f21cec7cb1
Closes https://github.com/zed-industries/zed/issues/12589 Forces Zed to require user permissions before running any basic potentially dangerous actions: parsing and synchronizing `.zed/settings.json`, downloading and spawning any language and MCP servers (includes `prettier` and `copilot` instances) and all `NodeRuntime` interactions. There are more we can add later, among the ideas: DAP downloads on debugger start, Python virtual environment, etc. By default, Zed starts in restricted mode and shows a `! Restricted Mode` in the title bar, no aforementioned actions are executed. Clicking it or calling `workspace::ToggleWorktreeSecurity` command will bring a modal to trust worktrees or dismiss the modal: <img width="1341" height="475" alt="1" src="https://github.com/user-attachments/assets/4fabe63a-6494-42c7-b0ea-606abb1c0c20" /> Agent Panel shows a message too: <img width="644" height="106" alt="2" src="https://github.com/user-attachments/assets/0a4554bc-1f1e-455b-b97d-244d7d6a3259" /> This works on local, SSH and WSL remote projects, trusted worktrees are persisted between Zed restarts. There's a way to clear all persisted trust with `workspace::ClearTrustedWorktrees`, this will restart Zed. This mechanism can be turned off with settings: ```jsonc "session": { "trust_all_worktrees": true } ``` in this mode, all worktrees will be trusted by default, allowing all actions, but no auto trust will be persisted: hence, when the setting is changed back, auto trusted worktrees will require another trust confirmation. This settings switch was added to the onboarding view also. Release Notes: - Introduced worktree trust mechanism, can be turned off with `"session": { "trust_all_worktrees": true }` --------- Co-authored-by: Matt Miller <mattrx@gmail.com> Co-authored-by: Danilo Leal <daniloleal09@gmail.com> Co-authored-by: John D. Swanson <swanson.john.d@gmail.com>
110 lines
3.1 KiB
TOML
110 lines
3.1 KiB
TOML
[package]
|
|
name = "remote_server"
|
|
description = "Daemon used for remote editing"
|
|
edition.workspace = true
|
|
version = "0.1.0"
|
|
publish.workspace = true
|
|
license = "GPL-3.0-or-later"
|
|
|
|
[lints]
|
|
workspace = true
|
|
|
|
[lib]
|
|
path = "src/remote_server.rs"
|
|
doctest = false
|
|
|
|
[[bin]]
|
|
name = "remote_server"
|
|
|
|
[features]
|
|
default = []
|
|
debug-embed = ["dep:rust-embed"]
|
|
test-support = ["fs/test-support"]
|
|
|
|
[dependencies]
|
|
anyhow.workspace = true
|
|
askpass.workspace = true
|
|
clap.workspace = true
|
|
client.workspace = true
|
|
collections.workspace = true
|
|
dap_adapters.workspace = true
|
|
debug_adapter_extension.workspace = true
|
|
env_logger.workspace = true
|
|
extension.workspace = true
|
|
extension_host.workspace = true
|
|
fs.workspace = true
|
|
futures.workspace = true
|
|
git.workspace = true
|
|
git_hosting_providers.workspace = true
|
|
git2 = { workspace = true, features = ["vendored-libgit2"] }
|
|
gpui.workspace = true
|
|
gpui_tokio.workspace = true
|
|
http_client.workspace = true
|
|
image.workspace = true
|
|
json_schema_store.workspace = true
|
|
language.workspace = true
|
|
language_extension.workspace = true
|
|
languages.workspace = true
|
|
log.workspace = true
|
|
lsp.workspace = true
|
|
node_runtime.workspace = true
|
|
paths.workspace = true
|
|
project.workspace = true
|
|
proto.workspace = true
|
|
release_channel.workspace = true
|
|
remote.workspace = true
|
|
reqwest_client.workspace = true
|
|
rpc.workspace = true
|
|
rust-embed = { workspace = true, optional = true, features = ["debug-embed"] }
|
|
semver.workspace = true
|
|
serde.workspace = true
|
|
serde_json.workspace = true
|
|
settings.workspace = true
|
|
shellexpand.workspace = true
|
|
smol.workspace = true
|
|
sysinfo.workspace = true
|
|
task.workspace = true
|
|
util.workspace = true
|
|
watch.workspace = true
|
|
worktree.workspace = true
|
|
thiserror.workspace = true
|
|
rayon.workspace = true
|
|
|
|
[target.'cfg(not(windows))'.dependencies]
|
|
crashes.workspace = true
|
|
crash-handler.workspace = true
|
|
fork.workspace = true
|
|
libc.workspace = true
|
|
minidumper.workspace = true
|
|
|
|
[dev-dependencies]
|
|
action_log.workspace = true
|
|
agent = { workspace = true, features = ["test-support"] }
|
|
client = { workspace = true, features = ["test-support"] }
|
|
clock = { workspace = true, features = ["test-support"] }
|
|
dap = { workspace = true, features = ["test-support"] }
|
|
editor = { workspace = true, features = ["test-support"] }
|
|
workspace = { workspace = true, features = ["test-support"] }
|
|
fs = { workspace = true, features = ["test-support"] }
|
|
gpui = { workspace = true, features = ["test-support"] }
|
|
http_client = { workspace = true, features = ["test-support"] }
|
|
language = { workspace = true, features = ["test-support"] }
|
|
node_runtime = { workspace = true, features = ["test-support"] }
|
|
pretty_assertions.workspace = true
|
|
project = { workspace = true, features = ["test-support"] }
|
|
remote = { workspace = true, features = ["test-support"] }
|
|
theme = { workspace = true, features = ["test-support"] }
|
|
language_model = { workspace = true, features = ["test-support"] }
|
|
lsp = { workspace = true, features = ["test-support"] }
|
|
prompt_store.workspace = true
|
|
unindent.workspace = true
|
|
serde_json.workspace = true
|
|
zlog.workspace = true
|
|
|
|
[build-dependencies]
|
|
cargo_toml.workspace = true
|
|
toml.workspace = true
|
|
|
|
[package.metadata.cargo-machete]
|
|
ignored = ["git2", "rust-embed", "paths"]
|