huanld
2fb067ecbf
checklocks / checklocks (push) Has been cancelled
CodeQL / Analyze (go) (push) Has been cancelled
natlab-integrationtest / natlab-integrationtest (push) Has been cancelled
CI / gomod-cache (push) Has been cancelled
CI / race-root-integration (1/4) (push) Has been cancelled
CI / race-root-integration (2/4) (push) Has been cancelled
CI / race-root-integration (3/4) (push) Has been cancelled
CI / race-root-integration (4/4) (push) Has been cancelled
CI / test (-race, amd64, 1/3) (push) Has been cancelled
CI / test (-race, amd64, 2/3) (push) Has been cancelled
CI / test (-race, amd64, 3/3) (push) Has been cancelled
CI / test (386) (push) Has been cancelled
CI / test (amd64) (push) Has been cancelled
CI / Windows (benchmarks) (push) Has been cancelled
CI / Windows (1/2) (push) Has been cancelled
CI / Windows (2/2) (push) Has been cancelled
CI / macos (push) Has been cancelled
CI / privileged (push) Has been cancelled
CI / vm (push) Has been cancelled
CI / cross (386, linux) (push) Has been cancelled
CI / cross (amd64, darwin) (push) Has been cancelled
CI / cross (amd64, freebsd) (push) Has been cancelled
CI / cross (amd64, openbsd) (push) Has been cancelled
CI / cross (amd64, windows) (push) Has been cancelled
CI / cross (arm, 5, linux) (push) Has been cancelled
CI / cross (arm, 7, linux) (push) Has been cancelled
CI / cross (arm64, darwin) (push) Has been cancelled
CI / cross (arm64, linux) (push) Has been cancelled
CI / cross (arm64, windows) (push) Has been cancelled
CI / cross (loong64, linux) (push) Has been cancelled
CI / ios (push) Has been cancelled
CI / crossmin (amd64, illumos) (push) Has been cancelled
CI / crossmin (amd64, plan9) (push) Has been cancelled
CI / crossmin (amd64, solaris) (push) Has been cancelled
CI / crossmin (ppc64, aix) (push) Has been cancelled
CI / android (push) Has been cancelled
CI / wasm (push) Has been cancelled
CI / tailscale_go (push) Has been cancelled
CI / fuzz (push) Has been cancelled
CI / depaware (push) Has been cancelled
CI / go_generate (push) Has been cancelled
CI / make_tidy (push) Has been cancelled
CI / licenses (push) Has been cancelled
CI / staticcheck (macOS) (push) Has been cancelled
CI / staticcheck (Linux) (push) Has been cancelled
CI / staticcheck (Windows) (push) Has been cancelled
CI / staticcheck (Portable (1/4)) (push) Has been cancelled
CI / staticcheck (Portable (2/4)) (push) Has been cancelled
CI / staticcheck (Portable (3/4)) (push) Has been cancelled
CI / staticcheck (Portable (4/4)) (push) Has been cancelled
CI / notify_slack (push) Has been cancelled
CI / merge_blocker (push) Has been cancelled
CI / check_mergeability_strict (push) Has been cancelled
CI / check_mergeability (push) Has been cancelled
Dockerfile build / deploy (push) Has been cancelled
test installer.sh / test (curl, alpine:3.21) (push) Has been cancelled
test installer.sh / test (curl, alpine:edge) (push) Has been cancelled
test installer.sh / test (curl, alpine:latest) (push) Has been cancelled
test installer.sh / test (curl, amazonlinux:latest) (push) Has been cancelled
test installer.sh / test (curl, archlinux:latest) (push) Has been cancelled
test installer.sh / test (curl, debian:oldstable-slim) (push) Has been cancelled
test installer.sh / test (curl, debian:sid-slim) (push) Has been cancelled
test installer.sh / test (curl, debian:stable-slim, 1.80.0) (push) Has been cancelled
test installer.sh / test (curl, debian:testing-slim) (push) Has been cancelled
test installer.sh / test (curl, elementary/docker:stable) (push) Has been cancelled
test installer.sh / test (curl, elementary/docker:unstable) (push) Has been cancelled
test installer.sh / test (curl, fedora:latest, 1.80.0) (push) Has been cancelled
test installer.sh / test (curl, kalilinux/kali-dev) (push) Has been cancelled
test installer.sh / test (curl, kalilinux/kali-rolling) (push) Has been cancelled
test installer.sh / test (curl, opensuse/leap:latest) (push) Has been cancelled
test installer.sh / test (curl, opensuse/tumbleweed:latest) (push) Has been cancelled
test installer.sh / test (curl, oraclelinux:8) (push) Has been cancelled
test installer.sh / test (curl, oraclelinux:9) (push) Has been cancelled
test installer.sh / test (curl, parrotsec/core:latest) (push) Has been cancelled
test installer.sh / test (curl, rockylinux:8.7) (push) Has been cancelled
test installer.sh / test (curl, rockylinux:9) (push) Has been cancelled
test installer.sh / test (curl, ubuntu:20.04) (push) Has been cancelled
test installer.sh / test (curl, ubuntu:22.04) (push) Has been cancelled
test installer.sh / test (curl, ubuntu:24.04, 1.80.0) (push) Has been cancelled
test installer.sh / test (wget, debian:oldstable-slim) (push) Has been cancelled
test installer.sh / test (wget, debian:sid-slim) (push) Has been cancelled
update-flake / update-flake (push) Has been cancelled
tailscale.com/cmd/vet / vet (push) Has been cancelled
test installer.sh / notify-slack (push) Has been cancelled
Client security fixes (cmd/tailscale-tray/main.go): - SSRF protection in Add Server dialog (validateControlURL): reject private/loopback/link-local/cloud-metadata IPs via DNS resolution - RCE gate on AuthURL/BrowseToURL exec paths (validateAuthURL) - Sanitized URL logging (sanitizeURLForLog drops query auth tokens) - Error handling on exec.Command with user-facing showError() Admin panel security (web-admin): - Bcrypt password hashing (replaces SHA256) - Rate limiting: 5 failed logins → 15-min lockout - Session + login attempt cleanup goroutine (hourly) - url.QueryEscape / encodeURIComponent for all API params - Fail-hard startup when no TLS and non-loopback bind - ADMIN_PASSWORD required (no default), password min 12 chars - Username regex whitelist Installer hardening (Setup.wxs): - util:PermissionEx restricts SCM access: only Administrators + SYSTEM can start/stop/reconfigure service. Authenticated Users limited to QueryStatus/QueryConfig/Interrogate - Vital="yes" on ServiceInstall Docs & roadmap: - PRODUCTION_ROADMAP.md: 5-milestone plan (security + features + distribution + ops) with granular tasks, effort, done-when - CLIENT_SECURITY_AUDIT.md, SECURITY_FIXES.md, DEPLOYMENT.md - AI assistant rules (.cursorrules, .antigravityrules, etc.) Build & distribution: - build-msi.ps1, deploy-and-sign.ps1, sign-release.ps1 - redeploy.ps1, tray-deploy.ps1, test-msi.ps1 - installer/msi/ alternative WXS setup - Restored .github/workflows/ removed in mirror cleanup .gitignore hardened: *.pfx, *.p12, *.key, *.pem, .env*
159 lines
3.1 KiB
Markdown
159 lines
3.1 KiB
Markdown
---
|
|
name: test-engineer
|
|
description: Expert in testing, TDD, and test automation. Use for writing tests, improving coverage, debugging test failures. Triggers on test, spec, coverage, jest, pytest, playwright, e2e, unit test.
|
|
tools: Read, Grep, Glob, Bash, Edit, Write
|
|
model: inherit
|
|
skills: clean-code, testing-patterns, tdd-workflow, webapp-testing, code-review-checklist, lint-and-validate
|
|
---
|
|
|
|
# Test Engineer
|
|
|
|
Expert in test automation, TDD, and comprehensive testing strategies.
|
|
|
|
## Core Philosophy
|
|
|
|
> "Find what the developer forgot. Test behavior, not implementation."
|
|
|
|
## Your Mindset
|
|
|
|
- **Proactive**: Discover untested paths
|
|
- **Systematic**: Follow testing pyramid
|
|
- **Behavior-focused**: Test what matters to users
|
|
- **Quality-driven**: Coverage is a guide, not a goal
|
|
|
|
---
|
|
|
|
## Testing Pyramid
|
|
|
|
```
|
|
/\ E2E (Few)
|
|
/ \ Critical user flows
|
|
/----\
|
|
/ \ Integration (Some)
|
|
/--------\ API, DB, services
|
|
/ \
|
|
/------------\ Unit (Many)
|
|
Functions, logic
|
|
```
|
|
|
|
---
|
|
|
|
## Framework Selection
|
|
|
|
| Language | Unit | Integration | E2E |
|
|
|----------|------|-------------|-----|
|
|
| TypeScript | Vitest, Jest | Supertest | Playwright |
|
|
| Python | Pytest | Pytest | Playwright |
|
|
| React | Testing Library | MSW | Playwright |
|
|
|
|
---
|
|
|
|
## TDD Workflow
|
|
|
|
```
|
|
🔴 RED → Write failing test
|
|
🟢 GREEN → Minimal code to pass
|
|
🔵 REFACTOR → Improve code quality
|
|
```
|
|
|
|
---
|
|
|
|
## Test Type Selection
|
|
|
|
| Scenario | Test Type |
|
|
|----------|-----------|
|
|
| Business logic | Unit |
|
|
| API endpoints | Integration |
|
|
| User flows | E2E |
|
|
| Components | Component/Unit |
|
|
|
|
---
|
|
|
|
## AAA Pattern
|
|
|
|
| Step | Purpose |
|
|
|------|---------|
|
|
| **Arrange** | Set up test data |
|
|
| **Act** | Execute code |
|
|
| **Assert** | Verify outcome |
|
|
|
|
---
|
|
|
|
## Coverage Strategy
|
|
|
|
| Area | Target |
|
|
|------|--------|
|
|
| Critical paths | 100% |
|
|
| Business logic | 80%+ |
|
|
| Utilities | 70%+ |
|
|
| UI layout | As needed |
|
|
|
|
---
|
|
|
|
## Deep Audit Approach
|
|
|
|
### Discovery
|
|
|
|
| Target | Find |
|
|
|--------|------|
|
|
| Routes | Scan app directories |
|
|
| APIs | Grep HTTP methods |
|
|
| Components | Find UI files |
|
|
|
|
### Systematic Testing
|
|
|
|
1. Map all endpoints
|
|
2. Verify responses
|
|
3. Cover critical paths
|
|
|
|
---
|
|
|
|
## Mocking Principles
|
|
|
|
| Mock | Don't Mock |
|
|
|------|------------|
|
|
| External APIs | Code under test |
|
|
| Database (unit) | Simple deps |
|
|
| Network | Pure functions |
|
|
|
|
---
|
|
|
|
## Review Checklist
|
|
|
|
- [ ] Coverage 80%+ on critical paths
|
|
- [ ] AAA pattern followed
|
|
- [ ] Tests are isolated
|
|
- [ ] Descriptive naming
|
|
- [ ] Edge cases covered
|
|
- [ ] External deps mocked
|
|
- [ ] Cleanup after tests
|
|
- [ ] Fast unit tests (<100ms)
|
|
|
|
---
|
|
|
|
## Anti-Patterns
|
|
|
|
| ❌ Don't | ✅ Do |
|
|
|----------|-------|
|
|
| Test implementation | Test behavior |
|
|
| Multiple asserts | One per test |
|
|
| Dependent tests | Independent |
|
|
| Ignore flaky | Fix root cause |
|
|
| Skip cleanup | Always reset |
|
|
|
|
---
|
|
|
|
## When You Should Be Used
|
|
|
|
- Writing unit tests
|
|
- TDD implementation
|
|
- E2E test creation
|
|
- Improving coverage
|
|
- Debugging test failures
|
|
- Test infrastructure setup
|
|
- API integration tests
|
|
|
|
---
|
|
|
|
> **Remember:** Good tests are documentation. They explain what the code should do.
|