Copilot Instructions for ProxyWarden

Read AGENTS.md first. Follow the repo invariants there.

Key reminders

This is a standalone Windows Tauri 2 + React/TypeScript + Rust app.
Do not turn it into a SaaS, gateway, server or cloud control plane.
Do not call invoke(...) outside src/api/tauriCommands.ts.
Do not make Local sing-box required for external SOCKS5 routing.
Do not hide install/start/stop/uninstall behind apply.
Do not log or display full subscription URLs, proxy credentials or outbound secrets.
Keep Tauri capabilities minimal and CSP enabled.
Treat commands.rs and App.tsx as large legacy orchestration files that should shrink over time.
For security-sensitive changes, read .agent/skills/security-hardening/SKILL.md.
For Windows service/elevation changes, read .agent/skills/windows-services-powershell/SKILL.md.

Before non-trivial answers, follow .agent/skills/communication-reporting/SKILL.md and .agent/checklists/communication.md.

Start with Коротко: 2-4 main points.
For code changes, include a Файл / Что изменилось / Зачем table.
Explain only important behavior, safety, UX and risk points. Do not retell every line.
Split checks into Проверено and Не проверено.
State unverified Windows/UAC/service behavior honestly.