Create copilot-setup-steps.yml with firewall configuration for blocked domains

[Copilot]

This PR implements a copilot-setup-steps.yml configuration file to customize the GitHub Copilot coding agent environment for the TaskFlow project, following the recommendations from the GitHub documentation.

Key Features

The configuration file includes:

• Complete environment setup steps for the Next.js 14 + Prisma + TypeScript stack
• Firewall bypass configuration documenting blocked domains that need allowlisting
• Error handling with continue_on_error flags for blocked resources
• Project context and coding conventions to guide Copilot's code generation
• Workaround documentation for offline development scenarios

Blocked URLs Identified

During testing, the following critical URLs were found to be blocked by the firewall:

• binaries.prisma.sh - Required for Prisma binary downloads (schema-engine, query-engine)
• fonts.googleapis.com - Required for Google Fonts API (Inter, Poppins fonts)
• fonts.gstatic.com - Required for Google Fonts static assets

These blocks cause failures in:

1. Prisma client generation: "getaddrinfo ENOTFOUND binaries.prisma.sh"
2. Next.js build process: "getaddrinfo ENOTFOUND fonts.googleapis.com"
3. Font loading for the application's UI components

Implementation Details

The copilot-setup-steps.yml file follows GitHub's firewall bypass documentation and includes:

firewall_bypass:
  allowed_domains:
    - "binaries.prisma.sh"     # Required for Prisma binary downloads
    - "fonts.googleapis.com"   # Required for Google Fonts API
    - "fonts.gstatic.com"      # Required for Google Fonts static assets
    - "registry.npmjs.org"     # Required for npm package downloads
    - "nextjs.org"             # Required for Next.js telemetry

The setup steps are designed to gracefully handle blocked resources while still providing a functional development environment for the GitHub Copilot agent.

Fixes #9.

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

• binaries.prisma.sh
  • Triggering command: node /home/REDACTED/work/taskflow/taskflow/node_modules/.bin/prisma -v (dns block)
  • Triggering command: node scripts/postinstall.js (dns block)
  • Triggering command: node /home/REDACTED/work/taskflow/taskflow/node_modules/.bin/prisma db push (dns block)
• checkpoint.prisma.io
  • Triggering command: /usr/local/bin/node /home/REDACTED/work/taskflow/taskflow/node_modules/prisma/build/child {"product":"prisma","version":"6.13.0","cli_install_type":"local","information":"","local_timestamp":"2025-08-19T05:33:40Z","project_hash":"cbb74e2f","cli_path":"/home/REDACTED/work/taskflow/taskflow/node_modules/.bin/prisma","cli_path_hash":"ca93a627","endpoint":"REDACTED","disable":false,"arch":"x64","os":"linux","node_version":"v20.19.4","ci":true,"ci_name":"GitHub Actions","command":"db push","schema_providers":["sqlite"],"schema_preview_features":[],"schema_generators_providers":["prisma-client-js"],"cache_file":"/home/REDACTED/.cache/checkpoint-nodejs/prisma-ca93a627","cache_duration":43200000,"remind_duration":172800000,"force":false,"timeout":5000,"unref":true,"child_path":"/home/REDACTED/work/taskflow/taskflow/node_modules/prisma/build/child","client_event_id":"","previous_client_event_id":"","check_if_update_available":true} (dns block)
  • Triggering command: /usr/local/bin/node /home/REDACTED/work/taskflow/taskflow/node_modules/prisma/build/child {"product":"prisma","version":"6.13.0","cli_install_type":"local","information":"","local_timestamp":"2025-08-19T05:34:50Z","project_hash":"cbb74e2f","cli_path":"/home/REDACTED/work/taskflow/taskflow/node_modules/.bin/prisma","cli_path_hash":"ca93a627","endpoint":"REDACTED","disable":false,"arch":"x64","os":"linux","node_version":"v20.19.4","ci":true,"ci_name":"GitHub Actions","command":"generate","schema_providers":["sqlite"],"schema_preview_features":[],"schema_generators_providers":["prisma-client-js"],"cache_file":"/home/REDACTED/.cache/checkpoint-nodejs/prisma-ca93a627","cache_duration":43200000,"remind_duration":172800000,"force":false,"timeout":5000,"unref":true,"child_path":"/home/REDACTED/work/taskflow/taskflow/node_modules/prisma/build/child","client_event_id":"","previous_client_event_id":"","check_if_update_available":true} (dns block)
• fonts.googleapis.com
  • Triggering command: /usr/local/bin/node /home/REDACTED/work/taskflow/taskflow/node_modules/next/dist/compiled/jest-worker/processChild.js (dns block)

If you need me to access, download, or install something from one of these locations, you can either:

• Configure Actions setup steps to set up my environment, which run before the firewall is enabled
• Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

---

💡 You can make Copilot smarter by setting up custom instructions, customizing its development environment and configuring Model Context Protocol (MCP) servers. Learn more Copilot coding agent tips in the docs.