mirror of
https://github.com/NanmiCoder/cc-haha
synced 2026-07-16 13:03:31 +08:00
Tauri's desktop webview injects window.confirm through the dialog confirm command, but the default desktop capability only allowed the message dialog command. Windows release builds could therefore reject confirm at ACL time even though the browser-facing code path looked valid in local web development. Constraint: Tauri plugin-dialog 2.7 still exposes window.confirm as plugin:dialog|confirm in the injected webview shim. Rejected: Grant dialog:default | broader than the specific confirm compatibility gap. Confidence: high Scope-risk: narrow Directive: Keep confirm permission covered while the desktop webview exposes browser confirm shims. Tested: cd desktop && bun run test -- --run src/__tests__/tauriCapabilities.test.ts Tested: bun run check:desktop Tested: bun run check:native Not-tested: Windows release package manual smoke