feat: update to tauri beta, add permissions (#862)

Co-authored-by: Lucas Nogueira <lucas@tauri.app>
Co-authored-by: Lucas Nogueira <lucas@crabnebula.dev>

plugins/fs/permissions/.gitignore

@@ -0,0 +1 @@
+schemas/

plugins/fs/permissions/autogenerated/base-directories/app.toml

@@ -0,0 +1,78 @@
+# Automatically generated - DO NOT EDIT!
+
+"$schema" = "../../schemas/schema.json"
+
+# Scopes Section
+# This section contains scopes, which define file level access
+
+[[permission]]
+identifier = "scope-app-recursive"
+description = "This scope recursive access to the complete `$APP` folder, including sub directories and files."
+
+[[permission.scope.allow]]
+path = "$APP/**"
+
+[[permission]]
+identifier = "scope-app"
+description = "This scope permits access to all files and list content of top level directories in the `$APP`folder."
+
+[[permission.scope.allow]]
+path = "$APP/*"
+
+[[permission]]
+identifier = "scope-app-index"
+description = "This scope permits to list all files and folders in the `$APP`folder."
+
+[[permission.scope.allow]]
+path = "$APP/"
+
+# Sets Section
+# This section combines the scope elements with enablement of commands
+
+[[set]]
+identifier = "allow-app-read-recursive"
+description = "This allows full recursive read access to the complete `$APP` folder, files and subdirectories."
+permissions = [
+    "read-all",
+    "scope-app-recursive"
+]
+
+[[set]]
+identifier = "allow-app-write-recursive"
+description = "This allows full recusrive write access to the complete `$APP` folder, files and subdirectories."
+permissions = [
+    "write-all",
+    "scope-app-recursive"
+]
+
+[[set]]
+identifier = "allow-app-read"
+description = "This allows non-recursive read access to the `$APP` folder."
+permissions = [
+    "read-all",
+    "scope-app"
+]
+
+[[set]]
+identifier = "allow-app-write"
+description = "This allows non-recursive write access to the `$APP` folder."
+permissions = [
+    "write-all",
+    "scope-app"
+]
+
+[[set]]
+identifier = "allow-app-meta-recursive"
+description = "This allows read access to metadata of the `$APP` folder, including file listing and statistics."
+permissions = [
+    "read-meta",
+    "scope-app-recursive"
+]
+
+[[set]]
+identifier = "allow-app-meta"
+description = "This allows read access to metadata of the `$APP` folder, including file listing and statistics."
+permissions = [
+    "read-meta",
+    "scope-app-index"
+]

plugins/fs/permissions/autogenerated/base-directories/appcache.toml

@@ -0,0 +1,78 @@
+# Automatically generated - DO NOT EDIT!
+
+"$schema" = "../../schemas/schema.json"
+
+# Scopes Section
+# This section contains scopes, which define file level access
+
+[[permission]]
+identifier = "scope-appcache-recursive"
+description = "This scope recursive access to the complete `$APPCACHE` folder, including sub directories and files."
+
+[[permission.scope.allow]]
+path = "$APPCACHE/**"
+
+[[permission]]
+identifier = "scope-appcache"
+description = "This scope permits access to all files and list content of top level directories in the `$APPCACHE`folder."
+
+[[permission.scope.allow]]
+path = "$APPCACHE/*"
+
+[[permission]]
+identifier = "scope-appcache-index"
+description = "This scope permits to list all files and folders in the `$APPCACHE`folder."
+
+[[permission.scope.allow]]
+path = "$APPCACHE/"
+
+# Sets Section
+# This section combines the scope elements with enablement of commands
+
+[[set]]
+identifier = "allow-appcache-read-recursive"
+description = "This allows full recursive read access to the complete `$APPCACHE` folder, files and subdirectories."
+permissions = [
+    "read-all",
+    "scope-appcache-recursive"
+]
+
+[[set]]
+identifier = "allow-appcache-write-recursive"
+description = "This allows full recusrive write access to the complete `$APPCACHE` folder, files and subdirectories."
+permissions = [
+    "write-all",
+    "scope-appcache-recursive"
+]
+
+[[set]]
+identifier = "allow-appcache-read"
+description = "This allows non-recursive read access to the `$APPCACHE` folder."
+permissions = [
+    "read-all",
+    "scope-appcache"
+]
+
+[[set]]
+identifier = "allow-appcache-write"
+description = "This allows non-recursive write access to the `$APPCACHE` folder."
+permissions = [
+    "write-all",
+    "scope-appcache"
+]
+
+[[set]]
+identifier = "allow-appcache-meta-recursive"
+description = "This allows read access to metadata of the `$APPCACHE` folder, including file listing and statistics."
+permissions = [
+    "read-meta",
+    "scope-appcache-recursive"
+]
+
+[[set]]
+identifier = "allow-appcache-meta"
+description = "This allows read access to metadata of the `$APPCACHE` folder, including file listing and statistics."
+permissions = [
+    "read-meta",
+    "scope-appcache-index"
+]

plugins/fs/permissions/autogenerated/base-directories/appconfig.toml

@@ -0,0 +1,78 @@
+# Automatically generated - DO NOT EDIT!
+
+"$schema" = "../../schemas/schema.json"
+
+# Scopes Section
+# This section contains scopes, which define file level access
+
+[[permission]]
+identifier = "scope-appconfig-recursive"
+description = "This scope recursive access to the complete `$APPCONFIG` folder, including sub directories and files."
+
+[[permission.scope.allow]]
+path = "$APPCONFIG/**"
+
+[[permission]]
+identifier = "scope-appconfig"
+description = "This scope permits access to all files and list content of top level directories in the `$APPCONFIG`folder."
+
+[[permission.scope.allow]]
+path = "$APPCONFIG/*"
+
+[[permission]]
+identifier = "scope-appconfig-index"
+description = "This scope permits to list all files and folders in the `$APPCONFIG`folder."
+
+[[permission.scope.allow]]
+path = "$APPCONFIG/"
+
+# Sets Section
+# This section combines the scope elements with enablement of commands
+
+[[set]]
+identifier = "allow-appconfig-read-recursive"
+description = "This allows full recursive read access to the complete `$APPCONFIG` folder, files and subdirectories."
+permissions = [
+    "read-all",
+    "scope-appconfig-recursive"
+]
+
+[[set]]
+identifier = "allow-appconfig-write-recursive"
+description = "This allows full recusrive write access to the complete `$APPCONFIG` folder, files and subdirectories."
+permissions = [
+    "write-all",
+    "scope-appconfig-recursive"
+]
+
+[[set]]
+identifier = "allow-appconfig-read"
+description = "This allows non-recursive read access to the `$APPCONFIG` folder."
+permissions = [
+    "read-all",
+    "scope-appconfig"
+]
+
+[[set]]
+identifier = "allow-appconfig-write"
+description = "This allows non-recursive write access to the `$APPCONFIG` folder."
+permissions = [
+    "write-all",
+    "scope-appconfig"
+]
+
+[[set]]
+identifier = "allow-appconfig-meta-recursive"
+description = "This allows read access to metadata of the `$APPCONFIG` folder, including file listing and statistics."
+permissions = [
+    "read-meta",
+    "scope-appconfig-recursive"
+]
+
+[[set]]
+identifier = "allow-appconfig-meta"
+description = "This allows read access to metadata of the `$APPCONFIG` folder, including file listing and statistics."
+permissions = [
+    "read-meta",
+    "scope-appconfig-index"
+]

plugins/fs/permissions/autogenerated/base-directories/appdata.toml

@@ -0,0 +1,78 @@
+# Automatically generated - DO NOT EDIT!
+
+"$schema" = "../../schemas/schema.json"
+
+# Scopes Section
+# This section contains scopes, which define file level access
+
+[[permission]]
+identifier = "scope-appdata-recursive"
+description = "This scope recursive access to the complete `$APPDATA` folder, including sub directories and files."
+
+[[permission.scope.allow]]
+path = "$APPDATA/**"
+
+[[permission]]
+identifier = "scope-appdata"
+description = "This scope permits access to all files and list content of top level directories in the `$APPDATA`folder."
+
+[[permission.scope.allow]]
+path = "$APPDATA/*"
+
+[[permission]]
+identifier = "scope-appdata-index"
+description = "This scope permits to list all files and folders in the `$APPDATA`folder."
+
+[[permission.scope.allow]]
+path = "$APPDATA/"
+
+# Sets Section
+# This section combines the scope elements with enablement of commands
+
+[[set]]
+identifier = "allow-appdata-read-recursive"
+description = "This allows full recursive read access to the complete `$APPDATA` folder, files and subdirectories."
+permissions = [
+    "read-all",
+    "scope-appdata-recursive"
+]
+
+[[set]]
+identifier = "allow-appdata-write-recursive"
+description = "This allows full recusrive write access to the complete `$APPDATA` folder, files and subdirectories."
+permissions = [
+    "write-all",
+    "scope-appdata-recursive"
+]
+
+[[set]]
+identifier = "allow-appdata-read"
+description = "This allows non-recursive read access to the `$APPDATA` folder."
+permissions = [
+    "read-all",
+    "scope-appdata"
+]
+
+[[set]]
+identifier = "allow-appdata-write"
+description = "This allows non-recursive write access to the `$APPDATA` folder."
+permissions = [
+    "write-all",
+    "scope-appdata"
+]
+
+[[set]]
+identifier = "allow-appdata-meta-recursive"
+description = "This allows read access to metadata of the `$APPDATA` folder, including file listing and statistics."
+permissions = [
+    "read-meta",
+    "scope-appdata-recursive"
+]
+
+[[set]]
+identifier = "allow-appdata-meta"
+description = "This allows read access to metadata of the `$APPDATA` folder, including file listing and statistics."
+permissions = [
+    "read-meta",
+    "scope-appdata-index"
+]

plugins/fs/permissions/autogenerated/base-directories/applocaldata.toml

@@ -0,0 +1,78 @@
+# Automatically generated - DO NOT EDIT!
+
+"$schema" = "../../schemas/schema.json"
+
+# Scopes Section
+# This section contains scopes, which define file level access
+
+[[permission]]
+identifier = "scope-applocaldata-recursive"
+description = "This scope recursive access to the complete `$APPLOCALDATA` folder, including sub directories and files."
+
+[[permission.scope.allow]]
+path = "$APPLOCALDATA/**"
+
+[[permission]]
+identifier = "scope-applocaldata"
+description = "This scope permits access to all files and list content of top level directories in the `$APPLOCALDATA`folder."
+
+[[permission.scope.allow]]
+path = "$APPLOCALDATA/*"
+
+[[permission]]
+identifier = "scope-applocaldata-index"
+description = "This scope permits to list all files and folders in the `$APPLOCALDATA`folder."
+
+[[permission.scope.allow]]
+path = "$APPLOCALDATA/"
+
+# Sets Section
+# This section combines the scope elements with enablement of commands
+
+[[set]]
+identifier = "allow-applocaldata-read-recursive"
+description = "This allows full recursive read access to the complete `$APPLOCALDATA` folder, files and subdirectories."
+permissions = [
+    "read-all",
+    "scope-applocaldata-recursive"
+]
+
+[[set]]
+identifier = "allow-applocaldata-write-recursive"
+description = "This allows full recusrive write access to the complete `$APPLOCALDATA` folder, files and subdirectories."
+permissions = [
+    "write-all",
+    "scope-applocaldata-recursive"
+]
+
+[[set]]
+identifier = "allow-applocaldata-read"
+description = "This allows non-recursive read access to the `$APPLOCALDATA` folder."
+permissions = [
+    "read-all",
+    "scope-applocaldata"
+]
+
+[[set]]
+identifier = "allow-applocaldata-write"
+description = "This allows non-recursive write access to the `$APPLOCALDATA` folder."
+permissions = [
+    "write-all",
+    "scope-applocaldata"
+]
+
+[[set]]
+identifier = "allow-applocaldata-meta-recursive"
+description = "This allows read access to metadata of the `$APPLOCALDATA` folder, including file listing and statistics."
+permissions = [
+    "read-meta",
+    "scope-applocaldata-recursive"
+]
+
+[[set]]
+identifier = "allow-applocaldata-meta"
+description = "This allows read access to metadata of the `$APPLOCALDATA` folder, including file listing and statistics."
+permissions = [
+    "read-meta",
+    "scope-applocaldata-index"
+]

plugins/fs/permissions/autogenerated/base-directories/applog.toml

@@ -0,0 +1,78 @@
+# Automatically generated - DO NOT EDIT!
+
+"$schema" = "../../schemas/schema.json"
+
+# Scopes Section
+# This section contains scopes, which define file level access
+
+[[permission]]
+identifier = "scope-applog-recursive"
+description = "This scope recursive access to the complete `$APPLOG` folder, including sub directories and files."
+
+[[permission.scope.allow]]
+path = "$APPLOG/**"
+
+[[permission]]
+identifier = "scope-applog"
+description = "This scope permits access to all files and list content of top level directories in the `$APPLOG`folder."
+
+[[permission.scope.allow]]
+path = "$APPLOG/*"
+
+[[permission]]
+identifier = "scope-applog-index"
+description = "This scope permits to list all files and folders in the `$APPLOG`folder."
+
+[[permission.scope.allow]]
+path = "$APPLOG/"
+
+# Sets Section
+# This section combines the scope elements with enablement of commands
+
+[[set]]
+identifier = "allow-applog-read-recursive"
+description = "This allows full recursive read access to the complete `$APPLOG` folder, files and subdirectories."
+permissions = [
+    "read-all",
+    "scope-applog-recursive"
+]
+
+[[set]]
+identifier = "allow-applog-write-recursive"
+description = "This allows full recusrive write access to the complete `$APPLOG` folder, files and subdirectories."
+permissions = [
+    "write-all",
+    "scope-applog-recursive"
+]
+
+[[set]]
+identifier = "allow-applog-read"
+description = "This allows non-recursive read access to the `$APPLOG` folder."
+permissions = [
+    "read-all",
+    "scope-applog"
+]
+
+[[set]]
+identifier = "allow-applog-write"
+description = "This allows non-recursive write access to the `$APPLOG` folder."
+permissions = [
+    "write-all",
+    "scope-applog"
+]
+
+[[set]]
+identifier = "allow-applog-meta-recursive"
+description = "This allows read access to metadata of the `$APPLOG` folder, including file listing and statistics."
+permissions = [
+    "read-meta",
+    "scope-applog-recursive"
+]
+
+[[set]]
+identifier = "allow-applog-meta"
+description = "This allows read access to metadata of the `$APPLOG` folder, including file listing and statistics."
+permissions = [
+    "read-meta",
+    "scope-applog-index"
+]

plugins/fs/permissions/autogenerated/base-directories/audio.toml

@@ -0,0 +1,78 @@
+# Automatically generated - DO NOT EDIT!
+
+"$schema" = "../../schemas/schema.json"
+
+# Scopes Section
+# This section contains scopes, which define file level access
+
+[[permission]]
+identifier = "scope-audio-recursive"
+description = "This scope recursive access to the complete `$AUDIO` folder, including sub directories and files."
+
+[[permission.scope.allow]]
+path = "$AUDIO/**"
+
+[[permission]]
+identifier = "scope-audio"
+description = "This scope permits access to all files and list content of top level directories in the `$AUDIO`folder."
+
+[[permission.scope.allow]]
+path = "$AUDIO/*"
+
+[[permission]]
+identifier = "scope-audio-index"
+description = "This scope permits to list all files and folders in the `$AUDIO`folder."
+
+[[permission.scope.allow]]
+path = "$AUDIO/"
+
+# Sets Section
+# This section combines the scope elements with enablement of commands
+
+[[set]]
+identifier = "allow-audio-read-recursive"
+description = "This allows full recursive read access to the complete `$AUDIO` folder, files and subdirectories."
+permissions = [
+    "read-all",
+    "scope-audio-recursive"
+]
+
+[[set]]
+identifier = "allow-audio-write-recursive"
+description = "This allows full recusrive write access to the complete `$AUDIO` folder, files and subdirectories."
+permissions = [
+    "write-all",
+    "scope-audio-recursive"
+]
+
+[[set]]
+identifier = "allow-audio-read"
+description = "This allows non-recursive read access to the `$AUDIO` folder."
+permissions = [
+    "read-all",
+    "scope-audio"
+]
+
+[[set]]
+identifier = "allow-audio-write"
+description = "This allows non-recursive write access to the `$AUDIO` folder."
+permissions = [
+    "write-all",
+    "scope-audio"
+]
+
+[[set]]
+identifier = "allow-audio-meta-recursive"
+description = "This allows read access to metadata of the `$AUDIO` folder, including file listing and statistics."
+permissions = [
+    "read-meta",
+    "scope-audio-recursive"
+]
+
+[[set]]
+identifier = "allow-audio-meta"
+description = "This allows read access to metadata of the `$AUDIO` folder, including file listing and statistics."
+permissions = [
+    "read-meta",
+    "scope-audio-index"
+]

plugins/fs/permissions/autogenerated/base-directories/cache.toml

@@ -0,0 +1,78 @@
+# Automatically generated - DO NOT EDIT!
+
+"$schema" = "../../schemas/schema.json"
+
+# Scopes Section
+# This section contains scopes, which define file level access
+
+[[permission]]
+identifier = "scope-cache-recursive"
+description = "This scope recursive access to the complete `$CACHE` folder, including sub directories and files."
+
+[[permission.scope.allow]]
+path = "$CACHE/**"
+
+[[permission]]
+identifier = "scope-cache"
+description = "This scope permits access to all files and list content of top level directories in the `$CACHE`folder."
+
+[[permission.scope.allow]]
+path = "$CACHE/*"
+
+[[permission]]
+identifier = "scope-cache-index"
+description = "This scope permits to list all files and folders in the `$CACHE`folder."
+
+[[permission.scope.allow]]
+path = "$CACHE/"
+
+# Sets Section
+# This section combines the scope elements with enablement of commands
+
+[[set]]
+identifier = "allow-cache-read-recursive"
+description = "This allows full recursive read access to the complete `$CACHE` folder, files and subdirectories."
+permissions = [
+    "read-all",
+    "scope-cache-recursive"
+]
+
+[[set]]
+identifier = "allow-cache-write-recursive"
+description = "This allows full recusrive write access to the complete `$CACHE` folder, files and subdirectories."
+permissions = [
+    "write-all",
+    "scope-cache-recursive"
+]
+
+[[set]]
+identifier = "allow-cache-read"
+description = "This allows non-recursive read access to the `$CACHE` folder."
+permissions = [
+    "read-all",
+    "scope-cache"
+]
+
+[[set]]
+identifier = "allow-cache-write"
+description = "This allows non-recursive write access to the `$CACHE` folder."
+permissions = [
+    "write-all",
+    "scope-cache"
+]
+
+[[set]]
+identifier = "allow-cache-meta-recursive"
+description = "This allows read access to metadata of the `$CACHE` folder, including file listing and statistics."
+permissions = [
+    "read-meta",
+    "scope-cache-recursive"
+]
+
+[[set]]
+identifier = "allow-cache-meta"
+description = "This allows read access to metadata of the `$CACHE` folder, including file listing and statistics."
+permissions = [
+    "read-meta",
+    "scope-cache-index"
+]

plugins/fs/permissions/autogenerated/base-directories/config.toml

@@ -0,0 +1,78 @@
+# Automatically generated - DO NOT EDIT!
+
+"$schema" = "../../schemas/schema.json"
+
+# Scopes Section
+# This section contains scopes, which define file level access
+
+[[permission]]
+identifier = "scope-config-recursive"
+description = "This scope recursive access to the complete `$CONFIG` folder, including sub directories and files."
+
+[[permission.scope.allow]]
+path = "$CONFIG/**"
+
+[[permission]]
+identifier = "scope-config"
+description = "This scope permits access to all files and list content of top level directories in the `$CONFIG`folder."
+
+[[permission.scope.allow]]
+path = "$CONFIG/*"
+
+[[permission]]
+identifier = "scope-config-index"
+description = "This scope permits to list all files and folders in the `$CONFIG`folder."
+
+[[permission.scope.allow]]
+path = "$CONFIG/"
+
+# Sets Section
+# This section combines the scope elements with enablement of commands
+
+[[set]]
+identifier = "allow-config-read-recursive"
+description = "This allows full recursive read access to the complete `$CONFIG` folder, files and subdirectories."
+permissions = [
+    "read-all",
+    "scope-config-recursive"
+]
+
+[[set]]
+identifier = "allow-config-write-recursive"
+description = "This allows full recusrive write access to the complete `$CONFIG` folder, files and subdirectories."
+permissions = [
+    "write-all",
+    "scope-config-recursive"
+]
+
+[[set]]
+identifier = "allow-config-read"
+description = "This allows non-recursive read access to the `$CONFIG` folder."
+permissions = [
+    "read-all",
+    "scope-config"
+]
+
+[[set]]
+identifier = "allow-config-write"
+description = "This allows non-recursive write access to the `$CONFIG` folder."
+permissions = [
+    "write-all",
+    "scope-config"
+]
+
+[[set]]
+identifier = "allow-config-meta-recursive"
+description = "This allows read access to metadata of the `$CONFIG` folder, including file listing and statistics."
+permissions = [
+    "read-meta",
+    "scope-config-recursive"
+]
+
+[[set]]
+identifier = "allow-config-meta"
+description = "This allows read access to metadata of the `$CONFIG` folder, including file listing and statistics."
+permissions = [
+    "read-meta",
+    "scope-config-index"
+]

plugins/fs/permissions/autogenerated/base-directories/data.toml

@@ -0,0 +1,78 @@
+# Automatically generated - DO NOT EDIT!
+
+"$schema" = "../../schemas/schema.json"
+
+# Scopes Section
+# This section contains scopes, which define file level access
+
+[[permission]]
+identifier = "scope-data-recursive"
+description = "This scope recursive access to the complete `$DATA` folder, including sub directories and files."
+
+[[permission.scope.allow]]
+path = "$DATA/**"
+
+[[permission]]
+identifier = "scope-data"
+description = "This scope permits access to all files and list content of top level directories in the `$DATA`folder."
+
+[[permission.scope.allow]]
+path = "$DATA/*"
+
+[[permission]]
+identifier = "scope-data-index"
+description = "This scope permits to list all files and folders in the `$DATA`folder."
+
+[[permission.scope.allow]]
+path = "$DATA/"
+
+# Sets Section
+# This section combines the scope elements with enablement of commands
+
+[[set]]
+identifier = "allow-data-read-recursive"
+description = "This allows full recursive read access to the complete `$DATA` folder, files and subdirectories."
+permissions = [
+    "read-all",
+    "scope-data-recursive"
+]
+
+[[set]]
+identifier = "allow-data-write-recursive"
+description = "This allows full recusrive write access to the complete `$DATA` folder, files and subdirectories."
+permissions = [
+    "write-all",
+    "scope-data-recursive"
+]
+
+[[set]]
+identifier = "allow-data-read"
+description = "This allows non-recursive read access to the `$DATA` folder."
+permissions = [
+    "read-all",
+    "scope-data"
+]
+
+[[set]]
+identifier = "allow-data-write"
+description = "This allows non-recursive write access to the `$DATA` folder."
+permissions = [
+    "write-all",
+    "scope-data"
+]
+
+[[set]]
+identifier = "allow-data-meta-recursive"
+description = "This allows read access to metadata of the `$DATA` folder, including file listing and statistics."
+permissions = [
+    "read-meta",
+    "scope-data-recursive"
+]
+
+[[set]]
+identifier = "allow-data-meta"
+description = "This allows read access to metadata of the `$DATA` folder, including file listing and statistics."
+permissions = [
+    "read-meta",
+    "scope-data-index"
+]

plugins/fs/permissions/autogenerated/base-directories/desktop.toml

@@ -0,0 +1,78 @@
+# Automatically generated - DO NOT EDIT!
+
+"$schema" = "../../schemas/schema.json"
+
+# Scopes Section
+# This section contains scopes, which define file level access
+
+[[permission]]
+identifier = "scope-desktop-recursive"
+description = "This scope recursive access to the complete `$DESKTOP` folder, including sub directories and files."
+
+[[permission.scope.allow]]
+path = "$DESKTOP/**"
+
+[[permission]]
+identifier = "scope-desktop"
+description = "This scope permits access to all files and list content of top level directories in the `$DESKTOP`folder."
+
+[[permission.scope.allow]]
+path = "$DESKTOP/*"
+
+[[permission]]
+identifier = "scope-desktop-index"
+description = "This scope permits to list all files and folders in the `$DESKTOP`folder."
+
+[[permission.scope.allow]]
+path = "$DESKTOP/"
+
+# Sets Section
+# This section combines the scope elements with enablement of commands
+
+[[set]]
+identifier = "allow-desktop-read-recursive"
+description = "This allows full recursive read access to the complete `$DESKTOP` folder, files and subdirectories."
+permissions = [
+    "read-all",
+    "scope-desktop-recursive"
+]
+
+[[set]]
+identifier = "allow-desktop-write-recursive"
+description = "This allows full recusrive write access to the complete `$DESKTOP` folder, files and subdirectories."
+permissions = [
+    "write-all",
+    "scope-desktop-recursive"
+]
+
+[[set]]
+identifier = "allow-desktop-read"
+description = "This allows non-recursive read access to the `$DESKTOP` folder."
+permissions = [
+    "read-all",
+    "scope-desktop"
+]
+
+[[set]]
+identifier = "allow-desktop-write"
+description = "This allows non-recursive write access to the `$DESKTOP` folder."
+permissions = [
+    "write-all",
+    "scope-desktop"
+]
+
+[[set]]
+identifier = "allow-desktop-meta-recursive"
+description = "This allows read access to metadata of the `$DESKTOP` folder, including file listing and statistics."
+permissions = [
+    "read-meta",
+    "scope-desktop-recursive"
+]
+
+[[set]]
+identifier = "allow-desktop-meta"
+description = "This allows read access to metadata of the `$DESKTOP` folder, including file listing and statistics."
+permissions = [
+    "read-meta",
+    "scope-desktop-index"
+]

plugins/fs/permissions/autogenerated/base-directories/document.toml

@@ -0,0 +1,78 @@
+# Automatically generated - DO NOT EDIT!
+
+"$schema" = "../../schemas/schema.json"
+
+# Scopes Section
+# This section contains scopes, which define file level access
+
+[[permission]]
+identifier = "scope-document-recursive"
+description = "This scope recursive access to the complete `$DOCUMENT` folder, including sub directories and files."
+
+[[permission.scope.allow]]
+path = "$DOCUMENT/**"
+
+[[permission]]
+identifier = "scope-document"
+description = "This scope permits access to all files and list content of top level directories in the `$DOCUMENT`folder."
+
+[[permission.scope.allow]]
+path = "$DOCUMENT/*"
+
+[[permission]]
+identifier = "scope-document-index"
+description = "This scope permits to list all files and folders in the `$DOCUMENT`folder."
+
+[[permission.scope.allow]]
+path = "$DOCUMENT/"
+
+# Sets Section
+# This section combines the scope elements with enablement of commands
+
+[[set]]
+identifier = "allow-document-read-recursive"
+description = "This allows full recursive read access to the complete `$DOCUMENT` folder, files and subdirectories."
+permissions = [
+    "read-all",
+    "scope-document-recursive"
+]
+
+[[set]]
+identifier = "allow-document-write-recursive"
+description = "This allows full recusrive write access to the complete `$DOCUMENT` folder, files and subdirectories."
+permissions = [
+    "write-all",
+    "scope-document-recursive"
+]
+
+[[set]]
+identifier = "allow-document-read"
+description = "This allows non-recursive read access to the `$DOCUMENT` folder."
+permissions = [
+    "read-all",
+    "scope-document"
+]
+
+[[set]]
+identifier = "allow-document-write"
+description = "This allows non-recursive write access to the `$DOCUMENT` folder."
+permissions = [
+    "write-all",
+    "scope-document"
+]
+
+[[set]]
+identifier = "allow-document-meta-recursive"
+description = "This allows read access to metadata of the `$DOCUMENT` folder, including file listing and statistics."
+permissions = [
+    "read-meta",
+    "scope-document-recursive"
+]
+
+[[set]]
+identifier = "allow-document-meta"
+description = "This allows read access to metadata of the `$DOCUMENT` folder, including file listing and statistics."
+permissions = [
+    "read-meta",
+    "scope-document-index"
+]

plugins/fs/permissions/autogenerated/base-directories/download.toml

@@ -0,0 +1,78 @@
+# Automatically generated - DO NOT EDIT!
+
+"$schema" = "../../schemas/schema.json"
+
+# Scopes Section
+# This section contains scopes, which define file level access
+
+[[permission]]
+identifier = "scope-download-recursive"
+description = "This scope recursive access to the complete `$DOWNLOAD` folder, including sub directories and files."
+
+[[permission.scope.allow]]
+path = "$DOWNLOAD/**"
+
+[[permission]]
+identifier = "scope-download"
+description = "This scope permits access to all files and list content of top level directories in the `$DOWNLOAD`folder."
+
+[[permission.scope.allow]]
+path = "$DOWNLOAD/*"
+
+[[permission]]
+identifier = "scope-download-index"
+description = "This scope permits to list all files and folders in the `$DOWNLOAD`folder."
+
+[[permission.scope.allow]]
+path = "$DOWNLOAD/"
+
+# Sets Section
+# This section combines the scope elements with enablement of commands
+
+[[set]]
+identifier = "allow-download-read-recursive"
+description = "This allows full recursive read access to the complete `$DOWNLOAD` folder, files and subdirectories."
+permissions = [
+    "read-all",
+    "scope-download-recursive"
+]
+
+[[set]]
+identifier = "allow-download-write-recursive"
+description = "This allows full recusrive write access to the complete `$DOWNLOAD` folder, files and subdirectories."
+permissions = [
+    "write-all",
+    "scope-download-recursive"
+]
+
+[[set]]
+identifier = "allow-download-read"
+description = "This allows non-recursive read access to the `$DOWNLOAD` folder."
+permissions = [
+    "read-all",
+    "scope-download"
+]
+
+[[set]]
+identifier = "allow-download-write"
+description = "This allows non-recursive write access to the `$DOWNLOAD` folder."
+permissions = [
+    "write-all",
+    "scope-download"
+]
+
+[[set]]
+identifier = "allow-download-meta-recursive"
+description = "This allows read access to metadata of the `$DOWNLOAD` folder, including file listing and statistics."
+permissions = [
+    "read-meta",
+    "scope-download-recursive"
+]
+
+[[set]]
+identifier = "allow-download-meta"
+description = "This allows read access to metadata of the `$DOWNLOAD` folder, including file listing and statistics."
+permissions = [
+    "read-meta",
+    "scope-download-index"
+]

plugins/fs/permissions/autogenerated/base-directories/exe.toml

@@ -0,0 +1,78 @@
+# Automatically generated - DO NOT EDIT!
+
+"$schema" = "../../schemas/schema.json"
+
+# Scopes Section
+# This section contains scopes, which define file level access
+
+[[permission]]
+identifier = "scope-exe-recursive"
+description = "This scope recursive access to the complete `$EXE` folder, including sub directories and files."
+
+[[permission.scope.allow]]
+path = "$EXE/**"
+
+[[permission]]
+identifier = "scope-exe"
+description = "This scope permits access to all files and list content of top level directories in the `$EXE`folder."
+
+[[permission.scope.allow]]
+path = "$EXE/*"
+
+[[permission]]
+identifier = "scope-exe-index"
+description = "This scope permits to list all files and folders in the `$EXE`folder."
+
+[[permission.scope.allow]]
+path = "$EXE/"
+
+# Sets Section
+# This section combines the scope elements with enablement of commands
+
+[[set]]
+identifier = "allow-exe-read-recursive"
+description = "This allows full recursive read access to the complete `$EXE` folder, files and subdirectories."
+permissions = [
+    "read-all",
+    "scope-exe-recursive"
+]
+
+[[set]]
+identifier = "allow-exe-write-recursive"
+description = "This allows full recusrive write access to the complete `$EXE` folder, files and subdirectories."
+permissions = [
+    "write-all",
+    "scope-exe-recursive"
+]
+
+[[set]]
+identifier = "allow-exe-read"
+description = "This allows non-recursive read access to the `$EXE` folder."
+permissions = [
+    "read-all",
+    "scope-exe"
+]
+
+[[set]]
+identifier = "allow-exe-write"
+description = "This allows non-recursive write access to the `$EXE` folder."
+permissions = [
+    "write-all",
+    "scope-exe"
+]
+
+[[set]]
+identifier = "allow-exe-meta-recursive"
+description = "This allows read access to metadata of the `$EXE` folder, including file listing and statistics."
+permissions = [
+    "read-meta",
+    "scope-exe-recursive"
+]
+
+[[set]]
+identifier = "allow-exe-meta"
+description = "This allows read access to metadata of the `$EXE` folder, including file listing and statistics."
+permissions = [
+    "read-meta",
+    "scope-exe-index"
+]

plugins/fs/permissions/autogenerated/base-directories/font.toml

@@ -0,0 +1,78 @@
+# Automatically generated - DO NOT EDIT!
+
+"$schema" = "../../schemas/schema.json"
+
+# Scopes Section
+# This section contains scopes, which define file level access
+
+[[permission]]
+identifier = "scope-font-recursive"
+description = "This scope recursive access to the complete `$FONT` folder, including sub directories and files."
+
+[[permission.scope.allow]]
+path = "$FONT/**"
+
+[[permission]]
+identifier = "scope-font"
+description = "This scope permits access to all files and list content of top level directories in the `$FONT`folder."
+
+[[permission.scope.allow]]
+path = "$FONT/*"
+
+[[permission]]
+identifier = "scope-font-index"
+description = "This scope permits to list all files and folders in the `$FONT`folder."
+
+[[permission.scope.allow]]
+path = "$FONT/"
+
+# Sets Section
+# This section combines the scope elements with enablement of commands
+
+[[set]]
+identifier = "allow-font-read-recursive"
+description = "This allows full recursive read access to the complete `$FONT` folder, files and subdirectories."
+permissions = [
+    "read-all",
+    "scope-font-recursive"
+]
+
+[[set]]
+identifier = "allow-font-write-recursive"
+description = "This allows full recusrive write access to the complete `$FONT` folder, files and subdirectories."
+permissions = [
+    "write-all",
+    "scope-font-recursive"
+]
+
+[[set]]
+identifier = "allow-font-read"
+description = "This allows non-recursive read access to the `$FONT` folder."
+permissions = [
+    "read-all",
+    "scope-font"
+]
+
+[[set]]
+identifier = "allow-font-write"
+description = "This allows non-recursive write access to the `$FONT` folder."
+permissions = [
+    "write-all",
+    "scope-font"
+]
+
+[[set]]
+identifier = "allow-font-meta-recursive"
+description = "This allows read access to metadata of the `$FONT` folder, including file listing and statistics."
+permissions = [
+    "read-meta",
+    "scope-font-recursive"
+]
+
+[[set]]
+identifier = "allow-font-meta"
+description = "This allows read access to metadata of the `$FONT` folder, including file listing and statistics."
+permissions = [
+    "read-meta",
+    "scope-font-index"
+]

plugins/fs/permissions/autogenerated/base-directories/home.toml

@@ -0,0 +1,78 @@
+# Automatically generated - DO NOT EDIT!
+
+"$schema" = "../../schemas/schema.json"
+
+# Scopes Section
+# This section contains scopes, which define file level access
+
+[[permission]]
+identifier = "scope-home-recursive"
+description = "This scope recursive access to the complete `$HOME` folder, including sub directories and files."
+
+[[permission.scope.allow]]
+path = "$HOME/**"
+
+[[permission]]
+identifier = "scope-home"
+description = "This scope permits access to all files and list content of top level directories in the `$HOME`folder."
+
+[[permission.scope.allow]]
+path = "$HOME/*"
+
+[[permission]]
+identifier = "scope-home-index"
+description = "This scope permits to list all files and folders in the `$HOME`folder."
+
+[[permission.scope.allow]]
+path = "$HOME/"
+
+# Sets Section
+# This section combines the scope elements with enablement of commands
+
+[[set]]
+identifier = "allow-home-read-recursive"
+description = "This allows full recursive read access to the complete `$HOME` folder, files and subdirectories."
+permissions = [
+    "read-all",
+    "scope-home-recursive"
+]
+
+[[set]]
+identifier = "allow-home-write-recursive"
+description = "This allows full recusrive write access to the complete `$HOME` folder, files and subdirectories."
+permissions = [
+    "write-all",
+    "scope-home-recursive"
+]
+
+[[set]]
+identifier = "allow-home-read"
+description = "This allows non-recursive read access to the `$HOME` folder."
+permissions = [
+    "read-all",
+    "scope-home"
+]
+
+[[set]]
+identifier = "allow-home-write"
+description = "This allows non-recursive write access to the `$HOME` folder."
+permissions = [
+    "write-all",
+    "scope-home"
+]
+
+[[set]]
+identifier = "allow-home-meta-recursive"
+description = "This allows read access to metadata of the `$HOME` folder, including file listing and statistics."
+permissions = [
+    "read-meta",
+    "scope-home-recursive"
+]
+
+[[set]]
+identifier = "allow-home-meta"
+description = "This allows read access to metadata of the `$HOME` folder, including file listing and statistics."
+permissions = [
+    "read-meta",
+    "scope-home-index"
+]

plugins/fs/permissions/autogenerated/base-directories/localdata.toml

@@ -0,0 +1,78 @@
+# Automatically generated - DO NOT EDIT!
+
+"$schema" = "../../schemas/schema.json"
+
+# Scopes Section
+# This section contains scopes, which define file level access
+
+[[permission]]
+identifier = "scope-localdata-recursive"
+description = "This scope recursive access to the complete `$LOCALDATA` folder, including sub directories and files."
+
+[[permission.scope.allow]]
+path = "$LOCALDATA/**"
+
+[[permission]]
+identifier = "scope-localdata"
+description = "This scope permits access to all files and list content of top level directories in the `$LOCALDATA`folder."
+
+[[permission.scope.allow]]
+path = "$LOCALDATA/*"
+
+[[permission]]
+identifier = "scope-localdata-index"
+description = "This scope permits to list all files and folders in the `$LOCALDATA`folder."
+
+[[permission.scope.allow]]
+path = "$LOCALDATA/"
+
+# Sets Section
+# This section combines the scope elements with enablement of commands
+
+[[set]]
+identifier = "allow-localdata-read-recursive"
+description = "This allows full recursive read access to the complete `$LOCALDATA` folder, files and subdirectories."
+permissions = [
+    "read-all",
+    "scope-localdata-recursive"
+]
+
+[[set]]
+identifier = "allow-localdata-write-recursive"
+description = "This allows full recusrive write access to the complete `$LOCALDATA` folder, files and subdirectories."
+permissions = [
+    "write-all",
+    "scope-localdata-recursive"
+]
+
+[[set]]
+identifier = "allow-localdata-read"
+description = "This allows non-recursive read access to the `$LOCALDATA` folder."
+permissions = [
+    "read-all",
+    "scope-localdata"
+]
+
+[[set]]
+identifier = "allow-localdata-write"
+description = "This allows non-recursive write access to the `$LOCALDATA` folder."
+permissions = [
+    "write-all",
+    "scope-localdata"
+]
+
+[[set]]
+identifier = "allow-localdata-meta-recursive"
+description = "This allows read access to metadata of the `$LOCALDATA` folder, including file listing and statistics."
+permissions = [
+    "read-meta",
+    "scope-localdata-recursive"
+]
+
+[[set]]
+identifier = "allow-localdata-meta"
+description = "This allows read access to metadata of the `$LOCALDATA` folder, including file listing and statistics."
+permissions = [
+    "read-meta",
+    "scope-localdata-index"
+]

plugins/fs/permissions/autogenerated/base-directories/log.toml

@@ -0,0 +1,78 @@
+# Automatically generated - DO NOT EDIT!
+
+"$schema" = "../../schemas/schema.json"
+
+# Scopes Section
+# This section contains scopes, which define file level access
+
+[[permission]]
+identifier = "scope-log-recursive"
+description = "This scope recursive access to the complete `$LOG` folder, including sub directories and files."
+
+[[permission.scope.allow]]
+path = "$LOG/**"
+
+[[permission]]
+identifier = "scope-log"
+description = "This scope permits access to all files and list content of top level directories in the `$LOG`folder."
+
+[[permission.scope.allow]]
+path = "$LOG/*"
+
+[[permission]]
+identifier = "scope-log-index"
+description = "This scope permits to list all files and folders in the `$LOG`folder."
+
+[[permission.scope.allow]]
+path = "$LOG/"
+
+# Sets Section
+# This section combines the scope elements with enablement of commands
+
+[[set]]
+identifier = "allow-log-read-recursive"
+description = "This allows full recursive read access to the complete `$LOG` folder, files and subdirectories."
+permissions = [
+    "read-all",
+    "scope-log-recursive"
+]
+
+[[set]]
+identifier = "allow-log-write-recursive"
+description = "This allows full recusrive write access to the complete `$LOG` folder, files and subdirectories."
+permissions = [
+    "write-all",
+    "scope-log-recursive"
+]
+
+[[set]]
+identifier = "allow-log-read"
+description = "This allows non-recursive read access to the `$LOG` folder."
+permissions = [
+    "read-all",
+    "scope-log"
+]
+
+[[set]]
+identifier = "allow-log-write"
+description = "This allows non-recursive write access to the `$LOG` folder."
+permissions = [
+    "write-all",
+    "scope-log"
+]
+
+[[set]]
+identifier = "allow-log-meta-recursive"
+description = "This allows read access to metadata of the `$LOG` folder, including file listing and statistics."
+permissions = [
+    "read-meta",
+    "scope-log-recursive"
+]
+
+[[set]]
+identifier = "allow-log-meta"
+description = "This allows read access to metadata of the `$LOG` folder, including file listing and statistics."
+permissions = [
+    "read-meta",
+    "scope-log-index"
+]

plugins/fs/permissions/autogenerated/base-directories/picture.toml

@@ -0,0 +1,78 @@
+# Automatically generated - DO NOT EDIT!
+
+"$schema" = "../../schemas/schema.json"
+
+# Scopes Section
+# This section contains scopes, which define file level access
+
+[[permission]]
+identifier = "scope-picture-recursive"
+description = "This scope recursive access to the complete `$PICTURE` folder, including sub directories and files."
+
+[[permission.scope.allow]]
+path = "$PICTURE/**"
+
+[[permission]]
+identifier = "scope-picture"
+description = "This scope permits access to all files and list content of top level directories in the `$PICTURE`folder."
+
+[[permission.scope.allow]]
+path = "$PICTURE/*"
+
+[[permission]]
+identifier = "scope-picture-index"
+description = "This scope permits to list all files and folders in the `$PICTURE`folder."
+
+[[permission.scope.allow]]
+path = "$PICTURE/"
+
+# Sets Section
+# This section combines the scope elements with enablement of commands
+
+[[set]]
+identifier = "allow-picture-read-recursive"
+description = "This allows full recursive read access to the complete `$PICTURE` folder, files and subdirectories."
+permissions = [
+    "read-all",
+    "scope-picture-recursive"
+]
+
+[[set]]
+identifier = "allow-picture-write-recursive"
+description = "This allows full recusrive write access to the complete `$PICTURE` folder, files and subdirectories."
+permissions = [
+    "write-all",
+    "scope-picture-recursive"
+]
+
+[[set]]
+identifier = "allow-picture-read"
+description = "This allows non-recursive read access to the `$PICTURE` folder."
+permissions = [
+    "read-all",
+    "scope-picture"
+]
+
+[[set]]
+identifier = "allow-picture-write"
+description = "This allows non-recursive write access to the `$PICTURE` folder."
+permissions = [
+    "write-all",
+    "scope-picture"
+]
+
+[[set]]
+identifier = "allow-picture-meta-recursive"
+description = "This allows read access to metadata of the `$PICTURE` folder, including file listing and statistics."
+permissions = [
+    "read-meta",
+    "scope-picture-recursive"
+]
+
+[[set]]
+identifier = "allow-picture-meta"
+description = "This allows read access to metadata of the `$PICTURE` folder, including file listing and statistics."
+permissions = [
+    "read-meta",
+    "scope-picture-index"
+]

plugins/fs/permissions/autogenerated/base-directories/public.toml

@@ -0,0 +1,78 @@
+# Automatically generated - DO NOT EDIT!
+
+"$schema" = "../../schemas/schema.json"
+
+# Scopes Section
+# This section contains scopes, which define file level access
+
+[[permission]]
+identifier = "scope-public-recursive"
+description = "This scope recursive access to the complete `$PUBLIC` folder, including sub directories and files."
+
+[[permission.scope.allow]]
+path = "$PUBLIC/**"
+
+[[permission]]
+identifier = "scope-public"
+description = "This scope permits access to all files and list content of top level directories in the `$PUBLIC`folder."
+
+[[permission.scope.allow]]
+path = "$PUBLIC/*"
+
+[[permission]]
+identifier = "scope-public-index"
+description = "This scope permits to list all files and folders in the `$PUBLIC`folder."
+
+[[permission.scope.allow]]
+path = "$PUBLIC/"
+
+# Sets Section
+# This section combines the scope elements with enablement of commands
+
+[[set]]
+identifier = "allow-public-read-recursive"
+description = "This allows full recursive read access to the complete `$PUBLIC` folder, files and subdirectories."
+permissions = [
+    "read-all",
+    "scope-public-recursive"
+]
+
+[[set]]
+identifier = "allow-public-write-recursive"
+description = "This allows full recusrive write access to the complete `$PUBLIC` folder, files and subdirectories."
+permissions = [
+    "write-all",
+    "scope-public-recursive"
+]
+
+[[set]]
+identifier = "allow-public-read"
+description = "This allows non-recursive read access to the `$PUBLIC` folder."
+permissions = [
+    "read-all",
+    "scope-public"
+]
+
+[[set]]
+identifier = "allow-public-write"
+description = "This allows non-recursive write access to the `$PUBLIC` folder."
+permissions = [
+    "write-all",
+    "scope-public"
+]
+
+[[set]]
+identifier = "allow-public-meta-recursive"
+description = "This allows read access to metadata of the `$PUBLIC` folder, including file listing and statistics."
+permissions = [
+    "read-meta",
+    "scope-public-recursive"
+]
+
+[[set]]
+identifier = "allow-public-meta"
+description = "This allows read access to metadata of the `$PUBLIC` folder, including file listing and statistics."
+permissions = [
+    "read-meta",
+    "scope-public-index"
+]

plugins/fs/permissions/autogenerated/base-directories/resource.toml

@@ -0,0 +1,78 @@
+# Automatically generated - DO NOT EDIT!
+
+"$schema" = "../../schemas/schema.json"
+
+# Scopes Section
+# This section contains scopes, which define file level access
+
+[[permission]]
+identifier = "scope-resource-recursive"
+description = "This scope recursive access to the complete `$RESOURCE` folder, including sub directories and files."
+
+[[permission.scope.allow]]
+path = "$RESOURCE/**"
+
+[[permission]]
+identifier = "scope-resource"
+description = "This scope permits access to all files and list content of top level directories in the `$RESOURCE`folder."
+
+[[permission.scope.allow]]
+path = "$RESOURCE/*"
+
+[[permission]]
+identifier = "scope-resource-index"
+description = "This scope permits to list all files and folders in the `$RESOURCE`folder."
+
+[[permission.scope.allow]]
+path = "$RESOURCE/"
+
+# Sets Section
+# This section combines the scope elements with enablement of commands
+
+[[set]]
+identifier = "allow-resource-read-recursive"
+description = "This allows full recursive read access to the complete `$RESOURCE` folder, files and subdirectories."
+permissions = [
+    "read-all",
+    "scope-resource-recursive"
+]
+
+[[set]]
+identifier = "allow-resource-write-recursive"
+description = "This allows full recusrive write access to the complete `$RESOURCE` folder, files and subdirectories."
+permissions = [
+    "write-all",
+    "scope-resource-recursive"
+]
+
+[[set]]
+identifier = "allow-resource-read"
+description = "This allows non-recursive read access to the `$RESOURCE` folder."
+permissions = [
+    "read-all",
+    "scope-resource"
+]
+
+[[set]]
+identifier = "allow-resource-write"
+description = "This allows non-recursive write access to the `$RESOURCE` folder."
+permissions = [
+    "write-all",
+    "scope-resource"
+]
+
+[[set]]
+identifier = "allow-resource-meta-recursive"
+description = "This allows read access to metadata of the `$RESOURCE` folder, including file listing and statistics."
+permissions = [
+    "read-meta",
+    "scope-resource-recursive"
+]
+
+[[set]]
+identifier = "allow-resource-meta"
+description = "This allows read access to metadata of the `$RESOURCE` folder, including file listing and statistics."
+permissions = [
+    "read-meta",
+    "scope-resource-index"
+]

plugins/fs/permissions/autogenerated/base-directories/runtime.toml

@@ -0,0 +1,78 @@
+# Automatically generated - DO NOT EDIT!
+
+"$schema" = "../../schemas/schema.json"
+
+# Scopes Section
+# This section contains scopes, which define file level access
+
+[[permission]]
+identifier = "scope-runtime-recursive"
+description = "This scope recursive access to the complete `$RUNTIME` folder, including sub directories and files."
+
+[[permission.scope.allow]]
+path = "$RUNTIME/**"
+
+[[permission]]
+identifier = "scope-runtime"
+description = "This scope permits access to all files and list content of top level directories in the `$RUNTIME`folder."
+
+[[permission.scope.allow]]
+path = "$RUNTIME/*"
+
+[[permission]]
+identifier = "scope-runtime-index"
+description = "This scope permits to list all files and folders in the `$RUNTIME`folder."
+
+[[permission.scope.allow]]
+path = "$RUNTIME/"
+
+# Sets Section
+# This section combines the scope elements with enablement of commands
+
+[[set]]
+identifier = "allow-runtime-read-recursive"
+description = "This allows full recursive read access to the complete `$RUNTIME` folder, files and subdirectories."
+permissions = [
+    "read-all",
+    "scope-runtime-recursive"
+]
+
+[[set]]
+identifier = "allow-runtime-write-recursive"
+description = "This allows full recusrive write access to the complete `$RUNTIME` folder, files and subdirectories."
+permissions = [
+    "write-all",
+    "scope-runtime-recursive"
+]
+
+[[set]]
+identifier = "allow-runtime-read"
+description = "This allows non-recursive read access to the `$RUNTIME` folder."
+permissions = [
+    "read-all",
+    "scope-runtime"
+]
+
+[[set]]
+identifier = "allow-runtime-write"
+description = "This allows non-recursive write access to the `$RUNTIME` folder."
+permissions = [
+    "write-all",
+    "scope-runtime"
+]
+
+[[set]]
+identifier = "allow-runtime-meta-recursive"
+description = "This allows read access to metadata of the `$RUNTIME` folder, including file listing and statistics."
+permissions = [
+    "read-meta",
+    "scope-runtime-recursive"
+]
+
+[[set]]
+identifier = "allow-runtime-meta"
+description = "This allows read access to metadata of the `$RUNTIME` folder, including file listing and statistics."
+permissions = [
+    "read-meta",
+    "scope-runtime-index"
+]

plugins/fs/permissions/autogenerated/base-directories/temp.toml

@@ -0,0 +1,78 @@
+# Automatically generated - DO NOT EDIT!
+
+"$schema" = "../../schemas/schema.json"
+
+# Scopes Section
+# This section contains scopes, which define file level access
+
+[[permission]]
+identifier = "scope-temp-recursive"
+description = "This scope recursive access to the complete `$TEMP` folder, including sub directories and files."
+
+[[permission.scope.allow]]
+path = "$TEMP/**"
+
+[[permission]]
+identifier = "scope-temp"
+description = "This scope permits access to all files and list content of top level directories in the `$TEMP`folder."
+
+[[permission.scope.allow]]
+path = "$TEMP/*"
+
+[[permission]]
+identifier = "scope-temp-index"
+description = "This scope permits to list all files and folders in the `$TEMP`folder."
+
+[[permission.scope.allow]]
+path = "$TEMP/"
+
+# Sets Section
+# This section combines the scope elements with enablement of commands
+
+[[set]]
+identifier = "allow-temp-read-recursive"
+description = "This allows full recursive read access to the complete `$TEMP` folder, files and subdirectories."
+permissions = [
+    "read-all",
+    "scope-temp-recursive"
+]
+
+[[set]]
+identifier = "allow-temp-write-recursive"
+description = "This allows full recusrive write access to the complete `$TEMP` folder, files and subdirectories."
+permissions = [
+    "write-all",
+    "scope-temp-recursive"
+]
+
+[[set]]
+identifier = "allow-temp-read"
+description = "This allows non-recursive read access to the `$TEMP` folder."
+permissions = [
+    "read-all",
+    "scope-temp"
+]
+
+[[set]]
+identifier = "allow-temp-write"
+description = "This allows non-recursive write access to the `$TEMP` folder."
+permissions = [
+    "write-all",
+    "scope-temp"
+]
+
+[[set]]
+identifier = "allow-temp-meta-recursive"
+description = "This allows read access to metadata of the `$TEMP` folder, including file listing and statistics."
+permissions = [
+    "read-meta",
+    "scope-temp-recursive"
+]
+
+[[set]]
+identifier = "allow-temp-meta"
+description = "This allows read access to metadata of the `$TEMP` folder, including file listing and statistics."
+permissions = [
+    "read-meta",
+    "scope-temp-index"
+]

plugins/fs/permissions/autogenerated/base-directories/template.toml

@@ -0,0 +1,78 @@
+# Automatically generated - DO NOT EDIT!
+
+"$schema" = "../../schemas/schema.json"
+
+# Scopes Section
+# This section contains scopes, which define file level access
+
+[[permission]]
+identifier = "scope-template-recursive"
+description = "This scope recursive access to the complete `$TEMPLATE` folder, including sub directories and files."
+
+[[permission.scope.allow]]
+path = "$TEMPLATE/**"
+
+[[permission]]
+identifier = "scope-template"
+description = "This scope permits access to all files and list content of top level directories in the `$TEMPLATE`folder."
+
+[[permission.scope.allow]]
+path = "$TEMPLATE/*"
+
+[[permission]]
+identifier = "scope-template-index"
+description = "This scope permits to list all files and folders in the `$TEMPLATE`folder."
+
+[[permission.scope.allow]]
+path = "$TEMPLATE/"
+
+# Sets Section
+# This section combines the scope elements with enablement of commands
+
+[[set]]
+identifier = "allow-template-read-recursive"
+description = "This allows full recursive read access to the complete `$TEMPLATE` folder, files and subdirectories."
+permissions = [
+    "read-all",
+    "scope-template-recursive"
+]
+
+[[set]]
+identifier = "allow-template-write-recursive"
+description = "This allows full recusrive write access to the complete `$TEMPLATE` folder, files and subdirectories."
+permissions = [
+    "write-all",
+    "scope-template-recursive"
+]
+
+[[set]]
+identifier = "allow-template-read"
+description = "This allows non-recursive read access to the `$TEMPLATE` folder."
+permissions = [
+    "read-all",
+    "scope-template"
+]
+
+[[set]]
+identifier = "allow-template-write"
+description = "This allows non-recursive write access to the `$TEMPLATE` folder."
+permissions = [
+    "write-all",
+    "scope-template"
+]
+
+[[set]]
+identifier = "allow-template-meta-recursive"
+description = "This allows read access to metadata of the `$TEMPLATE` folder, including file listing and statistics."
+permissions = [
+    "read-meta",
+    "scope-template-recursive"
+]
+
+[[set]]
+identifier = "allow-template-meta"
+description = "This allows read access to metadata of the `$TEMPLATE` folder, including file listing and statistics."
+permissions = [
+    "read-meta",
+    "scope-template-index"
+]

plugins/fs/permissions/autogenerated/base-directories/video.toml

@@ -0,0 +1,78 @@
+# Automatically generated - DO NOT EDIT!
+
+"$schema" = "../../schemas/schema.json"
+
+# Scopes Section
+# This section contains scopes, which define file level access
+
+[[permission]]
+identifier = "scope-video-recursive"
+description = "This scope recursive access to the complete `$VIDEO` folder, including sub directories and files."
+
+[[permission.scope.allow]]
+path = "$VIDEO/**"
+
+[[permission]]
+identifier = "scope-video"
+description = "This scope permits access to all files and list content of top level directories in the `$VIDEO`folder."
+
+[[permission.scope.allow]]
+path = "$VIDEO/*"
+
+[[permission]]
+identifier = "scope-video-index"
+description = "This scope permits to list all files and folders in the `$VIDEO`folder."
+
+[[permission.scope.allow]]
+path = "$VIDEO/"
+
+# Sets Section
+# This section combines the scope elements with enablement of commands
+
+[[set]]
+identifier = "allow-video-read-recursive"
+description = "This allows full recursive read access to the complete `$VIDEO` folder, files and subdirectories."
+permissions = [
+    "read-all",
+    "scope-video-recursive"
+]
+
+[[set]]
+identifier = "allow-video-write-recursive"
+description = "This allows full recusrive write access to the complete `$VIDEO` folder, files and subdirectories."
+permissions = [
+    "write-all",
+    "scope-video-recursive"
+]
+
+[[set]]
+identifier = "allow-video-read"
+description = "This allows non-recursive read access to the `$VIDEO` folder."
+permissions = [
+    "read-all",
+    "scope-video"
+]
+
+[[set]]
+identifier = "allow-video-write"
+description = "This allows non-recursive write access to the `$VIDEO` folder."
+permissions = [
+    "write-all",
+    "scope-video"
+]
+
+[[set]]
+identifier = "allow-video-meta-recursive"
+description = "This allows read access to metadata of the `$VIDEO` folder, including file listing and statistics."
+permissions = [
+    "read-meta",
+    "scope-video-recursive"
+]
+
+[[set]]
+identifier = "allow-video-meta"
+description = "This allows read access to metadata of the `$VIDEO` folder, including file listing and statistics."
+permissions = [
+    "read-meta",
+    "scope-video-index"
+]

plugins/fs/permissions/autogenerated/commands/copy_file.toml

@@ -0,0 +1,13 @@
+# Automatically generated - DO NOT EDIT!
+
+"$schema" = "../../schemas/schema.json"
+
+[[permission]]
+identifier = "allow-copy-file"
+description = "Enables the copy_file command without any pre-configured scope."
+commands.allow = ["copy_file"]
+
+[[permission]]
+identifier = "deny-copy-file"
+description = "Denies the copy_file command without any pre-configured scope."
+commands.deny = ["copy_file"]

plugins/fs/permissions/autogenerated/commands/create.toml

@@ -0,0 +1,13 @@
+# Automatically generated - DO NOT EDIT!
+
+"$schema" = "../../schemas/schema.json"
+
+[[permission]]
+identifier = "allow-create"
+description = "Enables the create command without any pre-configured scope."
+commands.allow = ["create"]
+
+[[permission]]
+identifier = "deny-create"
+description = "Denies the create command without any pre-configured scope."
+commands.deny = ["create"]

plugins/fs/permissions/autogenerated/commands/exists.toml

@@ -0,0 +1,13 @@
+# Automatically generated - DO NOT EDIT!
+
+"$schema" = "../../schemas/schema.json"
+
+[[permission]]
+identifier = "allow-exists"
+description = "Enables the exists command without any pre-configured scope."
+commands.allow = ["exists"]
+
+[[permission]]
+identifier = "deny-exists"
+description = "Denies the exists command without any pre-configured scope."
+commands.deny = ["exists"]

plugins/fs/permissions/autogenerated/commands/fstat.toml

@@ -0,0 +1,13 @@
+# Automatically generated - DO NOT EDIT!
+
+"$schema" = "../../schemas/schema.json"
+
+[[permission]]
+identifier = "allow-fstat"
+description = "Enables the fstat command without any pre-configured scope."
+commands.allow = ["fstat"]
+
+[[permission]]
+identifier = "deny-fstat"
+description = "Denies the fstat command without any pre-configured scope."
+commands.deny = ["fstat"]

plugins/fs/permissions/autogenerated/commands/ftruncate.toml

@@ -0,0 +1,13 @@
+# Automatically generated - DO NOT EDIT!
+
+"$schema" = "../../schemas/schema.json"
+
+[[permission]]
+identifier = "allow-ftruncate"
+description = "Enables the ftruncate command without any pre-configured scope."
+commands.allow = ["ftruncate"]
+
+[[permission]]
+identifier = "deny-ftruncate"
+description = "Denies the ftruncate command without any pre-configured scope."
+commands.deny = ["ftruncate"]

plugins/fs/permissions/autogenerated/commands/lstat.toml

@@ -0,0 +1,13 @@
+# Automatically generated - DO NOT EDIT!
+
+"$schema" = "../../schemas/schema.json"
+
+[[permission]]
+identifier = "allow-lstat"
+description = "Enables the lstat command without any pre-configured scope."
+commands.allow = ["lstat"]
+
+[[permission]]
+identifier = "deny-lstat"
+description = "Denies the lstat command without any pre-configured scope."
+commands.deny = ["lstat"]

plugins/fs/permissions/autogenerated/commands/mkdir.toml

@@ -0,0 +1,13 @@
+# Automatically generated - DO NOT EDIT!
+
+"$schema" = "../../schemas/schema.json"
+
+[[permission]]
+identifier = "allow-mkdir"
+description = "Enables the mkdir command without any pre-configured scope."
+commands.allow = ["mkdir"]
+
+[[permission]]
+identifier = "deny-mkdir"
+description = "Denies the mkdir command without any pre-configured scope."
+commands.deny = ["mkdir"]

plugins/fs/permissions/autogenerated/commands/open.toml

@@ -0,0 +1,13 @@
+# Automatically generated - DO NOT EDIT!
+
+"$schema" = "../../schemas/schema.json"
+
+[[permission]]
+identifier = "allow-open"
+description = "Enables the open command without any pre-configured scope."
+commands.allow = ["open"]
+
+[[permission]]
+identifier = "deny-open"
+description = "Denies the open command without any pre-configured scope."
+commands.deny = ["open"]

plugins/fs/permissions/autogenerated/commands/read.toml

@@ -0,0 +1,13 @@
+# Automatically generated - DO NOT EDIT!
+
+"$schema" = "../../schemas/schema.json"
+
+[[permission]]
+identifier = "allow-read"
+description = "Enables the read command without any pre-configured scope."
+commands.allow = ["read"]
+
+[[permission]]
+identifier = "deny-read"
+description = "Denies the read command without any pre-configured scope."
+commands.deny = ["read"]

plugins/fs/permissions/autogenerated/commands/read_dir.toml

@@ -0,0 +1,13 @@
+# Automatically generated - DO NOT EDIT!
+
+"$schema" = "../../schemas/schema.json"
+
+[[permission]]
+identifier = "allow-read-dir"
+description = "Enables the read_dir command without any pre-configured scope."
+commands.allow = ["read_dir"]
+
+[[permission]]
+identifier = "deny-read-dir"
+description = "Denies the read_dir command without any pre-configured scope."
+commands.deny = ["read_dir"]

plugins/fs/permissions/autogenerated/commands/read_file.toml

@@ -0,0 +1,13 @@
+# Automatically generated - DO NOT EDIT!
+
+"$schema" = "../../schemas/schema.json"
+
+[[permission]]
+identifier = "allow-read-file"
+description = "Enables the read_file command without any pre-configured scope."
+commands.allow = ["read_file"]
+
+[[permission]]
+identifier = "deny-read-file"
+description = "Denies the read_file command without any pre-configured scope."
+commands.deny = ["read_file"]

plugins/fs/permissions/autogenerated/commands/read_text_file.toml

@@ -0,0 +1,13 @@
+# Automatically generated - DO NOT EDIT!
+
+"$schema" = "../../schemas/schema.json"
+
+[[permission]]
+identifier = "allow-read-text-file"
+description = "Enables the read_text_file command without any pre-configured scope."
+commands.allow = ["read_text_file"]
+
+[[permission]]
+identifier = "deny-read-text-file"
+description = "Denies the read_text_file command without any pre-configured scope."
+commands.deny = ["read_text_file"]

plugins/fs/permissions/autogenerated/commands/read_text_file_lines.toml

@@ -0,0 +1,13 @@
+# Automatically generated - DO NOT EDIT!
+
+"$schema" = "../../schemas/schema.json"
+
+[[permission]]
+identifier = "allow-read-text-file-lines"
+description = "Enables the read_text_file_lines command without any pre-configured scope."
+commands.allow = ["read_text_file_lines"]
+
+[[permission]]
+identifier = "deny-read-text-file-lines"
+description = "Denies the read_text_file_lines command without any pre-configured scope."
+commands.deny = ["read_text_file_lines"]

plugins/fs/permissions/autogenerated/commands/read_text_file_lines_next.toml

@@ -0,0 +1,13 @@
+# Automatically generated - DO NOT EDIT!
+
+"$schema" = "../../schemas/schema.json"
+
+[[permission]]
+identifier = "allow-read-text-file-lines-next"
+description = "Enables the read_text_file_lines_next command without any pre-configured scope."
+commands.allow = ["read_text_file_lines_next"]
+
+[[permission]]
+identifier = "deny-read-text-file-lines-next"
+description = "Denies the read_text_file_lines_next command without any pre-configured scope."
+commands.deny = ["read_text_file_lines_next"]

plugins/fs/permissions/autogenerated/commands/remove.toml

@@ -0,0 +1,13 @@
+# Automatically generated - DO NOT EDIT!
+
+"$schema" = "../../schemas/schema.json"
+
+[[permission]]
+identifier = "allow-remove"
+description = "Enables the remove command without any pre-configured scope."
+commands.allow = ["remove"]
+
+[[permission]]
+identifier = "deny-remove"
+description = "Denies the remove command without any pre-configured scope."
+commands.deny = ["remove"]

plugins/fs/permissions/autogenerated/commands/rename.toml

@@ -0,0 +1,13 @@
+# Automatically generated - DO NOT EDIT!
+
+"$schema" = "../../schemas/schema.json"
+
+[[permission]]
+identifier = "allow-rename"
+description = "Enables the rename command without any pre-configured scope."
+commands.allow = ["rename"]
+
+[[permission]]
+identifier = "deny-rename"
+description = "Denies the rename command without any pre-configured scope."
+commands.deny = ["rename"]

plugins/fs/permissions/autogenerated/commands/seek.toml

@@ -0,0 +1,13 @@
+# Automatically generated - DO NOT EDIT!
+
+"$schema" = "../../schemas/schema.json"
+
+[[permission]]
+identifier = "allow-seek"
+description = "Enables the seek command without any pre-configured scope."
+commands.allow = ["seek"]
+
+[[permission]]
+identifier = "deny-seek"
+description = "Denies the seek command without any pre-configured scope."
+commands.deny = ["seek"]

plugins/fs/permissions/autogenerated/commands/stat.toml

@@ -0,0 +1,13 @@
+# Automatically generated - DO NOT EDIT!
+
+"$schema" = "../../schemas/schema.json"
+
+[[permission]]
+identifier = "allow-stat"
+description = "Enables the stat command without any pre-configured scope."
+commands.allow = ["stat"]
+
+[[permission]]
+identifier = "deny-stat"
+description = "Denies the stat command without any pre-configured scope."
+commands.deny = ["stat"]

plugins/fs/permissions/autogenerated/commands/truncate.toml

@@ -0,0 +1,13 @@
+# Automatically generated - DO NOT EDIT!
+
+"$schema" = "../../schemas/schema.json"
+
+[[permission]]
+identifier = "allow-truncate"
+description = "Enables the truncate command without any pre-configured scope."
+commands.allow = ["truncate"]
+
+[[permission]]
+identifier = "deny-truncate"
+description = "Denies the truncate command without any pre-configured scope."
+commands.deny = ["truncate"]

plugins/fs/permissions/autogenerated/commands/unwatch.toml

@@ -0,0 +1,13 @@
+# Automatically generated - DO NOT EDIT!
+
+"$schema" = "../../schemas/schema.json"
+
+[[permission]]
+identifier = "allow-unwatch"
+description = "Enables the unwatch command without any pre-configured scope."
+commands.allow = ["unwatch"]
+
+[[permission]]
+identifier = "deny-unwatch"
+description = "Denies the unwatch command without any pre-configured scope."
+commands.deny = ["unwatch"]

plugins/fs/permissions/autogenerated/commands/watch.toml

@@ -0,0 +1,13 @@
+# Automatically generated - DO NOT EDIT!
+
+"$schema" = "../../schemas/schema.json"
+
+[[permission]]
+identifier = "allow-watch"
+description = "Enables the watch command without any pre-configured scope."
+commands.allow = ["watch"]
+
+[[permission]]
+identifier = "deny-watch"
+description = "Denies the watch command without any pre-configured scope."
+commands.deny = ["watch"]

plugins/fs/permissions/autogenerated/commands/write.toml

@@ -0,0 +1,13 @@
+# Automatically generated - DO NOT EDIT!
+
+"$schema" = "../../schemas/schema.json"
+
+[[permission]]
+identifier = "allow-write"
+description = "Enables the write command without any pre-configured scope."
+commands.allow = ["write"]
+
+[[permission]]
+identifier = "deny-write"
+description = "Denies the write command without any pre-configured scope."
+commands.deny = ["write"]

plugins/fs/permissions/autogenerated/commands/write_file.toml

@@ -0,0 +1,13 @@
+# Automatically generated - DO NOT EDIT!
+
+"$schema" = "../../schemas/schema.json"
+
+[[permission]]
+identifier = "allow-write-file"
+description = "Enables the write_file command without any pre-configured scope."
+commands.allow = ["write_file"]
+
+[[permission]]
+identifier = "deny-write-file"
+description = "Denies the write_file command without any pre-configured scope."
+commands.deny = ["write_file"]

plugins/fs/permissions/autogenerated/commands/write_text_file.toml

@@ -0,0 +1,13 @@
+# Automatically generated - DO NOT EDIT!
+
+"$schema" = "../../schemas/schema.json"
+
+[[permission]]
+identifier = "allow-write-text-file"
+description = "Enables the write_text_file command without any pre-configured scope."
+commands.allow = ["write_text_file"]
+
+[[permission]]
+identifier = "deny-write-text-file"
+description = "Denies the write_text_file command without any pre-configured scope."
+commands.deny = ["write_text_file"]

plugins/fs/permissions/default.toml

@@ -0,0 +1,28 @@
+"$schema" = "schemas/schema.json"
+
+[default]
+description = """
+# Tauri `fs` default permissions
+
+This configuration file defines the default permissions granted
+to the filesystem.
+
+### Granted Permissions
+
+This default permission set enables all read-related commands and
+allows access to the `$APP` folder and sub directories created in it.
+The location of the `$APP` folder depends on the operating system,
+where the application is run.
+
+In general the `$APP` folder needs to be manually created
+by the application at runtime, before accessing files or folders
+in it is possible.
+
+### Denied Permissions
+
+This default permission set prevents access to critical components
+of the Tauri application by default.
+On Windows the webview data folder access is denied.
+
+"""
+permissions = ["read-all", "scope-app-recursive", "deny-default"]

plugins/fs/permissions/deny-default.toml

@@ -0,0 +1,6 @@
+"$schema" = "schemas/schema.json"
+
+[[set]]
+identifier = "deny-default"
+description = "This denies access to dangerous Tauri relevant files and folders by default."
+permissions = ["deny-webview-data-linux", "deny-webview-data-windows"]

plugins/fs/permissions/deny-webview-data.toml

@@ -0,0 +1,19 @@
+"$schema" = "schemas/schema.json"
+
+[[permission]]
+identifier = "deny-webview-data-linux"
+description = """This denies read access to the
+`$APPLOCALDATA` folder on linux as the webview data and configuration values are stored here.
+Allowing access can lead to sensitive information disclosure and should be well considered."""
+
+[[scope.deny]]
+path = "$APPLOCALDATA/**"
+
+[[permission]]
+identifier = "deny-webview-data-windows"
+description = """This denies read access to the
+`$APPLOCALDATA/EBWebView` folder on windows as the webview data and configuration values are stored here.
+Allowing access can lead to sensitive information disclosure and should be well considered."""
+
+[[scope.deny]]
+path = "$APPLOCALDATA/EBWebView/**"

plugins/fs/permissions/read-all.toml

@@ -0,0 +1,21 @@
+"$schema" = "schemas/schema.json"
+
+[[permission]]
+identifier = "read-all"
+description = "This enables all read related commands without any pre-configured accessible paths."
+commands.allow = [
+    "read_dir",
+    "read_file",
+    "read",
+    "open",
+    "read_text_file",
+    "read_text_file_lines",
+    "read_text_file_lines_next",
+    "seek",
+    "stat",
+    "lstat",
+    "fstat",
+    "exists",
+    "watch",
+    "unwatch",
+]

plugins/fs/permissions/read-dirs.toml

@@ -0,0 +1,6 @@
+"$schema" = "schemas/schema.json"
+
+[[permission]]
+identifier = "read-dirs"
+description = "This enables directory read and file metadata related commands without any pre-configured accessible paths."
+commands.allow = ["read_dir", "stat", "lstat", "fstat", "exists"]

plugins/fs/permissions/read-files.toml

@@ -0,0 +1,19 @@
+"$schema" = "schemas/schema.json"
+
+[[permission]]
+identifier = "read-files"
+description = "This enables file read related commands without any pre-configured accessible paths."
+commands.allow = [
+    "read_file",
+    "read",
+    "open",
+    "read_text_file",
+    "read_text_file_lines",
+    "read_text_file_lines_next",
+    "seek",
+    "stat",
+    "lstat",
+    "fstat",
+    "exists",
+
+]

plugins/fs/permissions/read-meta.toml

@@ -0,0 +1,6 @@
+"$schema" = "schemas/schema.json"
+
+[[permission]]
+identifier = "read-meta"
+description = "This enables all index or metadata related commands without any pre-configured accessible paths."
+commands.allow = ["read_dir", "stat", "lstat", "fstat", "exists"]

plugins/fs/permissions/scope.toml

@@ -0,0 +1,5 @@
+"$schema" = "schemas/schema.json"
+
+[[permission]]
+identifier = "scope"
+description = "An empty permission you can use to modify the global scope."

plugins/fs/permissions/write-all.toml

@@ -0,0 +1,17 @@
+"$schema" = "schemas/schema.json"
+
+[[permission]]
+identifier = "write-all"
+description = "This enables all write related commands without any pre-configured accessible paths."
+commands.allow = [
+    "mkdir",
+    "create",
+    "copy_file",
+    "remove",
+    "rename",
+    "truncate",
+    "ftruncate",
+    "write",
+    "write_file",
+    "write_text_file",
+]

plugins/fs/permissions/write-files.toml

@@ -0,0 +1,16 @@
+"$schema" = "schemas/schema.json"
+
+[[permission]]
+identifier = "write-files"
+description = "This enables all file write related commands without any pre-configured accessible paths."
+commands.allow = [
+    "create",
+    "copy_file",
+    "remove",
+    "rename",
+    "truncate",
+    "ftruncate",
+    "write",
+    "write_file",
+    "write_text_file",
+]