feat(config): validate clients and scope security

This commit is contained in:
2026-09-14 01:07:46 +02:00
parent 5b0c623a8d
commit a3cee2756c
17 changed files with 230 additions and 437 deletions
+8
View File
@@ -7,6 +7,14 @@ git.md rules-git Git operations such as commits, branches, or merges
microsoft.md rules-microsoft Microsoft 365, Azure DevOps, or Teams operations
refactoring.md rules-refactoring refactoring existing code without changing behavior
security.md rules-security any software development task: implementing, modifying, debugging, reviewing, testing, or configuring code, scripts, hooks, or infrastructure
security-auth.md rules-security-auth authentication, authorization, sessions, tokens, permissions, or tenant-boundary work
security-web.md rules-security-web web, browser, frontend, cookie, redirect, or XSS/CSRF work
security-api.md rules-security-api HTTP API, request handling, serialization, or endpoint work
security-data.md rules-security-data database, query, persistence, sensitive-data, or multi-tenant work
security-files.md rules-security-files file, upload, archive, path, process, IPC, or deserialization work
security-network.md rules-security-network network, URL fetch, proxy, outbound request, TLS, or SSRF work
security-crypto.md rules-security-crypto cryptography, secrets, credentials, key, or token work
security-supply-chain.md rules-security-supply-chain dependency, package, plugin, build, deployment, or CI supply-chain work
typescript.md rules-typescript TypeScript or modern ECMAScript implementation work
ui-ux.md rules-ui-ux UI or UX design and interaction decisions
wpf.md rules-wpf WPF, XAML, or MVVM desktop UI work
1 rule_file skill_name trigger
7 microsoft.md rules-microsoft Microsoft 365, Azure DevOps, or Teams operations
8 refactoring.md rules-refactoring refactoring existing code without changing behavior
9 security.md rules-security any software development task: implementing, modifying, debugging, reviewing, testing, or configuring code, scripts, hooks, or infrastructure
10 security-auth.md rules-security-auth authentication, authorization, sessions, tokens, permissions, or tenant-boundary work
11 security-web.md rules-security-web web, browser, frontend, cookie, redirect, or XSS/CSRF work
12 security-api.md rules-security-api HTTP API, request handling, serialization, or endpoint work
13 security-data.md rules-security-data database, query, persistence, sensitive-data, or multi-tenant work
14 security-files.md rules-security-files file, upload, archive, path, process, IPC, or deserialization work
15 security-network.md rules-security-network network, URL fetch, proxy, outbound request, TLS, or SSRF work
16 security-crypto.md rules-security-crypto cryptography, secrets, credentials, key, or token work
17 security-supply-chain.md rules-security-supply-chain dependency, package, plugin, build, deployment, or CI supply-chain work
18 typescript.md rules-typescript TypeScript or modern ECMAScript implementation work
19 ui-ux.md rules-ui-ux UI or UX design and interaction decisions
20 wpf.md rules-wpf WPF, XAML, or MVVM desktop UI work
+1
View File
@@ -8,6 +8,7 @@ status_line = ["model", "reasoning", "project-name", "git-branch", "context-wind
[agents]
enabled = true
max_concurrent_threads_per_session = 5
max_depth = 1
[features]
hooks = true