┌─────────────────────────────────────┐
│  Presentation Layer (Web Frontend)  │  ← React 18 + TypeScript + Vite
│  - UI Components / State / Router   │
├─────────────────────────────────────┤
│  Bridge Layer (IPC & Commands)      │  ← Tauri Commands / Events / Channels
│  - Type-safe Invocation / Streaming │
├─────────────────────────────────────┤
│  Core Service Layer (Rust)          │  ← Business Logic / Media Pipeline
│  - Signaling / Media Engine / Device│
├─────────────────────────────────────┤
│  Platform Abstraction Layer         │  ← tauri-plugin-* / Raw FFI
│  - Audio I/O / Video Capture / HW   │
└─────────────────────────────────────┘

src-tauri/
├── Cargo.toml                 # Workspace 根清单
├── src/
│   ├── main.rs                # 入口：插件注册、窗口构建、托盘、自动更新
│   ├── ipc/                   # 命令定义、事件总线、Schema 导出
│   ├── media/                 # 音视频核心管线
│   │   ├── capture/           # 设备枚举、采集、预处理
│   │   ├── codec/             # H.264/VP8/AV1 硬编解码封装
│   │   ├── jitter/            # 抖动缓冲、NACK/FEC、带宽估算
│   │   └── transport/         # WebRTC DataChannel / QUIC 复用
│   ├── signaling/             # 信令协议（WebSocket + Protobuf）
│   ├── platform/              # 平台差异抽象（Windows COM / macOS CoreAudio / Linux PipeWire）
│   └── utils/                 # 通用工具：日志、指标、错误类型
├── build.rs                   # 编译期代码生成、版本注入、图标处理
└── tauri.conf.json            # 能力清单、窗口配置、更新签名公钥

// src/ipc/commands/media.rs
#[derive(Serialize, Deserialize, Specta, TS)]
#[specta(export = true)]
pub struct StartCaptureRequest {
    pub device_id: String,
    pub config: VideoCaptureConfig,
}

#[tauri::command]
#[specta(export = true)]
pub async fn start_video_capture(
    app: AppHandle,
    req: StartCaptureRequest,
) -> Result<CaptureSessionInfo, MediaError> {
    // 业务逻辑...
}

// package.json 关键依赖版本策略
{
  "react": "^18.2.0",
  "typescript": "^5.3.0",
  "vite": "^5.0.0",
  "@tauri-apps/api": "^2.0.0",
  "@tauri-apps/plugin-dialog": "^2.0.0",
  "zustand": "^4.4.0",
  "react-router-dom": "^6.21.0",
  "tailwindcss": "^3.4.0"
}

# .github/workflows/release.yml 核心矩阵
strategy:
  matrix:
    include:
      - os: ubuntu-22.04
        target: x86_64-unknown-linux-gnu
        artifact: appimage
      - os: ubuntu-22.04
        target: aarch64-unknown-linux-gnu
        artifact: appimage
      - os: macos-14
        target: x86_64-apple-darwin
        artifact: dmg
      - os: macos-14
        target: aarch64-apple-darwin
        artifact: dmg
      - os: windows-2022
        target: x86_64-pc-windows-msvc
        artifact: msi
      - os: windows-2022
        target: aarch64-pc-windows-msvc
        artifact: msi

┌─────────────┐     HTTPS + Sigstore      ┌─────────────┐
│  Client     │ ────────────────────────► │  Update     │
│  (tauri-    │  1. 检查版本              │  Server     │
│   updater)  │  2. 下载 .delta / 全量包  │  (S3 +      │
│             │  3. 验证 Ed25519 签名     │  CloudFront)│
└─────────────┘                           └─────────────┘
       ▲                                          │
       │          阶段发布策略                     │
       └──────────────────────────────────────────┘
              1% → 10% → 50% → 100% (可随时暂停/回滚)

// src-tauri/capabilities/meeting-core.json
{
  "$schema": "../gen/schemas/desktop-schema.json",
  "identifier": "meeting-core",
  "description": "核心会议能力集，仅主窗口持有",
  "windows": ["main"],
  "permissions": [
    "core:default",
    "core:window:allow-close",
    "core:window:allow-set-title",
    // 网络权限：仅允许信令服务器域名 + STUN/TURN 域名
    {
      "identifier": "core:network:allow-tcp",
      "allow": [{ "host": "signaling.corp.com", "port": 443 }]
    },
    // 文件系统：仅允许下载目录、日志目录、缓存目录
    {
      "identifier": "fs:allow-read-write",
      "allow": [
        { "path": "$DOWNLOAD/*" },
        { "path": "$APPDATA/meeting/logs/*" },
        { "path": "$CACHE/meeting/*" }
      ]
    },
    // 硬件设备：显式声明摄像头/麦克风/屏幕捕获
    "media:default",
    "screen-capture:default",
    // 严禁：shell:execute, cli:default, updater:default(由独立进程处理)
    // 严禁：core:webview:allow-ipc (禁止任意 IPC，仅允许显式 command)
  ]
}

// src/security/verify.rs
use cosign::verify::verify_signature;
use std::path::Path;

pub fn verify_artifact_integrity(artifact_path: &Path, public_key_pem: &str) -> Result<(), SecurityError> {
    // 1. 离线验证 Ed25519 签名
    verify_signature(artifact_path, public_key_pem)?;
    
    // 2. 可选：在线查证 Rekor 透明日志 (防止密钥泄露后回溯篡改)
    if cfg!(feature = "online_verification") {
        cosign::verify_rekor_entry(artifact_path).await?;
    }
    Ok(())
}

// 在 main.rs 极早期调用（窗口创建前）
fn main() {
    // ... 
    if !cfg!(debug_assertions) {
        verify_artifact_integrity(&current_exe(), include_str!("../../keys/public.pem"))
            .expect("Artifact integrity check failed: possible supply chain attack");
    }
    // ...
}

// src/media/congestion/gcc.rs
pub struct GccController {
    // 状态原子化，避免发送/接收线程加锁
    state: AtomicCell<GccState>,
    // 估算器可运行时替换 (A/B 测试)
    estimator: Box<dyn BandwidthEstimator + Send + Sync>,
    // 事件回调：仅输出带宽变化事件，不直接操作编码器
    on_bitrate_change: Box<dyn Fn(u32) + Send + Sync>,
}

impl GccController {
    pub fn on_packet_sent(&self, seq: u16, size: usize, ts: Instant) {
        self.state.update(|mut s| {
            s.sent_packets.push(SentPacket { seq, size, ts });
            s
        });
    }

    pub fn on_feedback(&self, feedback: TransportFeedback) {
        // 1. 计算到达时间差、发送时间差 -> 延迟梯度
        // 2. 更新 Kalman 滤波器
        // 3. 计算丢包率
        // 4. 状态机：Probe -> RampUp -> Hold -> Drop
        let new_bitrate = self.estimator.estimate(&mut self.state.write());
        (self.on_bitrate_change)(new_bitrate);
    }
}

# tests/network_profiles/weak_network.yaml
profiles:
  - name: "3G_Unstable"
    downlink: { bandwidth_kbps: 800, latency_ms: 150, jitter_ms: 50, loss_percent: 5 }
    uplink:   { bandwidth_kbps: 400, latency_ms: 150, jitter_ms: 50, loss_percent: 8 }
  - name: "Wifi_Interference"
    downlink: { bandwidth_kbps: 10000, latency_ms: 20, jitter_ms: 10, loss_percent: 0 }
    uplink:   { bandwidth_kbps: 5000, latency_ms: 20, jitter_ms: 10, loss_percent: 0 }
    # 突发干扰模式
    burst_loss: { interval_sec: 30, duration_sec: 3, loss_percent: 40 }

# CI 任务
- name: Nightly Weak Network Regression
  runs-on: ubuntu-latest
  steps:
    - uses: actions/checkout@v4
    - name: Start tc (traffic control) netem
      run: |
        sudo tc qdisc add dev eth0 root handle 1: netem
        # 通过 Python 脚本动态加载上述 profile
    - name: Run E2E Meeting Simulation (30min)
      run: cargo test --test e2e_weak_network -- --profile 3G_Unstable
    - name: Upload Metrics & Artifacts
      uses: actions/upload-artifact@v4
      with:
        name: weak-network-report
        path: target/weak-network-report/

// wit/meeting-plugin.wit
package meeting:plugin;

interface video-filter {
    // 插件元数据
    record metadata {
        id: string,
        name: string,
        version: string,
        required-api-version: u32,
        permissions: list<permission>,
    }
    
    // 能力声明
    enum permission { CameraAccess, GpuAccess, NetworkAccess, FileSystemRead }
    
    // 生命周期
    resource filter {
        constructor(init: init-config) -> result<filter, error>
        method process-frame(input: video-frame) -> result<video-frame, error>
        method on-settings-change(settings: json-value) -> result<(), error>
        static method get-metadata() -> metadata
    }
    
    record init-config {
        width: u32, height: u32, format: pixel-format, gpu-context: gpu-handle
    }
    
    record video-frame {
        timestamp-us: u64,
        data: list<u8>, // 共享内存句柄或 WASM 线性内存指针
        stride: u32,
        format: pixel-format,
    }
}

// src/plugins/host.rs
use wasmtime::{component::*, Engine, Store};
use wasmtime_wasi::preview1::{self, WasiP1Ctx};

pub struct PluginHost {
    engine: Engine,
    linker: Linker<PluginState>,
    plugin_dir: PathBuf,
    loaded: DashMap<String, LoadedPlugin>,
}

struct LoadedPlugin {
    instance: ComponentInstance,
    filter: Resource<Filter>, // WASM 资源句柄
    metadata: PluginMetadata,
    // 资源限制
    fuel_limit: u64, 
    memory_limit: usize,
}

impl PluginHost {
    pub async fn load_plugin(&self, plugin_id: &str) -> Result<(), PluginError> {
        let component = Component::from_file(&self.engine, self.plugin_dir.join(format!("{}.wasm", plugin_id)))?;
        
        // 1. 实例化：注入 WASI + 自定义 Host Functions (GPU 纹理共享、日志、指标上报)
        let mut store = Store::new(&self.engine, PluginState::new());
        let instance = self.linker.instantiate_async(&mut store, &component).await?;
        
        // 2. 获取元数据校验兼容性
        let metadata = instance.get_export(&mut store, None, "get-metadata")?.call(&mut store, ())?;
        self.check_compatibility(&metadata)?;
        
        // 3. 构造 Filter 资源
        let init_config = InitConfig { width: 1920, height: 1080, ... };
        let filter = instance.get_export(&mut store, None, "filter")?.constructor(&mut store, init_config).await??;
        
        self.loaded.insert(plugin_id.to_string(), LoadedPlugin { instance, filter, metadata, ... });
        Ok(())
    }

    // 视频帧处理管线：零拷贝传递 GPU 纹理句柄
    pub fn process_frame(&self, plugin_id: &str, frame: &mut GpuFrame) -> Result<(), PluginError> {
        let plugin = self.loaded.get(plugin_id).ok_or(PluginError::NotLoaded)?;
        let mut store = Store::new(&self.engine, PluginState::new());
        
        // 燃料限制：防止插件死循环卡住管线
        store.add_fuel(plugin.fuel_limit)?;
        store.limiter(|s| s.fuel())?;
        
        // 调用 WASM process-frame，传递指针而非拷贝数据
        plugin.filter.process_frame(&mut store, frame.into_wasm_repr())?;
        Ok(())
    }
}

┌─────────────┐     1. 开发者提交 WASM + WIT + Manifest
│  Plugin     │
│  Registry   │◄──────────────────────────────────────┐
│  (私有 OCI) │                                       │
└──────┬──────┘                                       │
       │ 2. CI: wasm-tools validate + 单元测试 + 沙箱压测 │
       ▼                                               │
┌─────────────┐     3. 签名 + 推送到 CDN               │
│  CDN        │                                       │
│  (版本化)   │                                       │
└──────┬──────┘                                       │
       │ 4. 客户端定时/推送检查更新                    │
       ▼                                               │
┌─────────────┐     5. 下载 .wasm → 验证签名 → 原子替换  │
│  Client     │     6. 热加载：无需重启会议             │
│  Plugin Mgr │                                       │
└─────────────┘                                       │
       │                                               │
       └───────────────────────────────────────────────┘
              7. 遥测上报：加载耗时、执行耗时、崩溃率

// src/i18n/schema.ts - 单一事实来源
export const i18nSchema = {
  "meeting.join": { zh: "加入会议", en: "Join Meeting", ja: "会議に参加" },
  "meeting.mute": { zh: "静音", en: "Mute", ja: "ミュート" },
  // ... 5000+ 条目
} as const;

// 类型推导
export type I18nKey = keyof typeof i18nSchema;
export type Locale = 'zh' | 'en' | 'ja' | 'ko' | 'es';

// 编译期检查：确保所有 Key 在所有语言均有值
// scripts/validate-i18n.ts (CI 运行)

meeting-client/
├── .github/                    # Workflows, Issue/PR Templates, CODEOWNERS
├── .husky/                     # pre-commit (lint-staged), commit-msg, pre-push
├── apps/
│   ├── desktop/                # Tauri 主应用
│   ├── plugin-virtual-bg/      # 插件示例
│   └── plugin-ai-caption/      
├── packages/
│   ├── ui/                     # 设计系统组件库
│   ├── core/                   # 共享 TypeScript 核心逻辑 (信令、状态机)
│   ├── ipc-schema/             # specta 导出的 TS 类型包 (自动发布)
│   ├── eslint-config/          # 统一 ESLint 配置
│   └── tsconfig/               # 统一 TS 配置
├── tools/
│   ├── release/                # 语义化发布脚本
│   ├── i18n-sync/              # 翻译平台同步工具
│   └── perf-bench/             # 性能基线对比工具
├── turbo.json                  # Turborepo Pipeline 定义
├── pnpm-workspace.yaml
└── package.json

// .github/performance-budget.json
{
  "startup": { "cold_ms": 800, "warm_ms": 300 },
  "memory": { "idle_mb": 120, "meeting_720p_mb": 350 },
  "bundle": { "frontend_gzip_kb": 450, "rust_binary_mb": 45 },
  "frame": { "encode_latency_ms": 15, "decode_latency_ms": 10 }
}