shm11C3
diff --git a/‎.github/actions/setup-node/action.yml‎
Lines changed: 10 additions & 2 deletions b/‎.github/actions/setup-node/action.yml‎
Lines changed: 10 additions & 2 deletions
diff --git a/‎.github/actions/setup-rust/action.yml‎
Lines changed: 6 additions & 13 deletions b/‎.github/actions/setup-rust/action.yml‎
Lines changed: 6 additions & 13 deletions
diff --git a/‎.github/actions/setup-safe-chain/action.yml‎
Lines changed: 61 additions & 0 deletions b/‎.github/actions/setup-safe-chain/action.yml‎
Lines changed: 61 additions & 0 deletions
diff --git a/‎.github/copilot-instructions.md‎
Lines changed: 46 additions & 71 deletions b/‎.github/copilot-instructions.md‎
Lines changed: 46 additions & 71 deletions
diff --git a/‎.github/dependabot.yml‎
Lines changed: 36 additions & 4 deletions b/‎.github/dependabot.yml‎
Lines changed: 36 additions & 4 deletions
diff --git a/‎.github/scripts/check-licenses.ts‎
Lines changed: 11 additions & 3 deletions b/‎.github/scripts/check-licenses.ts‎
Lines changed: 11 additions & 3 deletions
@@ -4,21 +4,29 @@ inputs:
   node-version:
     description: "Node.js version to install"
     required: false
-    default: "lts/*"
+    default: "24"
   install-deps:
     description: "Whether to install dependencies"
     required: false
     default: "true"
+  setup-safe-chain:
+    description: "Whether to setup and configure AikidoSec/safe-chain for secure package installation"
+    required: false
+    default: "true"
 
 runs:
   using: "composite"
   steps:
     - name: Setup Node.js
-      uses: actions/setup-node@v5
+      uses: actions/setup-node@v6
       with:
         node-version: ${{ inputs.node-version }}
         cache: "npm"
 
+    - name: Setup safe-chain
+      if: inputs.setup-safe-chain == 'true'
+      uses: ./.github/actions/setup-safe-chain
+
     - name: Install dependencies
       if: inputs.install-deps == 'true'
       run: npm ci
 
@@ -9,20 +9,13 @@ inputs:
 runs:
   using: "composite"
   steps:
-    - name: Install Rust
-      run: rustup toolchain add 1.90.0
-      shell: bash
-
-    - name: Cache Cargo
-      uses: actions/cache@v4
+    - uses: dtolnay/rust-toolchain@6d9817901c499d6b02debbb57edb38d33daa680b # stable
+    - uses: Swatinem/rust-cache@779680da715d629ac1d338a641029a2f4372abb5 # v2.8.2
       with:
-        path: |
-          ~/.cargo/registry
-          ~/.cargo/git
-          target
-        key: ${{ runner.os }}-cargo-${{ hashFiles('src-tauri/Cargo.lock') }}
-        restore-keys: |
-          ${{ runner.os }}-cargo-
+        workspaces: "./src-tauri -> target"
+        add-job-id-key: "false"
+        shared-key: "src-tauri"
+        save-if: ${{ github.ref == format('refs/heads/{0}', github.event.repository.default_branch) }}
 
     - name: Install Rust components
       if: inputs.components != ''
 
@@ -0,0 +1,61 @@
+name: "Setup safe-chain"
+description: "Install pinned safe-chain with caching"
+inputs:
+  safe-chain-version:
+    description: "safe-chain version to install (pinned by default)"
+    required: false
+    default: "1.3.3"
+
+runs:
+  using: "composite"
+  steps:
+    - name: Cache safe-chain (Windows)
+      if: runner.os == 'Windows'
+      uses: actions/cache@v4
+      with:
+        path: ${{ env.USERPROFILE }}\\.safe-chain\\bin
+        key: safe-chain-${{ runner.os }}-${{ runner.arch }}-${{ inputs.safe-chain-version }}
+
+    - name: Cache safe-chain (Unix)
+      if: runner.os != 'Windows'
+      uses: actions/cache@v4
+      with:
+        path: ~/.safe-chain/bin
+        key: safe-chain-${{ runner.os }}-${{ runner.arch }}-${{ inputs.safe-chain-version }}
+
+    - name: Add safe-chain to PATH (Windows)
+      if: runner.os == 'Windows'
+      shell: pwsh
+      run: |
+        "$env:USERPROFILE\\.safe-chain\\bin" | Out-File -FilePath $env:GITHUB_PATH -Append -Encoding utf8
+
+    - name: Add safe-chain to PATH (Unix)
+      if: runner.os != 'Windows'
+      shell: bash
+      run: |
+        echo "$HOME/.safe-chain/bin" >> "$GITHUB_PATH"
+
+    - name: Setup safe-chain (Windows)
+      if: runner.os == 'Windows'
+      shell: pwsh
+      run: |
+        $ErrorActionPreference = 'Stop'
+
+        $version = '${{ inputs.safe-chain-version }}'
+        $env:SAFE_CHAIN_VERSION = $version
+
+        $installScriptUrl = "https://raw.githubusercontent.com/AikidoSec/safe-chain/$version/install-scripts/install-safe-chain.ps1"
+        $scriptPath = Join-Path $env:RUNNER_TEMP 'install-safe-chain.ps1'
+
+        Invoke-WebRequest -Uri $installScriptUrl -OutFile $scriptPath -UseBasicParsing
+        & $scriptPath -ci
+
+    - name: Setup safe-chain (Unix)
+      if: runner.os != 'Windows'
+      shell: bash
+      env:
+        SAFE_CHAIN_VERSION: ${{ inputs.safe-chain-version }}
+      run: |
+        set -euo pipefail
+
+        curl -fsSL "https://raw.githubusercontent.com/AikidoSec/safe-chain/${{ inputs.safe-chain-version }}/install-scripts/install-safe-chain.sh" | sh -s -- --ci
@@ -1,71 +1,46 @@
-# Copilot Instructions for HardwareVisualizer
-
-## Overview
-
-HardwareVisualizer は、リアルタイムでコンピュータのハードウェアパフォーマンスを監視するツールです。このプロジェクトは、フロントエンド（TypeScript/React）とバックエンド（Rust/Tauri）で構成されています。以下のガイドラインは、AI コーディングエージェントがこのコードベースで効率的に作業するための指針を提供します。
-
-## プロジェクト構造
-
-- **`src/`**: フロントエンドの主要なコードが含まれています。
-  - `components/`: 再利用可能な UI コンポーネント。
-  - `features/`: 機能ごとのモジュール（例: hardware, menu, settings）。
-  - `hooks/`: React カスタムフック。
-  - `lib/`: ユーティリティ関数。
-  - `store/`: 状態管理関連のコード。
-  - `types/`: TypeScript 型定義。
-- **`src-tauri/`**: バックエンドの Rust コード。
-  - `src/`: Rust の主要なコード。
-  - `commands/`: フロントエンドと通信するための Tauri コマンド。
-  - `database/`: データベース関連のロジック。
-  - `services/`: サービス層のロジック。
-  - `utils/`: ユーティリティ関数。
-- **`test/`**: 単体テスト。
-- **`coverage/`**: テストカバレッジレポート。
-
-## 開発フロー
-
-### 必要なツール
-
-- Node.js v22
-- Rust 1.85
-
-### コマンド
-
-- **依存関係のインストール**:
-  ```bash
-  npm ci
-  ```
-- **開発モードでの起動**:
-  ```bash
-  npm run tauri dev
-  ```
-- **本番ビルド**:
-  ```bash
-  npm run tauri build
-  ```
-- **コードのリント**:
-  ```bash
-  npm run lint
-  ```
-- **コードのフォーマット**:
-  ```bash
-  npm run format
-  ```
-- **テストの実行**:
-  ```bash
-  npm run test:unit:unit-cov # フロントエンドの単体テスト
-  npm run test:tauri # Rust のテスト
-  ```
-
-## プロジェクト固有のパターン
-
-- **Tauri コマンド**: フロントエンドとバックエンド間の通信は、`src-tauri/src/commands/` 内のコマンドを使用して行われます。フロントエンドからは、自動生成された `rspc/bindings.ts` を通じて Tauri コマンドを呼び出します。
-- **ユーティリティ関数**: 再利用可能なロジックは `lib/` または `src-tauri/src/utils/` に配置されています。
-
-## 参考ファイル
-
-- `README.md`: プロジェクトの全体像とセットアップ手順。
-- `vite.config.ts`: フロントエンドのビルド設定。
-- `tauri.conf.json`: Tauri アプリケーションの設定。
-
-このガイドラインに基づいて作業を進めてください。不明点があれば、README.md やコードベースを参照してください。
+# HardwareVisualizer – Copilot Coding Agent Instructions
+
+## Big picture
+- Cross-platform hardware monitoring app (React/Vite + Tauri/Rust).
+- Frontend ↔ backend calls go through **Tauri commands**. `src/rspc/bindings.ts` is **generated by tauri-specta** (do not edit).
+- Rust backend follows strict one-way dependencies: **Commands → Services → Platform (Factory) → OS APIs** (see `docs/ARCHITECTURE/BACKEND_ARCHITECTURE.md`).
+
+## Where to change code
+- UI/features: `src/features/**` (e.g. `src/features/settings/hooks/useSettingsAtom.ts`). Shared UI lives in `src/components/ui/**` (shadcn/Radix).
+- State management uses **Jotai**: define with `atom(...)`, consume with `useAtom(...)` (e.g. `src/features/hardware/hooks/useHardwareInfoAtom.ts`).
+- Lightweight persisted UI settings: Tauri Store plugin.
+  - Store instance: `src/lib/tauriStore.ts`
+  - Hook: `src/hooks/useTauriStore.ts` (returns a union of `[value|null, setValue, isPending]`)
+
+## Backend/Frontend integration
+- Call commands via `import { commands } from "@/rspc/bindings"`.
+- Check `Result` with `isError(...)` (e.g. `src/features/hardware/hooks/useHardwareInfoAtom.ts`). On failure, notify via `useTauriDialog().error(...)`.
+- When adding a new backend command:
+  - Add code in `src-tauri/src/commands/*.rs` (UI boundary) → `src-tauri/src/services/*.rs` (business logic) → `src-tauri/src/platform/**` (OS-specific)
+  - If OS APIs / DB / external I/O are involved, also add/change `src-tauri/src/infrastructure/**` (e.g. `infrastructure/providers/**`, `infrastructure/database/**`)
+  - Register it in `collect_commands![ ... ]` inside `src-tauri/src/lib.rs` (this drives TS bindings generation)
+  - `src/rspc/bindings.ts` is exported from `src-tauri/src/lib.rs` in debug builds; regenerate via `npm run tauri dev`
+
+## Error/event conventions
+- Backend emits `error_event`; frontend shows a modal via `useErrorModalListener` (see `src/hooks/useTauriEventListener.ts`).
+
+## Dev workflows (repo-specific)
+- Prereqs: Node.js v22 (per README) + Rust (toolchain in `rust-toolchain.toml`).
+- Linux build deps: `libwebkit2gtk-4.1-dev libappindicator3-dev librsvg2-dev patchelf` (see CI/README). Some metrics require sudo.
+- Web UI only: `npm run dev` (React DevTools + Vite). Vite port is fixed to `1520` (`vite.config.ts`).
+- Desktop (Tauri): `npm run tauri dev`
+- Frontend lint/format: `npm run lint` / `npm run format` (Biome; primarily targets `./src`)
+- Frontend tests: `npm test` (Vitest; config in `vitest.config.ts` / setup in `src/test/setup.ts`)
+- Rust checks (CI parity):
+  - `cargo fmt --manifest-path src-tauri/Cargo.toml -- --check`
+  - `cargo clippy --manifest-path src-tauri/Cargo.toml -- -D warnings`
+  - `cargo test --manifest-path src-tauri/Cargo.toml -- --test-threads=1 --nocapture`
+
+## Project conventions
+- Import alias: `@` → `src` (`vite.config.ts` / `vitest.config.ts`).
+- i18n: `src/lib/i18n.ts` with `src/lang/en.json` and `src/lang/ja.json`. Add UI strings to JSON and reference via `useTranslation()` (e.g. `src/App.tsx`).
+- Avoid editing generated/vendor outputs: do not edit `src/rspc/bindings.ts`.
+
+## Communication
+- Write code comments and git commit messages in English.
+- In chat, match the language used in the user prompt.
@@ -8,29 +8,61 @@ updates:
   - package-ecosystem: "npm"
     directory: "/"
     schedule:
-      interval: "weekly"
-      day: "monday"
-      time: "07:00"
+      interval: "daily"
+      time: "08:30"
       timezone: "Asia/Tokyo"
     cooldown:
       default-days: 5
     open-pull-requests-limit: 40
     assignees:
       - "shm11C3"
 
+    groups:
+      default:
+        patterns:
+          - "*"
+        update-types:
+          - "patch"
+          - "minor"
+        exclude-patterns:
+          - "react*"
+          - "@types/react*"
+          - "typescript"
+      tauri:
+        patterns:
+          - "tauri"
+          - "@tauri-apps/*"
+      react:
+        patterns:
+          - "react"
+          - "react-dom"
+      biome:
+        patterns:
+          - "@biomejs/biome"
+
   - package-ecosystem: "cargo"
     directory: "/src-tauri"
     schedule:
       interval: "weekly"
       day: "monday"
-      time: "07:00"
+      time: "08:30"
       timezone: "Asia/Tokyo"
     cooldown:
       default-days: 5
     open-pull-requests-limit: 40
     assignees:
       - "shm11C3"
 
+  - package-ecosystem: "rust-toolchain"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+      day: "monday"
+      time: "08:30"
+      timezone: "Asia/Tokyo"
+    cooldown:
+      default-days: 5
+
   - package-ecosystem: "github-actions"
     directory: "/"
     schedule:
 
@@ -1,5 +1,11 @@
 import fs from "node:fs";
 
+type LicensesJsonEntry = {
+  licenses: string;
+};
+
+type LicensesJson = Record<string, LicensesJsonEntry>;
+
 const licensesFile = process.argv[2];
 if (!licensesFile) {
   console.error("Usage: ts-node check-licenses.ts <licenses.json>");
@@ -18,7 +24,9 @@ const allowedLicenses = new Set([
   "CC-BY-4.0",
 ]);
 
-const licenses = JSON.parse(fs.readFileSync(licensesFile, "utf-8"));
+const licenses: LicensesJson = JSON.parse(
+  fs.readFileSync(licensesFile, "utf-8"),
+);
 let errorCount = 0;
 
 const normalize = (
@@ -33,8 +41,8 @@ const normalize = (
   return { type: "SINGLE", values: [raw.trim()] };
 };
 
-for (const [pkg, info] of Object.entries<any>(licenses)) {
-  // 自身のチェックはスキップ
+for (const [pkg, info] of Object.entries(licenses)) {
+  // Skip checking itself
   if (pkg.split("@")[0] === "hardware-visualizer") {
     continue;
   }