093495a653
Some checks failed
Test / rust-fmt-check (pull_request) Failing after 0s
Test / rust-clippy (pull_request) Failing after 1s
Test / rust-tests (pull_request) Failing after 0s
Test / frontend-typecheck (pull_request) Failing after 16s
Test / frontend-tests (pull_request) Failing after 18s
PR Review Automation / review (pull_request) Failing after 4m13s
Complete backport of all features from apollo_nxt-trcaa repository: - Three-tier shell execution safety system (Tier 1: auto, Tier 2: approve, Tier 3: deny) - Ollama function calling with tool use support - AI provider tool calling auto-detection - kubectl binary bundling and management - kubeconfig upload and context management - Shell approval modal with real-time UI - MCP protocol HTTP transport with custom headers - Enhanced security audit logging - Comprehensive test coverage (275+ tests) - Updated CI/CD workflows for Gitea Actions - Complete documentation (ADRs, wiki, release notes) Sanitization applied to all files: - Removed all MSI, Motorola, VNXT, Vesta references - Replaced internal infrastructure references with TFTSR equivalents - Updated all URLs and API endpoints - Sanitized commit history references in documentation Technical changes: - New modules: shell/classifier, shell/executor, shell/kubectl, shell/kubeconfig - Enhanced AI providers: ollama.rs, openai.rs with function calling - New Tauri commands: shell execution, kubeconfig management, tool calling detection - Database migrations: shell_execution_audit table - Frontend: ShellApprovalModal, ShellExecution, KubeconfigManager pages - CI/CD: kubectl bundling, multi-platform builds, Gitea Actions integration Version: 1.0.8 Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
29 lines
784 B
JSON
29 lines
784 B
JSON
{
|
|
"$schema": "../node_modules/@tauri-apps/cli/schema/acl-schema.json",
|
|
"identifier": "default",
|
|
"description": "Default capabilities for TRCAA — least-privilege",
|
|
"windows": ["main"],
|
|
"permissions": [
|
|
"core:path:default",
|
|
"core:event:default",
|
|
"core:window:default",
|
|
"core:app:default",
|
|
"core:resources:default",
|
|
"core:menu:default",
|
|
"core:tray:default",
|
|
"dialog:allow-open",
|
|
"dialog:allow-save",
|
|
"fs:allow-read-text-file",
|
|
"fs:allow-write-text-file",
|
|
"fs:allow-mkdir",
|
|
"fs:allow-app-read-recursive",
|
|
"fs:allow-app-write-recursive",
|
|
"fs:allow-temp-read-recursive",
|
|
"fs:allow-temp-write-recursive",
|
|
"fs:scope-app-recursive",
|
|
"fs:scope-temp-recursive",
|
|
"shell:allow-open",
|
|
"http:default"
|
|
]
|
|
}
|