"description":"Capability formats accepted in a capability file.",
"anyOf":[
{
"description":"A single capability.",
"allOf":[
{
"$ref":"#/definitions/Capability"
}
]
},
{
"description":"A list of capabilities.",
"type":"array",
"items":{
"$ref":"#/definitions/Capability"
}
},
{
"description":"A list of capabilities.",
"type":"object",
"required":[
"capabilities"
],
"properties":{
"capabilities":{
"description":"The list of capabilities.",
"type":"array",
"items":{
"$ref":"#/definitions/Capability"
}
}
}
}
],
"definitions":{
"Capability":{
"description":"A grouping and boundary mechanism developers can use to isolate access to the IPC layer.\n\nIt controls application windows' and webviews' fine grained access to the Tauri core, application, or plugin commands. If a webview or its window is not matching any capability then it has no access to the IPC layer at all.\n\nThis can be done to create groups of windows, based on their required system access, which can reduce impact of frontend vulnerabilities in less privileged windows. Windows can be added to a capability by exact name (e.g. `main-window`) or glob patterns like `*` or `admin-*`. A Window can have none, one, or multiple associated capabilities.\n\n## Example\n\n```json { \"identifier\": \"main-user-files-write\", \"description\": \"This capability allows the `main` window on macOS and Windows access to `filesystem` write related commands and `dialog` commands to enable programmatic access to files selected by the user.\", \"windows\": [ \"main\" ], \"permissions\": [ \"core:default\", \"dialog:open\", { \"identifier\": \"fs:allow-write-text-file\", \"allow\": [{ \"path\": \"$HOME/test.txt\" }] }, ], \"platforms\": [\"macOS\",\"windows\"] } ```",
"type":"object",
"required":[
"identifier",
"permissions"
],
"properties":{
"identifier":{
"description":"Identifier of the capability.\n\n## Example\n\n`main-user-files-write`",
"type":"string"
},
"description":{
"description":"Description of what the capability is intended to allow on associated windows.\n\nIt should contain a description of what the grouped permissions should allow.\n\n## Example\n\nThis capability allows the `main` window access to `filesystem` write related commands and `dialog` commands to enable programmatic access to files selected by the user.",
"default":"",
"type":"string"
},
"remote":{
"description":"Configure remote URLs that can use the capability permissions.\n\nThis setting is optional and defaults to not being set, as our default use case is that the content is served from our local application.\n\n:::caution Make sure you understand the security implications of providing remote sources with local system access. :::\n\n## Example\n\n```json { \"urls\": [\"https://*.mydomain.dev\"] } ```",
"anyOf":[
{
"$ref":"#/definitions/CapabilityRemote"
},
{
"type":"null"
}
]
},
"local":{
"description":"Whether this capability is enabled for local app URLs or not. Defaults to `true`.",
"default":true,
"type":"boolean"
},
"windows":{
"description":"List of windows that are affected by this capability. Can be a glob pattern.\n\nIf a window label matches any of the patterns in this list, the capability will be enabled on all the webviews of that window, regardless of the value of [`Self::webviews`].\n\nOn multiwebview windows, prefer specifying [`Self::webviews`] and omitting [`Self::windows`] for a fine grained access control.\n\n## Example\n\n`[\"main\"]`",
"type":"array",
"items":{
"type":"string"
}
},
"webviews":{
"description":"List of webviews that are affected by this capability. Can be a glob pattern.\n\nThe capability will be enabled on all the webviews whose label matches any of the patterns in this list, regardless of whether the webview's window label matches a pattern in [`Self::windows`].\n\n## Example\n\n`[\"sub-webview-one\", \"sub-webview-two\"]`",
"type":"array",
"items":{
"type":"string"
}
},
"permissions":{
"description":"List of permissions attached to this capability.\n\nMust include the plugin name as prefix in the form of `${plugin-name}:${permission-name}`. For commands directly implemented in the application itself only `${permission-name}` is required.\n\n## Example\n\n```json [ \"core:default\", \"shell:allow-open\", \"dialog:open\", { \"identifier\": \"fs:allow-write-text-file\", \"allow\": [{ \"path\": \"$HOME/test.txt\" }] } ] ```",
"type":"array",
"items":{
"$ref":"#/definitions/PermissionEntry"
},
"uniqueItems":true
},
"platforms":{
"description":"Limit which target platforms this capability applies to.\n\nBy default all platforms are targeted.\n\n## Example\n\n`[\"macOS\",\"windows\"]`",
"type":[
"array",
"null"
],
"items":{
"$ref":"#/definitions/Target"
}
}
}
},
"CapabilityRemote":{
"description":"Configuration for remote URLs that are associated with the capability.",
"type":"object",
"required":[
"urls"
],
"properties":{
"urls":{
"description":"Remote domains this capability refers to using the [URLPattern standard](https://urlpattern.spec.whatwg.org/).\n\n## Examples\n\n- \"https://*.mydomain.dev\": allows subdomains of mydomain.dev - \"https://mydomain.dev/api/*\": allows any subpath of mydomain.dev/api",
"type":"array",
"items":{
"type":"string"
}
}
}
},
"PermissionEntry":{
"description":"An entry for a permission value in a [`Capability`] can be either a raw permission [`Identifier`] or an object that references a permission and extends its scope.",
"anyOf":[
{
"description":"Reference a permission or permission set by identifier.",
"allOf":[
{
"$ref":"#/definitions/Identifier"
}
]
},
{
"description":"Reference a permission or permission set by identifier and extends its scope.",
"type":"object",
"allOf":[
{
"properties":{
"identifier":{
"description":"Identifier of the permission or permission set.",
"allOf":[
{
"$ref":"#/definitions/Identifier"
}
]
},
"allow":{
"description":"Data that defines what is allowed by the scope.",
"type":[
"array",
"null"
],
"items":{
"$ref":"#/definitions/Value"
}
},
"deny":{
"description":"Data that defines what is denied by the scope. This should be prioritized by validation logic.",
"type":[
"array",
"null"
],
"items":{
"$ref":"#/definitions/Value"
}
}
}
}
],
"required":[
"identifier"
]
}
]
},
"Identifier":{
"description":"Permission identifier",
"oneOf":[
{
"description":"Default core plugins set.\n#### This default permission set includes:\n\n- `core:path:default`\n- `core:event:default`\n- `core:window:default`\n- `core:webview:default`\n- `core:app:default`\n- `core:image:default`\n- `core:resources:default`\n- `core:menu:default`\n- `core:tray:default`",
"type":"string",
"const":"core:default",
"markdownDescription":"Default core plugins set.\n#### This default permission set includes:\n\n- `core:path:default`\n- `core:event:default`\n- `core:window:default`\n- `core:webview:default`\n- `core:app:default`\n- `core:image:default`\n- `core:resources:default`\n- `core:menu:default`\n- `core:tray:default`"
},
{
"description":"Default permissions for the plugin.\n#### This default permission set includes:\n\n- `allow-version`\n- `allow-name`\n- `allow-tauri-version`\n- `allow-identifier`\n- `allow-bundle-type`\n- `allow-register-listener`\n- `allow-remove-listener`",
"type":"string",
"const":"core:app:default",
"markdownDescription":"Default permissions for the plugin.\n#### This default permission set includes:\n\n- `allow-version`\n- `allow-name`\n- `allow-tauri-version`\n- `allow-identifier`\n- `allow-bundle-type`\n- `allow-register-listener`\n- `allow-remove-listener`"
},
{
"description":"Enables the app_hide command without any pre-configured scope.",
"type":"string",
"const":"core:app:allow-app-hide",
"markdownDescription":"Enables the app_hide command without any pre-configured scope."
},
{
"description":"Enables the app_show command without any pre-configured scope.",
"type":"string",
"const":"core:app:allow-app-show",
"markdownDescription":"Enables the app_show command without any pre-configured scope."
},
{
"description":"Enables the bundle_type command without any pre-configured scope.",
"type":"string",
"const":"core:app:allow-bundle-type",
"markdownDescription":"Enables the bundle_type command without any pre-configured scope."
},
{
"description":"Enables the default_window_icon command without any pre-configured scope.",
"type":"string",
"const":"core:app:allow-default-window-icon",
"markdownDescription":"Enables the default_window_icon command without any pre-configured scope."
},
{
"description":"Enables the fetch_data_store_identifiers command without any pre-configured scope.",
"markdownDescription":"Denies the fetch_data_store_identifiers command without any pre-configured scope."
},
{
"description":"Denies the identifier command without any pre-configured scope.",
"type":"string",
"const":"core:app:deny-identifier",
"markdownDescription":"Denies the identifier command without any pre-configured scope."
},
{
"description":"Denies the name command without any pre-configured scope.",
"type":"string",
"const":"core:app:deny-name",
"markdownDescription":"Denies the name command without any pre-configured scope."
},
{
"description":"Denies the register_listener command without any pre-configured scope.",
"type":"string",
"const":"core:app:deny-register-listener",
"markdownDescription":"Denies the register_listener command without any pre-configured scope."
},
{
"description":"Denies the remove_data_store command without any pre-configured scope.",
"type":"string",
"const":"core:app:deny-remove-data-store",
"markdownDescription":"Denies the remove_data_store command without any pre-configured scope."
},
{
"description":"Denies the remove_listener command without any pre-configured scope.",
"type":"string",
"const":"core:app:deny-remove-listener",
"markdownDescription":"Denies the remove_listener command without any pre-configured scope."
},
{
"description":"Denies the set_app_theme command without any pre-configured scope.",
"type":"string",
"const":"core:app:deny-set-app-theme",
"markdownDescription":"Denies the set_app_theme command without any pre-configured scope."
},
{
"description":"Denies the set_dock_visibility command without any pre-configured scope.",
"type":"string",
"const":"core:app:deny-set-dock-visibility",
"markdownDescription":"Denies the set_dock_visibility command without any pre-configured scope."
},
{
"description":"Denies the tauri_version command without any pre-configured scope.",
"type":"string",
"const":"core:app:deny-tauri-version",
"markdownDescription":"Denies the tauri_version command without any pre-configured scope."
},
{
"description":"Denies the version command without any pre-configured scope.",
"type":"string",
"const":"core:app:deny-version",
"markdownDescription":"Denies the version command without any pre-configured scope."
},
{
"description":"Default permissions for the plugin, which enables all commands.\n#### This default permission set includes:\n\n- `allow-listen`\n- `allow-unlisten`\n- `allow-emit`\n- `allow-emit-to`",
"type":"string",
"const":"core:event:default",
"markdownDescription":"Default permissions for the plugin, which enables all commands.\n#### This default permission set includes:\n\n- `allow-listen`\n- `allow-unlisten`\n- `allow-emit`\n- `allow-emit-to`"
},
{
"description":"Enables the emit command without any pre-configured scope.",
"type":"string",
"const":"core:event:allow-emit",
"markdownDescription":"Enables the emit command without any pre-configured scope."
},
{
"description":"Enables the emit_to command without any pre-configured scope.",
"type":"string",
"const":"core:event:allow-emit-to",
"markdownDescription":"Enables the emit_to command without any pre-configured scope."
},
{
"description":"Enables the listen command without any pre-configured scope.",
"type":"string",
"const":"core:event:allow-listen",
"markdownDescription":"Enables the listen command without any pre-configured scope."
},
{
"description":"Enables the unlisten command without any pre-configured scope.",
"type":"string",
"const":"core:event:allow-unlisten",
"markdownDescription":"Enables the unlisten command without any pre-configured scope."
},
{
"description":"Denies the emit command without any pre-configured scope.",
"type":"string",
"const":"core:event:deny-emit",
"markdownDescription":"Denies the emit command without any pre-configured scope."
},
{
"description":"Denies the emit_to command without any pre-configured scope.",
"type":"string",
"const":"core:event:deny-emit-to",
"markdownDescription":"Denies the emit_to command without any pre-configured scope."
},
{
"description":"Denies the listen command without any pre-configured scope.",
"type":"string",
"const":"core:event:deny-listen",
"markdownDescription":"Denies the listen command without any pre-configured scope."
},
{
"description":"Denies the unlisten command without any pre-configured scope.",
"type":"string",
"const":"core:event:deny-unlisten",
"markdownDescription":"Denies the unlisten command without any pre-configured scope."
},
{
"description":"Default permissions for the plugin, which enables all commands.\n#### This default permission set includes:\n\n- `allow-new`\n- `allow-from-bytes`\n- `allow-from-path`\n- `allow-rgba`\n- `allow-size`",
"type":"string",
"const":"core:image:default",
"markdownDescription":"Default permissions for the plugin, which enables all commands.\n#### This default permission set includes:\n\n- `allow-new`\n- `allow-from-bytes`\n- `allow-from-path`\n- `allow-rgba`\n- `allow-size`"
},
{
"description":"Enables the from_bytes command without any pre-configured scope.",
"type":"string",
"const":"core:image:allow-from-bytes",
"markdownDescription":"Enables the from_bytes command without any pre-configured scope."
},
{
"description":"Enables the from_path command without any pre-configured scope.",
"type":"string",
"const":"core:image:allow-from-path",
"markdownDescription":"Enables the from_path command without any pre-configured scope."
},
{
"description":"Enables the new command without any pre-configured scope.",
"type":"string",
"const":"core:image:allow-new",
"markdownDescription":"Enables the new command without any pre-configured scope."
},
{
"description":"Enables the rgba command without any pre-configured scope.",
"type":"string",
"const":"core:image:allow-rgba",
"markdownDescription":"Enables the rgba command without any pre-configured scope."
},
{
"description":"Enables the size command without any pre-configured scope.",
"type":"string",
"const":"core:image:allow-size",
"markdownDescription":"Enables the size command without any pre-configured scope."
},
{
"description":"Denies the from_bytes command without any pre-configured scope.",
"type":"string",
"const":"core:image:deny-from-bytes",
"markdownDescription":"Denies the from_bytes command without any pre-configured scope."
},
{
"description":"Denies the from_path command without any pre-configured scope.",
"type":"string",
"const":"core:image:deny-from-path",
"markdownDescription":"Denies the from_path command without any pre-configured scope."
},
{
"description":"Denies the new command without any pre-configured scope.",
"type":"string",
"const":"core:image:deny-new",
"markdownDescription":"Denies the new command without any pre-configured scope."
},
{
"description":"Denies the rgba command without any pre-configured scope.",
"type":"string",
"const":"core:image:deny-rgba",
"markdownDescription":"Denies the rgba command without any pre-configured scope."
},
{
"description":"Denies the size command without any pre-configured scope.",
"type":"string",
"const":"core:image:deny-size",
"markdownDescription":"Denies the size command without any pre-configured scope."
},
{
"description":"Default permissions for the plugin, which enables all commands.\n#### This default permission set includes:\n\n- `allow-new`\n- `allow-append`\n- `allow-prepend`\n- `allow-insert`\n- `allow-remove`\n- `allow-remove-at`\n- `allow-items`\n- `allow-get`\n- `allow-popup`\n- `allow-create-default`\n- `allow-set-as-app-menu`\n- `allow-set-as-window-menu`\n- `allow-text`\n- `allow-set-text`\n- `allow-is-enabled`\n- `allow-set-enabled`\n- `allow-set-accelerator`\n- `allow-set-as-windows-menu-for-nsapp`\n- `allow-set-as-help-menu-for-nsapp`\n- `allow-is-checked`\n- `allow-set-checked`\n- `allow-set-icon`",
"type":"string",
"const":"core:menu:default",
"markdownDescription":"Default permissions for the plugin, which enables all commands.\n#### This default permission set includes:\n\n- `allow-new`\n- `allow-append`\n- `allow-prepend`\n- `allow-insert`\n- `allow-remove`\n- `allow-remove-at`\n- `allow-items`\n- `allow-get`\n- `allow-popup`\n- `allow-create-default`\n- `allow-set-as-app-menu`\n- `allow-set-as-window-menu`\n- `allow-text`\n- `allow-set-text`\n- `allow-is-enabled`\n- `allow-set-enabled`\n- `allow-set-accelerator`\n- `allow-set-as-windows-menu-for-nsapp`\n- `allow-set-as-help-menu-for-nsapp`\n- `allow-is-checked`\n- `allow-set-checked`\n- `allow-set-icon`"
},
{
"description":"Enables the append command without any pre-configured scope.",
"type":"string",
"const":"core:menu:allow-append",
"markdownDescription":"Enables the append command without any pre-configured scope."
},
{
"description":"Enables the create_default command without any pre-configured scope.",
"type":"string",
"const":"core:menu:allow-create-default",
"markdownDescription":"Enables the create_default command without any pre-configured scope."
},
{
"description":"Enables the get command without any pre-configured scope.",
"type":"string",
"const":"core:menu:allow-get",
"markdownDescription":"Enables the get command without any pre-configured scope."
},
{
"description":"Enables the insert command without any pre-configured scope.",
"type":"string",
"const":"core:menu:allow-insert",
"markdownDescription":"Enables the insert command without any pre-configured scope."
},
{
"description":"Enables the is_checked command without any pre-configured scope.",
"type":"string",
"const":"core:menu:allow-is-checked",
"markdownDescription":"Enables the is_checked command without any pre-configured scope."
},
{
"description":"Enables the is_enabled command without any pre-configured scope.",
"type":"string",
"const":"core:menu:allow-is-enabled",
"markdownDescription":"Enables the is_enabled command without any pre-configured scope."
},
{
"description":"Enables the items command without any pre-configured scope.",
"type":"string",
"const":"core:menu:allow-items",
"markdownDescription":"Enables the items command without any pre-configured scope."
},
{
"description":"Enables the new command without any pre-configured scope.",
"type":"string",
"const":"core:menu:allow-new",
"markdownDescription":"Enables the new command without any pre-configured scope."
},
{
"description":"Enables the popup command without any pre-configured scope.",
"type":"string",
"const":"core:menu:allow-popup",
"markdownDescription":"Enables the popup command without any pre-configured scope."
},
{
"description":"Enables the prepend command without any pre-configured scope.",
"type":"string",
"const":"core:menu:allow-prepend",
"markdownDescription":"Enables the prepend command without any pre-configured scope."
},
{
"description":"Enables the remove command without any pre-configured scope.",
"type":"string",
"const":"core:menu:allow-remove",
"markdownDescription":"Enables the remove command without any pre-configured scope."
},
{
"description":"Enables the remove_at command without any pre-configured scope.",
"type":"string",
"const":"core:menu:allow-remove-at",
"markdownDescription":"Enables the remove_at command without any pre-configured scope."
},
{
"description":"Enables the set_accelerator command without any pre-configured scope.",
"type":"string",
"const":"core:menu:allow-set-accelerator",
"markdownDescription":"Enables the set_accelerator command without any pre-configured scope."
},
{
"description":"Enables the set_as_app_menu command without any pre-configured scope.",
"type":"string",
"const":"core:menu:allow-set-as-app-menu",
"markdownDescription":"Enables the set_as_app_menu command without any pre-configured scope."
},
{
"description":"Enables the set_as_help_menu_for_nsapp command without any pre-configured scope.",
"markdownDescription":"Denies the set_as_windows_menu_for_nsapp command without any pre-configured scope."
},
{
"description":"Denies the set_checked command without any pre-configured scope.",
"type":"string",
"const":"core:menu:deny-set-checked",
"markdownDescription":"Denies the set_checked command without any pre-configured scope."
},
{
"description":"Denies the set_enabled command without any pre-configured scope.",
"type":"string",
"const":"core:menu:deny-set-enabled",
"markdownDescription":"Denies the set_enabled command without any pre-configured scope."
},
{
"description":"Denies the set_icon command without any pre-configured scope.",
"type":"string",
"const":"core:menu:deny-set-icon",
"markdownDescription":"Denies the set_icon command without any pre-configured scope."
},
{
"description":"Denies the set_text command without any pre-configured scope.",
"type":"string",
"const":"core:menu:deny-set-text",
"markdownDescription":"Denies the set_text command without any pre-configured scope."
},
{
"description":"Denies the text command without any pre-configured scope.",
"type":"string",
"const":"core:menu:deny-text",
"markdownDescription":"Denies the text command without any pre-configured scope."
},
{
"description":"Default permissions for the plugin, which enables all commands.\n#### This default permission set includes:\n\n- `allow-resolve-directory`\n- `allow-resolve`\n- `allow-normalize`\n- `allow-join`\n- `allow-dirname`\n- `allow-extname`\n- `allow-basename`\n- `allow-is-absolute`",
"type":"string",
"const":"core:path:default",
"markdownDescription":"Default permissions for the plugin, which enables all commands.\n#### This default permission set includes:\n\n- `allow-resolve-directory`\n- `allow-resolve`\n- `allow-normalize`\n- `allow-join`\n- `allow-dirname`\n- `allow-extname`\n- `allow-basename`\n- `allow-is-absolute`"
},
{
"description":"Enables the basename command without any pre-configured scope.",
"type":"string",
"const":"core:path:allow-basename",
"markdownDescription":"Enables the basename command without any pre-configured scope."
},
{
"description":"Enables the dirname command without any pre-configured scope.",
"type":"string",
"const":"core:path:allow-dirname",
"markdownDescription":"Enables the dirname command without any pre-configured scope."
},
{
"description":"Enables the extname command without any pre-configured scope.",
"type":"string",
"const":"core:path:allow-extname",
"markdownDescription":"Enables the extname command without any pre-configured scope."
},
{
"description":"Enables the is_absolute command without any pre-configured scope.",
"type":"string",
"const":"core:path:allow-is-absolute",
"markdownDescription":"Enables the is_absolute command without any pre-configured scope."
},
{
"description":"Enables the join command without any pre-configured scope.",
"type":"string",
"const":"core:path:allow-join",
"markdownDescription":"Enables the join command without any pre-configured scope."
},
{
"description":"Enables the normalize command without any pre-configured scope.",
"type":"string",
"const":"core:path:allow-normalize",
"markdownDescription":"Enables the normalize command without any pre-configured scope."
},
{
"description":"Enables the resolve command without any pre-configured scope.",
"type":"string",
"const":"core:path:allow-resolve",
"markdownDescription":"Enables the resolve command without any pre-configured scope."
},
{
"description":"Enables the resolve_directory command without any pre-configured scope.",
"type":"string",
"const":"core:path:allow-resolve-directory",
"markdownDescription":"Enables the resolve_directory command without any pre-configured scope."
},
{
"description":"Denies the basename command without any pre-configured scope.",
"type":"string",
"const":"core:path:deny-basename",
"markdownDescription":"Denies the basename command without any pre-configured scope."
},
{
"description":"Denies the dirname command without any pre-configured scope.",
"type":"string",
"const":"core:path:deny-dirname",
"markdownDescription":"Denies the dirname command without any pre-configured scope."
},
{
"description":"Denies the extname command without any pre-configured scope.",
"type":"string",
"const":"core:path:deny-extname",
"markdownDescription":"Denies the extname command without any pre-configured scope."
},
{
"description":"Denies the is_absolute command without any pre-configured scope.",
"type":"string",
"const":"core:path:deny-is-absolute",
"markdownDescription":"Denies the is_absolute command without any pre-configured scope."
},
{
"description":"Denies the join command without any pre-configured scope.",
"type":"string",
"const":"core:path:deny-join",
"markdownDescription":"Denies the join command without any pre-configured scope."
},
{
"description":"Denies the normalize command without any pre-configured scope.",
"type":"string",
"const":"core:path:deny-normalize",
"markdownDescription":"Denies the normalize command without any pre-configured scope."
},
{
"description":"Denies the resolve command without any pre-configured scope.",
"type":"string",
"const":"core:path:deny-resolve",
"markdownDescription":"Denies the resolve command without any pre-configured scope."
},
{
"description":"Denies the resolve_directory command without any pre-configured scope.",
"type":"string",
"const":"core:path:deny-resolve-directory",
"markdownDescription":"Denies the resolve_directory command without any pre-configured scope."
},
{
"description":"Default permissions for the plugin, which enables all commands.\n#### This default permission set includes:\n\n- `allow-close`",
"type":"string",
"const":"core:resources:default",
"markdownDescription":"Default permissions for the plugin, which enables all commands.\n#### This default permission set includes:\n\n- `allow-close`"
},
{
"description":"Enables the close command without any pre-configured scope.",
"type":"string",
"const":"core:resources:allow-close",
"markdownDescription":"Enables the close command without any pre-configured scope."
},
{
"description":"Denies the close command without any pre-configured scope.",
"type":"string",
"const":"core:resources:deny-close",
"markdownDescription":"Denies the close command without any pre-configured scope."
},
{
"description":"Default permissions for the plugin, which enables all commands.\n#### This default permission set includes:\n\n- `allow-new`\n- `allow-get-by-id`\n- `allow-remove-by-id`\n- `allow-set-icon`\n- `allow-set-menu`\n- `allow-set-tooltip`\n- `allow-set-title`\n- `allow-set-visible`\n- `allow-set-temp-dir-path`\n- `allow-set-icon-as-template`\n- `allow-set-show-menu-on-left-click`",
"type":"string",
"const":"core:tray:default",
"markdownDescription":"Default permissions for the plugin, which enables all commands.\n#### This default permission set includes:\n\n- `allow-new`\n- `allow-get-by-id`\n- `allow-remove-by-id`\n- `allow-set-icon`\n- `allow-set-menu`\n- `allow-set-tooltip`\n- `allow-set-title`\n- `allow-set-visible`\n- `allow-set-temp-dir-path`\n- `allow-set-icon-as-template`\n- `allow-set-show-menu-on-left-click`"
},
{
"description":"Enables the get_by_id command without any pre-configured scope.",
"type":"string",
"const":"core:tray:allow-get-by-id",
"markdownDescription":"Enables the get_by_id command without any pre-configured scope."
},
{
"description":"Enables the new command without any pre-configured scope.",
"type":"string",
"const":"core:tray:allow-new",
"markdownDescription":"Enables the new command without any pre-configured scope."
},
{
"description":"Enables the remove_by_id command without any pre-configured scope.",
"type":"string",
"const":"core:tray:allow-remove-by-id",
"markdownDescription":"Enables the remove_by_id command without any pre-configured scope."
},
{
"description":"Enables the set_icon command without any pre-configured scope.",
"type":"string",
"const":"core:tray:allow-set-icon",
"markdownDescription":"Enables the set_icon command without any pre-configured scope."
},
{
"description":"Enables the set_icon_as_template command without any pre-configured scope.",
"type":"string",
"const":"core:tray:allow-set-icon-as-template",
"markdownDescription":"Enables the set_icon_as_template command without any pre-configured scope."
},
{
"description":"Enables the set_menu command without any pre-configured scope.",
"type":"string",
"const":"core:tray:allow-set-menu",
"markdownDescription":"Enables the set_menu command without any pre-configured scope."
},
{
"description":"Enables the set_show_menu_on_left_click command without any pre-configured scope.",
"markdownDescription":"Denies the set_show_menu_on_left_click command without any pre-configured scope."
},
{
"description":"Denies the set_temp_dir_path command without any pre-configured scope.",
"type":"string",
"const":"core:tray:deny-set-temp-dir-path",
"markdownDescription":"Denies the set_temp_dir_path command without any pre-configured scope."
},
{
"description":"Denies the set_title command without any pre-configured scope.",
"type":"string",
"const":"core:tray:deny-set-title",
"markdownDescription":"Denies the set_title command without any pre-configured scope."
},
{
"description":"Denies the set_tooltip command without any pre-configured scope.",
"type":"string",
"const":"core:tray:deny-set-tooltip",
"markdownDescription":"Denies the set_tooltip command without any pre-configured scope."
},
{
"description":"Denies the set_visible command without any pre-configured scope.",
"type":"string",
"const":"core:tray:deny-set-visible",
"markdownDescription":"Denies the set_visible command without any pre-configured scope."
},
{
"description":"Default permissions for the plugin.\n#### This default permission set includes:\n\n- `allow-get-all-webviews`\n- `allow-webview-position`\n- `allow-webview-size`\n- `allow-internal-toggle-devtools`",
"type":"string",
"const":"core:webview:default",
"markdownDescription":"Default permissions for the plugin.\n#### This default permission set includes:\n\n- `allow-get-all-webviews`\n- `allow-webview-position`\n- `allow-webview-size`\n- `allow-internal-toggle-devtools`"
},
{
"description":"Enables the clear_all_browsing_data command without any pre-configured scope.",
"description":"This permission set configures which\nprocess features are by default exposed.\n\n#### Granted Permissions\n\nThis enables to quit via `allow-exit` and restart via `allow-restart`\nthe application.\n\n#### This default permission set includes:\n\n- `allow-exit`\n- `allow-restart`",
"type":"string",
"const":"process:default",
"markdownDescription":"This permission set configures which\nprocess features are by default exposed.\n\n#### Granted Permissions\n\nThis enables to quit via `allow-exit` and restart via `allow-restart`\nthe application.\n\n#### This default permission set includes:\n\n- `allow-exit`\n- `allow-restart`"
},
{
"description":"Enables the exit command without any pre-configured scope.",
"type":"string",
"const":"process:allow-exit",
"markdownDescription":"Enables the exit command without any pre-configured scope."
},
{
"description":"Enables the restart command without any pre-configured scope.",
"type":"string",
"const":"process:allow-restart",
"markdownDescription":"Enables the restart command without any pre-configured scope."
},
{
"description":"Denies the exit command without any pre-configured scope.",
"type":"string",
"const":"process:deny-exit",
"markdownDescription":"Denies the exit command without any pre-configured scope."
},
{
"description":"Denies the restart command without any pre-configured scope.",
"type":"string",
"const":"process:deny-restart",
"markdownDescription":"Denies the restart command without any pre-configured scope."
},
{
"description":"This permission set configures which kind of\nupdater functions are exposed to the frontend.\n\n#### Granted Permissions\n\nThe full workflow from checking for updates to installing them\nis enabled.\n\n\n#### This default permission set includes:\n\n- `allow-check`\n- `allow-download`\n- `allow-install`\n- `allow-download-and-install`",
"type":"string",
"const":"updater:default",
"markdownDescription":"This permission set configures which kind of\nupdater functions are exposed to the frontend.\n\n#### Granted Permissions\n\nThe full workflow from checking for updates to installing them\nis enabled.\n\n\n#### This default permission set includes:\n\n- `allow-check`\n- `allow-download`\n- `allow-install`\n- `allow-download-and-install`"
},
{
"description":"Enables the check command without any pre-configured scope.",
"type":"string",
"const":"updater:allow-check",
"markdownDescription":"Enables the check command without any pre-configured scope."
},
{
"description":"Enables the download command without any pre-configured scope.",
"type":"string",
"const":"updater:allow-download",
"markdownDescription":"Enables the download command without any pre-configured scope."
},
{
"description":"Enables the download_and_install command without any pre-configured scope.",
"type":"string",
"const":"updater:allow-download-and-install",
"markdownDescription":"Enables the download_and_install command without any pre-configured scope."
},
{
"description":"Enables the install command without any pre-configured scope.",
"type":"string",
"const":"updater:allow-install",
"markdownDescription":"Enables the install command without any pre-configured scope."
},
{
"description":"Denies the check command without any pre-configured scope.",
"type":"string",
"const":"updater:deny-check",
"markdownDescription":"Denies the check command without any pre-configured scope."
},
{
"description":"Denies the download command without any pre-configured scope.",
"type":"string",
"const":"updater:deny-download",
"markdownDescription":"Denies the download command without any pre-configured scope."
},
{
"description":"Denies the download_and_install command without any pre-configured scope.",
"type":"string",
"const":"updater:deny-download-and-install",
"markdownDescription":"Denies the download_and_install command without any pre-configured scope."
},
{
"description":"Denies the install command without any pre-configured scope.",
"type":"string",
"const":"updater:deny-install",
"markdownDescription":"Denies the install command without any pre-configured scope."