refactor: Rewrite and improve sysproxy logic (#7744)

* fix(cmd): preserve anyhow context in coded errors

Use alternate error formatting so coded failures retain the full anyhow context chain without changing their wire format.

* fix(macos): skip redundant proxy disable writes

When both proxy modes are off, read macOS state first and skip networksetup if the OS is already clean. Update the guard target only after a successful write.

* feat(proxy): classify system proxy failures

Attach stable, actionable proxy failure codes to anyhow chains while preserving the original diagnostic causes.

* feat(cmd): return structured command failures

Replace encoded error strings with serializable code and detail fields, and update frontend notice consumers to handle the structured shape.

* fix(scripts): use the js-yaml namespace import

Import js-yaml through its ESM namespace so the i18n cleanup script can access load and dump.

* feat(proxy): localize classified proxy failures

Map privilege and direct-fallback codes to localized explanations, and let mapped causes outrank generic operation keys in notices.

* fix(ui): bound notice text and render failure details

Limit resolved notice text without truncating clipboard content, and normalize structured failures embedded in translation parameters.

* feat(proxy): persist unseen proxy failures

Store unresolved classified failures by code, notify the frontend when the table changes, and show each failure sequence once when a visible window can receive it.

* feat(proxy): report tray and hotkey toggle failures

Record classified failures from tray and hotkey proxy toggles so they appear when a visible window is available.

* fix(ui): restore the proxy switch after failed toggles

Refresh frontend proxy state after a failed toggle so the switch reflects the rolled-back configuration.

* feat(proxy): stop the guard after repeated failures

Report guard outcomes, stop after the failure threshold, and persist the classified failure for the frontend.

* fix(macos): preserve proxy during service handoff

Stop a sidecar being handed to the service without clearing proxy state that the new owner must inherit.

* feat(macos): classify misplaced sidecar state

Distinguish a refused sidecar proxy write from a machine that still needs the privileged service installed.

* feat(ui): recover misplaced sidecar notices

Offer a restart action for macOS proxy failures caused by a ready service while the core still runs as a sidecar.

* feat(ui): install the service from proxy notices

Let privilege notices install the macOS service, restart the core, and report the runtime mode that was actually reached.

* feat(cmd): attach requested proxy operations

Carry the requested proxy direction with structured command failures when the originating command knows it.

* feat(sysproxy): drain guards before OS access

Wait for the local proxy guard to stop before OS reads, service handoff, or final writes, and refuse transitions when it does not drain.

* feat(sysproxy): recover partial proxy writes

Use write progress to choose whether to restore the old guard or compensate with a disabled proxy state, while preserving actionable errors.

* feat(sysproxy): skip already-applied proxy writes

Compare macOS proxy snapshots with global, PAC, and disabled targets so matching state avoids redundant privileged writes.

* feat(proxy): report background proxy failures

Persist and surface classified proxy failures from lifecycle paths that have no direct caller awaiting the result.

* feat(ui): move proxy recovery into a dialog

Guide users through installing or switching to the service after a refused proxy write, and suppress duplicate toast reports.

* fix(ui): close proxy dialog after service recovery

Dismiss the recovery dialog once the core reaches service mode, even when the original proxy request remains pending.

* feat(ui): retry proxy request after service recovery

Replay the requested proxy direction after the core reaches service mode, while leaving incidental restores unchanged.

* fix(proxy): refresh state after successful apply

Publish the proxy refresh from the shared apply path after releasing the lifecycle lock, and remove the tray-specific duplicate.

* feat(ui): show proxy recovery progress

Display installation, restart, and proxy-apply stages while keeping the primary action spinner visible during recovery.

* feat(ui): route unavailable TUN through service recovery

Let the TUN switch request service recovery and restore its requested state after the core restarts in service mode.

* fix(ui): avoid duplicate TUN recovery errors

Roll back deferred TUN toggles without reporting an error, and publish configuration refreshes from the transaction commit path.

* chore: update changelog & pinlock

* fix(core): resolve platform-specific clippy warnings

* fix(core): detect Windows wildcard TCP conflicts

Windows permits a specific exclusive bind beside an existing non-exclusive wildcard listener. Consult the system TCP listener table so the probe reports that overlap as a conflict.

src-tauri/src/utils/notification.rs

@@ -1,6 +1,6 @@
 use std::borrow::Cow;
 
-use crate::core::handle;
+use crate::{core::handle, utils::window_manager::WindowState};
 use clash_verge_i18n;
 use tauri_plugin_notification::NotificationExt as _;
 
@@ -10,6 +10,10 @@ pub enum NotificationEvent<'a> {
         mode: &'a str,
     },
     SystemProxyToggled(bool),
+    /// A proxy change failed while no window could report it.
+    SystemProxyFailed,
+    /// The system proxy guard stopped.
+    SystemProxyGuardStopped,
     TunModeToggled(bool),
     LightweightModeEntered,
     ProfilesReactivated,
@@ -18,6 +22,14 @@ pub enum NotificationEvent<'a> {
     AppHidden,
 }
 
+/// Whether no app window can currently show the failure.
+pub const fn needs_system_notification(state: WindowState) -> bool {
+    match state {
+        WindowState::Hidden | WindowState::Minimized | WindowState::NotExist => true,
+        WindowState::VisibleFocused | WindowState::VisibleUnfocused => false,
+    }
+}
+
 fn notify(title: Cow<'_, str>, body: Cow<'_, str>) {
     let app_handle = handle::Handle::app_handle();
     app_handle.notification().builder().title(title).body(body).show().ok();
@@ -48,6 +60,16 @@ pub async fn notify_event<'a>(event: NotificationEvent<'a>) {
             let body = clash_verge_i18n::t!(key);
             notify(title, body);
         }
+        NotificationEvent::SystemProxyFailed => {
+            let title = clash_verge_i18n::t!("notifications.systemProxyFailed.title");
+            let body = clash_verge_i18n::t!("notifications.systemProxyFailed.body");
+            notify(title, body);
+        }
+        NotificationEvent::SystemProxyGuardStopped => {
+            let title = clash_verge_i18n::t!("notifications.systemProxyGuardStopped.title");
+            let body = clash_verge_i18n::t!("notifications.systemProxyGuardStopped.body");
+            notify(title, body);
+        }
         NotificationEvent::TunModeToggled(enabled) => {
             let title = clash_verge_i18n::t!("notifications.tunModeToggled.title");
             let key = if enabled {
@@ -81,3 +103,19 @@ pub async fn notify_event<'a>(event: NotificationEvent<'a>) {
         }
     }
 }
+
+#[cfg(test)]
+mod tests {
+    use super::needs_system_notification;
+    use crate::utils::window_manager::WindowState;
+
+    #[test]
+    fn a_system_notification_is_sent_exactly_where_the_window_cannot_speak() {
+        assert!(needs_system_notification(WindowState::Hidden));
+        assert!(needs_system_notification(WindowState::Minimized));
+        assert!(needs_system_notification(WindowState::NotExist));
+
+        assert!(!needs_system_notification(WindowState::VisibleFocused));
+        assert!(!needs_system_notification(WindowState::VisibleUnfocused));
+    }
+}