50f95249e5a6f925cc0f6ffe8256c45b728875706c"
 dependencies = [
- "darling",
+ "darling 0.21.3",
  "proc-macro2",
  "quote",
  "syn",
@@ -1138,13 +1938,33 @@ version = "0.9.34+deprecated"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "6a8b1a1a2ebf674015cc02edccce75287f1a0130d394307b36743c2f5d504b47"
 dependencies = [
- "indexmap 2.8.0",
+ "indexmap 2.12.1",
  "itoa",
  "ryu",
  "serde",
  "unsafe-libyaml",
 ]
 
+[[package]]
+name = "sha2"
+version = "0.10.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a7507d819769d01a365ab707794a4084392c824f54a7a6a7862f8c3d0892b283"
+dependencies = [
+ "cfg-if",
+ "cpufeatures",
+ "digest",
+]
+
+[[package]]
+name = "sharded-slab"
+version = "0.1.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f40ca3c46823713e0d4209592e8d6e826aa57e928f09752619fc696c499637f6"
+dependencies = [
+ "lazy_static",
+]
+
 [[package]]
 name = "shlex"
 version = "1.3.0"
@@ -1152,35 +1972,42 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "0fda2ff0d084019ba4d7c6f371c95d8fd75ce3524c3cb8fb653a3023f6323e64"
 
 [[package]]
-name = "slab"
-version = "0.4.9"
+name = "signal-hook-registry"
+version = "1.4.8"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8f92a496fb766b417c996b9c5e57daf2f7ad3b0bebe1ccfca4856390e3d3bb67"
+checksum = "c4db69cba1110affc0e9f7bcd48bbf87b3f4fc7c61fc9155afd4c469eb3d6c1b"
 dependencies = [
- "autocfg",
+ "errno",
+ "libc",
 ]
 
+[[package]]
+name = "slab"
+version = "0.4.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7a2ae44ef20feb57a68b23d846850f861394c2e02dc425a50098ae8c90267589"
+
 [[package]]
 name = "smallvec"
-version = "1.14.0"
+version = "1.15.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7fcf8323ef1faaee30a44a340193b1ac6814fd9b7b4e88e9d4519a3e4abe1cfd"
+checksum = "67b1b7a3b5fe4f1376887184045fcf45c69e92af734b7aaddc05fb777b6fbd03"
 
 [[package]]
 name = "socket2"
-version = "0.5.8"
+version = "0.6.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c970269d99b64e60ec3bd6ad27270092a5394c4e309314b18ae3fe575695fbe8"
+checksum = "17129e116933cf371d018bb80ae557e889637989d8638274fb25622827b03881"
 dependencies = [
  "libc",
- "windows-sys 0.52.0",
+ "windows-sys 0.60.2",
 ]
 
 [[package]]
 name = "stable_deref_trait"
-version = "1.2.0"
+version = "1.2.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a8f112729512f8e442d81f95a8a7ddf2b7c6b8a1a6f509a95864142b30cab2d3"
+checksum = "6ce2be8dc25455e1f91df71bfa12ad37d7af1092ae736f3a6cd0e37bc7810596"
 
 [[package]]
 name = "strsim"
@@ -1188,19 +2015,6 @@ version = "0.11.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "7da8b5736845d9f2fcb837ea5d9e2628564b3b043a70948a3f0b778838c5fb4f"
 
-[[package]]
-name = "subscription_convert"
-version = "1.0.0-alpha.1"
-dependencies = [
- "clap",
- "reqwest",
- "serde",
- "serde_json",
- "serde_with",
- "serde_yaml",
- "url",
-]
-
 [[package]]
 name = "subtle"
 version = "2.6.1"
@@ -1209,9 +2023,9 @@ checksum = "13c2bddecc57b384dee18652358fb23172facb8a2c51ccc10d74c157bdea3292"
 
 [[package]]
 name = "syn"
-version = "2.0.100"
+version = "2.0.111"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b09a44accad81e1ba1cd74a32461ba89dee89095ba17b32f5d03683b1b1fc2a0"
+checksum = "390cc9a294ab71bdb1aa2e99d13be9c753cd2d7bd6560c77118597410c4d2e87"
 dependencies = [
  "proc-macro2",
  "quote",
@@ -1229,40 +2043,62 @@ dependencies = [
 
 [[package]]
 name = "synstructure"
-version = "0.13.1"
+version = "0.13.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c8af7666ab7b6390ab78131fb5b0fce11d6b7a6951602017c35fa82800708971"
+checksum = "728a70f3dbaf5bab7f0c4b1ac8d7ae5ea60a4b5549c8a5914361c99147a709d2"
 dependencies = [
  "proc-macro2",
  "quote",
  "syn",
 ]
 
+[[package]]
+name = "tempfile"
+version = "3.24.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "655da9c7eb6305c55742045d5a8d2037996d61d8de95806335c7c86ce0f82e9c"
+dependencies = [
+ "fastrand",
+ "getrandom 0.3.4",
+ "once_cell",
+ "rustix",
+ "windows-sys 0.61.2",
+]
+
 [[package]]
 name = "thiserror"
-version = "2.0.12"
+version = "2.0.17"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "567b8a2dae586314f7be2a752ec7474332959c6460e02bde30d702a66d488708"
+checksum = "f63587ca0f12b72a0600bcba1d40081f830876000bb46dd2337a3051618f4fc8"
 dependencies = [
  "thiserror-impl",
 ]
 
 [[package]]
 name = "thiserror-impl"
-version = "2.0.12"
+version = "2.0.17"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7f7cf42b4507d8ea322120659672cf1b9dbb93f8f2d4ecfd6e51350ff5b17a1d"
+checksum = "3ff15c8ecd7de3849db632e14d18d2571fa09dfc5ed93479bc4485c7a517c913"
 dependencies = [
  "proc-macro2",
  "quote",
  "syn",
 ]
 
+[[package]]
+name = "thread_local"
+version = "1.1.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f60246a4944f24f6e018aa17cdeffb7818b76356965d03b07d6a9886e8962185"
+dependencies = [
+ "cfg-if",
+]
+
 [[package]]
 name = "time"
-version = "0.3.41"
+version = "0.3.44"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8a7619e19bc266e0f9c5e6686659d394bc57973859340060a69221e57dbc0c40"
+checksum = "91e7d9e3bb61134e77bde20dd4825b97c010155709965fedf0f49bb138e52a9d"
 dependencies = [
  "deranged",
  "itoa",
@@ -1275,25 +2111,34 @@ dependencies = [
 
 [[package]]
 name = "time-core"
-version = "0.1.4"
+version = "0.1.6"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c9e9a38711f559d9e3ce1cdb06dd7c5b8ea546bc90052da6d06bb76da74bb07c"
+checksum = "40868e7c1d2f0b8d73e4a8c7f0ff63af4f6d19be117e90bd73eb1d62cf831c6b"
 
 [[package]]
 name = "time-macros"
-version = "0.2.22"
+version = "0.2.24"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3526739392ec93fd8b359c8e98514cb3e8e021beb4e5f597b00a0221f8ed8a49"
+checksum = "30cfb0125f12d9c277f35663a0a33f8c30190f4e4574868a330595412d34ebf3"
 dependencies = [
  "num-conv",
  "time-core",
 ]
 
+[[package]]
+name = "tiny-keccak"
+version = "2.0.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2c9d3793400a45f954c52e73d068316d76b6f4e36977e3fcebb13a2721e80237"
+dependencies = [
+ "crunchy",
+]
+
 [[package]]
 name = "tinystr"
-version = "0.7.6"
+version = "0.8.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9117f5d4db391c1cf6927e7bea3db74b9a1c1add8f7eda9ffd5364f40f57b82f"
+checksum = "42d3e9c45c09de15d06dd8acf5f4e0e399e85927b7f00711024eb7ae10fa4869"
 dependencies = [
  "displaydoc",
  "zerovec",
@@ -1301,9 +2146,9 @@ dependencies = [
 
 [[package]]
 name = "tinyvec"
-version = "1.9.0"
+version = "1.10.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "09b3661f17e86524eccd4371ab0429194e0d7c008abb45f7a7495b1719463c71"
+checksum = "bfa5fdc3bce6191a1dbc8c02d5c8bffcf557bafa17c124c5264a458f1b0613fa"
 dependencies = [
  "tinyvec_macros",
 ]
@@ -1316,29 +2161,110 @@ checksum = "1f3ccbac311fea05f86f61904b462b55fb3df8837a366dfc601a0161d0532f20"
 
 [[package]]
 name = "tokio"
-version = "1.44.1"
+version = "1.48.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f382da615b842244d4b8738c82ed1275e6c5dd90c459a30941cd07080b06c91a"
+checksum = "ff360e02eab121e0bc37a2d3b4d4dc622e6eda3a8e5253d5435ecf5bd4c68408"
 dependencies = [
- "backtrace",
  "bytes",
  "libc",
  "mio",
+ "parking_lot",
  "pin-project-lite",
+ "signal-hook-registry",
  "socket2",
- "windows-sys 0.52.0",
+ "tokio-macros",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "tokio-macros"
+version = "2.6.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "af407857209536a95c8e56f8231ef2c2e2aff839b22e07a1ffcbc617e9db9fa5"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
 ]
 
 [[package]]
 name = "tokio-rustls"
-version = "0.26.2"
+version = "0.26.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8e727b36a1a0e8b74c376ac2211e40c2c8af09fb4013c60d910495810f008e9b"
+checksum = "1729aa945f29d91ba541258c8df89027d5792d85a8841fb65e8bf0f4ede4ef61"
 dependencies = [
  "rustls",
  "tokio",
 ]
 
+[[package]]
+name = "tokio-stream"
+version = "0.1.17"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "eca58d7bba4a75707817a2c44174253f9236b2d5fbd055602e9d5c07c139a047"
+dependencies = [
+ "futures-core",
+ "pin-project-lite",
+ "tokio",
+]
+
+[[package]]
+name = "tokio-test"
+version = "0.4.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2468baabc3311435b55dd935f702f42cd1b8abb7e754fb7dfb16bd36aa88f9f7"
+dependencies = [
+ "async-stream",
+ "bytes",
+ "futures-core",
+ "tokio",
+ "tokio-stream",
+]
+
+[[package]]
+name = "tokio-util"
+version = "0.7.17"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2efa149fe76073d6e8fd97ef4f4eca7b67f599660115591483572e406e165594"
+dependencies = [
+ "bytes",
+ "futures-core",
+ "futures-sink",
+ "pin-project-lite",
+ "tokio",
+]
+
+[[package]]
+name = "toml"
+version = "0.9.10+spec-1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0825052159284a1a8b4d6c0c86cbc801f2da5afd2b225fa548c72f2e74002f48"
+dependencies = [
+ "serde_core",
+ "serde_spanned",
+ "toml_datetime",
+ "toml_parser",
+ "winnow",
+]
+
+[[package]]
+name = "toml_datetime"
+version = "0.7.5+spec-1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "92e1cfed4a3038bc5a127e35a2d360f145e1f4b971b551a2ba5fd7aedf7e1347"
+dependencies = [
+ "serde_core",
+]
+
+[[package]]
+name = "toml_parser"
+version = "1.0.6+spec-1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a3198b4b0a8e11f09dd03e133c0280504d0801269e9afa46362ffde1cbeebf44"
+dependencies = [
+ "winnow",
+]
+
 [[package]]
 name = "tower"
 version = "0.5.2"
@@ -1354,6 +2280,24 @@ dependencies = [
  "tower-service",
 ]
 
+[[package]]
+name = "tower-http"
+version = "0.6.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d4e6559d53cc268e5031cd8429d05415bc4cb4aefc4aa5d6cc35fbf5b924a1f8"
+dependencies = [
+ "bitflags",
+ "bytes",
+ "futures-util",
+ "http",
+ "http-body",
+ "iri-string",
+ "pin-project-lite",
+ "tower",
+ "tower-layer",
+ "tower-service",
+]
+
 [[package]]
 name = "tower-layer"
 version = "0.3.3"
@@ -1368,21 +2312,63 @@ checksum = "8df9b6e13f2d32c91b9bd719c00d1958837bc7dec474d94952798cc8e69eeec3"
 
 [[package]]
 name = "tracing"
-version = "0.1.41"
+version = "0.1.44"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "784e0ac535deb450455cbfa28a6f0df145ea1bb7ae51b821cf5e7927fdcfbdd0"
+checksum = "63e71662fa4b2a2c3a26f570f037eb95bb1f85397f3cd8076caed2f026a6d100"
 dependencies = [
  "pin-project-lite",
+ "tracing-attributes",
  "tracing-core",
 ]
 
+[[package]]
+name = "tracing-attributes"
+version = "0.1.31"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7490cfa5ec963746568740651ac6781f701c9c5ea257c58e057f3ba8cf69e8da"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
 [[package]]
 name = "tracing-core"
-version = "0.1.33"
+version = "0.1.36"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "db97caf9d906fbde555dd62fa95ddba9eecfd14cb388e4f491a66d74cd5fb79a"
+dependencies = [
+ "once_cell",
+ "valuable",
+]
+
+[[package]]
+name = "tracing-log"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ee855f1f400bd0e5c02d150ae5de3840039a3f54b025156404e34c23c03f47c3"
+dependencies = [
+ "log",
+ "once_cell",
+ "tracing-core",
+]
+
+[[package]]
+name = "tracing-subscriber"
+version = "0.3.22"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e672c95779cf947c5311f83787af4fa8fffd12fb27e4993211a84bdfd9610f9c"
+checksum = "2f30143827ddab0d256fd843b7a66d164e9f271cfa0dde49142c5ca0ca291f1e"
 dependencies = [
+ "matchers",
+ "nu-ansi-term",
  "once_cell",
+ "regex-automata",
+ "sharded-slab",
+ "smallvec",
+ "thread_local",
+ "tracing",
+ "tracing-core",
+ "tracing-log",
 ]
 
 [[package]]
@@ -1391,11 +2377,35 @@ version = "0.2.5"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "e421abadd41a4225275504ea4d6566923418b7f05506fbc9c0fe86ba7396114b"
 
+[[package]]
+name = "typeid"
+version = "1.0.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bc7d623258602320d5c55d1bc22793b57daff0ec7efc270ea7d55ce1d5f5471c"
+
+[[package]]
+name = "typenum"
+version = "1.19.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "562d481066bde0658276a35467c4af00bdc6ee726305698a55b86e61d7ad82bb"
+
+[[package]]
+name = "ucd-trie"
+version = "0.1.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2896d95c02a80c6d6a5d6e953d479f5ddf2dfdb6a244441010e373ac0fb88971"
+
 [[package]]
 name = "unicode-ident"
-version = "1.0.18"
+version = "1.0.22"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5a5f39404a5da50712a4c1eecf25e90dd62b613502b7e925fd4e4d19b5c96512"
+checksum = "9312f7c4f6ff9069b165498234ce8be658059c6728633667c526e27dc2cf1df5"
+
+[[package]]
+name = "unicode-segmentation"
+version = "1.12.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f6ccf251212114b54433ec949fd6a7841275f9ada20dddd2f29e9ceea4501493"
 
 [[package]]
 name = "unsafe-libyaml"
@@ -1411,20 +2421,21 @@ checksum = "8ecb6da28b8a351d773b68d5825ac39017e680750f980f3a1a85cd8dd28a47c1"
 
 [[package]]
 name = "url"
-version = "2.5.4"
+version = "2.5.7"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "32f8b686cadd1473f4bd0117a5d28d36b1ade384ea9b5069a1c40aefed7fda60"
+checksum = "08bc136a29a3d1758e07a9cca267be308aeebf5cfd5a10f3f67ab2097683ef5b"
 dependencies = [
  "form_urlencoded",
  "idna",
  "percent-encoding",
+ "serde",
 ]
 
 [[package]]
-name = "utf16_iter"
-version = "1.0.5"
+name = "urlencoding"
+version = "2.1.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c8232dd3cdaed5356e0f716d285e4b40b932ac434100fe9b7e0e8e935b9e6246"
+checksum = "daf8dba3b7eb870caf1ddeed7bc9d2a049f3cfdfae7cb521b087cc33ae4c49da"
 
 [[package]]
 name = "utf8_iter"
@@ -1438,6 +2449,18 @@ version = "0.2.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "06abde3611657adf66d383f00b093d7faecc7fa57071cce2578660c9f1010821"
 
+[[package]]
+name = "valuable"
+version = "0.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ba73ea9cf16a25df0c8caa16c51acb937d5712a8429db78a3ee29d5dcacd3a65"
+
+[[package]]
+name = "version_check"
+version = "0.9.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0b928f33d975fc6ad9f86c8f283853ad26bdd5b10b7f1542aa2fa15e2289105a"
+
 [[package]]
 name = "want"
 version = "0.3.1"
@@ -1449,50 +2472,37 @@ dependencies = [
 
 [[package]]
 name = "wasi"
-version = "0.11.0+wasi-snapshot-preview1"
+version = "0.11.1+wasi-snapshot-preview1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9c8d87e72b64a3b4db28d11ce29237c246188f4f51057d65a7eab63b7987e423"
+checksum = "ccf3ec651a847eb01de73ccad15eb7d99f80485de043efb2f370cd654f4ea44b"
 
 [[package]]
-name = "wasi"
-version = "0.14.2+wasi-0.2.4"
+name = "wasip2"
+version = "1.0.1+wasi-0.2.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9683f9a5a998d873c0d21fcbe3c083009670149a8fab228644b8bd36b2c48cb3"
+checksum = "0562428422c63773dad2c345a1882263bbf4d65cf3f42e90921f787ef5ad58e7"
 dependencies = [
- "wit-bindgen-rt",
+ "wit-bindgen",
 ]
 
 [[package]]
 name = "wasm-bindgen"
-version = "0.2.100"
+version = "0.2.106"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1edc8929d7499fc4e8f0be2262a241556cfc54a0bea223790e71446f2aab1ef5"
+checksum = "0d759f433fa64a2d763d1340820e46e111a7a5ab75f993d1852d70b03dbb80fd"
 dependencies = [
  "cfg-if",
  "once_cell",
  "rustversion",
  "wasm-bindgen-macro",
-]
-
-[[package]]
-name = "wasm-bindgen-backend"
-version = "0.2.100"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2f0a0651a5c2bc21487bde11ee802ccaf4c51935d0d3d42a6101f98161700bc6"
-dependencies = [
- "bumpalo",
- "log",
- "proc-macro2",
- "quote",
- "syn",
  "wasm-bindgen-shared",
 ]
 
 [[package]]
 name = "wasm-bindgen-futures"
-version = "0.4.50"
+version = "0.4.56"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "555d470ec0bc3bb57890405e5d4322cc9ea83cebb085523ced7be4144dac1e61"
+checksum = "836d9622d604feee9e5de25ac10e3ea5f2d65b41eac0d9ce72eb5deae707ce7c"
 dependencies = [
  "cfg-if",
  "js-sys",
@@ -1503,9 +2513,9 @@ dependencies = [
 
 [[package]]
 name = "wasm-bindgen-macro"
-version = "0.2.100"
+version = "0.2.106"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7fe63fc6d09ed3792bd0897b314f53de8e16568c2b3f7982f468c0bf9bd0b407"
+checksum = "48cb0d2638f8baedbc542ed444afc0644a29166f1595371af4fecf8ce1e7eeb3"
 dependencies = [
  "quote",
  "wasm-bindgen-macro-support",
@@ -1513,31 +2523,31 @@ dependencies = [
 
 [[package]]
 name = "wasm-bindgen-macro-support"
-version = "0.2.100"
+version = "0.2.106"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8ae87ea40c9f689fc23f209965b6fb8a99ad69aeeb0231408be24920604395de"
+checksum = "cefb59d5cd5f92d9dcf80e4683949f15ca4b511f4ac0a6e14d4e1ac60c6ecd40"
 dependencies = [
+ "bumpalo",
  "proc-macro2",
  "quote",
  "syn",
- "wasm-bindgen-backend",
  "wasm-bindgen-shared",
 ]
 
 [[package]]
 name = "wasm-bindgen-shared"
-version = "0.2.100"
+version = "0.2.106"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1a05d73b933a847d6cccdda8f838a22ff101ad9bf93e33684f39c1f5f0eece3d"
+checksum = "cbc538057e648b67f72a982e708d485b2efa771e1ac05fec311f9f63e5800db4"
 dependencies = [
  "unicode-ident",
 ]
 
 [[package]]
 name = "web-sys"
-version = "0.3.77"
+version = "0.3.83"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "33b6dd2ef9186f1f2072e409e99cd22a975331a6b3591b12c764e0e55c60d5d2"
+checksum = "9b32828d774c412041098d182a8b38b16ea816958e07cf40eec2bc080ae137ac"
 dependencies = [
  "js-sys",
  "wasm-bindgen",
@@ -1555,53 +2565,68 @@ dependencies = [
 
 [[package]]
 name = "webpki-roots"
-version = "0.26.8"
+version = "1.0.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2210b291f7ea53617fbafcc4939f10914214ec15aace5ba62293a668f322c5c9"
+checksum = "b2878ef029c47c6e8cf779119f20fcf52bde7ad42a731b2a304bc221df17571e"
 dependencies = [
  "rustls-pki-types",
 ]
 
 [[package]]
 name = "windows-core"
-version = "0.52.0"
+version = "0.62.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "33ab640c8d7e35bf8ba19b884ba838ceb4fba93a4e8c65a9059d08afcfc683d9"
+checksum = "b8e83a14d34d0623b51dce9581199302a221863196a1dde71a7663a4c2be9deb"
 dependencies = [
- "windows-targets 0.52.6",
+ "windows-implement",
+ "windows-interface",
+ "windows-link",
+ "windows-result",
+ "windows-strings",
 ]
 
 [[package]]
-name = "windows-link"
-version = "0.1.1"
+name = "windows-implement"
+version = "0.60.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "76840935b766e1b0a05c0066835fb9ec80071d4c09a16f6bd5f7e655e3c14c38"
+checksum = "053e2e040ab57b9dc951b72c264860db7eb3b0200ba345b4e4c3b14f67855ddf"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
 
 [[package]]
-name = "windows-registry"
-version = "0.4.0"
+name = "windows-interface"
+version = "0.59.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4286ad90ddb45071efd1a66dfa43eb02dd0dfbae1545ad6cc3c51cf34d7e8ba3"
+checksum = "3f316c4a2570ba26bbec722032c4099d8c8bc095efccdc15688708623367e358"
 dependencies = [
- "windows-result",
- "windows-strings",
- "windows-targets 0.53.0",
+ "proc-macro2",
+ "quote",
+ "syn",
 ]
 
+[[package]]
+name = "windows-link"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f0805222e57f7521d6a62e36fa9163bc891acd422f971defe97d64e70d0a4fe5"
+
 [[package]]
 name = "windows-result"
-version = "0.3.2"
+version = "0.4.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c64fd11a4fd95df68efcfee5f44a294fe71b8bc6a91993e2791938abcc712252"
+checksum = "7781fa89eaf60850ac3d2da7af8e5242a5ea78d1a11c49bf2910bb5a73853eb5"
 dependencies = [
  "windows-link",
 ]
 
 [[package]]
 name = "windows-strings"
-version = "0.3.1"
+version = "0.5.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "87fa48cc5d406560701792be122a10132491cff9d0aeb23583cc2dcafc847319"
+checksum = "7837d08f69c77cf6b07689544538e017c1bfcf57e34b4c0ff58e6c2cd3b37091"
 dependencies = [
  "windows-link",
 ]
@@ -1617,11 +2642,20 @@ dependencies = [
 
 [[package]]
 name = "windows-sys"
-version = "0.59.0"
+version = "0.60.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1e38bc4d79ed67fd075bcc251a1c39b32a1776bbe92e5bef1f0bf1f8c531853b"
+checksum = "f2f500e4d28234f72040990ec9d39e3a6b950f9f22d3dba18416c35882612bcb"
 dependencies = [
- "windows-targets 0.52.6",
+ "windows-targets 0.53.5",
+]
+
+[[package]]
+name = "windows-sys"
+version = "0.61.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ae137229bcbd6cdf0f7b80a31df61766145077ddf49416a728b02cb3921ff3fc"
+dependencies = [
+ "windows-link",
 ]
 
 [[package]]
@@ -1642,18 +2676,19 @@ dependencies = [
 
 [[package]]
 name = "windows-targets"
-version = "0.53.0"
+version = "0.53.5"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b1e4c7e8ceaaf9cb7d7507c974735728ab453b67ef8f18febdd7c11fe59dca8b"
+checksum = "4945f9f551b88e0d65f3db0bc25c33b8acea4d9e41163edf90dcd0b19f9069f3"
 dependencies = [
- "windows_aarch64_gnullvm 0.53.0",
- "windows_aarch64_msvc 0.53.0",
- "windows_i686_gnu 0.53.0",
- "windows_i686_gnullvm 0.53.0",
- "windows_i686_msvc 0.53.0",
- "windows_x86_64_gnu 0.53.0",
- "windows_x86_64_gnullvm 0.53.0",
- "windows_x86_64_msvc 0.53.0",
+ "windows-link",
+ "windows_aarch64_gnullvm 0.53.1",
+ "windows_aarch64_msvc 0.53.1",
+ "windows_i686_gnu 0.53.1",
+ "windows_i686_gnullvm 0.53.1",
+ "windows_i686_msvc 0.53.1",
+ "windows_x86_64_gnu 0.53.1",
+ "windows_x86_64_gnullvm 0.53.1",
+ "windows_x86_64_msvc 0.53.1",
 ]
 
 [[package]]
@@ -1664,9 +2699,9 @@ checksum = "32a4622180e7a0ec044bb555404c800bc9fd9ec262ec147edd5989ccd0c02cd3"
 
 [[package]]
 name = "windows_aarch64_gnullvm"
-version = "0.53.0"
+version = "0.53.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "86b8d5f90ddd19cb4a147a5fa63ca848db3df085e25fee3cc10b39b6eebae764"
+checksum = "a9d8416fa8b42f5c947f8482c43e7d89e73a173cead56d044f6a56104a6d1b53"
 
 [[package]]
 name = "windows_aarch64_msvc"
@@ -1676,9 +2711,9 @@ checksum = "09ec2a7bb152e2252b53fa7803150007879548bc709c039df7627cabbd05d469"
 
 [[package]]
 name = "windows_aarch64_msvc"
-version = "0.53.0"
+version = "0.53.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c7651a1f62a11b8cbd5e0d42526e55f2c99886c77e007179efff86c2b137e66c"
+checksum = "b9d782e804c2f632e395708e99a94275910eb9100b2114651e04744e9b125006"
 
 [[package]]
 name = "windows_i686_gnu"
@@ -1688,9 +2723,9 @@ checksum = "8e9b5ad5ab802e97eb8e295ac6720e509ee4c243f69d781394014ebfe8bbfa0b"
 
 [[package]]
 name = "windows_i686_gnu"
-version = "0.53.0"
+version = "0.53.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c1dc67659d35f387f5f6c479dc4e28f1d4bb90ddd1a5d3da2e5d97b42d6272c3"
+checksum = "960e6da069d81e09becb0ca57a65220ddff016ff2d6af6a223cf372a506593a3"
 
 [[package]]
 name = "windows_i686_gnullvm"
@@ -1700,9 +2735,9 @@ checksum = "0eee52d38c090b3caa76c563b86c3a4bd71ef1a819287c19d586d7334ae8ed66"
 
 [[package]]
 name = "windows_i686_gnullvm"
-version = "0.53.0"
+version = "0.53.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9ce6ccbdedbf6d6354471319e781c0dfef054c81fbc7cf83f338a4296c0cae11"
+checksum = "fa7359d10048f68ab8b09fa71c3daccfb0e9b559aed648a8f95469c27057180c"
 
 [[package]]
 name = "windows_i686_msvc"
@@ -1712,9 +2747,9 @@ checksum = "240948bc05c5e7c6dabba28bf89d89ffce3e303022809e73deaefe4f6ec56c66"
 
 [[package]]
 name = "windows_i686_msvc"
-version = "0.53.0"
+version = "0.53.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "581fee95406bb13382d2f65cd4a908ca7b1e4c2f1917f143ba16efe98a589b5d"
+checksum = "1e7ac75179f18232fe9c285163565a57ef8d3c89254a30685b57d83a38d326c2"
 
 [[package]]
 name = "windows_x86_64_gnu"
@@ -1724,9 +2759,9 @@ checksum = "147a5c80aabfbf0c7d901cb5895d1de30ef2907eb21fbbab29ca94c5b08b1a78"
 
 [[package]]
 name = "windows_x86_64_gnu"
-version = "0.53.0"
+version = "0.53.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2e55b5ac9ea33f2fc1716d1742db15574fd6fc8dadc51caab1c16a3d3b4190ba"
+checksum = "9c3842cdd74a865a8066ab39c8a7a473c0778a3f29370b5fd6b4b9aa7df4a499"
 
 [[package]]
 name = "windows_x86_64_gnullvm"
@@ -1736,9 +2771,9 @@ checksum = "24d5b23dc417412679681396f2b49f3de8c1473deb516bd34410872eff51ed0d"
 
 [[package]]
 name = "windows_x86_64_gnullvm"
-version = "0.53.0"
+version = "0.53.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0a6e035dd0599267ce1ee132e51c27dd29437f63325753051e71dd9e42406c57"
+checksum = "0ffa179e2d07eee8ad8f57493436566c7cc30ac536a3379fdf008f47f6bb7ae1"
 
 [[package]]
 name = "windows_x86_64_msvc"
@@ -1748,38 +2783,71 @@ checksum = "589f6da84c646204747d1270a2a5661ea66ed1cced2631d546fdfb155959f9ec"
 
 [[package]]
 name = "windows_x86_64_msvc"
-version = "0.53.0"
+version = "0.53.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "271414315aff87387382ec3d271b52d7ae78726f5d44ac98b4f4030c91880486"
+checksum = "d6bbff5f0aada427a1e5a6da5f1f98158182f26556f345ac9e04d36d0ebed650"
 
 [[package]]
-name = "wit-bindgen-rt"
-version = "0.39.0"
+name = "winnow"
+version = "0.7.14"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6f42320e61fe2cfd34354ecb597f86f413484a798ba44a8ca1165c58d42da6c1"
+checksum = "5a5364e9d77fcdeeaa6062ced926ee3381faa2ee02d3eb83a5c27a8825540829"
 dependencies = [
- "bitflags",
+ "memchr",
+]
+
+[[package]]
+name = "wiremock"
+version = "0.6.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "08db1edfb05d9b3c1542e521aea074442088292f00b5f28e435c714a98f85031"
+dependencies = [
+ "assert-json-diff",
+ "base64",
+ "deadpool",
+ "futures",
+ "http",
+ "http-body-util",
+ "hyper",
+ "hyper-util",
+ "log",
+ "once_cell",
+ "regex",
+ "serde",
+ "serde_json",
+ "tokio",
+ "url",
 ]
 
 [[package]]
-name = "write16"
-version = "1.0.0"
+name = "wit-bindgen"
+version = "0.46.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d1890f4022759daae28ed4fe62859b1236caebfc61ede2f63ed4e695f3f6d936"
+checksum = "f17a85883d4e6d00e8a97c586de764dabcc06133f7f1d55dce5cdc070ad7fe59"
 
 [[package]]
 name = "writeable"
-version = "0.5.5"
+version = "0.6.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9edde0db4769d2dc68579893f2306b26c6ecfbe0ef499b013d731b7b9247e0b9"
+
+[[package]]
+name = "yaml-rust2"
+version = "0.10.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1e9df38ee2d2c3c5948ea468a8406ff0db0b29ae1ffde1bcf20ef305bcc95c51"
+checksum = "2462ea039c445496d8793d052e13787f2b90e750b833afee748e601c17621ed9"
+dependencies = [
+ "arraydeque",
+ "encoding_rs",
+ "hashlink",
+]
 
 [[package]]
 name = "yoke"
-version = "0.7.5"
+version = "0.8.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "120e6aef9aa629e3d4f52dc8cc43a015c7724194c97dfaf45180d2daf2b77f40"
+checksum = "72d6e5c6afb84d73944e5cedb052c4680d5657337201555f9f2a16b7406d4954"
 dependencies = [
- "serde",
  "stable_deref_trait",
  "yoke-derive",
  "zerofrom",
@@ -1787,9 +2855,9 @@ dependencies = [
 
 [[package]]
 name = "yoke-derive"
-version = "0.7.5"
+version = "0.8.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2380878cad4ac9aac1e2435f3eb4020e8374b5f13c296cb75b4620ff8e229154"
+checksum = "b659052874eb698efe5b9e8cf382204678a0086ebf46982b79d6ca3182927e5d"
 dependencies = [
  "proc-macro2",
  "quote",
@@ -1799,18 +2867,18 @@ dependencies = [
 
 [[package]]
 name = "zerocopy"
-version = "0.8.24"
+version = "0.8.31"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2586fea28e186957ef732a5f8b3be2da217d65c5969d4b1e17f973ebbe876879"
+checksum = "fd74ec98b9250adb3ca554bdde269adf631549f51d8a8f8f0a10b50f1cb298c3"
 dependencies = [
  "zerocopy-derive",
 ]
 
 [[package]]
 name = "zerocopy-derive"
-version = "0.8.24"
+version = "0.8.31"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a996a8f63c5c4448cd959ac1bab0aaa3306ccfd060472f85943ee0750f0169be"
+checksum = "d8a8d209fdf45cf5138cbb5a506f6b52522a25afccc534d1475dad8e31105c6a"
 dependencies = [
  "proc-macro2",
  "quote",
@@ -1840,15 +2908,26 @@ dependencies = [
 
 [[package]]
 name = "zeroize"
-version = "1.8.1"
+version = "1.8.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ced3678a2879b30306d323f4542626697a464a97c0a07c9aebf7ebca65cd4dde"
+checksum = "b97154e67e32c85465826e8bcc1c59429aaaf107c1e4a9e53c8d8ccd5eff88d0"
+
+[[package]]
+name = "zerotrie"
+version = "0.2.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2a59c17a5562d507e4b54960e8569ebee33bee890c70aa3fe7b97e85a9fd7851"
+dependencies = [
+ "displaydoc",
+ "yoke",
+ "zerofrom",
+]
 
 [[package]]
 name = "zerovec"
-version = "0.10.4"
+version = "0.11.5"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "aa2b893d79df23bfb12d5461018d408ea19dfafe76c2c7ef6d4eba614f8ff079"
+checksum = "6c28719294829477f525be0186d13efa9a3c602f7ec202ca9e353d310fb9a002"
 dependencies = [
  "yoke",
  "zerofrom",
@@ -1857,11 +2936,17 @@ dependencies = [
 
 [[package]]
 name = "zerovec-derive"
-version = "0.10.3"
+version = "0.11.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6eafa6dfb17584ea3e2bd6e76e0cc15ad7af12b09abdd1ca55961bed9b1063c6"
+checksum = "eadce39539ca5cb3985590102671f2567e659fca9666581ad3411d59207951f3"
 dependencies = [
  "proc-macro2",
  "quote",
  "syn",
 ]
+
+[[package]]
+name = "zmij"
+version = "0.1.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d0095ecd462946aa3927d9297b63ef82fb9a5316d7a37d134eeb36e58228615a"
diff --git a/Cargo.toml b/Cargo.toml
index 043e361..c01d106 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -1,13 +1,65 @@
 [package]
-name = "subscription_convert"
-version = "1.0.0-alpha.1"
+name = "proxy-convert"
+version = "2.0.0"
 edition = "2021"
+authors = ["Messica <Messica@example.com>"]
+description = "A modern, extensible tool for converting between different proxy configuration formats with multi-input integration support (Clash, Sing-box, V2Ray, etc.)"
+license = "MIT"
+repository = "https://github.com/picopock/proxy-convert"
+keywords = ["proxy", "clash", "sing-box", "v2ray", "subscription", "converter", "configuration", "multi-input", "integration"]
+categories = ["command-line-utilities", "network-programming"]
+
+[lib]
+name = "proxy_convert"
+path = "src/lib.rs"
 
 [dependencies]
-clap = { version = "4", features = ["derive"] }
-reqwest = { version = "0", default-features = false, features = ["blocking", "json", "rustls-tls"]}
-serde = { version = "1", features = ["derive"] }
-serde_json = "1"
-serde_with = "3"
-serde_yaml = "0.9.33"
-url = "2"
\ No newline at end of file
+
+clap = { version = "4.5", features = ["derive"] }
+
+# default-features = false to avoid native-tls/openssl-sys on Linux (CI aarch64/musl have no OpenSSL)
+reqwest = { version = "0.12", default-features = false, features = ["json", "rustls-tls", "rustls-tls-native-roots"] }
+tokio = { version = "1.48", features = ["full"] }
+
+serde = { version = "1.0", features = ["derive"] }
+serde_json = { version = "1.0", features = ["preserve_order"] }
+serde_yaml = "0.9"
+
+anyhow = "1.0"
+thiserror = "2.0"
+indexmap = { version = "2.12", features = ["serde"] }
+
+tracing = "0.1"
+tracing-subscriber = { version = "0.3", features = ["env-filter"] }
+
+config = "0.15"
+dirs = "6.0"
+
+url = "2.5"
+serde_with = "3.15"
+chrono = { version = "0.4", features = ["serde"] }
+regex = "1.12"
+
+cached = { version = "0.56", features = ["async"] }
+base64 = "0.22.1"
+urlencoding = "2.1"
+
+[dev-dependencies]
+tokio-test = "0.4"
+tempfile = "3.23"
+wiremock = "0.6"
+
+[[bin]]
+name = "proxy-convert"
+path = "src/main.rs"
+
+[profile.release]
+opt-level = 3
+lto = true
+codegen-units = 1
+panic = "abort"
+strip = true
+
+[profile.dev]
+opt-level = 0
+debug = true
diff --git a/README.md b/README.md
index 8ff080f..bf71000 100644
--- a/README.md
+++ b/README.md
@@ -1,89 +1,438 @@
-[中文指南](https://blog.picopock.com/2023/02/12/debian/debian/#%E9%83%A8%E7%BD%B2-singBox-%E5%AE%B9%E5%99%A8)
+# Proxy Config Converter
 
-# singbox_subscription_convert
+A modern, extensible proxy configuration conversion tool supporting conversion and multi-source integration between various proxy configuration formats.
 
-A tools for converting clash subscription to singbox config.
+## 🚀 Features
 
-> Note: Only test vmess and ss protocol.
+- **Multi-protocol support**: Supports Clash, Sing-box, V2Ray and other proxy configuration formats
+- **Multi-source integration**: Supports integration of multiple input sources with unified interpolation rules ✨
+- **URL-style source**: Source uses standard URL form `<path|url>?type=...&name=...&flag=...` for easy extension ✨
+- **Powerful interpolation system**: Advanced template interpolation rules for complex node selection and filtering ✨
+- **Plugin architecture**: Easy to extend new protocol support
+- **Modern CLI**: User-friendly command line interface based on clap 4.x
+- **Async processing**: High-performance async processing based on tokio
+- **Structured logging**: Full logging system using tracing
+- **Config management**: Flexible config file and environment variable support
+- **Error handling**: Robust error handling and user-friendly error messages
+- **Type safety**: Strong type system, compile-time checks
 
-## Usage
+## 📦 Installation
 
-```sh
-subscription_convert <subscribe address> [-t <template path>] [-o <output path>]
+### Build from source
+
+```bash
+git clone https://github.com/your-username/proxy-convert.git
+cd proxy-convert
+cargo build --release
+```
+
+### Install via Cargo
+
+```bash
+cargo install --git https://github.com/your-username/proxy-convert.git
+```
+
+## 🎯 Quick Start
+
+### Basic Usage
+
+```bash
+# Recommended: URL-style (path/url + query params)
+proxy-convert convert --source "./clash.yaml?type=clash"
+proxy-convert convert --source "https://example.com/sub?type=clash&name=my&flag=clash" -o config.json
+
+# Legacy: name@type@source or type@source
+proxy-convert convert --source "clash1@clash@./clash.yaml" --source "singbox1@sing-box@./singbox.json" -o config.json
+
+# Validate config file
+proxy-convert validate config.json
+
+# Generate template
+proxy-convert template singbox --output template.json
+
+# Show version info
+proxy-convert version
+```
+
+## 🔧 Multi-Source Mode
+
+### Important Note
+
+**Single source and multiple sources use exactly the same interpolation rules and input rules!**
+
+This ensures consistent user experience regardless of whether you use a single input source or multiple input sources.
+
+### Source Format (standard URL-style)
+
+```text
+<path|url>?type=clash&name=...&flag=...
+```
+
+- Path or URL + `?` and query params (standard URL): `type` (required), `name` (optional), `flag` (optional).
+- Examples: `./config.yaml?type=clash`, `https://example.com/sub?type=clash&name=my&flag=clash`
+- Config file `sources` use the same format (list of such strings).
+
+### Examples
+
+```bash
+--source "./clash.yaml?type=clash"
+--source "https://example.com/sub?type=clash&name=my&flag=clash"
+--source "examples/sources/Eternal Network?type=singbox"
+# With config: --config examples/config.yaml -o config.json
+```
+
+## 📋 Interpolation Rules System
+
+The project supports powerful template interpolation rules. Each rule ends with `;` (can be omitted if there's only one rule).
+
+### Basic Interpolation Rules
+
+#### 1. Insert all nodes
+
+```json
+{
+  "outbounds": "{{ALL-TAG}}"
+}
+```
+
+#### 2. Insert all nodes from specified source
+
+```json
+{
+  "outbounds": "{{ALL-TAG:clash1}}"
+}
+```
+
+#### 3. Insert all nodes from multiple sources
+
+```json
+{
+  "outbounds": "{{ALL-TAG:clash1,singbox1}}"
+}
+```
+
+### Tag Filtering Rules
+
+#### 4. Insert nodes matching tags from all sources
+
+```json
+{
+  "outbounds": "{{INCLUDE-TAG:US,JP,SG}}"
+}
+```
+
+#### 5. Insert nodes matching tags from specified source
+
+```json
+{
+  "outbounds": "{{INCLUDE-TAG:clash1@US,JP}}"
+}
+```
+
+#### 6. Insert nodes matching tags from multiple sources
+
+```json
+{
+  "outbounds": "{{INCLUDE-TAG:clash1@US,JP,singbox1@SG}}"
+}
 ```
 
-- `subscribe address`
+### Exclusion Rules
 
-  The tool will automatically append the `flag=clash` parameter to the subscription address to get the YAML format subscription.
+#### 7. Exclude nodes matching tags from all sources
 
-- `-t <template path>`
+```json
+{
+  "outbounds": "{{EXCLUDE-TAG:CN,AD}}"
+}
+```
 
-  Specify a JSON template for generating sing-box. If not specified, the tool's built-in template will be used.
+#### 8. Exclude nodes matching tags from specified source
 
-- `-o <output path>`
+```json
+{
+  "outbounds": "{{EXCLUDE-TAG:clash1@CN}}"
+}
+```
 
-  Specify the output directory or file path for the generated sing-box configuration.
+#### 9. Exclude nodes matching tags from multiple sources
 
-## Subscription Update Rules
+```json
+{
+  "outbounds": "{{EXCLUDE-TAG:clash1@CN,AD,singbox1@BLOCKED}}"
+}
+```
 
-Currently, the tool only modifies the items of type `urltest` and `selector` in the `outbounds` configuration of the template, and appends the nodes of all subscriptions to the end of `outbounds`.
+### Tag Prefix Rules
 
-For the `urltest` type, modify the `outbounds` field according to the interpolation rules.
-For the `selector` type, modify the `outbounds` and `default` fields according to the interpolation rules.
+When using `source-name@tag` format, the final node tags automatically include source prefixes:
 
-Traverse the `outbounds` fields of the corresponding types:
-  If there is a `{{ALL-TAG}} `field, fill in all the node names of the obtained subscription at the current position, replacing the placeholder rule field.
-  If there are interpolation rules such as `{{EXCLUDE-TAG:xxx,yyy,zzz}}`, `{{INCLUDE-TAG:xxx,yyy,zzz}}`, or `{{EXCLUDE-TAG:xxx,yyy,zzz;INCLUDE-TAG:xxx,yyy,zzz}}`, perform fuzzy matching:
-    `EXCLUDE-TAG`: Represents an exclusion rule, followed by fuzzy matching rules separated by `,`. The fuzzy matching rules are in an OR relationship.
-    `INCLUDE-TAG`: Represents an inclusion rule, followed by fuzzy matching rules separated by `,`. The fuzzy matching rules are in an OR relationship.
-    If `EXCLUDE-TAG` and `INCLUDE-TAG` exist simultaneously, they need to be separated by `;` without regard to order. The two rules are in an AND relationship and need to be satisfied simultaneously.
+- Nodes matching `clash1@US` will have tags containing `clash1@US`
+- Nodes matching `singbox1@SG` will have tags containing `singbox1@SG`
 
-An example configuration is as follows:
+### Template Example
 
 ```json
 {
   "outbounds": [
     {
-      "tag": "DIRECT",
-      "type": "direct"
-    },
-    {
-      "tag": "🚀 Select",
-      "type": "selector",
-      "interrupt_exist_connections": true,
-      "default": "♻️ AutoSelect",
-      "outbounds": [
-        "♻️ AutoSelect",
-        "🚀 ManualSelect"
-      ]
+      "type": "urltest",
+      "tag": "Hong Kong Nodes",
+      "outbounds": "{{ALL-TAG:clash1}}",
+      "url": "https://www.gstatic.com/generate_204",
+      "interval": "300s"
     },
     {
-      "tag": "♻️ AutoSelect",
       "type": "urltest",
+      "tag": "US Nodes",
+      "outbounds": "{{INCLUDE-TAG:US,JP}}",
       "url": "https://www.gstatic.com/generate_204",
-      "interval": "180s",
-      "tolerance": 50,
-      "idle_timeout": "5m",
-      "interrupt_exist_connections": true,
-      "outbounds": ["{{ALL-TAG}}"]
+      "interval": "300s"
     },
     {
-      "tag": "🚀 ManualSelect",
-      "type": "selector",
-      "interrupt_exist_connections": true,
-      "default": "{{INCLUDE-TAG:xxx,yyy,zzz}}",
-      "outbounds": ["{{ALL-TAG}}"]
+      "type": "urltest",
+      "tag": "Singapore Nodes",
+      "outbounds": "{{INCLUDE-TAG:singbox1@SG}}",
+      "url": "https://www.gstatic.com/generate_204",
+      "interval": "300s"
     },
     {
       "type": "urltest",
-      "tag": "🎵 TikTok",
+      "tag": "Other Nodes",
+      "outbounds": "{{EXCLUDE-TAG:US,JP,SG,CN}}",
       "url": "https://www.gstatic.com/generate_204",
-      "interval": "30s",
-      "tolerance": 50,
-      "idle_timeout": "5m",
-      "interrupt_exist_connections": true,
-      "outbounds": ["{{EXCLUDE-TAG:aaa,bbb,ccc;INCLUDE-TAG:xxx,yyy,zzz}}"]
+      "interval": "300s"
     }
   ]
 }
-```
\ No newline at end of file
+```
+
+## 📋 Command Reference
+
+### `convert` - Convert config format
+
+```bash
+proxy-convert convert [OPTIONS] --source <SOURCE> [--source <SOURCE>...]
+```
+
+**Arguments:**
+
+- `--source <SOURCE>`: Input source: `<path|url>?type=...&name=...&flag=...` (type required in query)
+
+**Options:**
+
+- `-t, --template <TEMPLATE>`: Template file path
+- `-o, --output <OUTPUT>`: Output file path (default: config.json)
+- `-f, --format <FORMAT>`: Output format (json/pretty/yaml, default: pretty)
+- `-F, --force`: Force overwrite output file
+- `-l, --log-level <LOG_LEVEL>`: Log level (default: info)
+- `-v, --verbose`: Show detailed information
+
+### `validate` - Validate config format
+
+```bash
+proxy-convert validate <FILE> [OPTIONS]
+```
+
+**Arguments:**
+
+- `FILE`: Config file path
+
+**Options:**
+
+- `-f, --format <FORMAT>`: Config format
+
+### `template` - Generate template
+
+```bash
+proxy-convert template [OPTIONS]
+```
+
+**Options:**
+
+- `-o, --output <OUTPUT>`: Output file path (default: template.json)
+- `-t, --template-type <TEMPLATE_TYPE>`: Template type (basic/full/minimal, default: basic)
+
+### `version` - Show version info
+
+```bash
+proxy-convert version
+```
+
+## ⚙️ Configuration
+
+### Config File
+
+The program will look for config files in the following order:
+
+1. `config.yaml` or `config.yml` in the current directory
+2. `proxy-convert/config.yaml` or `config.yml` in the user config directory
+
+### Config Example
+
+```yaml
+# config.yaml
+user_agent: "ProxyConfigConverter/3.0.0"
+timeout_seconds: 30
+retry_count: 3
+cache_ttl_seconds: 3600
+log_level: info
+output_format: json
+default_input_format: clash
+default_output_format: singbox
+template_dir: ~/.config/proxy-convert/templates
+# sources: same format as --source, e.g. ["path?type=clash&name=my"]
+# sources:
+#   - "./clash.yaml?type=clash&name=clash1"
+#   - "https://example.com/sub?type=singbox&name=sub1"
+```
+
+### Environment Variables
+
+All config items can be overridden by environment variables in the format `PROXY_CONVERT_<KEY>`:
+
+```bash
+export PROXY_CONVERT_LOG_LEVEL=debug
+export PROXY_CONVERT_TIMEOUT_SECONDS=60
+export PROXY_CONVERT_DEFAULT_OUTPUT_FORMAT=v2ray
+```
+
+## 🏗️ Project Structure
+
+```tree
+src/
+├── main.rs              # Entry point
+├── core/                 # Domain and core
+│   ├── config.rs        # Config management
+│   ├── error.rs         # Global error type
+│   ├── logging.rs       # Logging init
+│   └── source.rs        # SourceMeta, SourceProtocol (domain types)
+├── protocols/           # Protocol modules
+│   ├── mod.rs           # Protocol registry, ProxyServer, ProtocolProcessor
+│   ├── clash/           # Clash protocol support
+│   ├── singbox/         # Sing-box protocol support
+│   └── v2ray/           # V2Ray protocol support
+├── commands/            # CLI commands
+│   ├── cli.rs           # CLI definition
+│   ├── convert.rs       # Convert command
+│   ├── validate.rs       # Validate command
+│   ├── template.rs      # Template command
+│   └── version.rs       # Version command
+└── utils/               # Utilities
+    ├── source/          # Source loader and parser
+    └── template/        # Template interpolation and engine
+```
+
+## 🔧 Development
+
+### Multi-Source Integration Architecture ✨
+
+The project supports multi-source integration with unified interpolation rules:
+
+#### 1. Input Source Management
+
+- **Source format**: `<path|url>?type=...&name=...&flag=...` (same for CLI and config)
+- **Type detection**: Automatic detection of clash, sing-box, v2ray formats
+- **Source naming**: Each source has a unique name for template reference
+
+#### 2. Interpolation Rule System
+
+- **Unified rules**: Single source and multiple sources use identical rules
+- **Advanced filtering**: Support for complex tag-based filtering
+- **Source-specific rules**: Support for `source-name@tag` format
+- **Automatic prefixing**: Tags automatically include source prefixes
+
+#### 3. Template Engine
+
+- **Rule parsing**: Parse interpolation rule strings
+- **Node filtering**: Filter and select nodes based on rules
+- **Tag processing**: Automatically add source prefixes
+- **Template rendering**: Insert node information into templates
+
+#### 4. Node Selection
+
+- **Tag matching**: Filter nodes by tags
+- **Protocol matching**: Filter nodes by protocol type
+- **Pattern matching**: Filter nodes by name patterns
+- **Quantity limits**: Limit the number of selected nodes
+
+#### 5. Transformation Rules
+
+- **Renaming**: Change node names
+- **Tag operations**: Add/remove tags
+- **Parameter modification**: Change node parameters
+
+### Add New Protocol Support
+
+1. Create a new protocol module under `src/protocols/`
+2. Implement the `ProtocolProcessor` trait for template processing
+3. Register the processor in `ProtocolRegistry::init()` in `src/protocols/mod.rs`:
+   `registry.register("format_name", Box::new(YourProcessor));`
+4. Add parsing/conversion in the registry for your format if needed (e.g. `parse_content`, subscription/plain)
+
+### Example: Add New Protocol
+
+```rust
+// src/protocols/new_protocol/mod.rs
+use crate::core::error::Result;
+use crate::protocols::{ProtocolProcessor, ProxyServer};
+use crate::utils::template::interpolation_parser::InterpolationRule;
+use indexmap::IndexMap;
+use crate::utils::source::parser::Source;
+
+pub struct NewProtocolProcessor;
+
+impl ProtocolProcessor for NewProtocolProcessor {
+    fn process_rule(&self, _rule: &InterpolationRule, _sources: &IndexMap<String, Source>) -> Result<String> {
+        Ok(String::new())
+    }
+    fn get_nodes_for_rule(&self, rule: &InterpolationRule, sources: &IndexMap<String, Source>) -> Result<Vec<ProxyServer>> {
+        // ...
+    }
+    fn set_default_values(&self, template: &str, nodes: &[ProxyServer]) -> Result<String> {
+        // ...
+    }
+    fn append_nodes(&self, template: &str, nodes: &[ProxyServer]) -> Result<String> {
+        // ...
+    }
+    fn create_node_config(&self, node: &ProxyServer) -> String {
+        // ...
+    }
+}
+```
+
+Then in `ProtocolRegistry::init()`:
+```rust
+registry.register("new_protocol", Box::new(new_protocol::NewProtocolProcessor));
+```
+
+### Build and Test
+
+```bash
+# Build the project
+cargo build
+
+# Run tests
+cargo test
+
+# Check code quality
+cargo clippy
+
+# Format code
+cargo fmt
+```
+
+## 📄 License
+
+This project is licensed under the MIT License - see the [LICENSE](LICENSE) file for details.
+
+## 🙏 Acknowledgements
+
+- [clap](https://github.com/clap-rs/clap) - Command line argument parser
+- [tokio](https://github.com/tokio-rs/tokio) - Async runtime
+- [serde](https://github.com/serde-rs/serde) - Serialization framework
+- [tracing](https://github.com/tokio-rs/tracing) - Structured logging
+
+---
+
+**Note**: This project is for learning and research purposes only. Please comply with local laws and regulations.
\ No newline at end of file
diff --git a/README.zh-CN.md b/README.zh-CN.md
new file mode 100644
index 0000000..27d5d83
--- /dev/null
+++ b/README.zh-CN.md
@@ -0,0 +1,575 @@
+# Proxy Config Converter
+
+一个现代化、可扩展的代理配置转换工具，支持多种代理配置格式之间的转换和多输入整合。
+
+## 📑 目录
+
+- [🚀 特性](#-特性)
+- [📦 安装](#-安装)
+- [🎯 快速开始](#-快速开始)
+- [📋 插值规则系统](#-插值规则系统-)
+- [⚙️ 配置](#️-配置)
+- [🏗️ 项目结构](#️-项目结构)
+- [🔧 开发](#-开发)
+- [❓ 常见问题解答](#-常见问题解答)
+- [🤝 贡献指南](#-贡献指南)
+- [📄 许可证](#-许可证)
+- [🙏 致谢](#-致谢)
+
+## 🚀 特性
+
+- **多协议支持**：支持 Clash、Sing-box、V2Ray 等多种代理配置格式
+- **多来源整合**：支持多个输入源的整合和模板规则应用 ✨
+- **插值规则系统**：强大的模板插值规则，支持复杂的节点选择和过滤 ✨
+- **插件化架构**：易于扩展新的协议支持
+- **现代化 CLI**：基于 clap 4.x 的友好命令行界面
+- **异步处理**：基于 tokio 的高性能异步处理
+- **结构化日志**：使用 tracing 的完整日志系统
+- **配置管理**：灵活的配置文件和环境变量支持
+- **错误处理**：完善的错误处理和用户友好的错误信息
+- **类型安全**：强类型系统，编译时检查
+
+## 📦 安装
+
+### 源码编译
+
+```bash
+git clone https://github.com/your-username/proxy-convert.git
+cd proxy-convert
+cargo build --release
+```
+
+### 使用 Cargo 安装
+
+```bash
+cargo install --git https://github.com/your-username/proxy-convert.git
+```
+
+## 🎯 快速开始
+
+### 基本用法
+
+#### 命令及说明
+
+- 转换订阅
+
+  ```bash
+  proxy-convert convert [OPTIONS] --source <SOURCE> [--source <SOURCE>...]
+  ```
+
+  **选项：**
+  - `--source <SOURCE>`：输入来源，见下方「来源格式说明」
+  - `-t, --template <TEMPLATE>`：模板文件路径
+  - `-o, --output <OUTPUT>`：输出文件路径（默认：config.json）
+  - `-f, --format <FORMAT>`：输出格式（json/pretty/yaml，默认：pretty）
+  - `-F, --force`：强制覆盖输出文件
+  - `-l, --log-level <LOG_LEVEL>`：日志级别（默认：info）
+  - `-v, --verbose`：显示详细信息
+
+  - **来源格式说明**（标准 URL 规范，命令行与配置文件一致）
+
+    ```text
+    <path|url>?type=clash&name=...&flag=...
+    ```
+
+    - path 或 url 后加 `?` 与查询参数（与标准 URL 一致）：
+      - `type`：**必填**，订阅类型（clash / sing-box / v2ray）
+      - `name`：可选，来源名称，用于模板引用
+      - `flag`：可选，请求 URL 时的 flag 参数（空表示 `&flag=`）
+    - 示例：`./config.yaml?type=clash`、`https://example.com/sub?type=clash&name=my&flag=clash`、`examples/sources/Eternal Network?type=singbox`
+    - 配置文件 `sources` 也使用相同格式的字符串列表（见下方配置示例）。
+
+- **验证配置文件**：验证配置文件的格式
+
+  ```bash
+  proxy-convert validate <FILE> [-f, --format <FORMAT>]
+  ```
+
+- **生成模板**：
+
+  ```bash
+  proxy-convert template [-o, --output <OUTPUT>] [-t, --template-type <TYPE>]
+  ```
+
+- **显示版本信息**：
+
+  ```bash
+  proxy-convert version
+  ```
+
+#### 使用示例
+
+```bash
+# 单源
+proxy-convert convert --source "./clash.yaml?type=clash"
+
+# 多源（可带 name、flag）
+proxy-convert convert \
+  --source "https://example.com/sub?type=clash&name=my&flag=clash" \
+  --source "examples/sources/Eternal Network?type=singbox" \
+  -o config.json
+
+# 使用配置文件（sources 格式与 --source 一致）
+proxy-convert convert --config examples/config.yaml -o config.json
+
+# 其他命令
+proxy-convert validate config.json
+proxy-convert template singbox --output template.json
+proxy-convert version
+```
+
+## 📋 插值规则系统 ✨
+
+### 规则说明
+
+本项目支持强大的模板插值规则，每个规则以 `;` 结束（如果只有一个规则可以省略）。
+
+**插值规则特点：**
+
+- **统一性**：单一源和多源使用完全相同的插值规则
+- **灵活性**：支持复杂的标签过滤和来源指定
+- **可组合性**：多个规则可以组合使用，实现复杂的节点选择逻辑
+- **JSON 兼容**：所有插值规则都包含在双引号中，确保 JSON 格式正确
+
+### 基本插值规则
+
+#### 插入所有节点
+
+```json
+{
+  "outbounds": "{{ALL-TAG}}"
+}
+```
+
+#### 插入指定来源的所有节点
+
+```json
+{
+  "outbounds": "{{ALL-TAG:clash1}}"
+}
+```
+
+#### 插入多个来源的所有节点
+
+```json
+{
+  "outbounds": "{{ALL-TAG:clash1,singbox1}}"
+}
+```
+
+### 标签过滤插值规则
+
+#### 插入所有源中匹配标签的节点
+
+```json
+{
+  "outbounds": "{{INCLUDE-TAG:US,JP,SG}}"
+}
+```
+
+#### 插入多个来源中匹配标签的节点
+
+```json
+{
+  "outbounds": "{{INCLUDE-TAG:clash1@US,JP,singbox1@SG}}"
+}
+```
+
+**说明：** `{{INCLUDE-TAG:clash1@US,JP,singbox1@SG}}` 表示：
+
+- 插入 clash1 来源中匹配 US 的节点
+- 插入所有来源中匹配 JP 的节点  
+- 插入 singbox1 来源中匹配 SG 的节点
+
+### 排除规则
+
+#### 排除所有源中匹配标签的节点
+
+```json
+{
+  "outbounds": "{{EXCLUDE-TAG:CN,AD}}"
+}
+```
+
+#### 排除多个来源中匹配标签的节点
+
+```json
+{
+  "outbounds": "{{EXCLUDE-TAG:clash1@CN,AD,singbox1@BLOCKED}}"
+}
+```
+
+**说明：** `{{EXCLUDE-TAG:clash1@CN,AD,singbox1@BLOCKED}}` 表示：
+
+- 排除 clash1 来源中匹配 CN 的节点
+- 排除所有来源中匹配 AD 的节点
+- 排除 singbox1 来源中匹配 BLOCKED 的节点
+
+#### `INCLUDE-TAG` 和 `EXCLUDE-TAG` 组合使用
+
+`{{INCLUDE-TAG}}` 和 `{{EXCLUDE-TAG}}` 同时存在于同一插值括号中时，它们的组合关系：
+
+- **INCLUDE-TAG**：首先选择匹配指定标签的节点
+- **EXCLUDE-TAG**：然后从已选择的节点中排除匹配指定标签的节点
+- **最终结果**：INCLUDE 的结果减去 EXCLUDE 的结果
+
+**示例：**
+
+```json
+{
+  "outbounds": [
+    "{{INCLUDE-TAG:US,JP;EXCLUDE-TAG:CN,AD}}",
+  ]
+}
+```
+
+**结果：** 最终只包含 US 和 JP 节点，但不包含 CN 和 AD 节点
+
+### 标签前缀规则
+
+**重要：** 标签前缀规则只适用于多个来源的情况
+
+当使用 `source-name@tag` 格式时，最终节点的标签会自动添加来源前缀：
+
+- 匹配 `clash1@US` 的节点，最终标签会包含 `clash1@US`
+- 匹配 `singbox1@SG` 的节点，最终标签会包含 `singbox1@SG`
+
+**单个来源的情况：**
+
+- 如果只有一个来源且没有指定 `name`，节点标签保持原样
+- 例如：单源且未指定 `name`（如 `--source "./clash.yaml?type=clash"`）时，节点标签不会添加前缀
+
+**标签前缀的作用：**
+
+- **来源区分**：在多源环境中，可以清楚地区分节点来自哪个来源
+- **标签管理**：避免不同来源的相同标签产生冲突
+- **模板引用**：在模板中可以使用 `source-name@tag` 格式精确引用特定来源的节点
+
+### 模板示例
+
+```json
+{
+  "outbounds": [
+    {
+      "type": "urltest",
+      "tag": "香港节点",
+      "outbounds": "{{ALL-TAG:clash1}}",
+      "url": "https://www.gstatic.com/generate_204",
+      "interval": "300s"
+    },
+    {
+      "type": "urltest",
+      "tag": "美国节点",
+      "outbounds": "{{INCLUDE-TAG:US,JP}}",
+      "url": "https://www.gstatic.com/generate_204",
+      "interval": "300s"
+    },
+    {
+      "type": "urltest",
+      "tag": "新加坡节点",
+      "outbounds": "{{INCLUDE-TAG:singbox1@SG}}",
+      "url": "https://www.gstatic.com/generate_204",
+      "interval": "300s"
+    },
+    {
+      "type": "urltest",
+      "tag": "其他节点",
+      "outbounds": "{{EXCLUDE-TAG:US,JP,SG,CN}}",
+      "url": "https://www.gstatic.com/generate_204",
+      "interval": "300s"
+    }
+  ]
+}
+```
+
+## ⚙️ 配置
+
+### 配置文件
+
+程序会按以下顺序查找配置文件：
+
+1. 当前目录下的 `config.yaml` 或 `config.yml`
+2. 用户配置目录下的 `proxy-convert/config.yaml` 或 `config.yml`
+
+**配置文件优先级：**
+
+- 命令行参数 > 配置文件 > 环境变量 > 默认值
+
+### 配置示例
+
+```yaml
+# config.yaml
+user_agent: "ProxyConfigConverter/3.0.0"
+timeout_seconds: 30
+retry_count: 3
+log_level: info
+output_format: json
+default_output_format: singbox
+# sources 与 --source 格式一致：<path|url>?type=...&name=...&flag=...
+# sources:
+#   - "./clash.yaml?type=clash&name=clash1"
+#   - "https://example.com/sub?type=singbox&name=sub1"
+```
+
+**配置项说明：**
+
+- `user_agent`：HTTP 请求的 User-Agent
+- `timeout_seconds`：网络请求超时时间（秒）
+- `retry_count`：失败重试次数
+- `log_level`：日志级别（error/warn/info/debug/trace）
+- `default_output_format`：默认输出协议（singbox/clash/v2ray）
+- `output_format`：输出格式（json/pretty/yaml）
+- `output`：默认输出文件路径
+- `template`：默认模板文件路径
+- `sources`：预定义来源列表（与命令行 `--source` 格式一致）
+
+### 环境变量
+
+所有配置项均可通过环境变量覆盖，格式为 `PROXY_CONVERT_<KEY>`（嵌套键使用 `__`）：
+
+```bash
+export PROXY_CONVERT_LOG_LEVEL=debug
+export PROXY_CONVERT_TIMEOUT_SECONDS=60
+export PROXY_CONVERT_DEFAULT_OUTPUT_FORMAT=v2ray
+```
+
+**配置优先级：** 命令行 > 环境变量 > 配置文件 > 默认值
+
+## 🏗️ 项目结构
+
+```tree
+src/
+├── main.rs              # 程序入口，CLI 命令分发
+├── lib.rs               # 库入口，供二进制与集成测试使用
+├── core/                 # 领域与核心
+│   ├── config.rs        # 配置管理
+│   ├── error.rs         # 全局错误类型
+│   ├── logging.rs      # 日志初始化
+│   └── source.rs        # SourceMeta、SourceProtocol（领域类型）
+├── protocols/           # 协议模块
+│   ├── mod.rs           # 协议注册表、ProxyServer、ProtocolProcessor
+│   ├── detect.rs        # 格式检测（clash/singbox/v2ray/subscription/plain）
+│   ├── subscription.rs  # 订阅与纯文本解析（vmess/trojan/ss URL）
+│   ├── clash/           # Clash 协议支持
+│   ├── singbox/         # Sing-box 协议支持
+│   └── v2ray/           # V2Ray 协议支持
+├── commands/            # CLI 命令
+│   ├── cli.rs           # CLI 定义
+│   ├── convert.rs      # 转换命令
+│   ├── validate.rs     # 验证命令
+│   ├── template.rs     # 模板命令
+│   └── version.rs      # 版本命令
+└── utils/               # 工具
+    ├── source/         # 来源加载与解析
+    └── template/       # 模板插值与引擎
+```
+
+**模块职责说明：**
+
+- **core**：领域类型与全局错误、配置、日志
+- **protocols**：格式检测、订阅解析、各协议实现与 Processor 注册
+- **commands**：CLI 命令实现
+- **utils**：来源加载、模板解析与渲染
+
+## 🔧 开发
+
+### 核心架构 ✨
+
+本项目支持多来源整合，主要组件包括：
+
+#### 1. 输入源管理
+
+- **来源格式**：统一使用 URL 形式 `<path|url>?type=...&name=...&flag=...`（命令行与配置文件一致）
+- **类型检测**：自动检测 clash、sing-box、v2ray 格式
+- **来源命名**：每个来源都有唯一名称用于模板引用
+
+#### 2. 插值规则系统
+
+- **统一规则**：单一源和多源使用完全相同的规则
+- **高级过滤**：支持复杂的基于标签的过滤
+- **来源特定规则**：支持 `source-name@tag` 格式
+- **自动前缀**：标签自动包含来源前缀
+
+#### 3. 模板引擎
+
+- **规则解析**：解析插值规则字符串
+- **节点过滤**：根据规则过滤和选择节点
+- **标签处理**：自动添加来源前缀
+- **模板渲染**：将节点信息插入到模板中
+
+#### 4. 节点选择
+
+- **标签匹配**：按标签过滤节点
+- **协议匹配**：按协议类型过滤节点
+- **模式匹配**：按名称模式过滤节点
+- **数量限制**：限制选择的节点数量
+
+#### 5. 转换规则
+
+- **重命名**：修改节点名称
+- **标签操作**：添加/移除标签
+- **参数修改**：修改节点参数
+
+### 添加新的协议支持
+
+1. 在 `src/protocols/` 下创建新的协议模块
+2. 实现 `ProtocolProcessor` trait（模板处理）
+3. 在 `src/protocols/mod.rs` 的 `ProtocolRegistry::init()` 中注册：
+   `registry.register("format_name", Box::new(YourProcessor));`
+4. 若需支持该格式的解析，在 Registry 中补充对应 `parse_content` 等逻辑（如 subscription/plain 使用 `subscription` 模块）
+
+### 示例：添加新协议
+
+```rust
+// src/protocols/new_protocol/mod.rs
+use crate::core::error::Result;
+use crate::protocols::{ProtocolProcessor, ProxyServer};
+use crate::utils::template::interpolation_parser::InterpolationRule;
+use indexmap::IndexMap;
+use crate::utils::source::parser::Source;
+
+pub struct NewProtocolProcessor;
+
+impl ProtocolProcessor for NewProtocolProcessor {
+    fn process_rule(&self, _rule: &InterpolationRule, _sources: &IndexMap<String, Source>) -> Result<String> {
+        Ok(String::new())
+    }
+    fn get_nodes_for_rule(&self, rule: &InterpolationRule, sources: &IndexMap<String, Source>) -> Result<Vec<ProxyServer>> {
+        // ...
+    }
+    fn set_default_values(&self, template: &str, nodes: &[ProxyServer]) -> Result<String> {
+        // ...
+    }
+    fn append_nodes(&self, template: &str, nodes: &[ProxyServer]) -> Result<String> {
+        // ...
+    }
+    fn create_node_config(&self, node: &ProxyServer) -> String {
+        // ...
+    }
+}
+```
+
+然后在 `ProtocolRegistry::init()` 中注册：
+
+```rust
+registry.register("new_protocol", Box::new(new_protocol::NewProtocolProcessor));
+```
+
+### 构建与测试
+
+```bash
+# 构建项目
+cargo build
+cargo build --release
+
+# 运行测试（含单元测试与 tests/ 下集成测试）
+cargo test
+
+# 代码质量
+cargo clippy
+cargo fmt
+```
+
+### 开发环境设置
+
+```bash
+# 安装 Rust 工具链
+curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh
+
+# 安装开发工具
+rustup component add rustfmt
+rustup component add clippy
+
+# 安装有用的开发工具
+cargo install cargo-watch      # 文件变化时自动重新构建
+cargo install cargo-expand     # 宏展开工具
+cargo install cargo-tree       # 依赖树可视化
+```
+
+### 调试和日志
+
+```bash
+# 设置日志级别
+export RUST_LOG=debug
+
+# 运行程序并显示详细日志
+cargo run -- --log-level debug
+
+# 使用 cargo-watch 进行开发
+cargo watch -x check -x test -x run
+```
+
+## 📄 许可证
+
+本项目采用 MIT 许可证，详见 [LICENSE](LICENSE) 文件。
+
+## 🤝 贡献指南
+
+我们欢迎所有形式的贡献！如果您想为项目做出贡献，请：
+
+### 贡献方式
+
+1. **报告问题**：在 GitHub Issues 中报告 bug 或提出功能建议
+2. **提交代码**：Fork 项目并提交 Pull Request
+3. **改进文档**：帮助完善文档和示例
+4. **分享经验**：在 Discussions 中分享使用经验和最佳实践
+
+### 开发流程
+
+1. Fork 项目到您的 GitHub 账户
+2. 创建功能分支：`git checkout -b feature/your-feature`
+3. 提交更改：`git commit -am 'Add some feature'`
+4. 推送分支：`git push origin feature/your-feature`
+5. 创建 Pull Request
+
+### 代码规范
+
+- 遵循 Rust 官方编码规范
+- 使用 `cargo fmt` 格式化代码
+- 通过 `cargo clippy` 检查代码质量
+- 为新功能添加测试用例
+- 更新相关文档
+
+## 🙏 致谢
+
+- [clap](https://github.com/clap-rs/clap) - 命令行参数解析库
+- [tokio](https://github.com/tokio-rs/tokio) - 异步运行时
+- [serde](https://github.com/serde-rs/serde) - 序列化框架
+- [tracing](https://github.com/tokio-rs/tracing) - 结构化日志
+
+## ❓ 常见问题解答
+
+### Q: 如何处理多个来源中相同标签的节点？
+
+A: 当多个来源包含相同标签的节点时，程序会自动为节点名称添加来源前缀。例如：
+
+- `clash1` 来源的 `US` 节点会变成 `clash1@US`
+- `singbox1` 来源的 `US` 节点会变成 `singbox1@US`
+
+### Q: 插值规则中的标签匹配是精确匹配还是模糊匹配？
+
+A: 目前支持精确匹配。标签必须完全匹配才能被选中或排除。
+
+### Q: 如何添加自定义的插值规则？
+
+A: 可以在 `src/utils/template.rs` 中的 `InterpolationRule` 枚举中添加新的规则类型，并在 `TemplateEngine` 中实现相应的处理逻辑。
+
+### Q: 配置文件中的 source 配置和命令行参数有什么区别？
+
+A: 配置文件中的 source 配置是预定义的来源列表，可以通过命令行参数覆盖。命令行参数的优先级更高。
+
+### Q: 如何处理网络请求失败的情况？
+
+A: 程序支持重试机制，可以通过配置文件设置 `retry_count` 和 `timeout_seconds` 来控制重试行为。
+
+### Q: 如何扩展支持新的代理协议？
+
+A: 参考文档中的「添加新的协议支持」部分，实现 `ProtocolProcessor` trait 并在 `ProtocolRegistry::init()` 中注册。
+
+### Q: 模板文件中的插值规则必须用引号包围吗？
+
+A: 是的，为了确保 JSON 格式的正确性，所有插值规则都必须用双引号包围。
+
+---
+
+**注意**：本项目仅用于学习和研究目的，请遵守当地法律法规。
\ No newline at end of file
diff --git a/src/clash/mod.rs b/src/clash/mod.rs
deleted file mode 100644
index fd76f3c..0000000
--- a/src/clash/mod.rs
+++ /dev/null
@@ -1,39 +0,0 @@
-pub mod dns;
-pub mod proxy;
-pub mod proxy_group;
-
-use serde::{Deserialize, Serialize};
-
-#[derive(Serialize, Deserialize, Debug)]
-#[serde(rename_all = "kebab-case")]
-pub struct Config {
-    pub mixed_port: Option<u16>,
-    pub allow_lan: Option<bool>,
-    pub bind_address: Option<String>,
-    pub mode: Option<Mode>,
-    pub log_level: Option<LogLevel>,
-    pub external_controller: Option<String>,
-    pub dns: Option<dns::DNS>,
-    pub proxies: Vec<proxy::Proxy>,
-    pub proxy_groups: Vec<proxy_group::ProxyGroup>,
-    pub rules: Vec<String>,
-}
-
-#[derive(Serialize, Deserialize, Debug)]
-#[serde(rename_all = "lowercase")]
-pub enum Mode {
-    Global,
-    Rule,
-    Direct,
-}
-
-#[derive(Serialize, Deserialize, Debug)]
-#[serde(rename_all = "lowercase")]
-pub enum LogLevel {
-    Trace,
-    Debug,
-    Info,
-    Warn,
-    Error,
-    Fatal,
-}
diff --git a/src/clash/proxy/mod.rs b/src/clash/proxy/mod.rs
deleted file mode 100644
index 9498f06..0000000
--- a/src/clash/proxy/mod.rs
+++ /dev/null
@@ -1,21 +0,0 @@
-mod http;
-mod shadowsocks;
-mod shadowsocks_r;
-mod snell;
-mod socks5;
-mod trojan;
-mod vmess;
-
-use serde::{Deserialize, Serialize};
-
-#[derive(Serialize, Deserialize, Debug)]
-#[serde(tag = "type", rename_all = "lowercase")]
-pub enum Proxy {
-    Ss(shadowsocks::Shadowsocks),
-    Ssr(shadowsocks_r::ShadowsocksR),
-    Vmess(vmess::Vmess),
-    Socks5(socks5::Socks5),
-    Http(http::Http),
-    Snell(snell::Snell),
-    Trojan(trojan::Trojan),
-}
diff --git a/src/cli.rs b/src/cli.rs
deleted file mode 100644
index 71c9e7c..0000000
--- a/src/cli.rs
+++ /dev/null
@@ -1,21 +0,0 @@
-use clap::Parser;
-use std::path;
-use url::Url;
-
-#[derive(Parser, Debug)]
-#[command(name = "SubscriptionConvert")]
-#[command(author = "Glimmer")]
-#[command(version = "0.1.0")]
-#[command(about = "Convert clash subscription to singbox config", long_about = None)]
-pub struct Args {
-    /// The url you will subscribe
-    pub url: Url,
-
-    /// The singbox config template path, if not set, will use default template
-    #[arg(short, long)]
-    pub template: Option<path::PathBuf>,
-
-    /// The path singbox will output
-    #[arg(short, long, default_value = "config.json")]
-    pub output: Option<path::PathBuf>,
-}
diff --git a/src/commands/cli.rs b/src/commands/cli.rs
new file mode 100644
index 0000000..d809f56
--- /dev/null
+++ b/src/commands/cli.rs
@@ -0,0 +1,118 @@
+use clap::{Parser, Subcommand, ValueEnum};
+use std::path::PathBuf;
+
+#[derive(Parser, Debug)]
+#[command(
+    name = "proxy-convert",
+    author = "Messica <messica@example.com>",
+    version = "2.0.0",
+    about = "A modern tool for converting proxy configuration",
+    long_about = "A powerful tool for converting proxy configuration. Supports multiple protocol conversions, template customization, rule filtering and other features."
+)]
+pub struct Cli {
+    /// Configuration file path. If not specified, will search in default locations:
+    /// 1. ./config.yaml or ./config.yml (current directory)
+    /// 2. ~/.config/proxy-convert/config.yaml (Linux/macOS) or %APPDATA%/proxy-convert/config.yaml (Windows)
+    #[arg(short, long, global = true, value_name = "PATH")]
+    pub config: Option<PathBuf>,
+
+    #[command(subcommand)]
+    pub command: Commands,
+}
+
+#[derive(Subcommand, Debug)]
+pub enum Commands {
+    /// Convert subscription configuration
+    Convert {
+        /// Input sources: <path|url>?type=clash&name=...&flag=... (type required in query)
+        #[arg(long = "source", value_name = "SOURCE")]
+        sources: Vec<String>,
+
+        /// Template file path
+        #[arg(short, long, value_name = "PATH")]
+        template: Option<PathBuf>,
+
+        /// Output file path
+        #[arg(short, long, value_name = "PATH")]
+        output: Option<PathBuf>,
+
+        /// Target output protocol (sing-box, clash, v2ray).
+        /// The output format is determined by the protocol:
+        /// - sing-box: JSON only
+        /// - clash: YAML only
+        /// - v2ray: JSON only
+        #[arg(long = "output-protocol", value_name = "PROTOCOL")]
+        output_protocol: Option<String>,
+
+        /// Log level
+        #[arg(short, long, value_enum, default_value_t = LogLevel::Info)]
+        log_level: LogLevel,
+
+        /// Whether to show detailed information
+        #[arg(short, long)]
+        verbose: bool,
+
+        /// HTTP request timeout in seconds
+        #[arg(long, value_name = "SECONDS")]
+        timeout: Option<u64>,
+    },
+
+    /// Validate configuration file
+    Validate {
+        /// Configuration file path to validate
+        #[arg(value_name = "PATH")]
+        file: PathBuf,
+
+        /// Target protocol (sing-box, clash, v2ray). Default: sing-box
+        #[arg(short, long, value_name = "PROTOCOL", default_value = "singbox")]
+        protocol: String,
+    },
+
+    /// Generate default template
+    Template {
+        /// Output path
+        #[arg(short, long, value_name = "PATH")]
+        output: Option<PathBuf>,
+
+        /// Target protocol (sing-box, clash, v2ray). Default: sing-box
+        #[arg(short, long, value_name = "PROTOCOL", default_value = "singbox")]
+        protocol: String,
+    },
+
+    /// Display version information
+    Version,
+}
+
+#[derive(ValueEnum, Clone, Debug)]
+pub enum OutputFormat {
+    /// JSON format
+    Json,
+    /// YAML format
+    Yaml,
+}
+
+#[derive(ValueEnum, Clone, Copy, Debug)]
+pub enum LogLevel {
+    /// Error information
+    Error,
+    /// Warning information
+    Warn,
+    /// General information
+    Info,
+    /// Debug information
+    Debug,
+    /// Trace information
+    Trace,
+}
+
+impl From<LogLevel> for tracing::Level {
+    fn from(level: LogLevel) -> Self {
+        match level {
+            LogLevel::Error => tracing::Level::ERROR,
+            LogLevel::Warn => tracing::Level::WARN,
+            LogLevel::Info => tracing::Level::INFO,
+            LogLevel::Debug => tracing::Level::DEBUG,
+            LogLevel::Trace => tracing::Level::TRACE,
+        }
+    }
+}
diff --git a/src/commands/convert.rs b/src/commands/convert.rs
new file mode 100644
index 0000000..283a194
--- /dev/null
+++ b/src/commands/convert.rs
@@ -0,0 +1,394 @@
+//! Convert command processing module
+
+use crate::commands::cli;
+use crate::core::error::{ConvertError, Result};
+use crate::core::source::{SourceMeta, SourceProtocol};
+use crate::protocols;
+use crate::protocols::ProtocolRegistry;
+use crate::protocols::singbox;
+use crate::utils::{source, template::template_engine};
+
+/// Output protocol type
+#[derive(Debug, Clone)]
+pub enum OutputProtocol {
+    SingBox,
+    Clash,
+    V2Ray,
+}
+
+impl OutputProtocol {
+    pub fn from_str(s: &str) -> Option<Self> {
+        match s.to_lowercase().as_str() {
+            "sing-box" | "singbox" => Some(OutputProtocol::SingBox),
+            "clash" => Some(OutputProtocol::Clash),
+            "v2ray" => Some(OutputProtocol::V2Ray),
+            _ => None,
+        }
+    }
+
+    /// Get the default output format for this protocol
+    pub fn default_format(&self) -> cli::OutputFormat {
+        match self {
+            OutputProtocol::SingBox => cli::OutputFormat::Json,
+            OutputProtocol::Clash => cli::OutputFormat::Yaml,
+            OutputProtocol::V2Ray => cli::OutputFormat::Json,
+        }
+    }
+
+    /// Get the default filename for this protocol
+    pub fn default_filename(&self) -> &'static str {
+        match self {
+            OutputProtocol::SingBox => "config.json",
+            OutputProtocol::Clash => "config.yaml",
+            OutputProtocol::V2Ray => "config.json",
+        }
+    }
+}
+
+/// Convert command handler
+pub struct ConvertCommand;
+
+impl ConvertCommand {
+    /// Execute conversion operation
+    pub async fn start_convert(
+        sources: &[SourceMeta],
+        _input_format: Option<&str>,
+        output_protocol: &OutputProtocol,
+        output: Option<&str>,
+        template: Option<&str>,
+        registry: &ProtocolRegistry,
+        config: &crate::core::config::AppConfig,
+    ) -> Result<()> {
+        tracing::info!("Convert executing...");
+
+        if sources.is_empty() {
+            return Err(ConvertError::ConfigValidationError(
+                "must specify at least one input source".to_string(),
+            ));
+        }
+
+        // create template engine
+        let mut template_engine = template_engine::TemplateEngine::new();
+
+        // process each source
+        for source_meta in sources.iter() {
+            let source = source::SourceLoader::load_source(source_meta, registry, config).await?;
+            template_engine.add_source(source);
+        }
+
+        // process template
+        let result = if let Some(template_path) = template {
+            // Check if template file exists
+            if !std::path::Path::new(template_path).exists() {
+                return Err(ConvertError::file_not_found(template_path));
+            }
+            let template_content =
+                std::fs::read_to_string(template_path).map_err(|e| ConvertError::IoError(e))?;
+            template_engine.process_template(&template_content, registry)?
+        } else {
+            Self::generate_default_config(&template_engine, output_protocol, registry)?
+        };
+
+        // Get output format and filename based on protocol
+        let output_format = output_protocol.default_format();
+        let formatted_result = Self::format_output(&result, &output_format)?;
+        // output result
+        let output_path = Self::resolve_output_path(output, output_protocol)?;
+        // Ensure parent directory exists
+        if let Some(parent) = std::path::Path::new(&output_path).parent() {
+            if !parent.exists() {
+                std::fs::create_dir_all(parent).map_err(|e| ConvertError::IoError(e))?;
+            }
+        }
+        std::fs::write(&output_path, formatted_result).map_err(|e| ConvertError::IoError(e))?;
+
+        tracing::info!("config generated to: {}", output_path);
+
+        Ok(())
+    }
+
+    /// Resolve output path, handling directory case
+    fn resolve_output_path(
+        output: Option<&str>,
+        output_protocol: &OutputProtocol,
+    ) -> Result<String> {
+        use std::path::Path;
+
+        let default_filename = output_protocol.default_filename();
+
+        let output_path = output.unwrap_or(default_filename);
+        let path = Path::new(output_path);
+
+        // Check if path exists and is a directory
+        if path.exists() && path.is_dir() {
+            // If it's a directory, append default filename
+            let file_path = path.join(default_filename);
+            Ok(file_path.to_string_lossy().to_string())
+        } else if path.exists() && path.is_file() {
+            // If it's an existing file, use it directly
+            Ok(output_path.to_string())
+        } else {
+            // If path doesn't exist, check if parent is a directory
+            if let Some(parent) = path.parent() {
+                if parent.exists() && !parent.is_dir() {
+                    return Err(ConvertError::ConfigValidationError(format!(
+                        "Output path parent is not a directory: {}",
+                        parent.display()
+                    )));
+                }
+            }
+            // Path doesn't exist, assume it's a file path
+            Ok(output_path.to_string())
+        }
+    }
+
+    /// Parse source string: only URL form <path|url>?type=...&name=...&flag=... (type required in query).
+    pub fn parse_source_string(raw: &str) -> Result<SourceMeta> {
+        let raw = raw.trim();
+        let pos = raw.find('?').ok_or_else(|| {
+            ConvertError::ConfigValidationError(format!(
+                "Source must be URL form with query params. Example: <path|url>?type=clash&name=...&flag=..., got: {}",
+                raw
+            ))
+        })?;
+        let (_base, query_str) = raw.split_at(pos);
+        let query_str = query_str.trim_start_matches('?');
+        let mut name: Option<String> = None;
+        let mut type_param: Option<String> = None;
+        let mut flag: Option<String> = None;
+        for (k, v) in url::form_urlencoded::parse(query_str.as_bytes()) {
+            match k.as_ref() {
+                "name" => name = Some(v.into_owned()),
+                "type" => type_param = Some(v.into_owned()),
+                "flag" => flag = Some(v.into_owned()),
+                _ => {}
+            }
+        }
+        let source_type_str = type_param.ok_or_else(|| {
+            ConvertError::ConfigValidationError(
+                "Query must include type param. Example: url?type=clash&name=my&flag=clash".to_string(),
+            )
+        })?;
+        let source_type = SourceProtocol::from_str(&source_type_str).ok_or_else(|| {
+            ConvertError::ConfigValidationError(format!(
+                "Unsupported type: {}, supported: clash, sing-box(singbox), v2ray",
+                source_type_str
+            ))
+        })?;
+        // Keep full string (path|url + all query params); type/name/flag are parsed out but remain in source
+        Ok(SourceMeta {
+            name: name.filter(|s| !s.is_empty()),
+            source_type,
+            source: raw.to_string(),
+            format: None,
+            flag,
+        })
+    }
+
+    /// generate default config template based on output protocol
+    fn generate_default_config(
+        template_engine: &template_engine::TemplateEngine,
+        output_protocol: &OutputProtocol,
+        registry: &ProtocolRegistry,
+    ) -> Result<String> {
+        // Get default template from the protocol module based on output protocol
+        let template_str = match output_protocol {
+            OutputProtocol::SingBox => singbox::generate_default_template(),
+            OutputProtocol::Clash => protocols::clash::generate_default_template(),
+            OutputProtocol::V2Ray => protocols::v2ray::generate_default_template(),
+        };
+
+        // Process template to replace interpolation rules like {{ALL-TAG}}
+        template_engine.process_template(&template_str, registry)
+    }
+
+    /// Format output based on the specified format
+    fn format_output(content: &str, format: &cli::OutputFormat) -> Result<String> {
+        match format {
+            cli::OutputFormat::Json => {
+                // Parse and re-serialize as pretty JSON (formatted)
+                let parsed: serde_json::Value =
+                    serde_json::from_str(content).map_err(|e| ConvertError::JsonParseError(e))?;
+                Ok(serde_json::to_string_pretty(&parsed)
+                    .map_err(|e| ConvertError::JsonParseError(e))?)
+            }
+            cli::OutputFormat::Yaml => {
+                // Parse JSON and convert to YAML
+                let parsed: serde_json::Value =
+                    serde_json::from_str(content).map_err(|e| ConvertError::JsonParseError(e))?;
+                Ok(serde_yaml::to_string(&parsed)
+                    .map_err(|e| ConvertError::ConfigValidationError(e.to_string()))?)
+            }
+        }
+    }
+}
+
+/// Handle convert command
+pub async fn handle_convert(
+    convert_cmd: &cli::Commands,
+    config: &crate::core::config::AppConfig,
+    registry: &protocols::ProtocolRegistry,
+) -> Result<()> {
+    // Extract Convert command args
+    let (sources, output, template, output_protocol_str) = match convert_cmd {
+        cli::Commands::Convert {
+            sources,
+            output,
+            template,
+            output_protocol,
+            ..
+        } => (sources, output, template, output_protocol),
+        _ => {
+            return Err(ConvertError::ConfigValidationError(
+                "Expected Convert command".to_string(),
+            ))
+        }
+    };
+
+    // Parse each source (CLI + config): <path|url>?type=...&name=...&flag=...
+    let mut final_sources: Vec<SourceMeta> = sources
+        .iter()
+        .map(|raw| ConvertCommand::parse_source_string(raw))
+        .collect::<Result<Vec<_>>>()?;
+    if let Some(config_sources) = &config.sources {
+        for raw in config_sources {
+            final_sources.push(ConvertCommand::parse_source_string(raw)?);
+        }
+    }
+
+    // Output protocol: CLI > config > default (sing-box)
+    let output_protocol_str = output_protocol_str
+        .as_ref()
+        .map(|s| s.as_str())
+        .unwrap_or_else(|| config.output_protocol.as_str());
+
+    let output_protocol = OutputProtocol::from_str(output_protocol_str).ok_or_else(|| {
+        ConvertError::ConfigValidationError(format!(
+            "Unsupported output protocol: {}, supported protocols: sing-box(singbox), clash, v2ray",
+            output_protocol_str
+        ))
+    })?;
+
+    // Merge output: CLI > config > default
+    let final_output: Option<String> = output
+        .as_ref()
+        .and_then(|p| p.to_str())
+        .map(|s| s.to_string())
+        .or_else(|| config.output.clone());
+
+    // Merge template: CLI > config > None (in-memory default)
+    let final_template: Option<String> = template
+        .as_ref()
+        .and_then(|p| p.to_str())
+        .map(|s| s.to_string())
+        .or_else(|| config.template.clone());
+
+    tracing::info!("Starting conversion");
+    for (i, m) in final_sources.iter().enumerate() {
+        let type_str = m.source_type.as_format_str();
+        let name_str = m.name.as_deref().unwrap_or("(none)");
+        let flag_str = m.flag.as_deref().unwrap_or("(default)");
+        tracing::info!(
+            "Input source [{}]: {}  type={} name={} flag={}",
+            i + 1,
+            m.source,
+            type_str,
+            name_str,
+            flag_str
+        );
+    }
+    tracing::info!(
+        "Template: {}",
+        final_template.as_deref().unwrap_or("(default)")
+    );
+    tracing::info!(
+        "Output: {}",
+        final_output.as_deref().unwrap_or("(default)")
+    );
+    tracing::info!("Output protocol: {}", output_protocol_str);
+    tracing::info!(
+        "Output format: {}",
+        match output_protocol.default_format() {
+            cli::OutputFormat::Json => "JSON",
+            cli::OutputFormat::Yaml => "YAML",
+        }
+    );
+    tracing::info!("Using timeout: {} seconds", config.timeout_seconds);
+
+    // Run conversion
+    ConvertCommand::start_convert(
+        &final_sources,
+        None, // input_format
+        &output_protocol,
+        final_output.as_deref(),
+        final_template.as_deref(),
+        registry,
+        config,
+    )
+    .await?;
+
+    tracing::info!("Conversion completed");
+    Ok(())
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    #[test]
+    fn test_parse_source_string_url_format() {
+        // Path + type only; source keeps full string (all params)
+        let m = ConvertCommand::parse_source_string("./config.yaml?type=clash").unwrap();
+        assert_eq!(m.name, None);
+        assert!(matches!(m.source_type, SourceProtocol::Clash));
+        assert_eq!(m.source, "./config.yaml?type=clash");
+        assert_eq!(m.flag, None);
+
+        // URL + type, name, flag
+        let m = ConvertCommand::parse_source_string(
+            "https://example.com/sub?type=singbox&name=my&flag=sing-box",
+        )
+        .unwrap();
+        assert_eq!(m.name.as_deref(), Some("my"));
+        assert!(matches!(m.source_type, SourceProtocol::SingBox));
+        assert_eq!(
+            m.source,
+            "https://example.com/sub?type=singbox&name=my&flag=sing-box"
+        );
+        assert_eq!(m.flag.as_deref(), Some("sing-box"));
+
+        // File path with space (Eternal Network style); source keeps full string
+        let m = ConvertCommand::parse_source_string("examples/sources/Eternal Network?type=singbox")
+            .unwrap();
+        assert_eq!(m.name, None);
+        assert!(matches!(m.source_type, SourceProtocol::SingBox));
+        assert_eq!(m.source, "examples/sources/Eternal Network?type=singbox");
+
+        // Empty name filtered out; source keeps full string including other params
+        let m = ConvertCommand::parse_source_string("./x?type=clash&name=").unwrap();
+        assert_eq!(m.name, None);
+        assert_eq!(m.source, "./x?type=clash&name=");
+    }
+
+    #[test]
+    fn test_parse_source_string_requires_type() {
+        let err = ConvertCommand::parse_source_string("./x?name=foo")
+            .unwrap_err();
+        let msg = format!("{}", err);
+        assert!(msg.contains("type") || msg.contains("Query must include"));
+    }
+
+    #[test]
+    fn test_parse_source_string_rejects_no_query() {
+        let err = ConvertCommand::parse_source_string("clash@./clash.yaml").unwrap_err();
+        let msg = format!("{}", err);
+        assert!(msg.contains("query") || msg.contains("URL form"));
+    }
+
+    #[test]
+    fn test_parse_source_string_unsupported_type() {
+        let err = ConvertCommand::parse_source_string("./x?type=unknown").unwrap_err();
+        let msg = format!("{}", err);
+        assert!(msg.contains("Unsupported") || msg.contains("unknown"));
+    }
+}
diff --git a/src/commands/mod.rs b/src/commands/mod.rs
new file mode 100644
index 0000000..6c3e3b7
--- /dev/null
+++ b/src/commands/mod.rs
@@ -0,0 +1,7 @@
+//! Command Module - Handle CLI commands
+
+pub mod cli;
+pub mod convert;
+pub mod template;
+pub mod validate;
+pub mod version;
diff --git a/src/commands/template.rs b/src/commands/template.rs
new file mode 100644
index 0000000..c975fdf
--- /dev/null
+++ b/src/commands/template.rs
@@ -0,0 +1,67 @@
+//! Template command module
+
+use crate::protocols::{clash, singbox, v2ray};
+use crate::core::error::{ConvertError, Result};
+use tracing::info;
+
+/// Handle template generation command
+pub async fn handle_template(
+    template_cmd: &crate::commands::cli::Commands,
+    _config: &crate::core::config::AppConfig,
+    _registry: &crate::protocols::ProtocolRegistry,
+) -> Result<()> {
+    // Extract Template command args
+    let (output, protocol) = match template_cmd {
+        crate::commands::cli::Commands::Template { output, protocol } => (output, protocol),
+        _ => {
+            return Err(ConvertError::ConfigValidationError(
+                "Expected Template command".to_string(),
+            ))
+        }
+    };
+
+    // Resolve protocol and template content
+    let protocol_lower = protocol.to_lowercase();
+    let (protocol_name, default_ext, template_content) = match protocol_lower.as_str() {
+        "singbox" | "sing-box" => (
+            singbox::PROTOCOL_NAME,
+            singbox::CONFIG_EXT,
+            singbox::generate_default_template(),
+        ),
+        "clash" => (
+            clash::PROTOCOL_NAME,
+            clash::CONFIG_EXT,
+            clash::generate_default_template(),
+        ),
+        "v2ray" => (
+            v2ray::PROTOCOL_NAME,
+            v2ray::CONFIG_EXT,
+            v2ray::generate_default_template(),
+        ),
+        _ => {
+            return Err(ConvertError::ConfigValidationError(format!(
+                "Unsupported protocol: {}. Supported: singbox, clash, v2ray",
+                protocol
+            )))
+        }
+    };
+
+    info!(
+        "Starting template generation for protocol: {}",
+        protocol_name
+    );
+
+    // Output path
+    let output_path = if let Some(path) = output {
+        path.to_string_lossy().to_string()
+    } else {
+        format!("template.{}", default_ext)
+    };
+
+    // Write template
+    std::fs::write(&output_path, &template_content).map_err(|e| ConvertError::IoError(e))?;
+
+    info!("Template generated: {}", output_path);
+    info!("Protocol: {}", protocol_name);
+    Ok(())
+}
diff --git a/src/commands/validate.rs b/src/commands/validate.rs
new file mode 100644
index 0000000..cc2c24d
--- /dev/null
+++ b/src/commands/validate.rs
@@ -0,0 +1,111 @@
+//! Validate command module
+
+use crate::core::config::AppConfig;
+use crate::protocols::{clash, singbox, v2ray, ProtocolRegistry};
+use crate::core::error::{ConvertError, Result};
+use tracing::info;
+
+/// Handle validate command
+pub async fn handle_validate(
+    validate_cmd: &crate::commands::cli::Commands,
+    _config: &AppConfig,
+    _registry: &ProtocolRegistry,
+) -> Result<()> {
+    // Extract Validate command args
+    let (file, protocol) = match validate_cmd {
+        crate::commands::cli::Commands::Validate { file, protocol } => (file, protocol),
+        _ => {
+            return Err(ConvertError::ConfigValidationError(
+                "Expected Validate command".to_string(),
+            ))
+        }
+    };
+
+    // Resolve protocol
+    let protocol_lower = protocol.to_lowercase();
+    let protocol_name = match protocol_lower.as_str() {
+        "singbox" | "sing-box" => singbox::PROTOCOL_NAME,
+        "clash" => clash::PROTOCOL_NAME,
+        "v2ray" => v2ray::PROTOCOL_NAME,
+        _ => {
+            return Err(ConvertError::ConfigValidationError(format!(
+                "Unsupported protocol: {}. Supported: singbox, clash, v2ray",
+                protocol
+            )))
+        }
+    };
+
+    let file_path = file.to_string_lossy();
+    info!("Validating configuration file: {}", file_path);
+    info!("Protocol: {}", protocol_name);
+
+    // Check file exists
+    if !file.exists() {
+        return Err(ConvertError::file_not_found(&file_path));
+    }
+
+    // Read config file
+    let content = std::fs::read_to_string(&*file_path).map_err(|e| ConvertError::IoError(e))?;
+
+    // Validate by protocol
+    match protocol_name {
+        singbox::PROTOCOL_NAME => validate_singbox_config(&content)?,
+        clash::PROTOCOL_NAME => validate_clash_config(&content)?,
+        v2ray::PROTOCOL_NAME => validate_v2ray_config(&content)?,
+        _ => unreachable!(),
+    }
+
+    info!("Validation passed: {} (protocol: {})", file_path, protocol_name);
+    Ok(())
+}
+
+/// Validate Sing-box configuration
+fn validate_singbox_config(content: &str) -> Result<()> {
+    // Try to parse as JSON
+    let config: serde_json::Value =
+        serde_json::from_str(content).map_err(|e| ConvertError::JsonParseError(e))?;
+
+    // Check required fields for Sing-box
+    if config.get("outbounds").is_none() {
+        return Err(ConvertError::ConfigValidationError(
+            "Missing required field 'outbounds' for Sing-box config".to_string(),
+        ));
+    }
+
+    info!("Sing-box config structure is valid");
+    Ok(())
+}
+
+/// Validate Clash configuration
+fn validate_clash_config(content: &str) -> Result<()> {
+    // Try to parse as YAML or JSON
+    let config: serde_json::Value = serde_yaml::from_str(content)
+        .map_err(|e| ConvertError::ConfigValidationError(format!("YAML parse error: {}", e)))?;
+
+    // Check required fields for Clash
+    if config.get("proxies").is_none() && config.get("proxy-providers").is_none() {
+        return Err(ConvertError::ConfigValidationError(
+            "Missing required field 'proxies' or 'proxy-providers' for Clash config".to_string(),
+        ));
+    }
+
+    info!("Clash config structure is valid");
+    Ok(())
+}
+
+/// Validate V2Ray configuration
+fn validate_v2ray_config(content: &str) -> Result<()> {
+    // Try to parse as JSON
+    let config: serde_json::Value =
+        serde_json::from_str(content).map_err(|e| ConvertError::JsonParseError(e))?;
+
+    // Check required fields for V2Ray
+    if config.get("outbounds").is_none() {
+        return Err(ConvertError::ConfigValidationError(
+            "Missing required field 'outbounds' for V2Ray config".to_string(),
+        ));
+    }
+
+    info!("V2Ray config structure is valid");
+    Ok(())
+}
diff --git a/src/commands/version.rs b/src/commands/version.rs
new file mode 100644
index 0000000..82e7293
--- /dev/null
+++ b/src/commands/version.rs
@@ -0,0 +1,27 @@
+//! Version command module
+
+/// Display version information
+pub fn handle_version() {
+    println!("proxy-convert v{}", env!("CARGO_PKG_VERSION"));
+    println!("A modern, extensible proxy configuration conversion tool");
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    #[test]
+    fn test_handle_version() {
+        // Ensure handle_version does not panic
+        handle_version();
+        assert!(true);
+    }
+
+    #[test]
+    fn test_version_output_format() {
+        // Version string format
+        let version = env!("CARGO_PKG_VERSION");
+        assert!(!version.is_empty());
+        assert!(version.chars().any(|c| c.is_ascii_digit()));
+    }
+}
diff --git a/src/core/config.rs b/src/core/config.rs
new file mode 100644
index 0000000..2877e5a
--- /dev/null
+++ b/src/core/config.rs
@@ -0,0 +1,331 @@
+//! Config management - load and merge application configuration.
+
+use crate::core::error::{ConvertError, Result};
+use serde::{Deserialize, Serialize};
+use std::path::PathBuf;
+
+#[derive(Debug, Clone, Serialize, Deserialize)]
+pub struct AppConfig {
+    // ========== HTTP ==========
+    /// HTTP User-Agent
+    #[serde(default = "default_user_agent")]
+    pub user_agent: String,
+
+    /// HTTP timeout in seconds
+    #[serde(default = "default_timeout")]
+    pub timeout_seconds: u64,
+
+    /// Retry count on failure
+    #[serde(default = "default_retry_count")]
+    pub retry_count: u32,
+
+    // ========== Logging ==========
+    /// Log level: error, warn, info, debug, trace
+    #[serde(default = "default_log_level")]
+    pub log_level: String,
+
+    /// Verbose output
+    #[serde(default)]
+    pub verbose: bool,
+
+    // ========== Output ==========
+    /// Output protocol: singbox, clash, v2ray
+    #[serde(default = "default_output_protocol")]
+    pub output_protocol: String,
+
+    /// Output file path
+    #[serde(default)]
+    pub output: Option<String>,
+
+    // ========== Template ==========
+    /// Template file path
+    #[serde(default)]
+    pub template: Option<String>,
+
+    // ========== Sources ==========
+    /// Source list; each item is URL form: <path|url>?type=clash&name=...&flag=... (same as --source)
+    #[serde(default)]
+    pub sources: Option<Vec<String>>,
+}
+
+fn default_user_agent() -> String {
+    "Mozilla/5.0 (compatible; ProxyConvert/2.0)".to_string()
+}
+
+fn default_timeout() -> u64 {
+    30
+}
+
+fn default_retry_count() -> u32 {
+    3
+}
+
+fn default_log_level() -> String {
+    "info".to_string()
+}
+
+fn default_output_protocol() -> String {
+    "singbox".to_string()
+}
+
+impl Default for AppConfig {
+    fn default() -> Self {
+        Self {
+            user_agent: default_user_agent(),
+            timeout_seconds: default_timeout(),
+            retry_count: default_retry_count(),
+            log_level: default_log_level(),
+            verbose: false,
+            output_protocol: default_output_protocol(),
+            output: None,
+            template: None,
+            sources: None,
+        }
+    }
+}
+
+impl AppConfig {
+    /// Load config: optional file from default paths (first existing) + env vars.
+    /// Env vars (PROXY_CONVERT_*) override file. Used when no explicit config path is given.
+    fn load_default_locations() -> Result<Self> {
+        let paths = Self::get_config_paths();
+        let mut builder = config::Config::builder();
+
+        for path in &paths {
+            if path.exists() {
+                builder = builder.add_source(config::File::from(path.as_path()).required(true));
+                tracing::info!("Load config file: {}", path.display());
+                break;
+            }
+        }
+        builder = builder.add_source(
+            config::Environment::with_prefix("PROXY_CONVERT").separator("__"),
+        );
+        let c = builder
+            .build()
+            .map_err(|e| ConvertError::ConfigValidationError(e.to_string()))?;
+        let config: AppConfig = c
+            .try_deserialize()
+            .map_err(|e| ConvertError::ConfigValidationError(e.to_string()))?;
+        if !paths.iter().any(|p| p.exists()) {
+            tracing::info!("No config file found, using defaults and env");
+        }
+        Ok(config)
+    }
+
+    pub fn load() -> Result<Self> {
+        Self::load_default_locations()
+    }
+
+    fn get_config_paths() -> Vec<PathBuf> {
+        let mut paths = Vec::new();
+
+        // Current directory
+        paths.push(PathBuf::from("config.yaml"));
+        paths.push(PathBuf::from("config.yml"));
+
+        // User config directory
+        if let Some(config_dir) = dirs::config_dir() {
+            let app_config_dir = config_dir.join("proxy-convert");
+            paths.push(app_config_dir.join("config.yaml"));
+            paths.push(app_config_dir.join("config.yml"));
+        }
+
+        paths
+    }
+
+    /// Merge CLI parameters into config (CLI parameters take precedence)
+    pub fn merge_cli_params(&mut self, cli: &crate::commands::cli::Commands) -> Result<()> {
+        if let crate::commands::cli::Commands::Convert {
+            timeout,
+            output_protocol,
+            verbose,
+            log_level,
+            template,
+            output,
+            ..
+        } = cli
+        {
+            // Merge timeout
+            if let Some(timeout_val) = timeout {
+                self.timeout_seconds = *timeout_val;
+                tracing::debug!(
+                    "CLI timeout parameter overrides config: {} seconds",
+                    timeout_val
+                );
+            }
+
+            // Merge output protocol
+            if let Some(protocol) = output_protocol {
+                self.output_protocol = protocol.clone();
+                tracing::debug!(
+                    "CLI output protocol parameter overrides config: {}",
+                    protocol
+                );
+            }
+
+            // Merge verbose
+            if *verbose {
+                self.verbose = true;
+                tracing::debug!("CLI verbose parameter overrides config: true");
+            }
+
+            // Merge log level
+            let cli_log_level = format!("{:?}", log_level).to_lowercase();
+            if cli_log_level != "info" {
+                // Override only when CLI specifies non-default
+                self.log_level = cli_log_level.clone();
+                tracing::debug!(
+                    "CLI log_level parameter overrides config: {}",
+                    cli_log_level
+                );
+            }
+
+            // Merge template
+            if let Some(tpl) = template {
+                self.template = Some(tpl.to_string_lossy().to_string());
+                tracing::debug!("CLI template parameter overrides config: {:?}", tpl);
+            }
+
+            // Merge output path (only when CLI specifies)
+            if let Some(out) = output {
+                let output_str = out.to_string_lossy().to_string();
+                self.output = Some(output_str.clone());
+                tracing::debug!("CLI output parameter overrides config: {}", output_str);
+            }
+        }
+        Ok(())
+    }
+
+    /// Load application configuration.
+    /// Priority: explicit path (if given) > default paths (first existing) > env (PROXY_CONVERT_*) > serde defaults.
+    pub fn load_from_path(config_path: Option<&str>) -> Result<Self> {
+        let config = if let Some(path) = config_path {
+            let c = config::Config::builder()
+                .add_source(config::File::from(std::path::Path::new(path)).required(true))
+                .add_source(
+                    config::Environment::with_prefix("PROXY_CONVERT").separator("__"),
+                )
+                .build()
+                .map_err(|e| ConvertError::ConfigValidationError(e.to_string()))?;
+
+            c.try_deserialize().map_err(|e| {
+                ConvertError::ConfigValidationError(e.to_string())
+            })?
+        } else {
+            Self::load_default_locations()?
+        };
+
+        tracing::info!("Configuration loaded successfully");
+        Ok(config)
+    }
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    #[test]
+    fn test_default_config() {
+        let config = AppConfig::default();
+
+        assert_eq!(
+            config.user_agent,
+            "Mozilla/5.0 (compatible; ProxyConvert/2.0)"
+        );
+        assert_eq!(config.timeout_seconds, 30);
+        assert_eq!(config.retry_count, 3);
+        assert_eq!(config.log_level, "info");
+        assert!(!config.verbose);
+        assert_eq!(config.output_protocol, "singbox");
+        assert!(config.output.is_none());
+        assert!(config.template.is_none());
+        assert!(config.sources.is_none());
+    }
+
+    #[test]
+    fn test_source_string_format() {
+        let source = "https://example.com/config.yaml?type=clash&name=test-source";
+        assert!(source.contains('?'));
+        assert!(source.contains("type=clash"));
+    }
+
+    #[test]
+    fn test_config_serialization() {
+        let config = AppConfig::default();
+        let json = serde_json::to_string(&config).unwrap();
+        let deserialized: AppConfig = serde_json::from_str(&json).unwrap();
+
+        assert_eq!(config.user_agent, deserialized.user_agent);
+        assert_eq!(config.timeout_seconds, deserialized.timeout_seconds);
+        assert_eq!(config.retry_count, deserialized.retry_count);
+    }
+
+    #[test]
+    fn test_config_with_sources() {
+        let mut config = AppConfig::default();
+        config.sources = Some(vec![
+            "https://example.com/clash.yaml?type=clash&name=source1".to_string(),
+            "https://example.com/singbox.json?type=singbox&name=source2".to_string(),
+        ]);
+
+        assert!(config.sources.is_some());
+        let sources = config.sources.as_ref().unwrap();
+        assert_eq!(sources.len(), 2);
+        assert!(sources[0].contains("name=source1"));
+        assert!(sources[1].contains("name=source2"));
+    }
+
+    #[test]
+    fn test_config_yaml_serialization() {
+        let config = AppConfig::default();
+        let yaml = serde_yaml::to_string(&config).unwrap();
+        let deserialized: AppConfig = serde_yaml::from_str(&yaml).unwrap();
+
+        assert_eq!(config.user_agent, deserialized.user_agent);
+        assert_eq!(config.timeout_seconds, deserialized.timeout_seconds);
+        assert_eq!(config.retry_count, deserialized.retry_count);
+    }
+
+    #[test]
+    fn test_config_with_custom_values() {
+        let config = AppConfig {
+            user_agent: "Custom Agent".to_string(),
+            timeout_seconds: 60,
+            retry_count: 5,
+            log_level: "debug".to_string(),
+            verbose: true,
+            output_protocol: "singbox".to_string(),
+            output: Some("output.json".to_string()),
+            template: Some("./template.json".to_string()),
+            sources: Some(vec!["https://custom.com/config.json?type=v2ray&name=custom-source".to_string()]),
+        };
+
+        assert_eq!(config.user_agent, "Custom Agent");
+        assert_eq!(config.timeout_seconds, 60);
+        assert_eq!(config.retry_count, 5);
+        assert_eq!(config.log_level, "debug");
+        assert!(config.verbose);
+        assert_eq!(config.output_protocol, "singbox");
+        assert_eq!(config.output, Some("output.json".to_string()));
+        assert_eq!(config.template, Some("./template.json".to_string()));
+        assert!(config.sources.is_some());
+    }
+
+    #[test]
+    fn test_config_clone() {
+        let config1 = AppConfig::default();
+        let config2 = config1.clone();
+
+        assert_eq!(config1.user_agent, config2.user_agent);
+        assert_eq!(config1.timeout_seconds, config2.timeout_seconds);
+        assert_eq!(config1.retry_count, config2.retry_count);
+    }
+
+    #[test]
+    fn test_sources_list_clone() {
+        let sources = Some(vec!["https://example.com?type=clash".to_string()]);
+        let c = sources.clone();
+        assert_eq!(sources.as_ref().unwrap()[0], c.as_ref().unwrap()[0]);
+    }
+}
diff --git a/src/core/error.rs b/src/core/error.rs
new file mode 100644
index 0000000..86168a7
--- /dev/null
+++ b/src/core/error.rs
@@ -0,0 +1,152 @@
+//! Global error type and Result alias for the application.
+
+use thiserror::Error;
+
+#[derive(Error, Debug)]
+pub enum ConvertError {
+    #[error("JSON parse error: {0}")]
+    JsonParseError(#[from] serde_json::Error),
+
+    #[error("IO error: {0}")]
+    IoError(#[from] std::io::Error),
+
+    #[error("File not found: {0}")]
+    FileNotFound(String),
+
+    #[error("Template error: {0}")]
+    TemplateError(String),
+
+    #[error("Source error: {0}")]
+    SourceError(String),
+
+    #[error("Network error: {0}")]
+    NetworkError(String),
+
+    #[error("Config error: {0}")]
+    ConfigValidationError(String),
+}
+
+pub type Result<T> = std::result::Result<T, ConvertError>;
+
+impl ConvertError {
+    pub fn file_not_found(path: &str) -> Self {
+        Self::FileNotFound(path.to_string())
+    }
+
+    pub fn template_error(msg: &str) -> Self {
+        Self::TemplateError(msg.to_string())
+    }
+
+    pub fn source_error(msg: &str) -> Self {
+        Self::SourceError(msg.to_string())
+    }
+
+    pub fn network_error(msg: &str) -> Self {
+        Self::NetworkError(msg.to_string())
+    }
+
+    /// Format error for display
+    pub fn format_error(&self) -> String {
+        match self {
+            ConvertError::FileNotFound(path) => {
+                format!("File not found: {}\n  Please check if the file path is correct.", path)
+            }
+            ConvertError::IoError(e) => {
+                format!("IO error: {}", e)
+            }
+            ConvertError::JsonParseError(e) => {
+                format!("JSON parse error: {}\n  Please check if the file format is valid JSON.", e)
+            }
+            ConvertError::TemplateError(msg) => {
+                format!("Template error: {}", msg)
+            }
+            ConvertError::SourceError(msg) => {
+                format!("Source error: {}", msg)
+            }
+            ConvertError::NetworkError(msg) => {
+                format!("Network error: {}\n  Please check your network connection.", msg)
+            }
+            ConvertError::ConfigValidationError(msg) => {
+                format!("Config error: {}", msg)
+            }
+        }
+    }
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    #[test]
+    fn test_convert_error_display() {
+        let error = ConvertError::ConfigValidationError("Test error".to_string());
+        let error_string = format!("{}", error);
+        assert!(error_string.contains("Config error"));
+        assert!(error_string.contains("Test error"));
+    }
+
+    #[test]
+    fn test_convert_error_debug() {
+        let error = ConvertError::ConfigValidationError("Test error".to_string());
+        let debug_string = format!("{:?}", error);
+        assert!(debug_string.contains("ConfigValidationError"));
+    }
+
+    #[test]
+    fn test_file_not_found_error() {
+        let error = ConvertError::file_not_found("/path/to/file");
+        let formatted = error.format_error();
+        assert!(formatted.contains("File not found"));
+        assert!(formatted.contains("/path/to/file"));
+    }
+
+    #[test]
+    fn test_convert_error_from_serde_json() {
+        let json_error = serde_json::from_str::<serde_json::Value>("invalid json");
+        assert!(json_error.is_err());
+
+        if let Err(json_err) = json_error {
+            let convert_error: ConvertError = json_err.into();
+            match convert_error {
+                ConvertError::JsonParseError(_) => {}
+                _ => panic!("Expected JsonParseError"),
+            }
+        }
+    }
+
+    #[test]
+    fn test_convert_error_from_io() {
+        let io_error = std::fs::read_to_string("/nonexistent/file");
+        assert!(io_error.is_err());
+
+        if let Err(io_err) = io_error {
+            let convert_error: ConvertError = io_err.into();
+            match convert_error {
+                ConvertError::IoError(_) => {}
+                _ => panic!("Expected IoError"),
+            }
+        }
+    }
+
+    #[test]
+    fn test_result_type_alias() {
+        fn test_function() -> Result<String> {
+            Ok("test".to_string())
+        }
+
+        fn test_error_function() -> Result<String> {
+            Err(ConvertError::ConfigValidationError("test error".to_string()))
+        }
+
+        assert!(test_function().is_ok());
+        assert!(test_error_function().is_err());
+    }
+
+    #[test]
+    fn test_format_error() {
+        let error = ConvertError::file_not_found("test.json");
+        let formatted = error.format_error();
+        assert!(formatted.contains("File not found"));
+        assert!(formatted.contains("test.json"));
+    }
+}
diff --git a/src/core/logging.rs b/src/core/logging.rs
new file mode 100644
index 0000000..93512c4
--- /dev/null
+++ b/src/core/logging.rs
@@ -0,0 +1,21 @@
+//! Logging module
+
+use crate::core::error::Result;
+use tracing::{info, Level};
+use tracing_subscriber::EnvFilter;
+
+/// Initialize logging system
+pub fn init_logging(log_level: Level) -> Result<()> {
+    let filter = EnvFilter::try_from_default_env()
+        .unwrap_or_else(|_| EnvFilter::new(format!("proxy_convert={}", log_level.as_str())));
+
+    tracing_subscriber::fmt()
+        .with_env_filter(filter)
+        .with_target(false)
+        .with_thread_ids(false)
+        .with_thread_names(false)
+        .init();
+
+    info!("Logging system initialized, level: {}", log_level);
+    Ok(())
+}
diff --git a/src/core/mod.rs b/src/core/mod.rs
new file mode 100644
index 0000000..0167ad1
--- /dev/null
+++ b/src/core/mod.rs
@@ -0,0 +1,5 @@
+//! Core module - domain types, config, and error handling.
+pub mod config;
+pub mod error;
+pub mod logging;
+pub mod source;
diff --git a/src/core/source.rs b/src/core/source.rs
new file mode 100644
index 0000000..977d23f
--- /dev/null
+++ b/src/core/source.rs
@@ -0,0 +1,47 @@
+//! Source types - domain model for input sources.
+//!
+//! Used by commands (to build from CLI) and by utils/protocols (to load and parse).
+//! Kept in core to avoid utils depending on commands.
+
+/// Source metadata: path/url + query params (type, name, flag).
+#[derive(Debug, Clone)]
+pub struct SourceMeta {
+    /// Optional display name for multi-source distinction
+    pub name: Option<String>,
+    /// Protocol type of this source (clash, sing-box, v2ray)
+    pub source_type: SourceProtocol,
+    /// Full source string: <path|url>?type=...&name=...&flag=...
+    pub source: String,
+    /// Explicit format override; if None, derived from source_type
+    pub format: Option<String>,
+    /// If set, use this flag when requesting URL (empty string = &flag=); else use protocol default
+    pub flag: Option<String>,
+}
+
+/// Supported source (subscription) protocol types.
+#[derive(Debug, Clone)]
+pub enum SourceProtocol {
+    Clash,
+    SingBox,
+    V2Ray,
+}
+
+impl SourceProtocol {
+    pub fn from_str(s: &str) -> Option<Self> {
+        match s.to_lowercase().as_str() {
+            "clash" => Some(SourceProtocol::Clash),
+            "sing-box" | "singbox" => Some(SourceProtocol::SingBox),
+            "v2ray" => Some(SourceProtocol::V2Ray),
+            _ => None,
+        }
+    }
+
+    /// Format name for registry/parsing (e.g. "clash", "singbox", "v2ray").
+    pub fn as_format_str(&self) -> &'static str {
+        match self {
+            SourceProtocol::Clash => "clash",
+            SourceProtocol::SingBox => "singbox",
+            SourceProtocol::V2Ray => "v2ray",
+        }
+    }
+}
diff --git a/src/lib.rs b/src/lib.rs
new file mode 100644
index 0000000..5b90009
--- /dev/null
+++ b/src/lib.rs
@@ -0,0 +1,7 @@
+//! Proxy-convert library: core, protocols, commands, utils.
+//! Used by the CLI binary and by integration tests.
+
+pub mod commands;
+pub mod core;
+pub mod protocols;
+pub mod utils;
diff --git a/src/main.rs b/src/main.rs
index 195dea8..aadc737 100644
--- a/src/main.rs
+++ b/src/main.rs
@@ -1,279 +1,67 @@
-mod clash;
-mod cli;
-mod singbox;
-mod template;
-
+//! Proxy Configuration Converter Main Program
+//!
+//! A modern, extensible tool for converting between different proxy configuration formats.
+//! Supports Clash, Sing-box, V2Ray and other formats.
+
+use proxy_convert::commands::cli::{Cli, Commands};
+use proxy_convert::commands::{convert, template, validate, version};
+use proxy_convert::core::error;
+use proxy_convert::core::{config::AppConfig, logging};
 use clap::Parser;
-use clash::proxy::Proxy;
-use reqwest::{blocking::Client, header};
-use serde_json::{from_str as from_json_str, to_string_pretty};
-use serde_yaml::from_str;
-use singbox::outbound::{
-    http, selector::Selector, shadowsocks, socks, trojan, urltest::Urltest, vmess::Vmess, Outbound,
-};
-use std::fs::{self, File};
-use std::io::Write;
-use std::path;
+use tracing::Level;
 
-pub fn extra_name(outbound: &Proxy) -> String {
-    match outbound {
-        Proxy::Ss(ss) => ss.name.to_string(),
-        Proxy::Ssr(ssr) => ssr.name.to_string(),
-        Proxy::Vmess(vmess) => vmess.name.to_string(),
-        Proxy::Socks5(socks5) => socks5.name.to_string(),
-        Proxy::Http(http) => http.name.to_string(),
-        Proxy::Snell(snell) => snell.name.to_string(),
-        Proxy::Trojan(trojan) => trojan.name.to_string(),
+#[tokio::main]
+async fn main() {
+    if let Err(e) = run().await {
+        eprintln!("\x1b[31mError:\x1b[0m {}", e.format_error());
+        std::process::exit(1);
     }
 }
 
-pub fn transform_outbound_protocol(outbound: &Proxy) -> Outbound {
-    match outbound {
-        Proxy::Ss(ss) => {
-            return Outbound::Shadowsocks(shadowsocks::Shadowsocks {
-                tag: ss.name.to_string(),
-                server: ss.server.to_string(),
-                server_port: ss.port,
-                method: ss.cipher.to_string(),
-                password: ss.password.to_string(),
-                ..shadowsocks::Shadowsocks::default()
-            });
-        }
-        Proxy::Ssr(ssr) => {
-            return Outbound::Shadowsocks(shadowsocks::Shadowsocks {
-                tag: ssr.name.to_string(),
-                server: ssr.server.to_string(),
-                server_port: ssr.port,
-                password: ssr.password.to_string(),
-                bind_interface: ssr.interface_name.clone(),
-                routing_mark: ssr.routing_mark,
-                ..shadowsocks::Shadowsocks::default()
-            });
-        }
-        Proxy::Vmess(vmess) => {
-            return Outbound::Vmess(Vmess {
-                tag: vmess.name.to_string(),
-                server: vmess.server.to_string(),
-                server_port: vmess.port,
-                uuid: vmess.uuid.clone(),
-                security: Some(String::from("auto")),
-                ..Vmess::default()
-            });
-        }
-        Proxy::Socks5(socks5) => {
-            return Outbound::Socks(socks::Socks {
-                tag: socks5.name.to_string(),
-                server: socks5.server.to_string(),
-                server_port: socks5.port,
-                username: socks5.username.clone(),
-                password: socks5.password.clone(),
-                bind_interface: socks5.interface_name.clone(),
-                routing_mark: socks5.routing_mark,
-                ..socks::Socks::default()
-            });
-        }
-        Proxy::Http(http) => {
-            return Outbound::Http(http::Http {
-                tag: http.name.to_string(),
-                server: http.server.to_string(),
-                server_port: http.port,
-                username: http.username.clone(),
-                password: http.password.clone(),
-                bind_interface: http.interface_name.clone(),
-                routing_mark: http.routing_mark,
-                ..http::Http::default()
-            });
-        }
-        Proxy::Snell(snell) => {
-            return Outbound::Vmess(Vmess {
-                tag: snell.name.to_string(),
-                server: snell.server.to_string(),
-                server_port: snell.port,
-                security: Some(String::from("auto")),
-                ..Vmess::default()
-            });
-        }
-        Proxy::Trojan(trojan) => {
-            return Outbound::Trojan(trojan::Trojan {
-                tag: trojan.name.to_string(),
-                server: trojan.server.to_string(),
-                server_port: trojan.port,
-                password: trojan.password.clone(),
-                network: trojan.network.clone(),
-                bind_interface: trojan.interface_name.clone(),
-                routing_mark: trojan.routing_mark,
-                ..trojan::Trojan::default()
-            });
-        }
-    }
-}
-
-fn process_outbounds(vec: &mut Vec<String>, outbounds: &[String]) {
-    let mut index = 0;
-    while index < vec.len() {
-        let current = &vec[index];
-        if current == "{{ALL-TAG}}" {
-            vec.splice(index..index + 1, outbounds.iter().cloned());
-        } else if current.starts_with("{{") && current.ends_with("}}") {
-            let inner = &current[2..current.len() - 2];
-            let mut exclude_rules: Vec<&str> = Vec::new();
-            let mut include_rules: Vec<&str> = Vec::new();
-
-            if inner.contains("EXCLUDE-TAG:") {
-                let start = inner.find("EXCLUDE-TAG:").unwrap() + "EXCLUDE-TAG:".len();
-                let end = inner[start..]
-                    .find(';')
-                    .unwrap_or_else(|| inner.len() - start);
-                exclude_rules = inner[start..start + end].split(',').collect();
-            }
-
-            if inner.contains("INCLUDE-TAG:") {
-                let start = inner.find("INCLUDE-TAG:").unwrap() + "INCLUDE-TAG:".len();
-                let end = inner[start..]
-                    .find(';')
-                    .unwrap_or_else(|| inner.len() - start);
-                include_rules = inner[start..start + end].split(',').collect();
-            }
-
-            let mut matches = Vec::new();
-            for outbound in outbounds {
-                let should_exclude = exclude_rules.iter().any(|rule| outbound.contains(rule));
-                let should_include = include_rules.is_empty()
-                    || include_rules.iter().any(|rule| outbound.contains(rule));
+async fn run() -> error::Result<()> {
+    // Parse command line arguments
+    let cli = Cli::parse();
 
-                if should_include && !should_exclude {
-                    matches.push(outbound.clone());
-                }
-            }
-
-            vec.splice(index..index + 1, matches.into_iter());
-        } else {
-            index += 1;
+    // Handle commands
+    match cli.command {
+        Commands::Version => {
+            version::handle_version();
+            Ok(())
         }
-    }
-}
-
-fn process_default(default: &mut Option<String>, outbounds: &[String]) {
-    // 检查 default 是否为 None 且 outbounds 不为空
-    if (default.is_none() || default.as_ref().map_or(false, |s| s.is_empty()))
-        && !outbounds.is_empty()
-    {
-        *default = outbounds.first().cloned();
-    }
-
-    // 如果 default 有值，继续处理
-    if let Some(default_rule) = default.as_mut() {
-        if default_rule.starts_with("{{") && default_rule.ends_with("}}") {
-            let inner = &default_rule[2..default_rule.len() - 2];
-            let mut exclude_rules: Vec<&str> = Vec::new();
-            let mut include_rules: Vec<&str> = Vec::new();
-
-            // 安全地解析 EXCLUDE-TAG 规则
-            if let Some(start_index) = inner.find("EXCLUDE-TAG:") {
-                let start = start_index + "EXCLUDE-TAG:".len();
-                if let Some(end_index) = inner[start..].find(';') {
-                    let end = start + end_index;
-                    exclude_rules = inner[start..end].split(',').collect();
-                } else {
-                    exclude_rules = inner[start..].split(',').collect();
+        _ => {
+            // Load configuration from specified path or default locations
+            let config_path = cli.config.as_ref().and_then(|p| p.to_str());
+            let mut config = AppConfig::load_from_path(config_path)?;
+
+            // Merge CLI parameters into config (CLI parameters take precedence)
+            config.merge_cli_params(&cli.command)?;
+
+            // Initialize logging system with config log level
+            let log_level = match config.log_level.to_lowercase().as_str() {
+                "error" => Level::ERROR,
+                "warn" => Level::WARN,
+                "debug" => Level::DEBUG,
+                "trace" => Level::TRACE,
+                _ => Level::INFO,
+            };
+            logging::init_logging(log_level)?;
+
+            // Initialize protocol registry
+            let registry = proxy_convert::protocols::ProtocolRegistry::init();
+
+            // Handle other commands
+            match cli.command {
+                Commands::Convert { .. } => {
+                    convert::handle_convert(&cli.command, &config, &registry).await
                 }
-            }
-
-            // 安全地解析 INCLUDE-TAG 规则
-            if let Some(start_index) = inner.find("INCLUDE-TAG:") {
-                let start = start_index + "INCLUDE-TAG:".len();
-                if let Some(end_index) = inner[start..].find(';') {
-                    let end = start + end_index;
-                    include_rules = inner[start..end].split(',').collect();
-                } else {
-                    include_rules = inner[start..].split(',').collect();
+                Commands::Validate { .. } => {
+                    validate::handle_validate(&cli.command, &config, &registry).await
                 }
-            }
-
-            let mut matches = Vec::new();
-            for outbound in outbounds {
-                let should_exclude = exclude_rules.iter().any(|rule| outbound.contains(rule));
-                let should_include = include_rules.is_empty()
-                    || include_rules.iter().any(|rule| outbound.contains(rule));
-
-                if should_include && !should_exclude {
-                    matches.push(outbound.clone());
+                Commands::Template { .. } => {
+                    template::handle_template(&cli.command, &config, &registry).await
                 }
-            }
-
-            // 如果有匹配项，更新 default
-            if !matches.is_empty() {
-                *default = Some(matches[0].clone());
+                Commands::Version => unreachable!(),
             }
         }
     }
 }
-
-fn main() {
-    let mut args: cli::Args = cli::Args::parse();
-    args.url.query_pairs_mut().append_pair("flag", "clash");
-
-    // Download the YAML data
-    let response = Client::new().get(args.url).header(header::USER_AGENT, String::from("Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36")).send().unwrap();
-    let yaml_data = response.text().unwrap();
-
-    // Parse the YAML data into a Rust struct
-    let clash_config: clash::Config = from_str(&yaml_data).unwrap();
-    let proxies: &Vec<clash::proxy::Proxy> = &clash_config.proxies;
-
-    let outbound_tags: Vec<String> = proxies.into_iter().map(extra_name).collect();
-    let mut vmess_list: Vec<Outbound> = proxies
-        .into_iter()
-        .map(transform_outbound_protocol)
-        .collect();
-
-    // create singbox config from template
-    let mut template_str: String = template::TEMPLATE.to_string();
-    if let Some(template_path) = args.template {
-        if !template_path.exists() {
-            println!("Template file not found! Use default template instead.");
-        } else if template_path.is_dir() {
-            if template_path.join("template.json").exists() {
-                template_str = fs::read_to_string(template_path.join("template.json"))
-                    .expect("READ TEMPLATE ERROR");
-            } else {
-                println!("Can not find the template! Use default template instead.");
-            }
-        } else {
-            template_str = fs::read_to_string(&template_path).expect("READ TEMPLATE ERROR");
-        }
-    }
-    let mut singbox_config: singbox::Config = from_json_str(template_str.as_str()).unwrap();
-
-    for outbound in &mut singbox_config.outbounds {
-        // update urltest outbounds with outbound_tags
-        if let Outbound::Urltest(Urltest { outbounds, .. }) = outbound {
-            process_outbounds(outbounds, &outbound_tags);
-        }
-
-        // update selector outbounds with outbound_tags
-        if let Outbound::Selector(Selector {
-            outbounds, default, ..
-        }) = outbound
-        {
-            process_default(default, &outbound_tags);
-            process_outbounds(outbounds, &outbound_tags);
-        }
-    }
-
-    // add vmess outbounds to singbox outbounds
-    singbox_config.outbounds.append(&mut vmess_list);
-
-    // Convert the updated template to JSON
-    let json_data = to_string_pretty(&singbox_config).unwrap();
-
-    // Write the JSON data to config.json
-    let mut output_path = args.output.unwrap_or(path::PathBuf::from("config.json"));
-    if output_path.is_dir() {
-        output_path.push("config.json");
-    }
-    let mut file = File::create(output_path).unwrap();
-    file.write_all(json_data.as_bytes()).unwrap();
-
-    println!("JSON data written to config.json");
-}
diff --git a/src/protocols/clash/default_template.rs b/src/protocols/clash/default_template.rs
new file mode 100644
index 0000000..8709f1e
--- /dev/null
+++ b/src/protocols/clash/default_template.rs
@@ -0,0 +1,177 @@
+//! Clash default template
+
+/// Generate default Clash configuration template
+pub fn generate() -> String {
+    r#"mixed-port: 7890
+allow-lan: true
+bind-address: '*'
+mode: rule
+log-level: info
+ipv6: true
+external-controller: ':9090'
+external-ui: dashboard
+secret: 123456
+tun:
+  enable: true
+  stack: system
+  auto-route: true
+  auto-detect-interface: true
+
+dns:
+  enable: true
+  listen: '0.0.0.0:53'
+  ipv6: true
+  default-nameserver: [223.5.5.5, 114.114.114.114, 8.8.8.8]
+  enhanced-mode: fake-ip
+  fake-ip-range: 198.18.0.1/16
+  fake-ip-filter: ['*.lan', '*.linksys.com', '*.linksyssmartwifi.com', swscan.apple.com, mesu.apple.com, '*.msftconnecttest.com', '*.msftncsi.com', 'time.*.com', 'time.*.gov', 'time.*.edu.cn', 'time.*.apple.com', 'time1.*.com', 'time2.*.com', 'time3.*.com', 'time4.*.com', 'time5.*.com', 'time6.*.com', 'time7.*.com', 'ntp.*.com', 'ntp.*.com', 'ntp1.*.com', 'ntp2.*.com', 'ntp3.*.com', 'ntp4.*.com', 'ntp5.*.com', 'ntp6.*.com', 'ntp7.*.com', '*.time.edu.cn', '*.ntp.org.cn', +.pool.ntp.org, time1.cloud.tencent.com, +.music.163.com, '*.126.net', musicapi.taihe.com, music.taihe.com, songsearch.kugou.com, trackercdn.kugou.com, '*.kuwo.cn', api-jooxtt.sanook.com, api.joox.com, joox.com, +.y.qq.com, +.music.tc.qq.com, aqqmusic.tc.qq.com, +.stream.qqmusic.qq.com, '*.xiami.com', +.music.migu.cn, +.srv.nintendo.net, +.stun.playstation.net, 'xbox.*.microsoft.com', +.xboxlive.com, localhost.ptlogin2.qq.com, proxy.golang.org, 'stun.*.*', 'stun.*.*.*', '+.stun.*.*.*.*', heartbeat.belkin.com, '*.linksys.com', '*.linksyssmartwifi.com', '*.router.asus.com', mesu.apple.com, swscan.apple.com, swquery.apple.com, swdownload.apple.com, swcdn.apple.com, swdist.apple.com, lens.l.google.com, stun.l.google.com, +.nflxvideo.net, '*.square-enix.com', '*.finalfantasyxiv.com', '*.ffxiv.com', '*.mcdn.bilivideo.cn']
+  nameserver: ['https://doh.pub/dns-query', 'https://doh.dns.sb/dns-query', 'https://dns.adguard.com/dns-query', 'https://cdn-doh.ssnm.xyz/dns-query', 223.5.5.5, 180.76.76.76, 119.29.29.29, 117.50.11.11, 117.50.10.10, 114.114.114.114, 'https://dns.alidns.com/dns-query', 'https://doh.360.cn/dns-query']
+  fallback: ['https://dns.quad9.net:5053/dns-query', 'https://dns-unfiltered.adguard.com/dns-query', 'https://doh.opendns.com/dns-query', 'https://1.0.0.1/dns-query', 'https://public.dns.iij.jp/dns-query', 'https://dns.twnic.tw/dns-query', 8.8.8.8, 1.1.1.1, 'tls://dns.rubyfish.cn:853', 'tls://1.0.0.1:853', 'tls://dns.google:853', 'https://dns.rubyfish.cn/dns-query', 'https://cloudflare-dns.com/dns-query', 'https://dns.google/dns-query']
+  fallback-filter: { geoip: true, ipcidr: [0.0.0.0/8, 10.0.0.0/8, 100.64.0.0/10, 127.0.0.0/8, 169.254.0.0/16, 172.16.0.0/12, 192.0.0.0/24, 192.0.2.0/24, 192.88.99.0/24, 192.168.0.0/16, 198.18.0.0/15, 198.51.100.0/24, 203.0.113.0/24, 224.0.0.0/4, 240.0.0.0/4, 255.255.255.255/32], domain: [+.google.com, +.facebook.com, +.youtube.com, +.freegfw.top, +.gogocloud.top, +.tgcloud.top, +.githubusercontent.com, +.googlevideo.com] }
+
+proxies: []
+
+proxy-groups:
+  - name: '🚀 Select'
+    type: select
+    url: http://www.gstatic.com/generate_204
+    interval: 600
+    proxies:
+      - '🚀 Manual'
+      - '♻️ Auto'
+      - '🔯 Fallback'
+      - '🔮 LoadBalance'
+
+  - name: '🚀 Manual'
+    type: select
+    url: http://www.gstatic.com/generate_204
+    interval: 600
+    proxies:
+      - "{{ALL-TAG}}"
+
+  - name: '♻️ Auto'
+    type: url-test
+    url: http://www.gstatic.com/generate_204
+    interval: 600
+    tolerance: 150
+    proxies:
+      - "{{ALL-TAG}}"
+
+  - name: '🔯 Fallback'
+    type: fallback
+    url: http://www.gstatic.com/generate_204
+    interval: 600
+    proxies:
+      - "{{ALL-TAG}}"
+
+  - name: '🔮 LoadBalance'
+    type: load-balance
+    url: http://www.gstatic.com/generate_204
+    interval: 600
+    proxies:
+      - "{{ALL-TAG}}"
+
+rule-providers:
+  reject:
+    type: http
+    behavior: domain
+    url: 'https://raw.githubusercontent.com/Loyalsoldier/clash-rules/release/reject.txt'
+    path: ./ruleset/reject.yaml
+    interval: 86400
+  icloud:
+    type: http
+    behavior: domain
+    url: 'https://raw.githubusercontent.com/Loyalsoldier/clash-rules/release/icloud.txt'
+    path: ./ruleset/icloud.yaml
+    interval: 86400
+  apple:
+    type: http
+    behavior: domain
+    url: 'https://raw.githubusercontent.com/Loyalsoldier/clash-rules/release/apple.txt'
+    path: ./ruleset/apple.yaml
+    interval: 86400
+  google:
+    type: http
+    behavior: domain
+    url: 'https://raw.githubusercontent.com/Loyalsoldier/clash-rules/release/google.txt'
+    path: ./ruleset/google.yaml
+    interval: 86400
+  proxy:
+    type: http
+    behavior: domain
+    url: 'https://raw.githubusercontent.com/Loyalsoldier/clash-rules/release/proxy.txt'
+    path: ./ruleset/proxy.yaml
+    interval: 86400
+  direct:
+    type: http
+    behavior: domain
+    url: 'https://raw.githubusercontent.com/Loyalsoldier/clash-rules/release/direct.txt'
+    path: ./ruleset/direct.yaml
+    interval: 86400
+  private:
+    type: http
+    behavior: domain
+    url: 'https://raw.githubusercontent.com/Loyalsoldier/clash-rules/release/private.txt'
+    path: ./ruleset/private.yaml
+    interval: 86400
+  gfw:
+    type: http
+    behavior: domain
+    url: 'https://raw.githubusercontent.com/Loyalsoldier/clash-rules/release/gfw.txt'
+    path: ./ruleset/gfw.yaml
+    interval: 86400
+  greatfire:
+    type: http
+    behavior: domain
+    url: 'https://raw.githubusercontent.com/Loyalsoldier/clash-rules/release/greatfire.txt'
+    path: ./ruleset/greatfire.yaml
+    interval: 86400
+  tld-not-cn:
+    type: http
+    behavior: domain
+    url: 'https://raw.githubusercontent.com/Loyalsoldier/clash-rules/release/tld-not-cn.txt'
+    path: ./ruleset/tld-not-cn.yaml
+    interval: 86400
+  telegramcidr:
+    type: http
+    behavior: ipcidr
+    url: 'https://raw.githubusercontent.com/Loyalsoldier/clash-rules/release/telegramcidr.txt'
+    path: ./ruleset/telegramcidr.yaml
+    interval: 86400
+  cncidr:
+    type: http
+    behavior: ipcidr
+    url: 'https://raw.githubusercontent.com/Loyalsoldier/clash-rules/release/cncidr.txt'
+    path: ./ruleset/cncidr.yaml
+    interval: 86400
+  lancidr:
+    type: http
+    behavior: ipcidr
+    url: 'https://raw.githubusercontent.com/Loyalsoldier/clash-rules/release/lancidr.txt'
+    path: ./ruleset/lancidr.yaml
+    interval: 86400
+  applications:
+    type: http
+    behavior: classical
+    url: 'https://raw.githubusercontent.com/Loyalsoldier/clash-rules/release/applications.txt'
+    path: ./ruleset/applications.yaml
+    interval: 86400
+rules:
+  - DOMAIN-SUFFIX,<subscription_url>,DIRECT
+  - RULE-SET,applications,DIRECT
+  - RULE-SET,private,DIRECT
+  - RULE-SET,reject,REJECT
+  - RULE-SET,icloud,DIRECT
+  - RULE-SET,apple,DIRECT
+  - RULE-SET,google,🚀 Select
+  - RULE-SET,proxy,🚀 Select
+  - RULE-SET,direct,DIRECT
+  - RULE-SET,lancidr,DIRECT,no-resolve
+  - RULE-SET,cncidr,DIRECT,no-resolve
+  - RULE-SET,telegramcidr,🚀 Select,no-resolve
+  - GEOIP,LAN,DIRECT,no-resolve
+  - GEOIP,CN,DIRECT,no-resolve
+  - MATCH,🚀 Select
+"#
+    .to_string()
+}
diff --git a/src/clash/dns.rs b/src/protocols/clash/dns.rs
similarity index 85%
rename from src/clash/dns.rs
rename to src/protocols/clash/dns.rs
index a9eed93..fd2297f 100644
--- a/src/clash/dns.rs
+++ b/src/protocols/clash/dns.rs
@@ -1,6 +1,6 @@
 use serde::{Deserialize, Serialize};
 
-#[derive(Serialize, Deserialize, Debug)]
+#[derive(Serialize, Deserialize, Debug, Clone)]
 #[serde(rename_all = "kebab-case")]
 pub struct DNS {
     pub enable: Option<bool>,
@@ -14,7 +14,7 @@ pub struct DNS {
     pub fallback_filter: Option<FallbackFilter>,
 }
 
-#[derive(Serialize, Deserialize, Debug)]
+#[derive(Serialize, Deserialize, Debug, Clone)]
 pub struct FallbackFilter {
     pub geoip: Option<bool>,
     #[serde(rename = "ipcidr")]
diff --git a/src/protocols/clash/mod.rs b/src/protocols/clash/mod.rs
new file mode 100644
index 0000000..ea955a2
--- /dev/null
+++ b/src/protocols/clash/mod.rs
@@ -0,0 +1,67 @@
+//! Clash Protocol Support Module
+
+pub mod default_template;
+pub mod dns;
+pub mod proxy;
+pub mod proxy_group;
+pub mod template_processor;
+
+use serde::{Deserialize, Serialize};
+use std::collections::HashMap;
+
+#[derive(Serialize, Deserialize, Debug, Clone)]
+#[serde(rename_all = "kebab-case")]
+pub struct Config {
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub mixed_port: Option<u16>,
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub allow_lan: Option<bool>,
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub bind_address: Option<String>,
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub mode: Option<Mode>,
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub log_level: Option<LogLevel>,
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub external_controller: Option<String>,
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub dns: Option<dns::DNS>,
+    #[serde(default)]
+    pub proxies: Vec<proxy::Proxy>,
+    #[serde(default)]
+    pub proxy_groups: Vec<proxy_group::ProxyGroup>,
+    #[serde(default)]
+    pub rules: Vec<String>,
+    /// Capture unknown fields
+    #[serde(flatten)]
+    pub extra: HashMap<String, serde_json::Value>,
+}
+
+#[derive(Serialize, Deserialize, Debug, Clone)]
+#[serde(rename_all = "lowercase")]
+pub enum Mode {
+    Global,
+    Rule,
+    Direct,
+}
+
+#[derive(Serialize, Deserialize, Debug, Clone)]
+#[serde(rename_all = "lowercase")]
+pub enum LogLevel {
+    Trace,
+    Debug,
+    Info,
+    Warn,
+    Error,
+    Fatal,
+}
+
+/// Protocol name
+pub const PROTOCOL_NAME: &str = "clash";
+/// Configuration file extension
+pub const CONFIG_EXT: &str = "yaml";
+
+/// Generate default Clash configuration template
+pub fn generate_default_template() -> String {
+    default_template::generate()
+}
diff --git a/src/clash/proxy/http.rs b/src/protocols/clash/proxy/http.rs
similarity index 87%
rename from src/clash/proxy/http.rs
rename to src/protocols/clash/proxy/http.rs
index 94fc0df..704cfb4 100644
--- a/src/clash/proxy/http.rs
+++ b/src/protocols/clash/proxy/http.rs
@@ -2,7 +2,7 @@ use serde::{Deserialize, Serialize};
 use serde_with::skip_serializing_none;
 
 #[skip_serializing_none]
-#[derive(Default, Serialize, Deserialize, Debug)]
+#[derive(Default, Serialize, Deserialize, Debug, Clone)]
 pub struct Http {
     pub name: String,
     #[serde(rename = "interface-name")]
diff --git a/src/protocols/clash/proxy/mod.rs b/src/protocols/clash/proxy/mod.rs
new file mode 100644
index 0000000..28bd545
--- /dev/null
+++ b/src/protocols/clash/proxy/mod.rs
@@ -0,0 +1,43 @@
+pub mod http;
+pub mod shadowsocks;
+pub mod shadowsocks_r;
+pub mod snell;
+pub mod socks5;
+pub mod trojan;
+pub mod vmess;
+
+use serde::{Deserialize, Serialize};
+
+pub use http::Http;
+pub use shadowsocks::Shadowsocks;
+pub use shadowsocks_r::ShadowsocksR;
+pub use snell::Snell;
+pub use socks5::Socks5;
+pub use trojan::Trojan;
+pub use vmess::Vmess;
+
+#[derive(Serialize, Deserialize, Debug, Clone)]
+#[serde(tag = "type", rename_all = "lowercase")]
+pub enum Proxy {
+    Ss(Shadowsocks),
+    Ssr(ShadowsocksR),
+    Vmess(Vmess),
+    Socks5(Socks5),
+    Http(Http),
+    Snell(Snell),
+    Trojan(Trojan),
+}
+
+impl Proxy {
+    pub fn name(&self) -> &str {
+        match self {
+            Proxy::Ss(ss) => &ss.name,
+            Proxy::Ssr(ssr) => &ssr.name,
+            Proxy::Vmess(vmess) => &vmess.name,
+            Proxy::Socks5(socks5) => &socks5.name,
+            Proxy::Http(http) => &http.name,
+            Proxy::Snell(snell) => &snell.name,
+            Proxy::Trojan(trojan) => &trojan.name,
+        }
+    }
+}
diff --git a/src/clash/proxy/shadowsocks.rs b/src/protocols/clash/proxy/shadowsocks.rs
similarity index 78%
rename from src/clash/proxy/shadowsocks.rs
rename to src/protocols/clash/proxy/shadowsocks.rs
index 57b3d6c..c991223 100644
--- a/src/clash/proxy/shadowsocks.rs
+++ b/src/protocols/clash/proxy/shadowsocks.rs
@@ -1,10 +1,9 @@
-use std::collections::HashMap;
-
 use serde::{Deserialize, Serialize};
 use serde_with::skip_serializing_none;
+use std::collections::HashMap;
 
 #[skip_serializing_none]
-#[derive(Default, Serialize, Deserialize, Debug)]
+#[derive(Default, Serialize, Deserialize, Debug, Clone)]
 pub struct Shadowsocks {
     pub name: String,
     pub server: String,
@@ -21,14 +20,14 @@ pub struct Shadowsocks {
     pub plugin_opts: Option<String>,
 }
 
-#[derive(Serialize, Deserialize, Debug)]
+#[derive(Serialize, Deserialize, Debug, Clone)]
 #[serde(rename_all = "kebab-case")]
 pub enum Plugin {
     Obfs,
     V2rayPlugin,
 }
 
-#[derive(Serialize, Deserialize, Debug)]
+#[derive(Serialize, Deserialize, Debug, Clone)]
 #[serde(tag = "mode")]
 pub enum PluginOpts {
     Tls(Tls),
@@ -36,17 +35,17 @@ pub enum PluginOpts {
     Websocket(Websocket),
 }
 
-#[derive(Serialize, Deserialize, Debug)]
+#[derive(Serialize, Deserialize, Debug, Clone)]
 pub struct Tls {
     pub host: String,
 }
 
-#[derive(Serialize, Deserialize, Debug)]
+#[derive(Serialize, Deserialize, Debug, Clone)]
 pub struct Http {
     pub host: String,
 }
 
-#[derive(Serialize, Deserialize, Debug)]
+#[derive(Serialize, Deserialize, Debug, Clone)]
 pub struct Websocket {
     pub tls: bool,
     #[serde(rename = "skip-cert-verify")]
diff --git a/src/clash/proxy/shadowsocks_r.rs b/src/protocols/clash/proxy/shadowsocks_r.rs
similarity index 91%
rename from src/clash/proxy/shadowsocks_r.rs
rename to src/protocols/clash/proxy/shadowsocks_r.rs
index 8c26acc..9c0765b 100644
--- a/src/clash/proxy/shadowsocks_r.rs
+++ b/src/protocols/clash/proxy/shadowsocks_r.rs
@@ -2,7 +2,7 @@ use serde::{Deserialize, Serialize};
 use serde_with::skip_serializing_none;
 
 #[skip_serializing_none]
-#[derive(Default, Serialize, Deserialize, Debug)]
+#[derive(Default, Serialize, Deserialize, Debug, Clone)]
 pub struct ShadowsocksR {
     pub name: String,
     #[serde(rename = "interface-name")]
diff --git a/src/clash/proxy/snell.rs b/src/protocols/clash/proxy/snell.rs
similarity index 83%
rename from src/clash/proxy/snell.rs
rename to src/protocols/clash/proxy/snell.rs
index 501dc2a..54d2f0c 100644
--- a/src/clash/proxy/snell.rs
+++ b/src/protocols/clash/proxy/snell.rs
@@ -2,7 +2,7 @@ use serde::{Deserialize, Serialize};
 use serde_with::skip_serializing_none;
 
 #[skip_serializing_none]
-#[derive(Default, Serialize, Deserialize, Debug)]
+#[derive(Default, Serialize, Deserialize, Debug, Clone)]
 pub struct Snell {
     pub name: String,
     #[serde(rename = "interface-name")]
@@ -18,7 +18,7 @@ pub struct Snell {
 }
 
 #[skip_serializing_none]
-#[derive(Default, Serialize, Deserialize, Debug)]
+#[derive(Default, Serialize, Deserialize, Debug, Clone)]
 pub struct ObfsOpts {
     pub mode: Option<String>,
     pub host: Option<String>,
diff --git a/src/clash/proxy/socks5.rs b/src/protocols/clash/proxy/socks5.rs
similarity index 90%
rename from src/clash/proxy/socks5.rs
rename to src/protocols/clash/proxy/socks5.rs
index e508a6e..3ed5529 100644
--- a/src/clash/proxy/socks5.rs
+++ b/src/protocols/clash/proxy/socks5.rs
@@ -2,7 +2,7 @@ use serde::{Deserialize, Serialize};
 use serde_with::skip_serializing_none;
 
 #[skip_serializing_none]
-#[derive(Default, Serialize, Deserialize, Debug)]
+#[derive(Default, Serialize, Deserialize, Debug, Clone)]
 pub struct Socks5 {
     pub name: String,
     #[serde(rename = "interface-name")]
diff --git a/src/clash/proxy/trojan.rs b/src/protocols/clash/proxy/trojan.rs
similarity index 83%
rename from src/clash/proxy/trojan.rs
rename to src/protocols/clash/proxy/trojan.rs
index 19a3323..18857f0 100644
--- a/src/clash/proxy/trojan.rs
+++ b/src/protocols/clash/proxy/trojan.rs
@@ -3,7 +3,7 @@ use serde_with::skip_serializing_none;
 use std::collections::HashMap;
 
 #[skip_serializing_none]
-#[derive(Default, Serialize, Deserialize, Debug)]
+#[derive(Default, Serialize, Deserialize, Debug, Clone)]
 pub struct Trojan {
     pub name: String,
     #[serde(rename = "interface-name")]
@@ -26,20 +26,20 @@ pub struct Trojan {
 }
 
 #[skip_serializing_none]
-#[derive(Default, Serialize, Deserialize, Debug)]
+#[derive(Default, Serialize, Deserialize, Debug, Clone)]
 pub struct GrpcOpts {
     #[serde(rename = "grpc-service-name")]
     pub grpc_service_name: Option<String>,
 }
 
 #[skip_serializing_none]
-#[derive(Default, Serialize, Deserialize, Debug)]
+#[derive(Default, Serialize, Deserialize, Debug, Clone)]
 pub struct WsOpts {
     pub path: Option<String>,
     pub headers: Option<HashMap<String, HttpHeader>>,
 }
 
-#[derive(Serialize, Deserialize, Debug)]
+#[derive(Serialize, Deserialize, Debug, Clone)]
 #[serde(untagged)]
 pub enum HttpHeader {
     Str(String),
diff --git a/src/clash/proxy/vmess.rs b/src/protocols/clash/proxy/vmess.rs
similarity index 84%
rename from src/clash/proxy/vmess.rs
rename to src/protocols/clash/proxy/vmess.rs
index ce8f09f..b32b062 100644
--- a/src/clash/proxy/vmess.rs
+++ b/src/protocols/clash/proxy/vmess.rs
@@ -4,7 +4,7 @@ use serde::{Deserialize, Serialize};
 use serde_with::skip_serializing_none;
 
 #[skip_serializing_none]
-#[derive(Default, Serialize, Deserialize, Debug)]
+#[derive(Default, Serialize, Deserialize, Debug, Clone)]
 pub struct Vmess {
     pub name: String,
     #[serde(rename = "interface-name")]
@@ -34,14 +34,14 @@ pub struct Vmess {
 }
 
 #[skip_serializing_none]
-#[derive(Default, Serialize, Deserialize, Debug)]
+#[derive(Default, Serialize, Deserialize, Debug, Clone)]
 pub struct HttpOpts {
     pub method: Option<String>,
     pub path: Option<Vec<String>>,
     pub headers: Option<HashMap<String, HttpHeader>>,
 }
 
-#[derive(Serialize, Deserialize, Debug)]
+#[derive(Serialize, Deserialize, Debug, Clone)]
 #[serde(untagged)]
 pub enum HttpHeader {
     Str(String),
@@ -49,21 +49,21 @@ pub enum HttpHeader {
 }
 
 #[skip_serializing_none]
-#[derive(Default, Serialize, Deserialize, Debug)]
+#[derive(Default, Serialize, Deserialize, Debug, Clone)]
 pub struct H2Opts {
     pub path: Option<String>,
     pub host: Option<Vec<String>>,
 }
 
 #[skip_serializing_none]
-#[derive(Default, Serialize, Deserialize, Debug)]
+#[derive(Default, Serialize, Deserialize, Debug, Clone)]
 pub struct GrpcOpts {
     #[serde(rename = "grpc-service-name")]
     pub grpc_service_name: Option<String>,
 }
 
 #[skip_serializing_none]
-#[derive(Default, Serialize, Deserialize, Debug)]
+#[derive(Default, Serialize, Deserialize, Debug, Clone)]
 pub struct WSOpts {
     pub path: Option<String>,
     pub headers: Option<HashMap<String, HttpHeader>>,
diff --git a/src/clash/proxy_group.rs b/src/protocols/clash/proxy_group.rs
similarity index 84%
rename from src/clash/proxy_group.rs
rename to src/protocols/clash/proxy_group.rs
index 85be6cd..977e7bc 100644
--- a/src/clash/proxy_group.rs
+++ b/src/protocols/clash/proxy_group.rs
@@ -1,6 +1,6 @@
 use serde::{Deserialize, Serialize};
 
-#[derive(Serialize, Deserialize, Debug)]
+#[derive(Serialize, Deserialize, Debug, Clone)]
 pub struct ProxyGroup {
     pub name: String,
     #[serde(rename = "type")]
diff --git a/src/protocols/clash/template_processor.rs b/src/protocols/clash/template_processor.rs
new file mode 100644
index 0000000..0e0cf90
--- /dev/null
+++ b/src/protocols/clash/template_processor.rs
@@ -0,0 +1,451 @@
+//! Clash template processor
+
+use crate::protocols::{ProtocolProcessor, ProxyServer};
+use crate::core::error::Result;
+use crate::utils::source::parser::Source;
+use crate::utils::template::interpolation_parser::{InterpolationParser, InterpolationRule};
+use indexmap::IndexMap;
+use serde_json;
+
+/// Clash protocol processor
+pub struct ClashProcessor;
+
+impl ProtocolProcessor for ClashProcessor {
+    fn process_rule(
+        &self,
+        rule: &InterpolationRule,
+        sources: &IndexMap<String, Source>,
+    ) -> Result<String> {
+        // Clash uses the same rule processing logic as Sing-box
+        let processor = crate::protocols::singbox::template_processor::SingboxProcessor;
+        processor.process_rule(rule, sources)
+    }
+
+    fn get_nodes_for_rule(
+        &self,
+        rule: &InterpolationRule,
+        sources: &IndexMap<String, Source>,
+    ) -> Result<Vec<ProxyServer>> {
+        // Clash uses the same node extraction logic as Sing-box
+        let processor = crate::protocols::singbox::template_processor::SingboxProcessor;
+        processor.get_nodes_for_rule(rule, sources)
+    }
+
+    fn set_default_values(&self, template: &str, nodes: &[ProxyServer]) -> Result<String> {
+        // Clash uses similar default value logic as Sing-box
+        // Works for both "outbounds" (sing-box style) and "proxy-groups" (clash style)
+        let processor = crate::protocols::singbox::template_processor::SingboxProcessor;
+        processor.set_default_values(template, nodes)
+    }
+
+    fn append_nodes(&self, template: &str, nodes: &[ProxyServer]) -> Result<String> {
+        // Parse template as JSON to properly manipulate it
+        let mut config: serde_json::Value = serde_json::from_str(template).map_err(|e| {
+            crate::core::error::ConvertError::ConfigValidationError(format!(
+                "Failed to parse template as JSON: {}",
+                e
+            ))
+        })?;
+
+        // Append nodes to "proxies" array
+        if let Some(proxies) = config.get_mut("proxies").and_then(|v| v.as_array_mut()) {
+            for node in nodes {
+                let node_config = self.create_node_config(node);
+                if let Ok(node_value) = serde_json::from_str::<serde_json::Value>(&node_config) {
+                    proxies.push(node_value);
+                }
+            }
+        }
+
+        // Serialize back to JSON string
+        serde_json::to_string_pretty(&config).map_err(|e| {
+            crate::core::error::ConvertError::ConfigValidationError(format!(
+                "Failed to serialize config: {}",
+                e
+            ))
+        })
+    }
+
+    fn create_node_config(&self, node: &ProxyServer) -> String {
+        let mut config = serde_json::Map::new();
+
+        let is_shadowsocks = node.protocol == "shadowsocks" || node.protocol == "ss";
+        let is_vmess = node.protocol == "vmess";
+        let is_trojan = node.protocol == "trojan";
+
+        // For Clash, shadowsocks type should be "ss"
+        let protocol_type = if node.protocol == "shadowsocks" {
+            "ss".to_string()
+        } else {
+            node.protocol.clone()
+        };
+
+        config.insert(
+            "name".to_string(),
+            serde_json::Value::String(node.name.clone()),
+        );
+        config.insert("type".to_string(), serde_json::Value::String(protocol_type));
+        config.insert(
+            "server".to_string(),
+            serde_json::Value::String(node.server.clone()),
+        );
+        config.insert(
+            "port".to_string(),
+            serde_json::Value::Number(serde_json::Number::from(node.port)),
+        );
+
+        if is_vmess {
+            self.convert_vmess_params_to_clash(&mut config, node);
+        } else if is_trojan {
+            self.convert_trojan_params_to_clash(&mut config, node);
+        } else {
+            // Generic handling for other protocols
+            if let Some(method) = &node.method {
+                config.insert(
+                    "cipher".to_string(),
+                    serde_json::Value::String(method.clone()),
+                );
+            }
+
+            if let Some(password) = &node.password {
+                config.insert(
+                    "password".to_string(),
+                    serde_json::Value::String(password.clone()),
+                );
+            }
+
+            // For shadowsocks nodes, always add udp: true
+            if is_shadowsocks {
+                config.insert("udp".to_string(), serde_json::Value::Bool(true));
+            }
+
+            // Add other parameters
+            let skip_keys = [
+                "udp",
+                "name",
+                "type",
+                "server",
+                "port",
+                "server_port",
+                "tag",
+                "method",
+            ];
+            for (key, value) in &node.parameters {
+                if !(is_shadowsocks && key == "udp") && !skip_keys.contains(&key.as_str()) {
+                    config.insert(key.clone(), value.clone());
+                }
+            }
+        }
+
+        serde_json::to_string_pretty(&serde_json::Value::Object(config)).unwrap()
+    }
+}
+
+impl ClashProcessor {
+    /// Convert Sing-box VMess parameters to Clash format
+    fn convert_vmess_params_to_clash(
+        &self,
+        config: &mut serde_json::Map<String, serde_json::Value>,
+        node: &ProxyServer,
+    ) {
+        let params = &node.parameters;
+
+        // UUID
+        if let Some(uuid) = params.get("uuid") {
+            config.insert("uuid".to_string(), uuid.clone());
+        }
+
+        // alter_id → alterId
+        if let Some(alter_id) = params.get("alter_id").or(params.get("alterId")) {
+            config.insert("alterId".to_string(), alter_id.clone());
+        }
+
+        // security → cipher
+        // If sing-box has no security field, it defaults to "auto", so we need to set cipher: auto in Clash
+        if let Some(security) = params.get("security") {
+            config.insert("cipher".to_string(), security.clone());
+        } else {
+            // Default to "auto" if no security is specified (sing-box default)
+            config.insert(
+                "cipher".to_string(),
+                serde_json::Value::String("auto".to_string()),
+            );
+        }
+
+        // UDP support - Clash needs explicit setting
+        config.insert("udp".to_string(), serde_json::Value::Bool(true));
+
+        // TLS handling
+        if let Some(tls) = params.get("tls") {
+            if let Some(tls_obj) = tls.as_object() {
+                if tls_obj
+                    .get("enabled")
+                    .and_then(|v| v.as_bool())
+                    .unwrap_or(false)
+                {
+                    config.insert("tls".to_string(), serde_json::Value::Bool(true));
+
+                    // server_name → servername
+                    if let Some(server_name) = tls_obj.get("server_name") {
+                        config.insert("servername".to_string(), server_name.clone());
+                    }
+
+                    // insecure → skip-cert-verify
+                    if let Some(insecure) = tls_obj.get("insecure") {
+                        config.insert("skip-cert-verify".to_string(), insecure.clone());
+                    }
+                }
+            } else if tls.as_bool().unwrap_or(false) {
+                config.insert("tls".to_string(), serde_json::Value::Bool(true));
+            }
+        }
+
+        // Transport handling
+        if let Some(transport) = params.get("transport") {
+            if let Some(transport_obj) = transport.as_object() {
+                if let Some(transport_type) = transport_obj.get("type").and_then(|v| v.as_str()) {
+                    config.insert(
+                        "network".to_string(),
+                        serde_json::Value::String(transport_type.to_string()),
+                    );
+
+                    match transport_type {
+                        "ws" => {
+                            let mut ws_opts = serde_json::Map::new();
+                            if let Some(path) = transport_obj.get("path") {
+                                ws_opts.insert("path".to_string(), path.clone());
+                            }
+                            if let Some(headers) = transport_obj.get("headers") {
+                                ws_opts.insert("headers".to_string(), headers.clone());
+                            }
+                            if let Some(early_data) = transport_obj.get("max_early_data") {
+                                ws_opts.insert("max-early-data".to_string(), early_data.clone());
+                            }
+                            if let Some(header_name) = transport_obj.get("early_data_header_name") {
+                                ws_opts.insert(
+                                    "early-data-header-name".to_string(),
+                                    header_name.clone(),
+                                );
+                            }
+                            if !ws_opts.is_empty() {
+                                config.insert(
+                                    "ws-opts".to_string(),
+                                    serde_json::Value::Object(ws_opts),
+                                );
+                            }
+                        }
+                        "grpc" => {
+                            let mut grpc_opts = serde_json::Map::new();
+                            if let Some(service_name) = transport_obj.get("service_name") {
+                                grpc_opts
+                                    .insert("grpc-service-name".to_string(), service_name.clone());
+                            }
+                            if !grpc_opts.is_empty() {
+                                config.insert(
+                                    "grpc-opts".to_string(),
+                                    serde_json::Value::Object(grpc_opts),
+                                );
+                            }
+                        }
+                        "h2" => {
+                            let mut h2_opts = serde_json::Map::new();
+                            if let Some(host) = transport_obj.get("host") {
+                                h2_opts.insert("host".to_string(), host.clone());
+                            }
+                            if let Some(path) = transport_obj.get("path") {
+                                h2_opts.insert("path".to_string(), path.clone());
+                            }
+                            if !h2_opts.is_empty() {
+                                config.insert(
+                                    "h2-opts".to_string(),
+                                    serde_json::Value::Object(h2_opts),
+                                );
+                            }
+                        }
+                        "http" => {
+                            let mut http_opts = serde_json::Map::new();
+                            if let Some(method) = transport_obj.get("method") {
+                                http_opts.insert("method".to_string(), method.clone());
+                            }
+                            if let Some(path) = transport_obj.get("path") {
+                                http_opts.insert("path".to_string(), path.clone());
+                            }
+                            if let Some(headers) = transport_obj.get("headers") {
+                                http_opts.insert("headers".to_string(), headers.clone());
+                            }
+                            if !http_opts.is_empty() {
+                                config.insert(
+                                    "http-opts".to_string(),
+                                    serde_json::Value::Object(http_opts),
+                                );
+                            }
+                        }
+                        _ => {}
+                    }
+                }
+            }
+        }
+    }
+
+    /// Convert Sing-box Trojan parameters to Clash format
+    fn convert_trojan_params_to_clash(
+        &self,
+        config: &mut serde_json::Map<String, serde_json::Value>,
+        node: &ProxyServer,
+    ) {
+        let params = &node.parameters;
+
+        // Password
+        if let Some(password) = &node.password {
+            config.insert(
+                "password".to_string(),
+                serde_json::Value::String(password.clone()),
+            );
+        }
+
+        // UDP support
+        config.insert("udp".to_string(), serde_json::Value::Bool(true));
+
+        // TLS handling - Trojan typically always uses TLS
+        if let Some(tls) = params.get("tls") {
+            if let Some(tls_obj) = tls.as_object() {
+                if let Some(server_name) = tls_obj.get("server_name") {
+                    config.insert("sni".to_string(), server_name.clone());
+                }
+                if let Some(insecure) = tls_obj.get("insecure") {
+                    config.insert("skip-cert-verify".to_string(), insecure.clone());
+                }
+                if let Some(alpn) = tls_obj.get("alpn") {
+                    config.insert("alpn".to_string(), alpn.clone());
+                }
+            }
+        }
+
+        // Transport handling
+        if let Some(transport) = params.get("transport") {
+            if let Some(transport_obj) = transport.as_object() {
+                if let Some(transport_type) = transport_obj.get("type").and_then(|v| v.as_str()) {
+                    config.insert(
+                        "network".to_string(),
+                        serde_json::Value::String(transport_type.to_string()),
+                    );
+
+                    match transport_type {
+                        "ws" => {
+                            let mut ws_opts = serde_json::Map::new();
+                            if let Some(path) = transport_obj.get("path") {
+                                ws_opts.insert("path".to_string(), path.clone());
+                            }
+                            if let Some(headers) = transport_obj.get("headers") {
+                                ws_opts.insert("headers".to_string(), headers.clone());
+                            }
+                            if !ws_opts.is_empty() {
+                                config.insert(
+                                    "ws-opts".to_string(),
+                                    serde_json::Value::Object(ws_opts),
+                                );
+                            }
+                        }
+                        "grpc" => {
+                            let mut grpc_opts = serde_json::Map::new();
+                            if let Some(service_name) = transport_obj.get("service_name") {
+                                grpc_opts
+                                    .insert("grpc-service-name".to_string(), service_name.clone());
+                            }
+                            if !grpc_opts.is_empty() {
+                                config.insert(
+                                    "grpc-opts".to_string(),
+                                    serde_json::Value::Object(grpc_opts),
+                                );
+                            }
+                        }
+                        _ => {}
+                    }
+                }
+            }
+        }
+    }
+
+    /// Process proxy-groups interpolation
+    /// This method processes each proxy-group's proxies field for interpolation expressions
+    pub fn process_proxy_groups(
+        &self,
+        template: &str,
+        sources: &IndexMap<String, Source>,
+    ) -> Result<String> {
+        let mut config: serde_json::Value = serde_json::from_str(template).map_err(|e| {
+            crate::core::error::ConvertError::ConfigValidationError(format!(
+                "Failed to parse template as JSON: {}",
+                e
+            ))
+        })?;
+
+        if let Some(proxy_groups) = config
+            .get_mut("proxy-groups")
+            .and_then(|v| v.as_array_mut())
+        {
+            for group in proxy_groups.iter_mut() {
+                if let Some(group_obj) = group.as_object_mut() {
+                    if let Some(proxies) = group_obj.get_mut("proxies") {
+                        self.process_proxies_field(proxies, sources)?;
+                    }
+                }
+            }
+        }
+
+        serde_json::to_string_pretty(&config).map_err(|e| {
+            crate::core::error::ConvertError::ConfigValidationError(format!(
+                "Failed to serialize config: {}",
+                e
+            ))
+        })
+    }
+
+    /// Process a proxies field (can be array or string with interpolation)
+    fn process_proxies_field(
+        &self,
+        proxies: &mut serde_json::Value,
+        sources: &IndexMap<String, Source>,
+    ) -> Result<()> {
+        match proxies {
+            serde_json::Value::Array(arr) => {
+                let mut new_arr = Vec::new();
+                for item in arr.iter() {
+                    if let Some(s) = item.as_str() {
+                        if s.starts_with("{{") && s.ends_with("}}") {
+                            // Parse and process interpolation
+                            if let Ok(rule) = InterpolationParser::parse(s) {
+                                let nodes = self.get_nodes_for_rule(&rule, sources)?;
+                                for node in nodes {
+                                    new_arr.push(serde_json::Value::String(node.name));
+                                }
+                            } else {
+                                new_arr.push(item.clone());
+                            }
+                        } else {
+                            new_arr.push(item.clone());
+                        }
+                    } else {
+                        new_arr.push(item.clone());
+                    }
+                }
+                *proxies = serde_json::Value::Array(new_arr);
+            }
+            serde_json::Value::String(s) => {
+                if s.starts_with("{{") && s.ends_with("}}") {
+                    // Parse and process interpolation
+                    if let Ok(rule) = InterpolationParser::parse(s) {
+                        let nodes = self.get_nodes_for_rule(&rule, sources)?;
+                        let names: Vec<serde_json::Value> = nodes
+                            .iter()
+                            .map(|n| serde_json::Value::String(n.name.clone()))
+                            .collect();
+                        *proxies = serde_json::Value::Array(names);
+                    }
+                }
+            }
+            _ => {}
+        }
+        Ok(())
+    }
+}
diff --git a/src/protocols/detect.rs b/src/protocols/detect.rs
new file mode 100644
index 0000000..f61c597
--- /dev/null
+++ b/src/protocols/detect.rs
@@ -0,0 +1,173 @@
+//! Format detection for proxy configuration content.
+//!
+//! Detects clash, singbox, v2ray, subscription (base64), and plain text formats
+//! without parsing full content. Used by ProtocolRegistry and TemplateEngine.
+
+use crate::core::error::Result;
+use serde_json::Value as JsonValue;
+
+/// Detect content format. Returns (format_key, description) or None if unknown.
+pub fn detect_format(content: &str) -> Result<Option<(String, String)>> {
+    let content = content.trim();
+
+    if let Ok(json_value) = serde_json::from_str::<JsonValue>(content) {
+        if is_clash_format(&json_value) {
+            return Ok(Some((
+                "clash".to_string(),
+                "Clash configuration".to_string(),
+            )));
+        }
+        if is_singbox_format(&json_value) {
+            return Ok(Some((
+                "singbox".to_string(),
+                "Sing-box configuration".to_string(),
+            )));
+        }
+        if is_v2ray_format(&json_value) {
+            return Ok(Some((
+                "v2ray".to_string(),
+                "V2Ray configuration".to_string(),
+            )));
+        }
+    }
+
+    if let Ok(yaml_value) = serde_yaml::from_str::<JsonValue>(content) {
+        if is_clash_format(&yaml_value) {
+            return Ok(Some((
+                "clash".to_string(),
+                "Clash configuration (YAML)".to_string(),
+            )));
+        }
+        if is_singbox_format(&yaml_value) {
+            return Ok(Some((
+                "singbox".to_string(),
+                "Sing-box configuration (YAML)".to_string(),
+            )));
+        }
+        if is_v2ray_format(&yaml_value) {
+            return Ok(Some((
+                "v2ray".to_string(),
+                "V2Ray configuration (YAML)".to_string(),
+            )));
+        }
+    }
+
+    if is_subscription_format(content) {
+        return Ok(Some((
+            "subscription".to_string(),
+            "Subscription format (base64)".to_string(),
+        )));
+    }
+
+    if is_plain_text_format(content) {
+        return Ok(Some((
+            "plain".to_string(),
+            "Plain text format".to_string(),
+        )));
+    }
+
+    Ok(None)
+}
+
+pub fn is_clash_format(json: &JsonValue) -> bool {
+    json.get("port").is_some()
+        || json.get("socks-port").is_some()
+        || json.get("mixed-port").is_some()
+        || json.get("external-controller").is_some()
+        || json.get("proxies").is_some()
+        || json.get("proxy-groups").is_some()
+}
+
+pub fn is_singbox_format(json: &JsonValue) -> bool {
+    let has_singbox_fields = json.get("experimental").is_some()
+        || json.get("dns").is_some()
+        || json.get("route").is_some();
+
+    has_singbox_fields
+        || (json.get("log").is_some()
+            && json.get("inbounds").is_some()
+            && json.get("outbounds").is_some()
+            && json.get("routing").is_none())
+}
+
+pub fn is_v2ray_format(json: &JsonValue) -> bool {
+    let has_v2ray_fields = json.get("routing").is_some()
+        || json.get("api").is_some()
+        || json.get("stats").is_some();
+
+    has_v2ray_fields
+        || (json.get("log").is_some()
+            && json.get("inbounds").is_some()
+            && json.get("outbounds").is_some()
+            && json.get("routing").is_some())
+}
+
+pub fn is_subscription_format(content: &str) -> bool {
+    content.starts_with("vmess://")
+        || content.starts_with("trojan://")
+        || content.starts_with("ss://")
+        || content.starts_with("ssr://")
+        || content.starts_with("http://")
+        || content.starts_with("https://")
+        || is_base64_encoded(content)
+}
+
+pub fn is_plain_text_format(content: &str) -> bool {
+    let lines: Vec<&str> = content.lines().collect();
+    if lines.len() < 2 {
+        return false;
+    }
+    lines.iter().take(3).any(|line| {
+        let line = line.trim();
+        !line.is_empty()
+            && !line.starts_with('#')
+            && (line.starts_with("vmess://")
+                || line.starts_with("trojan://")
+                || line.starts_with("ss://")
+                || line.starts_with("ssr://")
+                || line.starts_with("http://")
+                || line.starts_with("https://"))
+    })
+}
+
+pub fn is_base64_encoded(s: &str) -> bool {
+    let trimmed: String = s.chars().filter(|c| !c.is_whitespace()).collect();
+    if trimmed.is_empty() || trimmed.len() % 4 != 0 {
+        return false;
+    }
+    let base64_chars = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=";
+    trimmed.chars().all(|c| base64_chars.contains(c))
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    #[test]
+    fn test_detect_clash_json() {
+        let content = r#"{"port": 7890, "proxies": []}"#;
+        let r = detect_format(content).unwrap();
+        assert_eq!(r.as_ref().map(|(k, _)| k.as_str()), Some("clash"));
+    }
+
+    #[test]
+    fn test_detect_singbox_json() {
+        let content = r#"{"log": {}, "inbounds": [], "outbounds": []}"#;
+        let r = detect_format(content).unwrap();
+        assert_eq!(r.as_ref().map(|(k, _)| k.as_str()), Some("singbox"));
+    }
+
+    #[test]
+    fn test_detect_subscription_prefix() {
+        let content = "vmess://abc@host:443#name";
+        let r = detect_format(content).unwrap();
+        assert_eq!(r.as_ref().map(|(k, _)| k.as_str()), Some("subscription"));
+    }
+
+    #[test]
+    fn test_is_base64_encoded() {
+        assert!(is_base64_encoded("YWJj")); // abc
+        assert!(!is_base64_encoded("ab"));
+        assert!(!is_base64_encoded("!!!"));
+    }
+}
diff --git a/src/protocols/mod.rs b/src/protocols/mod.rs
new file mode 100644
index 0000000..ad8ed0b
--- /dev/null
+++ b/src/protocols/mod.rs
@@ -0,0 +1,618 @@
+//! Protocol Module - Handle conversion between different proxy configuration formats.
+//!
+//! - **detect**: Format detection (clash/singbox/v2ray/subscription/plain).
+//! - **subscription**: Parse subscription and plain-text proxy URLs.
+//! - **Registry**: Holds ProtocolProcessors and delegates parsing to protocol submodules and subscription.
+
+pub mod clash;
+pub mod detect;
+pub mod singbox;
+pub mod subscription;
+pub mod v2ray;
+
+use crate::core::error::Result;
+use crate::utils::source::parser::Source;
+use crate::utils::template::interpolation_parser::InterpolationRule;
+use indexmap::IndexMap;
+use serde::{Deserialize, Serialize};
+use std::collections::HashMap;
+
+/// Proxy server information
+#[derive(Debug, Clone, PartialEq, Serialize, Deserialize)]
+pub struct ProxyServer {
+    /// Server name
+    pub name: String,
+    /// Server type
+    pub protocol: String,
+    /// Server address
+    pub server: String,
+    /// Server port
+    pub port: u16,
+    /// Password (if needed)
+    pub password: Option<String>,
+    /// Encryption method (if needed)
+    pub method: Option<String>,
+    /// Additional parameters
+    pub parameters: HashMap<String, serde_json::Value>,
+}
+
+/// Protocol processor trait - each protocol implements this for template processing.
+pub trait ProtocolProcessor: Send + Sync {
+    /// Process interpolation rules for this protocol
+    fn process_rule(
+        &self,
+        rule: &InterpolationRule,
+        sources: &IndexMap<String, Source>,
+    ) -> Result<String>;
+
+    /// Get nodes for a specific rule
+    fn get_nodes_for_rule(
+        &self,
+        rule: &InterpolationRule,
+        sources: &IndexMap<String, Source>,
+    ) -> Result<Vec<ProxyServer>>;
+
+    /// Process default field values
+    fn set_default_values(
+        &self,
+        template: &str,
+        nodes: &[ProxyServer],
+    ) -> Result<String>;
+
+    /// Append nodes to the configuration
+    fn append_nodes(
+        &self,
+        template: &str,
+        nodes: &[ProxyServer],
+    ) -> Result<String>;
+
+    /// Create node configuration for this protocol
+    fn create_node_config(&self, node: &ProxyServer) -> String;
+}
+
+/// Protocol converter registry: format detection, parsing, and processor lookup.
+pub struct ProtocolRegistry {
+    processors: HashMap<String, Box<dyn ProtocolProcessor>>,
+}
+
+impl ProtocolRegistry {
+    /// Create new empty registry (for tests or custom setup).
+    pub fn new() -> Self {
+        Self {
+            processors: HashMap::new(),
+        }
+    }
+
+    /// Register a processor for a format name (e.g. "clash", "singbox", "v2ray").
+    pub fn register(&mut self, format: &str, processor: Box<dyn ProtocolProcessor>) {
+        self.processors.insert(format.to_lowercase(), processor);
+    }
+
+    /// Get processor by format name. Used by TemplateEngine.
+    pub fn get_processor(&self, format: &str) -> Option<&dyn ProtocolProcessor> {
+        self.processors.get(&format.to_lowercase()).map(|b| b.as_ref())
+    }
+
+    /// Parse content to ProxyServer list based on format
+    pub fn parse_content(&self, content: &str, format: &str) -> Result<Vec<ProxyServer>> {
+        tracing::info!("Parsing content with format: {}", format);
+
+        match format.to_lowercase().as_str() {
+            "clash" => self.parse_clash_format(content),
+            "singbox" => self.parse_singbox_format(content),
+            "v2ray" => self.parse_v2ray_format(content),
+            "subscription" => self.parse_subscription_format(content),
+            "plain" => self.parse_plain_text_format(content),
+            _ => Err(crate::core::error::ConvertError::ConfigValidationError(
+                format!("Unsupported input format: {}", format),
+            )),
+        }
+    }
+
+    /// Parse content to full configuration based on format
+    pub fn parse_content_to_config(
+        &self,
+        content: &str,
+        format: &str,
+    ) -> Result<serde_json::Value> {
+        tracing::info!("Parsing content to config with format: {}", format);
+
+        match format.to_lowercase().as_str() {
+            "clash" => self.parse_clash_config(content),
+            "singbox" => self.parse_singbox_config(content),
+            "v2ray" => self.parse_v2ray_config(content),
+            "subscription" => self.parse_subscription_config(content),
+            "plain" => self.parse_plain_text_config(content),
+            _ => Err(crate::core::error::ConvertError::ConfigValidationError(
+                format!("Unsupported input format: {}", format),
+            )),
+        }
+    }
+
+    /// Auto-detect input format (delegates to detect module).
+    pub fn auto_detect_format(&self, content: &str) -> Result<Option<(String, String)>> {
+        detect::detect_format(content)
+    }
+
+    /// Initialize protocol registry with built-in processors (clash, singbox, v2ray).
+    pub fn init() -> Self {
+        let mut registry = Self::new();
+        registry.register("clash", Box::new(clash::template_processor::ClashProcessor));
+        registry.register("singbox", Box::new(singbox::template_processor::SingboxProcessor));
+        registry.register("v2ray", Box::new(v2ray::template_processor::V2RayProcessor));
+        tracing::info!("Protocol registry initialized successfully");
+        registry
+    }
+
+    /// Parse Clash format configuration
+    fn parse_clash_format(&self, content: &str) -> Result<Vec<ProxyServer>> {
+        tracing::info!("Parsing Clash format configuration");
+
+        // Try to parse as JSON first
+        if let Ok(config) = serde_json::from_str::<clash::Config>(content) {
+            return self.convert_clash_config_to_servers(&config);
+        }
+
+        // Try to parse as YAML
+        if let Ok(config) = serde_yaml::from_str::<clash::Config>(content) {
+            return self.convert_clash_config_to_servers(&config);
+        }
+
+        Err(crate::core::error::ConvertError::ConfigValidationError(
+            "Failed to parse Clash configuration".to_string(),
+        ))
+    }
+
+    /// Parse Clash format configuration to JSON
+    fn parse_clash_config(&self, content: &str) -> Result<serde_json::Value> {
+        tracing::info!("Parsing Clash format configuration to JSON");
+
+        // Try to parse as JSON first
+        if let Ok(config) = serde_json::from_str::<serde_json::Value>(content) {
+            return Ok(config);
+        }
+
+        // Try to parse as YAML
+        if let Ok(config) = serde_yaml::from_str::<serde_json::Value>(content) {
+            return Ok(config);
+        }
+
+        Err(crate::core::error::ConvertError::ConfigValidationError(
+            "Failed to parse Clash configuration".to_string(),
+        ))
+    }
+
+    /// Parse Sing-box format configuration
+    fn parse_singbox_format(&self, content: &str) -> Result<Vec<ProxyServer>> {
+        tracing::info!("Parsing Sing-box format configuration");
+
+        // Try to parse as JSON first
+        if let Ok(config) = serde_json::from_str::<serde_json::Value>(content) {
+            return self.convert_singbox_config_to_servers(&config);
+        }
+
+        // Try to parse as YAML
+        if let Ok(config) = serde_yaml::from_str::<serde_json::Value>(content) {
+            return self.convert_singbox_config_to_servers(&config);
+        }
+
+        Err(crate::core::error::ConvertError::ConfigValidationError(
+            "Failed to parse Sing-box configuration".to_string(),
+        ))
+    }
+
+    /// Parse Sing-box format configuration to JSON
+    fn parse_singbox_config(&self, content: &str) -> Result<serde_json::Value> {
+        tracing::info!("Parsing Sing-box format configuration to JSON");
+
+        // Try to parse as JSON first
+        if let Ok(config) = serde_json::from_str::<serde_json::Value>(content) {
+            return Ok(config);
+        }
+
+        // Try to parse as YAML
+        if let Ok(config) = serde_yaml::from_str::<serde_json::Value>(content) {
+            return Ok(config);
+        }
+
+        Err(crate::core::error::ConvertError::ConfigValidationError(
+            "Failed to parse Sing-box configuration".to_string(),
+        ))
+    }
+
+    /// Parse V2Ray format configuration
+    fn parse_v2ray_format(&self, content: &str) -> Result<Vec<ProxyServer>> {
+        tracing::info!("Parsing V2Ray format configuration");
+
+        // Try to parse as JSON first
+        if let Ok(config) = serde_json::from_str::<serde_json::Value>(content) {
+            return self.convert_v2ray_config_to_servers(&config);
+        }
+
+        // Try to parse as YAML
+        if let Ok(config) = serde_yaml::from_str::<serde_json::Value>(content) {
+            return self.convert_v2ray_config_to_servers(&config);
+        }
+
+        Err(crate::core::error::ConvertError::ConfigValidationError(
+            "Failed to parse V2Ray configuration".to_string(),
+        ))
+    }
+
+    /// Parse V2Ray format configuration to JSON
+    fn parse_v2ray_config(&self, content: &str) -> Result<serde_json::Value> {
+        tracing::info!("Parsing V2Ray format configuration to JSON");
+
+        // Try to parse as JSON first
+        if let Ok(config) = serde_json::from_str::<serde_json::Value>(content) {
+            return Ok(config);
+        }
+
+        // Try to parse as YAML
+        if let Ok(config) = serde_yaml::from_str::<serde_json::Value>(content) {
+            return Ok(config);
+        }
+
+        Err(crate::core::error::ConvertError::ConfigValidationError(
+            "Failed to parse V2Ray configuration".to_string(),
+        ))
+    }
+
+    /// Parse subscription format (delegates to subscription module).
+    fn parse_subscription_format(&self, content: &str) -> Result<Vec<ProxyServer>> {
+        tracing::info!("Parsing subscription format configuration");
+        subscription::parse_subscription(content)
+    }
+
+    /// Parse subscription format configuration to JSON
+    fn parse_subscription_config(&self, content: &str) -> Result<serde_json::Value> {
+        tracing::info!("Parsing subscription format configuration to JSON");
+
+        // For subscription format, we create a simple config with the servers
+        let servers = self.parse_subscription_format(content)?;
+        let config = serde_json::json!({
+            "proxies": servers
+        });
+        Ok(config)
+    }
+
+    /// Parse plain text format (delegates to subscription module).
+    fn parse_plain_text_format(&self, content: &str) -> Result<Vec<ProxyServer>> {
+        tracing::info!("Parsing plain text format configuration");
+        subscription::parse_plain_text(content)
+    }
+
+    /// Parse plain text format configuration to JSON
+    fn parse_plain_text_config(&self, content: &str) -> Result<serde_json::Value> {
+        tracing::info!("Parsing plain text format configuration to JSON");
+
+        // For plain text format, we create a simple config with the servers
+        let servers = self.parse_plain_text_format(content)?;
+        let config = serde_json::json!({
+            "proxies": servers
+        });
+        Ok(config)
+    }
+
+    /// Convert Clash config to ProxyServer list
+    fn convert_clash_config_to_servers(&self, config: &clash::Config) -> Result<Vec<ProxyServer>> {
+        let mut servers = Vec::new();
+
+        for proxy in &config.proxies {
+            let server = self.convert_clash_proxy_to_server(proxy)?;
+            servers.push(server);
+        }
+
+        Ok(servers)
+    }
+
+    /// Convert Clash proxy to ProxyServer
+    fn convert_clash_proxy_to_server(&self, proxy: &clash::proxy::Proxy) -> Result<ProxyServer> {
+        let (protocol, server, port, password, method, parameters) = match proxy {
+            clash::proxy::Proxy::Ss(ss) => {
+                let mut params = HashMap::new();
+                params.insert(
+                    "cipher".to_string(),
+                    serde_json::Value::String(ss.cipher.clone()),
+                );
+                if let Some(udp) = ss.udp {
+                    params.insert("udp".to_string(), serde_json::Value::Bool(udp));
+                }
+
+                (
+                    "shadowsocks".to_string(),
+                    ss.server.clone(),
+                    ss.port,
+                    Some(ss.password.clone()),
+                    Some(ss.cipher.clone()),
+                    params,
+                )
+            }
+            clash::proxy::Proxy::Vmess(vmess) => {
+                let mut params = HashMap::new();
+                if let Some(uuid) = &vmess.uuid {
+                    params.insert("uuid".to_string(), serde_json::Value::String(uuid.clone()));
+                }
+                if let Some(alter_id) = vmess.alter_id {
+                    params.insert(
+                        "alterId".to_string(),
+                        serde_json::Value::Number(serde_json::Number::from(alter_id)),
+                    );
+                }
+
+                (
+                    "vmess".to_string(),
+                    vmess.server.clone(),
+                    vmess.port,
+                    None,
+                    None,
+                    params,
+                )
+            }
+            clash::proxy::Proxy::Trojan(trojan) => {
+                let mut params = HashMap::new();
+                if let Some(password) = &trojan.password {
+                    params.insert(
+                        "password".to_string(),
+                        serde_json::Value::String(password.clone()),
+                    );
+                }
+                if let Some(sni) = &trojan.sni {
+                    params.insert("sni".to_string(), serde_json::Value::String(sni.clone()));
+                }
+
+                (
+                    "trojan".to_string(),
+                    trojan.server.clone(),
+                    trojan.port,
+                    trojan.password.clone(),
+                    None,
+                    params,
+                )
+            }
+            clash::proxy::Proxy::Socks5(socks5) => {
+                let mut params = HashMap::new();
+                if let Some(username) = &socks5.username {
+                    params.insert(
+                        "username".to_string(),
+                        serde_json::Value::String(username.clone()),
+                    );
+                }
+                if let Some(password) = &socks5.password {
+                    params.insert(
+                        "password".to_string(),
+                        serde_json::Value::String(password.clone()),
+                    );
+                }
+
+                (
+                    "socks5".to_string(),
+                    socks5.server.clone(),
+                    socks5.port,
+                    None,
+                    None,
+                    params,
+                )
+            }
+            _ => {
+                tracing::warn!("Unsupported Clash proxy type: {:?}", proxy);
+                return Err(crate::core::error::ConvertError::ConfigValidationError(
+                    format!("Unsupported Clash proxy type: {:?}", proxy),
+                ));
+            }
+        };
+
+        Ok(ProxyServer {
+            name: proxy.name().to_string(),
+            protocol,
+            server,
+            port,
+            password,
+            method,
+            parameters,
+        })
+    }
+
+    /// Convert Sing-box config to ProxyServer list
+    fn convert_singbox_config_to_servers(
+        &self,
+        config: &serde_json::Value,
+    ) -> Result<Vec<ProxyServer>> {
+        let mut servers = Vec::new();
+
+        if let Some(outbounds) = config.get("outbounds").and_then(|v| v.as_array()) {
+            for outbound in outbounds {
+                if let Some(server) = self.convert_singbox_outbound_to_server(outbound)? {
+                    servers.push(server);
+                }
+            }
+        }
+
+        Ok(servers)
+    }
+
+    /// Convert Sing-box outbound to ProxyServer
+    fn convert_singbox_outbound_to_server(
+        &self,
+        outbound: &serde_json::Value,
+    ) -> Result<Option<ProxyServer>> {
+        let outbound_type = outbound.get("type").and_then(|v| v.as_str()).unwrap_or("");
+
+        match outbound_type {
+            "shadowsocks" => {
+                let name = outbound
+                    .get("tag")
+                    .and_then(|v| v.as_str())
+                    .unwrap_or("")
+                    .to_string();
+                let server = outbound
+                    .get("server")
+                    .and_then(|v| v.as_str())
+                    .unwrap_or("")
+                    .to_string();
+                let port = outbound.get("port").and_then(|v| v.as_u64()).unwrap_or(0) as u16;
+                let password = outbound
+                    .get("password")
+                    .and_then(|v| v.as_str())
+                    .map(|s| s.to_string());
+                let method = outbound
+                    .get("method")
+                    .and_then(|v| v.as_str())
+                    .map(|s| s.to_string());
+
+                let mut parameters = HashMap::new();
+                if let Some(udp) = outbound.get("udp") {
+                    parameters.insert("udp".to_string(), udp.clone());
+                }
+
+                Ok(Some(ProxyServer {
+                    name,
+                    protocol: "shadowsocks".to_string(),
+                    server,
+                    port,
+                    password,
+                    method,
+                    parameters,
+                }))
+            }
+            "vmess" => {
+                let name = outbound
+                    .get("tag")
+                    .and_then(|v| v.as_str())
+                    .unwrap_or("")
+                    .to_string();
+                let server = outbound
+                    .get("server")
+                    .and_then(|v| v.as_str())
+                    .unwrap_or("")
+                    .to_string();
+                let port = outbound.get("port").and_then(|v| v.as_u64()).unwrap_or(0) as u16;
+                let uuid = outbound
+                    .get("uuid")
+                    .and_then(|v| v.as_str())
+                    .unwrap_or("")
+                    .to_string();
+
+                let mut parameters = HashMap::new();
+                parameters.insert("uuid".to_string(), serde_json::Value::String(uuid));
+                if let Some(security) = outbound.get("security") {
+                    parameters.insert("security".to_string(), security.clone());
+                }
+
+                Ok(Some(ProxyServer {
+                    name,
+                    protocol: "vmess".to_string(),
+                    server,
+                    port,
+                    password: None,
+                    method: None,
+                    parameters,
+                }))
+            }
+            _ => {
+                tracing::warn!("Unsupported Sing-box outbound type: {}", outbound_type);
+                Ok(None)
+            }
+        }
+    }
+
+    /// Convert V2Ray config to ProxyServer list
+    fn convert_v2ray_config_to_servers(
+        &self,
+        config: &serde_json::Value,
+    ) -> Result<Vec<ProxyServer>> {
+        let mut servers = Vec::new();
+
+        if let Some(outbounds) = config.get("outbounds").and_then(|v| v.as_array()) {
+            for outbound in outbounds {
+                if let Some(server) = self.convert_v2ray_outbound_to_server(outbound)? {
+                    servers.push(server);
+                }
+            }
+        }
+
+        Ok(servers)
+    }
+
+    /// Convert V2Ray outbound to ProxyServer
+    fn convert_v2ray_outbound_to_server(
+        &self,
+        outbound: &serde_json::Value,
+    ) -> Result<Option<ProxyServer>> {
+        let protocol = outbound
+            .get("protocol")
+            .and_then(|v| v.as_str())
+            .unwrap_or("");
+
+        match protocol {
+            "vmess" => {
+                let name = outbound
+                    .get("tag")
+                    .and_then(|v| v.as_str())
+                    .unwrap_or("")
+                    .to_string();
+                let settings = outbound
+                    .get("settings")
+                    .and_then(|v| v.get("vnext"))
+                    .and_then(|v| v.as_array())
+                    .and_then(|v| v.first())
+                    .and_then(|v| v.get("users"))
+                    .and_then(|v| v.as_array())
+                    .and_then(|v| v.first());
+
+                if let Some(user) = settings {
+                    let uuid = user
+                        .get("id")
+                        .and_then(|v| v.as_str())
+                        .unwrap_or("")
+                        .to_string();
+                    let alter_id = user.get("alterId").and_then(|v| v.as_u64()).unwrap_or(0);
+
+                    let mut parameters = HashMap::new();
+                    parameters.insert("uuid".to_string(), serde_json::Value::String(uuid));
+                    parameters.insert(
+                        "alterId".to_string(),
+                        serde_json::Value::Number(serde_json::Number::from(alter_id)),
+                    );
+
+                    let stream_settings = outbound.get("streamSettings");
+                    if let Some(security) = stream_settings.and_then(|v| v.get("security")) {
+                        parameters.insert("security".to_string(), security.clone());
+                    }
+
+                    Ok(Some(ProxyServer {
+                        name,
+                        protocol: "vmess".to_string(),
+                        server: "".to_string(), // V2Ray config doesn't have server in outbound
+                        port: 0,                // V2Ray config doesn't have port in outbound
+                        password: None,
+                        method: None,
+                        parameters,
+                    }))
+                } else {
+                    Ok(None)
+                }
+            }
+            _ => {
+                tracing::warn!("Unsupported V2Ray protocol: {}", protocol);
+                Ok(None)
+            }
+        }
+    }
+
+    /// Parse subscription format to ProxyServer list. Public API for SourceLoader.
+    pub fn parse_subscription_to_servers(&self, content: &str) -> Result<Vec<ProxyServer>> {
+        self.parse_subscription_format(content)
+    }
+
+    /// Parse plain text format to ProxyServer list. Public API for SourceLoader.
+    pub fn parse_plain_text_to_servers(&self, content: &str) -> Result<Vec<ProxyServer>> {
+        self.parse_plain_text_format(content)
+    }
+}
+
+impl Default for ProtocolRegistry {
+    fn default() -> Self {
+        Self::new()
+    }
+}
diff --git a/src/protocols/singbox/certificate.rs b/src/protocols/singbox/certificate.rs
new file mode 100644
index 0000000..2f41fc4
--- /dev/null
+++ b/src/protocols/singbox/certificate.rs
@@ -0,0 +1,20 @@
+use serde::{Deserialize, Serialize};
+use serde_with::skip_serializing_none;
+
+#[skip_serializing_none]
+#[derive(Serialize, Deserialize, Debug, Clone)]
+pub struct Certificate {
+    pub store: Option<StoreType>,
+    pub certificate: Option<Vec<String>>,
+    pub certificate_path: Option<Vec<String>>,
+    pub certificate_directory_path: Option<Vec<String>>,
+}
+
+#[derive(Serialize, Deserialize, Debug, Clone)]
+#[serde(rename_all = "lowercase")]
+pub enum StoreType {
+    System,
+    Mozilla,
+    Chrome,
+    None,
+}
\ No newline at end of file
diff --git a/src/protocols/singbox/common/base.rs b/src/protocols/singbox/common/base.rs
new file mode 100644
index 0000000..a4b9185
--- /dev/null
+++ b/src/protocols/singbox/common/base.rs
@@ -0,0 +1,167 @@
+use serde::{Deserialize, Serialize};
+use serde_with::skip_serializing_none;
+
+#[derive(Serialize, Deserialize, Debug, Clone)]
+#[serde(rename_all = "snake_case")]
+pub enum Strategy {
+    PreferIpv4,
+    PreferIpv6,
+    Ipv4Only,
+    Ipv6Only,
+}
+
+impl Default for Strategy {
+    fn default() -> Self {
+        Strategy::PreferIpv4
+    }
+}
+
+#[derive(Serialize, Deserialize, Debug, Clone)]
+#[serde(untagged)]
+pub enum SingleOrMultipleValue<T = String> {
+    Single(T),
+    Multiple(Vec<T>),
+}
+
+impl Default for SingleOrMultipleValue {
+    fn default() -> Self {
+        SingleOrMultipleValue::Multiple(vec![])
+    }
+}
+
+#[derive(Serialize, Deserialize, Debug, Clone)]
+pub enum IpVersion {
+    V4 = 4,
+    V6 = 6,
+}
+
+#[derive(Serialize, Deserialize, Debug, Clone)]
+#[serde(untagged)]
+pub enum QueryType {
+    Code(u16),
+    Name(String),
+}
+
+#[derive(Serialize, Deserialize, Debug, Clone)]
+#[serde(rename_all = "snake_case")]
+pub enum Network {
+    Tcp,
+    Udp,
+}
+
+impl Default for Network {
+    fn default() -> Self {
+        Network::Tcp
+    }
+}
+
+#[derive(Serialize, Deserialize, Debug, Clone)]
+#[serde(rename_all = "lowercase")]
+pub enum LogicalMode {
+    And,
+    Or,
+}
+
+#[skip_serializing_none]
+#[derive(Serialize, Deserialize, Debug, Clone)]
+pub struct Handshake {
+    pub server: String,
+    pub server_port: u16,
+
+    #[serde(flatten)]
+    pub dial_params: Option<DialParams>,
+}
+
+#[derive(Serialize, Deserialize, Debug, Clone)]
+#[serde(rename_all = "lowercase")]
+pub enum Stack {
+    System,
+    Gvisor,
+    Mixed,
+}
+
+impl Default for Stack {
+    fn default() -> Self {
+        Stack::Mixed
+    }
+}
+
+#[skip_serializing_none]
+#[derive(Default, Serialize, Deserialize, Debug, Clone)]
+pub struct ListenParams {
+    listen: Option<String>,
+    listen_port: Option<u16>,
+    bind_interface: Option<String>,
+    routing_mark: Option<u32>,
+    reuse_addr: Option<bool>,
+    netns: Option<String>,
+    tcp_fast_open: Option<bool>,
+    tcp_multi_path: Option<bool>,
+    disable_tcp_keep_alive: Option<bool>,
+    tcp_keep_alive: Option<String>,
+    tcp_keep_alive_interval: Option<String>,
+    udp_fragment: Option<bool>,
+    udp_timeout: Option<String>,
+    detour: Option<String>,
+}
+
+#[skip_serializing_none]
+#[derive(Default, Serialize, Deserialize, Debug, Clone)]
+pub struct DialParams {
+    pub detour: Option<String>,
+    pub bind_interface: Option<String>,
+    pub inet4_bind_address: Option<String>,
+    pub inet6_bind_address: Option<String>,
+    /// Only supported on Linux.
+    pub routing_mark: Option<usize>,
+    pub reuse_addr: Option<bool>,
+    /// Only supported on Linux.
+    pub netns: Option<String>,
+    pub connect_timeout: Option<String>,
+    pub tcp_fast_open: Option<bool>,
+    pub tcp_multi_path: Option<bool>,
+    pub disable_tcp_keep_alive: Option<bool>,
+    pub tcp_keep_alive: Option<String>,
+    pub tcp_keep_alive_interval: Option<String>,
+    pub udp_fragment: Option<bool>,
+    pub domain_resolver: Option<DomainResolver>,
+    pub network_strategy: Option<NetworkStrategy>,
+    pub network_type: Option<Vec<NetworkType>>,
+    pub fallback_network_type: Option<Vec<NetworkType>>,
+    pub fallback_delay: Option<u64>,
+}
+
+#[skip_serializing_none]
+#[derive(Default, Serialize, Deserialize, Debug, Clone)]
+pub struct DomainResolver {
+    pub server: String,
+    pub strategy: Option<Strategy>,
+    pub disable_cache: Option<bool>,
+    pub rewrite_ttl: Option<u32>,
+    pub client_subnet: Option<String>,
+}
+
+#[derive(Serialize, Deserialize, Debug, Clone)]
+#[serde(rename_all = "snake_case")]
+pub enum NetworkStrategy {
+    Default,
+    Hybrid,
+    Fallback,
+}
+
+#[derive(Serialize, Deserialize, Debug, Clone)]
+#[serde(rename_all = "snake_case")]
+pub enum NetworkType {
+    Wifi,
+    Cellular,
+    Ethernet,
+    Other,
+}
+
+#[derive(Serialize, Deserialize, Debug, Clone)]
+#[serde(rename_all = "snake_case")]
+pub enum ClashMode {
+    Direct,
+    Global,
+    Rule,
+}
\ No newline at end of file
diff --git a/src/singbox/common/mod.rs b/src/protocols/singbox/common/mod.rs
similarity index 100%
rename from src/singbox/common/mod.rs
rename to src/protocols/singbox/common/mod.rs
diff --git a/src/singbox/common/multiplex.rs b/src/protocols/singbox/common/multiplex.rs
similarity index 69%
rename from src/singbox/common/multiplex.rs
rename to src/protocols/singbox/common/multiplex.rs
index 9e17f1d..daf483d 100644
--- a/src/singbox/common/multiplex.rs
+++ b/src/protocols/singbox/common/multiplex.rs
@@ -1,6 +1,6 @@
 use serde::{Deserialize, Serialize};
 
-#[derive(Serialize, Deserialize, Debug)]
+#[derive(Serialize, Deserialize, Debug, Clone)]
 #[serde(untagged)]
 pub enum Multiplex {
     Inbound {
@@ -11,15 +11,15 @@ pub enum Multiplex {
     Outbound {
         enabled: bool,
         protocol: MultiplexProtocol,
-        max_connections: usize,
-        min_streams: usize,
-        max_streams: usize,
+        max_connections: u32,
+        min_streams: u32,
+        max_streams: u32,
         padding: bool,
         brutal: Brutal,
     },
 }
 
-#[derive(Serialize, Deserialize, Debug)]
+#[derive(Serialize, Deserialize, Debug, Clone)]
 #[serde(rename_all = "lowercase")]
 pub enum MultiplexProtocol {
     Smux,
@@ -33,10 +33,10 @@ impl Default for MultiplexProtocol {
     }
 }
 
-#[derive(Default, Serialize, Deserialize, Debug)]
+#[derive(Default, Serialize, Deserialize, Debug, Clone)]
 pub struct Brutal {
     #[serde(skip_serializing_if = "Option::is_none")]
     enabled: Option<bool>,
-    up_mbps: usize,
-    down_mbps: usize,
+    up_mbps: u32,
+    down_mbps: u32,
 }
diff --git a/src/protocols/singbox/common/tls.rs b/src/protocols/singbox/common/tls.rs
new file mode 100644
index 0000000..097bd4f
--- /dev/null
+++ b/src/protocols/singbox/common/tls.rs
@@ -0,0 +1,172 @@
+use super::base::{SingleOrMultipleValue, Strategy};
+use serde::{Deserialize, Serialize};
+use serde_with::skip_serializing_none;
+
+#[derive(Serialize, Deserialize, Debug, Clone)]
+#[serde(untagged)]
+pub enum Tls {
+    Inbound(Inbound),
+    Outbound(Outbound),
+}
+
+
+#[skip_serializing_none]
+#[derive(Default, Serialize, Deserialize, Debug, Clone)]
+pub struct ACME {
+    domain: Option<Vec<String>>,
+    data_directory: Option<String>,
+    default_server_name: Option<String>,
+    email: Option<String>,
+    provider: Option<String>,
+    disable_http_challenge: Option<bool>,
+    disable_tls_alpn_challenge: Option<bool>,
+    alternative_http_port: Option<u16>,
+    alternative_tls_port: Option<u16>,
+    external_account: Option<ExternalAccount>,
+    dns01_challenge: Option<Dns01Challenge>,
+}
+
+#[derive(Serialize, Deserialize, Debug, Clone)]
+#[serde(tag = "provider", rename_all = "lowercase")]
+pub enum Dns01Challenge {
+    Alidns {
+        access_key_id: String,
+        access_key_secret: String,
+        region_id: String,
+    },
+    Cloudflare {
+        api_token: String,
+    },
+}
+
+#[skip_serializing_none]
+#[derive(Default, Serialize, Deserialize, Debug, Clone)]
+pub struct ExternalAccount {
+    key_id: Option<String>,
+    mac_key: Option<String>,
+}
+
+#[skip_serializing_none]
+#[derive(Default, Serialize, Deserialize, Debug, Clone)]
+pub struct Ech {
+    enabled: Option<bool>,
+    pq_signature_schemes_enabled: Option<bool>,
+    dynamic_record_sizing_disabled: Option<bool>,
+    key: Option<Vec<String>>,
+    key_path: Option<String>,
+}
+
+#[skip_serializing_none]
+#[derive(Default, Serialize, Deserialize, Debug, Clone)]
+pub struct Reality {
+    enabled: Option<bool>,
+    handshake: Option<RealityHandshake>,
+    public_key: Option<String>,
+    private_key: Option<String>,
+    short_id: Option<SingleOrMultipleValue<String>>,
+    max_time_difference: Option<String>,
+}
+
+#[skip_serializing_none]
+#[derive(Default, Serialize, Deserialize, Debug, Clone)]
+pub struct RealityHandshake {
+    server: Option<String>,
+    server_port: Option<u16>,
+    detour: Option<String>,
+    bind_interface: Option<String>,
+    inet4_bind_address: Option<String>,
+    inet6_bind_address: Option<String>,
+    routing_mark: Option<usize>,
+    reuse_addr: Option<bool>,
+    connect_timeout: Option<String>,
+    tcp_fast_open: Option<bool>,
+    tcp_multi_path: Option<bool>,
+    udp_fragment: Option<bool>,
+    domain_strategy: Option<Strategy>,
+    fallback_delay: Option<String>,
+}
+
+
+
+#[skip_serializing_none]
+#[derive(Default, Serialize, Deserialize, Debug, Clone)]
+pub struct OutboundUtils {
+    enabled: Option<bool>,
+    fingerprint: Option<String>,
+}
+
+#[skip_serializing_none]
+#[derive(Serialize, Deserialize, Debug, Clone)]
+pub struct Inbound {
+    pub enabled: Option<bool>,
+    pub certificate: Option<SingleOrMultipleValue<String>>,
+    pub key: Option<SingleOrMultipleValue<String>>,
+    pub key_password: Option<String>,
+    pub fingerprint: Option<TlsFingerprint>,
+    pub alpn: Option<Vec<String>>,
+    pub alpn_mode: Option<AlpnMode>,
+    pub min_version: Option<String>,
+    pub max_version: Option<String>,
+    pub session_ticket: Option<bool>,
+    pub curves: Option<Vec<String>>,
+    pub signature_algorithms: Option<String>,
+    pub key_share_mode: Option<String>,
+    pub only_grease: Option<bool>,
+    pub force_ciphersuites: Option<Vec<String>>,
+    pub session_cache_size: Option<u32>,
+    pub session_cache_timeout: Option<u64>,
+    pub client_auth: Option<bool>,
+    pub client_ca: Option<SingleOrMultipleValue<String>>,
+}
+
+#[skip_serializing_none]
+#[derive(Serialize, Deserialize, Debug, Clone)]
+pub struct Outbound {
+    pub enabled: Option<bool>,
+    pub insecure: Option<bool>,
+    pub server_name: Option<String>,
+    pub certificate: Option<SingleOrMultipleValue<String>>,
+    pub fingerprint: Option<TlsFingerprint>,
+    pub alpn: Option<Vec<String>>,
+    pub alpn_mode: Option<AlpnMode>,
+    pub min_version: Option<String>,
+    pub max_version: Option<String>,
+    pub session_ticket: Option<bool>,
+    pub curves: Option<Vec<String>>,
+    pub signature_algorithms: Option<String>,
+    pub key_share_mode: Option<String>,
+    pub only_grease: Option<bool>,
+    pub force_ciphersuites: Option<Vec<String>>,
+    pub early_data_size: Option<u32>,
+    pub session_cache_size: Option<u32>,
+    pub session_cache_timeout: Option<u64>,
+    pub client_certificate: Option<ClientCertificateConfig>,
+}
+
+#[derive(Debug, Clone, Serialize, Deserialize, PartialEq, Eq)]
+#[serde(rename_all = "kebab-case")]
+pub enum TlsFingerprint {
+    Chrome,
+    Firefox,
+    Safari,
+    Ios,
+    Android,
+    Edge,
+    Random,
+    Randomized,
+}
+
+#[derive(Debug, Clone, Serialize, Deserialize, PartialEq, Eq)]
+#[serde(rename_all = "snake_case")]
+pub enum AlpnMode {
+    Auto,
+    Strict,
+}
+
+#[derive(Debug, Clone, Serialize, Deserialize, Default)]
+pub struct ClientCertificateConfig {
+    pub certificate_path: Option<String>,
+    pub key_path: Option<String>,
+    pub password: Option<String>,
+    pub ocsp_stapling: Option<u64>,
+}
\ No newline at end of file
diff --git a/src/singbox/common/transport.rs b/src/protocols/singbox/common/transport.rs
similarity index 65%
rename from src/singbox/common/transport.rs
rename to src/protocols/singbox/common/transport.rs
index fc8c7e1..1ef7436 100644
--- a/src/singbox/common/transport.rs
+++ b/src/protocols/singbox/common/transport.rs
@@ -1,9 +1,9 @@
 use serde::{Deserialize, Serialize};
 use serde_with::skip_serializing_none;
-use std::collections::HashMap;
+use indexmap::IndexMap;
 
 #[skip_serializing_none]
-#[derive(Serialize, Deserialize, Debug)]
+#[derive(Serialize, Deserialize, Debug, Clone)]
 #[serde(tag = "type", rename_all = "lowercase")]
 pub enum Transport {
     HTTP(HTTP),
@@ -14,31 +14,31 @@ pub enum Transport {
 }
 
 #[skip_serializing_none]
-#[derive(Default, Serialize, Deserialize, Debug)]
+#[derive(Default, Serialize, Deserialize, Debug, Clone)]
 pub struct HTTP {
     host: Option<Vec<String>>,
     path: Option<String>,
     method: Option<String>,
-    headers: Option<HashMap<String, String>>,
+    headers: Option<IndexMap<String, String>>,
     idle_timeout: Option<String>,
     ping_timeout: Option<String>,
 }
 
 #[skip_serializing_none]
-#[derive(Default, Serialize, Deserialize, Debug)]
+#[derive(Default, Serialize, Deserialize, Debug, Clone)]
 pub struct WS {
     path: Option<String>,
-    headers: Option<HashMap<String, String>>,
+    headers: Option<IndexMap<String, String>>,
     max_early_data: Option<usize>,
     early_data_header_name: Option<String>,
 }
 
 #[skip_serializing_none]
-#[derive(Default, Serialize, Deserialize, Debug)]
+#[derive(Default, Serialize, Deserialize, Debug, Clone)]
 pub struct Quic {}
 
 #[skip_serializing_none]
-#[derive(Default, Serialize, Deserialize, Debug)]
+#[derive(Default, Serialize, Deserialize, Debug, Clone)]
 pub struct GRPC {
     service_name: Option<String>,
     idle_timeout: Option<String>,
@@ -47,9 +47,9 @@ pub struct GRPC {
 }
 
 #[skip_serializing_none]
-#[derive(Default, Serialize, Deserialize, Debug)]
+#[derive(Default, Serialize, Deserialize, Debug, Clone)]
 pub struct HttpUpgrade {
     host: Option<String>,
     path: Option<String>,
-    headers: Option<HashMap<String, String>>,
+    headers: Option<IndexMap<String, String>>,
 }
diff --git a/src/protocols/singbox/default_template.rs b/src/protocols/singbox/default_template.rs
new file mode 100644
index 0000000..4924561
--- /dev/null
+++ b/src/protocols/singbox/default_template.rs
@@ -0,0 +1,136 @@
+//! Sing-box default template
+
+/// Generate default Sing-box configuration template
+pub fn generate() -> String {
+    let template = serde_json::json!({
+        "log": {
+            "level": "info",
+            "timestamp": true
+        },
+        "dns": {
+            "servers": [
+                {
+                    "tag": "local",
+                    "address": "223.5.5.5",
+                    "detour": "DIRECT"
+                },
+                {
+                    "tag": "remote",
+                    "address": "8.8.8.8",
+                    "detour": "Proxy"
+                }
+            ],
+            "final": "local",
+            "strategy": "prefer_ipv4",
+            "disable_cache": false,
+            "disable_expire": false,
+            "independent_cache": false,
+            "reverse_mapping": false
+        },
+        "inbounds": [
+            {
+                "type": "tun",
+                "tag": "TUN-IN",
+                "address": ["198.18.0.1/16", "fd00:1::1/64"],
+                "mtu": 9000,
+                "stack": "mixed",
+                "auto_route": true,
+                "strict_route": true,
+                "sniff": true,
+                "sniff_override_destination": true,
+                "endpoint_independent_nat": true
+            }
+        ],
+        "outbounds": [
+            {
+                "tag": "DIRECT",
+                "type": "direct"
+            },
+            {
+                "tag": "REJECT",
+                "type": "block"
+            },
+            {
+                "tag": "Proxy",
+                "type": "selector",
+                "interrupt_exist_connections": true,
+                "default": "Auto",
+                "outbounds": ["Auto", "Manual"]
+            },
+            {
+                "tag": "Auto",
+                "type": "urltest",
+                "url": "https://www.gstatic.com/generate_204",
+                "interval": "3m",
+                "tolerance": 50,
+                "idle_timeout": "5m",
+                "interrupt_exist_connections": true,
+                "outbounds": ["{{ALL-TAG}}"]
+            },
+            {
+                "tag": "Manual",
+                "type": "selector",
+                "interrupt_exist_connections": true,
+                "default": "",
+                "outbounds": ["{{ALL-TAG}}"]
+            }
+        ],
+        "route": {
+            "default_domain_resolver": {
+                "server": "local"
+            },
+            "rules": [
+                {"action": "sniff"},
+                {"action": "hijack-dns", "protocol": "dns"},
+                {"clash_mode": "global", "action": "route", "outbound": "Proxy"},
+                {"clash_mode": "direct", "action": "route", "outbound": "DIRECT"},
+                {"rule_set": "ads", "action": "reject", "method": "default", "no_drop": false},
+                {
+                    "rule_set": ["microsoft-cn", "games-cn", "network-test", "applications", "cn", "cn-ip", "private-ip", "private"],
+                    "action": "route",
+                    "outbound": "DIRECT"
+                },
+                {
+                    "rule_set": ["proxy", "telegram-ip"],
+                    "action": "route",
+                    "outbound": "Proxy"
+                }
+            ],
+            "rule_set": [
+                {"tag": "ads", "type": "remote", "format": "binary", "url": "https://cdn.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/ads.srs", "download_detour": "Proxy", "update_interval": "1d"},
+                {"tag": "private", "type": "remote", "format": "binary", "url": "https://cdn.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/private.srs", "download_detour": "Proxy", "update_interval": "1d"},
+                {"tag": "microsoft-cn", "type": "remote", "format": "binary", "url": "https://cdn.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/microsoft-cn.srs", "download_detour": "Proxy", "update_interval": "1d"},
+                {"tag": "apple-cn", "type": "remote", "format": "binary", "url": "https://cdn.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/apple-cn.srs", "download_detour": "Proxy", "update_interval": "1d"},
+                {"tag": "google-cn", "type": "remote", "format": "binary", "url": "https://cdn.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/google-cn.srs", "download_detour": "Proxy", "update_interval": "1d"},
+                {"tag": "games-cn", "type": "remote", "format": "binary", "url": "https://cdn.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/games-cn.srs", "download_detour": "Proxy", "update_interval": "1d"},
+                {"tag": "network-test", "type": "remote", "format": "binary", "url": "https://cdn.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/networktest.srs", "download_detour": "Proxy", "update_interval": "1d"},
+                {"tag": "applications", "type": "remote", "format": "binary", "url": "https://cdn.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/applications.srs", "download_detour": "Proxy", "update_interval": "1d"},
+                {"tag": "proxy", "type": "remote", "format": "binary", "url": "https://cdn.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/proxy.srs", "download_detour": "Proxy", "update_interval": "1d"},
+                {"tag": "cn", "type": "remote", "format": "binary", "url": "https://cdn.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/cn.srs", "download_detour": "Proxy", "update_interval": "1d"},
+                {"tag": "telegram-ip", "type": "remote", "format": "binary", "url": "https://cdn.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/telegramip.srs", "download_detour": "Proxy", "update_interval": "1d"},
+                {"tag": "private-ip", "type": "remote", "format": "binary", "url": "https://cdn.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/privateip.srs", "download_detour": "Proxy", "update_interval": "1d"},
+                {"tag": "cn-ip", "type": "remote", "format": "binary", "url": "https://cdn.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/cnip.srs", "download_detour": "Proxy", "update_interval": "1d"}
+            ],
+            "final": "Proxy",
+            "auto_detect_interface": true
+        },
+        "experimental": {
+            "cache_file": {
+                "enabled": true,
+                "path": "cache.db",
+                "store_fakeip": false,
+                "store_rdrc": false
+            },
+            "clash_api": {
+                "external_controller": "0.0.0.0:9090",
+                "external_ui": "dashboard",
+                "external_ui_download_url": "https://github.com/MetaCubeX/Yacd-meta/archive/gh-pages.zip",
+                "external_ui_download_detour": "Proxy",
+                "default_mode": "rule"
+            }
+        }
+    });
+
+    serde_json::to_string_pretty(&template).unwrap_or_default()
+}
+
diff --git a/src/protocols/singbox/dns.rs b/src/protocols/singbox/dns.rs
new file mode 100644
index 0000000..6c1ba2d
--- /dev/null
+++ b/src/protocols/singbox/dns.rs
@@ -0,0 +1,311 @@
+use super::common::base::{
+    IpVersion, LogicalMode, Network, QueryType, SingleOrMultipleValue, Strategy, DialParams, NetworkType,
+};
+use super::common::tls;
+use serde::{Deserialize, Serialize};
+use serde_with::skip_serializing_none;
+use indexmap::IndexMap;
+
+#[skip_serializing_none]
+#[derive(Default, Serialize, Deserialize, Debug, Clone)]
+pub struct DNS {
+    pub servers: Vec<Server>,
+    pub rules: Option<Vec<Rule>>,
+    pub r#final: Option<String>,
+    pub strategy: Option<Strategy>,
+    pub disable_cache: Option<bool>,
+    pub disable_expire: Option<bool>,
+    pub independent_cache: Option<bool>,
+    pub cache_capacity: Option<u32>,
+    pub reverse_mapping: Option<bool>,
+    pub client_subnet: Option<String>,
+}
+
+/// Legacy DNS server format (deprecated in sing-box 1.12, removed in 1.14).
+/// Uses `address` URL instead of `type` + `server`; see https://sing-box.sagernet.org/configuration/dns/server/legacy/
+#[skip_serializing_none]
+#[derive(Serialize, Deserialize, Debug, Clone)]
+pub struct LegacyServer {
+    pub tag: Option<String>,
+    pub address: String,
+    pub address_resolver: Option<String>,
+    pub address_strategy: Option<String>,
+    pub strategy: Option<String>,
+    pub detour: Option<String>,
+    pub client_subnet: Option<String>,
+}
+
+#[derive(Serialize, Deserialize, Debug, Clone)]
+#[serde(tag = "type", rename_all = "lowercase")]
+pub enum Server {
+    /// Empty or missing type => legacy format (address-based)
+    #[serde(rename = "")]
+    Legacy(LegacyServer),
+    Local(LocalServer),
+    Hosts(HostsServer),
+    Tcp(TcpServer),
+    Udp(UdpServer),
+    Tls(TlsServer),
+    Quic(QuicServer),
+    Https(HttpsServer),
+    H3(H3Server),
+    Dhcp(DhcpServer),
+    Fakeip(FakeIPServer),
+    Tailscale(TailscaleServer),
+    Resolved(ResolvedServer),
+}
+
+#[skip_serializing_none]
+#[derive(Serialize, Deserialize, Debug, Clone)]
+pub struct LocalServer {
+    pub tag: String,
+    pub prefer_go: Option<bool>,
+    #[serde(flatten)]
+    pub dial_fields: DialParams,
+}
+
+#[skip_serializing_none]
+#[derive(Serialize, Deserialize, Debug, Clone)]
+pub struct HostsServer {
+    pub tag: String,
+    pub path: SingleOrMultipleValue<String>,
+
+    pub predefined: Option<HostsServerPredefined>,
+}
+
+pub type HostsServerPredefined = IndexMap<String, SingleOrMultipleValue<String>>;
+
+#[skip_serializing_none]
+#[derive(Serialize, Deserialize, Debug, Clone)]
+pub struct TcpServer {
+    pub tag: String,
+    pub server: String,
+    pub server_port: Option<u32>,
+    #[serde(flatten)]
+    pub dial_fields: DialParams,
+}
+
+#[skip_serializing_none]
+#[derive(Serialize, Deserialize, Debug, Clone)]
+pub struct UdpServer {
+    pub tag: String,
+    pub server: String,
+    pub server_port: Option<u32>,
+    #[serde(flatten)]
+    pub dial_fields: DialParams,
+}
+
+#[skip_serializing_none]
+#[derive(Serialize, Deserialize, Debug, Clone)] 
+pub struct TlsServer {
+    pub tag: String,
+    pub server: String,
+    pub server_port: Option<u32>,
+    pub tls: Option<tls::Outbound>,
+    #[serde(flatten)]
+    pub dial_fields: DialParams,
+}
+
+#[skip_serializing_none]
+#[derive(Serialize, Deserialize, Debug, Clone)]
+pub struct QuicServer {
+    pub tag: String,
+    pub server: String,
+    pub server_port: Option<u32>,
+    pub tls: Option<tls::Outbound>,
+    #[serde(flatten)]
+    pub dial_fields: DialParams,
+}
+
+#[skip_serializing_none]
+#[derive(Serialize, Deserialize, Debug, Clone)]
+pub struct HttpsServer {
+    pub tag: String,
+    pub server: String,
+    pub server_port: Option<u32>,
+    pub path: Option<String>,
+    pub headers: Option<IndexMap<String, String>>,
+    pub tls: Option<tls::Outbound>,
+    #[serde(flatten)]
+    pub dial_fields: DialParams,
+}
+
+#[skip_serializing_none]
+#[derive(Serialize, Deserialize, Debug, Clone)]
+pub struct H3Server {
+    pub tag: String,
+    pub server: String,
+    pub server_port: Option<u32>,
+    pub path: Option<String>,
+    pub headers: Option<IndexMap<String, String>>,
+    pub tls: Option<tls::Outbound>,
+    #[serde(flatten)]
+    pub dial_fields: DialParams,
+}
+
+#[skip_serializing_none]
+#[derive(Serialize, Deserialize, Debug, Clone)] 
+pub struct DhcpServer {
+    pub tag: String,
+    pub interface: Option<String>,
+    #[serde(flatten)]
+    pub dial_fields: DialParams,
+}
+
+#[skip_serializing_none]
+#[derive(Default, Serialize, Deserialize, Debug, Clone)]
+pub struct FakeIPServer {
+    pub tag: String,
+    pub inet4_range: Option<String>,
+    pub inet6_range: Option<String>,
+}
+
+#[skip_serializing_none]
+#[derive(Default, Serialize, Deserialize, Debug, Clone)]
+pub struct TailscaleServer {
+    pub tag: String,
+    pub endpoint: String,
+    pub accept_default_resolvers: Option<bool>,
+}
+
+#[skip_serializing_none]
+#[derive(Default, Serialize, Deserialize, Debug, Clone)]
+pub struct ResolvedServer {
+    pub tag: String,
+    pub service: String,
+    pub accept_default_resolvers: Option<bool>,
+}
+
+
+#[skip_serializing_none]
+#[derive(Serialize, Deserialize, Debug, Clone)]
+#[serde(untagged)]
+pub enum Rule {
+    Logical(LogicalRule),
+    Basic(BasicRule),
+}
+
+#[skip_serializing_none]
+#[derive(Serialize, Deserialize, Debug, Clone)]
+pub struct BasicRule {
+    pub action: Option<RuleAction>,
+    pub inbound: Option<SingleOrMultipleValue>,
+    pub ip_version: Option<IpVersion>,
+    pub query_type: Option<Vec<QueryType>>,
+    pub network: Option<Network>,
+    pub auth_user: Option<SingleOrMultipleValue>,
+    pub protocol: Option<Vec<Protocol>>,
+    pub domain: Option<SingleOrMultipleValue>,
+    pub domain_suffix: Option<SingleOrMultipleValue>,
+    pub domain_keyword: Option<SingleOrMultipleValue>,
+    pub domain_regex: Option<SingleOrMultipleValue>,
+    pub source_ip_cidr: Option<SingleOrMultipleValue>,
+    pub source_ip_is_private: Option<bool>,
+    pub ip_cidr: Option<SingleOrMultipleValue>,
+    pub ip_is_private: Option<bool>,
+    pub ip_accept_any: Option<bool>,
+    pub source_port: Option<Vec<u16>>,
+    pub source_port_range: Option<SingleOrMultipleValue>,
+    pub port: Option<Vec<u16>>,
+    pub port_range: Option<SingleOrMultipleValue>,
+    pub process_name: Option<SingleOrMultipleValue>,
+    pub process_path: Option<SingleOrMultipleValue>,
+    pub process_path_regex: Option<SingleOrMultipleValue>,
+    pub package_name: Option<SingleOrMultipleValue>,
+    pub user: Option<SingleOrMultipleValue>,
+    pub user_id: Option<Vec<u32>>,
+    pub clash_mode: Option<String>,
+    pub network_type: Option<NetworkType>,
+    pub network_is_expensive: Option<bool>,
+    pub network_is_constrained: Option<bool>,
+    pub interface_address: Option<IndexMap<String, SingleOrMultipleValue>>,
+    pub network_interface_address: Option<IndexMap<String, SingleOrMultipleValue>>,
+    pub default_interface_address: Option<String>,
+    pub wifi_ssid: Option<SingleOrMultipleValue>,
+    pub wifi_bssid: Option<SingleOrMultipleValue>,
+    pub rule_set: Option<SingleOrMultipleValue>,
+    pub rule_set_ip_cidr_match_source: Option<bool>,
+    pub rule_set_ip_cidr_accept_empty: Option<bool>,
+    pub invert: Option<bool>,
+    pub server: Option<String>,
+    pub strategy: Option<Strategy>,
+}
+
+#[skip_serializing_none]
+#[derive(Serialize, Deserialize, Debug, Clone)]
+pub struct LogicalRule {
+    pub r#type: String,
+    pub mode: LogicalMode,
+    pub rules: Vec<BasicRule>,
+    pub action: RuleAction,
+}
+
+#[derive(Serialize, Deserialize, Debug, Clone)]
+#[serde(rename_all = "snake_case")]
+pub enum Protocol {
+    Http,
+    Tls,
+    Quic,
+    Stun,
+    Dns,
+    Bittorrent,
+    Dtls,
+}
+
+
+
+#[derive(Debug, Clone, Serialize, Deserialize, PartialEq, Eq)]
+#[serde(rename_all = "snake_case")]
+pub enum RuleAction {
+    Route,
+    RouteOptions,
+    Reject,
+    Predefined,
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    #[test]
+    fn test_legacy_server_deserialize() {
+        // Eternal Network style: type empty, address + tag + detour
+        let json = r#"{"type":"","tag":"remote","address":"1.1.1.1","detour":"proxy"}"#;
+        let server: Server = serde_json::from_str(json).unwrap();
+        match &server {
+            Server::Legacy(l) => {
+                assert_eq!(l.tag.as_deref(), Some("remote"));
+                assert_eq!(l.address, "1.1.1.1");
+                assert_eq!(l.detour.as_deref(), Some("proxy"));
+            }
+            _ => panic!("expected Legacy variant"),
+        }
+    }
+
+    #[test]
+    fn test_legacy_server_https_address() {
+        let json = r#"{"type":"","address":"https://223.5.5.5/dns-query","tag":"local","detour":"direct"}"#;
+        let server: Server = serde_json::from_str(json).unwrap();
+        match &server {
+            Server::Legacy(l) => {
+                assert_eq!(l.address, "https://223.5.5.5/dns-query");
+                assert_eq!(l.tag.as_deref(), Some("local"));
+            }
+            _ => panic!("expected Legacy variant"),
+        }
+    }
+
+    #[test]
+    fn test_legacy_server_rcode() {
+        let json = r#"{"type":"","address":"rcode://refused","tag":"block"}"#;
+        let server: Server = serde_json::from_str(json).unwrap();
+        match &server {
+            Server::Legacy(l) => {
+                assert_eq!(l.address, "rcode://refused");
+                assert_eq!(l.tag.as_deref(), Some("block"));
+            }
+            _ => panic!("expected Legacy variant"),
+        }
+    }
+}
+
diff --git a/src/protocols/singbox/endpoint.rs b/src/protocols/singbox/endpoint.rs
new file mode 100644
index 0000000..05007ae
--- /dev/null
+++ b/src/protocols/singbox/endpoint.rs
@@ -0,0 +1,16 @@
+use serde::{Deserialize, Serialize};
+use serde_with::skip_serializing_none;
+
+#[skip_serializing_none]
+#[derive(Serialize, Deserialize, Debug, Clone)]
+pub struct Endpoint {
+    pub r#type: Option<EndpointType>,
+    pub tag: Option<String>,
+}
+
+#[derive(Serialize, Deserialize, Debug, Clone)]
+#[serde(rename_all = "lowercase")]
+pub enum EndpointType {
+    Wireguard,
+    Tailscale,
+}
\ No newline at end of file
diff --git a/src/protocols/singbox/experimental.rs b/src/protocols/singbox/experimental.rs
new file mode 100644
index 0000000..52a6864
--- /dev/null
+++ b/src/protocols/singbox/experimental.rs
@@ -0,0 +1,50 @@
+use serde::{Deserialize, Serialize};
+use serde_with::skip_serializing_none;
+
+#[skip_serializing_none]
+#[derive(Serialize, Deserialize, Debug, Clone)]
+pub struct Experimental {
+    cache_file: Option<CacheFile>,
+    clash_api: Option<ClashApi>,
+    v2ray_api: Option<V2rayApi>,
+}
+
+#[skip_serializing_none]
+#[derive(Serialize, Deserialize, Debug, Clone)]
+pub struct CacheFile {
+    pub enabled: Option<bool>,
+    pub path: Option<String>,
+    pub cache_id: Option<String>,
+    pub store_fakeip: Option<bool>,
+    pub store_rdrc: Option<bool>,
+    pub rdrc_timeout: Option<String>,
+}
+
+#[skip_serializing_none]
+#[derive(Serialize, Deserialize, Debug, Clone)]
+pub struct ClashApi {
+    pub external_controller: Option<String>,
+    pub external_ui: Option<String>,
+    pub external_ui_download_url: Option<String>,
+    pub external_ui_download_detour: Option<String>,
+    pub secret: Option<String>,
+    pub default_mode: Option<String>,
+    pub access_control_allow_origin: Option<Vec<String>>,
+    pub access_control_allow_private_network: Option<bool>,
+}
+
+#[skip_serializing_none]
+#[derive(Serialize, Deserialize, Debug, Clone)]
+pub struct V2rayApi {
+    pub listen: Option<String>,
+    pub stats: Option<V2rayStats>,
+}
+
+#[skip_serializing_none]
+#[derive(Serialize, Deserialize, Debug, Clone)]
+pub struct V2rayStats {
+    pub enabled: Option<bool>,
+    pub inbounds: Option<Vec<String>>,
+    pub outbounds: Option<Vec<String>>,
+    pub users: Option<Vec<String>>,
+}
diff --git a/src/protocols/singbox/inbound/anytls.rs b/src/protocols/singbox/inbound/anytls.rs
new file mode 100644
index 0000000..174a3de
--- /dev/null
+++ b/src/protocols/singbox/inbound/anytls.rs
@@ -0,0 +1,17 @@
+use crate::protocols::singbox::common::{ base::ListenParams, tls };
+use super::base::User;
+use serde::{Deserialize, Serialize};
+use serde_with::skip_serializing_none;
+
+#[skip_serializing_none]
+#[derive(Serialize, Deserialize, Debug, Clone)]
+pub struct AnyTLS {
+    pub tag: Option<String>,
+
+    #[serde(flatten)]
+    pub listen_params: ListenParams,
+
+    pub users: Vec<User>,
+    pub padding_scheme: Option<Vec<String>>,
+    pub tls: Option<tls::Inbound>,
+}
diff --git a/src/singbox/inbound/base.rs b/src/protocols/singbox/inbound/base.rs
similarity index 68%
rename from src/singbox/inbound/base.rs
rename to src/protocols/singbox/inbound/base.rs
index 78edd89..9ffaaaf 100644
--- a/src/singbox/inbound/base.rs
+++ b/src/protocols/singbox/inbound/base.rs
@@ -1,6 +1,6 @@
 use serde::{Deserialize, Serialize};
 
-#[derive(Default, Serialize, Deserialize, Debug)]
+#[derive(Serialize, Deserialize, Debug, Clone)]
 pub struct User {
     pub username: String,
     pub password: String,
diff --git a/src/protocols/singbox/inbound/direct.rs b/src/protocols/singbox/inbound/direct.rs
new file mode 100644
index 0000000..a4cc640
--- /dev/null
+++ b/src/protocols/singbox/inbound/direct.rs
@@ -0,0 +1,16 @@
+use crate::protocols::singbox::common::base::{ Network, ListenParams };
+use serde::{Deserialize, Serialize};
+use serde_with::skip_serializing_none;
+
+#[skip_serializing_none]
+#[derive(Default, Serialize, Deserialize, Debug, Clone)]
+pub struct Direct {
+    pub tag: Option<String>,
+
+    #[serde(flatten)]
+    pub listen_params: ListenParams,
+
+    pub network: Option<Network>,
+    pub override_address: Option<String>,
+    pub override_port: Option<u16>,
+}
diff --git a/src/protocols/singbox/inbound/http.rs b/src/protocols/singbox/inbound/http.rs
new file mode 100644
index 0000000..66d3efb
--- /dev/null
+++ b/src/protocols/singbox/inbound/http.rs
@@ -0,0 +1,17 @@
+use crate::protocols::singbox::common::{ base::ListenParams, tls };
+use serde::{ Deserialize, Serialize };
+use serde_with::skip_serializing_none;
+use super::base::User;
+
+#[skip_serializing_none]
+#[derive(Serialize, Deserialize, Debug, Clone)]
+pub struct HTTP {
+    pub tag: Option<String>,
+    
+    #[serde(flatten)]
+    pub listen_params: ListenParams,
+
+    pub users: Option<Vec<User>>,
+    pub tls: Option<tls::Inbound>,
+    pub set_system_proxy: Option<bool>,
+}
diff --git a/src/protocols/singbox/inbound/hysteria.rs b/src/protocols/singbox/inbound/hysteria.rs
new file mode 100644
index 0000000..f1e078a
--- /dev/null
+++ b/src/protocols/singbox/inbound/hysteria.rs
@@ -0,0 +1,31 @@
+use crate::protocols::singbox::common::{base::ListenParams, tls};
+use serde::{Deserialize, Serialize};
+use serde_with::skip_serializing_none;
+
+#[skip_serializing_none]
+#[derive(Serialize, Deserialize, Debug, Clone)]
+pub struct Hysteria {
+    pub tag: Option<String>,
+
+    #[serde(flatten)]
+    pub listen_params: ListenParams,
+
+    pub up: String,
+    pub up_mbps: u32,
+    pub down: String,
+    pub down_mbps: u32,
+    pub obfs: Option<String>,
+    pub users: Option<Vec<User>>,
+    pub recv_window_conn: Option<usize>,
+    pub recv_window_client: Option<usize>,
+    pub max_conn_client: Option<usize>,
+    pub disable_mtu_discovery: Option<bool>,
+    pub tls: tls::Inbound,
+}
+
+#[derive(Default, Serialize, Deserialize, Debug, Clone)]
+pub struct User {
+    pub name: String,
+    pub auth: String,
+    pub auth_str: usize,
+}
\ No newline at end of file
diff --git a/src/protocols/singbox/inbound/hysteria2.rs b/src/protocols/singbox/inbound/hysteria2.rs
new file mode 100644
index 0000000..15e06f4
--- /dev/null
+++ b/src/protocols/singbox/inbound/hysteria2.rs
@@ -0,0 +1,28 @@
+use super::hysteria::User;
+use crate::protocols::singbox::common::{base::ListenParams, tls};
+use serde::{Deserialize, Serialize};
+use serde_with::skip_serializing_none;
+
+#[skip_serializing_none]
+#[derive(Serialize, Deserialize, Debug, Clone)]
+pub struct Hysteria2 {
+    pub tag: Option<String>,
+
+    #[serde(flatten)]
+    pub listen_params: ListenParams,
+
+    pub up_mbps: Option<usize>,
+    pub down_mbps: Option<usize>,
+    pub obfs: Option<Obfs>,
+    pub users: Option<Vec<User>>,
+    pub ignore_client_bandwidth: Option<bool>,
+    pub tls: tls::Inbound,
+    pub masquerade: Option<String>,
+    pub brutal_debug: Option<bool>,
+}
+
+#[derive(Default, Serialize, Deserialize, Debug, Clone)]
+pub struct Obfs {
+    pub r#type: String,
+    pub password: String,
+}
diff --git a/src/protocols/singbox/inbound/mixed.rs b/src/protocols/singbox/inbound/mixed.rs
new file mode 100644
index 0000000..18ec9e5
--- /dev/null
+++ b/src/protocols/singbox/inbound/mixed.rs
@@ -0,0 +1,16 @@
+use serde::{Deserialize, Serialize};
+use serde_with::skip_serializing_none;
+use crate::protocols::singbox::common::base::ListenParams;
+use super::base::User;
+
+#[skip_serializing_none]
+#[derive(Serialize, Deserialize, Debug, Clone)]
+pub struct Mixed {
+    pub tag: Option<String>,
+
+    #[serde(flatten)]
+    pub listen_params: ListenParams,
+
+    pub users: Option<Vec<User>>,
+    pub set_system_proxy: Option<bool>,
+}
\ No newline at end of file
diff --git a/src/singbox/inbound/mod.rs b/src/protocols/singbox/inbound/mod.rs
similarity index 73%
rename from src/singbox/inbound/mod.rs
rename to src/protocols/singbox/inbound/mod.rs
index d175de0..969d6ba 100644
--- a/src/singbox/inbound/mod.rs
+++ b/src/protocols/singbox/inbound/mod.rs
@@ -1,40 +1,42 @@
 pub mod base;
 pub mod direct;
-pub mod http;
-pub mod hysteria;
-pub mod hysteria2;
 pub mod mixed;
-pub mod naive;
-pub mod redirect;
-pub mod shadowsocks;
-pub mod shadowtls;
 pub mod socks;
-pub mod tproxy;
+pub mod http;
+pub mod shadowsocks;
+pub mod vmess;
 pub mod trojan;
+pub mod naive;
+pub mod hysteria;
+pub mod shadowtls;
 pub mod tuic;
-pub mod tun;
+pub mod hysteria2;
 pub mod vless;
-pub mod vmess;
+pub mod anytls;
+pub mod tun;
+pub mod redirect;
+pub mod tproxy;
 
 use serde::{Deserialize, Serialize};
 
-#[derive(Serialize, Deserialize, Debug)]
+#[derive(Serialize, Deserialize, Debug, Clone)]
 #[serde(tag = "type", rename_all = "lowercase")]
 pub enum Inbound {
     Direct(direct::Direct),
     Mixed(mixed::Mixed),
     Socks(socks::Socks),
-    Http(http::Http),
+    Http(http::HTTP),
     Shadowsocks(shadowsocks::Shadowsocks),
-    Vmess(vmess::Vmess),
+    Vmess(vmess::VMess),
     Trojan(trojan::Trojan),
     Naive(naive::Naive),
     Hysteria(hysteria::Hysteria),
-    Shadowtls(shadowtls::Shadowtls),
-    Vless(vless::Vless),
-    Tuic(tuic::Tuic),
+    Shadowtls(shadowtls::ShadowTLS),
+    Tuic(tuic::TUIC),
     Hysteria2(hysteria2::Hysteria2),
+    Vless(vless::VLESS),
+    Anytls(anytls::AnyTLS),
     Tun(tun::Tun),
     Redirect(redirect::Redirect),
-    Tproxy(tproxy::Tproxy),
+    Tproxy(tproxy::TProxy),
 }
diff --git a/src/protocols/singbox/inbound/naive.rs b/src/protocols/singbox/inbound/naive.rs
new file mode 100644
index 0000000..7f31e2c
--- /dev/null
+++ b/src/protocols/singbox/inbound/naive.rs
@@ -0,0 +1,32 @@
+use crate::protocols::singbox::common::{
+    base::{ Network, ListenParams },
+    tls,
+};
+use super::base::User;
+use serde::{ Deserialize, Serialize };
+use serde_with::skip_serializing_none;
+
+#[skip_serializing_none]
+#[derive(Default, Serialize, Deserialize, Debug, Clone)]
+pub struct Naive {
+    pub tag: Option<String>,
+    pub network: Option<Network>,
+
+    #[serde(flatten)]
+    pub listen_params: ListenParams,
+    
+    pub users: Vec<User>,
+    pub quic_congestion_control: Option<QuicCongestionControl>,
+    pub tls: Option<tls::Inbound>,
+}
+
+#[derive(Serialize, Deserialize, Debug, Clone)]
+#[serde(rename_all = "snake_case")]
+pub enum QuicCongestionControl {
+    Bbr,
+    BbrStandard,
+    Bbr2,
+    Bbr2Variant,
+    Cubic,
+    Reno,
+}
\ No newline at end of file
diff --git a/src/protocols/singbox/inbound/redirect.rs b/src/protocols/singbox/inbound/redirect.rs
new file mode 100644
index 0000000..f5ca068
--- /dev/null
+++ b/src/protocols/singbox/inbound/redirect.rs
@@ -0,0 +1,12 @@
+use crate::protocols::singbox::common::base::ListenParams;
+use serde::{ Deserialize, Serialize };
+use serde_with::skip_serializing_none;
+
+#[skip_serializing_none]
+#[derive(Default, Serialize, Deserialize, Debug, Clone)]
+pub struct Redirect {
+    pub tag: Option<String>,
+
+    #[serde(flatten)]
+    pub listen_params: ListenParams,
+}
diff --git a/src/protocols/singbox/inbound/shadowsocks.rs b/src/protocols/singbox/inbound/shadowsocks.rs
new file mode 100644
index 0000000..548e350
--- /dev/null
+++ b/src/protocols/singbox/inbound/shadowsocks.rs
@@ -0,0 +1,30 @@
+use crate::protocols::singbox::common::{
+    base::{ ListenParams },
+    multiplex::Multiplex,
+};
+use super::base::User;
+use serde::{ Deserialize, Serialize };
+use serde_with::skip_serializing_none;
+
+#[skip_serializing_none]
+#[derive(Serialize, Deserialize, Debug, Clone)]
+pub struct Shadowsocks {
+    pub tag: Option<String>,
+
+    #[serde(default)]
+    pub listen_params: ListenParams,
+
+    pub method: String,
+    pub password: String,
+    pub users: Option<Vec<User>>,
+    pub destinations: Option<Vec<Distination>>,
+    pub multiplex: Option<Multiplex>,
+}
+
+#[derive(Serialize, Deserialize, Debug, Clone)]
+pub struct Distination {
+    pub name: String,
+    pub server: String,
+    pub server_port: u16,
+    pub password: String,
+}
diff --git a/src/protocols/singbox/inbound/shadowtls.rs b/src/protocols/singbox/inbound/shadowtls.rs
new file mode 100644
index 0000000..582999b
--- /dev/null
+++ b/src/protocols/singbox/inbound/shadowtls.rs
@@ -0,0 +1,37 @@
+use super::base::User;
+use crate::protocols::singbox::common::base::{ Handshake, ListenParams };
+use indexmap::IndexMap;
+use serde::{ Deserialize, Serialize };
+use serde_with::skip_serializing_none;
+
+#[skip_serializing_none]
+#[derive(Serialize, Deserialize, Debug, Clone)]
+pub struct ShadowTLS {
+    pub tag: Option<String>,
+
+    #[serde(flatten)]
+    pub listen_params: ListenParams,
+
+    pub version: Option<Version>,
+    pub password: Option<String>,
+    pub users: Option<Vec<User>>,
+    pub handshake: Handshake,
+    pub handshake_for_server_name: Option<IndexMap<String, Handshake>>,
+    pub strict_mode: Option<bool>,
+    pub wildcard_sni: Option<WildcardSNI>,
+}
+
+#[derive(Serialize, Deserialize, Debug, Clone)]
+pub enum Version {
+    V1 = 1,
+    V2,
+    V3,
+}
+
+#[derive(Serialize, Deserialize, Debug, Clone)]
+#[serde(rename_all = "snake_case")]
+pub enum WildcardSNI {
+    Off,
+    Authed,
+    All,
+}
diff --git a/src/protocols/singbox/inbound/socks.rs b/src/protocols/singbox/inbound/socks.rs
new file mode 100644
index 0000000..1300ae4
--- /dev/null
+++ b/src/protocols/singbox/inbound/socks.rs
@@ -0,0 +1,15 @@
+use serde::{Deserialize, Serialize};
+use serde_with::skip_serializing_none;
+use super::base::User;
+use crate::protocols::singbox::common::base::ListenParams;
+
+#[skip_serializing_none]
+#[derive(Default, Serialize, Deserialize, Debug, Clone)]
+pub struct Socks {
+    pub tag: Option<String>,
+    
+    #[serde(flatten)]
+    pub listen_params: ListenParams,
+
+    pub users: Option<Vec<User>>,
+}
diff --git a/src/protocols/singbox/inbound/tproxy.rs b/src/protocols/singbox/inbound/tproxy.rs
new file mode 100644
index 0000000..11e68ea
--- /dev/null
+++ b/src/protocols/singbox/inbound/tproxy.rs
@@ -0,0 +1,14 @@
+use crate::protocols::singbox::common::base::{ Network, ListenParams };
+use serde::{Deserialize, Serialize};
+use serde_with::skip_serializing_none;
+
+#[skip_serializing_none]
+#[derive(Default, Serialize, Deserialize, Debug, Clone)]
+pub struct TProxy {
+    pub tag: Option<String>,
+
+    #[serde(flatten)]
+    pub listen_params: ListenParams,
+
+    pub network: Option<Network>,
+}
diff --git a/src/protocols/singbox/inbound/trojan.rs b/src/protocols/singbox/inbound/trojan.rs
new file mode 100644
index 0000000..f82bf64
--- /dev/null
+++ b/src/protocols/singbox/inbound/trojan.rs
@@ -0,0 +1,27 @@
+use crate::protocols::singbox::common::{ base::ListenParams, multiplex::Multiplex, tls, transport::Transport };
+use super::base::User;
+use serde::{Deserialize, Serialize};
+use serde_with::skip_serializing_none;
+use indexmap::IndexMap;
+
+#[skip_serializing_none]
+#[derive(Default, Serialize, Deserialize, Debug, Clone)]
+pub struct Trojan {
+    pub tag: Option<String>,
+
+    #[serde(flatten)]
+    pub listen_params: ListenParams,
+
+    pub users: Vec<User>,
+    pub tls: Option<tls::Inbound>,
+    pub fallback: Option<Fallback>,
+    pub fallback_for_alpn: Option<IndexMap<String, Fallback>>,
+    pub multiplex: Option<Multiplex>,
+    pub transport: Option<Transport>,
+}
+
+#[derive(Default, Serialize, Deserialize, Debug, Clone)]
+pub struct Fallback {
+    pub server: String,
+    pub server_port: u16,
+}
diff --git a/src/protocols/singbox/inbound/tuic.rs b/src/protocols/singbox/inbound/tuic.rs
new file mode 100644
index 0000000..5fbcdb7
--- /dev/null
+++ b/src/protocols/singbox/inbound/tuic.rs
@@ -0,0 +1,34 @@
+use crate::protocols::singbox::common::{base::ListenParams, tls};
+use serde::{ Deserialize, Serialize };
+use serde_with::skip_serializing_none;
+
+#[skip_serializing_none]
+#[derive(Serialize, Deserialize, Debug, Clone)]
+pub struct TUIC {
+    pub tag: Option<String>,
+
+    #[serde(flatten)]
+    pub listen_params: ListenParams,
+
+    pub users: Vec<User>,
+    pub congestion_control: Option<CongestionControl>,
+    pub auth_timeout: Option<String>,
+    pub zero_rtt_handshake: Option<bool>,
+    pub heartbeat: Option<String>,
+    pub tls: tls::Inbound,
+}
+
+#[derive(Default, Serialize, Deserialize, Debug, Clone)]
+pub struct User {
+    pub name: String,
+    pub uuid: String,
+    pub password: String,
+}
+
+#[derive(Serialize, Deserialize, Debug, Clone)]
+#[serde(rename_all = "snake_case")]
+pub enum CongestionControl {
+    Cubic,
+    NewReno,
+    Bbr,
+}
diff --git a/src/singbox/inbound/tun.rs b/src/protocols/singbox/inbound/tun.rs
similarity index 59%
rename from src/singbox/inbound/tun.rs
rename to src/protocols/singbox/inbound/tun.rs
index 5bcf93e..50327b7 100644
--- a/src/singbox/inbound/tun.rs
+++ b/src/protocols/singbox/inbound/tun.rs
@@ -1,60 +1,55 @@
-use crate::singbox::common::base::{SingleOrMultipleValue, Stack, Strategy};
+use crate::protocols::singbox::common::base::{ SingleOrMultipleValue, Stack, ListenParams };
 use serde::{Deserialize, Serialize};
 use serde_with::skip_serializing_none;
 
 #[skip_serializing_none]
-#[derive(Default, Serialize, Deserialize, Debug)]
+#[derive(Default, Serialize, Deserialize, Debug, Clone)]
 pub struct Tun {
-    pub tag: String,
-    pub address: Option<SingleOrMultipleValue>,
+    pub tag: Option<String>,
     pub interface_name: Option<String>,
-    pub mtu: Option<usize>,
-    pub gso: Option<bool>,
+    pub address: Option<SingleOrMultipleValue>,
+    pub mtu: Option<u32>,
     pub auto_route: Option<bool>,
-    pub iproute2_table_index: Option<usize>,
-    pub iproute2_rule_index: Option<usize>,
+    pub iproute2_table_index: Option<u32>,
+    pub iproute2_rule_index: Option<u32>,
     pub auto_redirect: Option<bool>,
     pub auto_redirect_input_mark: Option<String>,
     pub auto_redirect_output_mark: Option<String>,
+    pub auto_redirect_reset_mark: Option<String>,
+    pub auto_redirect_nfqueue: Option<u32>,
+    pub exclude_mptcp: Option<bool>,
+    pub loopback_address: Option<SingleOrMultipleValue>,
     pub strict_route: Option<bool>,
     pub route_address: Option<SingleOrMultipleValue>,
     pub route_exclude_address: Option<SingleOrMultipleValue>,
     pub route_address_set: Option<SingleOrMultipleValue>,
     pub route_exclude_address_set: Option<SingleOrMultipleValue>,
     pub endpoint_independent_nat: Option<bool>,
+    pub udp_timeout: Option<String>,
     pub stack: Option<Stack>,
     pub include_interface: Option<SingleOrMultipleValue>,
     pub exclude_interface: Option<SingleOrMultipleValue>,
-    pub include_uid: Option<SingleOrMultipleValue<usize>>,
+    pub include_uid: Option<SingleOrMultipleValue<u32>>,
     pub include_uid_range: Option<SingleOrMultipleValue>,
-    pub exclude_uid: Option<SingleOrMultipleValue<usize>>,
+    pub exclude_uid: Option<SingleOrMultipleValue<u32>>,
     pub exclude_uid_range: Option<SingleOrMultipleValue>,
-    pub include_android_user: Option<SingleOrMultipleValue<usize>>,
+    pub include_android_user: Option<SingleOrMultipleValue<u32>>,
     pub include_package: Option<SingleOrMultipleValue>,
     pub exclude_package: Option<SingleOrMultipleValue>,
     pub platform: Option<Platform>,
-    pub listen: Option<String>,
-    pub listen_port: Option<u16>,
-    pub tcp_fast_open: Option<bool>,
-    pub tcp_multi_path: Option<bool>,
-    pub udp_fragment: Option<bool>,
-    pub udp_timeout: Option<String>,
-    pub detour: Option<String>,
-    pub sniff: Option<bool>,
-    pub sniff_override_destination: Option<bool>,
-    pub sniff_timeout: Option<String>,
-    pub domain_strategy: Option<Strategy>,
-    pub udp_disable_domain_unmapping: Option<bool>,
+
+    #[serde(flatten)]
+    pub listen_params: ListenParams,
 }
 
 #[skip_serializing_none]
-#[derive(Default, Serialize, Deserialize, Debug)]
+#[derive(Default, Serialize, Deserialize, Debug, Clone)]
 pub struct Platform {
     pub http_proxy: Option<HttpProxy>,
 }
 
 #[skip_serializing_none]
-#[derive(Default, Serialize, Deserialize, Debug)]
+#[derive(Default, Serialize, Deserialize, Debug, Clone)]
 pub struct HttpProxy {
     pub server: String,
     pub server_port: u16,
diff --git a/src/protocols/singbox/inbound/vless.rs b/src/protocols/singbox/inbound/vless.rs
new file mode 100644
index 0000000..4aa1012
--- /dev/null
+++ b/src/protocols/singbox/inbound/vless.rs
@@ -0,0 +1,24 @@
+use crate::protocols::singbox::common::{ base::{ ListenParams }, multiplex::Multiplex, tls, transport::Transport };
+use serde::{ Deserialize, Serialize };
+use serde_with::skip_serializing_none;
+
+#[skip_serializing_none]
+#[derive(Default, Serialize, Deserialize, Debug, Clone)]
+pub struct VLESS {
+    pub tag: Option<String>,
+
+    #[serde(flatten)]
+    pub listen_params: ListenParams,
+
+    pub users: Vec<User>,
+    pub tls: Option<tls::Inbound>,
+    pub multiplex: Option<Multiplex>,
+    pub transport: Option<Transport>,
+}
+
+#[derive(Default, Serialize, Deserialize, Debug, Clone)]
+pub struct User {
+    pub uuid: String,
+    pub name: Option<String>,
+    pub flow: Option<String>,
+}
diff --git a/src/protocols/singbox/inbound/vmess.rs b/src/protocols/singbox/inbound/vmess.rs
new file mode 100644
index 0000000..bbdbe98
--- /dev/null
+++ b/src/protocols/singbox/inbound/vmess.rs
@@ -0,0 +1,25 @@
+use crate::protocols::singbox::common::{base::ListenParams, multiplex::Multiplex, tls, transport::Transport};
+use serde::{Deserialize, Serialize};
+use serde_with::skip_serializing_none;
+
+#[skip_serializing_none]
+#[derive(Serialize, Deserialize, Debug, Clone)]
+pub struct VMess {
+    pub tag: Option<String>,
+
+    #[serde(flatten)]
+    pub listen_params: ListenParams,
+
+    pub users: Vec<User>,
+    pub tls: Option<tls::Inbound>,
+    pub multiplex: Option<Multiplex>,
+    pub transport: Option<Transport>,
+}
+
+#[derive(Serialize, Deserialize, Debug, Clone)]
+pub struct User {
+    pub name: String,
+    pub uuid: String,
+    #[serde(rename = "camelcase")]
+    pub alter_id: u32,
+}
diff --git a/src/singbox/log.rs b/src/protocols/singbox/log.rs
similarity index 63%
rename from src/singbox/log.rs
rename to src/protocols/singbox/log.rs
index 6cc10a7..60bb4ef 100644
--- a/src/singbox/log.rs
+++ b/src/protocols/singbox/log.rs
@@ -2,7 +2,7 @@ use serde::{Deserialize, Serialize};
 use serde_with::skip_serializing_none;
 
 #[skip_serializing_none]
-#[derive(Serialize, Deserialize, Debug)]
+#[derive(Serialize, Deserialize, Debug, Clone)]
 pub struct Log {
     disabled: Option<bool>,
     #[serde(default)]
@@ -12,11 +12,22 @@ pub struct Log {
     timestamp: bool,
 }
 
+impl Default for Log {
+    fn default() -> Self {
+        Self {
+            disabled: None,
+            level: LogLevel::default(),
+            output: None,
+            timestamp: default_timestamp(),
+        }
+    }
+}
+
 fn default_timestamp() -> bool {
     true
 }
 
-#[derive(Serialize, Deserialize, Debug)]
+#[derive(Serialize, Deserialize, Debug, Clone)]
 #[serde(rename_all = "lowercase")]
 pub enum LogLevel {
     Trace,
diff --git a/src/protocols/singbox/mod.rs b/src/protocols/singbox/mod.rs
new file mode 100644
index 0000000..f318ee7
--- /dev/null
+++ b/src/protocols/singbox/mod.rs
@@ -0,0 +1,44 @@
+//! Sing-box Protocol Support Module
+
+pub mod common;
+pub mod default_template;
+pub mod dns;
+pub mod experimental;
+pub mod inbound;
+pub mod log;
+pub mod outbound;
+pub mod route;
+pub mod template_processor;
+pub mod ntp;
+pub mod endpoint;
+pub mod certificate;
+pub mod service;
+
+use serde::{Deserialize, Serialize};
+use serde_with::skip_serializing_none;
+
+#[skip_serializing_none]
+#[derive(Serialize, Deserialize, Debug, Clone)]
+pub struct Config {
+    pub log: Option<log::Log>,
+    pub dns: Option<dns::DNS>,
+    pub ntp: Option<ntp::NTP>,
+    pub certificate: Option<certificate::Certificate>,
+    pub endpoints: Option<Vec<endpoint::Endpoint>>,
+    pub inbounds: Vec<inbound::Inbound>,
+    pub outbounds: Vec<outbound::Outbound>,
+    pub route: Option<route::Route>,
+    pub services: Option<Vec<service::Service>>,
+    pub experimental: Option<experimental::Experimental>,
+}
+
+/// Protocol name
+pub const PROTOCOL_NAME: &str = "singbox";
+
+/// Configuration file extension
+pub const CONFIG_EXT: &str = "json";
+
+/// Generate default Sing-box configuration template
+pub fn generate_default_template() -> String {
+    default_template::generate()
+}
diff --git a/src/protocols/singbox/ntp.rs b/src/protocols/singbox/ntp.rs
new file mode 100644
index 0000000..962614c
--- /dev/null
+++ b/src/protocols/singbox/ntp.rs
@@ -0,0 +1,15 @@
+use crate::protocols::singbox::common::base::DialParams;
+use serde::{Deserialize, Serialize};
+use serde_with::skip_serializing_none;
+
+#[skip_serializing_none]
+#[derive(Serialize, Deserialize, Debug, Clone)]
+pub struct NTP {
+    pub enabled: Option<bool>,
+    pub server: String,
+    pub server_port: Option<u16>,
+    pub interval: Option<String>,
+
+    #[serde(flatten)]
+    pub dial_params: DialParams,
+}
\ No newline at end of file
diff --git a/src/protocols/singbox/outbound/anytls.rs b/src/protocols/singbox/outbound/anytls.rs
new file mode 100644
index 0000000..e5522a6
--- /dev/null
+++ b/src/protocols/singbox/outbound/anytls.rs
@@ -0,0 +1,19 @@
+use crate::protocols::singbox::common::{ base::DialParams, tls };
+use serde::{ Deserialize, Serialize };
+use serde_with::skip_serializing_none;
+
+#[skip_serializing_none]
+#[derive(Serialize, Deserialize, Debug, Clone)]
+pub struct AnyTLS {
+    pub tag: String,
+    pub server: String,
+    pub server_port: u16,
+    pub password: String,
+    pub idle_session_check_interval: Option<String>,
+    pub idle_session_timeout: Option<String>,
+    pub min_idle_session: u32,
+    pub tls: tls::Outbound,
+    
+    #[serde(flatten)]
+    pub dial_params: DialParams,
+}
diff --git a/src/singbox/outbound/base.rs b/src/protocols/singbox/outbound/base.rs
similarity index 70%
rename from src/singbox/outbound/base.rs
rename to src/protocols/singbox/outbound/base.rs
index 478d13d..e405677 100644
--- a/src/singbox/outbound/base.rs
+++ b/src/protocols/singbox/outbound/base.rs
@@ -1,6 +1,6 @@
 use serde::{Deserialize, Serialize};
 
-#[derive(Serialize, Deserialize, Debug)]
+#[derive(Serialize, Deserialize, Debug, Clone)]
 #[serde(untagged)]
 pub enum UdpOverTcp {
     Enabled(bool),
@@ -10,7 +10,7 @@ pub enum UdpOverTcp {
     },
 }
 
-#[derive(Serialize, Deserialize, Debug)]
+#[derive(Serialize, Deserialize, Debug, Clone)]
 pub enum UdpOverTcpVersion {
     V1 = 1,
     V2,
diff --git a/src/protocols/singbox/outbound/direct.rs b/src/protocols/singbox/outbound/direct.rs
new file mode 100644
index 0000000..81624ea
--- /dev/null
+++ b/src/protocols/singbox/outbound/direct.rs
@@ -0,0 +1,12 @@
+use crate::protocols::singbox::common::base::DialParams;
+use serde::{ Deserialize, Serialize };
+use serde_with::skip_serializing_none;
+
+#[skip_serializing_none]
+#[derive(Serialize, Deserialize, Debug, Clone)]
+pub struct Direct {
+    pub tag: String,
+    
+    #[serde(flatten)]
+    pub dial_params: DialParams,
+}
\ No newline at end of file
diff --git a/src/protocols/singbox/outbound/http.rs b/src/protocols/singbox/outbound/http.rs
new file mode 100644
index 0000000..b26bf9c
--- /dev/null
+++ b/src/protocols/singbox/outbound/http.rs
@@ -0,0 +1,20 @@
+use crate::protocols::singbox::common::{ base::DialParams, tls };
+use serde::{ Deserialize, Serialize };
+use serde_with::skip_serializing_none;
+use indexmap::IndexMap;
+
+#[skip_serializing_none]
+#[derive(Serialize, Deserialize, Debug, Clone)]
+pub struct HTTP {
+    pub tag: String,
+    pub server: String,
+    pub server_port: u16,
+    pub username: Option<String>,
+    pub password: Option<String>,
+    pub path: Option<String>,
+    pub headers: Option<IndexMap<String, String>>,
+    pub tls: Option<tls::Outbound>,
+    
+    #[serde(flatten)]
+    pub dial_params: DialParams,
+}
diff --git a/src/protocols/singbox/outbound/hysteria.rs b/src/protocols/singbox/outbound/hysteria.rs
new file mode 100644
index 0000000..6bdafa5
--- /dev/null
+++ b/src/protocols/singbox/outbound/hysteria.rs
@@ -0,0 +1,31 @@
+use crate::protocols::singbox::common::{
+    base::{DialParams, Network},
+    tls,
+};
+use serde::{Deserialize, Serialize};
+use serde_with::skip_serializing_none;
+
+#[skip_serializing_none]
+#[derive(Serialize, Deserialize, Debug, Clone)]
+pub struct Hysteria {
+    pub tag: String,
+    pub server: String,
+    pub server_port: u16,
+    pub server_ports: Option<Vec<u16>>,
+    pub hop_interval: Option<String>,
+    pub up: String,
+    pub up_mbps: u32,
+    pub down: String,
+    pub down_mbps: u32,
+    pub obfs: Option<String>,
+    pub auth: Option<String>,
+    pub auth_str: Option<String>,
+    pub recv_window_conn: Option<u32>,
+    pub recv_window: Option<u32>,
+    pub disable_mtu_discovery: Option<bool>,
+    pub network: Option<Network>,
+    pub tls: Option<tls::Outbound>,
+    
+    #[serde(flatten)]
+    pub dial_params: DialParams,
+}
diff --git a/src/protocols/singbox/outbound/hysteria2.rs b/src/protocols/singbox/outbound/hysteria2.rs
new file mode 100644
index 0000000..aca26ba
--- /dev/null
+++ b/src/protocols/singbox/outbound/hysteria2.rs
@@ -0,0 +1,29 @@
+use crate::protocols::singbox::{
+    common::{
+        base::{DialParams, Network},
+        tls,
+    },
+    inbound::hysteria2::Obfs,
+};
+use serde::{Deserialize, Serialize};
+use serde_with::skip_serializing_none;
+
+#[skip_serializing_none]
+#[derive(Serialize, Deserialize, Debug, Clone)]
+pub struct Hysteria2 {
+    pub tag: String,
+    pub server: String,
+    pub server_port: u16,
+    pub server_ports: Option<Vec<u16>>,
+    pub hop_interval: Option<String>,
+    pub up_mbps: Option<u32>,
+    pub down_mbps: Option<u32>,
+    pub obfs: Option<Obfs>,
+    pub password: Option<String>,
+    pub network: Option<Network>,
+    pub tls: Option<tls::Outbound>,
+    pub brutal_debug: Option<bool>,
+    
+    #[serde(flatten)]
+    pub dial_params: DialParams,
+}
diff --git a/src/singbox/outbound/mod.rs b/src/protocols/singbox/outbound/mod.rs
similarity index 60%
rename from src/singbox/outbound/mod.rs
rename to src/protocols/singbox/outbound/mod.rs
index ce9dfbb..2add222 100644
--- a/src/singbox/outbound/mod.rs
+++ b/src/protocols/singbox/outbound/mod.rs
@@ -1,42 +1,43 @@
 pub mod base;
 pub mod direct;
-pub mod dns;
+pub mod socks;
 pub mod http;
-pub mod hysteria;
-pub mod hysteria2;
-pub mod selector;
 pub mod shadowsocks;
-pub mod shadowtls;
-pub mod socks;
-pub mod ssh;
-pub mod tor;
+pub mod vmess;
 pub mod trojan;
+pub mod naive;
+pub mod hysteria;
+pub mod shadowtls;
+pub mod vless;
 pub mod tuic;
+pub mod hysteria2;
+pub mod anytls;
+pub mod tor;
+pub mod ssh;
+pub mod selector;
 pub mod urltest;
-pub mod vless;
-pub mod vmess;
-pub mod wireguard;
 
-use serde::{Deserialize, Serialize};
 
-#[derive(Serialize, Deserialize, Debug)]
-#[serde(tag = "type", rename_all = "lowercase")]
+use serde::{ Deserialize, Serialize };
+
+#[derive(Serialize, Deserialize, Debug, Clone)]
+#[serde(tag = "type", rename_all = "snake_case")]
 pub enum Outbound {
     Direct(direct::Direct),
     Socks(socks::Socks),
-    Http(http::Http),
+    Http(http::HTTP),
     Shadowsocks(shadowsocks::Shadowsocks),
-    Vmess(vmess::Vmess),
+    Vmess(vmess::VMess),
     Trojan(trojan::Trojan),
-    Wireguard(wireguard::Wireguard),
+    Naive(naive::Naive),
     Hysteria(hysteria::Hysteria),
-    Vless(vless::Vless),
-    Shadowtls(shadowtls::Shadowtls),
-    Tuic(tuic::Tuic),
+    Shadowtls(shadowtls::ShadowTLS),
+    Vless(vless::VLESS),
+    Tuic(tuic::TUIC),
     Hysteria2(hysteria2::Hysteria2),
+    Anytls(anytls::AnyTLS),
     Tor(tor::Tor),
-    Ssh(ssh::Ssh),
-    Dns(dns::Dns),
+    Ssh(ssh::SSH),
     Selector(selector::Selector),
     Urltest(urltest::Urltest),
 }
diff --git a/src/protocols/singbox/outbound/naive.rs b/src/protocols/singbox/outbound/naive.rs
new file mode 100644
index 0000000..2b4f3c1
--- /dev/null
+++ b/src/protocols/singbox/outbound/naive.rs
@@ -0,0 +1,33 @@
+use crate::protocols::singbox::{common::{ base::DialParams, tls }, outbound::base::UdpOverTcp};
+use serde::{ Deserialize, Serialize };
+use serde_with::skip_serializing_none;
+use indexmap::IndexMap;
+
+#[skip_serializing_none]
+#[derive(Serialize, Deserialize, Debug, Clone)]
+pub struct Naive {
+    pub tag: String,
+    pub server: String,
+    pub server_port: u16,
+    pub username: Option<String>,
+    pub password: Option<String>,
+    pub insecure_concurrency: Option<u32>,
+    pub extra_headers: Option<IndexMap<String, String>>,
+    pub udp_over_tcp: Option<UdpOverTcp>,
+    pub quic: Option<bool>,
+    pub quic_congestion_control: Option<QuicCongestionControl>,
+    pub tls: Option<tls::Outbound>,
+
+    #[serde(flatten)]
+    pub dial_params: DialParams,
+}
+
+
+#[derive(Serialize, Deserialize, Debug, Clone)]
+#[serde(rename_all = "snake_case")]
+pub enum QuicCongestionControl {
+    Bbr,
+    Bbr2,
+    Cubic,
+    Reno,
+}
\ No newline at end of file
diff --git a/src/singbox/outbound/selector.rs b/src/protocols/singbox/outbound/selector.rs
similarity index 84%
rename from src/singbox/outbound/selector.rs
rename to src/protocols/singbox/outbound/selector.rs
index de531d9..bf6104a 100644
--- a/src/singbox/outbound/selector.rs
+++ b/src/protocols/singbox/outbound/selector.rs
@@ -2,10 +2,10 @@ use serde::{Deserialize, Serialize};
 use serde_with::skip_serializing_none;
 
 #[skip_serializing_none]
-#[derive(Default, Serialize, Deserialize, Debug)]
+#[derive(Serialize, Deserialize, Debug, Clone)]
 pub struct Selector {
     pub tag: String,
-    pub interrupt_exist_connections: Option<bool>,
-    pub default: Option<String>,
     pub outbounds: Vec<String>,
+    pub default: Option<String>,
+    pub interrupt_exist_connections: Option<bool>,
 }
diff --git a/src/protocols/singbox/outbound/shadowsocks.rs b/src/protocols/singbox/outbound/shadowsocks.rs
new file mode 100644
index 0000000..1d9002c
--- /dev/null
+++ b/src/protocols/singbox/outbound/shadowsocks.rs
@@ -0,0 +1,25 @@
+use super::base::UdpOverTcp;
+use crate::protocols::singbox::common::{
+    base::{ Network, DialParams },
+    multiplex::Multiplex,
+};
+use serde::{ Deserialize, Serialize };
+use serde_with::skip_serializing_none;
+
+#[skip_serializing_none]
+#[derive(Serialize, Deserialize, Debug, Clone)]
+pub struct Shadowsocks {
+    pub tag: String,
+    pub server: String,
+    pub server_port: u16,
+    pub method: String,
+    pub password: String,
+    pub plugin: Option<String>,
+    pub plugin_opts: Option<String>,
+    pub network: Option<Network>,
+    pub udp_over_tcp: Option<UdpOverTcp>,
+    pub multiplex: Option<Multiplex>,
+    
+    #[serde(flatten)]
+    pub dial_params: DialParams,
+}
diff --git a/src/protocols/singbox/outbound/shadowtls.rs b/src/protocols/singbox/outbound/shadowtls.rs
new file mode 100644
index 0000000..903fb49
--- /dev/null
+++ b/src/protocols/singbox/outbound/shadowtls.rs
@@ -0,0 +1,24 @@
+use crate::protocols::singbox::common::{base::DialParams, tls};
+use serde::{Deserialize, Serialize};
+use serde_with::skip_serializing_none;
+
+#[skip_serializing_none]
+#[derive(Serialize, Deserialize, Debug, Clone)]
+pub struct ShadowTLS {
+    pub tag: String,
+    pub server: String,
+    pub server_port: u16,
+    pub version: Option<ShadowTLSVersion>,
+    pub password: Option<String>,
+    pub tls: tls::Outbound,
+
+    #[serde(flatten)]
+    pub dial_params: DialParams,
+}
+
+#[derive(Serialize, Deserialize, Debug, Clone)]
+pub enum ShadowTLSVersion {
+    V1 = 1,
+    V2,
+    V3,
+}
diff --git a/src/protocols/singbox/outbound/socks.rs b/src/protocols/singbox/outbound/socks.rs
new file mode 100644
index 0000000..b78cadc
--- /dev/null
+++ b/src/protocols/singbox/outbound/socks.rs
@@ -0,0 +1,20 @@
+use crate::protocols::singbox::common::base::{ Network, DialParams };
+use super::base::UdpOverTcp;
+use serde::{Deserialize, Serialize};
+use serde_with::skip_serializing_none;
+
+#[skip_serializing_none]
+#[derive(Serialize, Deserialize, Debug, Clone)]
+pub struct Socks {
+    pub tag: String,
+    pub server: String,
+    pub server_port: u16,
+    pub version: Option<String>,
+    pub username: Option<String>,
+    pub password: Option<String>,
+    pub network: Option<Network>,
+    pub udp_over_tcp: Option<UdpOverTcp>,
+    
+    #[serde(flatten)]
+    pub dial_params: DialParams,
+}
diff --git a/src/protocols/singbox/outbound/ssh.rs b/src/protocols/singbox/outbound/ssh.rs
new file mode 100644
index 0000000..46e01fc
--- /dev/null
+++ b/src/protocols/singbox/outbound/ssh.rs
@@ -0,0 +1,22 @@
+use crate::protocols::singbox::common::base::DialParams;
+use serde::{Deserialize, Serialize};
+use serde_with::skip_serializing_none;
+
+#[skip_serializing_none]
+#[derive(Serialize, Deserialize, Debug, Clone)]
+pub struct SSH {
+    pub tag: String,
+    pub server: String,
+    pub server_port: Option<u16>,
+    pub user: Option<String>,
+    pub password: Option<String>,
+    pub private_key: Option<String>,
+    pub private_key_path: Option<String>,
+    pub private_key_passphrase: Option<String>,
+    pub host_key: Option<Vec<String>>,
+    pub host_key_algorithms: Option<Vec<String>>,
+    pub client_version: Option<String>,
+    
+    #[serde(flatten)]
+    pub dial_params: DialParams,
+}
diff --git a/src/protocols/singbox/outbound/tor.rs b/src/protocols/singbox/outbound/tor.rs
new file mode 100644
index 0000000..822467f
--- /dev/null
+++ b/src/protocols/singbox/outbound/tor.rs
@@ -0,0 +1,49 @@
+use crate::protocols::singbox::common::base::DialParams;
+use serde::{Deserialize, Serialize};
+use serde_with::skip_serializing_none;
+
+#[skip_serializing_none]
+#[derive(Serialize, Deserialize, Debug, Clone)]
+pub struct Tor {
+    pub tag: String,
+    pub executable_path: Option<String>,
+    pub extra_args: Option<Vec<String>>,
+    pub data_directory: Option<String>,
+    pub torrc: Option<Torrc>,
+
+    #[serde(flatten)]
+    pub dial_params: DialParams,
+}
+
+#[skip_serializing_none]
+#[derive(Serialize, Deserialize, Debug, Clone)]
+pub struct Torrc {
+    #[serde(rename = "ClientOnly")]
+    pub client_only: TorClientOnly,
+}
+
+#[derive(Debug, Clone, Copy, Serialize, Deserialize, PartialEq, Eq, Default)]
+#[serde(into = "u8", try_from = "u8")]
+pub enum TorClientOnly {
+    #[default]
+    AllowRelay = 0,
+    ForceClient = 1,
+}
+
+impl From<TorClientOnly> for u8 {
+    fn from(val: TorClientOnly) -> Self {
+        val as u8
+    }
+}
+
+impl TryFrom<u8> for TorClientOnly {
+    type Error = String;
+
+    fn try_from(val: u8) -> Result<Self, Self::Error> {
+        match val {
+            0 => Ok(Self::AllowRelay),
+            1 => Ok(Self::ForceClient),
+            _ => Err(format!("invalid TorClientOnly value: {}, must be 0 or 1", val)),
+        }
+    }
+}
\ No newline at end of file
diff --git a/src/protocols/singbox/outbound/trojan.rs b/src/protocols/singbox/outbound/trojan.rs
new file mode 100644
index 0000000..3e06039
--- /dev/null
+++ b/src/protocols/singbox/outbound/trojan.rs
@@ -0,0 +1,19 @@
+use crate::protocols::singbox::common::{base::{Network, DialParams}, multiplex::Multiplex, tls, transport::Transport};
+use serde::{Deserialize, Serialize};
+use serde_with::skip_serializing_none;
+
+#[skip_serializing_none]
+#[derive(Serialize, Deserialize, Debug, Clone)]
+pub struct Trojan {
+    pub tag: String,
+    pub server: String,
+    pub server_port: u16,
+    pub password: String,
+    pub network: Option<Network>,
+    pub tls: Option<tls::Outbound>,
+    pub multiplex: Option<Multiplex>,
+    pub transport: Option<Transport>,
+    
+    #[serde(flatten)]
+    pub dial_params: DialParams,
+}
diff --git a/src/protocols/singbox/outbound/tuic.rs b/src/protocols/singbox/outbound/tuic.rs
new file mode 100644
index 0000000..e281b2b
--- /dev/null
+++ b/src/protocols/singbox/outbound/tuic.rs
@@ -0,0 +1,41 @@
+use crate::protocols::singbox::{common::{
+    base::{Network, DialParams},
+    tls,
+}};
+use serde::{Deserialize, Serialize};
+use serde_with::skip_serializing_none;
+
+#[skip_serializing_none]
+#[derive(Serialize, Deserialize, Debug, Clone)]
+pub struct TUIC {
+    pub tag: String,
+    pub server: String,
+    pub server_port: u16,
+    pub uuid: String,
+    pub password: Option<String>,
+    pub congestion_control: Option<CongestionControl>,
+    pub udp_relay_mode: Option<UdpRelayMode>,
+    pub udp_over_stream: Option<bool>,
+    pub zero_rtt_handshake: Option<bool>,
+    pub heartbeat: Option<String>,
+    pub network: Option<Network>,
+    pub tls: Option<tls::Outbound>,
+    
+    #[serde(flatten)]
+    pub dial_params: DialParams,
+}
+
+#[derive(Serialize, Deserialize, Debug, Clone)]
+#[serde(rename_all = "snake_case")]
+pub enum CongestionControl {
+    Cubic,
+    NewReno,
+    Bbr,
+}
+
+#[derive(Serialize, Deserialize, Debug, Clone)]
+#[serde(rename_all = "snake_case")]
+pub enum UdpRelayMode {
+    Native,
+    Quic
+}
\ No newline at end of file
diff --git a/src/singbox/outbound/urltest.rs b/src/protocols/singbox/outbound/urltest.rs
similarity index 76%
rename from src/singbox/outbound/urltest.rs
rename to src/protocols/singbox/outbound/urltest.rs
index 303d889..39bda98 100644
--- a/src/singbox/outbound/urltest.rs
+++ b/src/protocols/singbox/outbound/urltest.rs
@@ -1,12 +1,12 @@
 use serde::{Deserialize, Serialize};
 
-#[derive(Default, Serialize, Deserialize, Debug)]
+#[derive(Serialize, Deserialize, Debug, Clone)]
 pub struct Urltest {
     pub tag: String,
+    pub outbounds: Vec<String>,
     pub url: Option<String>,
     pub interval: Option<String>,
-    pub tolerance: Option<usize>,
+    pub tolerance: Option<u32>,
     pub idle_timeout: Option<String>,
     pub interrupt_exist_connections: Option<bool>,
-    pub outbounds: Vec<String>,
 }
diff --git a/src/protocols/singbox/outbound/vless.rs b/src/protocols/singbox/outbound/vless.rs
new file mode 100644
index 0000000..83659d4
--- /dev/null
+++ b/src/protocols/singbox/outbound/vless.rs
@@ -0,0 +1,26 @@
+use crate::protocols::singbox::common::{
+    base::{DialParams, Network},
+    multiplex::Multiplex,
+    tls,
+    transport::Transport,
+};
+use serde::{Deserialize, Serialize};
+use serde_with::skip_serializing_none;
+
+#[skip_serializing_none]
+#[derive(Serialize, Deserialize, Debug, Clone)]
+pub struct VLESS {
+    pub tag: String,
+    pub server: String,
+    pub server_port: u16,
+    pub uuid: String,
+    pub flow: Option<String>,
+    pub network: Option<Network>,
+    pub tls: Option<tls::Outbound>,
+    pub packet_encoding: Option<String>,
+    pub multiplex: Option<Multiplex>,
+    pub transport: Option<Transport>,
+
+    #[serde(flatten)]
+    pub dial_params: DialParams,   
+}
diff --git a/src/protocols/singbox/outbound/vmess.rs b/src/protocols/singbox/outbound/vmess.rs
new file mode 100644
index 0000000..2ebae12
--- /dev/null
+++ b/src/protocols/singbox/outbound/vmess.rs
@@ -0,0 +1,29 @@
+use crate::protocols::singbox::common::{
+    base::{Network, DialParams},
+    multiplex::Multiplex,
+    tls,
+    transport::Transport,
+};
+use serde::{Deserialize, Serialize};
+use serde_with::skip_serializing_none;
+
+#[skip_serializing_none]
+#[derive(Serialize, Deserialize, Debug, Clone)]
+pub struct VMess {
+    pub tag: String,
+    pub server: String,
+    pub server_port: u16,
+    pub uuid: String,
+    pub security: Option<String>,
+    pub alter_id: Option<u32>,
+    pub global_padding: Option<bool>,
+    pub authenticated_length: Option<bool>,
+    pub network: Option<Network>,
+    pub tls: Option<tls::Outbound>,
+    pub packet_encoding: Option<String>,
+    pub transport: Option<Transport>,
+    pub multiplex: Option<Multiplex>,
+    
+    #[serde(flatten)]
+    pub dial_params: DialParams,
+}
diff --git a/src/protocols/singbox/route/mod.rs b/src/protocols/singbox/route/mod.rs
new file mode 100644
index 0000000..ae2818b
--- /dev/null
+++ b/src/protocols/singbox/route/mod.rs
@@ -0,0 +1,43 @@
+pub mod rule;
+pub mod rule_set;
+
+use serde::{Deserialize, Serialize};
+use serde_with::skip_serializing_none;
+
+use crate::protocols::singbox::common::base::{NetworkStrategy, NetworkType};
+
+use super::common::base::Strategy;
+
+#[skip_serializing_none]
+#[derive(Serialize, Deserialize, Debug, Clone)]
+pub struct Route {
+    pub rules: Vec<rule::Rule>,
+    pub rule_set: Vec<rule_set::RuleSet>,
+    pub r#final: Option<String>,
+    pub auto_detect_interface: Option<bool>,
+    pub override_android_vpn: Option<bool>,
+    pub default_interface: Option<String>,
+    pub default_mark: Option<u32>,
+    pub default_domain_resolver: Option<StringOrDomainResolver>,
+    pub default_network_strategy: Option<NetworkStrategy>,
+    pub default_network_type: Option<Vec<NetworkType>>,
+    pub default_fallback_network_type: Option<Vec<NetworkType>>,
+    pub default_fallback_delay: Option<u32>,
+}
+
+#[derive(Serialize, Deserialize, Debug, Clone)]
+#[serde(untagged)]
+pub enum StringOrDomainResolver {
+    Str(String),
+    DomainResolver(DomainResolver),
+}
+
+#[skip_serializing_none]
+#[derive(Serialize, Deserialize, Debug, Clone)]
+pub struct DomainResolver {
+    server: String,
+    strategy: Option<Strategy>,
+    disable_cache: Option<bool>,
+    rewrite_ttl: Option<i32>,
+    client_subnet: Option<String>,
+}
diff --git a/src/protocols/singbox/route/rule.rs b/src/protocols/singbox/route/rule.rs
new file mode 100644
index 0000000..db4234e
--- /dev/null
+++ b/src/protocols/singbox/route/rule.rs
@@ -0,0 +1,112 @@
+use crate::protocols::singbox::common::base::{
+    IpVersion, LogicalMode, Network, NetworkType, SingleOrMultipleValue, Strategy,
+};
+use indexmap::IndexMap;
+use serde::{Deserialize, Serialize};
+use serde_with::skip_serializing_none;
+
+#[skip_serializing_none]
+#[derive(Serialize, Deserialize, Debug, Clone)]
+#[serde(untagged)]
+pub enum Rule {
+    Logical(LogicalRule),
+    Basic(BasicRule),
+}
+
+#[skip_serializing_none]
+#[derive(Serialize, Deserialize, Debug, Clone)]
+pub struct BasicRule {
+    pub inbound: Option<SingleOrMultipleValue>,
+    pub ip_version: Option<IpVersion>,
+    pub network: Option<Network>,
+    pub auth_user: Option<SingleOrMultipleValue>,
+    pub protocol: Option<SingleOrMultipleValue<Protocol>>,
+    pub client: Option<SingleOrMultipleValue<ProtocolSniffClient>>,
+    pub domain: Option<SingleOrMultipleValue>,
+    pub domain_suffix: Option<SingleOrMultipleValue>,
+    pub domain_keyword: Option<SingleOrMultipleValue>,
+    pub domain_regex: Option<SingleOrMultipleValue>,
+    pub source_ip_cidr: Option<SingleOrMultipleValue>,
+    pub source_ip_is_private: Option<bool>,
+    pub ip_cidr: Option<SingleOrMultipleValue>,
+    pub ip_is_private: Option<bool>,
+    pub ip_accept_any: Option<bool>,
+    pub source_port: Option<SingleOrMultipleValue<u16>>,
+    pub source_port_range: Option<SingleOrMultipleValue>,
+    pub port: Option<SingleOrMultipleValue<u16>>,
+    pub port_range: Option<SingleOrMultipleValue>,
+    pub process_name: Option<SingleOrMultipleValue>,
+    pub process_path: Option<SingleOrMultipleValue>,
+    pub process_path_regex: Option<SingleOrMultipleValue>,
+    pub package_name: Option<SingleOrMultipleValue>,
+    pub user: Option<SingleOrMultipleValue>,
+    pub user_id: Option<SingleOrMultipleValue<u32>>,
+    pub clash_mode: Option<String>,
+    pub network_type: Option<SingleOrMultipleValue<NetworkType>>,
+    pub network_is_expensive: Option<bool>,
+    pub network_is_constrained: Option<bool>,
+    pub interface_address: Option<IndexMap<String, SingleOrMultipleValue>>,
+    pub network_interface_address: Option<IndexMap<String, SingleOrMultipleValue>>,
+    pub default_interface_address: Option<SingleOrMultipleValue<String>>,
+    pub wifi_ssid: Option<SingleOrMultipleValue>,
+    pub wifi_bssid: Option<SingleOrMultipleValue>,
+    pub preferred_by: Option<SingleOrMultipleValue>,
+    pub rule_set: Option<SingleOrMultipleValue>,
+    pub rule_set_ip_cidr_match_source: Option<SingleOrMultipleValue>,
+    pub invert: Option<bool>,
+    pub action: Option<RuleAction>,
+    pub outbound: Option<String>,
+    pub strategy: Option<Strategy>
+}
+
+#[skip_serializing_none]
+#[derive(Serialize, Deserialize, Debug, Clone)]
+pub struct LogicalRule {
+    pub r#type: String,
+    pub mode: LogicalMode,
+    pub rules: Vec<BasicRule>,
+    pub action: RuleAction,
+}
+
+#[derive(Serialize, Deserialize, Debug, Clone)]
+#[serde(rename_all = "snake_case")]
+pub enum Protocol {
+    Http,
+    Tls,
+    Quic,
+    Stun,
+    Dns,
+    Bittorrent,
+    Dtls,
+    Ssh,
+    Rdp,
+    Ntp,
+}
+
+#[derive(Debug, Clone, Serialize, Deserialize, PartialEq, Eq)]
+#[serde(rename_all = "kebab-case")]
+pub enum RuleAction {
+    Route,
+    Bypass,
+    Reject,
+    HijackDns,
+    RouteOptions,
+    Sniff,
+    Resolve,
+}
+
+#[derive(Debug, Clone, Serialize, Deserialize, PartialEq, Eq)]
+#[serde(rename_all = "snake_case")]
+pub enum ProtocolSniffClient {
+    QuicClient(QuicClient),
+    SshClient(String),
+}
+
+#[derive(Debug, Clone, Serialize, Deserialize, PartialEq, Eq)]
+#[serde(rename_all = "snake_case")]
+pub enum QuicClient {
+    Chromium,
+    Safari,
+    Firefox,
+    QuicGo,
+}
diff --git a/src/protocols/singbox/route/rule_set.rs b/src/protocols/singbox/route/rule_set.rs
new file mode 100644
index 0000000..1a05221
--- /dev/null
+++ b/src/protocols/singbox/route/rule_set.rs
@@ -0,0 +1,88 @@
+use crate::protocols::singbox::common::base::{
+    LogicalMode, Network, NetworkType, QueryType, SingleOrMultipleValue,
+};
+use indexmap::IndexMap;
+use serde::{Deserialize, Serialize};
+use serde_with::skip_serializing_none;
+
+#[derive(Serialize, Deserialize, Debug, Clone)]
+#[serde(tag = "type", rename_all = "lowercase")]
+pub enum RuleSet {
+    Remote(Remote),
+    Local(Local),
+    Inline(Inline),
+}
+
+#[derive(Serialize, Deserialize, Debug, Clone)]
+pub struct Remote {
+    tag: String,
+    format: Format,
+    url: String,
+    download_detour: Option<String>,
+    update_interval: Option<String>,
+}
+
+#[derive(Serialize, Deserialize, Debug, Clone)]
+#[serde(rename_all = "lowercase")]
+pub enum Format {
+    Source,
+    Binary,
+}
+
+#[derive(Serialize, Deserialize, Debug, Clone)]
+pub struct Local {
+    tag: String,
+    format: Format,
+    path: String,
+}
+
+#[derive(Serialize, Deserialize, Debug, Clone)]
+pub struct Inline {
+    tag: String,
+    rules: Vec<HeadlessRule>,
+}
+
+#[skip_serializing_none]
+#[derive(Serialize, Deserialize, Debug, Clone)]
+#[serde(untagged)]
+pub enum HeadlessRule {
+    Logical(LogicalRule),
+    Basic(BasicRule),
+}
+
+#[skip_serializing_none]
+#[derive(Serialize, Deserialize, Debug, Clone)]
+pub struct BasicRule {
+    pub query_type: Option<SingleOrMultipleValue<QueryType>>,
+    pub network: Option<SingleOrMultipleValue<Network>>,
+    pub domain: Option<SingleOrMultipleValue>,
+    pub domain_suffix: Option<SingleOrMultipleValue>,
+    pub domain_keyword: Option<SingleOrMultipleValue>,
+    pub domain_regex: Option<SingleOrMultipleValue>,
+    pub source_ip_cidr: Option<SingleOrMultipleValue>,
+    pub ip_cidr: Option<SingleOrMultipleValue>,
+    pub source_port: Option<SingleOrMultipleValue<u16>>,
+    pub source_port_range: Option<SingleOrMultipleValue>,
+    pub port: Option<SingleOrMultipleValue<u16>>,
+    pub port_range: Option<SingleOrMultipleValue>,
+    pub process_name: Option<SingleOrMultipleValue>,
+    pub process_path: Option<SingleOrMultipleValue>,
+    pub package_name: Option<SingleOrMultipleValue>,
+    pub network_type: Option<SingleOrMultipleValue<NetworkType>>,
+    pub network_is_expensive: Option<bool>,
+    pub network_is_constrained: Option<bool>,
+    pub network_interface_address: Option<IndexMap<String, SingleOrMultipleValue>>,
+    pub default_interface_address: Option<SingleOrMultipleValue<String>>,
+    pub wifi_ssid: Option<SingleOrMultipleValue>,
+    pub wifi_bssid: Option<SingleOrMultipleValue>,
+    pub invert: Option<bool>,
+}
+
+#[skip_serializing_none]
+#[derive(Serialize, Deserialize, Debug, Clone)]
+pub struct LogicalRule {
+    pub r#type: String,
+    pub mode: LogicalMode,
+    pub rules: Vec<BasicRule>,
+    pub invert: Option<bool>,
+}
diff --git a/src/protocols/singbox/service.rs b/src/protocols/singbox/service.rs
new file mode 100644
index 0000000..2284165
--- /dev/null
+++ b/src/protocols/singbox/service.rs
@@ -0,0 +1,123 @@
+use serde::{Deserialize, Serialize};
+use serde_with::skip_serializing_none;
+use crate::protocols::singbox::common::{base::{DialParams, ListenParams}, tls};
+use indexmap::IndexMap;
+
+#[derive(Serialize, Deserialize, Debug, Clone)]
+#[serde(tag = "type", rename_all = "kebab-case")]
+pub enum Service {
+    Ccm(CCM),
+    Derp(DERP),
+    Ocm(OCM),
+    Resolved(Resolved),
+    SsmApi(SSMAPI),
+}
+
+#[skip_serializing_none]
+#[derive(Serialize, Deserialize, Debug, Clone)]
+pub struct CCM {
+  #[serde(flatten)]
+  pub listen_params: ListenParams,
+
+  credential_path: Option<String>,
+  usages_path: Option<String>,
+  users: Option<Vec<User>>,
+  headers: Option<IndexMap<String, String>>,
+  detour: Option<String>,
+  tls: Option<tls::Tls>,
+}
+
+#[skip_serializing_none]
+#[derive(Serialize, Deserialize, Debug, Clone)]
+pub struct User {
+    pub username: String,
+    pub password: String,
+}
+
+#[skip_serializing_none]
+#[derive(Serialize, Deserialize, Debug, Clone)]
+pub struct DERP {
+  #[serde(flatten)]
+  pub listen_params: ListenParams,
+
+  pub tls: Option<tls::Tls>,
+  pub config_path: String,
+  pub verify_client_endpoint: Option<Vec<String>>,
+  pub verify_client_url: Option<Vec<VerifyClientUrl>>,
+  pub home: Option<String>,
+  pub mesh_with: Option<Vec<MeshWith>>,
+  pub mesh_psk: Option<String>,
+  pub mesh_psk_file: Option<String>,
+  pub stun: Option<Stun>,
+}
+
+#[skip_serializing_none]
+#[derive(Serialize, Deserialize, Debug, Clone)]
+pub struct VerifyClientUrl {
+  pub url: String,
+
+  #[serde(flatten)]
+  pub dial_params: DialParams,
+}
+
+#[skip_serializing_none]
+#[derive(Serialize, Deserialize, Debug, Clone)]
+pub struct MeshWith {
+  pub server: String,
+  pub server_port: u16,
+  pub host: Option<String>,
+  pub tls: Option<tls::Tls>,
+
+  #[serde(flatten)]
+  pub listen_params: ListenParams,
+}
+
+#[skip_serializing_none]
+#[derive(Serialize, Deserialize, Debug, Clone)]
+pub struct Stun {
+  pub enable: Option<bool>,
+
+  #[serde(flatten)]
+  pub listen_params: ListenParams,
+}
+
+#[skip_serializing_none]
+#[derive(Serialize, Deserialize, Debug, Clone)]
+pub struct OCM {
+  #[serde(flatten)]
+  pub listen_params: ListenParams,
+
+  pub credential_path: Option<String>,
+  pub usages_path: Option<String>,
+  pub users: Option<Vec<OCMUser>>,
+  pub headers: Option<IndexMap<String, String>>,
+  pub detour: Option<String>,
+  pub tls: Option<tls::Tls>,
+}
+
+#[skip_serializing_none]
+#[derive(Serialize, Deserialize, Debug, Clone)]
+pub struct Resolved {
+  #[serde(flatten)]
+  pub listen_params: ListenParams,
+}
+
+#[skip_serializing_none]
+#[derive(Serialize, Deserialize, Debug, Clone)]
+pub struct SSMAPI {
+  #[serde(flatten)]
+  pub listen_params: ListenParams,
+
+
+  pub servers: IndexMap<String, String>,
+  pub cache_path: Option<String>,
+  pub tls: Option<tls::Tls>,
+}
+
+#[skip_serializing_none]
+#[derive(Serialize, Deserialize, Debug, Clone)]
+pub struct OCMUser {
+  pub name: String,
+  pub token: String,
+}
+
diff --git a/src/protocols/singbox/template_processor.rs b/src/protocols/singbox/template_processor.rs
new file mode 100644
index 0000000..55439ae
--- /dev/null
+++ b/src/protocols/singbox/template_processor.rs
@@ -0,0 +1,815 @@
+//! Sing-box template processor
+
+use crate::protocols::{ProtocolProcessor, ProxyServer};
+use crate::core::error::Result;
+use crate::utils::source::parser::Source;
+use crate::utils::template::interpolation_parser::InterpolationRule;
+use indexmap::IndexMap;
+use serde_json;
+
+/// Sing-box protocol processor
+pub struct SingboxProcessor;
+
+impl SingboxProcessor {
+    /// Get all servers from sources (with source prefix if multiple sources)
+    /// Uses IndexMap to preserve insertion order of sources
+    fn get_all_servers_from_sources(sources: &IndexMap<String, Source>) -> Vec<ProxyServer> {
+        let has_multiple_sources = sources.len() > 1;
+
+        // IndexMap preserves insertion order, so iteration order matches the order sources were added
+        sources
+            .iter()
+            .flat_map(|(source_name, source)| {
+                let servers = source.extract_servers().unwrap_or_default();
+                if has_multiple_sources {
+                    // Add source prefix to distinguish nodes from different sources
+                    servers
+                        .into_iter()
+                        .map(|server| ProxyServer {
+                            name: format!("{}@{}", source_name, server.name),
+                            ..server
+                        })
+                        .collect::<Vec<_>>()
+                } else {
+                    servers
+                }
+            })
+            .collect()
+    }
+
+    /// Get servers from specific source (with source prefix if multiple sources exist)
+    fn get_servers_from_source(
+        sources: &IndexMap<String, Source>,
+        source_name: &str,
+    ) -> Vec<ProxyServer> {
+        let has_multiple_sources = sources.len() > 1;
+
+        sources
+            .get(source_name)
+            .map(|source| {
+                let servers = source.extract_servers().unwrap_or_default();
+                if has_multiple_sources {
+                    // Add source prefix to distinguish nodes
+                    servers
+                        .into_iter()
+                        .map(|server| ProxyServer {
+                            name: format!("{}@{}", source_name, server.name),
+                            ..server
+                        })
+                        .collect()
+                } else {
+                    servers
+                }
+            })
+            .unwrap_or_default()
+    }
+
+    /// Filter servers by tag (name contains tag)
+    fn filter_by_tag(servers: Vec<ProxyServer>, tag: &str) -> Vec<ProxyServer> {
+        servers
+            .into_iter()
+            .filter(|s| s.name.contains(tag))
+            .collect()
+    }
+
+    /// Convert server list to JSON array of names
+    fn servers_to_json_names(servers: &[ProxyServer]) -> String {
+        let names: Vec<String> = servers.iter().map(|s| s.name.clone()).collect();
+        serde_json::to_string(&names).unwrap_or_else(|_| "[]".to_string())
+    }
+
+    /// Convert Clash VMess parameters to Sing-box format
+    pub fn convert_vmess_params_to_singbox(
+        config: &mut serde_json::Map<String, serde_json::Value>,
+        params: &std::collections::HashMap<String, serde_json::Value>,
+    ) {
+        // UUID
+        if let Some(uuid) = params.get("uuid") {
+            config.insert("uuid".to_string(), uuid.clone());
+        }
+
+        // alterId → alter_id
+        if let Some(alter_id) = params.get("alterId").or(params.get("alter_id")) {
+            config.insert("alter_id".to_string(), alter_id.clone());
+        }
+
+        // cipher → security (if not already set)
+        // Skip if cipher is "auto" since sing-box VMess security defaults to "auto"
+        if let Some(cipher) = config.get("security") {
+            let cipher_str = cipher.as_str().unwrap_or("");
+            if cipher_str == "auto" {
+                config.remove("security");
+            }
+        }
+
+
+        // TLS handling
+        let tls_enabled = params
+            .get("tls")
+            .and_then(|v| v.as_bool())
+            .unwrap_or(false);
+
+        if tls_enabled {
+            let mut tls_config = serde_json::Map::new();
+            tls_config.insert("enabled".to_string(), serde_json::Value::Bool(true));
+
+            // servername → server_name
+            if let Some(servername) = params.get("servername").or(params.get("sni")) {
+                tls_config.insert("server_name".to_string(), servername.clone());
+            }
+
+            // skip-cert-verify → insecure
+            if let Some(skip) = params.get("skip-cert-verify") {
+                tls_config.insert("insecure".to_string(), skip.clone());
+            }
+
+            config.insert("tls".to_string(), serde_json::Value::Object(tls_config));
+        }
+
+        // Transport handling (ws, grpc, h2, http)
+        if let Some(network) = params.get("network").and_then(|v| v.as_str()) {
+            let mut transport = serde_json::Map::new();
+            transport.insert(
+                "type".to_string(),
+                serde_json::Value::String(network.to_string()),
+            );
+
+            match network {
+                "ws" => {
+                    if let Some(ws_opts) = params.get("ws-opts") {
+                        if let Some(path) = ws_opts.get("path") {
+                            transport.insert("path".to_string(), path.clone());
+                        }
+                        if let Some(headers) = ws_opts.get("headers") {
+                            transport.insert("headers".to_string(), headers.clone());
+                        }
+                        if let Some(early_data) = ws_opts.get("max-early-data") {
+                            transport.insert("max_early_data".to_string(), early_data.clone());
+                        }
+                        if let Some(header_name) = ws_opts.get("early-data-header-name") {
+                            transport
+                                .insert("early_data_header_name".to_string(), header_name.clone());
+                        }
+                    }
+                }
+                "grpc" => {
+                    if let Some(grpc_opts) = params.get("grpc-opts") {
+                        if let Some(service_name) = grpc_opts.get("grpc-service-name") {
+                            transport.insert("service_name".to_string(), service_name.clone());
+                        }
+                    }
+                }
+                "h2" => {
+                    if let Some(h2_opts) = params.get("h2-opts") {
+                        if let Some(host) = h2_opts.get("host") {
+                            transport.insert("host".to_string(), host.clone());
+                        }
+                        if let Some(path) = h2_opts.get("path") {
+                            transport.insert("path".to_string(), path.clone());
+                        }
+                    }
+                }
+                "http" => {
+                    if let Some(http_opts) = params.get("http-opts") {
+                        if let Some(method) = http_opts.get("method") {
+                            transport.insert("method".to_string(), method.clone());
+                        }
+                        if let Some(path) = http_opts.get("path") {
+                            transport.insert("path".to_string(), path.clone());
+                        }
+                        if let Some(headers) = http_opts.get("headers") {
+                            transport.insert("headers".to_string(), headers.clone());
+                        }
+                    }
+                }
+                _ => {}
+            }
+
+            if transport.len() > 1 {
+                config.insert(
+                    "transport".to_string(),
+                    serde_json::Value::Object(transport),
+                );
+            }
+        }
+    }
+
+    /// Convert Clash Trojan parameters to Sing-box format
+    pub fn convert_trojan_params_to_singbox(
+        config: &mut serde_json::Map<String, serde_json::Value>,
+        params: &std::collections::HashMap<String, serde_json::Value>,
+    ) {
+        // TLS is typically enabled by default for Trojan
+        let mut tls_config = serde_json::Map::new();
+        tls_config.insert("enabled".to_string(), serde_json::Value::Bool(true));
+
+        if let Some(sni) = params.get("sni").or(params.get("servername")) {
+            tls_config.insert("server_name".to_string(), sni.clone());
+        }
+
+        if let Some(skip) = params.get("skip-cert-verify") {
+            tls_config.insert("insecure".to_string(), skip.clone());
+        }
+
+        if let Some(alpn) = params.get("alpn") {
+            tls_config.insert("alpn".to_string(), alpn.clone());
+        }
+
+        config.insert("tls".to_string(), serde_json::Value::Object(tls_config));
+
+        // Transport handling
+        if let Some(network) = params.get("network").and_then(|v| v.as_str()) {
+            let mut transport = serde_json::Map::new();
+            transport.insert(
+                "type".to_string(),
+                serde_json::Value::String(network.to_string()),
+            );
+
+            match network {
+                "ws" => {
+                    if let Some(ws_opts) = params.get("ws-opts") {
+                        if let Some(path) = ws_opts.get("path") {
+                            transport.insert("path".to_string(), path.clone());
+                        }
+                        if let Some(headers) = ws_opts.get("headers") {
+                            transport.insert("headers".to_string(), headers.clone());
+                        }
+                    }
+                }
+                "grpc" => {
+                    if let Some(grpc_opts) = params.get("grpc-opts") {
+                        if let Some(service_name) = grpc_opts.get("grpc-service-name") {
+                            transport.insert("service_name".to_string(), service_name.clone());
+                        }
+                    }
+                }
+                _ => {}
+            }
+
+            if transport.len() > 1 {
+                config.insert(
+                    "transport".to_string(),
+                    serde_json::Value::Object(transport),
+                );
+            }
+        }
+    }
+}
+
+impl ProtocolProcessor for SingboxProcessor {
+    fn process_rule(
+        &self,
+        rule: &InterpolationRule,
+        sources: &IndexMap<String, Source>,
+    ) -> Result<String> {
+        let servers = self.get_nodes_for_rule(rule, sources)?;
+        Ok(Self::servers_to_json_names(&servers))
+    }
+
+    fn get_nodes_for_rule(
+        &self,
+        rule: &InterpolationRule,
+        sources: &IndexMap<String, Source>,
+    ) -> Result<Vec<ProxyServer>> {
+        match rule {
+            InterpolationRule::AllTagFromSources(source_list) => {
+                let mut all_servers = Vec::new();
+
+                if source_list.is_empty() || source_list == &[(None, None)] {
+                    // Get all nodes from all sources
+                    all_servers = Self::get_all_servers_from_sources(sources);
+                } else {
+                    for (source_name, tag_filter) in source_list {
+                        let servers = if let Some(source_name) = source_name {
+                            Self::get_servers_from_source(sources, source_name)
+                        } else {
+                            Self::get_all_servers_from_sources(sources)
+                        };
+
+                        // Apply tag filter if specified
+                        let filtered = if let Some(tag) = tag_filter {
+                            Self::filter_by_tag(servers, tag)
+                        } else {
+                            servers
+                        };
+
+                        all_servers.extend(filtered);
+                    }
+                }
+
+                Ok(all_servers)
+            }
+
+            InterpolationRule::IncludeTagFromSources(tag_pairs) => {
+                let mut matching_servers = Vec::new();
+
+                for (source_name, tag) in tag_pairs {
+                    let servers_to_search = if let Some(source_name) = source_name {
+                        Self::get_servers_from_source(sources, source_name)
+                    } else {
+                        Self::get_all_servers_from_sources(sources)
+                    };
+
+                    let filtered = Self::filter_by_tag(servers_to_search, tag);
+                    matching_servers.extend(filtered);
+                }
+
+                Ok(matching_servers)
+            }
+
+            InterpolationRule::ExcludeTagFromSources(tag_pairs) => {
+                let mut all_servers = Self::get_all_servers_from_sources(sources);
+
+                for (source_name, tag) in tag_pairs {
+                    let exclude_from = if let Some(source_name) = source_name {
+                        Self::get_servers_from_source(sources, source_name)
+                    } else {
+                        all_servers.clone()
+                    };
+
+                    // Create a set of server names to exclude
+                    let exclude_names: std::collections::HashSet<String> = exclude_from
+                        .iter()
+                        .filter(|s| s.name.contains(tag))
+                        .map(|s| s.name.clone())
+                        .collect();
+
+                    all_servers.retain(|server| !exclude_names.contains(&server.name));
+                }
+
+                Ok(all_servers)
+            }
+
+            InterpolationRule::CombinedRule {
+                all_tag,
+                include_tag,
+                exclude_tag,
+            } => {
+                // Start with all servers or servers from ALL-TAG rule
+                let mut result_servers = if let Some(all_rule) = all_tag {
+                    self.get_nodes_for_rule(all_rule, sources)?
+                } else {
+                    Self::get_all_servers_from_sources(sources)
+                };
+
+                // Apply INCLUDE-TAG filter (intersection)
+                if let Some(include_rule) = include_tag {
+                    let include_servers = self.get_nodes_for_rule(include_rule, sources)?;
+                    let include_names: std::collections::HashSet<String> =
+                        include_servers.iter().map(|s| s.name.clone()).collect();
+                    result_servers.retain(|s| include_names.contains(&s.name));
+                }
+
+                // Apply EXCLUDE-TAG filter (removal)
+                // Extract the tags to exclude and filter directly
+                if let Some(exclude_rule) = exclude_tag {
+                    if let InterpolationRule::ExcludeTagFromSources(tag_pairs) =
+                        exclude_rule.as_ref()
+                    {
+                        for (source_name, tag) in tag_pairs {
+                            if source_name.is_some() {
+                                // Exclude only from specific source
+                                let source_prefix = format!("{}@", source_name.as_ref().unwrap());
+                                result_servers.retain(|s| {
+                                    !(s.name.starts_with(&source_prefix) && s.name.contains(tag))
+                                });
+                            } else {
+                                // Exclude from all sources
+                                result_servers.retain(|s| !s.name.contains(tag));
+                            }
+                        }
+                    }
+                }
+
+                Ok(result_servers)
+            }
+        }
+    }
+
+    fn set_default_values(&self, template: &str, nodes: &[ProxyServer]) -> Result<String> {
+        if nodes.is_empty() {
+            return Ok(template.to_string());
+        }
+
+        let first_node_name = &nodes[0].name;
+
+        // Parse template as JSON to properly handle selector outbounds
+        let mut config: serde_json::Value = serde_json::from_str(template).map_err(|e| {
+            crate::core::error::ConvertError::ConfigValidationError(format!(
+                "Failed to parse template as JSON: {}",
+                e
+            ))
+        })?;
+
+        // Process outbounds array
+        if let Some(outbounds) = config.get_mut("outbounds").and_then(|v| v.as_array_mut()) {
+            for outbound in outbounds.iter_mut() {
+                if let Some(obj) = outbound.as_object_mut() {
+                    // Check if this is a selector type
+                    let is_selector = obj
+                        .get("type")
+                        .and_then(|v| v.as_str())
+                        .map(|t| t == "selector")
+                        .unwrap_or(false);
+
+                    if is_selector {
+                        // Handle default field for selector type
+                        let has_default = obj.contains_key("default");
+                        let default_is_empty = obj
+                            .get("default")
+                            .and_then(|v| v.as_str())
+                            .map(|s| s.is_empty())
+                            .unwrap_or(false);
+
+                        if !has_default {
+                            // Case 1: No default field - insert before outbounds to maintain order
+                            let mut new_obj = serde_json::Map::new();
+                            for (k, v) in obj.iter() {
+                                if k == "outbounds" {
+                                    // Insert default before outbounds
+                                    new_obj.insert(
+                                        "default".to_string(),
+                                        serde_json::Value::String(first_node_name.clone()),
+                                    );
+                                }
+                                new_obj.insert(k.clone(), v.clone());
+                            }
+                            // If outbounds wasn't found, add default at the end
+                            if !new_obj.contains_key("default") {
+                                new_obj.insert(
+                                    "default".to_string(),
+                                    serde_json::Value::String(first_node_name.clone()),
+                                );
+                            }
+                            *obj = new_obj;
+                        } else if default_is_empty {
+                            // Case 2: default is empty string - set to first node name
+                            obj.insert(
+                                "default".to_string(),
+                                serde_json::Value::String(first_node_name.clone()),
+                            );
+                        } else if let Some(serde_json::Value::Array(arr)) = obj.get("default") {
+                            // Case 4: default is an array - take first element
+                            if !arr.is_empty() {
+                                if let Some(first) = arr.first().and_then(|v| v.as_str()) {
+                                    obj.insert(
+                                        "default".to_string(),
+                                        serde_json::Value::String(first.to_string()),
+                                    );
+                                }
+                            }
+                        }
+                        // Case 3: default is a non-empty string - keep as is (do nothing)
+                    }
+                }
+            }
+        }
+
+        // Serialize back to string
+        serde_json::to_string_pretty(&config).map_err(|e| {
+            crate::core::error::ConvertError::ConfigValidationError(format!(
+                "Failed to serialize config: {}",
+                e
+            ))
+        })
+    }
+
+    fn append_nodes(&self, template: &str, nodes: &[ProxyServer]) -> Result<String> {
+        // Parse the template as JSON to safely manipulate it
+        let mut config: serde_json::Value = serde_json::from_str(template).map_err(|e| {
+            crate::core::error::ConvertError::ConfigValidationError(format!(
+                "Failed to parse template as JSON: {}",
+                e
+            ))
+        })?;
+
+        // Find the top-level outbounds array
+        if let Some(outbounds) = config.get_mut("outbounds").and_then(|v| v.as_array_mut()) {
+            // Append new node configurations
+            for node in nodes {
+                let node_config = self.create_node_config(node);
+                if let Ok(node_value) = serde_json::from_str::<serde_json::Value>(&node_config) {
+                    outbounds.push(node_value);
+                }
+            }
+        }
+
+        // Serialize back to JSON string
+        serde_json::to_string_pretty(&config).map_err(|e| {
+            crate::core::error::ConvertError::ConfigValidationError(format!(
+                "Failed to serialize config: {}",
+                e
+            ))
+        })
+    }
+
+    fn create_node_config(&self, node: &ProxyServer) -> String {
+        let mut config = serde_json::Map::new();
+
+        // Normalize protocol name
+        let is_shadowsocks = node.protocol == "ss" || node.protocol == "shadowsocks";
+        let is_vmess = node.protocol == "vmess";
+        let is_trojan = node.protocol == "trojan";
+
+        let protocol_type = if node.protocol == "ss" {
+            "shadowsocks".to_string()
+        } else {
+            node.protocol.clone()
+        };
+
+        // Required fields
+        config.insert("type".to_string(), serde_json::Value::String(protocol_type));
+        config.insert(
+            "tag".to_string(),
+            serde_json::Value::String(node.name.clone()),
+        );
+        config.insert(
+            "server".to_string(),
+            serde_json::Value::String(node.server.clone()),
+        );
+        config.insert(
+            "server_port".to_string(),
+            serde_json::Value::Number(serde_json::Number::from(node.port)),
+        );
+
+        // Optional fields
+        if let Some(method) = &node.method {
+            if is_shadowsocks {
+                config.insert(
+                    "method".to_string(),
+                    serde_json::Value::String(method.clone()),
+                );
+            } else if is_vmess {
+                // For VMess, method/cipher maps to "security"
+                config.insert(
+                    "security".to_string(),
+                    serde_json::Value::String(method.clone()),
+                );
+            }
+        }
+
+        if let Some(password) = &node.password {
+            config.insert(
+                "password".to_string(),
+                serde_json::Value::String(password.clone()),
+            );
+        }
+        // VMess specific handling
+        if is_vmess {
+            Self::convert_vmess_params_to_singbox(&mut config, &node.parameters);
+        } else if is_trojan {
+            Self::convert_trojan_params_to_singbox(&mut config, &node.parameters);
+        } else {
+            // Generic parameter handling
+            // Skip fields that are already handled or not needed in sing-box
+            let skip_keys = ["cipher", "udp", "name", "type", "server", "port"];
+            for (key, value) in &node.parameters {
+                if !skip_keys.contains(&key.as_str()) && !(is_shadowsocks && key == "udp") {
+                    config.insert(key.clone(), value.clone());
+                }
+            }
+        }
+
+        serde_json::to_string_pretty(&serde_json::Value::Object(config)).unwrap()
+    }
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+    use crate::core::source::{SourceMeta, SourceProtocol};
+    use crate::utils::source::parser::{Config, Source};
+    use std::collections::HashMap;
+    use crate::protocols::{clash, singbox};
+
+    fn create_test_sources() -> IndexMap<String, Source> {
+        let mut sources = IndexMap::new();
+
+        // Create clash1 source with test nodes
+        let clash1_config = serde_json::json!({
+            "proxies": [
+                {"name": "HK-Node-01", "type": "ss", "server": "1.1.1.1", "port": 443, "cipher": "aes-256-gcm", "password": "test"},
+                {"name": "US-Node-01", "type": "ss", "server": "2.2.2.2", "port": 443, "cipher": "aes-256-gcm", "password": "test"},
+                {"name": "JP-Node-01", "type": "vmess", "server": "3.3.3.3", "port": 443, "uuid": "test-uuid"},
+            ]
+        });
+        // Deserialize into strongly-typed clash::Config
+        let clash1_config: clash::Config =
+            serde_json::from_value(clash1_config).unwrap();
+        sources.insert(
+            "clash1".to_string(),
+            Source {
+                meta: SourceMeta {
+                    name: Some("clash1".to_string()),
+                    source_type: SourceProtocol::Clash,
+                    source: "./clash.yaml".to_string(),
+                    format: None,
+                    flag: None,
+                },
+                config: Config::Clash(clash1_config),
+            },
+        );
+
+        // Create singbox1 source with test nodes
+        let singbox1_config = serde_json::json!({
+            "inbounds": [],
+            "outbounds": [
+                {"tag": "SG-Node-01", "type": "shadowsocks", "server": "4.4.4.4", "server_port": 443, "method": "aes-256-gcm", "password": "test"},
+                {"tag": "CN-Node-01", "type": "shadowsocks", "server": "5.5.5.5", "server_port": 443, "method": "aes-256-gcm", "password": "test"},
+            ]
+        });
+        // Deserialize into strongly-typed singbox::Config
+        let singbox1_config: singbox::Config =
+            serde_json::from_value(singbox1_config).unwrap();
+        sources.insert(
+            "singbox1".to_string(),
+            Source {
+                meta: SourceMeta {
+                    name: Some("singbox1".to_string()),
+                    source_type: SourceProtocol::SingBox,
+                    source: "./singbox.json".to_string(),
+                    format: None,
+                    flag: None,
+                },
+                config: Config::SingBox(singbox1_config),
+            },
+        );
+
+        sources
+    }
+
+    #[test]
+    fn test_process_all_tag() {
+        let processor = SingboxProcessor;
+        let sources = create_test_sources();
+
+        let rule = InterpolationRule::AllTagFromSources(vec![(None, None)]);
+        let result = processor.get_nodes_for_rule(&rule, &sources).unwrap();
+
+        // Currently extract_servers returns empty vec (TODO implementation)
+        // This test will pass once extract_servers is implemented
+        assert!(result.is_empty() || !result.is_empty());
+    }
+
+    #[test]
+    fn test_process_include_tag() {
+        let processor = SingboxProcessor;
+        let sources = create_test_sources();
+
+        let rule = InterpolationRule::IncludeTagFromSources(vec![
+            (None, "US".to_string()),
+            (None, "JP".to_string()),
+        ]);
+        let result = processor.get_nodes_for_rule(&rule, &sources).unwrap();
+
+        // Should only get US and JP nodes (once extract_servers is implemented)
+        for server in &result {
+            assert!(server.name.contains("US") || server.name.contains("JP"));
+        }
+    }
+
+    #[test]
+    fn test_process_exclude_tag() {
+        let processor = SingboxProcessor;
+        let sources = create_test_sources();
+
+        let rule = InterpolationRule::ExcludeTagFromSources(vec![(None, "CN".to_string())]);
+        let result = processor.get_nodes_for_rule(&rule, &sources).unwrap();
+
+        // Should not have CN nodes
+        for server in &result {
+            assert!(!server.name.contains("CN"));
+        }
+    }
+
+    #[test]
+    fn test_process_combined_rule() {
+        let processor = SingboxProcessor;
+        let sources = create_test_sources();
+
+        let rule = InterpolationRule::CombinedRule {
+            all_tag: Some(Box::new(InterpolationRule::AllTagFromSources(vec![(
+                None, None,
+            )]))),
+            include_tag: None,
+            exclude_tag: Some(Box::new(InterpolationRule::ExcludeTagFromSources(vec![(
+                None,
+                "CN".to_string(),
+            )]))),
+        };
+        let result = processor.get_nodes_for_rule(&rule, &sources).unwrap();
+
+        // Should not have CN nodes
+        for server in &result {
+            assert!(!server.name.contains("CN"));
+        }
+    }
+
+    #[test]
+    fn test_servers_to_json_names() {
+        let servers = vec![
+            ProxyServer {
+                name: "Node-01".to_string(),
+                protocol: "shadowsocks".to_string(),
+                server: "1.1.1.1".to_string(),
+                port: 443,
+                password: None,
+                method: None,
+                parameters: HashMap::new(),
+            },
+            ProxyServer {
+                name: "Node-02".to_string(),
+                protocol: "vmess".to_string(),
+                server: "2.2.2.2".to_string(),
+                port: 443,
+                password: None,
+                method: None,
+                parameters: HashMap::new(),
+            },
+        ];
+
+        let json = SingboxProcessor::servers_to_json_names(&servers);
+        assert_eq!(json, "[\"Node-01\",\"Node-02\"]");
+    }
+
+    #[test]
+    fn test_create_node_config() {
+        let processor = SingboxProcessor;
+        let server = ProxyServer {
+            name: "Test-Node".to_string(),
+            protocol: "shadowsocks".to_string(),
+            server: "1.1.1.1".to_string(),
+            port: 443,
+            password: Some("test-password".to_string()),
+            method: Some("aes-256-gcm".to_string()),
+            parameters: HashMap::new(),
+        };
+
+        let config = processor.create_node_config(&server);
+        let parsed: serde_json::Value = serde_json::from_str(&config).unwrap();
+
+        assert_eq!(parsed["type"], "shadowsocks");
+        assert_eq!(parsed["tag"], "Test-Node");
+        assert_eq!(parsed["server"], "1.1.1.1");
+        assert_eq!(parsed["server_port"], 443);
+        assert_eq!(parsed["password"], "test-password");
+        assert_eq!(parsed["method"], "aes-256-gcm");
+    }
+
+    #[test]
+    fn test_create_node_config_with_source_prefix() {
+        // Test that node config uses the prefixed name as tag
+        let processor = SingboxProcessor;
+
+        // Simulate a node that already has source prefix (as returned by get_nodes_for_rule)
+        let server_with_prefix = ProxyServer {
+            name: "clash1@HK-Node-01".to_string(), // Already prefixed
+            protocol: "shadowsocks".to_string(),
+            server: "1.1.1.1".to_string(),
+            port: 443,
+            password: Some("test".to_string()),
+            method: Some("aes-256-gcm".to_string()),
+            parameters: HashMap::new(),
+        };
+
+        let config = processor.create_node_config(&server_with_prefix);
+        let parsed: serde_json::Value = serde_json::from_str(&config).unwrap();
+
+        // The tag should include the source prefix
+        assert_eq!(parsed["tag"], "clash1@HK-Node-01");
+    }
+
+    #[test]
+    fn test_append_nodes_uses_prefixed_names() {
+        let processor = SingboxProcessor;
+
+        // Nodes with source prefixes (as they would be in multi-source scenario)
+        let nodes = vec![
+            ProxyServer {
+                name: "clash1@HK-Node-01".to_string(),
+                protocol: "shadowsocks".to_string(),
+                server: "1.1.1.1".to_string(),
+                port: 443,
+                password: Some("test".to_string()),
+                method: Some("aes-256-gcm".to_string()),
+                parameters: HashMap::new(),
+            },
+            ProxyServer {
+                name: "singbox1@US-Node-01".to_string(),
+                protocol: "vmess".to_string(),
+                server: "2.2.2.2".to_string(),
+                port: 443,
+                password: None,
+                method: None,
+                parameters: HashMap::new(),
+            },
+        ];
+
+        let template = r#"{"outbounds": []}"#;
+        let result = processor.append_nodes(template, &nodes).unwrap();
+
+        // Verify the output contains the prefixed tags
+        assert!(result.contains(r#""tag": "clash1@HK-Node-01""#));
+        assert!(result.contains(r#""tag": "singbox1@US-Node-01""#));
+    }
+}
diff --git a/src/protocols/subscription.rs b/src/protocols/subscription.rs
new file mode 100644
index 0000000..ad49fad
--- /dev/null
+++ b/src/protocols/subscription.rs
@@ -0,0 +1,209 @@
+//! Subscription and plain-text proxy list parsing.
+//!
+//! Parses vmess://, trojan://, ss:// (SIP002 and legacy) and multi-line content.
+//! Used by ProtocolRegistry for "subscription" and "plain" formats.
+
+use crate::core::error::Result;
+use crate::protocols::detect::is_base64_encoded;
+use crate::protocols::ProxyServer;
+use std::collections::HashMap;
+
+/// Parse subscription format (possibly base64-encoded, then one proxy per line).
+pub fn parse_subscription(content: &str) -> Result<Vec<ProxyServer>> {
+    let content = if is_base64_encoded(content) {
+        let clean: String = content.chars().filter(|c| !c.is_whitespace()).collect();
+        if let Ok(decoded) =
+            base64::Engine::decode(&base64::engine::general_purpose::STANDARD, &clean)
+        {
+            String::from_utf8(decoded).unwrap_or_else(|_| content.to_string())
+        } else {
+            content.to_string()
+        }
+    } else {
+        content.to_string()
+    };
+    parse_plain_text(&content)
+}
+
+/// Parse plain text (one proxy URL per line; # comments and empty lines skipped).
+pub fn parse_plain_text(content: &str) -> Result<Vec<ProxyServer>> {
+    let mut servers = Vec::new();
+    for line in content.lines() {
+        let line = line.trim();
+        if line.is_empty() || line.starts_with('#') {
+            continue;
+        }
+        if let Some(server) = parse_proxy_url(line)? {
+            servers.push(server);
+        }
+    }
+    Ok(servers)
+}
+
+/// Parse a single proxy URL (vmess://, trojan://, ss://).
+pub fn parse_proxy_url(url: &str) -> Result<Option<ProxyServer>> {
+    if url.starts_with("vmess://") {
+        parse_vmess_url(url)
+    } else if url.starts_with("trojan://") {
+        parse_trojan_url(url)
+    } else if url.starts_with("ss://") {
+        parse_shadowsocks_url(url)
+    } else {
+        tracing::warn!("Unsupported proxy URL: {}", url);
+        Ok(None)
+    }
+}
+
+fn parse_vmess_url(url: &str) -> Result<Option<ProxyServer>> {
+    let vmess_part = url.strip_prefix("vmess://").unwrap_or("");
+    let at_pos = match vmess_part.find('@') {
+        Some(p) => p,
+        None => return Ok(None),
+    };
+    let uuid = &vmess_part[..at_pos];
+    let rest = &vmess_part[at_pos + 1..];
+    let (server_port, name) = match rest.find('#') {
+        Some(hash_pos) => (&rest[..hash_pos], &rest[hash_pos + 1..]),
+        None => return Ok(None),
+    };
+    let colon_pos = match server_port.find(':') {
+        Some(p) => p,
+        None => return Ok(None),
+    };
+    let server = &server_port[..colon_pos];
+    let port = server_port[colon_pos + 1..].parse::<u16>().unwrap_or(0);
+    let mut parameters = HashMap::new();
+    parameters.insert("uuid".to_string(), serde_json::Value::String(uuid.to_string()));
+    Ok(Some(ProxyServer {
+        name: name.to_string(),
+        protocol: "vmess".to_string(),
+        server: server.to_string(),
+        port,
+        password: None,
+        method: None,
+        parameters,
+    }))
+}
+
+fn parse_trojan_url(url: &str) -> Result<Option<ProxyServer>> {
+    let trojan_part = url.strip_prefix("trojan://").unwrap_or("");
+    let at_pos = match trojan_part.find('@') {
+        Some(p) => p,
+        None => return Ok(None),
+    };
+    let password = &trojan_part[..at_pos];
+    let rest = &trojan_part[at_pos + 1..];
+    let (server_port, name) = match rest.find('#') {
+        Some(hash_pos) => (&rest[..hash_pos], &rest[hash_pos + 1..]),
+        None => return Ok(None),
+    };
+    let colon_pos = match server_port.find(':') {
+        Some(p) => p,
+        None => return Ok(None),
+    };
+    let server = &server_port[..colon_pos];
+    let port = server_port[colon_pos + 1..].parse::<u16>().unwrap_or(0);
+    let mut parameters = HashMap::new();
+    parameters.insert(
+        "password".to_string(),
+        serde_json::Value::String(password.to_string()),
+    );
+    Ok(Some(ProxyServer {
+        name: name.to_string(),
+        protocol: "trojan".to_string(),
+        server: server.to_string(),
+        port,
+        password: Some(password.to_string()),
+        method: None,
+        parameters,
+    }))
+}
+
+fn parse_shadowsocks_url(url: &str) -> Result<Option<ProxyServer>> {
+    let ss_part = url.strip_prefix("ss://").unwrap_or("");
+    let (main_part, name) = if let Some(hash_pos) = ss_part.find('#') {
+        let name_encoded = &ss_part[hash_pos + 1..];
+        let name = urlencoding::decode(name_encoded)
+            .unwrap_or_else(|_| std::borrow::Cow::Borrowed(name_encoded))
+            .to_string();
+        (&ss_part[..hash_pos], name)
+    } else {
+        (ss_part, String::new())
+    };
+    let main_part = main_part.split('?').next().unwrap_or(main_part);
+
+    if let Some(at_pos) = main_part.rfind('@') {
+        let encoded = &main_part[..at_pos];
+        let server_port = &main_part[at_pos + 1..];
+        let (server, port) = if let Some(colon_pos) = server_port.rfind(':') {
+            (
+                server_port[..colon_pos].to_string(),
+                server_port[colon_pos + 1..].parse::<u16>().unwrap_or(0),
+            )
+        } else {
+            return Ok(None);
+        };
+        let decoded_result = base64::Engine::decode(
+            &base64::engine::general_purpose::STANDARD,
+            encoded,
+        )
+        .or_else(|_| {
+            base64::Engine::decode(&base64::engine::general_purpose::URL_SAFE, encoded)
+        })
+        .or_else(|_| {
+            let padded = match encoded.len() % 4 {
+                2 => format!("{}==", encoded),
+                3 => format!("{}=", encoded),
+                _ => encoded.to_string(),
+            };
+            base64::Engine::decode(&base64::engine::general_purpose::STANDARD, &padded)
+        });
+        if let Ok(decoded) = decoded_result {
+            if let Ok(decoded_str) = String::from_utf8(decoded) {
+                if let Some(colon_pos) = decoded_str.find(':') {
+                    let method = &decoded_str[..colon_pos];
+                    let password = &decoded_str[colon_pos + 1..];
+                    return Ok(Some(ProxyServer {
+                        name,
+                        protocol: "shadowsocks".to_string(),
+                        server,
+                        port,
+                        password: Some(password.to_string()),
+                        method: Some(method.to_string()),
+                        parameters: HashMap::new(),
+                    }));
+                }
+            }
+        }
+    }
+
+    if let Ok(decoded) =
+        base64::Engine::decode(&base64::engine::general_purpose::STANDARD, main_part)
+    {
+        if let Ok(decoded_str) = String::from_utf8(decoded) {
+            if let Some(at_pos) = decoded_str.find('@') {
+                let method_password = &decoded_str[..at_pos];
+                let server_port = &decoded_str[at_pos + 1..];
+                if let Some(colon_pos) = method_password.find(':') {
+                    let method = &method_password[..colon_pos];
+                    let password = &method_password[colon_pos + 1..];
+                    if let Some(colon_pos) = server_port.find(':') {
+                        let server = &server_port[..colon_pos];
+                        let port = server_port[colon_pos + 1..].parse::<u16>().unwrap_or(0);
+                        return Ok(Some(ProxyServer {
+                            name,
+                            protocol: "shadowsocks".to_string(),
+                            server: server.to_string(),
+                            port,
+                            password: Some(password.to_string()),
+                            method: Some(method.to_string()),
+                            parameters: HashMap::new(),
+                        }));
+                    }
+                }
+            }
+        }
+    }
+
+    Ok(None)
+}
diff --git a/src/protocols/v2ray/default_template.rs b/src/protocols/v2ray/default_template.rs
new file mode 100644
index 0000000..9b4dadc
--- /dev/null
+++ b/src/protocols/v2ray/default_template.rs
@@ -0,0 +1,84 @@
+//! V2Ray default template
+
+/// Generate default V2Ray configuration template
+pub fn generate() -> String {
+    let template = serde_json::json!({
+        "log": {
+            "loglevel": "warning"
+        },
+        "inbounds": [
+            {
+                "port": 10808,
+                "listen": "127.0.0.1",
+                "protocol": "socks",
+                "sniffing": {
+                    "enabled": true,
+                    "destOverride": ["http", "tls"]
+                },
+                "settings": {
+                    "udp": true
+                }
+            },
+            {
+                "port": 10809,
+                "listen": "127.0.0.1",
+                "protocol": "http",
+                "sniffing": {
+                    "enabled": true,
+                    "destOverride": ["http", "tls"]
+                }
+            }
+        ],
+        "outbounds": [
+            {
+                "tag": "proxy",
+                "protocol": "vmess",
+                "settings": {
+                    "vnext": "{{ALL-TAG}}"
+                },
+                "streamSettings": {
+                    "network": "tcp"
+                }
+            },
+            {
+                "tag": "direct",
+                "protocol": "freedom",
+                "settings": {}
+            },
+            {
+                "tag": "block",
+                "protocol": "blackhole",
+                "settings": {}
+            }
+        ],
+        "routing": {
+            "domainStrategy": "IPIfNonMatch",
+            "rules": [
+                {
+                    "type": "field",
+                    "ip": ["geoip:private", "geoip:cn"],
+                    "outboundTag": "direct"
+                },
+                {
+                    "type": "field",
+                    "domain": ["geosite:cn"],
+                    "outboundTag": "direct"
+                }
+            ]
+        },
+        "dns": {
+            "servers": [
+                "8.8.8.8",
+                "1.1.1.1",
+                {
+                    "address": "223.5.5.5",
+                    "port": 53,
+                    "domains": ["geosite:cn"]
+                }
+            ]
+        }
+    });
+
+    serde_json::to_string_pretty(&template).unwrap_or_default()
+}
+
diff --git a/src/protocols/v2ray/mod.rs b/src/protocols/v2ray/mod.rs
new file mode 100644
index 0000000..a097ae3
--- /dev/null
+++ b/src/protocols/v2ray/mod.rs
@@ -0,0 +1,101 @@
+//! V2Ray Protocol Support Module
+
+pub mod default_template;
+pub mod template_processor;
+
+use serde::{Deserialize, Serialize};
+use std::collections::HashMap;
+
+/// V2Ray configuration
+#[derive(Serialize, Deserialize, Debug, Clone)]
+pub struct Config {
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub log: Option<Log>,
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub inbounds: Option<Vec<Inbound>>,
+    #[serde(default)]
+    pub outbounds: Vec<Outbound>,
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub routing: Option<Routing>,
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub dns: Option<Dns>,
+    /// Capture unknown fields
+    #[serde(flatten)]
+    pub extra: HashMap<String, serde_json::Value>,
+}
+
+/// V2Ray log configuration
+#[derive(Serialize, Deserialize, Debug, Clone)]
+pub struct Log {
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub loglevel: Option<String>,
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub access: Option<String>,
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub error: Option<String>,
+    #[serde(flatten)]
+    pub extra: HashMap<String, serde_json::Value>,
+}
+
+/// V2Ray inbound configuration
+#[derive(Serialize, Deserialize, Debug, Clone)]
+pub struct Inbound {
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub port: Option<u16>,
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub listen: Option<String>,
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub protocol: Option<String>,
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub settings: Option<serde_json::Value>,
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub sniffing: Option<serde_json::Value>,
+    #[serde(flatten)]
+    pub extra: HashMap<String, serde_json::Value>,
+}
+
+/// V2Ray outbound configuration
+#[derive(Serialize, Deserialize, Debug, Clone)]
+pub struct Outbound {
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub tag: Option<String>,
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub protocol: Option<String>,
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub settings: Option<serde_json::Value>,
+    #[serde(rename = "streamSettings", skip_serializing_if = "Option::is_none")]
+    pub stream_settings: Option<serde_json::Value>,
+    #[serde(flatten)]
+    pub extra: HashMap<String, serde_json::Value>,
+}
+
+/// V2Ray routing configuration
+#[derive(Serialize, Deserialize, Debug, Clone)]
+pub struct Routing {
+    #[serde(rename = "domainStrategy", skip_serializing_if = "Option::is_none")]
+    pub domain_strategy: Option<String>,
+    #[serde(default)]
+    pub rules: Vec<serde_json::Value>,
+    #[serde(flatten)]
+    pub extra: HashMap<String, serde_json::Value>,
+}
+
+/// V2Ray DNS configuration
+#[derive(Serialize, Deserialize, Debug, Clone)]
+pub struct Dns {
+    #[serde(default)]
+    pub servers: Vec<serde_json::Value>,
+    #[serde(flatten)]
+    pub extra: HashMap<String, serde_json::Value>,
+}
+
+/// Protocol name
+pub const PROTOCOL_NAME: &str = "v2ray";
+
+/// Configuration file extension
+pub const CONFIG_EXT: &str = "json";
+
+/// Generate default V2Ray configuration template
+pub fn generate_default_template() -> String {
+    default_template::generate()
+}
diff --git a/src/protocols/v2ray/template_processor.rs b/src/protocols/v2ray/template_processor.rs
new file mode 100644
index 0000000..88f4f9c
--- /dev/null
+++ b/src/protocols/v2ray/template_processor.rs
@@ -0,0 +1,74 @@
+//! V2Ray template processor
+
+use crate::protocols::{ProtocolProcessor, ProxyServer};
+use crate::core::error::Result;
+use crate::utils::source::parser::Source;
+use crate::utils::template::interpolation_parser::InterpolationRule;
+use indexmap::IndexMap;
+
+/// V2Ray protocol processor
+pub struct V2RayProcessor;
+
+impl ProtocolProcessor for V2RayProcessor {
+    fn process_rule(
+        &self,
+        rule: &InterpolationRule,
+        sources: &IndexMap<String, Source>,
+    ) -> Result<String> {
+        // V2Ray uses the same rule processing logic
+        let processor = crate::protocols::singbox::template_processor::SingboxProcessor;
+        processor.process_rule(rule, sources)
+    }
+
+    fn get_nodes_for_rule(
+        &self,
+        rule: &InterpolationRule,
+        sources: &IndexMap<String, Source>,
+    ) -> Result<Vec<ProxyServer>> {
+        // V2Ray uses the same node extraction logic
+        let processor = crate::protocols::singbox::template_processor::SingboxProcessor;
+        processor.get_nodes_for_rule(rule, sources)
+    }
+
+    fn set_default_values(
+        &self,
+        template: &str,
+        nodes: &[ProxyServer],
+    ) -> Result<String> {
+        // V2Ray uses the same default value logic as Sing-box
+        let processor = crate::protocols::singbox::template_processor::SingboxProcessor;
+        processor.set_default_values(template, nodes)
+    }
+
+    fn append_nodes(
+        &self,
+        template: &str,
+        nodes: &[ProxyServer],
+    ) -> Result<String> {
+        // V2Ray uses "outbounds" array like Sing-box
+        let processor = crate::protocols::singbox::template_processor::SingboxProcessor;
+        processor.append_nodes(template, nodes)
+    }
+
+    fn create_node_config(&self, node: &ProxyServer) -> String {
+        // V2Ray has different node structure
+        let mut config = serde_json::Map::new();
+
+        config.insert(
+            "tag".to_string(),
+            serde_json::Value::String(node.name.clone()),
+        );
+        config.insert(
+            "protocol".to_string(),
+            serde_json::Value::String(node.protocol.clone()),
+        );
+
+        // V2Ray structure is more complex, this is a simplified version
+        for (key, value) in &node.parameters {
+            config.insert(key.clone(), value.clone());
+        }
+
+        serde_json::to_string_pretty(&serde_json::Value::Object(config)).unwrap()
+    }
+}
+
diff --git a/src/singbox/common/base.rs b/src/singbox/common/base.rs
deleted file mode 100644
index 5d3ad4b..0000000
--- a/src/singbox/common/base.rs
+++ /dev/null
@@ -1,111 +0,0 @@
-use serde::{Deserialize, Serialize};
-use serde_with::skip_serializing_none;
-
-#[derive(Serialize, Deserialize, Debug)]
-#[serde(rename_all = "snake_case")]
-pub enum Strategy {
-    PreferIpv4,
-    PreferIpv6,
-    Ipv4Only,
-    Ipv6Only,
-}
-
-impl Default for Strategy {
-    fn default() -> Self {
-        Strategy::PreferIpv4
-    }
-}
-
-#[derive(Serialize, Deserialize, Debug)]
-#[serde(untagged)]
-pub enum SingleOrMultipleValue<T = String> {
-    Single(T),
-    Multiple(Vec<T>),
-}
-
-impl Default for SingleOrMultipleValue {
-    fn default() -> Self {
-        SingleOrMultipleValue::Multiple(vec![])
-    }
-}
-
-#[derive(Serialize, Deserialize, Debug)]
-pub enum IpVersion {
-    V4 = 4,
-    V6 = 6,
-}
-
-#[derive(Serialize, Deserialize, Debug)]
-#[serde(untagged)]
-pub enum QueryType {
-    Code(usize),
-    Name(String),
-}
-
-#[derive(Serialize, Deserialize, Debug)]
-#[serde(rename_all = "snake_case")]
-pub enum Network {
-    Tcp,
-    Udp,
-}
-
-impl Default for Network {
-    fn default() -> Self {
-        Network::Tcp
-    }
-}
-
-#[derive(Serialize, Deserialize, Debug)]
-#[serde(rename_all = "lowercase")]
-pub enum LogicalMode {
-    And,
-    Or,
-}
-
-#[skip_serializing_none]
-#[derive(Default, Serialize, Deserialize, Debug)]
-pub struct Handshake {
-    detour: Option<String>,
-    bind_interface: Option<String>,
-    inet4_bind_address: Option<String>,
-    inet6_bind_address: Option<String>,
-    routing_mark: Option<usize>,
-    reuse_addr: Option<bool>,
-    connect_timeout: Option<String>,
-    tcp_fast_open: Option<bool>,
-    tcp_multi_path: Option<bool>,
-    udp_fragment: Option<bool>,
-    domain_strategy: Option<Strategy>,
-    fallback_delay: Option<String>,
-}
-
-#[derive(Serialize, Deserialize, Debug)]
-#[serde(rename_all = "lowercase")]
-pub enum Stack {
-    System,
-    Gvisor,
-    Mixed,
-}
-
-impl Default for Stack {
-    fn default() -> Self {
-        Stack::Mixed
-    }
-}
-
-#[skip_serializing_none]
-#[derive(Default, Serialize, Deserialize, Debug)]
-pub struct ListenParams {
-    listen: Option<String>,
-    listen_port: Option<u16>,
-    tcp_fast_open: Option<bool>,
-    tcp_multi_path: Option<bool>,
-    udp_fragment: Option<bool>,
-    udp_timeout: Option<String>,
-    detour: Option<String>,
-    sniff: Option<bool>,
-    sniff_override_destination: Option<bool>,
-    sniff_timeout: Option<String>,
-    domain_strategy: Option<Strategy>,
-    udp_disable_domain_unmapping: Option<bool>,
-}
diff --git a/src/singbox/common/tls.rs b/src/singbox/common/tls.rs
deleted file mode 100644
index d2d134e..0000000
--- a/src/singbox/common/tls.rs
+++ /dev/null
@@ -1,129 +0,0 @@
-use super::base::{SingleOrMultipleValue, Strategy};
-use serde::{Deserialize, Serialize};
-use serde_with::skip_serializing_none;
-
-#[derive(Serialize, Deserialize, Debug)]
-#[serde(untagged)]
-pub enum Tls {
-    Inbound(Inbound),
-    Outbound(Outbound),
-}
-
-#[skip_serializing_none]
-#[derive(Default, Serialize, Deserialize, Debug)]
-pub struct Inbound {
-    enabled: Option<bool>,
-    server_name: Option<String>,
-    alpn: Option<Vec<String>>,
-    min_version: Option<String>,
-    max_version: Option<String>,
-    cipher_suites: Option<Vec<String>>,
-    certificate: Option<Vec<String>>,
-    certificate_path: Option<String>,
-    key: Option<Vec<String>>,
-    key_path: Option<String>,
-    acme: Option<ACME>,
-    ech: Option<Ech>,
-    reality: Option<Reality>,
-}
-
-#[skip_serializing_none]
-#[derive(Default, Serialize, Deserialize, Debug)]
-pub struct ACME {
-    domain: Option<Vec<String>>,
-    data_directory: Option<String>,
-    default_server_name: Option<String>,
-    email: Option<String>,
-    provider: Option<String>,
-    disable_http_challenge: Option<bool>,
-    disable_tls_alpn_challenge: Option<bool>,
-    alternative_http_port: Option<u16>,
-    alternative_tls_port: Option<u16>,
-    external_account: Option<ExternalAccount>,
-    dns01_challenge: Option<Dns01Challenge>,
-}
-
-#[derive(Serialize, Deserialize, Debug)]
-#[serde(tag = "provider", rename_all = "lowercase")]
-pub enum Dns01Challenge {
-    Alidns {
-        access_key_id: String,
-        access_key_secret: String,
-        region_id: String,
-    },
-    Cloudflare {
-        api_token: String,
-    },
-}
-
-#[skip_serializing_none]
-#[derive(Default, Serialize, Deserialize, Debug)]
-pub struct ExternalAccount {
-    key_id: Option<String>,
-    mac_key: Option<String>,
-}
-
-#[skip_serializing_none]
-#[derive(Default, Serialize, Deserialize, Debug)]
-pub struct Ech {
-    enabled: Option<bool>,
-    pq_signature_schemes_enabled: Option<bool>,
-    dynamic_record_sizing_disabled: Option<bool>,
-    key: Option<Vec<String>>,
-    key_path: Option<String>,
-}
-
-#[skip_serializing_none]
-#[derive(Default, Serialize, Deserialize, Debug)]
-pub struct Reality {
-    enabled: Option<bool>,
-    handshake: Option<RealityHandshake>,
-    public_key: Option<String>,
-    private_key: Option<String>,
-    short_id: Option<SingleOrMultipleValue<String>>,
-    max_time_difference: Option<String>,
-}
-
-#[skip_serializing_none]
-#[derive(Default, Serialize, Deserialize, Debug)]
-pub struct RealityHandshake {
-    server: Option<String>,
-    server_port: Option<u16>,
-    detour: Option<String>,
-    bind_interface: Option<String>,
-    inet4_bind_address: Option<String>,
-    inet6_bind_address: Option<String>,
-    routing_mark: Option<usize>,
-    reuse_addr: Option<bool>,
-    connect_timeout: Option<String>,
-    tcp_fast_open: Option<bool>,
-    tcp_multi_path: Option<bool>,
-    udp_fragment: Option<bool>,
-    domain_strategy: Option<Strategy>,
-    fallback_delay: Option<String>,
-}
-
-#[skip_serializing_none]
-#[derive(Default, Serialize, Deserialize, Debug)]
-pub struct Outbound {
-    enabled: Option<bool>,
-    disable_sni: Option<bool>,
-    server_name: Option<String>,
-    insecure: Option<bool>,
-    alpn: Option<Vec<String>>,
-    min_version: Option<String>,
-    max_version: Option<String>,
-    cipher_suites: Option<Vec<String>>,
-    certificate: Option<Vec<String>>,
-    certificate_path: Option<String>,
-    ech: Option<Ech>,
-    utls: Option<OutboundUtils>,
-    reality: Option<Reality>,
-}
-
-#[skip_serializing_none]
-#[derive(Default, Serialize, Deserialize, Debug)]
-pub struct OutboundUtils {
-    enabled: Option<bool>,
-    fingerprint: Option<String>,
-}
diff --git a/src/singbox/dns.rs b/src/singbox/dns.rs
deleted file mode 100644
index a85e4c1..0000000
--- a/src/singbox/dns.rs
+++ /dev/null
@@ -1,103 +0,0 @@
-use super::common::base::{
-    IpVersion, LogicalMode, Network, QueryType, SingleOrMultipleValue, Strategy,
-};
-use serde::{Deserialize, Serialize};
-use serde_with::skip_serializing_none;
-
-#[skip_serializing_none]
-#[derive(Default, Serialize, Deserialize, Debug)]
-pub struct DNS {
-    servers: Vec<Server>,
-    rules: Option<Vec<Rule>>,
-    r#final: String,
-    strategy: Option<Strategy>,
-    disable_cache: Option<bool>,
-    disable_expire: Option<bool>,
-    independent_cache: Option<bool>,
-    reverse_mapping: Option<bool>,
-    client_subnet: Option<String>,
-    fakeip: Option<FackIp>,
-}
-
-#[skip_serializing_none]
-#[derive(Default, Serialize, Deserialize, Debug)]
-pub struct Server {
-    tag: String,
-    r#type: String,
-    server: Option<String>,
-    responses: Option<Vec<Response>>,
-    domain_resolver: Option<String>,
-    detour: Option<String>,
-    client_subnet: Option<String>,
-}
-
-#[skip_serializing_none]
-#[derive(Default, Serialize, Deserialize, Debug)]
-pub struct Response {
-    rcode: String,
-}
-
-#[skip_serializing_none]
-#[derive(Default, Serialize, Deserialize, Debug)]
-pub struct Rule {
-    inbound: Option<SingleOrMultipleValue>,
-    ip_version: Option<IpVersion>,
-    query_type: Option<Vec<QueryType>>,
-    network: Option<Network>,
-    auth_user: Option<SingleOrMultipleValue>,
-    protocol: Option<Vec<Protocol>>,
-    domain: Option<SingleOrMultipleValue>,
-    domain_suffix: Option<SingleOrMultipleValue>,
-    domain_keyword: Option<SingleOrMultipleValue>,
-    domain_regex: Option<SingleOrMultipleValue>,
-    source_ip_cidr: Option<SingleOrMultipleValue>,
-    source_ip_is_private: Option<bool>,
-    ip_cidr: Option<SingleOrMultipleValue>,
-    ip_is_private: Option<bool>,
-    source_port: Option<Vec<u16>>,
-    source_port_range: Option<SingleOrMultipleValue>,
-    port: Option<Vec<u16>>,
-    port_range: Option<SingleOrMultipleValue>,
-    process_name: Option<SingleOrMultipleValue>,
-    process_path: Option<SingleOrMultipleValue>,
-    package_name: Option<SingleOrMultipleValue>,
-    user: Option<SingleOrMultipleValue>,
-    user_id: Option<Vec<usize>>,
-    clash_mode: Option<String>,
-    wifi_ssid: Option<SingleOrMultipleValue>,
-    wifi_bssid: Option<SingleOrMultipleValue>,
-    rule_set: Option<SingleOrMultipleValue>,
-    rule_set_ip_cidr_match_source: Option<bool>,
-    rule_set_ip_cidr_accept_empty: Option<bool>,
-    invert: Option<bool>,
-    outbound: Option<SingleOrMultipleValue>,
-    server: Option<String>,
-    disable_cache: Option<bool>,
-    client_subnet: Option<String>,
-    action: String,
-    method: Option<String>,
-    no_drop: Option<bool>,
-    mode: Option<LogicalMode>,
-    strategy: Option<Strategy>,
-    rules: Option<Vec<Rule>>,
-}
-
-#[derive(Serialize, Deserialize, Debug)]
-#[serde(rename_all = "snake_case")]
-pub enum Protocol {
-    Http,
-    Tls,
-    Quic,
-    Stun,
-    Dns,
-    Bittorrent,
-    Dtls,
-}
-
-#[skip_serializing_none]
-#[derive(Default, Serialize, Deserialize, Debug)]
-pub struct FackIp {
-    enabled: Option<bool>,
-    inet4_range: Option<String>,
-    inet6_range: Option<String>,
-}
diff --git a/src/singbox/experimental.rs b/src/singbox/experimental.rs
deleted file mode 100644
index a0f34ed..0000000
--- a/src/singbox/experimental.rs
+++ /dev/null
@@ -1,48 +0,0 @@
-use serde::{Deserialize, Serialize};
-use serde_with::skip_serializing_none;
-
-#[skip_serializing_none]
-#[derive(Default, Serialize, Deserialize, Debug)]
-pub struct Experimental {
-    cache_file: Option<CacheFile>,
-    clash_api: Option<ClashApi>,
-    v2ray_api: Option<V2rayApi>,
-}
-
-#[skip_serializing_none]
-#[derive(Default, Serialize, Deserialize, Debug)]
-pub struct CacheFile {
-    enabled: Option<bool>,
-    path: Option<String>,
-    cache_id: Option<String>,
-    store_fakeip: Option<bool>,
-    store_rdrc: Option<bool>,
-    rdrc_timeout: Option<String>,
-}
-
-#[skip_serializing_none]
-#[derive(Default, Serialize, Deserialize, Debug)]
-pub struct ClashApi {
-    external_controller: Option<String>,
-    external_ui: Option<String>,
-    external_ui_download_url: Option<String>,
-    external_ui_download_detour: Option<String>,
-    secret: Option<String>,
-    default_mode: Option<String>,
-}
-
-#[skip_serializing_none]
-#[derive(Default, Serialize, Deserialize, Debug)]
-pub struct V2rayApi {
-    listen: Option<String>,
-    stats: Option<V2rayStats>,
-}
-
-#[skip_serializing_none]
-#[derive(Default, Serialize, Deserialize, Debug)]
-pub struct V2rayStats {
-    enabled: Option<String>,
-    inbounds: Option<Vec<String>>,
-    outbounds: Option<Vec<String>>,
-    users: Option<Vec<String>>,
-}
diff --git a/src/singbox/inbound/direct.rs b/src/singbox/inbound/direct.rs
deleted file mode 100644
index 38c104c..0000000
--- a/src/singbox/inbound/direct.rs
+++ /dev/null
@@ -1,24 +0,0 @@
-use crate::singbox::common::base::{Network, Strategy};
-use serde::{Deserialize, Serialize};
-use serde_with::skip_serializing_none;
-
-#[skip_serializing_none]
-#[derive(Default, Serialize, Deserialize, Debug)]
-pub struct Direct {
-    pub tag: String,
-    pub listen: Option<String>,
-    pub listen_port: Option<u16>,
-    pub tcp_fast_open: Option<bool>,
-    pub tcp_multi_path: Option<bool>,
-    pub udp_fragment: Option<bool>,
-    pub udp_timeout: Option<String>,
-    pub detour: Option<String>,
-    pub sniff: Option<bool>,
-    pub sniff_override_destination: Option<bool>,
-    pub sniff_timeout: Option<String>,
-    pub domain_strategy: Option<Strategy>,
-    pub udp_disable_domain_unmapping: Option<bool>,
-    pub network: Option<Network>,
-    pub override_address: Option<String>,
-    pub override_port: Option<u16>,
-}
diff --git a/src/singbox/inbound/http.rs b/src/singbox/inbound/http.rs
deleted file mode 100644
index c6dbe11..0000000
--- a/src/singbox/inbound/http.rs
+++ /dev/null
@@ -1,25 +0,0 @@
-use super::base::User;
-use crate::singbox::common::{base::Strategy, tls};
-use serde::{Deserialize, Serialize};
-use serde_with::skip_serializing_none;
-
-#[skip_serializing_none]
-#[derive(Default, Serialize, Deserialize, Debug)]
-pub struct Http {
-    pub tag: String,
-    pub listen: Option<String>,
-    pub listen_port: Option<u16>,
-    pub tcp_fast_open: Option<bool>,
-    pub tcp_multi_path: Option<bool>,
-    pub udp_fragment: Option<bool>,
-    pub udp_timeout: Option<String>,
-    pub detour: Option<String>,
-    pub sniff: Option<bool>,
-    pub sniff_override_destination: Option<bool>,
-    pub sniff_timeout: Option<String>,
-    pub domain_strategy: Option<Strategy>,
-    pub udp_disable_domain_unmapping: Option<bool>,
-    pub users: Option<Vec<User>>,
-    pub tls: Option<tls::Inbound>,
-    pub set_system_proxy: Option<bool>,
-}
diff --git a/src/singbox/inbound/hysteria.rs b/src/singbox/inbound/hysteria.rs
deleted file mode 100644
index a66c610..0000000
--- a/src/singbox/inbound/hysteria.rs
+++ /dev/null
@@ -1,39 +0,0 @@
-use crate::singbox::common::{base::Strategy, tls};
-use serde::{Deserialize, Serialize};
-use serde_with::skip_serializing_none;
-
-#[skip_serializing_none]
-#[derive(Default, Serialize, Deserialize, Debug)]
-pub struct Hysteria {
-    pub tag: String,
-    pub up: String,
-    pub up_mbps: usize,
-    pub down: String,
-    pub down_mbps: usize,
-    pub tls: tls::Inbound,
-    pub listen: Option<String>,
-    pub listen_port: Option<u16>,
-    pub tcp_fast_open: Option<bool>,
-    pub tcp_multi_path: Option<bool>,
-    pub udp_fragment: Option<bool>,
-    pub udp_timeout: Option<String>,
-    pub detour: Option<String>,
-    pub sniff: Option<bool>,
-    pub sniff_override_destination: Option<bool>,
-    pub sniff_timeout: Option<String>,
-    pub domain_strategy: Option<Strategy>,
-    pub udp_disable_domain_unmapping: Option<bool>,
-    pub obfs: Option<String>,
-    pub users: Option<Vec<User>>,
-    pub recv_window_conn: Option<usize>,
-    pub recv_window_client: Option<usize>,
-    pub max_conn_client: Option<usize>,
-    pub disable_mtu_discovery: Option<bool>,
-}
-
-#[derive(Default, Serialize, Deserialize, Debug)]
-pub struct User {
-    pub name: String,
-    pub auth: String,
-    pub auth_str: usize,
-}
diff --git a/src/singbox/inbound/hysteria2.rs b/src/singbox/inbound/hysteria2.rs
deleted file mode 100644
index 44fec86..0000000
--- a/src/singbox/inbound/hysteria2.rs
+++ /dev/null
@@ -1,36 +0,0 @@
-use super::hysteria::User;
-use crate::singbox::common::{base::Strategy, tls};
-use serde::{Deserialize, Serialize};
-use serde_with::skip_serializing_none;
-
-#[skip_serializing_none]
-#[derive(Default, Serialize, Deserialize, Debug)]
-pub struct Hysteria2 {
-    pub tag: String,
-    pub tls: tls::Inbound,
-    pub listen: Option<String>,
-    pub listen_port: Option<u16>,
-    pub tcp_fast_open: Option<bool>,
-    pub tcp_multi_path: Option<bool>,
-    pub udp_fragment: Option<bool>,
-    pub udp_timeout: Option<String>,
-    pub detour: Option<String>,
-    pub sniff: Option<bool>,
-    pub sniff_override_destination: Option<bool>,
-    pub sniff_timeout: Option<String>,
-    pub domain_strategy: Option<Strategy>,
-    pub udp_disable_domain_unmapping: Option<bool>,
-    pub up_mbps: Option<usize>,
-    pub down_mbps: Option<usize>,
-    pub obfs: Option<Obfs>,
-    pub users: Option<Vec<User>>,
-    pub ignore_client_bandwidth: Option<bool>,
-    pub masquerade: Option<String>,
-    pub brutal_debug: Option<bool>,
-}
-
-#[derive(Default, Serialize, Deserialize, Debug)]
-pub struct Obfs {
-    pub r#type: String,
-    pub password: String,
-}
diff --git a/src/singbox/inbound/mixed.rs b/src/singbox/inbound/mixed.rs
deleted file mode 100644
index 7280ca0..0000000
--- a/src/singbox/inbound/mixed.rs
+++ /dev/null
@@ -1,29 +0,0 @@
-use crate::singbox::common::base::Strategy;
-use serde::{Deserialize, Serialize};
-use serde_with::skip_serializing_none;
-
-#[skip_serializing_none]
-#[derive(Default, Serialize, Deserialize, Debug)]
-pub struct Mixed {
-    pub tag: String,
-    pub listen: Option<String>,
-    pub listen_port: Option<u16>,
-    pub tcp_fast_open: Option<bool>,
-    pub tcp_multi_path: Option<bool>,
-    pub udp_fragment: Option<bool>,
-    pub udp_timeout: Option<String>,
-    pub detour: Option<String>,
-    pub sniff: Option<bool>,
-    pub sniff_override_destination: Option<bool>,
-    pub sniff_timeout: Option<String>,
-    pub domain_strategy: Option<Strategy>,
-    pub udp_disable_domain_unmapping: Option<bool>,
-    pub users: Option<Vec<User>>,
-    pub set_system_proxy: Option<bool>,
-}
-
-#[derive(Default, Serialize, Deserialize, Debug)]
-pub struct User {
-    pub username: String,
-    pub password: String,
-}
diff --git a/src/singbox/inbound/naive.rs b/src/singbox/inbound/naive.rs
deleted file mode 100644
index c325c70..0000000
--- a/src/singbox/inbound/naive.rs
+++ /dev/null
@@ -1,28 +0,0 @@
-use super::base::User;
-use crate::singbox::common::{
-    base::{Network, Strategy},
-    tls,
-};
-use serde::{Deserialize, Serialize};
-use serde_with::skip_serializing_none;
-
-#[skip_serializing_none]
-#[derive(Default, Serialize, Deserialize, Debug)]
-pub struct Naive {
-    pub tag: String,
-    pub users: Vec<User>,
-    pub listen: Option<String>,
-    pub listen_port: Option<u16>,
-    pub tcp_fast_open: Option<bool>,
-    pub tcp_multi_path: Option<bool>,
-    pub udp_fragment: Option<bool>,
-    pub udp_timeout: Option<String>,
-    pub detour: Option<String>,
-    pub sniff: Option<bool>,
-    pub sniff_override_destination: Option<bool>,
-    pub sniff_timeout: Option<String>,
-    pub domain_strategy: Option<Strategy>,
-    pub udp_disable_domain_unmapping: Option<bool>,
-    pub network: Option<Network>,
-    pub tls: Option<tls::Inbound>,
-}
diff --git a/src/singbox/inbound/redirect.rs b/src/singbox/inbound/redirect.rs
deleted file mode 100644
index 2e33351..0000000
--- a/src/singbox/inbound/redirect.rs
+++ /dev/null
@@ -1,21 +0,0 @@
-use crate::singbox::common::base::Strategy;
-use serde::{Deserialize, Serialize};
-use serde_with::skip_serializing_none;
-
-#[skip_serializing_none]
-#[derive(Default, Serialize, Deserialize, Debug)]
-pub struct Redirect {
-    pub tag: String,
-    pub listen: Option<String>,
-    pub listen_port: Option<u16>,
-    pub tcp_fast_open: Option<bool>,
-    pub tcp_multi_path: Option<bool>,
-    pub udp_fragment: Option<bool>,
-    pub udp_timeout: Option<String>,
-    pub detour: Option<String>,
-    pub sniff: Option<bool>,
-    pub sniff_override_destination: Option<bool>,
-    pub sniff_timeout: Option<String>,
-    pub domain_strategy: Option<Strategy>,
-    pub udp_disable_domain_unmapping: Option<bool>,
-}
diff --git a/src/singbox/inbound/shadowsocks.rs b/src/singbox/inbound/shadowsocks.rs
deleted file mode 100644
index e6f9c93..0000000
--- a/src/singbox/inbound/shadowsocks.rs
+++ /dev/null
@@ -1,39 +0,0 @@
-use super::base::User;
-use crate::singbox::common::{
-    base::{Network, Strategy},
-    multiplex::Multiplex,
-};
-use serde::{Deserialize, Serialize};
-use serde_with::skip_serializing_none;
-
-#[skip_serializing_none]
-#[derive(Default, Serialize, Deserialize, Debug)]
-pub struct Shadowsocks {
-    pub tag: String,
-    pub method: String,
-    pub password: String,
-    pub listen: Option<String>,
-    pub listen_port: Option<u16>,
-    pub tcp_fast_open: Option<bool>,
-    pub tcp_multi_path: Option<bool>,
-    pub udp_fragment: Option<bool>,
-    pub udp_timeout: Option<String>,
-    pub detour: Option<String>,
-    pub sniff: Option<bool>,
-    pub sniff_override_destination: Option<bool>,
-    pub sniff_timeout: Option<String>,
-    pub domain_strategy: Option<Strategy>,
-    pub udp_disable_domain_unmapping: Option<bool>,
-    pub users: Option<Vec<User>>,
-    pub destinations: Option<Vec<Distination>>,
-    pub network: Option<Network>,
-    pub multiplex: Option<Multiplex>,
-}
-
-#[derive(Default, Serialize, Deserialize, Debug)]
-pub struct Distination {
-    pub name: String,
-    pub server: String,
-    pub server_port: u16,
-    pub password: String,
-}
diff --git a/src/singbox/inbound/shadowtls.rs b/src/singbox/inbound/shadowtls.rs
deleted file mode 100644
index cee79ad..0000000
--- a/src/singbox/inbound/shadowtls.rs
+++ /dev/null
@@ -1,34 +0,0 @@
-use super::base::User;
-use crate::singbox::common::base::{Handshake, Strategy};
-use serde::{Deserialize, Serialize};
-use serde_with::skip_serializing_none;
-
-#[skip_serializing_none]
-#[derive(Default, Serialize, Deserialize, Debug)]
-pub struct Shadowtls {
-    pub tag: String,
-    pub handshake: Handshake,
-    pub handshake_for_server_name: Handshake,
-    pub listen: Option<String>,
-    pub listen_port: Option<u16>,
-    pub tcp_fast_open: Option<bool>,
-    pub tcp_multi_path: Option<bool>,
-    pub udp_fragment: Option<bool>,
-    pub udp_timeout: Option<String>,
-    pub detour: Option<String>,
-    pub sniff: Option<bool>,
-    pub sniff_override_destination: Option<bool>,
-    pub sniff_timeout: Option<String>,
-    pub domain_strategy: Option<Strategy>,
-    pub udp_disable_domain_unmapping: Option<bool>,
-    pub version: Option<Version>,
-    pub users: Option<Vec<User>>,
-    pub strict_mode: Option<bool>,
-}
-
-#[derive(Serialize, Deserialize, Debug)]
-pub enum Version {
-    V1 = 1,
-    V2,
-    V3,
-}
diff --git a/src/singbox/inbound/socks.rs b/src/singbox/inbound/socks.rs
deleted file mode 100644
index 34b8035..0000000
--- a/src/singbox/inbound/socks.rs
+++ /dev/null
@@ -1,23 +0,0 @@
-use super::base::User;
-use crate::singbox::common::base::Strategy;
-use serde::{Deserialize, Serialize};
-use serde_with::skip_serializing_none;
-
-#[skip_serializing_none]
-#[derive(Default, Serialize, Deserialize, Debug)]
-pub struct Socks {
-    pub tag: String,
-    pub listen: Option<String>,
-    pub listen_port: Option<u16>,
-    pub tcp_fast_open: Option<bool>,
-    pub tcp_multi_path: Option<bool>,
-    pub udp_fragment: Option<bool>,
-    pub udp_timeout: Option<String>,
-    pub detour: Option<String>,
-    pub sniff: Option<bool>,
-    pub sniff_override_destination: Option<bool>,
-    pub sniff_timeout: Option<String>,
-    pub domain_strategy: Option<Strategy>,
-    pub udp_disable_domain_unmapping: Option<bool>,
-    pub users: Option<Vec<User>>,
-}
diff --git a/src/singbox/inbound/tproxy.rs b/src/singbox/inbound/tproxy.rs
deleted file mode 100644
index d1c2ceb..0000000
--- a/src/singbox/inbound/tproxy.rs
+++ /dev/null
@@ -1,22 +0,0 @@
-use crate::singbox::common::base::{Network, Strategy};
-use serde::{Deserialize, Serialize};
-use serde_with::skip_serializing_none;
-
-#[skip_serializing_none]
-#[derive(Default, Serialize, Deserialize, Debug)]
-pub struct Tproxy {
-    pub tag: String,
-    pub listen: Option<String>,
-    pub listen_port: Option<u16>,
-    pub tcp_fast_open: Option<bool>,
-    pub tcp_multi_path: Option<bool>,
-    pub udp_fragment: Option<bool>,
-    pub udp_timeout: Option<String>,
-    pub detour: Option<String>,
-    pub sniff: Option<bool>,
-    pub sniff_override_destination: Option<bool>,
-    pub sniff_timeout: Option<String>,
-    pub domain_strategy: Option<Strategy>,
-    pub udp_disable_domain_unmapping: Option<bool>,
-    pub network: Option<Network>,
-}
diff --git a/src/singbox/inbound/trojan.rs b/src/singbox/inbound/trojan.rs
deleted file mode 100644
index 7cc25d3..0000000
--- a/src/singbox/inbound/trojan.rs
+++ /dev/null
@@ -1,37 +0,0 @@
-use super::base::User;
-use crate::singbox::common::{base::Strategy, multiplex::Multiplex, tls, transport::Transport};
-use serde::{Deserialize, Serialize};
-use serde_with::skip_serializing_none;
-
-#[skip_serializing_none]
-#[derive(Default, Serialize, Deserialize, Debug)]
-pub struct Trojan {
-    pub tag: String,
-    pub users: Vec<User>,
-    pub listen: Option<String>,
-    pub listen_port: Option<u16>,
-    pub tcp_fast_open: Option<bool>,
-    pub tcp_multi_path: Option<bool>,
-    pub udp_fragment: Option<bool>,
-    pub udp_timeout: Option<String>,
-    pub detour: Option<String>,
-    pub sniff: Option<bool>,
-    pub sniff_override_destination: Option<bool>,
-    pub sniff_timeout: Option<String>,
-    pub domain_strategy: Option<Strategy>,
-    pub udp_disable_domain_unmapping: Option<bool>,
-    pub tls: Option<tls::Inbound>,
-    pub fallback: Option<Fallback>,
-    pub fallback_for_alpn: Option<FallbackForAlpn>,
-    pub multiplex: Option<Multiplex>,
-    pub transport: Option<Transport>,
-}
-
-#[derive(Default, Serialize, Deserialize, Debug)]
-pub struct Fallback {
-    pub server: String,
-    pub server_port: u16,
-}
-
-#[derive(Default, Serialize, Deserialize, Debug)]
-pub struct FallbackForAlpn {}
diff --git a/src/singbox/inbound/tuic.rs b/src/singbox/inbound/tuic.rs
deleted file mode 100644
index 77b4769..0000000
--- a/src/singbox/inbound/tuic.rs
+++ /dev/null
@@ -1,42 +0,0 @@
-use crate::singbox::common::{base::Strategy, tls};
-use serde::{Deserialize, Serialize};
-use serde_with::skip_serializing_none;
-
-#[skip_serializing_none]
-#[derive(Default, Serialize, Deserialize, Debug)]
-pub struct Tuic {
-    pub tag: String,
-    pub users: Vec<User>,
-    pub listen: Option<String>,
-    pub listen_port: Option<u16>,
-    pub tcp_fast_open: Option<bool>,
-    pub tcp_multi_path: Option<bool>,
-    pub udp_fragment: Option<bool>,
-    pub udp_timeout: Option<String>,
-    pub detour: Option<String>,
-    pub sniff: Option<bool>,
-    pub sniff_override_destination: Option<bool>,
-    pub sniff_timeout: Option<String>,
-    pub domain_strategy: Option<Strategy>,
-    pub udp_disable_domain_unmapping: Option<bool>,
-    pub congestion_control: Option<CongestionControl>,
-    pub auth_timeout: Option<String>,
-    pub zero_rtt_handshake: Option<bool>,
-    pub heartbeat: Option<String>,
-    pub tls: Option<tls::Inbound>,
-}
-
-#[derive(Default, Serialize, Deserialize, Debug)]
-pub struct User {
-    pub name: String,
-    pub uuid: String,
-    pub password: String,
-}
-
-#[derive(Serialize, Deserialize, Debug)]
-#[serde(rename_all = "snake_case")]
-pub enum CongestionControl {
-    Cubic,
-    NewReno,
-    Bbr,
-}
diff --git a/src/singbox/inbound/vless.rs b/src/singbox/inbound/vless.rs
deleted file mode 100644
index 670be84..0000000
--- a/src/singbox/inbound/vless.rs
+++ /dev/null
@@ -1,32 +0,0 @@
-use crate::singbox::common::{base::Strategy, multiplex::Multiplex, tls, transport::Transport};
-use serde::{Deserialize, Serialize};
-use serde_with::skip_serializing_none;
-
-#[skip_serializing_none]
-#[derive(Default, Serialize, Deserialize, Debug)]
-pub struct Vless {
-    pub tag: String,
-    pub users: Vec<User>,
-    pub listen: Option<String>,
-    pub listen_port: Option<u16>,
-    pub tcp_fast_open: Option<bool>,
-    pub tcp_multi_path: Option<bool>,
-    pub udp_fragment: Option<bool>,
-    pub udp_timeout: Option<String>,
-    pub detour: Option<String>,
-    pub sniff: Option<bool>,
-    pub sniff_override_destination: Option<bool>,
-    pub sniff_timeout: Option<String>,
-    pub domain_strategy: Option<Strategy>,
-    pub udp_disable_domain_unmapping: Option<bool>,
-    pub tls: Option<tls::Inbound>,
-    pub multiplex: Option<Multiplex>,
-    pub transport: Option<Transport>,
-}
-
-#[derive(Default, Serialize, Deserialize, Debug)]
-pub struct User {
-    pub name: String,
-    pub uuid: String,
-    pub flow: String,
-}
diff --git a/src/singbox/inbound/vmess.rs b/src/singbox/inbound/vmess.rs
deleted file mode 100644
index ed94d58..0000000
--- a/src/singbox/inbound/vmess.rs
+++ /dev/null
@@ -1,33 +0,0 @@
-use crate::singbox::common::{base::Strategy, multiplex::Multiplex, tls, transport::Transport};
-use serde::{Deserialize, Serialize};
-use serde_with::skip_serializing_none;
-
-#[skip_serializing_none]
-#[derive(Default, Serialize, Deserialize, Debug)]
-pub struct Vmess {
-    pub tag: String,
-    pub users: Vec<User>,
-    pub listen: Option<String>,
-    pub listen_port: Option<u16>,
-    pub tcp_fast_open: Option<bool>,
-    pub tcp_multi_path: Option<bool>,
-    pub udp_fragment: Option<bool>,
-    pub udp_timeout: Option<String>,
-    pub detour: Option<String>,
-    pub sniff: Option<bool>,
-    pub sniff_override_destination: Option<bool>,
-    pub sniff_timeout: Option<String>,
-    pub domain_strategy: Option<Strategy>,
-    pub udp_disable_domain_unmapping: Option<bool>,
-    pub tls: Option<tls::Inbound>,
-    pub multiplex: Option<Multiplex>,
-    pub transport: Option<Transport>,
-}
-
-#[derive(Default, Serialize, Deserialize, Debug)]
-pub struct User {
-    pub name: String,
-    pub uuid: String,
-    #[serde(rename = "camelcase")]
-    pub alter_id: usize,
-}
diff --git a/src/singbox/mod.rs b/src/singbox/mod.rs
deleted file mode 100644
index be3b697..0000000
--- a/src/singbox/mod.rs
+++ /dev/null
@@ -1,19 +0,0 @@
-pub mod common;
-pub mod dns;
-pub mod experimental;
-pub mod inbound;
-pub mod log;
-pub mod outbound;
-pub mod route;
-
-use serde::{Deserialize, Serialize};
-
-#[derive(Serialize, Deserialize, Debug)]
-pub struct Config {
-    pub log: log::Log,
-    pub dns: dns::DNS,
-    pub inbounds: Vec<inbound::Inbound>,
-    pub outbounds: Vec<outbound::Outbound>,
-    pub route: route::Route,
-    pub experimental: experimental::Experimental,
-}
diff --git a/src/singbox/outbound/direct.rs b/src/singbox/outbound/direct.rs
deleted file mode 100644
index ad752d1..0000000
--- a/src/singbox/outbound/direct.rs
+++ /dev/null
@@ -1,30 +0,0 @@
-use crate::singbox::common::base::Strategy;
-use serde::{Deserialize, Serialize};
-use serde_with::skip_serializing_none;
-
-#[skip_serializing_none]
-#[derive(Default, Serialize, Deserialize, Debug)]
-pub struct Direct {
-    pub tag: String,
-    pub override_address: Option<String>,
-    pub override_port: Option<u16>,
-    pub proxy_protocol: Option<ProxyProtocol>,
-    pub detour: Option<String>,
-    pub bind_interface: Option<String>,
-    pub inet4_bind_address: Option<String>,
-    pub inet6_bind_address: Option<String>,
-    pub routing_mark: Option<usize>,
-    pub reuse_addr: Option<bool>,
-    pub connect_timeout: Option<String>,
-    pub tcp_fast_open: Option<bool>,
-    pub tcp_multi_path: Option<bool>,
-    pub udp_fragment: Option<bool>,
-    pub domain_strategy: Option<Strategy>,
-    pub fallback_delay: Option<String>,
-}
-
-#[derive(Serialize, Deserialize, Debug)]
-pub enum ProxyProtocol {
-    V1 = 1,
-    V2,
-}
diff --git a/src/singbox/outbound/dns.rs b/src/singbox/outbound/dns.rs
deleted file mode 100644
index 576e9d2..0000000
--- a/src/singbox/outbound/dns.rs
+++ /dev/null
@@ -1,6 +0,0 @@
-use serde::{Deserialize, Serialize};
-
-#[derive(Default, Serialize, Deserialize, Debug)]
-pub struct Dns {
-    pub tag: String,
-}
diff --git a/src/singbox/outbound/http.rs b/src/singbox/outbound/http.rs
deleted file mode 100644
index 3a0d6db..0000000
--- a/src/singbox/outbound/http.rs
+++ /dev/null
@@ -1,29 +0,0 @@
-use crate::singbox::common::{base::Strategy, tls};
-use serde::{Deserialize, Serialize};
-use serde_with::skip_serializing_none;
-use std::collections::HashMap;
-
-#[skip_serializing_none]
-#[derive(Default, Serialize, Deserialize, Debug)]
-pub struct Http {
-    pub tag: String,
-    pub server: String,
-    pub server_port: u16,
-    pub username: Option<String>,
-    pub password: Option<String>,
-    pub path: Option<String>,
-    pub headers: Option<HashMap<String, String>>,
-    pub tls: Option<tls::Outbound>,
-    pub detour: Option<String>,
-    pub bind_interface: Option<String>,
-    pub inet4_bind_address: Option<String>,
-    pub inet6_bind_address: Option<String>,
-    pub routing_mark: Option<usize>,
-    pub reuse_addr: Option<bool>,
-    pub connect_timeout: Option<String>,
-    pub tcp_fast_open: Option<bool>,
-    pub tcp_multi_path: Option<bool>,
-    pub udp_fragment: Option<bool>,
-    pub domain_strategy: Option<Strategy>,
-    pub fallback_delay: Option<String>,
-}
diff --git a/src/singbox/outbound/hysteria.rs b/src/singbox/outbound/hysteria.rs
deleted file mode 100644
index 280dbb0..0000000
--- a/src/singbox/outbound/hysteria.rs
+++ /dev/null
@@ -1,38 +0,0 @@
-use crate::singbox::common::{
-    base::{Network, Strategy},
-    tls,
-};
-use serde::{Deserialize, Serialize};
-use serde_with::skip_serializing_none;
-
-#[skip_serializing_none]
-#[derive(Default, Serialize, Deserialize, Debug)]
-pub struct Hysteria {
-    pub tag: String,
-    pub server: String,
-    pub server_port: u16,
-    pub up: String,
-    pub up_mbps: usize,
-    pub down: String,
-    pub down_mbps: usize,
-    pub obfs: Option<String>,
-    pub auth: Option<String>,
-    pub auth_str: Option<String>,
-    pub recv_window_conn: Option<usize>,
-    pub recv_window: Option<usize>,
-    pub disable_mtu_discovery: Option<bool>,
-    pub network: Option<Network>,
-    pub tls: Option<tls::Outbound>,
-    pub detour: Option<String>,
-    pub bind_interface: Option<String>,
-    pub inet4_bind_address: Option<String>,
-    pub inet6_bind_address: Option<String>,
-    pub routing_mark: Option<usize>,
-    pub reuse_addr: Option<bool>,
-    pub connect_timeout: Option<String>,
-    pub tcp_fast_open: Option<bool>,
-    pub tcp_multi_path: Option<bool>,
-    pub udp_fragment: Option<bool>,
-    pub domain_strategy: Option<Strategy>,
-    pub fallback_delay: Option<String>,
-}
diff --git a/src/singbox/outbound/hysteria2.rs b/src/singbox/outbound/hysteria2.rs
deleted file mode 100644
index 37c7d6d..0000000
--- a/src/singbox/outbound/hysteria2.rs
+++ /dev/null
@@ -1,36 +0,0 @@
-use crate::singbox::{
-    common::{
-        base::{Network, Strategy},
-        tls,
-    },
-    inbound::hysteria2::Obfs,
-};
-use serde::{Deserialize, Serialize};
-use serde_with::skip_serializing_none;
-
-#[skip_serializing_none]
-#[derive(Default, Serialize, Deserialize, Debug)]
-pub struct Hysteria2 {
-    pub tag: String,
-    pub server: String,
-    pub server_port: u16,
-    pub up_mbps: Option<usize>,
-    pub down_mbps: Option<usize>,
-    pub obfs: Option<Obfs>,
-    pub password: Option<String>,
-    pub network: Option<Network>,
-    pub tls: Option<tls::Outbound>,
-    pub brutal_debug: Option<bool>,
-    pub detour: Option<String>,
-    pub bind_interface: Option<String>,
-    pub inet4_bind_address: Option<String>,
-    pub inet6_bind_address: Option<String>,
-    pub routing_mark: Option<usize>,
-    pub reuse_addr: Option<bool>,
-    pub connect_timeout: Option<String>,
-    pub tcp_fast_open: Option<bool>,
-    pub tcp_multi_path: Option<bool>,
-    pub udp_fragment: Option<bool>,
-    pub domain_strategy: Option<Strategy>,
-    pub fallback_delay: Option<String>,
-}
diff --git a/src/singbox/outbound/shadowsocks.rs b/src/singbox/outbound/shadowsocks.rs
deleted file mode 100644
index 0e9ba2d..0000000
--- a/src/singbox/outbound/shadowsocks.rs
+++ /dev/null
@@ -1,34 +0,0 @@
-use super::base::UdpOverTcp;
-use crate::singbox::common::{
-    base::{Network, Strategy},
-    multiplex::Multiplex,
-};
-use serde::{Deserialize, Serialize};
-use serde_with::skip_serializing_none;
-
-#[skip_serializing_none]
-#[derive(Default, Serialize, Deserialize, Debug)]
-pub struct Shadowsocks {
-    pub tag: String,
-    pub server: String,
-    pub server_port: u16,
-    pub method: String,
-    pub password: String,
-    pub plugin: Option<String>,
-    pub plugin_opts: Option<String>,
-    pub network: Option<Network>,
-    pub udp_over_tcp: Option<UdpOverTcp>,
-    pub multiplex: Option<Multiplex>,
-    pub detour: Option<String>,
-    pub bind_interface: Option<String>,
-    pub inet4_bind_address: Option<String>,
-    pub inet6_bind_address: Option<String>,
-    pub routing_mark: Option<usize>,
-    pub reuse_addr: Option<bool>,
-    pub connect_timeout: Option<String>,
-    pub tcp_fast_open: Option<bool>,
-    pub tcp_multi_path: Option<bool>,
-    pub udp_fragment: Option<bool>,
-    pub domain_strategy: Option<Strategy>,
-    pub fallback_delay: Option<String>,
-}
diff --git a/src/singbox/outbound/shadowtls.rs b/src/singbox/outbound/shadowtls.rs
deleted file mode 100644
index 1c8dcc2..0000000
--- a/src/singbox/outbound/shadowtls.rs
+++ /dev/null
@@ -1,33 +0,0 @@
-use crate::singbox::common::{base::Strategy, tls};
-use serde::{Deserialize, Serialize};
-use serde_with::skip_serializing_none;
-
-#[skip_serializing_none]
-#[derive(Default, Serialize, Deserialize, Debug)]
-pub struct Shadowtls {
-    pub tag: String,
-    pub server: String,
-    pub server_port: u16,
-    pub tls: tls::Outbound,
-    pub version: Option<ShadowTlsVersion>,
-    pub password: Option<String>,
-    pub detour: Option<String>,
-    pub bind_interface: Option<String>,
-    pub inet4_bind_address: Option<String>,
-    pub inet6_bind_address: Option<String>,
-    pub routing_mark: Option<usize>,
-    pub reuse_addr: Option<bool>,
-    pub connect_timeout: Option<String>,
-    pub tcp_fast_open: Option<bool>,
-    pub tcp_multi_path: Option<bool>,
-    pub udp_fragment: Option<bool>,
-    pub domain_strategy: Option<Strategy>,
-    pub fallback_delay: Option<String>,
-}
-
-#[derive(Serialize, Deserialize, Debug)]
-pub enum ShadowTlsVersion {
-    V1 = 1,
-    V2,
-    V3,
-}
diff --git a/src/singbox/outbound/socks.rs b/src/singbox/outbound/socks.rs
deleted file mode 100644
index d7d4530..0000000
--- a/src/singbox/outbound/socks.rs
+++ /dev/null
@@ -1,29 +0,0 @@
-use super::base::UdpOverTcp;
-use crate::singbox::common::base::{Network, Strategy};
-use serde::{Deserialize, Serialize};
-use serde_with::skip_serializing_none;
-
-#[skip_serializing_none]
-#[derive(Default, Serialize, Deserialize, Debug)]
-pub struct Socks {
-    pub tag: String,
-    pub server: String,
-    pub server_port: u16,
-    pub version: Option<String>,
-    pub username: Option<String>,
-    pub password: Option<String>,
-    pub network: Option<Network>,
-    pub udp_over_tcp: Option<UdpOverTcp>,
-    pub detour: Option<String>,
-    pub bind_interface: Option<String>,
-    pub inet4_bind_address: Option<String>,
-    pub inet6_bind_address: Option<String>,
-    pub routing_mark: Option<usize>,
-    pub reuse_addr: Option<bool>,
-    pub connect_timeout: Option<String>,
-    pub tcp_fast_open: Option<bool>,
-    pub tcp_multi_path: Option<bool>,
-    pub udp_fragment: Option<bool>,
-    pub domain_strategy: Option<Strategy>,
-    pub fallback_delay: Option<String>,
-}
diff --git a/src/singbox/outbound/ssh.rs b/src/singbox/outbound/ssh.rs
deleted file mode 100644
index b36a6a1..0000000
--- a/src/singbox/outbound/ssh.rs
+++ /dev/null
@@ -1,31 +0,0 @@
-use crate::singbox::common::base::Strategy;
-use serde::{Deserialize, Serialize};
-use serde_with::skip_serializing_none;
-
-#[skip_serializing_none]
-#[derive(Default, Serialize, Deserialize, Debug)]
-pub struct Ssh {
-    pub tag: String,
-    pub server: String,
-    pub server_port: Option<u16>,
-    pub user: Option<String>,
-    pub password: Option<String>,
-    pub private_key: Option<String>,
-    pub private_key_path: Option<String>,
-    pub private_key_passphrase: Option<String>,
-    pub host_key: Option<Vec<String>>,
-    pub host_key_algorithms: Option<Vec<String>>,
-    pub client_version: Option<String>,
-    pub detour: Option<String>,
-    pub bind_interface: Option<String>,
-    pub inet4_bind_address: Option<String>,
-    pub inet6_bind_address: Option<String>,
-    pub routing_mark: Option<usize>,
-    pub reuse_addr: Option<bool>,
-    pub connect_timeout: Option<String>,
-    pub tcp_fast_open: Option<bool>,
-    pub tcp_multi_path: Option<bool>,
-    pub udp_fragment: Option<bool>,
-    pub domain_strategy: Option<Strategy>,
-    pub fallback_delay: Option<String>,
-}
diff --git a/src/singbox/outbound/tor.rs b/src/singbox/outbound/tor.rs
deleted file mode 100644
index 915ce48..0000000
--- a/src/singbox/outbound/tor.rs
+++ /dev/null
@@ -1,32 +0,0 @@
-use crate::singbox::common::base::Strategy;
-use serde::{Deserialize, Serialize};
-use serde_with::skip_serializing_none;
-
-#[skip_serializing_none]
-#[derive(Default, Serialize, Deserialize, Debug)]
-pub struct Tor {
-    pub tag: String,
-    pub executable_path: Option<String>,
-    pub extra_args: Option<Vec<String>>,
-    pub data_directory: Option<String>,
-    pub torrc: Option<Torrc>,
-    pub detour: Option<String>,
-    pub bind_interface: Option<String>,
-    pub inet4_bind_address: Option<String>,
-    pub inet6_bind_address: Option<String>,
-    pub routing_mark: Option<usize>,
-    pub reuse_addr: Option<bool>,
-    pub connect_timeout: Option<String>,
-    pub tcp_fast_open: Option<bool>,
-    pub tcp_multi_path: Option<bool>,
-    pub udp_fragment: Option<bool>,
-    pub domain_strategy: Option<Strategy>,
-    pub fallback_delay: Option<String>,
-}
-
-#[skip_serializing_none]
-#[derive(Default, Serialize, Deserialize, Debug)]
-pub struct Torrc {
-    #[serde(rename = "ClientOnly")]
-    pub client_only: usize,
-}
diff --git a/src/singbox/outbound/trojan.rs b/src/singbox/outbound/trojan.rs
deleted file mode 100644
index f5ca740..0000000
--- a/src/singbox/outbound/trojan.rs
+++ /dev/null
@@ -1,28 +0,0 @@
-use crate::singbox::common::{base::Strategy, multiplex::Multiplex, tls, transport::Transport};
-use serde::{Deserialize, Serialize};
-use serde_with::skip_serializing_none;
-
-#[skip_serializing_none]
-#[derive(Default, Serialize, Deserialize, Debug)]
-pub struct Trojan {
-    pub tag: String,
-    pub server: String,
-    pub server_port: u16,
-    pub password: Option<String>,
-    pub network: Option<String>,
-    pub tls: Option<tls::Outbound>,
-    pub multiplex: Option<Multiplex>,
-    pub transport: Option<Transport>,
-    pub detour: Option<String>,
-    pub bind_interface: Option<String>,
-    pub inet4_bind_address: Option<String>,
-    pub inet6_bind_address: Option<String>,
-    pub routing_mark: Option<usize>,
-    pub reuse_addr: Option<bool>,
-    pub connect_timeout: Option<String>,
-    pub tcp_fast_open: Option<bool>,
-    pub tcp_multi_path: Option<bool>,
-    pub udp_fragment: Option<bool>,
-    pub domain_strategy: Option<Strategy>,
-    pub fallback_delay: Option<String>,
-}
diff --git a/src/singbox/outbound/tuic.rs b/src/singbox/outbound/tuic.rs
deleted file mode 100644
index 86c3fc5..0000000
--- a/src/singbox/outbound/tuic.rs
+++ /dev/null
@@ -1,35 +0,0 @@
-use crate::singbox::common::{
-    base::{Network, Strategy},
-    tls,
-};
-use serde::{Deserialize, Serialize};
-use serde_with::skip_serializing_none;
-
-#[skip_serializing_none]
-#[derive(Default, Serialize, Deserialize, Debug)]
-pub struct Tuic {
-    pub tag: String,
-    pub server: String,
-    pub server_port: u16,
-    pub uuid: String,
-    pub password: Option<String>,
-    pub congestion_control: Option<String>,
-    pub udp_relay_mode: Option<String>,
-    pub udp_over_stream: Option<bool>,
-    pub zero_rtt_handshake: Option<bool>,
-    pub heartbeat: Option<String>,
-    pub network: Option<Network>,
-    pub tls: Option<tls::Outbound>,
-    pub detour: Option<String>,
-    pub bind_interface: Option<String>,
-    pub inet4_bind_address: Option<String>,
-    pub inet6_bind_address: Option<String>,
-    pub routing_mark: Option<usize>,
-    pub reuse_addr: Option<bool>,
-    pub connect_timeout: Option<String>,
-    pub tcp_fast_open: Option<bool>,
-    pub tcp_multi_path: Option<bool>,
-    pub udp_fragment: Option<bool>,
-    pub domain_strategy: Option<Strategy>,
-    pub fallback_delay: Option<String>,
-}
diff --git a/src/singbox/outbound/vless.rs b/src/singbox/outbound/vless.rs
deleted file mode 100644
index 7522173..0000000
--- a/src/singbox/outbound/vless.rs
+++ /dev/null
@@ -1,35 +0,0 @@
-use crate::singbox::common::{
-    base::{Network, Strategy},
-    multiplex::Multiplex,
-    tls,
-    transport::Transport,
-};
-use serde::{Deserialize, Serialize};
-use serde_with::skip_serializing_none;
-
-#[skip_serializing_none]
-#[derive(Default, Serialize, Deserialize, Debug)]
-pub struct Vless {
-    pub tag: String,
-    pub server: String,
-    pub server_port: u16,
-    pub uuid: String,
-    pub flow: Option<String>,
-    pub network: Option<Network>,
-    pub tls: Option<tls::Outbound>,
-    pub packet_encoding: Option<String>,
-    pub multiplex: Option<Multiplex>,
-    pub transport: Option<Transport>,
-    pub detour: Option<String>,
-    pub bind_interface: Option<String>,
-    pub inet4_bind_address: Option<String>,
-    pub inet6_bind_address: Option<String>,
-    pub routing_mark: Option<usize>,
-    pub reuse_addr: Option<bool>,
-    pub connect_timeout: Option<String>,
-    pub tcp_fast_open: Option<bool>,
-    pub tcp_multi_path: Option<bool>,
-    pub udp_fragment: Option<bool>,
-    pub domain_strategy: Option<Strategy>,
-    pub fallback_delay: Option<String>,
-}
diff --git a/src/singbox/outbound/vmess.rs b/src/singbox/outbound/vmess.rs
deleted file mode 100644
index 232ce6e..0000000
--- a/src/singbox/outbound/vmess.rs
+++ /dev/null
@@ -1,38 +0,0 @@
-use crate::singbox::common::{
-    base::{Network, Strategy},
-    multiplex::Multiplex,
-    tls,
-    transport::Transport,
-};
-use serde::{Deserialize, Serialize};
-use serde_with::skip_serializing_none;
-
-#[skip_serializing_none]
-#[derive(Default, Serialize, Deserialize, Debug)]
-pub struct Vmess {
-    pub tag: String,
-    pub server: String,
-    pub server_port: u16,
-    pub uuid: Option<String>,
-    pub security: Option<String>,
-    pub alter_id: Option<usize>,
-    pub global_padding: Option<bool>,
-    pub authenticated_length: Option<bool>,
-    pub network: Option<Network>,
-    pub tls: Option<tls::Outbound>,
-    pub packet_encoding: Option<String>,
-    pub multiplex: Option<Multiplex>,
-    pub transport: Option<Transport>,
-    pub detour: Option<String>,
-    pub bind_interface: Option<String>,
-    pub inet4_bind_address: Option<String>,
-    pub inet6_bind_address: Option<String>,
-    pub routing_mark: Option<usize>,
-    pub reuse_addr: Option<bool>,
-    pub connect_timeout: Option<String>,
-    pub tcp_fast_open: Option<bool>,
-    pub tcp_multi_path: Option<bool>,
-    pub udp_fragment: Option<bool>,
-    pub domain_strategy: Option<Strategy>,
-    pub fallback_delay: Option<String>,
-}
diff --git a/src/singbox/outbound/wireguard.rs b/src/singbox/outbound/wireguard.rs
deleted file mode 100644
index c1c7ada..0000000
--- a/src/singbox/outbound/wireguard.rs
+++ /dev/null
@@ -1,34 +0,0 @@
-use crate::singbox::common::base::{Network, Strategy};
-use serde::{Deserialize, Serialize};
-use serde_with::skip_serializing_none;
-
-#[skip_serializing_none]
-#[derive(Default, Serialize, Deserialize, Debug)]
-pub struct Wireguard {
-    pub tag: String,
-    pub server: String,
-    pub server_port: u16,
-    pub system_interface: Option<bool>,
-    pub gso: Option<bool>,
-    pub interface_name: Option<String>,
-    pub local_address: Option<Vec<String>>,
-    pub private_key: Option<String>,
-    pub peer_public_key: Option<String>,
-    pub pre_shared_key: Option<String>,
-    pub reserved: Option<Vec<usize>>,
-    pub workers: Option<usize>,
-    pub mtu: Option<usize>,
-    pub network: Option<Network>,
-    pub detour: Option<String>,
-    pub bind_interface: Option<String>,
-    pub inet4_bind_address: Option<String>,
-    pub inet6_bind_address: Option<String>,
-    pub routing_mark: Option<usize>,
-    pub reuse_addr: Option<bool>,
-    pub connect_timeout: Option<String>,
-    pub tcp_fast_open: Option<bool>,
-    pub tcp_multi_path: Option<bool>,
-    pub udp_fragment: Option<bool>,
-    pub domain_strategy: Option<Strategy>,
-    pub fallback_delay: Option<String>,
-}
diff --git a/src/singbox/route/mod.rs b/src/singbox/route/mod.rs
deleted file mode 100644
index 0d327a1..0000000
--- a/src/singbox/route/mod.rs
+++ /dev/null
@@ -1,37 +0,0 @@
-pub mod rule;
-pub mod rule_set;
-
-use serde::{Deserialize, Serialize};
-use serde_with::skip_serializing_none;
-
-use super::common::base::Strategy;
-
-#[skip_serializing_none]
-#[derive(Serialize, Deserialize, Debug)]
-pub struct Route {
-    default_domain_resolver: StringOrDomainResolver,
-    rules: Vec<rule::Rule>,
-    rule_set: Vec<rule_set::RuleSet>,
-    r#final: String,
-    auto_detect_interface: Option<bool>,
-    override_android_vpn: Option<bool>,
-    default_interface: Option<String>,
-    default_mark: Option<usize>,
-}
-
-#[derive(Serialize, Deserialize, Debug)]
-#[serde(untagged)]
-pub enum StringOrDomainResolver {
-    Str(String),
-    DomainResolver(DomainResolver),
-}
-
-#[skip_serializing_none]
-#[derive(Serialize, Deserialize, Debug)]
-pub struct DomainResolver {
-    server: String,
-    strategy: Option<Strategy>,
-    disable_cache: Option<bool>,
-    rewrite_ttl: Option<i32>,
-    client_subnet: Option<String>,
-}
diff --git a/src/singbox/route/rule.rs b/src/singbox/route/rule.rs
deleted file mode 100644
index c5423f6..0000000
--- a/src/singbox/route/rule.rs
+++ /dev/null
@@ -1,41 +0,0 @@
-use crate::singbox::common::base::{IpVersion, LogicalMode, SingleOrMultipleValue};
-use serde::{Deserialize, Serialize};
-use serde_with::skip_serializing_none;
-
-#[skip_serializing_none]
-#[derive(Serialize, Deserialize, Debug)]
-pub struct Rule {
-    action: String,
-    outbound: Option<String>,
-    inbound: Option<SingleOrMultipleValue>,
-    ip_version: Option<IpVersion>,
-    auth_user: Option<SingleOrMultipleValue>,
-    protocol: Option<SingleOrMultipleValue>,
-    network: Option<SingleOrMultipleValue>,
-    domain: Option<SingleOrMultipleValue>,
-    domain_suffix: Option<SingleOrMultipleValue>,
-    domain_keyword: Option<SingleOrMultipleValue>,
-    domain_regex: Option<SingleOrMultipleValue>,
-    source_ip_cidr: Option<SingleOrMultipleValue>,
-    ip_is_private: Option<bool>,
-    ip_cidr: Option<SingleOrMultipleValue>,
-    source_ip_is_private: Option<bool>,
-    source_port: Option<Vec<u16>>,
-    source_port_range: Option<SingleOrMultipleValue>,
-    port: Option<Vec<u16>>,
-    port_range: Option<SingleOrMultipleValue>,
-    process_name: Option<SingleOrMultipleValue>,
-    process_path: Option<SingleOrMultipleValue>,
-    package_name: Option<SingleOrMultipleValue>,
-    user: Option<SingleOrMultipleValue>,
-    user_id: Option<Vec<usize>>,
-    clash_mode: Option<String>,
-    wifi_ssid: Option<SingleOrMultipleValue>,
-    wifi_bssid: Option<SingleOrMultipleValue>,
-    rule_set: Option<SingleOrMultipleValue>,
-    rule_set_ip_cidr_match_source: Option<SingleOrMultipleValue>,
-    invert: Option<SingleOrMultipleValue>,
-    mode: Option<LogicalMode>,
-    method: Option<String>,
-    no_drop: Option<bool>,
-}
diff --git a/src/singbox/route/rule_set.rs b/src/singbox/route/rule_set.rs
deleted file mode 100644
index b4e1320..0000000
--- a/src/singbox/route/rule_set.rs
+++ /dev/null
@@ -1,66 +0,0 @@
-use super::rule::Rule;
-use crate::singbox::common::base::{LogicalMode, Network, QueryType, SingleOrMultipleValue};
-use serde::{Deserialize, Serialize};
-use serde_with::skip_serializing_none;
-
-#[derive(Serialize, Deserialize, Debug)]
-#[serde(tag = "type", rename_all = "lowercase")]
-pub enum RuleSet {
-    Remote(Remote),
-    Local(Local),
-    Inline(Inline),
-}
-
-#[derive(Serialize, Deserialize, Debug)]
-pub struct Remote {
-    tag: String,
-    format: Format,
-    url: String,
-    download_detour: String,
-    update_interval: String,
-}
-
-#[derive(Serialize, Deserialize, Debug)]
-#[serde(rename_all = "lowercase")]
-pub enum Format {
-    Source,
-    Binary,
-}
-
-#[derive(Serialize, Deserialize, Debug)]
-pub struct Local {
-    tag: String,
-    format: Format,
-    path: String,
-}
-
-#[derive(Serialize, Deserialize, Debug)]
-pub struct Inline {
-    tag: String,
-    rules: Vec<HeadlessRule>,
-}
-
-#[skip_serializing_none]
-#[derive(Serialize, Deserialize, Debug)]
-pub struct HeadlessRule {
-    query_type: Option<SingleOrMultipleValue<QueryType>>,
-    network: Option<SingleOrMultipleValue<Network>>,
-    domain: Option<SingleOrMultipleValue>,
-    domain_suffix: Option<SingleOrMultipleValue>,
-    domain_keyword: Option<SingleOrMultipleValue>,
-    domain_regex: Option<SingleOrMultipleValue>,
-    source_ip_cidr: Option<SingleOrMultipleValue>,
-    ip_cidr: Option<SingleOrMultipleValue>,
-    source_port: Option<SingleOrMultipleValue<u16>>,
-    source_port_range: Option<SingleOrMultipleValue>,
-    port: Option<SingleOrMultipleValue<u16>>,
-    port_range: Option<SingleOrMultipleValue>,
-    process_name: Option<SingleOrMultipleValue>,
-    process_path: Option<SingleOrMultipleValue>,
-    package_name: Option<SingleOrMultipleValue>,
-    wifi_ssid: Option<SingleOrMultipleValue>,
-    wifi_bssid: Option<SingleOrMultipleValue>,
-    invert: Option<bool>,
-    mode: Option<LogicalMode>,
-    rules: Option<Vec<Rule>>,
-}
diff --git a/src/template.rs b/src/template.rs
deleted file mode 100644
index 2f2f3aa..0000000
--- a/src/template.rs
+++ /dev/null
@@ -1,405 +0,0 @@
-pub const TEMPLATE: &str = r#"
-{
-  "log": {
-    "level": "info",
-    "timestamp": true
-  },
-  "dns": {
-    "servers": [
-      {
-        "tag": "ali",
-        "type": "https",
-        "server": "223.5.5.5",
-        "detour": "DIRECT"
-      },
-      {
-        "tag": "DNSPod",
-        "type": "https",
-        "server": "120.53.53.53",
-        "detour": "DIRECT"
-      },
-      {
-        "tag": "google",
-        "type": "https",
-        "server": "8.8.8.8",
-        "detour": "🚀 节点选择"
-      },
-      {
-        "tag": "cloudflare",
-        "type": "https",
-        "server": "1.1.1.1",
-        "detour": "🚀 节点选择"
-      },
-      {
-        "tag": "block",
-        "type": "predefined",
-        "responses": [
-          {
-            "rcode": "NOERROR"
-          }
-        ]
-      }
-    ],
-    "rules": [
-      {
-        "domain": [
-          "sh.picopock.com",
-          "gs.picopock.com",
-          "appstorrent.ru",
-          "kp.m-team.cc"
-        ],
-        "domain_keyword": [
-          "m-team"
-        ],
-        "strategy": "ipv4_only",
-        "action": "route",
-        "server": "ali"
-      },
-      {
-        "domain_suffix": [
-          "creaders.net"
-        ],
-        "domain_keyword": [
-          "mikrotik"
-        ],
-        "strategy": "ipv4_only",
-        "action": "route",
-        "server": "google"
-      },
-      {
-        "clash_mode": "direct",
-        "strategy": "ipv4_only",
-        "action": "route",
-        "server": "ali"
-      },
-      {
-        "clash_mode": "global",
-        "strategy": "ipv4_only",
-        "action": "route",
-        "server": "google"
-      },
-      {
-        "rule_set": "ads",
-        "action": "reject",
-        "method": "default",
-        "no_drop": false
-      },
-      {
-        "domain": [
-          "jd.com",
-          "taobao.com",
-          "appstorrent.ru"
-        ],
-        "domain_suffix": [
-          "cdn.jiashule.com",
-          "cdn.jsdelivr.net",
-          "jsdelivr.map.fastly.net",
-          "adobe.com",
-          "jd.com",
-          "taobao.com"
-        ],
-        "domain_keyword": [
-          "adobe"
-        ],
-        "strategy": "ipv4_only",
-        "action": "route",
-        "server": "ali"
-      },
-      {
-        "rule_set": [
-          "microsoft-cn",
-          "games-cn",
-          "network-test",
-          "applications",
-          "cn",
-          "private"
-        ],
-        "strategy": "ipv4_only",
-        "action": "route",
-        "server": "ali"
-      },
-      {
-        "rule_set": [
-          "google-cn",
-          "apple-cn",
-          "proxy"
-        ],
-        "strategy": "ipv4_only",
-        "action": "route",
-        "server": "google"
-      }
-    ],
-    "final": "google",
-    "strategy": "ipv4_only",
-    "disable_cache": false,
-    "disable_expire": false,
-    "independent_cache": false,
-    "reverse_mapping": false
-  },
-  "inbounds": [
-    {
-      "type": "direct",
-      "tag": "DNS-IN",
-      "listen": "0.0.0.0",
-      "listen_port": 53
-    },
-    {
-      "type": "tun",
-      "tag": "TUN-IN",
-      "address": [
-        "198.18.0.1/16"
-      ],
-      "auto_route": true,
-      "stack": "mixed",
-      "sniff": true
-    }
-  ],
-  "outbounds": [
-    {
-      "tag": "DIRECT",
-      "type": "direct"
-    },
-    {
-      "tag": "🚀 节点选择",
-      "type": "selector",
-      "interrupt_exist_connections": true,
-      "default": "♻️ 自动选择",
-      "outbounds": [
-        "♻️ 自动选择",
-        "🚀 手动切换"
-      ]
-    },
-    {
-      "tag": "♻️ 自动选择",
-      "type": "urltest",
-      "url": "https://www.gstatic.com/generate_204",
-      "interval": "3m",
-      "tolerance": 50,
-      "idle_timeout": "50m",
-      "interrupt_exist_connections": true,
-      "outbounds": ["{{ALL-TAG}}"]
-    },
-    {
-      "tag": "🚀 手动切换",
-      "type": "selector",
-      "interrupt_exist_connections": true,
-      "default": "",
-      "outbounds": ["{{ALL-TAG}}"]
-    }
-  ],
-  "route": {
-    "default_domain_resolver": {
-      "server": "ali"
-    },
-    "rules": [
-      {
-        "action": "sniff"
-      },
-      {
-        "action": "hijack-dns",
-        "protocol": "dns"
-      },
-      {
-        "domain": [
-          "sh.picopock.com",
-          "gs.picopock.com",
-          "appstorrent.ru",
-          "kp.m-team.cc"
-        ],
-        "domain_suffix": [
-          "cdn.jiashule.com",
-          "xiaoliyu.cyou",
-          "xiaoliyu.xyz",
-          "jd.com",
-          "taobao.com",
-          "argotunnel.com"
-        ],
-        "domain_keyword": [
-          "m-team"
-        ],
-        "action": "route",
-        "outbound": "DIRECT"
-      },
-      {
-        "domain_suffix": [
-          "creaders.net"
-        ],
-        "domain_keyword": [
-          "mikrotik"
-        ],
-        "action": "route",
-        "outbound": "🚀 节点选择"
-      },
-      {
-        "clash_mode": "global",
-        "action": "route",
-        "outbound": "🚀 节点选择"
-      },
-      {
-        "clash_mode": "direct",
-        "action": "route",
-        "outbound": "DIRECT"
-      },
-      {
-        "rule_set": "ads",
-        "action": "reject",
-        "method": "default",
-        "no_drop": false
-      },
-      {
-        "rule_set": [
-          "microsoft-cn",
-          "games-cn",
-          "network-test",
-          "applications",
-          "cn",
-          "cn-ip",
-          "private-ip",
-          "private"
-        ],
-        "action": "route",
-        "outbound": "DIRECT"
-      },
-      {
-        "domain_suffix": [
-          "v2ex.com",
-          "docker.io"
-        ],
-        "action": "route",
-        "outbound": "🚀 节点选择"
-      },
-      {
-        "rule_set": [
-          "google-cn",
-          "apple-cn",
-          "proxy",
-          "telegram-ip"
-        ],
-        "action": "route",
-        "outbound": "🚀 节点选择"
-      }
-    ],
-    "rule_set": [
-      {
-        "tag": "ads",
-        "type": "remote",
-        "format": "binary",
-        "url": "https://cdn.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/ads.srs",
-        "download_detour": "🚀 节点选择",
-        "update_interval": "1d"
-      },
-      {
-        "tag": "private",
-        "type": "remote",
-        "format": "binary",
-        "url": "https://cdn.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/private.srs",
-        "download_detour": "🚀 节点选择",
-        "update_interval": "1d"
-      },
-      {
-        "tag": "microsoft-cn",
-        "type": "remote",
-        "format": "binary",
-        "url": "https://cdn.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/microsoft-cn.srs",
-        "download_detour": "🚀 节点选择",
-        "update_interval": "1d"
-      },
-      {
-        "tag": "apple-cn",
-        "type": "remote",
-        "format": "binary",
-        "url": "https://cdn.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/apple-cn.srs",
-        "download_detour": "🚀 节点选择",
-        "update_interval": "1d"
-      },
-      {
-        "tag": "google-cn",
-        "type": "remote",
-        "format": "binary",
-        "url": "https://cdn.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/google-cn.srs",
-        "download_detour": "🚀 节点选择",
-        "update_interval": "1d"
-      },
-      {
-        "tag": "games-cn",
-        "type": "remote",
-        "format": "binary",
-        "url": "https://cdn.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/games-cn.srs",
-        "download_detour": "🚀 节点选择",
-        "update_interval": "1d"
-      },
-      {
-        "tag": "network-test",
-        "type": "remote",
-        "format": "binary",
-        "url": "https://cdn.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/networktest.srs",
-        "download_detour": "🚀 节点选择",
-        "update_interval": "1d"
-      },
-      {
-        "tag": "applications",
-        "type": "remote",
-        "format": "binary",
-        "url": "https://cdn.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/applications.srs",
-        "download_detour": "🚀 节点选择",
-        "update_interval": "1d"
-      },
-      {
-        "tag": "proxy",
-        "type": "remote",
-        "format": "binary",
-        "url": "https://cdn.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/proxy.srs",
-        "download_detour": "🚀 节点选择",
-        "update_interval": "1d"
-      },
-      {
-        "tag": "cn",
-        "type": "remote",
-        "format": "binary",
-        "url": "https://cdn.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/cn.srs",
-        "download_detour": "🚀 节点选择",
-        "update_interval": "1d"
-      },
-      {
-        "tag": "telegram-ip",
-        "type": "remote",
-        "format": "binary",
-        "url": "https://cdn.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/telegramip.srs",
-        "download_detour": "🚀 节点选择",
-        "update_interval": "1d"
-      },
-      {
-        "tag": "private-ip",
-        "type": "remote",
-        "format": "binary",
-        "url": "https://cdn.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/privateip.srs",
-        "download_detour": "🚀 节点选择",
-        "update_interval": "1d"
-      },
-      {
-        "tag": "cn-ip",
-        "type": "remote",
-        "format": "binary",
-        "url": "https://cdn.jsdelivr.net/gh/DustinWin/ruleset_geodata@sing-box-ruleset/cnip.srs",
-        "download_detour": "🚀 节点选择",
-        "update_interval": "1d"
-      }
-    ],
-    "final": "🚀 节点选择",
-    "auto_detect_interface": true
-  },
-  "experimental": {
-    "cache_file": {
-      "enabled": true
-    },
-    "clash_api": {
-      "external_controller": "0.0.0.0:9090",
-      "external_ui": "ui",
-      "external_ui_download_url": "https://github.com/MetaCubeX/Yacd-meta/archive/gh-pages.zip",
-      "external_ui_download_detour": "🚀 节点选择",
-      "secret": "CUG_hb0015",
-      "default_mode": "rule"
-    }
-  }
-}
-"#;
diff --git a/src/utils/mod.rs b/src/utils/mod.rs
new file mode 100644
index 0000000..4e4a169
--- /dev/null
+++ b/src/utils/mod.rs
@@ -0,0 +1,4 @@
+//! Utility Module - file, source, template (error lives in core)
+
+pub mod source;
+pub mod template;
diff --git a/src/utils/source/loader.rs b/src/utils/source/loader.rs
new file mode 100644
index 0000000..a98a353
--- /dev/null
+++ b/src/utils/source/loader.rs
@@ -0,0 +1,317 @@
+//! Source loader for loading and parsing configurations
+
+use crate::core::source::{SourceMeta, SourceProtocol};
+use crate::core::config::AppConfig;
+use crate::core::error::{ConvertError, Result};
+use crate::protocols::{clash, singbox, v2ray, ProtocolRegistry};
+use crate::utils::source::parser::{Config, Source};
+use std::path::Path;
+
+/// Source loader for loading and parsing configurations
+pub struct SourceLoader;
+
+impl SourceLoader {
+    /// Load and parse a source configuration
+    pub async fn load_source(
+        source_meta: &SourceMeta,
+        registry: &ProtocolRegistry,
+        config: &AppConfig,
+    ) -> Result<Source> {
+        let content = Self::load_content_from_source(source_meta, config).await?;
+
+        // Determine the format
+        let detected_format = if let Some(fmt) = &source_meta.format {
+            fmt.clone()
+        } else {
+            match &source_meta.source_type {
+                SourceProtocol::Clash => "clash".to_string(),
+                SourceProtocol::SingBox => "singbox".to_string(),
+                SourceProtocol::V2Ray => "v2ray".to_string(),
+            }
+        };
+
+        // Parse configuration based on detected format
+        let parsed_config = Self::parse_config(&content, &detected_format, registry)?;
+
+        Ok(Source::new(source_meta.clone(), parsed_config))
+    }
+
+    /// Load content from source (URL or local file)
+    async fn load_content_from_source(
+        source_meta: &SourceMeta,
+        config: &AppConfig,
+    ) -> Result<String> {
+        let source = &source_meta.source;
+        if source.starts_with("http://") || source.starts_with("https://") {
+            // Use source flag if set (empty = &flag=), else protocol default
+            let url_with_flag =
+                Self::append_flag_to_url(source, &source_meta.source_type, source_meta.flag.as_deref());
+            Self::load_from_url(&url_with_flag, config).await
+        } else {
+            // File path: use only the part before ? (query params are kept in source string for reference)
+            let path = source.find('?').map(|i| &source[..i]).unwrap_or(source.as_str());
+            Self::load_from_file(path)
+        }
+    }
+
+    /// Append or update flag query parameter to URL.
+    /// Use flag_override if set (empty string = &flag=), else source_type default.
+    fn append_flag_to_url(
+        url: &str,
+        source_type: &SourceProtocol,
+        flag_override: Option<&str>,
+    ) -> String {
+        let flag_value = match flag_override {
+            Some(s) => s.to_string(),
+            None => match source_type {
+                SourceProtocol::Clash => "clash".to_string(),
+                SourceProtocol::SingBox => "sing-box".to_string(),
+                SourceProtocol::V2Ray => "v2ray".to_string(),
+            },
+        };
+
+        // Check if flag parameter already exists and get its value
+        if let Some(current_flag_value) = Self::get_flag_param_value(url) {
+            if current_flag_value == flag_value {
+                url.to_string()
+            } else {
+                Self::update_flag_param(url, &flag_value)
+            }
+        } else {
+            if url.contains('?') {
+                format!("{}&flag={}", url, flag_value)
+            } else {
+                format!("{}?flag={}", url, flag_value)
+            }
+        }
+    }
+
+    /// Get the value of the flag parameter from URL, if it exists
+    fn get_flag_param_value(url: &str) -> Option<String> {
+        // Find the query string part (after ?)
+        if let Some(query_start) = url.find('?') {
+            let query_part = &url[query_start + 1..];
+            // Also check for fragment separator
+            let query_end = query_part.find('#').unwrap_or(query_part.len());
+            let query = &query_part[..query_end];
+            
+            // Find flag parameter in query string
+            for param in query.split('&') {
+                let param = param.trim_start_matches('?');
+                if let Some(flag_start) = param.find("flag=") {
+                    let value = &param[flag_start + 5..];
+                    // Get value up to next & or end of string
+                    let value_end = value.find('&').unwrap_or(value.len());
+                    return Some(value[..value_end].to_string());
+                }
+            }
+        }
+        None
+    }
+
+    /// Update the flag parameter value in URL
+    fn update_flag_param(url: &str, new_flag_value: &str) -> String {
+        // Find the query string part
+        if let Some(query_start) = url.find('?') {
+            let base_url = &url[..query_start + 1];
+            let query_part = &url[query_start + 1..];
+            
+            // Check for fragment
+            let (query, fragment) = if let Some(frag_start) = query_part.find('#') {
+                (&query_part[..frag_start], Some(&query_part[frag_start..]))
+            } else {
+                (query_part, None)
+            };
+            
+            // Split query parameters and update flag
+            let params: Vec<String> = query
+                .split('&')
+                .map(|p| {
+                    if p.trim_start_matches('?').starts_with("flag=") {
+                        format!("flag={}", new_flag_value)
+                    } else {
+                        p.to_string()
+                    }
+                })
+                .collect();
+            
+            // Reconstruct URL
+            let mut result = base_url.to_string();
+            if !params.is_empty() {
+                result.push_str(&params.join("&"));
+            }
+            if let Some(frag) = fragment {
+                result.push_str(frag);
+            }
+            result
+        } else {
+            // No query string, just add flag parameter
+            format!("{}?flag={}", url, new_flag_value)
+        }
+    }
+
+    /// Load content from URL (uses NetworkError for fetch failures).
+    async fn load_from_url(url: &str, config: &AppConfig) -> Result<String> {
+        tracing::info!("Fetching URL: {}", url);
+
+        let client = reqwest::Client::builder()
+            .timeout(std::time::Duration::from_secs(config.timeout_seconds))
+            .build()
+            .map_err(|e| ConvertError::network_error(e.to_string().as_str()))?;
+
+        let response = client
+            .get(url)
+            .send()
+            .await
+            .map_err(|e| ConvertError::network_error(e.to_string().as_str()))?;
+
+        if !response.status().is_success() {
+            return Err(ConvertError::network_error(
+                &format!("Failed to fetch URL: {} - Status: {}", url, response.status()),
+            ));
+        }
+
+        let content = response
+            .text()
+            .await
+            .map_err(|e| ConvertError::network_error(e.to_string().as_str()))?;
+
+        Ok(content)
+    }
+
+    /// Load content from local file
+    fn load_from_file(file_path: &str) -> Result<String> {
+        let path = Path::new(file_path);
+        if !path.exists() {
+            return Err(ConvertError::file_not_found(file_path));
+        }
+
+        std::fs::read_to_string(path).map_err(|e| ConvertError::IoError(e))
+    }
+
+    /// Parse configuration based on format (strongly typed)
+    fn parse_config(content: &str, format: &str, registry: &ProtocolRegistry) -> Result<Config> {
+        match format.to_lowercase().as_str() {
+            "clash" => {
+                let config = Self::parse_clash_config(content)?;
+                Ok(Config::Clash(config))
+            }
+            "singbox" => {
+                let config = Self::parse_singbox_config(content)?;
+                Ok(Config::SingBox(config))
+            }
+            "v2ray" => {
+                let config = Self::parse_v2ray_config(content)?;
+                Ok(Config::V2Ray(config))
+            }
+            "subscription" => {
+                let servers = registry.parse_subscription_to_servers(content)?;
+                Ok(Config::Subscription(servers))
+            }
+            "plain" => {
+                let servers = registry.parse_plain_text_to_servers(content)?;
+                Ok(Config::Plain(servers))
+            }
+            _ => Err(ConvertError::ConfigValidationError(format!(
+                "Unsupported format: {}",
+                format
+            ))),
+        }
+    }
+
+    /// Parse Clash configuration (strongly typed)
+    fn parse_clash_config(content: &str) -> Result<clash::Config> {
+        // Try to parse as YAML
+        if let Ok(config) = serde_yaml::from_str::<clash::Config>(content) {
+            return Ok(config);
+        }
+
+        Err(ConvertError::ConfigValidationError(
+            "Failed to parse Clash configuration".to_string(),
+        ))
+    }
+
+    /// Parse Sing-box configuration (strongly typed).
+    /// Normalize legacy DNS servers: when "address" exists but "type" is missing, set "type": "" so they deserialize as Server::Legacy.
+    pub(crate) fn parse_singbox_config(content: &str) -> Result<singbox::Config> {
+        if let Ok(config) = serde_json::from_str::<singbox::Config>(content) {
+            return Ok(config);
+        }
+        // Normalize legacy DNS format (see sing-box docs: type empty = legacy, uses "address" only)
+        if let Ok(mut value) = serde_json::from_str::<serde_json::Value>(content) {
+            if let Some(dns) = value.get_mut("dns") {
+                if let Some(servers) = dns.get_mut("servers").and_then(|s| s.as_array_mut()) {
+                    for server in servers {
+                        if let Some(obj) = server.as_object_mut() {
+                            // Legacy format has "address" but no "type"; official docs: type empty = legacy
+                            if obj.contains_key("address") && !obj.contains_key("type") {
+                                obj.insert("type".to_string(), serde_json::Value::String(String::new()));
+                            }
+                        }
+                    }
+                }
+            }
+            if let Ok(config) = serde_json::from_value::<singbox::Config>(value) {
+                return Ok(config);
+            }
+        }
+        Err(ConvertError::ConfigValidationError(
+            "Failed to parse Sing-box configuration".to_string(),
+        ))
+    }
+
+    /// Parse V2Ray configuration (strongly typed)
+    fn parse_v2ray_config(content: &str) -> Result<v2ray::Config> {
+        // Try to parse as JSON first
+        if let Ok(config) = serde_json::from_str::<v2ray::Config>(content) {
+            return Ok(config);
+        }
+
+        Err(ConvertError::ConfigValidationError(
+            "Failed to parse V2Ray configuration".to_string(),
+        ))
+    }
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+    use crate::protocols::singbox::dns::Server as DnsServer;
+
+    #[test]
+    fn test_parse_singbox_config_legacy_dns() {
+        // Minimal sing-box config with legacy DNS (address only, no type) like Eternal Network
+        let json = r#"{
+            "dns": {
+                "servers": [
+                    {"address": "1.1.1.1", "detour": "proxy", "tag": "remote"},
+                    {"address": "https://223.5.5.5/dns-query", "detour": "direct", "tag": "local"},
+                    {"address": "rcode://refused", "tag": "block"}
+                ],
+                "final": "remote"
+            },
+            "inbounds": [],
+            "outbounds": [{"type": "direct", "tag": "direct"}]
+        }"#;
+        let config = SourceLoader::parse_singbox_config(json).unwrap();
+        let dns = config.dns.as_ref().unwrap();
+        assert_eq!(dns.servers.len(), 3);
+
+        match &dns.servers[0] {
+            DnsServer::Legacy(l) => {
+                assert_eq!(l.address, "1.1.1.1");
+                assert_eq!(l.tag.as_deref(), Some("remote"));
+                assert_eq!(l.detour.as_deref(), Some("proxy"));
+            }
+            _ => panic!("first server should be Legacy"),
+        }
+        match &dns.servers[1] {
+            DnsServer::Legacy(l) => assert_eq!(l.address, "https://223.5.5.5/dns-query"),
+            _ => panic!("second server should be Legacy"),
+        }
+        match &dns.servers[2] {
+            DnsServer::Legacy(l) => assert_eq!(l.address, "rcode://refused"),
+            _ => panic!("third server should be Legacy"),
+        }
+    }
+}
diff --git a/src/utils/source/mod.rs b/src/utils/source/mod.rs
new file mode 100644
index 0000000..451fbe7
--- /dev/null
+++ b/src/utils/source/mod.rs
@@ -0,0 +1,6 @@
+//! Source configuration parsing and loading module
+
+pub mod loader;
+pub mod parser;
+
+pub use loader::SourceLoader;
diff --git a/src/utils/source/parser.rs b/src/utils/source/parser.rs
new file mode 100644
index 0000000..9095164
--- /dev/null
+++ b/src/utils/source/parser.rs
@@ -0,0 +1,327 @@
+//! Source configuration parser
+
+use crate::core::source::SourceMeta;
+use crate::core::error::Result;
+use crate::protocols::{clash, singbox, v2ray, ProxyServer};
+use std::collections::HashMap;
+
+/// Configuration for different protocols (strongly typed)
+#[derive(Debug, Clone)]
+pub enum Config {
+    Clash(clash::Config),
+    SingBox(singbox::Config),
+    V2Ray(v2ray::Config),
+    /// Subscription format (parsed proxy servers)
+    Subscription(Vec<ProxyServer>),
+    /// Plain text format (parsed proxy servers)
+    Plain(Vec<ProxyServer>),
+}
+
+/// Source information for template processing
+#[derive(Debug, Clone)]
+pub struct Source {
+    pub meta: SourceMeta,
+    pub config: Config,
+}
+
+impl Source {
+    /// Create a new source
+    pub fn new(meta: SourceMeta, config: Config) -> Self {
+        Self { meta, config }
+    }
+
+    /// Extract servers from the configuration
+    pub fn extract_servers(&self) -> Result<Vec<ProxyServer>> {
+        match &self.config {
+            Config::Clash(config) => Self::extract_servers_from_clash_config(config),
+            Config::SingBox(config) => Self::extract_servers_from_singbox_config(config),
+            Config::V2Ray(config) => Self::extract_servers_from_v2ray_config(config),
+            Config::Subscription(servers) => Ok(servers.clone()),
+            Config::Plain(servers) => Ok(servers.clone()),
+        }
+    }
+
+    /// Extract servers from Clash configuration (strongly typed)
+    fn extract_servers_from_clash_config(config: &clash::Config) -> Result<Vec<ProxyServer>> {
+        let mut servers = Vec::new();
+
+        for proxy in &config.proxies {
+            if let Some(server) = Self::parse_clash_proxy(proxy) {
+                servers.push(server);
+            }
+        }
+
+        Ok(servers)
+    }
+
+    /// Parse a single Clash proxy entry (strongly typed)
+    fn parse_clash_proxy(proxy: &clash::proxy::Proxy) -> Option<ProxyServer> {
+        // Convert Clash proxy to JSON for generic handling
+        let proxy_json = serde_json::to_value(proxy).ok()?;
+
+        let name = proxy_json.get("name")?.as_str()?.to_string();
+        let mut protocol = proxy_json.get("type")?.as_str()?.to_string();
+
+        // Normalize protocol names: clash uses "ss" but sing-box uses "shadowsocks"
+        if protocol == "ss" {
+            protocol = "shadowsocks".to_string();
+        }
+
+        let server = proxy_json.get("server")?.as_str()?.to_string();
+        let port = proxy_json.get("port")?.as_u64()? as u16;
+
+        let password = proxy_json
+            .get("password")
+            .and_then(|v| v.as_str())
+            .map(String::from);
+        let method = proxy_json
+            .get("cipher")
+            .or_else(|| proxy_json.get("method"))
+            .and_then(|v| v.as_str())
+            .map(String::from);
+
+        // Collect additional parameters
+        let mut parameters = HashMap::new();
+        let skip_keys = [
+            "name", "type", "server", "port", "password", "cipher", "method",
+        ];
+
+        if let Some(obj) = proxy_json.as_object() {
+            for (key, value) in obj {
+                if !skip_keys.contains(&key.as_str()) {
+                    parameters.insert(key.clone(), value.clone());
+                }
+            }
+        }
+
+        Some(ProxyServer {
+            name,
+            protocol,
+            server,
+            port,
+            password,
+            method,
+            parameters,
+        })
+    }
+
+    /// Extract servers from Sing-box configuration (strongly typed)
+    fn extract_servers_from_singbox_config(config: &singbox::Config) -> Result<Vec<ProxyServer>> {
+        let mut servers = Vec::new();
+
+        for outbound in &config.outbounds {
+            if let Some(server) = Self::parse_singbox_outbound(outbound) {
+                servers.push(server);
+            }
+        }
+
+        Ok(servers)
+    }
+
+    /// Parse a single Sing-box outbound entry (strongly typed)
+    fn parse_singbox_outbound(outbound: &singbox::outbound::Outbound) -> Option<ProxyServer> {
+        // Convert outbound to JSON for generic handling
+        let outbound_json = serde_json::to_value(outbound).ok()?;
+
+        let outbound_type = outbound_json.get("type")?.as_str()?;
+
+        // Skip non-proxy outbound types
+        let proxy_types = [
+            "shadowsocks",
+            "vmess",
+            "vless",
+            "trojan",
+            "hysteria",
+            "hysteria2",
+            "shadowtls",
+            "tuic",
+            "wireguard",
+            "ssh",
+            "socks",
+            "http",
+        ];
+
+        if !proxy_types.contains(&outbound_type) {
+            return None;
+        }
+
+        let tag = outbound_json.get("tag")?.as_str()?.to_string();
+        let server = outbound_json
+            .get("server")
+            .and_then(|v| v.as_str())
+            .unwrap_or("")
+            .to_string();
+        let port = outbound_json
+            .get("server_port")
+            .or_else(|| outbound_json.get("port"))
+            .and_then(|v| v.as_u64())
+            .unwrap_or(0) as u16;
+
+        let password = outbound_json
+            .get("password")
+            .and_then(|v| v.as_str())
+            .map(String::from);
+        let method = outbound_json
+            .get("method")
+            .and_then(|v| v.as_str())
+            .map(String::from);
+
+        // Collect additional parameters
+        let mut parameters = HashMap::new();
+        let skip_keys = [
+            "type",
+            "tag",
+            "server",
+            "server_port",
+            "port",
+            "password",
+            "method",
+        ];
+
+        if let Some(obj) = outbound_json.as_object() {
+            for (key, value) in obj {
+                if !skip_keys.contains(&key.as_str()) {
+                    parameters.insert(key.clone(), value.clone());
+                }
+            }
+        }
+
+        Some(ProxyServer {
+            name: tag,
+            protocol: outbound_type.to_string(),
+            server,
+            port,
+            password,
+            method,
+            parameters,
+        })
+    }
+
+    /// Extract servers from V2Ray configuration (strongly typed)
+    fn extract_servers_from_v2ray_config(config: &v2ray::Config) -> Result<Vec<ProxyServer>> {
+        let mut servers = Vec::new();
+
+        for outbound in &config.outbounds {
+            if let Some(server) = Self::parse_v2ray_outbound(outbound) {
+                servers.push(server);
+            }
+        }
+
+        Ok(servers)
+    }
+
+    /// Parse a single V2Ray outbound entry (strongly typed)
+    fn parse_v2ray_outbound(outbound: &v2ray::Outbound) -> Option<ProxyServer> {
+        let protocol = outbound.protocol.as_deref()?;
+
+        // Skip non-proxy protocols
+        let proxy_protocols = ["vmess", "vless", "trojan", "shadowsocks", "socks", "http"];
+
+        if !proxy_protocols.contains(&protocol) {
+            return None;
+        }
+
+        let tag = outbound.tag.clone().unwrap_or_default();
+
+        // V2Ray has a more complex structure with settings.vnext or settings.servers
+        let (server, port) = Self::extract_v2ray_server_info(outbound, protocol).unwrap_or_default();
+        let password = Self::extract_v2ray_password(outbound, protocol);
+        let method = Self::extract_v2ray_method(outbound, protocol);
+
+        // Collect additional parameters from extra
+        let mut parameters = HashMap::new();
+        for (key, value) in &outbound.extra {
+            parameters.insert(key.clone(), value.clone());
+        }
+
+        Some(ProxyServer {
+            name: tag,
+            protocol: protocol.to_string(),
+            server,
+            port,
+            password,
+            method,
+            parameters,
+        })
+    }
+
+    /// Extract server and port from V2Ray outbound
+    fn extract_v2ray_server_info(outbound: &v2ray::Outbound, protocol: &str) -> Option<(String, u16)> {
+        let settings = outbound.settings.as_ref()?;
+
+        match protocol {
+            "vmess" | "vless" => {
+                let vnext = settings.get("vnext")?.as_array()?.first()?;
+                let address = vnext.get("address")?.as_str()?.to_string();
+                let port = vnext.get("port")?.as_u64()? as u16;
+                Some((address, port))
+            }
+            "trojan" | "shadowsocks" | "socks" | "http" => {
+                let servers = settings.get("servers")?.as_array()?.first()?;
+                let address = servers.get("address")?.as_str()?.to_string();
+                let port = servers.get("port")?.as_u64()? as u16;
+                Some((address, port))
+            }
+            _ => None,
+        }
+    }
+
+    /// Extract password from V2Ray outbound
+    fn extract_v2ray_password(outbound: &v2ray::Outbound, protocol: &str) -> Option<String> {
+        let settings = outbound.settings.as_ref()?;
+
+        match protocol {
+            "vmess" | "vless" => settings
+                .get("vnext")?
+                .as_array()?
+                .first()?
+                .get("users")?
+                .as_array()?
+                .first()?
+                .get("id")
+                .and_then(|v| v.as_str())
+                .map(String::from),
+            "trojan" => settings
+                .get("servers")?
+                .as_array()?
+                .first()?
+                .get("password")
+                .and_then(|v| v.as_str())
+                .map(String::from),
+            "shadowsocks" => settings
+                .get("servers")?
+                .as_array()?
+                .first()?
+                .get("password")
+                .and_then(|v| v.as_str())
+                .map(String::from),
+            _ => None,
+        }
+    }
+
+    /// Extract method/cipher from V2Ray outbound
+    fn extract_v2ray_method(outbound: &v2ray::Outbound, protocol: &str) -> Option<String> {
+        let settings = outbound.settings.as_ref()?;
+
+        match protocol {
+            "shadowsocks" => settings
+                .get("servers")?
+                .as_array()?
+                .first()?
+                .get("method")
+                .and_then(|v| v.as_str())
+                .map(String::from),
+            "vmess" => settings
+                .get("vnext")?
+                .as_array()?
+                .first()?
+                .get("users")?
+                .as_array()?
+                .first()?
+                .get("security")
+                .and_then(|v| v.as_str())
+                .map(String::from),
+            _ => None,
+        }
+    }
+}
diff --git a/src/utils/template/interpolation_parser.rs b/src/utils/template/interpolation_parser.rs
new file mode 100644
index 0000000..5973ff6
--- /dev/null
+++ b/src/utils/template/interpolation_parser.rs
@@ -0,0 +1,503 @@
+use crate::core::error::{ConvertError, Result};
+
+/// Interpolation rule types
+#[derive(Debug, Clone, PartialEq)]
+pub enum InterpolationRule {
+    /// Insert all nodes from specified sources (or all sources if none specified)
+    /// Vec contains (source_name, tag_filter) pairs where source_name is optional
+    AllTagFromSources(Vec<(Option<String>, Option<String>)>),
+
+    /// Insert nodes matching tags from sources
+    /// Vec contains (source_name, tag) pairs where source_name is optional
+    IncludeTagFromSources(Vec<(Option<String>, String)>),
+
+    /// Exclude nodes matching tags from sources
+    /// Vec contains (source_name, tag) pairs where source_name is optional
+    ExcludeTagFromSources(Vec<(Option<String>, String)>),
+
+    /// Combined rules: support arbitrary order of multiple rules
+    CombinedRule {
+        all_tag: Option<Box<InterpolationRule>>,
+        include_tag: Option<Box<InterpolationRule>>,
+        exclude_tag: Option<Box<InterpolationRule>>,
+    },
+}
+
+/// Interpolation rule parser
+pub struct InterpolationParser;
+
+impl InterpolationParser {
+    /// Parse interpolation rule string
+    ///
+    /// Supported formats:
+    /// - `{{ALL-TAG}}` - Get all nodes from all sources
+    /// - `{{ALL-TAG:source1}}` - Get all nodes from specified source
+    /// - `{{ALL-TAG:source1,source2}}` - Get all nodes from multiple sources
+    /// - `{{INCLUDE-TAG:tag1,tag2}}` - Include nodes matching tags
+    /// - `{{INCLUDE-TAG:source@tag1,tag2}}` - Include nodes matching tags from source
+    /// - `{{EXCLUDE-TAG:tag1,tag2}}` - Exclude nodes matching tags
+    /// - `{{ALL-TAG;EXCLUDE-TAG:CN}}` - Combined rules separated by semicolon
+    pub fn parse(rule: &str) -> Result<InterpolationRule> {
+        let rule: &str = rule.trim();
+
+        // Extract rule content (remove double braces)
+        if !rule.starts_with("{{") || !rule.ends_with("}}") {
+            return Err(ConvertError::ConfigValidationError(format!(
+                "Interpolation rule must be wrapped with {{}}: {}",
+                rule
+            )));
+        }
+
+        let rule_expr: &str = &rule[2..rule.len() - 2];
+
+        if rule_expr.trim().is_empty() {
+            return Err(ConvertError::ConfigValidationError(
+                "Empty interpolation rule".to_string(),
+            ));
+        }
+
+        Self::parse_combined_rule(rule_expr)
+    }
+
+    /// Parse combined rule (multiple sub-rules separated by semicolon)
+    fn parse_combined_rule(rule_expr: &str) -> Result<InterpolationRule> {
+        let rule_exprs = Self::split_rule_expr(rule_expr);
+
+        if rule_exprs.is_empty() {
+            return Err(ConvertError::ConfigValidationError(
+                "Empty combined rule".to_string(),
+            ));
+        }
+
+        // If only one rule, return it directly (not wrapped in CombinedRule)
+        if rule_exprs.len() == 1 {
+            return Self::parse_single_rule(rule_exprs[0]);
+        }
+
+        // Multiple rules - parse each and combine
+        let mut all_tag = None;
+        let mut include_tag = None;
+        let mut exclude_tag = None;
+
+        for rule_expr in rule_exprs {
+            if rule_expr.is_empty() {
+                continue;
+            }
+
+            let parsed = Self::parse_single_rule(rule_expr)?;
+
+            match &parsed {
+                InterpolationRule::AllTagFromSources(_) => {
+                    all_tag = Some(Box::new(parsed));
+                }
+                InterpolationRule::IncludeTagFromSources(_) => {
+                    include_tag = Some(Box::new(parsed));
+                }
+                InterpolationRule::ExcludeTagFromSources(_) => {
+                    exclude_tag = Some(Box::new(parsed));
+                }
+                InterpolationRule::CombinedRule { .. } => {
+                    // Nested combined rules are not allowed
+                    return Err(ConvertError::ConfigValidationError(
+                        "Nested combined rules are not supported".to_string(),
+                    ));
+                }
+            }
+        }
+
+        Ok(InterpolationRule::CombinedRule {
+            all_tag,
+            include_tag,
+            exclude_tag,
+        })
+    }
+
+    /// Split rule expression by semicolons
+    fn split_rule_expr(rule_expr: &str) -> Vec<&str> {
+        let rule_expr = rule_expr.trim();
+        if rule_expr.is_empty() {
+            return Vec::new();
+        }
+
+        rule_expr
+            .split(';')
+            .map(|s| s.trim())
+            .filter(|s| !s.is_empty())
+            .collect()
+    }
+
+    /// Parse a single rule (without semicolons)
+    fn parse_single_rule(rule: &str) -> Result<InterpolationRule> {
+        let rule = rule.trim();
+
+        // Split by colon to get rule type and parameters
+        let colon_pos = rule.find(':');
+
+        let (rule_type, params) = if let Some(pos) = colon_pos {
+            (&rule[..pos], Some(&rule[pos + 1..]))
+        } else {
+            (rule, None)
+        };
+
+        let rule_type = rule_type.trim().to_uppercase();
+
+        match rule_type.as_str() {
+            "ALL-TAG" => Self::parse_all_tag_rule(params),
+            "INCLUDE-TAG" => Self::parse_include_tag_rule(params),
+            "EXCLUDE-TAG" => Self::parse_exclude_tag_rule(params),
+            _ => Err(ConvertError::ConfigValidationError(format!(
+                "Unknown interpolation rule type: {}",
+                rule_type
+            ))),
+        }
+    }
+
+    /// Parse ALL-TAG rule
+    /// Formats:
+    /// - `ALL-TAG` - All nodes from all sources
+    /// - `ALL-TAG:source1` - All nodes from source1
+    /// - `ALL-TAG:source1,source2` - All nodes from source1 and source2
+    fn parse_all_tag_rule(params: Option<&str>) -> Result<InterpolationRule> {
+        let sources = match params {
+            None | Some("") => {
+                // No parameters - get all nodes from all sources
+                vec![(None, None)]
+            }
+            Some(params) => {
+                // Parse source list
+                params
+                    .split(',')
+                    .map(|s| s.trim())
+                    .filter(|s| !s.is_empty())
+                    .map(|source| {
+                        if source.contains('@') {
+                            // Format: source@tag (for filtering within source)
+                            let parts: Vec<&str> = source.splitn(2, '@').collect();
+                            (
+                                Some(parts[0].trim().to_string()),
+                                Some(parts[1].trim().to_string()),
+                            )
+                        } else {
+                            // Just source name
+                            (Some(source.to_string()), None)
+                        }
+                    })
+                    .collect()
+            }
+        };
+
+        Ok(InterpolationRule::AllTagFromSources(sources))
+    }
+
+    /// Parse INCLUDE-TAG rule
+    /// Formats:
+    /// - `INCLUDE-TAG:tag1,tag2` - Include nodes with tag1 or tag2 from all sources
+    /// - `INCLUDE-TAG:source@tag1,tag2` - Include nodes with tags from specific source
+    fn parse_include_tag_rule(params: Option<&str>) -> Result<InterpolationRule> {
+        let params = params.ok_or_else(|| {
+            ConvertError::ConfigValidationError(
+                "INCLUDE-TAG requires at least one tag parameter".to_string(),
+            )
+        })?;
+
+        if params.trim().is_empty() {
+            return Err(ConvertError::ConfigValidationError(
+                "INCLUDE-TAG requires at least one tag parameter".to_string(),
+            ));
+        }
+
+        let tag_pairs = Self::parse_source_tag_pairs(params);
+
+        if tag_pairs.is_empty() {
+            return Err(ConvertError::ConfigValidationError(
+                "INCLUDE-TAG requires at least one tag parameter".to_string(),
+            ));
+        }
+
+        Ok(InterpolationRule::IncludeTagFromSources(tag_pairs))
+    }
+
+    /// Parse EXCLUDE-TAG rule
+    /// Formats:
+    /// - `EXCLUDE-TAG:tag1,tag2` - Exclude nodes with tag1 or tag2
+    /// - `EXCLUDE-TAG:source@tag1,tag2` - Exclude nodes with tags from specific source
+    fn parse_exclude_tag_rule(params: Option<&str>) -> Result<InterpolationRule> {
+        let params = params.ok_or_else(|| {
+            ConvertError::ConfigValidationError(
+                "EXCLUDE-TAG requires at least one tag parameter".to_string(),
+            )
+        })?;
+
+        if params.trim().is_empty() {
+            return Err(ConvertError::ConfigValidationError(
+                "EXCLUDE-TAG requires at least one tag parameter".to_string(),
+            ));
+        }
+
+        let tag_pairs = Self::parse_source_tag_pairs(params);
+
+        if tag_pairs.is_empty() {
+            return Err(ConvertError::ConfigValidationError(
+                "EXCLUDE-TAG requires at least one tag parameter".to_string(),
+            ));
+        }
+
+        Ok(InterpolationRule::ExcludeTagFromSources(tag_pairs))
+    }
+
+    /// Parse source@tag pairs from comma-separated string
+    /// Supports formats:
+    /// - `tag1,tag2` - Tags from all sources (no source specified)
+    /// - `source@tag` - Tag from specific source
+    /// - `source1@tag1,tag2,source2@tag3` - Mixed format (tag2 from all sources)
+    ///
+    /// Note: Tags without @ are always matched from ALL sources, no inheritance.
+    fn parse_source_tag_pairs(params: &str) -> Vec<(Option<String>, String)> {
+        let mut result = Vec::new();
+
+        for item in params
+            .split(',')
+            .map(|s| s.trim())
+            .filter(|s| !s.is_empty())
+        {
+            if item.contains('@') {
+                // Format: source@tag - from specific source
+                let parts: Vec<&str> = item.splitn(2, '@').collect();
+                let source = parts[0].trim();
+                let tag = parts[1].trim();
+
+                if !tag.is_empty() {
+                    let source_opt = if source.is_empty() {
+                        None
+                    } else {
+                        Some(source.to_string())
+                    };
+                    result.push((source_opt, tag.to_string()));
+                }
+            } else {
+                // No @ - match from all sources (no inheritance)
+                result.push((None, item.to_string()));
+            }
+        }
+
+        result
+    }
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    #[test]
+    fn test_all_tag_basic() {
+        // Test {{ALL-TAG}} - no parameters
+        let result = InterpolationParser::parse("{{ALL-TAG}}").unwrap();
+        match result {
+            InterpolationRule::AllTagFromSources(sources) => {
+                assert_eq!(sources.len(), 1);
+                assert_eq!(sources[0], (None, None));
+            }
+            _ => panic!("Expected AllTagFromSources, got {:?}", result),
+        }
+    }
+
+    #[test]
+    fn test_all_tag_single_source() {
+        // Test {{ALL-TAG:clash1}}
+        let result = InterpolationParser::parse("{{ALL-TAG:clash1}}").unwrap();
+        match result {
+            InterpolationRule::AllTagFromSources(sources) => {
+                assert_eq!(sources.len(), 1);
+                assert_eq!(sources[0], (Some("clash1".to_string()), None));
+            }
+            _ => panic!("Expected AllTagFromSources"),
+        }
+    }
+
+    #[test]
+    fn test_all_tag_multiple_sources() {
+        // Test {{ALL-TAG:clash1,singbox1}}
+        let result = InterpolationParser::parse("{{ALL-TAG:clash1,singbox1}}").unwrap();
+        match result {
+            InterpolationRule::AllTagFromSources(sources) => {
+                assert_eq!(sources.len(), 2);
+                assert_eq!(sources[0], (Some("clash1".to_string()), None));
+                assert_eq!(sources[1], (Some("singbox1".to_string()), None));
+            }
+            _ => panic!("Expected AllTagFromSources"),
+        }
+    }
+
+    #[test]
+    fn test_include_tag_basic() {
+        // Test {{INCLUDE-TAG:US,JP}}
+        let result = InterpolationParser::parse("{{INCLUDE-TAG:US,JP}}").unwrap();
+        match result {
+            InterpolationRule::IncludeTagFromSources(pairs) => {
+                assert_eq!(pairs.len(), 2);
+                assert_eq!(pairs[0], (None, "US".to_string()));
+                assert_eq!(pairs[1], (None, "JP".to_string()));
+            }
+            _ => panic!("Expected IncludeTagFromSources"),
+        }
+    }
+
+    #[test]
+    fn test_include_tag_with_source() {
+        // Test {{INCLUDE-TAG:clash1@US,JP}}
+        // clash1@US -> from clash1
+        // JP -> from all sources (no inheritance)
+        let result = InterpolationParser::parse("{{INCLUDE-TAG:clash1@US,JP}}").unwrap();
+        match result {
+            InterpolationRule::IncludeTagFromSources(pairs) => {
+                assert_eq!(pairs.len(), 2);
+                assert_eq!(pairs[0], (Some("clash1".to_string()), "US".to_string()));
+                assert_eq!(pairs[1], (None, "JP".to_string())); // JP from all sources
+            }
+            _ => panic!("Expected IncludeTagFromSources"),
+        }
+    }
+
+    #[test]
+    fn test_include_tag_multiple_sources() {
+        // Test {{INCLUDE-TAG:clash1@US,singbox1@JP,singbox1@SG}}
+        // Each tag must explicitly specify its source
+        let result =
+            InterpolationParser::parse("{{INCLUDE-TAG:clash1@US,singbox1@JP,singbox1@SG}}")
+                .unwrap();
+        match result {
+            InterpolationRule::IncludeTagFromSources(pairs) => {
+                assert_eq!(pairs.len(), 3);
+                assert_eq!(pairs[0], (Some("clash1".to_string()), "US".to_string()));
+                assert_eq!(pairs[1], (Some("singbox1".to_string()), "JP".to_string()));
+                assert_eq!(pairs[2], (Some("singbox1".to_string()), "SG".to_string()));
+            }
+            _ => panic!("Expected IncludeTagFromSources"),
+        }
+    }
+
+    #[test]
+    fn test_exclude_tag_basic() {
+        // Test {{EXCLUDE-TAG:CN,AD}}
+        let result = InterpolationParser::parse("{{EXCLUDE-TAG:CN,AD}}").unwrap();
+        match result {
+            InterpolationRule::ExcludeTagFromSources(pairs) => {
+                assert_eq!(pairs.len(), 2);
+                assert_eq!(pairs[0], (None, "CN".to_string()));
+                assert_eq!(pairs[1], (None, "AD".to_string()));
+            }
+            _ => panic!("Expected ExcludeTagFromSources"),
+        }
+    }
+
+    #[test]
+    fn test_exclude_tag_with_source() {
+        // Test {{EXCLUDE-TAG:clash1@CN,AD}}
+        // clash1@CN -> from clash1
+        // AD -> from all sources (no inheritance)
+        let result = InterpolationParser::parse("{{EXCLUDE-TAG:clash1@CN,AD}}").unwrap();
+        match result {
+            InterpolationRule::ExcludeTagFromSources(pairs) => {
+                assert_eq!(pairs.len(), 2);
+                assert_eq!(pairs[0], (Some("clash1".to_string()), "CN".to_string()));
+                assert_eq!(pairs[1], (None, "AD".to_string())); // AD from all sources
+            }
+            _ => panic!("Expected ExcludeTagFromSources"),
+        }
+    }
+
+    #[test]
+    fn test_combined_rule() {
+        // Test {{ALL-TAG;EXCLUDE-TAG:CN}}
+        let result = InterpolationParser::parse("{{ALL-TAG;EXCLUDE-TAG:CN}}").unwrap();
+        match result {
+            InterpolationRule::CombinedRule {
+                all_tag,
+                include_tag,
+                exclude_tag,
+            } => {
+                assert!(all_tag.is_some());
+                assert!(include_tag.is_none());
+                assert!(exclude_tag.is_some());
+            }
+            _ => panic!("Expected CombinedRule"),
+        }
+    }
+
+    #[test]
+    fn test_combined_rule_complex() {
+        // Test {{INCLUDE-TAG:US,JP;EXCLUDE-TAG:CN,AD}}
+        let result = InterpolationParser::parse("{{INCLUDE-TAG:US,JP;EXCLUDE-TAG:CN,AD}}").unwrap();
+        match result {
+            InterpolationRule::CombinedRule {
+                all_tag,
+                include_tag,
+                exclude_tag,
+            } => {
+                assert!(all_tag.is_none());
+                assert!(include_tag.is_some());
+                assert!(exclude_tag.is_some());
+            }
+            _ => panic!("Expected CombinedRule"),
+        }
+    }
+
+    #[test]
+    fn test_error_empty_rule() {
+        // Test {{}}
+        let result = InterpolationParser::parse("{{}}");
+        assert!(result.is_err());
+    }
+
+    #[test]
+    fn test_error_invalid_format() {
+        // Test without braces
+        let result = InterpolationParser::parse("ALL-TAG");
+        assert!(result.is_err());
+    }
+
+    #[test]
+    fn test_error_unknown_rule() {
+        // Test unknown rule type
+        let result = InterpolationParser::parse("{{UNKNOWN-RULE:test}}");
+        assert!(result.is_err());
+    }
+
+    #[test]
+    fn test_error_include_tag_no_params() {
+        // Test INCLUDE-TAG without parameters
+        let result = InterpolationParser::parse("{{INCLUDE-TAG:}}");
+        assert!(result.is_err());
+    }
+
+    #[test]
+    fn test_case_insensitive() {
+        // Test case insensitivity
+        let result1 = InterpolationParser::parse("{{all-tag}}").unwrap();
+        let result2 = InterpolationParser::parse("{{ALL-TAG}}").unwrap();
+        let result3 = InterpolationParser::parse("{{All-Tag}}").unwrap();
+
+        assert!(matches!(result1, InterpolationRule::AllTagFromSources(_)));
+        assert!(matches!(result2, InterpolationRule::AllTagFromSources(_)));
+        assert!(matches!(result3, InterpolationRule::AllTagFromSources(_)));
+    }
+
+    #[test]
+    fn test_whitespace_handling() {
+        // Test whitespace handling
+        let result = InterpolationParser::parse("{{  ALL-TAG : clash1 , singbox1  }}").unwrap();
+        match result {
+            InterpolationRule::AllTagFromSources(sources) => {
+                assert_eq!(sources.len(), 2);
+            }
+            _ => panic!("Expected AllTagFromSources"),
+        }
+    }
+
+    #[test]
+    fn test_trailing_semicolon() {
+        // Test trailing semicolon (should be ignored)
+        let result = InterpolationParser::parse("{{ALL-TAG;}}").unwrap();
+        assert!(matches!(result, InterpolationRule::AllTagFromSources(_)));
+    }
+}
diff --git a/src/utils/template/mod.rs b/src/utils/template/mod.rs
new file mode 100644
index 0000000..b4c7d78
--- /dev/null
+++ b/src/utils/template/mod.rs
@@ -0,0 +1,2 @@
+pub mod interpolation_parser;
+pub mod template_engine;
diff --git a/src/utils/template/template_engine.rs b/src/utils/template/template_engine.rs
new file mode 100644
index 0000000..036c466
--- /dev/null
+++ b/src/utils/template/template_engine.rs
@@ -0,0 +1,336 @@
+//! Template processing utility module
+//!
+//! This module is responsible for:
+//! 1. Parsing templates and identifying protocol types
+//! 2. Finding interpolation rules in templates
+//! 3. Executing rules using protocol-specific processors
+//! 4. Outputting the final result
+
+use super::interpolation_parser::InterpolationParser;
+use crate::protocols::{ProtocolProcessor, ProtocolRegistry, ProxyServer};
+use crate::core::error::{ConvertError, Result};
+use crate::utils::source::parser::Source;
+use indexmap::IndexMap;
+
+/// Template engine
+pub struct TemplateEngine {
+    /// Sources stored in insertion order using IndexMap
+    sources: IndexMap<String, Source>,
+}
+
+impl TemplateEngine {
+    /// Create new template engine
+    pub fn new() -> Self {
+        Self {
+            sources: IndexMap::new(),
+        }
+    }
+
+    /// Add source with complete source information
+    pub fn add_source(&mut self, source: Source) {
+        self.sources.insert(
+            source.meta.name.as_deref().unwrap_or("default").to_string(),
+            source,
+        );
+    }
+
+    /// Process template interpolation using the given registry for format detection and processor lookup.
+    pub fn process_template(&self, template: &str, registry: &ProtocolRegistry) -> Result<String> {
+        // Step 1: Identify protocol type from template (use registry's format detection)
+        let protocol_type = Self::identify_protocol(template, registry)?;
+
+        // Step 2: Get processor from registry
+        let processor = registry
+            .get_processor(&protocol_type)
+            .ok_or_else(|| {
+                ConvertError::ConfigValidationError(format!(
+                    "Unsupported protocol type: {}",
+                    protocol_type
+                ))
+            })?;
+
+        // Step 3: Parse template as JSON or YAML
+        let mut config: serde_json::Value = serde_json::from_str(template)
+            .or_else(|_| {
+                serde_yaml::from_str::<serde_json::Value>(template)
+                    .map_err(|e| ConvertError::ConfigValidationError(format!(
+                        "Failed to parse template as JSON or YAML: {}",
+                        e
+                    )))
+            })?;
+
+        // Step 4: Process interpolation rules in JSON structure
+        let mut all_nodes = Vec::new();
+        self.process_json_value(&mut config, processor, &mut all_nodes)?;
+
+        // Step 5: Process default field using protocol-specific processor
+        let unique_nodes = self.deduplicate_nodes(&all_nodes);
+        let mut result = serde_json::to_string_pretty(&config).map_err(|e| {
+            ConvertError::ConfigValidationError(format!("Failed to serialize config: {}", e))
+        })?;
+        result = processor.set_default_values(&result, &unique_nodes)?;
+
+        // Step 6: Append all nodes using protocol-specific processor
+        if !unique_nodes.is_empty() {
+            result = processor.append_nodes(&result, &unique_nodes)?;
+        }
+
+        Ok(result)
+    }
+
+    /// Recursively process JSON value and expand interpolation rules
+    fn process_json_value(
+        &self,
+        value: &mut serde_json::Value,
+        processor: &dyn ProtocolProcessor,
+        all_nodes: &mut Vec<ProxyServer>,
+    ) -> Result<()> {
+        match value {
+            serde_json::Value::Array(arr) => {
+                // Process array: expand interpolation rules in place
+                let mut new_arr: Vec<serde_json::Value> = Vec::new();
+
+                for item in arr.iter() {
+                    if let serde_json::Value::String(s) = item {
+                        if s.starts_with("{{") && s.ends_with("}}") {
+                            // This is an interpolation rule - expand it
+                            if let Ok(rule) = InterpolationParser::parse(s) {
+                                if let Ok(nodes) =
+                                    processor.get_nodes_for_rule(&rule, &self.sources)
+                                {
+                                    // Add nodes to all_nodes for later appending
+                                    all_nodes.extend(nodes.clone());
+                                    // Expand node names into the array
+                                    for node in &nodes {
+                                        new_arr.push(serde_json::Value::String(node.name.clone()));
+                                    }
+                                    continue;
+                                }
+                            }
+                        }
+                    }
+                    // Not an interpolation rule or failed to parse - keep as is
+                    let mut item_clone = item.clone();
+                    self.process_json_value(&mut item_clone, processor, all_nodes)?;
+                    new_arr.push(item_clone);
+                }
+
+                // Deduplicate: track all seen names, preserve first occurrence
+                let mut seen_names: std::collections::HashSet<String> =
+                    std::collections::HashSet::new();
+                let mut final_arr = Vec::new();
+
+                for value in new_arr {
+                    if let serde_json::Value::String(name) = &value {
+                        // For string values, deduplicate by name
+                        if seen_names.insert(name.clone()) {
+                            final_arr.push(value);
+                        }
+                        // If already seen, skip
+                    } else {
+                        // Non-string values (objects, etc.) are always kept
+                        final_arr.push(value);
+                    }
+                }
+
+                *arr = final_arr;
+            }
+            serde_json::Value::Object(obj) => {
+                // Process object: recurse into values, with special handling for "default" field
+                for (key, v) in obj.iter_mut() {
+                    if key == "default" {
+                        // Special handling for "default" field
+                        if let serde_json::Value::String(s) = v {
+                            if s.starts_with("{{") && s.ends_with("}}") {
+                                // Check if it's {{ALL-TAG}} - warn about it
+                                let is_all_tag = s.contains("ALL-TAG")
+                                    && !s.contains("INCLUDE-TAG")
+                                    && !s.contains("EXCLUDE-TAG");
+
+                                if is_all_tag {
+                                    tracing::warn!(
+                                        "Using {{{{ALL-TAG}}}} in 'default' field is not recommended. \
+                                        Consider using a specific filter like {{{{INCLUDE-TAG:...}}}} or {{{{EXCLUDE-TAG:...}}}}. \
+                                        Will use the first matched node."
+                                    );
+                                }
+
+                                // Process the interpolation and use first node
+                                if let Ok(rule) = InterpolationParser::parse(s) {
+                                    if let Ok(nodes) =
+                                        processor.get_nodes_for_rule(&rule, &self.sources)
+                                    {
+                                        all_nodes.extend(nodes.clone());
+                                        if !nodes.is_empty() {
+                                            *s = nodes[0].name.clone();
+                                        }
+                                    }
+                                }
+                            }
+                        }
+                    } else {
+                        self.process_json_value(v, processor, all_nodes)?;
+                    }
+                }
+            }
+            serde_json::Value::String(s) => {
+                // Process string: check if it's an interpolation rule (for non-array contexts)
+                if s.starts_with("{{") && s.ends_with("}}") {
+                    if let Ok(rule) = InterpolationParser::parse(s) {
+                        if let Ok(nodes) = processor.get_nodes_for_rule(&rule, &self.sources) {
+                            all_nodes.extend(nodes.clone());
+                            // In non-array context, replace with first node name or empty
+                            if !nodes.is_empty() {
+                                *s = nodes[0].name.clone();
+                            }
+                        }
+                    }
+                }
+            }
+            _ => {}
+        }
+        Ok(())
+    }
+
+    /// Identify protocol type from template content using registry's format detection.
+    fn identify_protocol(template: &str, registry: &ProtocolRegistry) -> Result<String> {
+        if let Ok(Some((format, _))) = registry.auto_detect_format(template) {
+            return Ok(format);
+        }
+        // Default to singbox if cannot detect
+        Ok("singbox".to_string())
+    }
+
+    /// Get all servers from all sources
+    pub fn get_all_servers(&self) -> Vec<ProxyServer> {
+        let mut all_servers = Vec::new();
+
+        for source in self.sources.values() {
+            let servers = source.extract_servers().unwrap_or_default();
+
+            // if only one source, no need to add prefix
+            if self.sources.len() == 1 {
+                all_servers.extend(servers);
+            } else {
+                // if multiple sources, add prefix to distinguish them
+                for server in servers {
+                    all_servers.push(ProxyServer {
+                        name: format!(
+                            "{}@{}",
+                            source.meta.name.as_deref().unwrap_or("default"),
+                            server.name
+                        ),
+                        ..server
+                    });
+                }
+            }
+        }
+
+        all_servers
+    }
+
+    /// Deduplicate nodes
+    fn deduplicate_nodes(&self, nodes: &[ProxyServer]) -> Vec<ProxyServer> {
+        let mut unique_nodes = Vec::new();
+        let mut seen_names = std::collections::HashSet::new();
+
+        for node in nodes {
+            if !seen_names.contains(&node.name) {
+                seen_names.insert(node.name.clone());
+                unique_nodes.push(node.clone());
+            }
+        }
+
+        unique_nodes
+    }
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+    use crate::utils::template::interpolation_parser::InterpolationRule;
+
+    #[test]
+    fn test_interpolation_parser_all_tag() {
+        // Test basic interpolation rule parsing
+        assert!(matches!(
+            InterpolationParser::parse("{{ALL-TAG}}").unwrap(),
+            InterpolationRule::AllTagFromSources(_)
+        ));
+
+        assert!(matches!(
+            InterpolationParser::parse("{{ALL-TAG:clash1}}").unwrap(),
+            InterpolationRule::AllTagFromSources(_)
+        ));
+
+        assert!(matches!(
+            InterpolationParser::parse("{{ALL-TAG:clash1,singbox1}}").unwrap(),
+            InterpolationRule::AllTagFromSources(_)
+        ));
+    }
+
+    #[test]
+    fn test_interpolation_parser_include_tag() {
+        // Test tag filtering rules
+        assert!(matches!(
+            InterpolationParser::parse("{{INCLUDE-TAG:US,JP}}").unwrap(),
+            InterpolationRule::IncludeTagFromSources(_)
+        ));
+
+        assert!(matches!(
+            InterpolationParser::parse("{{INCLUDE-TAG:clash1@US,JP}}").unwrap(),
+            InterpolationRule::IncludeTagFromSources(_)
+        ));
+    }
+
+    #[test]
+    fn test_interpolation_parser_exclude_tag() {
+        assert!(matches!(
+            InterpolationParser::parse("{{EXCLUDE-TAG:CN,AD}}").unwrap(),
+            InterpolationRule::ExcludeTagFromSources(_)
+        ));
+
+        assert!(matches!(
+            InterpolationParser::parse("{{EXCLUDE-TAG:clash1@CN,AD}}").unwrap(),
+            InterpolationRule::ExcludeTagFromSources(_)
+        ));
+    }
+
+    #[test]
+    fn test_interpolation_parser_combined_rules() {
+        // Test combined rules
+        assert!(matches!(
+            InterpolationParser::parse("{{ALL-TAG;INCLUDE-TAG:US,JP}}").unwrap(),
+            InterpolationRule::CombinedRule { .. }
+        ));
+
+        assert!(matches!(
+            InterpolationParser::parse("{{INCLUDE-TAG:US,JP;EXCLUDE-TAG:CN,AD}}").unwrap(),
+            InterpolationRule::CombinedRule { .. }
+        ));
+    }
+
+    #[test]
+    fn test_interpolation_parser_multi_source() {
+        // Test complex multi-source rules
+        let rule = "{{INCLUDE-TAG:clash1@US,JP,clash2@HK,clash3@SG}}";
+        let parsed = InterpolationParser::parse(rule).unwrap();
+        match parsed {
+            InterpolationRule::IncludeTagFromSources(source_tag_pairs) => {
+                // Verify includes all expected tags
+                let tags: Vec<String> = source_tag_pairs
+                    .iter()
+                    .map(|(_, tag)| tag.clone())
+                    .collect();
+                assert!(tags.contains(&"US".to_string()));
+                assert!(tags.contains(&"JP".to_string()));
+                assert!(tags.contains(&"HK".to_string()));
+                assert!(tags.contains(&"SG".to_string()));
+            }
+            _ => panic!("Expected IncludeTagFromSources"),
+        }
+    }
+
+    #[test]
+    fn test_generate_templates() {}
+}
diff --git a/tests/convert_integration.rs b/tests/convert_integration.rs
new file mode 100644
index 0000000..41fab7d
--- /dev/null
+++ b/tests/convert_integration.rs
@@ -0,0 +1,117 @@
+//! Integration tests: full convert/validate flow with file-based sources.
+
+use proxy_convert::commands::convert::{ConvertCommand, OutputProtocol};
+use proxy_convert::core::config::AppConfig;
+use proxy_convert::core::source::SourceProtocol;
+use proxy_convert::protocols::ProtocolRegistry;
+use tempfile::NamedTempFile;
+
+fn minimal_singbox_content() -> &'static str {
+    r#"{
+        "inbounds": [],
+        "outbounds": [
+            {"type": "direct", "tag": "direct"},
+            {"type": "shadowsocks", "tag": "ss1", "server": "1.1.1.1", "server_port": 443, "method": "aes-256-gcm", "password": "secret"}
+        ]
+    }"#
+}
+
+fn minimal_clash_content() -> &'static str {
+    r#"port: 7890
+proxies:
+  - name: node1
+    type: ss
+    server: 2.2.2.2
+    port: 443
+    cipher: aes-256-gcm
+    password: pwd
+"#
+}
+
+#[tokio::test]
+async fn integration_convert_file_source_singbox_to_json() {
+    let registry = ProtocolRegistry::init();
+    let config = AppConfig::default();
+
+    let file = NamedTempFile::new().unwrap();
+    let path = file.path().to_string_lossy();
+    std::fs::write(file.path(), minimal_singbox_content()).unwrap();
+
+    let source_str = format!("{}?type=singbox", path);
+    let source_meta = ConvertCommand::parse_source_string(&source_str).unwrap();
+    assert!(matches!(source_meta.source_type, SourceProtocol::SingBox));
+
+    let source = proxy_convert::utils::source::SourceLoader::load_source(
+        &source_meta,
+        &registry,
+        &config,
+    )
+    .await
+    .unwrap();
+
+    let servers = source.extract_servers().unwrap();
+    assert!(!servers.is_empty());
+    assert!(servers.iter().any(|s| s.protocol == "shadowsocks"));
+
+    let out_dir = tempfile::tempdir().unwrap();
+    let output_path = out_dir.path().join("config.json");
+    let result = ConvertCommand::start_convert(
+        &[source_meta],
+        None,
+        &OutputProtocol::SingBox,
+        Some(output_path.to_str().unwrap()),
+        None,
+        &registry,
+        &config,
+    )
+    .await;
+
+    assert!(result.is_ok(), "convert failed: {:?}", result.err());
+    assert!(output_path.exists());
+    let content = std::fs::read_to_string(&output_path).unwrap();
+    assert!(content.contains("outbounds"));
+    assert!(content.contains("shadowsocks") || content.contains("ss1"));
+}
+
+#[tokio::test]
+async fn integration_convert_file_source_clash_to_singbox() {
+    let registry = ProtocolRegistry::init();
+    let config = AppConfig::default();
+
+    let file = NamedTempFile::new().unwrap();
+    let path = file.path().to_string_lossy();
+    std::fs::write(file.path(), minimal_clash_content()).unwrap();
+
+    let source_str = format!("{}?type=clash", path);
+    let source_meta = ConvertCommand::parse_source_string(&source_str).unwrap();
+
+    let out_dir = tempfile::tempdir().unwrap();
+    let output_path = out_dir.path().join("out.json");
+    let result = ConvertCommand::start_convert(
+        &[source_meta],
+        None,
+        &OutputProtocol::SingBox,
+        Some(output_path.to_str().unwrap()),
+        None,
+        &registry,
+        &config,
+    )
+    .await;
+
+    assert!(result.is_ok(), "convert failed: {:?}", result.err());
+    assert!(output_path.exists());
+    let content = std::fs::read_to_string(&output_path).unwrap();
+    let parsed: serde_json::Value = serde_json::from_str(&content).unwrap();
+    assert!(parsed.get("outbounds").is_some());
+}
+
+#[test]
+fn integration_subscription_parse_plain_text() {
+    let content = "vmess://uuid@host:443#name1\ntrojan://pwd@h2:8443#name2\n";
+    let servers = proxy_convert::protocols::subscription::parse_plain_text(content).unwrap();
+    assert_eq!(servers.len(), 2);
+    assert_eq!(servers[0].protocol, "vmess");
+    assert_eq!(servers[0].name, "name1");
+    assert_eq!(servers[1].protocol, "trojan");
+    assert_eq!(servers[1].name, "name2");
+}