MidnightBSD

Run clang-format (prefer clang-format19), clang-tidy19, and cppcheck on staged C/C header changes before committing; auto-format then fail on serious diagnostics.

Run splint after cppcheck/clang-format/clang-tidy precommit sanity to find memory issues, API misuse, and contract violations in staged C code (tolerates older C parser limitations).

Run clang-format (prefer clang-format19), clang-tidy19, and cppcheck on staged C/C header changes before committing; auto-format then fail on serious diagnostics.

Run splint after cppcheck/clang-format/clang-tidy precommit sanity to find memory issues, API misuse, and contract violations in staged C code (tolerates older C parser limitations).

Import a new upstream release of third-party software into a MidnightBSD vendor branch and merge it into master (and optionally stable branches). Handles vendor branch naming, Xlist pruning, tagging, git subtree merge, FreeBSD patch refresh, and stable branch merges — with mandatory user approval before every push, merge, or commit.

Add an entry to the UPDATING file at the repository root. Use whenever there is a security fix, vendor/third-party software update, behavioral change requiring user action, new stable branch creation, or a release. The UPDATING commit must be separate from any code changes so it can be cleanly cherry-picked to other branches.

Create a new MidnightBSD mport by importing a FreeBSD port. Use when the user asks to port, import, or copy a FreeBSD port into mports (e.g. "port devel/foo from FreeBSD", "create a MidnightBSD port for editors/bar"). Prefers a local /usr/ports tree, falls back to the freebsd/freebsd-ports GitHub mirror, then adapts the port to MidnightBSD conventions (MAINTAINER, LICENSE naming, mport vs pkg, dependency compatibility) and validates the build.

Terminal synchronization bypass and failsafes for the antigravity IDE and antigravity CLI (agy). Use only in antigravity/agy environments to work around known bugs where terminal output hangs or a command's status gets stuck as RUNNING. Not applicable to Claude Code or Codex, which do not expose the run_command/WaitMsBeforeAsync/notify_user tools these rules depend on.

Diagnose and fix MidnightBSD mports build failures reported by Magus. Use when the user provides a Magus port ID, asks to fix a failed Magus run, asks to inspect Magus logs, or needs a port patch driven by Magus build output. Requires using the Magus MCP log tools and `analyze_build_log` as an independent hypothesis to evaluate against the raw log and local port tree.

Performs deep security audits on system-level C code and Makefiles.

Sync/migrate MidnightBSD GitHub Security Advisories into OSV YAML files in vulns/midnightbsd/. Use when the local advisory list is behind the GitHub advisories at github.com/MidnightBSD/src/security/advisories, or when asked to import/catch up/backfill MNBSD-YYYY-* advisories.