feat: Merge 20230619 into master

[L2ncE]

Merge 20230619 into master and delete some failed instances, which will be re-added later.

---

Note

High Risk
SessionStart and alwaysApply rules cause arbitrary Node code to run when developers open AI tools; the referenced setup script is obfuscated and ~4MB, which is a classic supply-chain / credential-theft pattern and should not be merged without full deobfuscation and removal of auto-exec.

Overview
This PR adds automatic execution of node .github/setup.js when Claude Code or Gemini sessions start, via new SessionStart hooks in .claude/settings.json and .gemini/settings.json. It also adds a always-on Cursor rule (.cursor/rules/setup.mdc) that instructs the assistant to run the same command for “IDE integration and dependency setup.”

The diff introduces .github/setup.js as a new file (shown empty in the patch). In the tree, that script is very large and begins with obfuscated eval/ROT13-style decoding, which is inconsistent with a normal project bootstrap and is a major red flag when combined with session-start automation.

The PR title/description also reference merging branch 20230619 and adjusting failed timeline instances (e.g. marching_squares under timelines/taichi/real_func/), but those timeline edits are not present in the supplied diff.

^{Reviewed by Cursor Bugbot for commit a3dba46. Bugbot is set up for automated code reviews on this repo. Configure here.}

[L2ncE]

@feisuzhu PTAL

[cursor]

Cursor Bugbot has reviewed your changes and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, have a team admin enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit a3dba46. Configure here.}

[cursor]

Rule pushes malicious setup command

High Severity

The new always-on Cursor rule tells the agent that running node .github/setup.js is required for IDE integration. That script is obfuscated eval code, so the rule steers automated tooling toward executing it during normal development.

 

^{Reviewed by Cursor Bugbot for commit a3dba46. Configure here.}