Closes https://github.com/zed-industries/zed/issues/12589 Forces Zed to require user permissions before running any basic potentially dangerous actions: parsing and synchronizing `.zed/settings.json`, downloading and spawning any language and MCP servers (includes `prettier` and `copilot` instances) and all `NodeRuntime` interactions. There are more we can add later, among the ideas: DAP downloads on debugger start, Python virtual environment, etc. By default, Zed starts in restricted mode and shows a `! Restricted Mode` in the title bar, no aforementioned actions are executed. Clicking it or calling `workspace::ToggleWorktreeSecurity` command will bring a modal to trust worktrees or dismiss the modal: <img width="1341" height="475" alt="1" src="https://github.com/user-attachments/assets/4fabe63a-6494-42c7-b0ea-606abb1c0c20" /> Agent Panel shows a message too: <img width="644" height="106" alt="2" src="https://github.com/user-attachments/assets/0a4554bc-1f1e-455b-b97d-244d7d6a3259" /> This works on local, SSH and WSL remote projects, trusted worktrees are persisted between Zed restarts. There's a way to clear all persisted trust with `workspace::ClearTrustedWorktrees`, this will restart Zed. This mechanism can be turned off with settings: ```jsonc "session": { "trust_all_worktrees": true } ``` in this mode, all worktrees will be trusted by default, allowing all actions, but no auto trust will be persisted: hence, when the setting is changed back, auto trusted worktrees will require another trust confirmation. This settings switch was added to the onboarding view also. Release Notes: - Introduced worktree trust mechanism, can be turned off with `"session": { "trust_all_worktrees": true }` --------- Co-authored-by: Matt Miller <mattrx@gmail.com> Co-authored-by: Danilo Leal <daniloleal09@gmail.com> Co-authored-by: John D. Swanson <swanson.john.d@gmail.com>
123 lines
3.4 KiB
TOML
123 lines
3.4 KiB
TOML
[package]
|
|
name = "project"
|
|
version = "0.1.0"
|
|
edition.workspace = true
|
|
publish.workspace = true
|
|
license = "GPL-3.0-or-later"
|
|
|
|
[lints]
|
|
workspace = true
|
|
|
|
[lib]
|
|
path = "src/project.rs"
|
|
doctest = false
|
|
|
|
[features]
|
|
test-support = [
|
|
"buffer_diff/test-support",
|
|
"client/test-support",
|
|
"language/test-support",
|
|
"settings/test-support",
|
|
"snippet_provider/test-support",
|
|
"text/test-support",
|
|
"prettier/test-support",
|
|
"worktree/test-support",
|
|
"gpui/test-support",
|
|
"dap/test-support",
|
|
"dap_adapters/test-support",
|
|
]
|
|
|
|
[dependencies]
|
|
aho-corasick.workspace = true
|
|
anyhow.workspace = true
|
|
askpass.workspace = true
|
|
async-trait.workspace = true
|
|
base64.workspace = true
|
|
buffer_diff.workspace = true
|
|
circular-buffer.workspace = true
|
|
client.workspace = true
|
|
clock.workspace = true
|
|
collections.workspace = true
|
|
context_server.workspace = true
|
|
dap.workspace = true
|
|
db.workspace = true
|
|
extension.workspace = true
|
|
fancy-regex.workspace = true
|
|
fs.workspace = true
|
|
futures.workspace = true
|
|
fuzzy.workspace = true
|
|
git.workspace = true
|
|
git_hosting_providers.workspace = true
|
|
globset.workspace = true
|
|
gpui.workspace = true
|
|
http_client.workspace = true
|
|
image.workspace = true
|
|
itertools.workspace = true
|
|
indexmap.workspace = true
|
|
language.workspace = true
|
|
log.workspace = true
|
|
lsp.workspace = true
|
|
markdown.workspace = true
|
|
node_runtime.workspace = true
|
|
parking_lot.workspace = true
|
|
paths.workspace = true
|
|
postage.workspace = true
|
|
prettier.workspace = true
|
|
rand.workspace = true
|
|
regex.workspace = true
|
|
remote.workspace = true
|
|
rpc.workspace = true
|
|
schemars.workspace = true
|
|
semver.workspace = true
|
|
serde.workspace = true
|
|
serde_json.workspace = true
|
|
settings.workspace = true
|
|
sha2.workspace = true
|
|
shellexpand.workspace = true
|
|
smallvec.workspace = true
|
|
smol.workspace = true
|
|
snippet.workspace = true
|
|
snippet_provider.workspace = true
|
|
sum_tree.workspace = true
|
|
task.workspace = true
|
|
tempfile.workspace = true
|
|
terminal.workspace = true
|
|
text.workspace = true
|
|
toml.workspace = true
|
|
url.workspace = true
|
|
util.workspace = true
|
|
watch.workspace = true
|
|
wax.workspace = true
|
|
which.workspace = true
|
|
worktree.workspace = true
|
|
zeroize.workspace = true
|
|
zlog.workspace = true
|
|
ztracing.workspace = true
|
|
tracing.workspace = true
|
|
|
|
[dev-dependencies]
|
|
client = { workspace = true, features = ["test-support"] }
|
|
db = { workspace = true, features = ["test-support"] }
|
|
collections = { workspace = true, features = ["test-support"] }
|
|
context_server = { workspace = true, features = ["test-support"] }
|
|
buffer_diff = { workspace = true, features = ["test-support"] }
|
|
dap = { workspace = true, features = ["test-support"] }
|
|
dap_adapters = { workspace = true, features = ["test-support"] }
|
|
fs = { workspace = true, features = ["test-support"] }
|
|
git2.workspace = true
|
|
gpui = { workspace = true, features = ["test-support"] }
|
|
language = { workspace = true, features = ["test-support"] }
|
|
lsp = { workspace = true, features = ["test-support"] }
|
|
prettier = { workspace = true, features = ["test-support"] }
|
|
pretty_assertions.workspace = true
|
|
release_channel.workspace = true
|
|
rpc = { workspace = true, features = ["test-support"] }
|
|
settings = { workspace = true, features = ["test-support"] }
|
|
snippet_provider = { workspace = true, features = ["test-support"] }
|
|
unindent.workspace = true
|
|
util = { workspace = true, features = ["test-support"] }
|
|
worktree = { workspace = true, features = ["test-support"] }
|
|
|
|
[package.metadata.cargo-machete]
|
|
ignored = ["tracing"]
|