cleanup: clean up docs/ directory and consent source files
This commit is contained in:
1 parent
ae5e84592d
commit
2eee6696ef
9 files changed
+5
-860
No files matched your search
@@ -265,9 +265,7 @@ namespace montauk::abi {
|
||||
/* Storage.hpp */
|
||||
static constexpr uint64_t SYS_VOLINFO = 190; // (VolInfo*, maxCount) -> count, -1 bad pointer
|
||||
|
||||
/* Consent.hpp -- first-use consent prompts (docs/consent.md). Only the
|
||||
session's consent agent (the desktop) may register, drain requests
|
||||
and answer them. */
|
||||
/* Consent.hpp */
|
||||
static constexpr uint64_t SYS_CONSENT_REGISTER = 191; // () -> 0, -13 lacks CAP_COMPOSITOR, -1 another agent is live
|
||||
static constexpr uint64_t SYS_CONSENT_NEXT = 192; // (ConsentRequest*) -> 1 delivered, 0 none queued
|
||||
static constexpr uint64_t SYS_CONSENT_REPLY = 193; // (requestId, CONSENT_ALLOW/DENY) -> 0, -1 stale id
|
||||
|
||||
@@ -1,7 +1,7 @@
|
||||
/*
|
||||
* consent.h
|
||||
* First-use consent: prompt wording and the stored-decision table
|
||||
* (0:/config/consent.toml). See docs/consent.md.
|
||||
* (0:/config/consent.toml).
|
||||
* Copyright (c) 2026 Daniel Hammer
|
||||
*/
|
||||
|
||||
|
||||
@@ -132,7 +132,7 @@ namespace montauk {
|
||||
return (int)syscall1(montauk::abi::SYS_GETCAPS, (uint64_t)out);
|
||||
}
|
||||
|
||||
// Consent agent (the desktop only; see docs/consent.md).
|
||||
// Consent agent.
|
||||
inline int consent_register() {
|
||||
return (int)syscall0(montauk::abi::SYS_CONSENT_REGISTER);
|
||||
}
|
||||
|
||||
@@ -1,7 +1,6 @@
|
||||
/*
|
||||
* consent.cpp
|
||||
* Consent agent: answers the kernel's first-use capability requests from
|
||||
* stored decisions, or asks the user in a prompt window (docs/consent.md)
|
||||
* Desktpp consent agent
|
||||
* Copyright (c) 2026 Daniel Hammer
|
||||
*/
|
||||
|
||||
@@ -9,15 +8,6 @@
|
||||
#include <gui/mtk.hpp>
|
||||
#include <montauk/consent.h>
|
||||
|
||||
// The prompt is an ordinary window inside the desktop, but an INTERNAL one:
|
||||
// its pixels live in the desktop's heap, not in a window-server surface, so
|
||||
// no app can map it (SYS_WINMAP) and only real input routed by the desktop
|
||||
// reaches it. What remains is clickjacking -- an app raising a window over
|
||||
// the prompt, or stealing focus, just as the user clicks. So Allow only
|
||||
// arms after the prompt has been focused and on top for ARM_DELAY_MS without
|
||||
// interruption; losing either restarts the delay. Don't Allow and closing
|
||||
// are always safe and never wait.
|
||||
|
||||
namespace {
|
||||
|
||||
constexpr int PROMPT_W = 460;
|
||||
|
||||
Reference in new issue
Block a user