cleanup: clean up docs/ directory and consent source files

This commit is contained in:
daniel committed 2026-09-30 08:36:41 +02:00
1 parent ae5e84592d
commit 2eee6696ef
9 files changed
+5 -860

No files matched your search

+1 -3
View File
@@ -265,9 +265,7 @@ namespace montauk::abi {
/* Storage.hpp */
static constexpr uint64_t SYS_VOLINFO = 190; // (VolInfo*, maxCount) -> count, -1 bad pointer
/* Consent.hpp -- first-use consent prompts (docs/consent.md). Only the
session's consent agent (the desktop) may register, drain requests
and answer them. */
/* Consent.hpp */
static constexpr uint64_t SYS_CONSENT_REGISTER = 191; // () -> 0, -13 lacks CAP_COMPOSITOR, -1 another agent is live
static constexpr uint64_t SYS_CONSENT_NEXT = 192; // (ConsentRequest*) -> 1 delivered, 0 none queued
static constexpr uint64_t SYS_CONSENT_REPLY = 193; // (requestId, CONSENT_ALLOW/DENY) -> 0, -1 stale id
+1 -1
View File
@@ -1,7 +1,7 @@
/*
* consent.h
* First-use consent: prompt wording and the stored-decision table
* (0:/config/consent.toml). See docs/consent.md.
* (0:/config/consent.toml).
* Copyright (c) 2026 Daniel Hammer
*/
+1 -1
View File
@@ -132,7 +132,7 @@ namespace montauk {
return (int)syscall1(montauk::abi::SYS_GETCAPS, (uint64_t)out);
}
// Consent agent (the desktop only; see docs/consent.md).
// Consent agent.
inline int consent_register() {
return (int)syscall0(montauk::abi::SYS_CONSENT_REGISTER);
}
+1 -11
View File
@@ -1,7 +1,6 @@
/*
* consent.cpp
* Consent agent: answers the kernel's first-use capability requests from
* stored decisions, or asks the user in a prompt window (docs/consent.md)
* Desktpp consent agent
* Copyright (c) 2026 Daniel Hammer
*/
@@ -9,15 +8,6 @@
#include <gui/mtk.hpp>
#include <montauk/consent.h>
// The prompt is an ordinary window inside the desktop, but an INTERNAL one:
// its pixels live in the desktop's heap, not in a window-server surface, so
// no app can map it (SYS_WINMAP) and only real input routed by the desktop
// reaches it. What remains is clickjacking -- an app raising a window over
// the prompt, or stealing focus, just as the user clicks. So Allow only
// arms after the prompt has been focused and on top for ARM_DELAY_MS without
// interruption; losing either restarts the delay. Don't Allow and closing
// are always safe and never wait.
namespace {
constexpr int PROMPT_W = 460;