openpencil/desktop/capabilities/default.json

{
  "$schema": "../gen/schemas/desktop-schema.json",
  "identifier": "default",
  "description": "Capability for the main window",
  "windows": ["main"],
  "permissions": [
    "core:default",
    "opener:default",
    "dialog:default",
    "dialog:allow-save",
    "dialog:allow-open",
    "updater:default",
    "process:default",
    "clipboard-manager:allow-read-text",
    "clipboard-manager:allow-write-html",
    "clipboard-manager:allow-write-text",
    {
      "identifier": "fs:allow-read-file",
      "allow": [{ "path": "**" }]
    },
    {
      "identifier": "fs:allow-write-file",
      "allow": [{ "path": "**" }]
    },
    {
      "identifier": "fs:allow-mkdir",
      "allow": [{ "path": "**" }]
    },
    {
      "identifier": "fs:allow-remove",
      "allow": [{ "path": "**" }]
    },
    {
      "identifier": "fs:allow-watch",
      "allow": [{ "path": "**" }]
    },
    "fs:allow-unwatch",
    {
      "identifier": "shell:allow-spawn",
      "allow": [
        { "name": "claude-agent-acp", "cmd": "claude-agent-acp", "args": true },
        { "name": "codex-acp", "cmd": "codex-acp", "args": true },
        { "name": "gemini", "cmd": "gemini", "args": true },
        { "name": "openpencil-mcp-http", "cmd": "openpencil-mcp-http", "args": true },
        { "name": "cmd", "cmd": "cmd", "args": true }
      ]
    },
    "shell:allow-stdin-write",
    "shell:allow-kill"
  ]
}