a2161aef63
- Limit text reads and existence checks to platform discovery files - Drop unused create and open capabilities - Document restored desktop automation reconnection
70 lines
2 KiB
JSON
70 lines
2 KiB
JSON
{
|
|
"$schema": "../gen/schemas/desktop-schema.json",
|
|
"identifier": "default",
|
|
"description": "Capability for the main window",
|
|
"windows": ["main"],
|
|
"permissions": [
|
|
"core:default",
|
|
"opener:default",
|
|
"dialog:default",
|
|
"dialog:allow-save",
|
|
"dialog:allow-open",
|
|
"updater:default",
|
|
"process:default",
|
|
"clipboard-manager:allow-read-text",
|
|
"clipboard-manager:allow-write-html",
|
|
"clipboard-manager:allow-write-text",
|
|
{
|
|
"identifier": "fs:allow-read-file",
|
|
"allow": [{ "path": "**" }]
|
|
},
|
|
{
|
|
"identifier": "fs:allow-read-text-file",
|
|
"allow": [
|
|
{ "path": "$HOME/Library/Application Support/OpenPencil/mcp.json" },
|
|
{ "path": "$LOCALDATA/OpenPencil/mcp.json" },
|
|
{ "path": "$RUNTIME/openpencil/mcp.json" },
|
|
{ "path": "$HOME/.openpencil/mcp.json" }
|
|
]
|
|
},
|
|
{
|
|
"identifier": "fs:allow-write-file",
|
|
"allow": [{ "path": "**" }]
|
|
},
|
|
{
|
|
"identifier": "fs:allow-exists",
|
|
"allow": [
|
|
{ "path": "$HOME/Library/Application Support/OpenPencil/mcp.json" },
|
|
{ "path": "$LOCALDATA/OpenPencil/mcp.json" },
|
|
{ "path": "$RUNTIME/openpencil/mcp.json" },
|
|
{ "path": "$HOME/.openpencil/mcp.json" }
|
|
]
|
|
},
|
|
{
|
|
"identifier": "fs:allow-mkdir",
|
|
"allow": [{ "path": "**" }]
|
|
},
|
|
{
|
|
"identifier": "fs:allow-remove",
|
|
"allow": [{ "path": "**" }]
|
|
},
|
|
{
|
|
"identifier": "fs:allow-watch",
|
|
"allow": [{ "path": "**" }]
|
|
},
|
|
"fs:allow-unwatch",
|
|
{
|
|
"identifier": "shell:allow-spawn",
|
|
"allow": [
|
|
{ "name": "claude-agent-acp", "cmd": "claude-agent-acp", "args": true },
|
|
{ "name": "codex-acp", "cmd": "codex-acp", "args": true },
|
|
{ "name": "gemini", "cmd": "gemini", "args": true },
|
|
{ "name": "openpencil-mcp-http", "cmd": "openpencil-mcp-http", "args": true },
|
|
{ "name": "cmd", "cmd": "cmd", "args": true }
|
|
]
|
|
},
|
|
"shell:allow-stdin-write",
|
|
"shell:allow-kill"
|
|
]
|
|
}
|