From c2f33974839a74e5155a4df47d9f3fe5ae9b8d7b Mon Sep 17 00:00:00 2001 From: "Dylan M. Taylor" Date: Wed, 28 Oct 2026 13:07:13 -0400 Subject: [PATCH] Grant network access so update checks can reach GitHub (#1502) --- packaging/linux/flatpak/ai.storyteller.deckcraft.bundle.yml | 6 +++--- packaging/linux/flatpak/ai.storyteller.deckcraft.yml | 6 +++--- 2 files changed, 6 insertions(+), 6 deletions(-) diff --git a/packaging/linux/flatpak/ai.storyteller.deckcraft.bundle.yml b/packaging/linux/flatpak/ai.storyteller.deckcraft.bundle.yml index 6245147c..230c2289 100644 --- a/packaging/linux/flatpak/ai.storyteller.deckcraft.bundle.yml +++ b/packaging/linux/flatpak/ai.storyteller.deckcraft.bundle.yml @@ -31,9 +31,9 @@ finish-args: # document portal, so picked files work anywhere without broad filesystem access. Documents is # granted so decks passed by path (the command line, Open Recent) work in the usual place. - --filesystem=xdg-documents - # Deliberately not granted: network (the optional --control server listens on 127.0.0.1 in - # the sandbox; `flatpak override --user --share=network ai.storyteller.deckcraft` exposes it to - # host agents) and home/host filesystem access. + # Network: update checks reach GitHub. The optional --control server still listens on 127.0.0.1 + # only. Home/host filesystem access is deliberately not granted. + - --share=network modules: - name: deckcraft buildsystem: simple diff --git a/packaging/linux/flatpak/ai.storyteller.deckcraft.yml b/packaging/linux/flatpak/ai.storyteller.deckcraft.yml index 574dbc86..b99365c2 100644 --- a/packaging/linux/flatpak/ai.storyteller.deckcraft.yml +++ b/packaging/linux/flatpak/ai.storyteller.deckcraft.yml @@ -32,9 +32,9 @@ finish-args: # document portal, so picked files work anywhere without broad filesystem access. Documents is # granted so decks passed by path (the command line, Open Recent) work in the usual place. - --filesystem=xdg-documents - # Deliberately not granted: network (the optional --control server listens on 127.0.0.1 in - # the sandbox; `flatpak override --user --share=network ai.storyteller.deckcraft` exposes it to - # host agents) and home/host filesystem access. + # Network: update checks reach GitHub. The optional --control server still listens on 127.0.0.1 + # only. Home/host filesystem access is deliberately not granted. + - --share=network build-options: append-path: /usr/lib/sdk/rust-stable/bin modules: