# Copilot Instructions for ProxyWarden

Read `AGENTS.md` first. Follow the repo invariants there.

## Key reminders

- This is a standalone Windows Tauri 2 + React/TypeScript + Rust app.
- Do not turn it into a SaaS, gateway, server or cloud control plane.
- Do not call `invoke(...)` outside `src/api/tauriCommands.ts`.
- Do not make Local sing-box required for external SOCKS5 routing.
- Do not hide install/start/stop/uninstall behind apply.
- Do not log or display full subscription URLs, proxy credentials or outbound secrets.
- Keep Tauri capabilities minimal and CSP enabled.
- Treat `commands.rs` and `App.tsx` as large legacy orchestration files that should shrink over time.
- For security-sensitive changes, read `.agent/skills/security-hardening/SKILL.md`.
- For Windows service/elevation changes, read `.agent/skills/windows-services-powershell/SKILL.md`.

## Reporting style

Before non-trivial answers, follow `.agent/skills/communication-reporting/SKILL.md` and `.agent/checklists/communication.md`.

- Start with `Коротко`: 2-4 main points.
- For code changes, include a `Файл / Что изменилось / Зачем` table.
- Explain only important behavior, safety, UX and risk points. Do not retell every line.
- Split checks into `Проверено` and `Не проверено`.
- State unverified Windows/UAC/service behavior honestly.