mirror of
https://github.com/marcoallegretti/WEFT_OS.git
synced 2026-03-26 17:03:09 +00:00
New crate. Per-session file proxy that gates filesystem access to an explicit allowlist of paths passed at startup. Usage: weft-file-portal <socket_path> [--allow <path>]... Listens on a Unix domain socket. Each connection receives newline- delimited JSON requests and returns newline-delimited JSON responses. File content is base64-encoded. Operations: read, write, list. Empty allowlist rejects all requests; paths checked with starts_with. 7 unit tests covering access control, read/write roundtrip, and list.
21 lines
424 B
TOML
21 lines
424 B
TOML
[workspace]
|
|
members = [
|
|
"crates/weft-appd",
|
|
"crates/weft-build-meta",
|
|
"crates/weft-compositor",
|
|
"crates/weft-ipc-types",
|
|
"crates/weft-file-portal",
|
|
"crates/weft-mount-helper",
|
|
"crates/weft-pack",
|
|
"crates/weft-runtime",
|
|
"crates/weft-servo-shell",
|
|
]
|
|
resolver = "2"
|
|
|
|
[workspace.package]
|
|
version = "0.1.0"
|
|
edition = "2024"
|
|
rust-version = "1.93"
|
|
|
|
[workspace.lints.rust]
|
|
unsafe_code = "forbid"
|