tftsr-devops_investigation/src-tauri/capabilities/default.json
Shaun Arman b4bf1d37cd
Some checks failed
Test / rust-tests (push) Waiting to run
Test / frontend-typecheck (push) Waiting to run
Test / frontend-tests (push) Waiting to run
Auto Tag / auto-tag (push) Successful in 5s
Test / rust-fmt-check (push) Failing after 2m8s
Test / rust-clippy (push) Has been cancelled
Release / build-macos-arm64 (push) Successful in 11m8s
Release / build-windows-amd64 (push) Has been cancelled
Release / build-linux-arm64 (push) Has been cancelled
Release / build-linux-amd64 (push) Has been cancelled
fix: add user_id support and OAuth shell permission (v0.2.6)
Fixes:
- Added shell:allow-open permission to fix OAuth integration flows
- Added user_id field to ProviderConfig for MSI GenAI CORE ID
- Added UI field for user_id when api_format is msi_genai
- Made userId optional in MSI GenAI requests (only sent if provided)
- Added X-msi-genai-client header to MSI GenAI requests
- Updated CSP to include MSI GenAI domains
- Bumped version to 0.2.6

This fixes:
- OAuth error: 'Command plugin:shell|open not allowed by ACL'
- Missing User ID field in MSI GenAI configuration UI
2026-04-03 16:34:00 -05:00

32 lines
854 B
JSON

{
"$schema": "../node_modules/@tauri-apps/cli/schema/acl-schema.json",
"identifier": "default",
"description": "Default capabilities for TFTSR — least-privilege",
"windows": ["main"],
"permissions": [
"core:path:default",
"core:event:default",
"core:window:default",
"core:app:default",
"core:resources:default",
"core:menu:default",
"core:tray:default",
"dialog:allow-open",
"dialog:allow-save",
"fs:allow-read-text-file",
"fs:allow-write-text-file",
"fs:allow-read",
"fs:allow-write",
"fs:allow-mkdir",
"fs:allow-app-read-recursive",
"fs:allow-app-write-recursive",
"fs:allow-temp-read-recursive",
"fs:allow-temp-write-recursive",
"fs:scope-app-recursive",
"fs:scope-temp-recursive",
"shell:allow-execute",
"shell:allow-open",
"http:default"
]
}