Commit Graph

77 Commits

Author SHA1 Message Date
Kartik K. Agaram 618b49fbf3 use markdown syntax for images
Now they render right on non-Github forges.
2023-11-26 18:06:52 -08:00
Kartik K. Agaram 5e976554dd drop the lfs library
I can't feel confident about its sandboxing story yet. And if we can't
build a file navigator, what are we even doing with it.
2022-03-14 17:26:13 -07:00
Kartik K. Agaram 6f5f6849dd . 2022-03-14 17:23:38 -07:00
Kartik K. Agaram babaa235b1 update link to manual 2022-03-14 16:46:05 -07:00
Kartik K. Agaram 7852cdfebe readme tweak 2022-02-26 13:47:54 -08:00
Kartik K. Agaram 52372d1812 delete curses primitives to read whole lines
They make it seem like you can use them to create simple REPL apps, but
you can't, because standard Teliva shortcuts won't work.

I _could_ make them work by emulating them using getch(), but that feels
like an unnecessary abstraction for now.
2022-02-21 17:06:34 -08:00
Kartik K. Agaram f8f1ec666a stop letting apps change directory
I introduced this ability when I packaged up the lfs directory, but it
can enable apps to circumvent sandboxing rules in some situations. If
you can socially engineer someone to allow reading a file called
'passwd' in the current directory, you can now change directory to /etc
and read something sensitive.

Protecting against stuff like this gets subtle. It's easy for people to
create policies that aren't robust to changing directories. Requiring
absolute paths is also pretty unfriendly. So the whole notion of current
directory is perhaps implicit state that is confusing to manage. Fix it
in the context of a single session.
2022-02-20 05:01:28 -08:00
Kartik K. Agaram b36927e35c rewrite the section on Teliva's dependencies 2022-02-19 09:13:52 -08:00
Kartik K. Agaram 557774af42 Readme: move some sections around to flow better 2022-02-19 09:11:40 -08:00
Kartik K. Agaram eb53603b06 starting a few Readme tweaks
For starters, drop some redundant prose here.
2022-02-19 09:10:29 -08:00
Kartik K. Agaram 38b15e8086 flesh out sandboxing in Readme a tad 2022-02-09 14:47:01 -08:00
Kartik K. Agaram 29d4555d04 update keyboard shortcuts in screenshots and docs 2022-02-09 14:39:31 -08:00
Kartik K. Agaram 0d16c7c690 more Readme polish 2022-02-07 22:32:06 -08:00
Kartik K. Agaram 6d2dce51db remove dropped functions from docs 2022-02-07 22:22:57 -08:00
Kartik K. Agaram 24f0781d2b new library: luafilesystem (lfs)
https://github.com/keplerproject/luafilesystem

The new commander.tlv app demonstrates it working.
2022-01-29 12:39:53 -08:00
Kartik K. Agaram b493ed32b8 get Teliva working on FreeBSD 2022-01-26 09:36:06 -08:00
Kartik K. Agaram 1ee25077b8 documentation for NetBSD 2022-01-24 20:51:46 -08:00
Kartik K. Agaram a5a8c1b936 known issue on OpenBSD 2022-01-24 20:01:27 -08:00
Kartik K. Agaram 058145ee23 clarify generic 'bsd' build target
We still only have OpenBSD working.
2022-01-24 17:25:50 -08:00
Kartik K. Agaram 6499e93345 clearer first sentence 2022-01-14 14:42:20 -08:00
Kartik K. Agaram f204dff73b enumerate mirrors 2022-01-14 08:55:05 -08:00
Kartik K. Agaram 6eecba1b5f . 2021-12-25 13:55:29 -08:00
Kartik K. Agaram 4cb6fed4e0 . 2021-12-25 13:53:18 -08:00
Kartik K. Agaram 1fdfa8909b . 2021-12-25 12:08:55 -08:00
Kartik K. Agaram 940e1abd6a make the case for sandboxing in the Readme 2021-12-25 12:06:30 -08:00
Kartik K. Agaram 1e63a579d7 drop stdin/stdout/stderr and Lua default files
This isn't necessarily for sandboxing, but they don't really work right
now in the presence of ncurses, and it seems better to not include
broken stuff. Maybe we can get them to coexist with ncurses down the
road.
2021-12-25 11:35:50 -08:00
Kartik K. Agaram 917646fc9f sandbox: no popen
Again, too difficult to sandbox for now.
2021-12-25 11:04:23 -08:00
Kartik K. Agaram 1b25d58a4f sandbox: no system()
Too hard to sandbox. Maybe we'll get back to it if there's some use case
only it can satisfy.
2021-12-25 08:22:15 -08:00
Kartik K. Agaram 47e42241e7 clarify 'hardcoded colors' in the Readme 2021-12-24 09:26:53 -08:00
Kartik K. Agaram 8283c0c8e7 . 2021-12-23 23:37:40 -08:00
Kartik K. Agaram c4984c2ae5 fix stale readme 2021-12-20 07:05:50 -08:00
Kartik K. Agaram c55c5a7b0c mention programming framework in Readme 2021-12-18 07:55:55 -08:00
Kartik K. Agaram 469ad4e546 clearer description of editing experience 2021-12-10 14:22:25 -08:00
Kartik K. Agaram 294c135d3f elaborate a little more on install instructions
Thanks to Mariano Guerra for the Nix command, and to Konrad Hinsen for
the Guix command.
2021-12-03 20:55:32 -08:00
Kartik K. Agaram 31af4bd1fd improve support for backspace
I still don't understand the entire state space here, so I'm trying to
err on the side of improving discoverability of the `ctrl-h` escape
hatch. Without requiring too wide a window to show all hotkeys on the
menu.
2021-12-03 18:05:25 -08:00
Kartik K. Agaram 516ac2fa8e describe the manual process to obtain a dark bg
https://github.com/akkartik/teliva/issues/1
2021-12-03 17:19:40 -08:00
Kartik K. Agaram bbeef0b49f . 2021-11-27 08:42:37 -08:00
Kartik K. Agaram ae2d3e377e clarify what Teliva is 2021-11-27 08:16:42 -08:00
Kartik K. Agaram 7814c1c98a now building on OpenBSD
Still emitting a bunch of warnings on OpenBSD, though.
2021-11-27 07:58:58 -08:00
Kartik K. Agaram c0c67859a2 de-duplicate some words in the Readme 2021-11-24 07:43:12 -08:00
Kartik K. Agaram 7d96a886d8 . 2021-11-23 09:30:17 -08:00
Kartik K. Agaram fe9708fd29 clarify implications for the `require` keyword 2021-11-22 10:52:19 -08:00
Kartik K. Agaram 4dffcacc3a . 2021-11-22 09:08:29 -08:00
Kartik K. Agaram 50008ed438 showcase other apps in the Readme 2021-11-22 09:06:21 -08:00
Kartik K. Agaram b37cbc9ea4 link to video in Readme
I played with inlining video files, but this seems like the sweet spot:
accessible video that isn't in the reader's face.
2021-11-22 08:59:34 -08:00
Kartik K. Agaram 440f6e92c1 . 2021-11-21 18:05:00 -08:00
Kartik K. Agaram e43cdbeac8 more thinking around compatibility and governance 2021-11-21 18:02:27 -08:00
Kartik K. Agaram 80d6db0760 include new dependency in Readme 2021-11-21 17:23:57 -08:00
Kartik K. Agaram 5a484efe8c https now working!
Still extremely ugly:
- I've inlined all the namespaces under ssl, so you need to know that
  context and config are related to ssl.
- luasec comes with its own copy of luasocket. I haven't deduped that
  yet.
2021-11-21 15:55:52 -08:00
Kartik K. Agaram f7ab5dd291 start on HTTP client 2021-11-21 14:33:57 -08:00