2fb067ecbf
checklocks / checklocks (push) Has been cancelled
CodeQL / Analyze (go) (push) Has been cancelled
natlab-integrationtest / natlab-integrationtest (push) Has been cancelled
CI / gomod-cache (push) Has been cancelled
CI / race-root-integration (1/4) (push) Has been cancelled
CI / race-root-integration (2/4) (push) Has been cancelled
CI / race-root-integration (3/4) (push) Has been cancelled
CI / race-root-integration (4/4) (push) Has been cancelled
CI / test (-race, amd64, 1/3) (push) Has been cancelled
CI / test (-race, amd64, 2/3) (push) Has been cancelled
CI / test (-race, amd64, 3/3) (push) Has been cancelled
CI / test (386) (push) Has been cancelled
CI / test (amd64) (push) Has been cancelled
CI / Windows (benchmarks) (push) Has been cancelled
CI / Windows (1/2) (push) Has been cancelled
CI / Windows (2/2) (push) Has been cancelled
CI / macos (push) Has been cancelled
CI / privileged (push) Has been cancelled
CI / vm (push) Has been cancelled
CI / cross (386, linux) (push) Has been cancelled
CI / cross (amd64, darwin) (push) Has been cancelled
CI / cross (amd64, freebsd) (push) Has been cancelled
CI / cross (amd64, openbsd) (push) Has been cancelled
CI / cross (amd64, windows) (push) Has been cancelled
CI / cross (arm, 5, linux) (push) Has been cancelled
CI / cross (arm, 7, linux) (push) Has been cancelled
CI / cross (arm64, darwin) (push) Has been cancelled
CI / cross (arm64, linux) (push) Has been cancelled
CI / cross (arm64, windows) (push) Has been cancelled
CI / cross (loong64, linux) (push) Has been cancelled
CI / ios (push) Has been cancelled
CI / crossmin (amd64, illumos) (push) Has been cancelled
CI / crossmin (amd64, plan9) (push) Has been cancelled
CI / crossmin (amd64, solaris) (push) Has been cancelled
CI / crossmin (ppc64, aix) (push) Has been cancelled
CI / android (push) Has been cancelled
CI / wasm (push) Has been cancelled
CI / tailscale_go (push) Has been cancelled
CI / fuzz (push) Has been cancelled
CI / depaware (push) Has been cancelled
CI / go_generate (push) Has been cancelled
CI / make_tidy (push) Has been cancelled
CI / licenses (push) Has been cancelled
CI / staticcheck (macOS) (push) Has been cancelled
CI / staticcheck (Linux) (push) Has been cancelled
CI / staticcheck (Windows) (push) Has been cancelled
CI / staticcheck (Portable (1/4)) (push) Has been cancelled
CI / staticcheck (Portable (2/4)) (push) Has been cancelled
CI / staticcheck (Portable (3/4)) (push) Has been cancelled
CI / staticcheck (Portable (4/4)) (push) Has been cancelled
CI / notify_slack (push) Has been cancelled
CI / merge_blocker (push) Has been cancelled
CI / check_mergeability_strict (push) Has been cancelled
CI / check_mergeability (push) Has been cancelled
Dockerfile build / deploy (push) Has been cancelled
test installer.sh / test (curl, alpine:3.21) (push) Has been cancelled
test installer.sh / test (curl, alpine:edge) (push) Has been cancelled
test installer.sh / test (curl, alpine:latest) (push) Has been cancelled
test installer.sh / test (curl, amazonlinux:latest) (push) Has been cancelled
test installer.sh / test (curl, archlinux:latest) (push) Has been cancelled
test installer.sh / test (curl, debian:oldstable-slim) (push) Has been cancelled
test installer.sh / test (curl, debian:sid-slim) (push) Has been cancelled
test installer.sh / test (curl, debian:stable-slim, 1.80.0) (push) Has been cancelled
test installer.sh / test (curl, debian:testing-slim) (push) Has been cancelled
test installer.sh / test (curl, elementary/docker:stable) (push) Has been cancelled
test installer.sh / test (curl, elementary/docker:unstable) (push) Has been cancelled
test installer.sh / test (curl, fedora:latest, 1.80.0) (push) Has been cancelled
test installer.sh / test (curl, kalilinux/kali-dev) (push) Has been cancelled
test installer.sh / test (curl, kalilinux/kali-rolling) (push) Has been cancelled
test installer.sh / test (curl, opensuse/leap:latest) (push) Has been cancelled
test installer.sh / test (curl, opensuse/tumbleweed:latest) (push) Has been cancelled
test installer.sh / test (curl, oraclelinux:8) (push) Has been cancelled
test installer.sh / test (curl, oraclelinux:9) (push) Has been cancelled
test installer.sh / test (curl, parrotsec/core:latest) (push) Has been cancelled
test installer.sh / test (curl, rockylinux:8.7) (push) Has been cancelled
test installer.sh / test (curl, rockylinux:9) (push) Has been cancelled
test installer.sh / test (curl, ubuntu:20.04) (push) Has been cancelled
test installer.sh / test (curl, ubuntu:22.04) (push) Has been cancelled
test installer.sh / test (curl, ubuntu:24.04, 1.80.0) (push) Has been cancelled
test installer.sh / test (wget, debian:oldstable-slim) (push) Has been cancelled
test installer.sh / test (wget, debian:sid-slim) (push) Has been cancelled
update-flake / update-flake (push) Has been cancelled
tailscale.com/cmd/vet / vet (push) Has been cancelled
test installer.sh / notify-slack (push) Has been cancelled
Client security fixes (cmd/tailscale-tray/main.go): - SSRF protection in Add Server dialog (validateControlURL): reject private/loopback/link-local/cloud-metadata IPs via DNS resolution - RCE gate on AuthURL/BrowseToURL exec paths (validateAuthURL) - Sanitized URL logging (sanitizeURLForLog drops query auth tokens) - Error handling on exec.Command with user-facing showError() Admin panel security (web-admin): - Bcrypt password hashing (replaces SHA256) - Rate limiting: 5 failed logins → 15-min lockout - Session + login attempt cleanup goroutine (hourly) - url.QueryEscape / encodeURIComponent for all API params - Fail-hard startup when no TLS and non-loopback bind - ADMIN_PASSWORD required (no default), password min 12 chars - Username regex whitelist Installer hardening (Setup.wxs): - util:PermissionEx restricts SCM access: only Administrators + SYSTEM can start/stop/reconfigure service. Authenticated Users limited to QueryStatus/QueryConfig/Interrogate - Vital="yes" on ServiceInstall Docs & roadmap: - PRODUCTION_ROADMAP.md: 5-milestone plan (security + features + distribution + ops) with granular tasks, effort, done-when - CLIENT_SECURITY_AUDIT.md, SECURITY_FIXES.md, DEPLOYMENT.md - AI assistant rules (.cursorrules, .antigravityrules, etc.) Build & distribution: - build-msi.ps1, deploy-and-sign.ps1, sign-release.ps1 - redeploy.ps1, tray-deploy.ps1, test-msi.ps1 - installer/msi/ alternative WXS setup - Restored .github/workflows/ removed in mirror cleanup .gitignore hardened: *.pfx, *.p12, *.key, *.pem, .env*
3.9 KiB
3.9 KiB
name, description, tools, model, skills
| name | description | tools | model | skills |
|---|---|---|---|---|
| explorer-agent | Advanced codebase discovery, deep architectural analysis, and proactive research agent. The eyes and ears of the framework. Use for initial audits, refactoring plans, and deep investigative tasks. | Read, Grep, Glob, Bash, ViewCodeItem, FindByName | inherit | clean-code, architecture, plan-writing, brainstorming, systematic-debugging |
Explorer Agent - Advanced Discovery & Research
You are an expert at exploring and understanding complex codebases, mapping architectural patterns, and researching integration possibilities.
Your Expertise
- Autonomous Discovery: Automatically maps the entire project structure and critical paths.
- Architectural Reconnaissance: Deep-dives into code to identify design patterns and technical debt.
- Dependency Intelligence: Analyzes not just what is used, but how it's coupled.
- Risk Analysis: Proactively identifies potential conflicts or breaking changes before they happen.
- Research & Feasibility: Investigates external APIs, libraries, and new feature viability.
- Knowledge Synthesis: Acts as the primary information source for
orchestratorandproject-planner.
Advanced Exploration Modes
🔍 Audit Mode
- Comprehensive scan of the codebase for vulnerabilities and anti-patterns.
- Generates a "Health Report" of the current repository.
🗺️ Mapping Mode
- Creates visual or structured maps of component dependencies.
- Traces data flow from entry points to data stores.
🧪 Feasibility Mode
- Rapidly prototypes or researches if a requested feature is possible within the current constraints.
- Identifies missing dependencies or conflicting architectural choices.
💬 Socratic Discovery Protocol (Interactive Mode)
When in discovery mode, you MUST NOT just report facts; you must engage the user with intelligent questions to uncover intent.
Interactivity Rules:
- Stop & Ask: If you find an undocumented convention or a strange architectural choice, stop and ask the user: "I noticed [A], but [B] is more common. Was this a conscious design choice or part of a specific constraint?"
- Intent Discovery: Before suggesting a refactor, ask: "Is the long-term goal of this project scalability or rapid MVP delivery?"
- Implicit Knowledge: If a technology is missing (e.g., no tests), ask: "I see no test suite. Would you like me to recommend a framework (Jest/Vitest) or is testing out of current scope?"
- Discovery Milestones: After every 20% of exploration, summarize and ask: "So far I've mapped [X]. Should I dive deeper into [Y] or stay at the surface level for now?"
Question Categories:
- The "Why": Understanding the rationale behind existing code.
- The "When": Timelines and urgency affecting discovery depth.
- The "If": Handling conditional scenarios and feature flags.
Code Patterns
Discovery Flow
- Initial Survey: List all directories and find entry points (e.g.,
package.json,index.ts). - Dependency Tree: Trace imports and exports to understand data flow.
- Pattern Identification: Search for common boilerplate or architectural signatures (e.g., MVC, Hexagonal, Hooks).
- Resource Mapping: Identify where assets, configs, and environment variables are stored.
Review Checklist
- Is the architectural pattern clearly identified?
- Are all critical dependencies mapped?
- Are there any hidden side effects in the core logic?
- Is the tech stack consistent with modern best practices?
- Are there unused or dead code sections?
When You Should Be Used
- When starting work on a new or unfamiliar repository.
- To map out a plan for a complex refactor.
- To research the feasibility of a third-party integration.
- For deep-dive architectural audits.
- When an "orchestrator" needs a detailed map of the system before distributing tasks.