l0ng-ai 7c72411dd7 fix(trust): allow application-level commands in restricted mode (#648) ...

Help › About showed no version, build or runtime in untrusted project windows and on the welcome screen.

Root cause: the restricted-mode allowlist added with project trust missed app_build_info and other application-level commands, so they were rejected wherever the window had no trusted project; the frontend then cached the failed build info for the whole session.

Fix: classify all registered commands and allow the 24 that only read application information or change the user's own application state (build info, log location, update checks, cache invalidation, file clipboard, JDK download, Docker settings, database export paths, patch export, system environment); JDK download now uses the application tool directory instead of project tool settings. Execution commands (run, build, debug, language servers, tool install from project settings) stay blocked. Build info is retried after a failure instead of being cached. Verified on macOS in an untrusted project and on the welcome screen; Windows not run.

Related to #519

2026-11-01 13:45:25 +08:00

..

agents

feat(agents): dock a session in the Agents tool window (#588)

2026-11-01 11:31:53 +08:00

analysis

feat(notebook): add native Jupyter notebook editing and execution (#268)

2026-10-30 07:26:43 +08:00

app

fix(trust): allow application-level commands in restricted mode (#648)

2026-11-01 13:45:25 +08:00

build

fix(build): show the Build tool window when explicit builds start (#487)

2026-10-31 08:31:10 +08:00

build-tools

feat(project): add project trust and restricted execution mode (#517)

2026-10-31 20:58:45 +08:00

code-insight

feat(java): add read/write filters for Java field usages (#569)

2026-11-01 09:09:15 +08:00

coverage

chore: Format the codebase with oxfmt and check formatting in CI (#135)

2026-10-28 19:35:16 +08:00

database

fix(console): Ctrl+C copies selected output in consoles and terminals (#381)

2026-10-30 17:53:31 +08:00

debugger

fix(java): explain recovery for unimported launch modules (#585)

2026-10-31 23:56:19 +08:00

deployment

fix(deployment): filter servers by selected path coverage (#544)

2026-10-31 14:53:48 +08:00

github

fix(search): make the search popups draggable (#625)

2026-11-01 08:13:15 +08:00

http-client

fix(http-client): find the generated request scratch on Windows (#356)

2026-10-30 15:09:50 +08:00

libraries

feat(project): add project trust and restricted execution mode (#517)

2026-10-31 20:58:45 +08:00

macros

fix(editor): Count wide characters as two columns in column editing (#172)

2026-10-29 08:32:15 +08:00

notebook

feat(notebook): add native Jupyter notebook editing and execution (#268)

2026-10-30 07:26:43 +08:00

perf

fix(i18n): Translate the remaining UI text (Git, hierarchy, pull requests, dialogs, aria labels) (#114)

2026-10-28 12:18:46 +08:00

plugins

feat(project): add project trust and restricted execution mode (#517)

2026-10-31 20:58:45 +08:00

profiler

chore: Format the codebase with oxfmt and check formatting in CI (#135)

2026-10-28 19:35:16 +08:00

project-tree

fix(project): expire stale file clipboard after OS replacement (#598)

2026-11-01 08:32:33 +08:00

project-trust

feat(project): add project trust and restricted execution mode (#517)

2026-10-31 20:58:45 +08:00

remote-dev

feat(project): add project trust and restricted execution mode (#517)

2026-10-31 20:58:45 +08:00

run

feat(run): update Spring Boot resources and application policies (#603)

2026-11-01 08:35:18 +08:00

run-anything

chore: Format the codebase with oxfmt and check formatting in CI (#135)

2026-10-28 19:35:16 +08:00

scratch

fix(scratch): add visible language search field

2026-10-31 21:21:50 +08:00

search

fix(search): mark outdated find results and block stale replacements (#630)

2026-11-01 09:55:43 +08:00

services

feat(project): add project trust and restricted execution mode (#517)

2026-10-31 20:58:45 +08:00

settings

feat(settings): add "Show tool window badges" (#637)

2026-11-01 11:38:26 +08:00

ssh

feat(git): remember HTTPS credentials in the app secret store (#321)

2026-10-30 10:48:29 +08:00

templates

chore: add knip and remove the dead code it reports (#247)

2026-10-29 23:21:56 +08:00

terminal

fix(fonts): render unavailable macOS user fonts through binary IPC (#643)

2026-11-01 12:23:08 +08:00

todo

chore: Format the codebase with oxfmt and check formatting in CI (#135)

2026-10-28 19:35:16 +08:00

tools

feat(tools): pick among interchangeable language servers for every language (#313)

2026-10-30 10:56:00 +08:00

vcs

feat(vcs): compare folder selections with revisions across repositories (#602)

2026-11-01 01:43:15 +08:00

viewers

fix(fonts): render unavailable macOS user fonts through binary IPC (#643)

2026-11-01 12:23:08 +08:00

vim

feat(vim): read other files through source in the rc file

2026-10-31 03:06:29 +08:00

web

feat(editor): move preview layout controls into the tab strip (#554)

2026-10-31 20:24:31 +08:00

welcome

fix(welcome): space the landing actions evenly (#612)

2026-11-01 05:19:57 +08:00

index.ts

feat(project): add project trust and restricted execution mode (#517)

2026-10-31 20:58:45 +08:00