ddidderr
691176e1d5
Remote manifests were validated before mutation, but preparation, chunk writes, sentinel transactions, and ownership recovery later reopened ambient paths. A link or reparse-point swap between those steps could redirect a mutation outside the validated game root. Introduce a retained ConfinedGameRoot capability backed by cap-primitives. Carry typed validated destinations into chunk plans, walk every component without following links, and perform payload, sentinel, stale-file, abort, and recovery mutations relative to the retained handle. File writes and verification use the same opened handle, while final durability syncs payload files and unique parent directories before committing version.ini. Make ownership-record publication phase-aware as well. A directory-sync failure after record rename now stops before payload mutation without performing an unsafe old-sentinel rollback. Record the capability-root, bounded-handle, hard-link, and unproven Windows durability tradeoffs in the decision log. Test Plan: - `just clippy` -- passed - `just test` -- passed; 185 peer tests and the full workspace are green - `just fmt` -- Rust, TOML, and Prettier completed; command remains nonzero on 39 pre-existing rumdl issues outside this change - `git diff --cached --check` -- passed
81 lines
1.7 KiB
TOML
81 lines
1.7 KiB
TOML
[workspace]
|
|
resolver = "3"
|
|
members = [
|
|
"crates/lanspread-compat",
|
|
"crates/lanspread-db",
|
|
"crates/lanspread-mdns",
|
|
"crates/lanspread-peer",
|
|
"crates/lanspread-peer-cli",
|
|
"crates/lanspread-proto",
|
|
"crates/lanspread-tauri-deno-ts/src-tauri",
|
|
"crates/lanspread-utils",
|
|
]
|
|
|
|
[workspace.dependencies]
|
|
base64 = "0.23"
|
|
bytes = { version = "1", features = ["serde"] }
|
|
cap-fs-ext = { version = "4", default-features = false }
|
|
cap-primitives = "4"
|
|
crc32fast = "1"
|
|
eyre = "0.6"
|
|
futures = "0.3"
|
|
gethostname = "1"
|
|
if-addrs = "0.15"
|
|
log = "0.4"
|
|
mdns-sd = "0.20"
|
|
mimalloc = { version = "0.1", features = ["secure"] }
|
|
notify = "8"
|
|
s2n-quic = { version = "1", features = ["provider-event-tracing"] }
|
|
serde = { version = "1", features = ["derive"] }
|
|
serde_json = "1"
|
|
sqlx = {
|
|
version = "0.9",
|
|
default-features = false,
|
|
features = [
|
|
"derive",
|
|
"runtime-tokio",
|
|
"sqlite",
|
|
]
|
|
}
|
|
strum = { version = "0.28", features = ["derive"] }
|
|
tauri = { version = "2", features = [] }
|
|
tauri-plugin-dialog = "2"
|
|
tauri-plugin-shell = "2"
|
|
tauri-plugin-store = "2"
|
|
time = { version = "0.3", features = ["local-offset"] }
|
|
tokio = { version = "1", features = ["full"] }
|
|
tokio-util = { version = "0.7", features = ["codec", "rt"] }
|
|
tracing = "0.1"
|
|
tracing-log = "0.2"
|
|
tracing-subscriber = "0.3"
|
|
uuid = { version = "1", features = ["v7"] }
|
|
walkdir = "2"
|
|
windows = {
|
|
version = "0.62",
|
|
features = [
|
|
"Win32",
|
|
"Win32_UI",
|
|
"Win32_UI_Shell",
|
|
"Win32_UI_WindowsAndMessaging",
|
|
]
|
|
}
|
|
|
|
[profile.release]
|
|
debug = true
|
|
strip = false
|
|
debug-assertions = true
|
|
overflow-checks = true
|
|
lto = false
|
|
panic = "unwind"
|
|
incremental = true
|
|
|
|
[profile.production]
|
|
inherits = "release"
|
|
debug = false
|
|
strip = true
|
|
debug-assertions = false
|
|
overflow-checks = false
|
|
lto = true
|
|
incremental = false
|
|
codegen-units = 1
|