Lotus CIandClaude Opus 5.5
7fecf72107
With Tauri 2.12 every app command was refused ("Command … not allowed by
ACL"): the app is served from http://localhost:44548 (tauri-plugin-
localhost), which Tauri treats as a remote origin, and since the
GHSA-7gmj-67g7-phm9 fix app commands need an explicit capability. The
Windows smoke test caught it (keychain, hotkeys, tray/taskbar/thumbbar,
token migration all failed).
build.rs now declares the 35 commands as an app manifest, and
capabilities/migrated.json (scoped to http://localhost:44548 only) grants
allow-<command> for each. The call page (http://127.0.0.1:44548) and any
remote frame still get no IPC. gen/schemas regenerated by tauri-build.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_017PCb59uY3UKqDqt7B6hzd5
102 lines
2.9 KiB
JSON
102 lines
2.9 KiB
JSON
{
|
|
"identifier": "migrated",
|
|
"description": "permissions that were migrated from v1",
|
|
"local": true,
|
|
"remote": {
|
|
"urls": [
|
|
"http://localhost:44548"
|
|
]
|
|
},
|
|
"windows": [
|
|
"main"
|
|
],
|
|
"permissions": [
|
|
"core:default",
|
|
"core:window:allow-create",
|
|
"core:window:allow-center",
|
|
"core:window:allow-request-user-attention",
|
|
"core:window:allow-set-resizable",
|
|
"core:window:allow-set-maximizable",
|
|
"core:window:allow-set-minimizable",
|
|
"core:window:allow-set-closable",
|
|
"core:window:allow-set-title",
|
|
"core:window:allow-maximize",
|
|
"core:window:allow-unmaximize",
|
|
"core:window:allow-minimize",
|
|
"core:window:allow-unminimize",
|
|
"core:window:allow-show",
|
|
"core:window:allow-hide",
|
|
"core:window:allow-close",
|
|
"core:window:allow-set-decorations",
|
|
"core:window:allow-set-always-on-top",
|
|
"core:window:allow-set-content-protected",
|
|
"core:window:allow-set-size",
|
|
"core:window:allow-set-min-size",
|
|
"core:window:allow-set-max-size",
|
|
"core:window:allow-set-position",
|
|
"core:window:allow-set-fullscreen",
|
|
"core:window:allow-set-focus",
|
|
"core:window:allow-set-icon",
|
|
"core:window:allow-set-skip-taskbar",
|
|
"core:window:allow-set-cursor-grab",
|
|
"core:window:allow-set-cursor-visible",
|
|
"core:window:allow-set-cursor-icon",
|
|
"core:window:allow-set-cursor-position",
|
|
"core:window:allow-set-ignore-cursor-events",
|
|
"core:window:allow-start-dragging",
|
|
"core:webview:allow-print",
|
|
"notification:default",
|
|
"core:app:allow-app-show",
|
|
"core:app:allow-app-hide",
|
|
"autostart:allow-enable",
|
|
"autostart:allow-disable",
|
|
"autostart:allow-is-enabled",
|
|
{
|
|
"identifier": "opener:allow-open-url",
|
|
"allow": [
|
|
{
|
|
"url": "http://*"
|
|
},
|
|
{
|
|
"url": "https://*"
|
|
}
|
|
]
|
|
},
|
|
"allow-check-for-update",
|
|
"allow-flash-window",
|
|
"allow-focus-main-window",
|
|
"allow-get-close-behavior",
|
|
"allow-get-focus-assist",
|
|
"allow-get-start-minimized",
|
|
"allow-get-tray-dnd",
|
|
"allow-global-hotkeys-supported",
|
|
"allow-has-tray-host",
|
|
"allow-install-update",
|
|
"allow-resolve-close-request",
|
|
"allow-secure-session-clear",
|
|
"allow-secure-session-get",
|
|
"allow-secure-session-set",
|
|
"allow-secure-session-supported",
|
|
"allow-send-notification",
|
|
"allow-set-badge-count",
|
|
"allow-set-call-active",
|
|
"allow-set-close-behavior",
|
|
"allow-set-custom-chrome",
|
|
"allow-set-global-hotkeys",
|
|
"allow-set-jump-list",
|
|
"allow-set-smtc-call-state",
|
|
"allow-set-start-minimized",
|
|
"allow-set-taskbar-progress",
|
|
"allow-set-thumbbar",
|
|
"allow-set-tray-call-state",
|
|
"allow-set-tray-unread",
|
|
"allow-set-tray-update-ready",
|
|
"allow-show-rich-toast",
|
|
"allow-update-install-kind",
|
|
"allow-window-close",
|
|
"allow-window-minimize",
|
|
"allow-window-start-drag",
|
|
"allow-window-toggle-maximize"
|
|
]
|
|
}
|