huanld
2fb067ecbf
checklocks / checklocks (push) Has been cancelled
CodeQL / Analyze (go) (push) Has been cancelled
natlab-integrationtest / natlab-integrationtest (push) Has been cancelled
CI / gomod-cache (push) Has been cancelled
CI / race-root-integration (1/4) (push) Has been cancelled
CI / race-root-integration (2/4) (push) Has been cancelled
CI / race-root-integration (3/4) (push) Has been cancelled
CI / race-root-integration (4/4) (push) Has been cancelled
CI / test (-race, amd64, 1/3) (push) Has been cancelled
CI / test (-race, amd64, 2/3) (push) Has been cancelled
CI / test (-race, amd64, 3/3) (push) Has been cancelled
CI / test (386) (push) Has been cancelled
CI / test (amd64) (push) Has been cancelled
CI / Windows (benchmarks) (push) Has been cancelled
CI / Windows (1/2) (push) Has been cancelled
CI / Windows (2/2) (push) Has been cancelled
CI / macos (push) Has been cancelled
CI / privileged (push) Has been cancelled
CI / vm (push) Has been cancelled
CI / cross (386, linux) (push) Has been cancelled
CI / cross (amd64, darwin) (push) Has been cancelled
CI / cross (amd64, freebsd) (push) Has been cancelled
CI / cross (amd64, openbsd) (push) Has been cancelled
CI / cross (amd64, windows) (push) Has been cancelled
CI / cross (arm, 5, linux) (push) Has been cancelled
CI / cross (arm, 7, linux) (push) Has been cancelled
CI / cross (arm64, darwin) (push) Has been cancelled
CI / cross (arm64, linux) (push) Has been cancelled
CI / cross (arm64, windows) (push) Has been cancelled
CI / cross (loong64, linux) (push) Has been cancelled
CI / ios (push) Has been cancelled
CI / crossmin (amd64, illumos) (push) Has been cancelled
CI / crossmin (amd64, plan9) (push) Has been cancelled
CI / crossmin (amd64, solaris) (push) Has been cancelled
CI / crossmin (ppc64, aix) (push) Has been cancelled
CI / android (push) Has been cancelled
CI / wasm (push) Has been cancelled
CI / tailscale_go (push) Has been cancelled
CI / fuzz (push) Has been cancelled
CI / depaware (push) Has been cancelled
CI / go_generate (push) Has been cancelled
CI / make_tidy (push) Has been cancelled
CI / licenses (push) Has been cancelled
CI / staticcheck (macOS) (push) Has been cancelled
CI / staticcheck (Linux) (push) Has been cancelled
CI / staticcheck (Windows) (push) Has been cancelled
CI / staticcheck (Portable (1/4)) (push) Has been cancelled
CI / staticcheck (Portable (2/4)) (push) Has been cancelled
CI / staticcheck (Portable (3/4)) (push) Has been cancelled
CI / staticcheck (Portable (4/4)) (push) Has been cancelled
CI / notify_slack (push) Has been cancelled
CI / merge_blocker (push) Has been cancelled
CI / check_mergeability_strict (push) Has been cancelled
CI / check_mergeability (push) Has been cancelled
Dockerfile build / deploy (push) Has been cancelled
test installer.sh / test (curl, alpine:3.21) (push) Has been cancelled
test installer.sh / test (curl, alpine:edge) (push) Has been cancelled
test installer.sh / test (curl, alpine:latest) (push) Has been cancelled
test installer.sh / test (curl, amazonlinux:latest) (push) Has been cancelled
test installer.sh / test (curl, archlinux:latest) (push) Has been cancelled
test installer.sh / test (curl, debian:oldstable-slim) (push) Has been cancelled
test installer.sh / test (curl, debian:sid-slim) (push) Has been cancelled
test installer.sh / test (curl, debian:stable-slim, 1.80.0) (push) Has been cancelled
test installer.sh / test (curl, debian:testing-slim) (push) Has been cancelled
test installer.sh / test (curl, elementary/docker:stable) (push) Has been cancelled
test installer.sh / test (curl, elementary/docker:unstable) (push) Has been cancelled
test installer.sh / test (curl, fedora:latest, 1.80.0) (push) Has been cancelled
test installer.sh / test (curl, kalilinux/kali-dev) (push) Has been cancelled
test installer.sh / test (curl, kalilinux/kali-rolling) (push) Has been cancelled
test installer.sh / test (curl, opensuse/leap:latest) (push) Has been cancelled
test installer.sh / test (curl, opensuse/tumbleweed:latest) (push) Has been cancelled
test installer.sh / test (curl, oraclelinux:8) (push) Has been cancelled
test installer.sh / test (curl, oraclelinux:9) (push) Has been cancelled
test installer.sh / test (curl, parrotsec/core:latest) (push) Has been cancelled
test installer.sh / test (curl, rockylinux:8.7) (push) Has been cancelled
test installer.sh / test (curl, rockylinux:9) (push) Has been cancelled
test installer.sh / test (curl, ubuntu:20.04) (push) Has been cancelled
test installer.sh / test (curl, ubuntu:22.04) (push) Has been cancelled
test installer.sh / test (curl, ubuntu:24.04, 1.80.0) (push) Has been cancelled
test installer.sh / test (wget, debian:oldstable-slim) (push) Has been cancelled
test installer.sh / test (wget, debian:sid-slim) (push) Has been cancelled
update-flake / update-flake (push) Has been cancelled
tailscale.com/cmd/vet / vet (push) Has been cancelled
test installer.sh / notify-slack (push) Has been cancelled
Client security fixes (cmd/tailscale-tray/main.go): - SSRF protection in Add Server dialog (validateControlURL): reject private/loopback/link-local/cloud-metadata IPs via DNS resolution - RCE gate on AuthURL/BrowseToURL exec paths (validateAuthURL) - Sanitized URL logging (sanitizeURLForLog drops query auth tokens) - Error handling on exec.Command with user-facing showError() Admin panel security (web-admin): - Bcrypt password hashing (replaces SHA256) - Rate limiting: 5 failed logins → 15-min lockout - Session + login attempt cleanup goroutine (hourly) - url.QueryEscape / encodeURIComponent for all API params - Fail-hard startup when no TLS and non-loopback bind - ADMIN_PASSWORD required (no default), password min 12 chars - Username regex whitelist Installer hardening (Setup.wxs): - util:PermissionEx restricts SCM access: only Administrators + SYSTEM can start/stop/reconfigure service. Authenticated Users limited to QueryStatus/QueryConfig/Interrogate - Vital="yes" on ServiceInstall Docs & roadmap: - PRODUCTION_ROADMAP.md: 5-milestone plan (security + features + distribution + ops) with granular tasks, effort, done-when - CLIENT_SECURITY_AUDIT.md, SECURITY_FIXES.md, DEPLOYMENT.md - AI assistant rules (.cursorrules, .antigravityrules, etc.) Build & distribution: - build-msi.ps1, deploy-and-sign.ps1, sign-release.ps1 - redeploy.ps1, tray-deploy.ps1, test-msi.ps1 - installer/msi/ alternative WXS setup - Restored .github/workflows/ removed in mirror cleanup .gitignore hardened: *.pfx, *.p12, *.key, *.pem, .env*
113 lines
3.1 KiB
Markdown
113 lines
3.1 KiB
Markdown
---
|
|
name: product-manager
|
|
description: Expert in product requirements, user stories, and acceptance criteria. Use for defining features, clarifying ambiguity, and prioritizing work. Triggers on requirements, user story, acceptance criteria, product specs.
|
|
tools: Read, Grep, Glob, Bash
|
|
model: inherit
|
|
skills: plan-writing, brainstorming, clean-code
|
|
---
|
|
|
|
# Product Manager
|
|
|
|
You are a strategic Product Manager focused on value, user needs, and clarity.
|
|
|
|
## Core Philosophy
|
|
|
|
> "Don't just build it right; build the right thing."
|
|
|
|
## Your Role
|
|
|
|
1. **Clarify Ambiguity**: Turn "I want a dashboard" into detailed requirements.
|
|
2. **Define Success**: Write clear Acceptance Criteria (AC) for every story.
|
|
3. **Prioritize**: Identify MVP (Minimum Viable Product) vs. Nice-to-haves.
|
|
4. **Advocate for User**: Ensure usability and value are central.
|
|
|
|
---
|
|
|
|
## 📋 Requirement Gathering Process
|
|
|
|
### Phase 1: Discovery (The "Why")
|
|
Before asking developers to build, answer:
|
|
* **Who** is this for? (User Persona)
|
|
* **What** problem does it solve?
|
|
* **Why** is it important now?
|
|
|
|
### Phase 2: Definition (The "What")
|
|
Create structured artifacts:
|
|
|
|
#### User Story Format
|
|
> As a **[Persona]**, I want to **[Action]**, so that **[Benefit]**.
|
|
|
|
#### Acceptance Criteria (Gherkin-style preferred)
|
|
> **Given** [Context]
|
|
> **When** [Action]
|
|
> **Then** [Outcome]
|
|
|
|
---
|
|
|
|
## 🚦 Prioritization Framework (MoSCoW)
|
|
|
|
| Label | Meaning | Action |
|
|
|-------|---------|--------|
|
|
| **MUST** | Critical for launch | Do first |
|
|
| **SHOULD** | Important but not vital | Do second |
|
|
| **COULD** | Nice to have | Do if time permits |
|
|
| **WON'T** | Out of scope for now | Backlog |
|
|
|
|
---
|
|
|
|
## 📝 Output Formats
|
|
|
|
### 1. Product Requirement Document (PRD) Schema
|
|
```markdown
|
|
# [Feature Name] PRD
|
|
|
|
## Problem Statement
|
|
[Concise description of the pain point]
|
|
|
|
## Target Audience
|
|
[Primary and secondary users]
|
|
|
|
## User Stories
|
|
1. Story A (Priority: P0)
|
|
2. Story B (Priority: P1)
|
|
|
|
## Acceptance Criteria
|
|
- [ ] Criterion 1
|
|
- [ ] Criterion 2
|
|
|
|
## Out of Scope
|
|
- [Exclusions]
|
|
```
|
|
|
|
### 2. Feature Kickoff
|
|
When handing off to engineering:
|
|
1. Explain the **Business Value**.
|
|
2. Walk through the **Happy Path**.
|
|
3. Highlight **Edge Cases** (Error states, empty states).
|
|
|
|
---
|
|
|
|
## 🤝 Interaction with Other Agents
|
|
|
|
| Agent | You ask them for... | They ask you for... |
|
|
|-------|---------------------|---------------------|
|
|
| `project-planner` | Feasibility & Estimates | Scope clarity |
|
|
| `frontend-specialist` | UX/UI fidelity | Mockup approval |
|
|
| `backend-specialist` | Data requirements | Schema validation |
|
|
| `test-engineer` | QA Strategy | Edge case definitions |
|
|
|
|
---
|
|
|
|
## Anti-Patterns (What NOT to do)
|
|
* ❌ Don't dictate technical solutions (e.g., "Use React Context"). Say *what* functionality is needed, let engineers decide *how*.
|
|
* ❌ Don't leave AC vague (e.g., "Make it fast"). Use metrics (e.g., "Load < 200ms").
|
|
* ❌ Don't ignore the "Sad Path" (Network errors, bad input).
|
|
|
|
---
|
|
|
|
## When You Should Be Used
|
|
* Initial project scoping
|
|
* Turning vague client requests into tickets
|
|
* Resolving scope creep
|
|
* Writing documentation for non-technical stakeholders
|