From b383679269413afe7556d52982b415818b8f9f7b Mon Sep 17 00:00:00 2001 From: Cursor Agent Date: Wed, 15 Apr 2026 14:48:19 +0000 Subject: [PATCH 1/2] Add AGENTS.md with Cursor Cloud development instructions Co-authored-by: Ibrahim Rahhal --- AGENTS.md | 20 ++++++++++++++++++++ 1 file changed, 20 insertions(+) create mode 100644 AGENTS.md diff --git a/AGENTS.md b/AGENTS.md new file mode 100644 index 0000000..8b7efb5 --- /dev/null +++ b/AGENTS.md @@ -0,0 +1,20 @@ +# AGENTS.md + +## Cursor Cloud specific instructions + +### Overview +Corgea CLI is a Rust-based command-line security scanning tool. It communicates with the Corgea SaaS platform (`https://www.corgea.app`) via REST API. There are no local databases or services to run — the CLI is a stateless client. + +### Development commands +- **Build**: `cargo build` +- **Test**: `cargo test` (7 unit tests in `src/authorize.rs`) +- **Lint**: `cargo clippy` (warnings only, no errors expected) +- **Dev install** (Python wrapper): `source .venv/bin/activate && maturin develop` — builds the Rust binary and installs it as a Python package, making `corgea` available on PATH within the venv +- **Run directly**: `./target/debug/corgea` after `cargo build` + +### Key caveats +- The Rust toolchain must be **stable latest** (>=1.85). The default VM ships with 1.83 which is too old for the `time-core` crate's `edition2024` feature. The update script handles `rustup default stable`. +- `python3.12-venv` system package is required for creating the `.venv` used by maturin. +- The CLI requires a `CORGEA_TOKEN` (or `corgea login `) to interact with the Corgea API. Without it, commands like `corgea scan`, `corgea list`, etc. return 401. This is expected behavior — the CLI itself is still fully functional. +- Config is stored at `~/.corgea/config.toml`. +- Set `CORGEA_DEBUG=1` for verbose debug logging. From 176bfc1bb956c97a56c9f297310c29cfb12838a5 Mon Sep 17 00:00:00 2001 From: Cursor Agent Date: Wed, 15 Apr 2026 14:57:53 +0000 Subject: [PATCH 2/2] Update AGENTS.md: add debug config persistence caveat Co-authored-by: Ibrahim Rahhal --- AGENTS.md | 1 + 1 file changed, 1 insertion(+) diff --git a/AGENTS.md b/AGENTS.md index 8b7efb5..44dd5bf 100644 --- a/AGENTS.md +++ b/AGENTS.md @@ -16,5 +16,6 @@ Corgea CLI is a Rust-based command-line security scanning tool. It communicates - The Rust toolchain must be **stable latest** (>=1.85). The default VM ships with 1.83 which is too old for the `time-core` crate's `edition2024` feature. The update script handles `rustup default stable`. - `python3.12-venv` system package is required for creating the `.venv` used by maturin. - The CLI requires a `CORGEA_TOKEN` (or `corgea login `) to interact with the Corgea API. Without it, commands like `corgea scan`, `corgea list`, etc. return 401. This is expected behavior — the CLI itself is still fully functional. +- `corgea login ` with `CORGEA_DEBUG=1` persists `debug = 1` into `~/.corgea/config.toml`. If you see debug output unexpectedly, edit that file and set `debug = 0`. - Config is stored at `~/.corgea/config.toml`. - Set `CORGEA_DEBUG=1` for verbose debug logging.