Permissions
A kibble lists what it needs in nana.permissions. Calls without the
matching permission fail, and unknown permission names stop the kibble from
loading. Ask for the minimum.
"permissions": ["tabs:read", "git:read", "notifications:write"]Permissions
| Permission | Allows |
|---|---|
tabs:read |
tabs.list |
tabs:write |
Open, switch, and create tabs; set a tab’s title and icon; openTab commands |
panes:read |
panes.list, panes.readScreen |
panes:write |
panes.send, panes.sendKeys, panes.close, panes.rename |
projects:read |
List projects and workspaces; the projects.changed event |
projects:write |
Add, switch, rename, recolor, reorder projects; manage workspaces |
projects:delete |
projects.delete |
worktrees:read |
worktrees.list; the worktree.headChanged event |
worktrees:write |
worktrees.switchTo, worktrees.refresh |
agents:read |
agents.list; the agent.status event |
files:read |
files.list, files.read, files.stat; the file.changed event |
files:write |
files.write, mkdir, rename, move, delete |
git:read |
Status, diffs, log, branches, worktrees, pull request info |
git:write |
Every other git.* call |
gh:read |
gh.user |
storage:read / storage:write |
Read / change the kibble’s storage |
notifications:write |
notifications.notify, toast |
panels:write |
Panels, popovers, modal web views, and setting bar items; panel, popover, and modal commands |
commands:run-script |
runScript commands |
commands:exec |
exec, execAsync |
shortcuts:register |
shortcuts.register, shortcuts.unregister |
browser:read / browser:write |
Read / drive browser tabs with nana.browser |
remote:serve |
Accepted; remote methods are not available in 2.x |
http.fetch, dialogs, the picker, events, and lifecycle need no
permission.
Runtime prompts
Some calls also ask the user each time, even with the permission:
| Asks before | Remembered per |
|---|---|
Running a program (exec, execAsync) |
Program, or shell command |
| Typing or pressing keys in a terminal | Kibble |
| Reading terminal output | Kibble |
| Opening a terminal tab that runs a command | Command |
| Opening another kibble’s tab | Kibble |
Changing the repository (git:write calls) |
Operation |
Changing files (files:write calls) |
Operation |
A web request (http.fetch) |
Host |
| Deleting a project | Project |
The user can Allow once, Allow & Remember, Cancel, Deny & Remember, or block that kind of action for the extension. An unanswered prompt is denied after 60 seconds, and at most five prompts can wait at once.
Saved choices are listed under Permission rules on the kibble’s page in Settings → Kibbles, with Reveal audit log for a history of decisions. Uninstalling clears them.