Breadway 3865327c66 fix(module-host): canonicalize path grants and exec without a shell ... RPC-side path_allowed now canonicalizes (parent+filename for new files) and uses Path::starts_with so ../.ssh and /Wallpapers-evil cannot ride a Wallpapers grant. exec/exec_capture parse argv, reject shell metacharacters, and spawn Command::new instead of sh -c. Reserve the daemon-synthesized module/state/widget/reload event families.		2026-08-23 14:38:52 +08:00
..
apps.rs	fix(module-host): canonicalize path grants and exec without a shell	2026-08-23 14:38:52 +08:00
glob.rs	Add filesystem/git/podman/systemd adapters, git/shell hooks, bread-emit CLI, app-detection helpers	2026-07-19 03:05:57 +08:00
lib.rs	Add Workstream G: out-of-process, Landlock-sandboxed module runtime	2026-08-05 04:02:05 +08:00
module_host_ipc.rs	Add Workstream G: out-of-process, Landlock-sandboxed module runtime	2026-08-05 04:02:05 +08:00
permissions.rs	Add capability-scoped module API (Workstream D)	2026-08-04 22:24:16 +08:00
widget.rs	Will change this commit message to mean something later	2026-07-22 19:52:16 +08:00