feat(platform): enforce Tauri command authority

apps/desktop/src-tauri/build.rs

@@ -1,3 +1,24 @@
+const TERMINAL_COMMANDS: &[&str] = &[
+    "app_status",
+    "active_paste_target",
+    "preview_clipboard_image_paste",
+    "preview_active_clipboard_image_paste",
+    "pty_spawn",
+    "pty_write",
+    "pty_interrupt",
+    "pty_resize",
+    "pty_kill",
+    "pty_ack",
+    "clipboard_write_text",
+    "clipboard_read_text",
+    "open_path",
+    "close_paste_session",
+];
+
 fn main() {
-    tauri_build::build();
+    tauri_build::try_build(
+        tauri_build::Attributes::new()
+            .app_manifest(tauri_build::AppManifest::new().commands(TERMINAL_COMMANDS)),
+    )
+    .expect("failed to build the finite terminal command authority");
 }

apps/desktop/src-tauri/capabilities/linux.json

@@ -0,0 +1,22 @@
+{
+  "$schema": "../gen/schemas/desktop-schema.json",
+  "identifier": "main-terminal-linux",
+  "description": "Allows the main window to invoke the finite terminal command set on native Ubuntu and WSLg Linux.",
+  "windows": ["main"],
+  "platforms": ["linux"],
+  "permissions": [
+    "allow-app-status",
+    "allow-active-paste-target",
+    "allow-preview-clipboard-image-paste",
+    "allow-preview-active-clipboard-image-paste",
+    "allow-pty-write",
+    "allow-pty-interrupt",
+    "allow-pty-resize",
+    "allow-pty-kill",
+    "allow-pty-ack",
+    "allow-clipboard-write-text",
+    "allow-clipboard-read-text",
+    "allow-open-path",
+    "allow-close-paste-session"
+  ]
+}

apps/desktop/src-tauri/capabilities/windows.json

@@ -0,0 +1,23 @@
+{
+  "$schema": "../gen/schemas/desktop-schema.json",
+  "identifier": "main-terminal-windows",
+  "description": "Allows the main window to invoke the finite terminal command set on Windows.",
+  "windows": ["main"],
+  "platforms": ["windows"],
+  "permissions": [
+    "allow-app-status",
+    "allow-active-paste-target",
+    "allow-preview-clipboard-image-paste",
+    "allow-preview-active-clipboard-image-paste",
+    "allow-pty-spawn",
+    "allow-pty-write",
+    "allow-pty-interrupt",
+    "allow-pty-resize",
+    "allow-pty-kill",
+    "allow-pty-ack",
+    "allow-clipboard-write-text",
+    "allow-clipboard-read-text",
+    "allow-open-path",
+    "allow-close-paste-session"
+  ]
+}

apps/desktop/src-tauri/permissions/autogenerated/active_paste_target.toml

@@ -0,0 +1,11 @@
+# Automatically generated - DO NOT EDIT!
+
+[[permission]]
+identifier = "allow-active-paste-target"
+description = "Enables the active_paste_target command without any pre-configured scope."
+commands.allow = ["active_paste_target"]
+
+[[permission]]
+identifier = "deny-active-paste-target"
+description = "Denies the active_paste_target command without any pre-configured scope."
+commands.deny = ["active_paste_target"]

apps/desktop/src-tauri/permissions/autogenerated/app_status.toml

@@ -0,0 +1,11 @@
+# Automatically generated - DO NOT EDIT!
+
+[[permission]]
+identifier = "allow-app-status"
+description = "Enables the app_status command without any pre-configured scope."
+commands.allow = ["app_status"]
+
+[[permission]]
+identifier = "deny-app-status"
+description = "Denies the app_status command without any pre-configured scope."
+commands.deny = ["app_status"]

apps/desktop/src-tauri/permissions/autogenerated/clipboard_read_text.toml

@@ -0,0 +1,11 @@
+# Automatically generated - DO NOT EDIT!
+
+[[permission]]
+identifier = "allow-clipboard-read-text"
+description = "Enables the clipboard_read_text command without any pre-configured scope."
+commands.allow = ["clipboard_read_text"]
+
+[[permission]]
+identifier = "deny-clipboard-read-text"
+description = "Denies the clipboard_read_text command without any pre-configured scope."
+commands.deny = ["clipboard_read_text"]

apps/desktop/src-tauri/permissions/autogenerated/clipboard_write_text.toml

@@ -0,0 +1,11 @@
+# Automatically generated - DO NOT EDIT!
+
+[[permission]]
+identifier = "allow-clipboard-write-text"
+description = "Enables the clipboard_write_text command without any pre-configured scope."
+commands.allow = ["clipboard_write_text"]
+
+[[permission]]
+identifier = "deny-clipboard-write-text"
+description = "Denies the clipboard_write_text command without any pre-configured scope."
+commands.deny = ["clipboard_write_text"]

apps/desktop/src-tauri/permissions/autogenerated/close_paste_session.toml

@@ -0,0 +1,11 @@
+# Automatically generated - DO NOT EDIT!
+
+[[permission]]
+identifier = "allow-close-paste-session"
+description = "Enables the close_paste_session command without any pre-configured scope."
+commands.allow = ["close_paste_session"]
+
+[[permission]]
+identifier = "deny-close-paste-session"
+description = "Denies the close_paste_session command without any pre-configured scope."
+commands.deny = ["close_paste_session"]

apps/desktop/src-tauri/permissions/autogenerated/open_path.toml

@@ -0,0 +1,11 @@
+# Automatically generated - DO NOT EDIT!
+
+[[permission]]
+identifier = "allow-open-path"
+description = "Enables the open_path command without any pre-configured scope."
+commands.allow = ["open_path"]
+
+[[permission]]
+identifier = "deny-open-path"
+description = "Denies the open_path command without any pre-configured scope."
+commands.deny = ["open_path"]

apps/desktop/src-tauri/permissions/autogenerated/preview_active_clipboard_image_paste.toml

@@ -0,0 +1,11 @@
+# Automatically generated - DO NOT EDIT!
+
+[[permission]]
+identifier = "allow-preview-active-clipboard-image-paste"
+description = "Enables the preview_active_clipboard_image_paste command without any pre-configured scope."
+commands.allow = ["preview_active_clipboard_image_paste"]
+
+[[permission]]
+identifier = "deny-preview-active-clipboard-image-paste"
+description = "Denies the preview_active_clipboard_image_paste command without any pre-configured scope."
+commands.deny = ["preview_active_clipboard_image_paste"]

apps/desktop/src-tauri/permissions/autogenerated/preview_clipboard_image_paste.toml

@@ -0,0 +1,11 @@
+# Automatically generated - DO NOT EDIT!
+
+[[permission]]
+identifier = "allow-preview-clipboard-image-paste"
+description = "Enables the preview_clipboard_image_paste command without any pre-configured scope."
+commands.allow = ["preview_clipboard_image_paste"]
+
+[[permission]]
+identifier = "deny-preview-clipboard-image-paste"
+description = "Denies the preview_clipboard_image_paste command without any pre-configured scope."
+commands.deny = ["preview_clipboard_image_paste"]

apps/desktop/src-tauri/permissions/autogenerated/pty_ack.toml

@@ -0,0 +1,11 @@
+# Automatically generated - DO NOT EDIT!
+
+[[permission]]
+identifier = "allow-pty-ack"
+description = "Enables the pty_ack command without any pre-configured scope."
+commands.allow = ["pty_ack"]
+
+[[permission]]
+identifier = "deny-pty-ack"
+description = "Denies the pty_ack command without any pre-configured scope."
+commands.deny = ["pty_ack"]

apps/desktop/src-tauri/permissions/autogenerated/pty_interrupt.toml

@@ -0,0 +1,11 @@
+# Automatically generated - DO NOT EDIT!
+
+[[permission]]
+identifier = "allow-pty-interrupt"
+description = "Enables the pty_interrupt command without any pre-configured scope."
+commands.allow = ["pty_interrupt"]
+
+[[permission]]
+identifier = "deny-pty-interrupt"
+description = "Denies the pty_interrupt command without any pre-configured scope."
+commands.deny = ["pty_interrupt"]

apps/desktop/src-tauri/permissions/autogenerated/pty_kill.toml

@@ -0,0 +1,11 @@
+# Automatically generated - DO NOT EDIT!
+
+[[permission]]
+identifier = "allow-pty-kill"
+description = "Enables the pty_kill command without any pre-configured scope."
+commands.allow = ["pty_kill"]
+
+[[permission]]
+identifier = "deny-pty-kill"
+description = "Denies the pty_kill command without any pre-configured scope."
+commands.deny = ["pty_kill"]

apps/desktop/src-tauri/permissions/autogenerated/pty_resize.toml

@@ -0,0 +1,11 @@
+# Automatically generated - DO NOT EDIT!
+
+[[permission]]
+identifier = "allow-pty-resize"
+description = "Enables the pty_resize command without any pre-configured scope."
+commands.allow = ["pty_resize"]
+
+[[permission]]
+identifier = "deny-pty-resize"
+description = "Denies the pty_resize command without any pre-configured scope."
+commands.deny = ["pty_resize"]

apps/desktop/src-tauri/permissions/autogenerated/pty_spawn.toml

@@ -0,0 +1,11 @@
+# Automatically generated - DO NOT EDIT!
+
+[[permission]]
+identifier = "allow-pty-spawn"
+description = "Enables the pty_spawn command without any pre-configured scope."
+commands.allow = ["pty_spawn"]
+
+[[permission]]
+identifier = "deny-pty-spawn"
+description = "Denies the pty_spawn command without any pre-configured scope."
+commands.deny = ["pty_spawn"]

apps/desktop/src-tauri/permissions/autogenerated/pty_write.toml

@@ -0,0 +1,11 @@
+# Automatically generated - DO NOT EDIT!
+
+[[permission]]
+identifier = "allow-pty-write"
+description = "Enables the pty_write command without any pre-configured scope."
+commands.allow = ["pty_write"]
+
+[[permission]]
+identifier = "deny-pty-write"
+description = "Denies the pty_write command without any pre-configured scope."
+commands.deny = ["pty_write"]

apps/desktop/src-tauri/permissions/terminal.toml

@@ -0,0 +1,69 @@
+[[permission]]
+identifier = "allow-app-status"
+description = "Allows the app_status command."
+commands.allow = ["app_status"]
+
+[[permission]]
+identifier = "allow-active-paste-target"
+description = "Allows the active_paste_target command."
+commands.allow = ["active_paste_target"]
+
+[[permission]]
+identifier = "allow-preview-clipboard-image-paste"
+description = "Allows the preview_clipboard_image_paste command."
+commands.allow = ["preview_clipboard_image_paste"]
+
+[[permission]]
+identifier = "allow-preview-active-clipboard-image-paste"
+description = "Allows the preview_active_clipboard_image_paste command."
+commands.allow = ["preview_active_clipboard_image_paste"]
+
+[[permission]]
+identifier = "allow-pty-spawn"
+description = "Allows the pty_spawn command."
+commands.allow = ["pty_spawn"]
+
+[[permission]]
+identifier = "allow-pty-write"
+description = "Allows the pty_write command."
+commands.allow = ["pty_write"]
+
+[[permission]]
+identifier = "allow-pty-interrupt"
+description = "Allows the pty_interrupt command."
+commands.allow = ["pty_interrupt"]
+
+[[permission]]
+identifier = "allow-pty-resize"
+description = "Allows the pty_resize command."
+commands.allow = ["pty_resize"]
+
+[[permission]]
+identifier = "allow-pty-kill"
+description = "Allows the pty_kill command."
+commands.allow = ["pty_kill"]
+
+[[permission]]
+identifier = "allow-pty-ack"
+description = "Allows the pty_ack command."
+commands.allow = ["pty_ack"]
+
+[[permission]]
+identifier = "allow-clipboard-write-text"
+description = "Allows the clipboard_write_text command."
+commands.allow = ["clipboard_write_text"]
+
+[[permission]]
+identifier = "allow-clipboard-read-text"
+description = "Allows the clipboard_read_text command."
+commands.allow = ["clipboard_read_text"]
+
+[[permission]]
+identifier = "allow-open-path"
+description = "Allows the open_path command."
+commands.allow = ["open_path"]
+
+[[permission]]
+identifier = "allow-close-paste-session"
+description = "Allows the close_paste_session command."
+commands.allow = ["close_paste_session"]