mirror of
https://github.com/l0ng-ai/openidea.git
synced 2026-11-08 08:52:12 +00:00
Arnaud Ritti
04b1b863df
Closes #1947 Adds API 1.3 `fs.plugin-dir`: a persistent owner-only directory per plugin (0700 directories / 0600 files on Unix, owner-only ACL on Windows), separate from the packaged code, storage and secrets. The plugin reads and writes under it without fs.* grants, can open files there in the editor and pass their paths to approved programs; editor saves keep the protection, restart keeps the content, uninstall removes it. Traversal and symlink escapes into other plugins' directories are rejected (real-Wasm regressions). Co-authored-by: arnaud-ritti <[email protected]>
43 lines
826 B
TOML
43 lines
826 B
TOML
id = "test.private-dir"
|
|
name = "Private directory fixture"
|
|
version = "0.1.0"
|
|
engines.openidea = "^1.3"
|
|
wasm = "dist/plugin.wasm"
|
|
activation = ["on-command:*"]
|
|
|
|
[capabilities]
|
|
required = []
|
|
optional = ["process:cat"]
|
|
|
|
[[contributes.commands]]
|
|
id = "directory"
|
|
title = "Private directory"
|
|
|
|
[[contributes.commands]]
|
|
id = "roundtrip"
|
|
title = "Write fake private content"
|
|
|
|
[[contributes.commands]]
|
|
id = "read"
|
|
title = "Read file"
|
|
|
|
[[contributes.commands]]
|
|
id = "write"
|
|
title = "Write file"
|
|
|
|
[[contributes.commands]]
|
|
id = "open"
|
|
title = "Open fake private content"
|
|
|
|
[[contributes.commands]]
|
|
id = "process"
|
|
title = "Read private content with approved cat"
|
|
|
|
[[contributes.commands]]
|
|
id = "large-cache"
|
|
title = "Write private cache larger than storage"
|
|
|
|
[[contributes.providers]]
|
|
kinds = ["completion"]
|
|
languages = ["private-fixture"]
|