CRT
61a1e832a0
- Rust host: spawns storebound serve --stdio with fixed args, hands over a per-session secret, mints confirm tokens only after a native dialog showing the summary and the dry run - every app command re-checks window label and page origin; one capability (main window, app commands + event listen only, no plugin API in the webview); strict CSP; tests/security.rs pins it - store keys picked in native dialogs, kept in the OS keychain, passed per call in memory only - plugins: shell (Rust only), single-instance, deep-link storebound://, window-state, opener, dialog, notification, updater (placeholder endpoint and key until signing), process - app-centric UI: Portfolio, App (Releases, Catalog, Listings, Health, Reviews, TestFlight), App folders, Accounts, Dependencies, Settings; light / dark with the storebound.dev tokens, reduced motion, home folder shown as ~ - macOS menu: Cmd+Q quits, Edit menu, Window menu keeps the main window; Linux DMABUF fix - Bun workspace (npm files unchanged), ci runs desktop typecheck, build, cargo test and clippy; scrub covers home paths; docs/desktop.md (protocol, safety, dependency sources and licenses)
11 lines
384 B
TOML
11 lines
384 B
TOML
# Automatically generated - DO NOT EDIT!
|
|
|
|
[[permission]]
|
|
identifier = "allow-account-remove"
|
|
description = "Enables the account_remove command without any pre-configured scope."
|
|
commands.allow = ["account_remove"]
|
|
|
|
[[permission]]
|
|
identifier = "deny-account-remove"
|
|
description = "Denies the account_remove command without any pre-configured scope."
|
|
commands.deny = ["account_remove"]
|