WEFT_OS/Cargo.toml
Marco Allegretti 1b93f1c825 feat: weft-file-portal -- sandboxed file access broker
New crate. Per-session file proxy that gates filesystem access to an
explicit allowlist of paths passed at startup.

Usage: weft-file-portal <socket_path> [--allow <path>]...

Listens on a Unix domain socket. Each connection receives newline-
delimited JSON requests and returns newline-delimited JSON responses.
File content is base64-encoded. Operations: read, write, list.
Empty allowlist rejects all requests; paths checked with starts_with.

7 unit tests covering access control, read/write roundtrip, and list.
2026-03-11 15:52:33 +01:00

21 lines
424 B
TOML

[workspace]
members = [
"crates/weft-appd",
"crates/weft-build-meta",
"crates/weft-compositor",
"crates/weft-ipc-types",
"crates/weft-file-portal",
"crates/weft-mount-helper",
"crates/weft-pack",
"crates/weft-runtime",
"crates/weft-servo-shell",
]
resolver = "2"
[workspace.package]
version = "0.1.0"
edition = "2024"
rust-version = "1.93"
[workspace.lints.rust]
unsafe_code = "forbid"