fix(fs): allow open, seek and fstat in the write permission sets (#3630)

* fix(fs): allow open, seek and fstat in the write permission sets

The stream path of writeFile calls `open`, which only the nested command
list of `allow-write-file` granted (plugins/fs/permissions/write-all.toml,
write-files.toml), so `fs:allow-appdata-write-recursive` and the other
write sets rejected streamed writes; seek/fstat were missing for
FileHandles created under these sets.

Adds open, seek and fstat to write-all and write-files. This widens the
write sets slightly (open is already implied by allow-write-file); the
generated reference does not list set members, so nothing to regenerate.

* use dependencies instead

plugins/fs/permissions/schemas/schema.json

@@ -2035,16 +2035,16 @@
           "markdownDescription": "An empty permission you can use to modify the global scope.\n\n## Example\n\n```json\n{\n  \"identifier\": \"read-documents\",\n  \"windows\": [\"main\"],\n  \"permissions\": [\n    \"fs:allow-read\",\n    {\n      \"identifier\": \"fs:scope\",\n      \"allow\": [\n        \"$APPDATA/documents/**/*\"\n      ],\n      \"deny\": [\n        \"$APPDATA/documents/secret.txt\"\n      ]\n    }\n  ]\n}\n```\n"
         },
         {
-          "description": "This enables all write related commands without any pre-configured accessible paths.",
+          "description": "This enables all write related commands without any pre-configured accessible paths.\n#### This permission set includes:\n\n- `allow-mkdir`\n- `allow-create`\n- `allow-copy-file`\n- `allow-remove`\n- `allow-rename`\n- `allow-truncate`\n- `allow-ftruncate`\n- `allow-write`\n- `allow-write-file`\n- `allow-write-text-file`",
           "type": "string",
           "const": "write-all",
-          "markdownDescription": "This enables all write related commands without any pre-configured accessible paths."
+          "markdownDescription": "This enables all write related commands without any pre-configured accessible paths.\n#### This permission set includes:\n\n- `allow-mkdir`\n- `allow-create`\n- `allow-copy-file`\n- `allow-remove`\n- `allow-rename`\n- `allow-truncate`\n- `allow-ftruncate`\n- `allow-write`\n- `allow-write-file`\n- `allow-write-text-file`"
         },
         {
-          "description": "This enables all file write related commands without any pre-configured accessible paths.",
+          "description": "This enables all file write related commands without any pre-configured accessible paths.\n#### This permission set includes:\n\n- `allow-create`\n- `allow-copy-file`\n- `allow-remove`\n- `allow-rename`\n- `allow-truncate`\n- `allow-ftruncate`\n- `allow-write`\n- `allow-write-file`\n- `allow-write-text-file`",
           "type": "string",
           "const": "write-files",
-          "markdownDescription": "This enables all file write related commands without any pre-configured accessible paths."
+          "markdownDescription": "This enables all file write related commands without any pre-configured accessible paths.\n#### This permission set includes:\n\n- `allow-create`\n- `allow-copy-file`\n- `allow-remove`\n- `allow-rename`\n- `allow-truncate`\n- `allow-ftruncate`\n- `allow-write`\n- `allow-write-file`\n- `allow-write-text-file`"
         }
       ]
     }

plugins/fs/permissions/write-all.toml

@@ -1,17 +1,17 @@
 "$schema" = "schemas/schema.json"
 
-[[permission]]
+[[set]]
 identifier = "write-all"
 description = "This enables all write related commands without any pre-configured accessible paths."
-commands.allow = [
-  "mkdir",
-  "create",
-  "copy_file",
-  "remove",
-  "rename",
-  "truncate",
-  "ftruncate",
-  "write",
-  "write_file",
-  "write_text_file",
+permissions = [
+  "allow-mkdir",
+  "allow-create",
+  "allow-copy-file",
+  "allow-remove",
+  "allow-rename",
+  "allow-truncate",
+  "allow-ftruncate",
+  "allow-write",
+  "allow-write-file",
+  "allow-write-text-file",
 ]

plugins/fs/permissions/write-files.toml

@@ -1,16 +1,16 @@
 "$schema" = "schemas/schema.json"
 
-[[permission]]
+[[set]]
 identifier = "write-files"
 description = "This enables all file write related commands without any pre-configured accessible paths."
-commands.allow = [
-  "create",
-  "copy_file",
-  "remove",
-  "rename",
-  "truncate",
-  "ftruncate",
-  "write",
-  "write_file",
-  "write_text_file",
+permissions = [
+  "allow-create",
+  "allow-copy-file",
+  "allow-remove",
+  "allow-rename",
+  "allow-truncate",
+  "allow-ftruncate",
+  "allow-write",
+  "allow-write-file",
+  "allow-write-text-file",
 ]