tauri-dev

Secure Tauri v2 IPC commands require defining Rust command signatures, wiring state management, and applying least-privilege capability permissions to restrict frontend access. This Skill designs command patterns and capability plans to ensure safe communication between the Rust core and WebView frontend.

Configuring capabilities and CSP security in Tauri v2 involves setting up ACL-based permissions and Content Security Policy headers to enforce strict boundaries. This Skill provides secure-by-default implementation patterns for input validation and least-privilege permission planning across desktop and mobile platforms.

Managing application state in Tauri v2 involves passing state containers into Rust command signatures to handle settings or file-scoped operations persistently. This Skill outlines stateful command handling approaches for both sync and async tasks within the Rust backend.

Tauri v2 supports background processing by emitting async IPC events from the Rust core to the WebView frontend to report progress. This Skill implements event wiring patterns to handle long-running operations and streaming updates securely.

Testing Tauri v2 integration requires validating both the Rust backend logic and the WebView frontend interactions within the project structure. This Skill provides testing strategies to ensure commands, state handling, and plugin registration function correctly together.

Tauri v2 capabilities ACL is needed whenever the WebView frontend requests file-scoped operations through IPC commands to ensure least-privilege access. This Skill helps plan and register the required capability permissions for secure file and settings management.