Add tray controls and clean up child processes

Bundle TAP-Windows installer and persist startup config
Auto-select TAP adapters and persist edge settings
2026-09-02 02:25:18 +08:00 · 2026-09-01 22:16:19 +08:00 · 2026-09-01 21:39:58 +08:00 · 2026-09-01 21:26:50 +08:00
16 changed files with 1148 additions and 48 deletions
@@ -1,7 +1,8 @@
 name: Build Windows Portable Package

 on:
-  push:
+  release:
+    types: [published]
  workflow_dispatch:

 jobs:
@@ -46,14 +46,26 @@ Install dependencies, then start the Tauri development window:
    npm run tauri dev

 The portable build creates `release/super-n2n-portable.zip`. It contains
-`n2n/edge.exe` and `n2n/supernode.exe`; on Windows Super N2N starts them with
-the relative paths `./n2n/edge.exe` and `./n2n/supernode.exe`.
+`n2n/edge.exe`, `n2n/supernode.exe`, and the official TAP-Windows installer in
+`drivers/tap-windows-9.24.7-I601-Win10.exe`; on Windows Super N2N starts the n2n
+programs with the relative paths `./n2n/edge.exe` and `./n2n/supernode.exe`.
+
+### Windows TAP requirement
+
+N2N uses an installed TAP-Windows virtual adapter; it does not create a new
+adapter itself. Super N2N checks for an adapter on first launch, offers the
+bundled installer when one is missing, and automatically selects an available
+adapter before starting Edge. The optional TAP device field is only needed to
+select a specific existing adapter. Connection settings, including advanced
+settings, are stored beside `super-n2n.exe` in `super-n2n.config.json` and are
+restored on the next application launch.

 ## Gitea Actions

-`.gitea/workflows/build-windows.yml` runs on every push and uploads the portable
-zip plus its checksum as workflow artifacts. Configure a dedicated Gitea runner
-with the `windows-host` label and the Windows build prerequisites above.
+`.gitea/workflows/build-windows.yml` runs when a Release is published and uploads
+the portable zip plus its checksum as workflow artifacts. Configure a dedicated
+Gitea runner with the `windows-host` label and the Windows build prerequisites
+above. It can also be run manually from the Actions page.

 The native command layer can start and stop edge/supernode processes, query the n2n UDP management API, run ping and TCPing checks, and inspect the local firewall state. Browser preview does not fabricate native process, management, or network-check results.

@@ -8,4 +8,17 @@ them as .\n2n\edge.exe and .\n2n\supernode.exe, so no PATH configuration is requ
 Windows WebView2 is required. It is included by default on current Windows 10 and
 Windows 11 installations.

+N2N requires a TAP-Windows virtual network adapter installed on the computer.
+Super N2N automatically selects an available adapter when connecting. It does
+not create a TAP adapter itself. On the first launch it checks for a TAP-Windows
+adapter and shows an install prompt when one is missing. The official installer
+is included at drivers\tap-windows-9.24.7-I601-Win10.exe. Click the install
+button in the app (or run the installer as Administrator), complete the wizard,
+and restart Super N2N.
+
+The app stores connection settings beside super-n2n.exe as
+super-n2n.config.json. Its absence is used to identify the first launch. Do not
+add this file to a release archive if you want the first-launch check to run.
+
 The bundled n2n programs are distributed under n2n\LICENSE-n2n.txt.
+The bundled TAP-Windows installer and its license information are in drivers\.
@@ -46,6 +46,11 @@ try {
        'n2n\edge.exe' = Join-Path $n2nRoot 'edge.exe'
        'n2n\supernode.exe' = Join-Path $n2nRoot 'supernode.exe'
        'n2n\LICENSE-n2n.txt' = Join-Path $n2nRoot 'LICENSE'
+        'drivers\tap-windows-9.24.7-I601-Win10.exe' = Join-Path $projectRoot 'third_party\tap-windows\tap-windows-9.24.7-I601-Win10.exe'
+        'drivers\TAP-WINDOWS-README.txt' = Join-Path $projectRoot 'third_party\tap-windows\README.txt'
+        'drivers\TAP-WINDOWS-SHA256SUMS.txt' = Join-Path $projectRoot 'third_party\tap-windows\SHA256SUMS.txt'
+        'drivers\TAP-WINDOWS-LICENSE.txt' = Join-Path $projectRoot 'third_party\tap-windows\LICENSE.txt'
+        'drivers\TAP-WINDOWS-GPLv2.txt' = Join-Path $projectRoot 'third_party\tap-windows\COPYRIGHT.GPL.txt'
        'README.txt' = Join-Path $projectRoot 'scripts\PORTABLE-README.txt'
    }

@@ -9,11 +9,17 @@ edition = "2021"
 name = "super_n2n_lib"
 crate-type = ["staticlib", "cdylib", "rlib"]

+[[bin]]
+name = "super-n2n"
+path = "src/main.rs"
+test = false
+bench = false
+
 [build-dependencies]
 tauri-build = { version = "2", features = [] }

 [dependencies]
-tauri = { version = "2", features = [] }
+tauri = { version = "2", features = ["tray-icon"] }
 serde = { version = "1", features = ["derive"] }
 serde_json = "1"

@@ -1,3 +1,5 @@
 fn main() {
-    tauri_build::build()
+    let windows = tauri_build::WindowsAttributes::new().app_manifest(include_str!("manifest.xml"));
+    let attributes = tauri_build::Attributes::new().windows_attributes(windows);
+    tauri_build::try_build(attributes).expect("failed to run build script");
 }
@@ -0,0 +1,22 @@
+<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
+<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
+  <dependency>
+    <dependentAssembly>
+      <assemblyIdentity
+        type="win32"
+        name="Microsoft.Windows.Common-Controls"
+        version="6.0.0.0"
+        processorArchitecture="*"
+        publicKeyToken="6595b64144ccf1df"
+        language="*"
+      />
+    </dependentAssembly>
+  </dependency>
+  <trustInfo xmlns="urn:schemas-microsoft-com:asm.v3">
+    <security>
+      <requestedPrivileges>
+        <requestedExecutionLevel level="requireAdministrator" uiAccess="false" />
+      </requestedPrivileges>
+    </security>
+  </trustInfo>
+</assembly>
@@ -3,18 +3,55 @@ use serde_json::Value;
 use std::{
    collections::HashMap,
    fs,
-    net::{SocketAddr, TcpStream, UdpSocket},
+    net::{Ipv4Addr, SocketAddr, TcpStream, UdpSocket},
    path::PathBuf,
    process::{Child, Command, Stdio},
    sync::Mutex,
    time::{Duration, Instant, SystemTime, UNIX_EPOCH},
 };
-use tauri::State;
+use tauri::{
+    menu::{Menu, MenuItem},
+    tray::{MouseButton, MouseButtonState, TrayIconBuilder, TrayIconEvent},
+    Emitter, Manager, State,
+};

 struct AppState {
    processes: Mutex<HashMap<String, Child>>,
 }

+fn stop_all_processes(state: &AppState) {
+    let Ok(mut processes) = state.processes.lock() else {
+        return;
+    };
+    for (_, mut child) in processes.drain() {
+        let _ = child.kill();
+        let _ = child.wait();
+    }
+}
+
+fn tray_icon_image() -> tauri::image::Image<'static> {
+    let mut rgba = vec![0_u8; 16 * 16 * 4];
+    for y in 0..16 {
+        for x in 0..16 {
+            let inside = x > 1 && x < 14 && y > 1 && y < 14;
+            if !inside {
+                continue;
+            }
+            let index = (y * 16 + x) * 4;
+            rgba[index..index + 4].copy_from_slice(&[8, 137, 123, 255]);
+        }
+    }
+    for (x, y) in [(5, 8), (11, 5), (11, 11)] {
+        let index = (y * 16 + x) * 4;
+        rgba[index..index + 4].copy_from_slice(&[255, 255, 255, 255]);
+    }
+    for (x, y) in [(6, 8), (10, 6), (10, 10)] {
+        let index = (y * 16 + x) * 4;
+        rgba[index..index + 4].copy_from_slice(&[255, 255, 255, 255]);
+    }
+    tauri::image::Image::new_owned(rgba, 16, 16)
+}
+
 #[derive(Debug, Deserialize)]
 #[serde(rename_all = "camelCase")]
 struct StartRequest {
@@ -75,6 +112,45 @@ struct TapTraffic {
    sent_bytes: u64,
 }

+#[derive(Debug, Deserialize)]
+#[serde(rename_all = "camelCase")]
+struct TapAdapterRequest {
+    tap_device: String,
+}
+
+#[derive(Debug, Serialize)]
+#[serde(rename_all = "camelCase")]
+struct TapAdapter {
+    name: String,
+    description: String,
+    guid: String,
+    if_index: u32,
+}
+
+const CONFIG_FILE_NAME: &str = "super-n2n.config.json";
+const TAP_INSTALLER_FILE_NAME: &str = "tap-windows-9.24.7-I601-Win10.exe";
+
+#[derive(Debug, Serialize)]
+#[serde(rename_all = "camelCase")]
+struct StartupStatus {
+    config_exists: bool,
+    first_launch: bool,
+    config_path: String,
+    tap_driver_present: bool,
+    tap_installer_path: Option<String>,
+}
+
+fn is_tap_windows_description(description: &str) -> bool {
+    let normalized = description.trim().to_ascii_lowercase();
+    if normalized == "tap-windows adapter v9" {
+        return true;
+    }
+    let Some(suffix) = normalized.strip_prefix("tap-windows adapter v9 #") else {
+        return false;
+    };
+    !suffix.is_empty() && suffix.chars().all(|character| character.is_ascii_digit())
+}
+
 fn now_epoch() -> u64 {
    SystemTime::now()
        .duration_since(UNIX_EPOCH)
@@ -108,6 +184,30 @@ fn app_directory() -> Result<std::path::PathBuf, String> {
        .ok_or_else(|| "application executable has no parent directory".to_string())
 }

+fn config_file_path() -> Result<PathBuf, String> {
+    Ok(app_directory()?.join(CONFIG_FILE_NAME))
+}
+
+fn bundled_tap_installer_path() -> Result<PathBuf, String> {
+    Ok(app_directory()?
+        .join("drivers")
+        .join(TAP_INSTALLER_FILE_NAME))
+}
+
+fn tap_driver_present() -> bool {
+    #[cfg(target_os = "windows")]
+    {
+        return windows_tap_adapters()
+            .map(|adapters| !adapters.is_empty())
+            .unwrap_or(false);
+    }
+
+    #[cfg(not(target_os = "windows"))]
+    {
+        true
+    }
+}
+
 fn downloads_directory() -> PathBuf {
    #[cfg(target_os = "windows")]
    if let Some(profile) = std::env::var_os("USERPROFILE") {
@@ -172,7 +272,7 @@ fn windows_tap_traffic(tap_device: &str) -> Result<TapTraffic, String> {
                    || description.eq_ignore_ascii_case(tap_device)
                    || guid.eq_ignore_ascii_case(tap_device))
                .then_some(TapTraffic {
-                    interface_name: alias,
+                    interface_name: description,
                    received_bytes: row.InOctets,
                    sent_bytes: row.OutOctets,
                })
@@ -183,9 +283,72 @@ fn windows_tap_traffic(tap_device: &str) -> Result<TapTraffic, String> {
    traffic
 }

+#[cfg(target_os = "windows")]
+fn windows_tap_adapters() -> Result<Vec<TapAdapter>, String> {
+    use std::{ptr, slice};
+    use windows_sys::Win32::{
+        Foundation::NO_ERROR,
+        NetworkManagement::IpHelper::{FreeMibTable, GetIfTable2, MIB_IF_TABLE2},
+    };
+
+    fn wide_string(value: &[u16]) -> String {
+        let end = value
+            .iter()
+            .position(|unit| *unit == 0)
+            .unwrap_or(value.len());
+        String::from_utf16_lossy(&value[..end])
+    }
+
+    fn guid_string(guid: &windows_sys::core::GUID) -> String {
+        format!(
+            "{{{:08x}-{:04x}-{:04x}-{:02x}{:02x}-{:02x}{:02x}{:02x}{:02x}{:02x}{:02x}}}",
+            guid.data1,
+            guid.data2,
+            guid.data3,
+            guid.data4[0],
+            guid.data4[1],
+            guid.data4[2],
+            guid.data4[3],
+            guid.data4[4],
+            guid.data4[5],
+            guid.data4[6],
+            guid.data4[7]
+        )
+    }
+
+    let mut table: *mut MIB_IF_TABLE2 = ptr::null_mut();
+    let result = unsafe { GetIfTable2(&mut table) };
+    if result != NO_ERROR || table.is_null() {
+        return Err(format!("unable to read network adapter table: {result}"));
+    }
+
+    let adapters = unsafe {
+        let rows = slice::from_raw_parts((*table).Table.as_ptr(), (*table).NumEntries as usize);
+        rows.iter()
+            .filter_map(|row| {
+                let description = wide_string(&row.Description);
+                is_tap_windows_description(&description).then_some(TapAdapter {
+                    name: wide_string(&row.Alias),
+                    description,
+                    guid: guid_string(&row.InterfaceGuid),
+                    if_index: row.InterfaceIndex,
+                })
+            })
+            .collect()
+    };
+    unsafe { FreeMibTable(table.cast()) };
+    Ok(adapters)
+}
+
 #[tauri::command]
-fn start_service(request: StartRequest, state: State<'_, AppState>) -> Result<ServiceStatus, String> {
-    let mut processes = state.processes.lock().map_err(|_| "process state is unavailable".to_string())?;
+fn start_service(
+    request: StartRequest,
+    state: State<'_, AppState>,
+) -> Result<ServiceStatus, String> {
+    let mut processes = state
+        .processes
+        .lock()
+        .map_err(|_| "process state is unavailable".to_string())?;
    if let Some(existing) = processes.get_mut(&request.service) {
        if existing.try_wait().map_err(|e| e.to_string())?.is_none() {
            return Ok(ServiceStatus {
@@ -206,17 +369,35 @@ fn start_service(request: StartRequest, state: State<'_, AppState>) -> Result<Se
    let working_directory = app_directory()?;
    let binary = working_directory.join(relative_binary);
    if !binary.is_file() {
-        return Err(format!("required n2n binary is missing: {}", binary.display()));
+        return Err(format!(
+            "required n2n binary is missing: {}",
+            binary.display()
+        ));
    }

-    let child = Command::new(relative_binary)
+    let mut command = Command::new(relative_binary);
+    command
        .current_dir(&working_directory)
        .args(&request.args)
        .stdout(Stdio::null())
-        .stderr(Stdio::null())
+        .stderr(Stdio::null());
+    #[cfg(target_os = "windows")]
+    {
+        use std::os::windows::process::CommandExt;
+        // Keep the console-subsystem edge process out of the user's desktop.
+        command.creation_flags(0x08000000);
+    }
+    let mut child = command
        .spawn()
        .map_err(|e| format!("unable to start {}: {}", binary.display(), e))?;
    let pid = child.id();
+    std::thread::sleep(Duration::from_millis(250));
+    if let Some(status) = child.try_wait().map_err(|error| error.to_string())? {
+        return Err(format!(
+            "{} exited immediately after startup with status {}",
+            request.service, status
+        ));
+    }
    processes.insert(request.service.clone(), child);

    Ok(ServiceStatus {
@@ -228,11 +409,87 @@ fn start_service(request: StartRequest, state: State<'_, AppState>) -> Result<Se
    })
 }

+#[derive(Debug, Deserialize)]
+#[serde(rename_all = "camelCase")]
+struct TapAddressRequest {
+    tap_device: String,
+    dhcp: bool,
+    ip: String,
+}
+
+#[tauri::command]
+fn configure_tap_adapter(request: TapAddressRequest) -> Result<(), String> {
+    let requested = request.tap_device.trim();
+    if requested.is_empty()
+        || requested.contains(['/', '\\'])
+        || requested == "."
+        || requested == ".."
+    {
+        return Err("invalid TAP device name".to_string());
+    }
+
+    #[cfg(target_os = "windows")]
+    {
+        let adapter = windows_tap_adapters()?
+            .into_iter()
+            .find(|adapter| {
+                adapter.name.eq_ignore_ascii_case(requested)
+                    || adapter.description.eq_ignore_ascii_case(requested)
+                    || adapter.guid.eq_ignore_ascii_case(requested)
+            })
+            .ok_or_else(|| format!("找不到指定的 TAP 设备：{requested}"))?;
+        if adapter.if_index == 0 {
+            return Err("TAP 网卡没有有效的接口索引".to_string());
+        }
+
+        let interface = format!("name={}", adapter.if_index);
+        let mut command = Command::new("netsh");
+        command.args(["interface", "ipv4", "set", "address", &interface]);
+        if request.dhcp {
+            command.arg("source=dhcp");
+        } else {
+            let address = request
+                .ip
+                .trim()
+                .parse::<Ipv4Addr>()
+                .map_err(|_| format!("无效的本机 IP：{}", request.ip.trim()))?;
+            command.args([
+                "source=static",
+                &format!("address={address}"),
+                "mask=255.255.255.0",
+            ]);
+        }
+        let output = command
+            .output()
+            .map_err(|error| format!("无法配置 TAP 网卡：{error}"))?;
+        if !output.status.success() {
+            let detail = if output.stderr.is_empty() {
+                String::from_utf8_lossy(&output.stdout)
+            } else {
+                String::from_utf8_lossy(&output.stderr)
+            };
+            return Err(format!("TAP 网卡地址配置失败：{}", detail.trim()));
+        }
+        return Ok(());
+    }
+
+    #[cfg(not(target_os = "windows"))]
+    {
+        let _ = request;
+        Err("TAP 网卡地址配置仅支持 Windows".to_string())
+    }
+}
+
 #[tauri::command]
 fn stop_service(service: String, state: State<'_, AppState>) -> Result<ServiceStatus, String> {
-    let mut processes = state.processes.lock().map_err(|_| "process state is unavailable".to_string())?;
+    let mut processes = state
+        .processes
+        .lock()
+        .map_err(|_| "process state is unavailable".to_string())?;
    if let Some(mut child) = processes.remove(&service) {
-        child.kill().map_err(|e| format!("unable to stop {}: {}", service, e))?;
+        child
+            .kill()
+            .map_err(|e| format!("unable to stop {}: {}", service, e))?;
        let _ = child.wait();
        return Ok(empty_status(&service, "stopped"));
    }
@@ -241,7 +498,10 @@ fn stop_service(service: String, state: State<'_, AppState>) -> Result<ServiceSt

 #[tauri::command]
 fn service_status(service: String, state: State<'_, AppState>) -> Result<ServiceStatus, String> {
-    let mut processes = state.processes.lock().map_err(|_| "process state is unavailable".to_string())?;
+    let mut processes = state
+        .processes
+        .lock()
+        .map_err(|_| "process state is unavailable".to_string())?;
    if let Some(child) = processes.get_mut(&service) {
        if child.try_wait().map_err(|e| e.to_string())?.is_none() {
            return Ok(ServiceStatus {
@@ -286,7 +546,8 @@ fn management_query(request: ManagementRequest) -> Result<Vec<Value>, String> {
                if let Ok(text) = std::str::from_utf8(&buffer[..size]) {
                    for line in text.lines() {
                        if let Ok(value) = serde_json::from_str::<Value>(line) {
-                            let finished = value.get("_type").and_then(Value::as_str) == Some("end");
+                            let finished =
+                                value.get("_type").and_then(Value::as_str) == Some("end");
                            packets.push(value);
                            if finished {
                                return Ok(packets);
@@ -295,7 +556,10 @@ fn management_query(request: ManagementRequest) -> Result<Vec<Value>, String> {
                    }
                }
            }
-            Err(error) if error.kind() == std::io::ErrorKind::WouldBlock || error.kind() == std::io::ErrorKind::TimedOut => {
+            Err(error)
+                if error.kind() == std::io::ErrorKind::WouldBlock
+                    || error.kind() == std::io::ErrorKind::TimedOut =>
+            {
                break;
            }
            Err(error) => return Err(error.to_string()),
@@ -326,7 +590,11 @@ fn run_ping(request: PingRequest) -> Result<ToolResult, String> {
    let stderr = String::from_utf8_lossy(&output.stderr).to_string();
    Ok(ToolResult {
        ok: output.status.success(),
-        summary: if output.status.success() { "目标可达".to_string() } else { "目标不可达".to_string() },
+        summary: if output.status.success() {
+            "目标可达".to_string()
+        } else {
+            "目标不可达".to_string()
+        },
        output: if stdout.is_empty() { stderr } else { stdout },
        latency_ms: Some(started.elapsed().as_millis()),
    })
@@ -342,7 +610,11 @@ fn run_tcping(request: TcpingRequest) -> Result<ToolResult, String> {
        Ok(_) => Ok(ToolResult {
            ok: true,
            summary: "TCP 端口可连接".to_string(),
-                output: format!("connected to {} in {} ms", address, started.elapsed().as_millis()),
+            output: format!(
+                "connected to {} in {} ms",
+                address,
+                started.elapsed().as_millis()
+            ),
            latency_ms: Some(started.elapsed().as_millis()),
        }),
        Err(error) => Ok(ToolResult {
@@ -371,7 +643,9 @@ fn tap_traffic(request: TapTrafficRequest) -> Result<TapTraffic, String> {

    #[cfg(target_os = "linux")]
    {
-        let path = std::path::Path::new("/sys/class/net").join(tap_device).join("statistics");
+        let path = std::path::Path::new("/sys/class/net")
+            .join(tap_device)
+            .join("statistics");
        let received_bytes = fs::read_to_string(path.join("rx_bytes"))
            .map_err(|error| format!("unable to read TAP adapter {tap_device}: {error}"))?
            .trim()
@@ -393,6 +667,113 @@ fn tap_traffic(request: TapTrafficRequest) -> Result<TapTraffic, String> {
    Err("TAP traffic monitoring is not supported on this operating system".to_string())
 }

+#[tauri::command]
+fn resolve_tap_adapter(request: TapAdapterRequest) -> Result<TapAdapter, String> {
+    let requested = request.tap_device.trim();
+    if requested.contains(['/', '\\']) || requested == "." || requested == ".." {
+        return Err("invalid TAP device name".to_string());
+    }
+
+    #[cfg(target_os = "windows")]
+    {
+        let adapters = windows_tap_adapters()?;
+        if adapters.is_empty() {
+            return Err(
+                "未找到 TAP-Windows 网卡。请先安装 TAP-Windows 驱动，然后重新连接。".to_string(),
+            );
+        }
+        if requested.is_empty() {
+            return Ok(adapters.into_iter().next().expect("non-empty adapter list"));
+        }
+        return adapters
+            .into_iter()
+            .find(|adapter| {
+                adapter.name.eq_ignore_ascii_case(requested)
+                    || adapter.description.eq_ignore_ascii_case(requested)
+                    || adapter.guid.eq_ignore_ascii_case(requested)
+            })
+            .ok_or_else(|| format!("找不到指定的 TAP 设备：{requested}"));
+    }
+
+    #[cfg(not(target_os = "windows"))]
+    {
+        if requested.is_empty() {
+            return Err("请输入 TAP 设备名称".to_string());
+        }
+        Ok(TapAdapter {
+            name: requested.to_string(),
+            description: requested.to_string(),
+            guid: String::new(),
+            if_index: 0,
+        })
+    }
+}
+
+#[tauri::command]
+fn startup_status() -> Result<StartupStatus, String> {
+    let config_path = config_file_path()?;
+    let installer_path = bundled_tap_installer_path()?;
+    let config_exists = config_path.is_file();
+    Ok(StartupStatus {
+        config_exists,
+        first_launch: !config_exists,
+        config_path: config_path.display().to_string(),
+        tap_driver_present: tap_driver_present(),
+        tap_installer_path: installer_path
+            .is_file()
+            .then(|| installer_path.display().to_string()),
+    })
+}
+
+#[tauri::command]
+fn read_config() -> Result<Option<String>, String> {
+    let path = config_file_path()?;
+    if !path.is_file() {
+        return Ok(None);
+    }
+    fs::read_to_string(&path)
+        .map(Some)
+        .map_err(|error| format!("unable to read configuration {}: {error}", path.display()))
+}
+
+#[tauri::command]
+fn write_config(contents: String) -> Result<String, String> {
+    let path = config_file_path()?;
+    if contents.len() > 64 * 1024 {
+        return Err("configuration is too large".to_string());
+    }
+    serde_json::from_str::<Value>(&contents)
+        .map_err(|error| format!("configuration must be valid JSON: {error}"))?;
+    fs::write(&path, contents)
+        .map_err(|error| format!("unable to write configuration {}: {error}", path.display()))?;
+    Ok(path.display().to_string())
+}
+
+#[tauri::command]
+fn open_tap_installer() -> Result<String, String> {
+    let path = bundled_tap_installer_path()?;
+    if !path.is_file() {
+        return Err(format!(
+            "随包 TAP-Windows 安装程序不存在：{}",
+            path.display()
+        ));
+    }
+
+    #[cfg(target_os = "windows")]
+    {
+        Command::new(&path)
+            .spawn()
+            .map_err(|error| format!("无法打开 TAP-Windows 安装程序：{error}"))?;
+        return Ok(path.display().to_string());
+    }
+
+    #[cfg(not(target_os = "windows"))]
+    {
+        let _ = path;
+        Err("TAP-Windows 安装程序仅支持 Windows".to_string())
+    }
+}
+
 #[tauri::command]
 fn firewall_status() -> Result<ToolResult, String> {
    #[cfg(target_os = "windows")]
@@ -402,7 +783,10 @@ fn firewall_status() -> Result<ToolResult, String> {
        .map_err(|e| e.to_string())?;
    #[cfg(target_os = "linux")]
    let output = Command::new("sh")
-        .args(["-c", "ufw status verbose 2>/dev/null || firewall-cmd --state 2>/dev/null || true"])
+        .args([
+            "-c",
+            "ufw status verbose 2>/dev/null || firewall-cmd --state 2>/dev/null || true",
+        ])
        .output()
        .map_err(|e| e.to_string())?;
    #[cfg(target_os = "macos")]
@@ -423,10 +807,16 @@ fn firewall_status() -> Result<ToolResult, String> {
        || normalized.contains("status: active")
        || normalized.contains("firewall is enabled")
        || normalized.contains("state = 1")
-        || normalized.split_whitespace().any(|token| token == "running");
+        || normalized
+            .split_whitespace()
+            .any(|token| token == "running");
    Ok(ToolResult {
        ok: output.status.success(),
-        summary: if enabled { "本地防火墙已开启".to_string() } else { "未检测到防火墙开启".to_string() },
+        summary: if enabled {
+            "本地防火墙已开启".to_string()
+        } else {
+            "未检测到防火墙开启".to_string()
+        },
        output: stdout,
        latency_ms: None,
    })
@@ -448,7 +838,19 @@ fn export_log(contents: String) -> Result<String, String> {

 #[cfg(test)]
 mod tests {
-    use super::{relative_binary_path, StartRequest};
+    use super::{is_tap_windows_description, relative_binary_path, StartRequest};
+
+    #[test]
+    fn tap_description_filter_excludes_network_filter_interfaces() {
+        assert!(is_tap_windows_description("TAP-Windows Adapter V9"));
+        assert!(is_tap_windows_description("TAP-Windows Adapter V9 #2"));
+        assert!(!is_tap_windows_description(
+            "TAP-Windows Adapter V9 #2-WFP Native MAC Layer LightWeight Filter-0000"
+        ));
+        assert!(!is_tap_windows_description(
+            "TAP-Windows Adapter V9-Npcap Packet Driver (NPCAP)-0000"
+        ));
+    }

    #[cfg(target_os = "windows")]
    #[test]
@@ -485,10 +887,62 @@ mod tests {
 }

 pub fn run() {
-    tauri::Builder::default()
+    let app = tauri::Builder::default()
        .manage(AppState {
            processes: Mutex::new(HashMap::new()),
        })
+        .setup(|app| {
+            let connect = MenuItem::with_id(app, "tray-connect", "连接", true, None::<&str>)?;
+            let disconnect = MenuItem::with_id(app, "tray-disconnect", "断开", true, None::<&str>)?;
+            let quit = MenuItem::with_id(app, "tray-quit", "退出", true, None::<&str>)?;
+            let menu = Menu::with_items(app, &[&connect, &disconnect, &quit])?;
+            TrayIconBuilder::with_id("main")
+                .icon(tray_icon_image())
+                .menu(&menu)
+                .tooltip("Super N2N")
+                .show_menu_on_left_click(false)
+                .build(app)?;
+            Ok(())
+        })
+        .on_menu_event(|app, event| match event.id().as_ref() {
+            "tray-connect" => {
+                let _ = app.emit("tray-connect", ());
+                if let Some(window) = app.get_webview_window("main") {
+                    let _ = window.show();
+                    let _ = window.set_focus();
+                }
+            }
+            "tray-disconnect" => {
+                stop_all_processes(app.state::<AppState>().inner());
+                let _ = app.emit("tray-service-stopped", ());
+            }
+            "tray-quit" => {
+                stop_all_processes(app.state::<AppState>().inner());
+                app.exit(0);
+            }
+            _ => {}
+        })
+        .on_tray_icon_event(|app, event| {
+            if let TrayIconEvent::Click {
+                button: MouseButton::Left,
+                button_state: MouseButtonState::Up,
+                ..
+            } = event
+            {
+                if let Some(window) = app.get_webview_window("main") {
+                    let _ = window.show();
+                    let _ = window.set_focus();
+                }
+            }
+        })
+        .on_window_event(|window, event| {
+            if let tauri::WindowEvent::CloseRequested { api, .. } = event {
+                api.prevent_close();
+                stop_all_processes(window.state::<AppState>().inner());
+                let _ = window.emit("tray-service-stopped", ());
+                let _ = window.hide();
+            }
+        })
        .invoke_handler(tauri::generate_handler![
            start_service,
            stop_service,
@@ -497,9 +951,23 @@ pub fn run() {
            run_ping,
            run_tcping,
            tap_traffic,
+            resolve_tap_adapter,
+            configure_tap_adapter,
+            startup_status,
+            read_config,
+            write_config,
+            open_tap_installer,
            firewall_status,
            export_log
        ])
-        .run(tauri::generate_context!())
+        .build(tauri::generate_context!())
        .expect("error while running Super N2N");
+    app.run(|app, event| {
+        if matches!(
+            event,
+            tauri::RunEvent::ExitRequested { .. } | tauri::RunEvent::Exit
+        ) {
+            stop_all_processes(app.state::<AppState>().inner());
+        }
+    });
 }
@@ -36,4 +36,22 @@ export const checkFirewall = (fallback) => nativeCall('firewall_status', {}, fal
 export const tapTraffic = (tapDevice) => nativeCall('tap_traffic', { request: { tapDevice } }, () => {
  throw new Error('浏览器预览无法读取 TAP 流量')
 })
+export const resolveTapAdapter = (tapDevice) => nativeCall('resolve_tap_adapter', { request: { tapDevice } }, () => {
+  throw new Error('浏览器预览无法识别 TAP 网卡')
+})
+export const configureTapAdapter = (request) => nativeCall('configure_tap_adapter', { request }, () => {
+  throw new Error('浏览器预览无法配置 TAP 网卡')
+})
+export const startupStatus = () => nativeCall('startup_status', {}, () => ({
+  configExists: false,
+  firstLaunch: false,
+  configPath: '',
+  tapDriverPresent: true,
+  tapInstallerPath: null,
+}))
+export const readConfig = () => nativeCall('read_config', {}, () => null)
+export const writeConfig = (contents) => nativeCall('write_config', { contents }, () => null)
+export const openTapInstaller = () => nativeCall('open_tap_installer', {}, () => {
+  throw new Error('浏览器预览无法打开 TAP-Windows 安装程序')
+})
 export const exportLog = (contents) => nativeCall('export_log', { contents }, () => null)
@@ -1,10 +1,15 @@
 import { useEffect, useRef, useState } from 'react'
 import { createRoot } from 'react-dom/client'
+import { getCurrentWindow } from '@tauri-apps/api/window'
+import { listen } from '@tauri-apps/api/event'
 import {
  ArrowDown, ArrowUp, CheckCircle2, ChevronDown, CircleAlert, Gauge, Globe2, Network, Play,
  Download, Router, ScrollText, Server, Settings2, Square, Wifi,
 } from 'lucide-react'
-import { exportLog, isTauri, serviceStatus, startService, stopService, tapTraffic } from './lib/tauri'
+import {
+  configureTapAdapter, exportLog, isTauri, openTapInstaller, readConfig, resolveTapAdapter, serviceStatus, startService,
+  startupStatus, stopService, tapTraffic, writeConfig,
+} from './lib/tauri'
 import './styles.css'

 const initialEdge = {
@@ -15,25 +20,140 @@ const initialEdge = {
  ip: '',
  encryptionKey: '',
  managementPort: '5644',
-  tapDevice: 'n2n0',
+  tapDevice: '',
+}
+
+const edgeConfigStorageKey = 'super-n2n.edge-config.v1'
+const isWindowsRuntime = typeof navigator !== 'undefined' && /Windows/i.test(navigator.userAgent)
+
+function parseEdgeConfig(value) {
+  const fallback = { ...initialEdge }
+  const saved = value && typeof value === 'object' && !Array.isArray(value) && value.edge
+    && typeof value.edge === 'object' ? value.edge : value
+  if (!saved || typeof saved !== 'object' || Array.isArray(saved)) return fallback
+  for (const [field, defaultValue] of Object.entries(initialEdge)) {
+    if (typeof saved[field] === typeof defaultValue) fallback[field] = saved[field]
+  }
+  return fallback
+}
+
+function loadBrowserEdgeConfig() {
+  if (typeof window === 'undefined') return { ...initialEdge }
+  try {
+    return parseEdgeConfig(JSON.parse(window.localStorage.getItem(edgeConfigStorageKey) || 'null'))
+  } catch {
+    // A damaged or unavailable browser store must not block the connection form.
+    return { ...initialEdge }
+  }
+}
+
+function saveBrowserEdgeConfig(config) {
+  try {
+    window.localStorage.setItem(edgeConfigStorageKey, JSON.stringify(config))
+  } catch {
+    // The form stays usable when the platform denies local storage access.
+  }
+}
+
+function serializeEdgeConfig(config) {
+  return JSON.stringify({ version: 1, edge: config }, null, 2)
 }

 function App() {
  const [home, setHome] = useState('edge')
-  const [edge, setEdge] = useState(initialEdge)
+  const [edge, setEdge] = useState(loadBrowserEdgeConfig)
  const [edgeRunning, setEdgeRunning] = useState(false)
+  const [activeTapDevice, setActiveTapDevice] = useState('')
  const [advancedOpen, setAdvancedOpen] = useState(false)
  const [logOpen, setLogOpen] = useState(false)
  const [logs, setLogs] = useState([])
  const [traffic, setTraffic] = useState(null)
  const [message, setMessage] = useState(null)
+  const [startupInfo, setStartupInfo] = useState(null)
+  const [configReady, setConfigReady] = useState(!isTauri)
  const lastTapSample = useRef(null)
+  const configWriteFailed = useRef(false)

  const appendLog = (text, level = 'info') => {
    const time = new Date().toLocaleTimeString('zh-CN', { hour12: false })
    setLogs((current) => [{ time, level, text }, ...current].slice(0, 100))
  }

+  useEffect(() => {
+    if (!configReady) return
+    if (!isTauri) {
+      saveBrowserEdgeConfig(edge)
+      return
+    }
+    writeConfig(serializeEdgeConfig(edge)).catch((error) => {
+      if (configWriteFailed.current) return
+      configWriteFailed.current = true
+      appendLog('配置保存失败：' + error.message, 'warning')
+    })
+  }, [edge, configReady])
+
+  useEffect(() => {
+    let active = true
+    const loadStartup = async () => {
+      try {
+        const status = await startupStatus()
+        if (!active) return
+        setStartupInfo(status)
+        if (isTauri && status.configExists) {
+          const contents = await readConfig()
+          if (active && contents) setEdge(parseEdgeConfig(JSON.parse(contents)))
+        }
+        if (active) {
+          setConfigReady(true)
+          if (status.firstLaunch) {
+            appendLog(
+              status.tapDriverPresent ? '首次启动：已检测到 TAP-Windows 网卡' : '首次启动：未检测到 TAP-Windows 网卡',
+              status.tapDriverPresent ? 'success' : 'warning',
+            )
+          }
+        }
+      } catch (error) {
+        if (!active) return
+        setConfigReady(true)
+        appendLog('读取启动配置失败：' + error.message, 'warning')
+      }
+    }
+    loadStartup()
+    return () => { active = false }
+  }, [])
+
+  useEffect(() => {
+    if (!isTauri) return undefined
+    let active = true
+    let unlistenConnect
+    let unlistenDisconnect
+    let unlistenStopped
+    const bindTrayEvents = async () => {
+      unlistenConnect = await listen('tray-connect', async () => {
+        if (!active) return
+        await getCurrentWindow().show()
+        await getCurrentWindow().setFocus()
+        if (!edgeRunning) await toggleEdge()
+      })
+      unlistenDisconnect = await listen('tray-disconnect', async () => {
+        if (!active || !edgeRunning) return
+        await toggleEdge()
+      })
+      unlistenStopped = await listen('tray-service-stopped', () => {
+        if (!active) return
+        setEdgeRunning(false)
+        setActiveTapDevice('')
+      })
+    }
+    bindTrayEvents()
+    return () => {
+      active = false
+      unlistenConnect?.()
+      unlistenDisconnect?.()
+      unlistenStopped?.()
+    }
+  }, [edgeRunning, edge])
+
  useEffect(() => {
    let active = true
    serviceStatus('edge')
@@ -47,7 +167,7 @@ function App() {
  }, [])

  useEffect(() => {
-    if (!edgeRunning) {
+    if (!edgeRunning || !activeTapDevice) {
      lastTapSample.current = null
      setTraffic(null)
      return undefined
@@ -57,7 +177,7 @@ function App() {
    let timer
    const poll = async () => {
      try {
-        const sample = await tapTraffic(edge.tapDevice)
+        const sample = await tapTraffic(activeTapDevice)
        const sampledAt = Date.now()
        const previous = lastTapSample.current
        const elapsedSeconds = previous ? Math.max((sampledAt - previous.sampledAt) / 1000, .25) : 1
@@ -76,7 +196,7 @@ function App() {
      active = false
      window.clearTimeout(timer)
    }
-  }, [edgeRunning, edge.tapDevice])
+  }, [activeTapDevice, edgeRunning])

  const updateEdge = (field, value) => setEdge((current) => ({ ...current, [field]: value }))
  const notify = (text, tone = 'error') => {
@@ -89,6 +209,7 @@ function App() {
      try {
        const status = await stopService('edge')
        setEdgeRunning(Boolean(status.running))
+        setActiveTapDevice('')
        appendLog('已断开 N2N 网络')
        notify('已断开 N2N 网络', 'neutral')
      } catch (error) {
@@ -115,12 +236,23 @@ function App() {
    }

    try {
+      const tapAdapter = await resolveTapAdapter(edge.tapDevice)
+      appendLog('已选择 TAP 设备：' + tapAdapter.name)
+      if (isWindowsRuntime) {
+        await configureTapAdapter({
+          tapDevice: tapAdapter.guid || tapAdapter.name,
+          dhcp: edge.dhcp,
+          ip: edge.ip,
+        })
+        appendLog('已配置 TAP 网卡地址', 'success')
+      }
      const status = await startService({
        service: 'edge',
        binaryPath: './n2n/edge.exe',
-        args: buildEdgeArgs(edge),
+        args: buildEdgeArgs(edge, tapAdapter.guid || tapAdapter.name),
      })
      setEdgeRunning(Boolean(status.running))
+      setActiveTapDevice(tapAdapter.name)
      appendLog('已连接到群组 ' + edge.community, 'success')
      notify('已连接到 ' + edge.community, 'success')
    } catch (error) {
@@ -129,6 +261,17 @@ function App() {
    }
  }

+  const installTapDriver = async () => {
+    try {
+      const path = await openTapInstaller()
+      appendLog('已打开 TAP-Windows 安装程序：' + path, 'info')
+      notify('请按安装向导完成驱动安装，然后重新打开应用', 'neutral')
+    } catch (error) {
+      appendLog('打开 TAP-Windows 安装程序失败：' + error.message, 'error')
+      notify('无法打开驱动安装程序：' + error.message)
+    }
+  }
+
  return <main className="app-shell">
    <header className="app-header">
      <div className="brand"><span className="brand-icon"><Network size={19} /></span><span>Super N2N</span></div>
@@ -146,7 +289,7 @@ function App() {
      </div>

      {home === 'edge'
-        ? <EdgeHome edge={edge} updateEdge={updateEdge} running={edgeRunning} traffic={traffic} advancedOpen={advancedOpen} setAdvancedOpen={setAdvancedOpen} logOpen={logOpen} setLogOpen={setLogOpen} logs={logs} onToggle={toggleEdge} onExportLog={() => exportLogs(logs, notify)} />
+        ? <EdgeHome edge={edge} updateEdge={updateEdge} running={edgeRunning} traffic={traffic} activeTapDevice={activeTapDevice} startupInfo={startupInfo} advancedOpen={advancedOpen} setAdvancedOpen={setAdvancedOpen} logOpen={logOpen} setLogOpen={setLogOpen} logs={logs} onToggle={toggleEdge} onInstallTap={installTapDriver} onExportLog={() => exportLogs(logs, notify)} />
        : <SupernodeHome />}
    </section>

@@ -155,7 +298,7 @@ function App() {
  </main>
 }

-function EdgeHome({ edge, updateEdge, running, traffic, advancedOpen, setAdvancedOpen, logOpen, setLogOpen, logs, onToggle, onExportLog }) {
+function EdgeHome({ edge, updateEdge, running, traffic, activeTapDevice, startupInfo, advancedOpen, setAdvancedOpen, setLogOpen, logOpen, logs, onToggle, onInstallTap, onExportLog }) {
  const toggleAdvanced = () => {
    setLogOpen(false)
    setAdvancedOpen((current) => !current)
@@ -198,12 +341,14 @@ function EdgeHome({ edge, updateEdge, running, traffic, advancedOpen, setAdvance
        </div>
      </div>

+      <TapSetupPrompt status={startupInfo} onInstall={onInstallTap} />
+
      <button className={running ? 'connect-button stop' : 'connect-button'} onClick={onToggle}>
        {running ? <Square size={19} fill="currentColor" /> : <Play size={20} fill="currentColor" />}
        {running ? '断开连接' : '连接网络'}
      </button>

-      {running && <TrafficStrip traffic={traffic} tapDevice={edge.tapDevice} />}
+      {running && <TrafficStrip traffic={traffic} tapDevice={activeTapDevice} />}
    </section>

    <div className="secondary-actions">
@@ -214,7 +359,7 @@ function EdgeHome({ edge, updateEdge, running, traffic, advancedOpen, setAdvance
        {advancedOpen && <div className="advanced-fields">
          <label><span>加密密钥</span><input type="password" value={edge.encryptionKey} onChange={(event) => updateEdge('encryptionKey', event.target.value)} placeholder="可选" disabled={running} /></label>
          <label><span>管理端口</span><input inputMode="numeric" value={edge.managementPort} onChange={(event) => updateEdge('managementPort', event.target.value)} disabled={running} /></label>
-          <label><span>TAP 设备名称</span><input value={edge.tapDevice} onChange={(event) => updateEdge('tapDevice', event.target.value)} disabled={running} /></label>
+          <label><span>TAP 设备（可选）</span><input value={edge.tapDevice} onChange={(event) => updateEdge('tapDevice', event.target.value)} placeholder="留空自动选择" disabled={running} /></label>
        </div>}
      </section>

@@ -223,6 +368,17 @@ function EdgeHome({ edge, updateEdge, running, traffic, advancedOpen, setAdvance
  </div>
 }

+function TapSetupPrompt({ status, onInstall }) {
+  if (!status?.firstLaunch || status.tapDriverPresent) return null
+  return <aside className="tap-setup" role="alert">
+    <div className="tap-setup-copy">
+      <CircleAlert size={16} />
+      <span><strong>需要安装 TAP-Windows</strong><small>未检测到虚拟网卡，安装后重新打开应用。</small></span>
+    </div>
+    {status.tapInstallerPath && <button className="tap-install" onClick={onInstall} title="打开随包 TAP-Windows 安装程序"><Download size={14} />安装</button>}
+  </aside>
+}
+
 function TrafficStrip({ traffic, tapDevice }) {
  if (!traffic || traffic.error) {
    return <div className="traffic-strip pending" role="status" title={traffic?.error || ''}>
@@ -323,15 +479,17 @@ function addOption(args, flag, value) {
  if (String(value ?? '').trim()) args.push(flag, String(value).trim())
 }

-function buildEdgeArgs(config) {
+function buildEdgeArgs(config, tapDevice) {
  const args = []
  addOption(args, '-c', config.community)
  addOption(args, '-l', config.serverHost + ':' + (config.serverPort || '7777'))
  addOption(args, '-a', config.dhcp ? 'dhcp:0.0.0.0' : config.ip)
-  addOption(args, '-d', config.tapDevice)
+  addOption(args, '-d', tapDevice)
  addOption(args, '-t', config.managementPort)
  if (config.encryptionKey) addOption(args, '-k', config.encryptionKey)
-  args.push('-f', '-v', '-v')
+  // Windows edge does not implement the POSIX-only -f daemon flag.
+  if (!isWindowsRuntime) args.push('-f')
+  args.push('-v', '-v')
  return args
 }

@@ -64,6 +64,15 @@ h1 { margin: 0; color: var(--ink); font-size: 24px; line-height: 1.2; letter-spa
 .ip-heading { display: flex; align-items: center; justify-content: space-between; gap: 16px; }
 .input-group small { color: var(--muted); font-size: 12px; line-height: 1.4; }

+.tap-setup { display: grid; grid-template-columns: minmax(0, 1fr) auto; align-items: center; gap: 8px; margin: 0 22px 10px; padding: 8px 9px; color: #855f16; background: #fff8e8; border: 1px solid #ecd59c; border-radius: 5px; }
+.tap-setup-copy { min-width: 0; display: flex; align-items: flex-start; gap: 7px; }
+.tap-setup-copy > svg { flex: 0 0 auto; margin-top: 1px; }
+.tap-setup-copy > span { min-width: 0; display: grid; gap: 2px; }
+.tap-setup-copy strong { color: #76500d; font-size: 12px; line-height: 1.2; }
+.tap-setup-copy small { overflow: hidden; color: #927642; font-size: 11px; line-height: 1.25; text-overflow: ellipsis; white-space: nowrap; }
+.tap-install { min-height: 28px; display: inline-flex; align-items: center; justify-content: center; gap: 4px; padding: 0 8px; color: #76500d; background: #fff; border: 1px solid #dfc57d; border-radius: 4px; font-size: 11px; font-weight: 700; white-space: nowrap; }
+.tap-install:hover { background: #fffdf5; border-color: #caa64d; }
+
 .dhcp-toggle { display: inline-flex; align-items: center; gap: 7px; min-height: 28px; color: var(--muted); font-size: 13px; font-weight: 600; cursor: pointer; }
 .dhcp-toggle input { position: absolute; width: 1px; height: 1px; opacity: 0; }
 .toggle-track { position: relative; width: 36px; height: 22px; flex: 0 0 auto; background: #a8b7ba; border-radius: 14px; transition: background 180ms ease; }
@@ -153,6 +162,7 @@ h1 { margin: 0; color: var(--ink); font-size: 24px; line-height: 1.2; letter-spa
  .input-group { padding: 12px 0; }
  .server-inputs { grid-template-columns: minmax(0, 1fr) auto 74px; gap: 5px; }
  .input-group input { height: 38px; font-size: 14px; }
+  .tap-setup { margin: 0 16px 8px; }
  .connect-button { width: calc(100% - 32px); margin: 10px 16px 14px; }
  .connection-summary { grid-template-columns: 1fr; }
  .connection-summary div { grid-template-columns: 80px 1fr; align-items: baseline; padding: 9px 14px; border-right: 0; border-bottom: 1px solid var(--line); }
@@ -194,6 +204,13 @@ h1 { margin: 0; color: var(--ink); font-size: 24px; line-height: 1.2; letter-spa
  .field-title { gap: 0; font-size: 12px; }
  .field-title svg { display: none; }
  .input-group input { height: 30px; padding: 0 7px; border-radius: 4px; font-size: 12px; }
+  .tap-setup { gap: 5px; margin: 0 8px 3px; padding: 6px 7px; border-radius: 4px; }
+  .tap-setup-copy { gap: 5px; }
+  .tap-setup-copy > svg { width: 14px; height: 14px; }
+  .tap-setup-copy strong { font-size: 10px; }
+  .tap-setup-copy small { font-size: 9px; }
+  .tap-install { min-height: 24px; gap: 3px; padding: 0 6px; font-size: 10px; }
+  .tap-install svg { width: 12px; height: 12px; }
  .server-inputs { grid-template-columns: minmax(0, 1fr) auto 58px; gap: 4px; }
  .port-separator { font-size: 15px; }
  .input-group small { display: none; }
@@ -0,0 +1,339 @@
+                    GNU GENERAL PUBLIC LICENSE
+                       Version 2, June 1991
+
+ Copyright (C) 1989, 1991 Free Software Foundation, Inc.,
+ 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
+ Everyone is permitted to copy and distribute verbatim copies
+ of this license document, but changing it is not allowed.
+
+                            Preamble
+
+  The licenses for most software are designed to take away your
+freedom to share and change it.  By contrast, the GNU General Public
+License is intended to guarantee your freedom to share and change free
+software--to make sure the software is free for all its users.  This
+General Public License applies to most of the Free Software
+Foundation's software and to any other program whose authors commit to
+using it.  (Some other Free Software Foundation software is covered by
+the GNU Lesser General Public License instead.)  You can apply it to
+your programs, too.
+
+  When we speak of free software, we are referring to freedom, not
+price.  Our General Public Licenses are designed to make sure that you
+have the freedom to distribute copies of free software (and charge for
+this service if you wish), that you receive source code or can get it
+if you want it, that you can change the software or use pieces of it
+in new free programs; and that you know you can do these things.
+
+  To protect your rights, we need to make restrictions that forbid
+anyone to deny you these rights or to ask you to surrender the rights.
+These restrictions translate to certain responsibilities for you if you
+distribute copies of the software, or if you modify it.
+
+  For example, if you distribute copies of such a program, whether
+gratis or for a fee, you must give the recipients all the rights that
+you have.  You must make sure that they, too, receive or can get the
+source code.  And you must show them these terms so they know their
+rights.
+
+  We protect your rights with two steps: (1) copyright the software, and
+(2) offer you this license which gives you legal permission to copy,
+distribute and/or modify the software.
+
+  Also, for each author's protection and ours, we want to make certain
+that everyone understands that there is no warranty for this free
+software.  If the software is modified by someone else and passed on, we
+want its recipients to know that what they have is not the original, so
+that any problems introduced by others will not reflect on the original
+authors' reputations.
+
+  Finally, any free program is threatened constantly by software
+patents.  We wish to avoid the danger that redistributors of a free
+program will individually obtain patent licenses, in effect making the
+program proprietary.  To prevent this, we have made it clear that any
+patent must be licensed for everyone's free use or not licensed at all.
+
+  The precise terms and conditions for copying, distribution and
+modification follow.
+
+                    GNU GENERAL PUBLIC LICENSE
+   TERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION
+
+  0. This License applies to any program or other work which contains
+a notice placed by the copyright holder saying it may be distributed
+under the terms of this General Public License.  The "Program", below,
+refers to any such program or work, and a "work based on the Program"
+means either the Program or any derivative work under copyright law:
+that is to say, a work containing the Program or a portion of it,
+either verbatim or with modifications and/or translated into another
+language.  (Hereinafter, translation is included without limitation in
+the term "modification".)  Each licensee is addressed as "you".
+
+Activities other than copying, distribution and modification are not
+covered by this License; they are outside its scope.  The act of
+running the Program is not restricted, and the output from the Program
+is covered only if its contents constitute a work based on the
+Program (independent of having been made by running the Program).
+Whether that is true depends on what the Program does.
+
+  1. You may copy and distribute verbatim copies of the Program's
+source code as you receive it, in any medium, provided that you
+conspicuously and appropriately publish on each copy an appropriate
+copyright notice and disclaimer of warranty; keep intact all the
+notices that refer to this License and to the absence of any warranty;
+and give any other recipients of the Program a copy of this License
+along with the Program.
+
+You may charge a fee for the physical act of transferring a copy, and
+you may at your option offer warranty protection in exchange for a fee.
+
+  2. You may modify your copy or copies of the Program or any portion
+of it, thus forming a work based on the Program, and copy and
+distribute such modifications or work under the terms of Section 1
+above, provided that you also meet all of these conditions:
+
+    a) You must cause the modified files to carry prominent notices
+    stating that you changed the files and the date of any change.
+
+    b) You must cause any work that you distribute or publish, that in
+    whole or in part contains or is derived from the Program or any
+    part thereof, to be licensed as a whole at no charge to all third
+    parties under the terms of this License.
+
+    c) If the modified program normally reads commands interactively
+    when run, you must cause it, when started running for such
+    interactive use in the most ordinary way, to print or display an
+    announcement including an appropriate copyright notice and a
+    notice that there is no warranty (or else, saying that you provide
+    a warranty) and that users may redistribute the program under
+    these conditions, and telling the user how to view a copy of this
+    License.  (Exception: if the Program itself is interactive but
+    does not normally print such an announcement, your work based on
+    the Program is not required to print an announcement.)
+
+These requirements apply to the modified work as a whole.  If
+identifiable sections of that work are not derived from the Program,
+and can be reasonably considered independent and separate works in
+themselves, then this License, and its terms, do not apply to those
+sections when you distribute them as separate works.  But when you
+distribute the same sections as part of a whole which is a work based
+on the Program, the distribution of the whole must be on the terms of
+this License, whose permissions for other licensees extend to the
+entire whole, and thus to each and every part regardless of who wrote it.
+
+Thus, it is not the intent of this section to claim rights or contest
+your rights to work written entirely by you; rather, the intent is to
+exercise the right to control the distribution of derivative or
+collective works based on the Program.
+
+In addition, mere aggregation of another work not based on the Program
+with the Program (or with a work based on the Program) on a volume of
+a storage or distribution medium does not bring the other work under
+the scope of this License.
+
+  3. You may copy and distribute the Program (or a work based on it,
+under Section 2) in object code or executable form under the terms of
+Sections 1 and 2 above provided that you also do one of the following:
+
+    a) Accompany it with the complete corresponding machine-readable
+    source code, which must be distributed under the terms of Sections
+    1 and 2 above on a medium customarily used for software interchange; or,
+
+    b) Accompany it with a written offer, valid for at least three
+    years, to give any third party, for a charge no more than your
+    cost of physically performing source distribution, a complete
+    machine-readable copy of the corresponding source code, to be
+    distributed under the terms of Sections 1 and 2 above on a medium
+    customarily used for software interchange; or,
+
+    c) Accompany it with the information you received as to the offer
+    to distribute corresponding source code.  (This alternative is
+    allowed only for noncommercial distribution and only if you
+    received the program in object code or executable form with such
+    an offer, in accord with Subsection b above.)
+
+The source code for a work means the preferred form of the work for
+making modifications to it.  For an executable work, complete source
+code means all the source code for all modules it contains, plus any
+associated interface definition files, plus the scripts used to
+control compilation and installation of the executable.  However, as a
+special exception, the source code distributed need not include
+anything that is normally distributed (in either source or binary
+form) with the major components (compiler, kernel, and so on) of the
+operating system on which the executable runs, unless that component
+itself accompanies the executable.
+
+If distribution of executable or object code is made by offering
+access to copy from a designated place, then offering equivalent
+access to copy the source code from the same place counts as
+distribution of the source code, even though third parties are not
+compelled to copy the source along with the object code.
+
+  4. You may not copy, modify, sublicense, or distribute the Program
+except as expressly provided under this License.  Any attempt
+otherwise to copy, modify, sublicense or distribute the Program is
+void, and will automatically terminate your rights under this License.
+However, parties who have received copies, or rights, from you under
+this License will not have their licenses terminated so long as such
+parties remain in full compliance.
+
+  5. You are not required to accept this License, since you have not
+signed it.  However, nothing else grants you permission to modify or
+distribute the Program or its derivative works.  These actions are
+prohibited by law if you do not accept this License.  Therefore, by
+modifying or distributing the Program (or any work based on the
+Program), you indicate your acceptance of this License to do so, and
+all its terms and conditions for copying, distributing or modifying
+the Program or works based on it.
+
+  6. Each time you redistribute the Program (or any work based on the
+Program), the recipient automatically receives a license from the
+original licensor to copy, distribute or modify the Program subject to
+these terms and conditions.  You may not impose any further
+restrictions on the recipients' exercise of the rights granted herein.
+You are not responsible for enforcing compliance by third parties to
+this License.
+
+  7. If, as a consequence of a court judgment or allegation of patent
+infringement or for any other reason (not limited to patent issues),
+conditions are imposed on you (whether by court order, agreement or
+otherwise) that contradict the conditions of this License, they do not
+excuse you from the conditions of this License.  If you cannot
+distribute so as to satisfy simultaneously your obligations under this
+License and any other pertinent obligations, then as a consequence you
+may not distribute the Program at all.  For example, if a patent
+license would not permit royalty-free redistribution of the Program by
+all those who receive copies directly or indirectly through you, then
+the only way you could satisfy both it and this License would be to
+refrain entirely from distribution of the Program.
+
+If any portion of this section is held invalid or unenforceable under
+any particular circumstance, the balance of the section is intended to
+apply and the section as a whole is intended to apply in other
+circumstances.
+
+It is not the purpose of this section to induce you to infringe any
+patents or other property right claims or to contest validity of any
+such claims; this section has the sole purpose of protecting the
+integrity of the free software distribution system, which is
+implemented by public license practices.  Many people have made
+generous contributions to the wide range of software distributed
+through that system in reliance on consistent application of that
+system; it is up to the author/donor to decide if he or she is willing
+to distribute software through any other system and a licensee cannot
+impose that choice.
+
+This section is intended to make thoroughly clear what is believed to
+be a consequence of the rest of this License.
+
+  8. If the distribution and/or use of the Program is restricted in
+certain countries either by patents or by copyrighted interfaces, the
+original copyright holder who places the Program under this License
+may add an explicit geographical distribution limitation excluding
+those countries, so that distribution is permitted only in or among
+countries not thus excluded.  In such case, this License incorporates
+the limitation as if written in the body of this License.
+
+  9. The Free Software Foundation may publish revised and/or new versions
+of the General Public License from time to time.  Such new versions will
+be similar in spirit to the present version, but may differ in detail to
+address new problems or concerns.
+
+Each version is given a distinguishing version number.  If the Program
+specifies a version number of this License which applies to it and "any
+later version", you have the option of following the terms and conditions
+either of that version or of any later version published by the Free
+Software Foundation.  If the Program does not specify a version number of
+this License, you may choose any version ever published by the Free Software
+Foundation.
+
+  10. If you wish to incorporate parts of the Program into other free
+programs whose distribution conditions are different, write to the author
+to ask for permission.  For software which is copyrighted by the Free
+Software Foundation, write to the Free Software Foundation; we sometimes
+make exceptions for this.  Our decision will be guided by the two goals
+of preserving the free status of all derivatives of our free software and
+of promoting the sharing and reuse of software generally.
+
+                            NO WARRANTY
+
+  11. BECAUSE THE PROGRAM IS LICENSED FREE OF CHARGE, THERE IS NO WARRANTY
+FOR THE PROGRAM, TO THE EXTENT PERMITTED BY APPLICABLE LAW.  EXCEPT WHEN
+OTHERWISE STATED IN WRITING THE COPYRIGHT HOLDERS AND/OR OTHER PARTIES
+PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED
+OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
+MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.  THE ENTIRE RISK AS
+TO THE QUALITY AND PERFORMANCE OF THE PROGRAM IS WITH YOU.  SHOULD THE
+PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF ALL NECESSARY SERVICING,
+REPAIR OR CORRECTION.
+
+  12. IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING
+WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MAY MODIFY AND/OR
+REDISTRIBUTE THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES,
+INCLUDING ANY GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING
+OUT OF THE USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED
+TO LOSS OF DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY
+YOU OR THIRD PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER
+PROGRAMS), EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE
+POSSIBILITY OF SUCH DAMAGES.
+
+                     END OF TERMS AND CONDITIONS
+
+            How to Apply These Terms to Your New Programs
+
+  If you develop a new program, and you want it to be of the greatest
+possible use to the public, the best way to achieve this is to make it
+free software which everyone can redistribute and change under these terms.
+
+  To do so, attach the following notices to the program.  It is safest
+to attach them to the start of each source file to most effectively
+convey the exclusion of warranty; and each file should have at least
+the "copyright" line and a pointer to where the full notice is found.
+
+    <one line to give the program's name and a brief idea of what it does.>
+    Copyright (C) <year>  <name of author>
+
+    This program is free software; you can redistribute it and/or modify
+    it under the terms of the GNU General Public License as published by
+    the Free Software Foundation; either version 2 of the License, or
+    (at your option) any later version.
+
+    This program is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+    GNU General Public License for more details.
+
+    You should have received a copy of the GNU General Public License along
+    with this program; if not, write to the Free Software Foundation, Inc.,
+    51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
+
+Also add information on how to contact you by electronic and paper mail.
+
+If the program is interactive, make it output a short notice like this
+when it starts in an interactive mode:
+
+    Gnomovision version 69, Copyright (C) year name of author
+    Gnomovision comes with ABSOLUTELY NO WARRANTY; for details type `show w'.
+    This is free software, and you are welcome to redistribute it
+    under certain conditions; type `show c' for details.
+
+The hypothetical commands `show w' and `show c' should show the appropriate
+parts of the General Public License.  Of course, the commands you use may
+be called something other than `show w' and `show c'; they could even be
+mouse-clicks or menu items--whatever suits your program.
+
+You should also get your employer (if you work as a programmer) or your
+school, if any, to sign a "copyright disclaimer" for the program, if
+necessary.  Here is a sample; alter the names:
+
+  Yoyodyne, Inc., hereby disclaims all copyright interest in the program
+  `Gnomovision' (which makes passes at compilers) written by James Hacker.
+
+  <signature of Ty Coon>, 1 April 1989
+  Ty Coon, President of Vice
+
+This General Public License does not permit incorporating your program into
+proprietary programs.  If your program is a subroutine library, you may
+consider it more useful to permit linking proprietary applications with the
+library.  If this is what you want to do, use the GNU Lesser General
+Public License instead of this License.
@@ -0,0 +1,25 @@
+tap-windows6 license
+--------------------
+
+The source and object code of the tap-windows6 project
+is Copyright (C) 2002-2014 OpenVPN Technologies, Inc. The
+NSIS installer is Copyright (C) 2014 OpenVPN Technologies,
+Inc. and (C) 2012 Alon Bar-Lev. The installer.dll MSI helper
+is Copyright (C) 2018-2019 WireGuard LLC. All are released
+under the GPL version 2. See COPYRIGHT.GPL for the full GPL
+license. The licensors also make the following statement
+borrowed from the SPICE project:
+
+With respect to binaries built using the Microsoft(R)
+Windows Driver Kit (WDK), GPLv2 does not extend to any code
+contained in or derived from the WDK ("WDK Code").  As to
+WDK Code, by using or distributing such binaries you agree
+to be bound by the Microsoft Software License Terms for the
+WDK.  All WDK Code is considered by the GPLv2 licensors to
+qualify for the special exception stated in section 3 of
+GPLv2 (commonly known as the system library exception).
+
+The tap-windows.h file has been released under the MIT
+license (see COPYRIGHT.MIT) as well as under GPLv2 (see
+COPYRIGHT.GPL). This has been done to allow the use of the
+header file in non-GPLv2 compatible projects.
@@ -0,0 +1,13 @@
+TAP-Windows driver installer
+
+File: tap-windows-9.24.7-I601-Win10.exe
+Version: 9.24.7-I601
+Official source: https://build.openvpn.net/downloads/releases/tap-windows-9.24.7-I601-Win10.exe
+SHA-256: 1C44E77AB148DDFB174DE8041100EFC38C4F23500183FAFF88F9BADAC5782E3C
+
+The installer is distributed unchanged from the official OpenVPN release
+directory. Windows may request administrator approval during installation.
+After installation completes, restart Super N2N so it can detect the adapter.
+
+The TAP-Windows6 project is released under GPLv2. See LICENSE.txt for its
+license notice and COPYRIGHT.GPL.txt for the complete GPLv2 text.
@@ -0,0 +1 @@
+1C44E77AB148DDFB174DE8041100EFC38C4F23500183FAFF88F9BADAC5782E3C  tap-windows-9.24.7-I601-Win10.exe
Author	SHA1	Message	Date
chun_qiu	2bbd370e02	Add tray controls and clean up child processes Build Windows Portable Package / portable (release) Successful in 12m13s Details	2026-09-02 02:25:18 +08:00
chun_qiu	a8d803168f	Bundle TAP-Windows installer and persist startup config	2026-09-01 22:16:19 +08:00
chun_qiu	57e6ba8e1e	Auto-select TAP adapters and persist edge settings	2026-09-01 21:39:58 +08:00
chun_qiu	3694d157d1	Build releases instead of pushes	2026-09-01 21:26:50 +08:00
				`@@ -0,0 +1 @@`
				`1C44E77AB148DDFB174DE8041100EFC38C4F23500183FAFF88F9BADAC5782E3C tap-windows-9.24.7-I601-Win10.exe`