originv0.2.0

← All examples

Manifest to capability file

The demo’s app.toml assigns the main window the standard-dashboard profile. cargo xtask generate derives src-tauri/capabilities/standard-dashboard.json from it: explicit permissions, no filesystem, shell or process access.

Manifest to capability file

examples/demo/app.toml
# What this product is (ADR-0021).
#
# The composition root in src-tauri/src/lib.rs answers the other question — how it is
# assembled. Everything derivable from this file is generated, not hand-written:
# `cargo xtask generate`.

[origin]
version = "0.2.0"

[product]
id = "dev.origin.demo"
name = "Origin Demo"
version = "0.1.0"
description = "Reference application for the Origin architecture."

[platform]
tray = true
notifications = true
single_instance = true
window_state = true

[modules]
pulse = true

[security.windows]
main = { profile = "standard-dashboard" }
{
  "$schema": "../gen/schemas/desktop-schema.json",
  "identifier": "standard-dashboard",
  "description": "Main window: reads application state and receives platform events. No filesystem, no shell, no process execution. Generated from app.toml — do not edit.",
  "windows": [
    "main"
  ],
  "permissions": [
    "core:default",
    "core:event:allow-listen",
    "core:event:allow-unlisten"
  ]
}
  • app.toml
  • security profile
  • cargo xtask generate