huanld
2fb067ecbf
checklocks / checklocks (push) Has been cancelled
CodeQL / Analyze (go) (push) Has been cancelled
natlab-integrationtest / natlab-integrationtest (push) Has been cancelled
CI / gomod-cache (push) Has been cancelled
CI / race-root-integration (1/4) (push) Has been cancelled
CI / race-root-integration (2/4) (push) Has been cancelled
CI / race-root-integration (3/4) (push) Has been cancelled
CI / race-root-integration (4/4) (push) Has been cancelled
CI / test (-race, amd64, 1/3) (push) Has been cancelled
CI / test (-race, amd64, 2/3) (push) Has been cancelled
CI / test (-race, amd64, 3/3) (push) Has been cancelled
CI / test (386) (push) Has been cancelled
CI / test (amd64) (push) Has been cancelled
CI / Windows (benchmarks) (push) Has been cancelled
CI / Windows (1/2) (push) Has been cancelled
CI / Windows (2/2) (push) Has been cancelled
CI / macos (push) Has been cancelled
CI / privileged (push) Has been cancelled
CI / vm (push) Has been cancelled
CI / cross (386, linux) (push) Has been cancelled
CI / cross (amd64, darwin) (push) Has been cancelled
CI / cross (amd64, freebsd) (push) Has been cancelled
CI / cross (amd64, openbsd) (push) Has been cancelled
CI / cross (amd64, windows) (push) Has been cancelled
CI / cross (arm, 5, linux) (push) Has been cancelled
CI / cross (arm, 7, linux) (push) Has been cancelled
CI / cross (arm64, darwin) (push) Has been cancelled
CI / cross (arm64, linux) (push) Has been cancelled
CI / cross (arm64, windows) (push) Has been cancelled
CI / cross (loong64, linux) (push) Has been cancelled
CI / ios (push) Has been cancelled
CI / crossmin (amd64, illumos) (push) Has been cancelled
CI / crossmin (amd64, plan9) (push) Has been cancelled
CI / crossmin (amd64, solaris) (push) Has been cancelled
CI / crossmin (ppc64, aix) (push) Has been cancelled
CI / android (push) Has been cancelled
CI / wasm (push) Has been cancelled
CI / tailscale_go (push) Has been cancelled
CI / fuzz (push) Has been cancelled
CI / depaware (push) Has been cancelled
CI / go_generate (push) Has been cancelled
CI / make_tidy (push) Has been cancelled
CI / licenses (push) Has been cancelled
CI / staticcheck (macOS) (push) Has been cancelled
CI / staticcheck (Linux) (push) Has been cancelled
CI / staticcheck (Windows) (push) Has been cancelled
CI / staticcheck (Portable (1/4)) (push) Has been cancelled
CI / staticcheck (Portable (2/4)) (push) Has been cancelled
CI / staticcheck (Portable (3/4)) (push) Has been cancelled
CI / staticcheck (Portable (4/4)) (push) Has been cancelled
CI / notify_slack (push) Has been cancelled
CI / merge_blocker (push) Has been cancelled
CI / check_mergeability_strict (push) Has been cancelled
CI / check_mergeability (push) Has been cancelled
Dockerfile build / deploy (push) Has been cancelled
test installer.sh / test (curl, alpine:3.21) (push) Has been cancelled
test installer.sh / test (curl, alpine:edge) (push) Has been cancelled
test installer.sh / test (curl, alpine:latest) (push) Has been cancelled
test installer.sh / test (curl, amazonlinux:latest) (push) Has been cancelled
test installer.sh / test (curl, archlinux:latest) (push) Has been cancelled
test installer.sh / test (curl, debian:oldstable-slim) (push) Has been cancelled
test installer.sh / test (curl, debian:sid-slim) (push) Has been cancelled
test installer.sh / test (curl, debian:stable-slim, 1.80.0) (push) Has been cancelled
test installer.sh / test (curl, debian:testing-slim) (push) Has been cancelled
test installer.sh / test (curl, elementary/docker:stable) (push) Has been cancelled
test installer.sh / test (curl, elementary/docker:unstable) (push) Has been cancelled
test installer.sh / test (curl, fedora:latest, 1.80.0) (push) Has been cancelled
test installer.sh / test (curl, kalilinux/kali-dev) (push) Has been cancelled
test installer.sh / test (curl, kalilinux/kali-rolling) (push) Has been cancelled
test installer.sh / test (curl, opensuse/leap:latest) (push) Has been cancelled
test installer.sh / test (curl, opensuse/tumbleweed:latest) (push) Has been cancelled
test installer.sh / test (curl, oraclelinux:8) (push) Has been cancelled
test installer.sh / test (curl, oraclelinux:9) (push) Has been cancelled
test installer.sh / test (curl, parrotsec/core:latest) (push) Has been cancelled
test installer.sh / test (curl, rockylinux:8.7) (push) Has been cancelled
test installer.sh / test (curl, rockylinux:9) (push) Has been cancelled
test installer.sh / test (curl, ubuntu:20.04) (push) Has been cancelled
test installer.sh / test (curl, ubuntu:22.04) (push) Has been cancelled
test installer.sh / test (curl, ubuntu:24.04, 1.80.0) (push) Has been cancelled
test installer.sh / test (wget, debian:oldstable-slim) (push) Has been cancelled
test installer.sh / test (wget, debian:sid-slim) (push) Has been cancelled
update-flake / update-flake (push) Has been cancelled
tailscale.com/cmd/vet / vet (push) Has been cancelled
test installer.sh / notify-slack (push) Has been cancelled
Client security fixes (cmd/tailscale-tray/main.go): - SSRF protection in Add Server dialog (validateControlURL): reject private/loopback/link-local/cloud-metadata IPs via DNS resolution - RCE gate on AuthURL/BrowseToURL exec paths (validateAuthURL) - Sanitized URL logging (sanitizeURLForLog drops query auth tokens) - Error handling on exec.Command with user-facing showError() Admin panel security (web-admin): - Bcrypt password hashing (replaces SHA256) - Rate limiting: 5 failed logins → 15-min lockout - Session + login attempt cleanup goroutine (hourly) - url.QueryEscape / encodeURIComponent for all API params - Fail-hard startup when no TLS and non-loopback bind - ADMIN_PASSWORD required (no default), password min 12 chars - Username regex whitelist Installer hardening (Setup.wxs): - util:PermissionEx restricts SCM access: only Administrators + SYSTEM can start/stop/reconfigure service. Authenticated Users limited to QueryStatus/QueryConfig/Interrogate - Vital="yes" on ServiceInstall Docs & roadmap: - PRODUCTION_ROADMAP.md: 5-milestone plan (security + features + distribution + ops) with granular tasks, effort, done-when - CLIENT_SECURITY_AUDIT.md, SECURITY_FIXES.md, DEPLOYMENT.md - AI assistant rules (.cursorrules, .antigravityrules, etc.) Build & distribution: - build-msi.ps1, deploy-and-sign.ps1, sign-release.ps1 - redeploy.ps1, tray-deploy.ps1, test-msi.ps1 - installer/msi/ alternative WXS setup - Restored .github/workflows/ removed in mirror cleanup .gitignore hardened: *.pfx, *.p12, *.key, *.pem, .env*
87 lines
3.6 KiB
Plaintext
87 lines
3.6 KiB
Plaintext
# Antigravity Agent Kit — Windsurf Rules
|
|
|
|
> This workspace has an AI toolkit at `.agent/`. Read `.agent/ARCHITECTURE.md` first.
|
|
|
|
## System Overview
|
|
|
|
- **Agents** (`.agent/agents/*.md`): Specialist AI personas — read the matching agent file before responding
|
|
- **Skills** (`.agent/skills/*/SKILL.md`): Domain knowledge modules — read selectively based on task
|
|
- **Workflows** (`.agent/workflows/*.md`): Step-by-step procedures for slash commands
|
|
|
|
## Agent Routing (MANDATORY)
|
|
|
|
Before writing any code:
|
|
1. Identify the domain (Frontend, Backend, Security, etc.)
|
|
2. Read the matching agent file from `.agent/agents/`
|
|
3. Load skills listed in the agent's `skills:` frontmatter field
|
|
4. Apply agent rules when generating code
|
|
|
|
Quick reference:
|
|
- Web UI → `frontend-specialist.md` (skills: frontend-design, react-best-practices)
|
|
- API/Backend → `backend-specialist.md` (skills: api-patterns, nodejs-best-practices)
|
|
- Database → `database-architect.md` (skills: database-design)
|
|
- Mobile → `mobile-developer.md` (skills: mobile-design)
|
|
- Security → `security-auditor.md` (skills: vulnerability-scanner)
|
|
- Testing → `test-engineer.md` (skills: testing-patterns, webapp-testing)
|
|
- Debugging → `debugger.md` (skills: systematic-debugging)
|
|
- Planning → `project-planner.md` (skills: brainstorming, plan-writing)
|
|
- Complex/multi-domain → `orchestrator.md` (skills: parallel-agents)
|
|
|
|
## Skill Loading
|
|
|
|
Read `SKILL.md` inside the skill folder. Only read sections relevant to current task.
|
|
Global mandatory: `.agent/skills/clean-code/SKILL.md` — applies to ALL code.
|
|
|
|
Skill structure:
|
|
```
|
|
.agent/skills/{name}/
|
|
├── SKILL.md # Main instructions (read first)
|
|
├── scripts/ # Validation scripts (optional)
|
|
├── references/ # Templates (optional)
|
|
```
|
|
|
|
## Workflow Annotations
|
|
|
|
When reading `.agent/workflows/*.md`, recognize these markers:
|
|
- `$ARGUMENTS` — placeholder for user input after the slash command
|
|
- `// turbo` — next step can auto-execute without confirmation
|
|
- `// turbo-all` — all subsequent steps in this section can auto-execute
|
|
|
|
## Rules Priority
|
|
|
|
P0 (this file / GEMINI.md) > P1 (agent .md) > P2 (skill SKILL.md)
|
|
|
|
## Code Standards
|
|
|
|
- ALL code follows `clean-code` skill rules
|
|
- English for code/comments/variables; respond in user's language
|
|
- Check file dependencies before modifying; update all affected files together
|
|
|
|
## Paths
|
|
|
|
```
|
|
.agent/
|
|
├── ARCHITECTURE.md # READ FIRST
|
|
├── agents/ # 20 agents
|
|
├── skills/ # 38 skills
|
|
├── workflows/ # 16 workflows
|
|
├── rules/ # IDE instruction files
|
|
└── scripts/ # Validation scripts
|
|
```
|
|
|
|
## 🛡️ Auto-Protection (Always Active)
|
|
|
|
**Scout Block — NEVER read:** `node_modules/`, `.git/`, `dist/`, `build/`, `out/`, `bin/`, `obj/`, `packages/`, `.vs/`, `__pycache__/`, `.next/`, `vendor/`, `coverage/`
|
|
→ Use `package.json`/`*.csproj` for deps. Use `git` CLI for version control. Read source not outputs.
|
|
|
|
**Privacy — ASK before reading:** `.env`, `*.key`, `*.pem`, `*secret*`, `appsettings.*.json`, `Web.config`, `launchSettings.json`, `*.pfx`
|
|
→ Never echo passwords/API keys. Replace with `[REDACTED]`.
|
|
|
|
**Post-Edit** — After 5+ file edits, suggest complexity/duplication review.
|
|
|
|
**Context Efficiency** — Search before reading full files. Don't re-read files already seen. Read focused ranges (50-100 lines). Use `package.json`/`*.csproj`/`*.sln` for dep info.
|
|
|
|
**Naming** — C#: `PascalCase`. JS/TS: `kebab-case`. Components: `PascalCase`. Match existing project convention.
|
|
|
|
**Coding Level** — Default: Senior. Auto-detect from user signals. Beginner=explain, Expert=pure code zero explanation.
|