mirror of
https://github.com/NeuralNomadsAI/CodeNomad.git
synced 2026-08-21 22:33:32 +00:00
## Summary - identify remote CodeNomad webviews explicitly as Tauri hosts - grant remote-* windows the minimum native notification permissions - keep dialogs, opener access, menus, and other desktop privileges restricted to the main window ## Cause Remote windows were marked with the remote window context but not with the Tauri runtime host. The UI therefore selected the Web Notification API inside WebView2, where requesting permission had no effect. Those windows also did not match a Tauri capability that allowed notification plugin commands. ## Implementation The initialization script now sets both runtime host and window context before remote UI scripts run. A dedicated capability permits only permission checks, permission requests, and notification delivery for configured HTTP/HTTPS remote origins. ## Validation - cargo test --manifest-path packages/tauri-app/src-tauri/Cargo.toml: 85 passed - npm run typecheck --workspace @codenomad/ui - npm run build:ui - git diff --check - two independent review rounds: zero findings after least-privilege cleanup Fixes #640 |
||
|---|---|---|
| .. | ||
| ISSUE_TEMPLATE | ||
| workflows | ||