{"record":{"id":"15e53693131caf34","repo":"tauri-apps/tauri","slug":"failed-to-read-capabilities","errorCode":null,"errorMessage":"failed to read capabilities","messagePattern":"failed to read capabilities","errorType":"panic","errorClass":null,"httpStatus":null,"severity":"error","filePath":"crates/tauri-codegen/src/context.rs","lineNumber":405,"sourceCode":"        key: #key.into(),\n        crypto_keys: std::boxed::Box::new(::tauri::utils::pattern::isolation::Keys::new().expect(\"unable to generate cryptographically secure keys for Tauri \\\"Isolation\\\" Pattern\")),\n      })\n    }\n  };\n\n  let acl_file_path = out_dir.join(ACL_MANIFESTS_FILE_NAME);\n  let acl: BTreeMap<String, Manifest> = if acl_file_path.exists() {\n    let acl_file =\n      std::fs::read_to_string(acl_file_path).expect(\"failed to read plugin manifest map\");\n    serde_json::from_str(&acl_file).expect(\"failed to parse plugin manifest map\")\n  } else {\n    Default::default()\n  };\n\n  let capabilities_file_path = out_dir.join(CAPABILITIES_FILE_NAME);\n  let capabilities_from_files = if capabilities_file_path.exists() {\n    let capabilities_json =\n      std::fs::read_to_string(&capabilities_file_path).expect(\"failed to read capabilities\");\n    serde_json::from_str(&capabilities_json).expect(\"failed to parse capabilities\")\n  } else {\n    Default::default()\n  };\n  let capabilities = get_capabilities(\n    &config,\n    capabilities_from_files,\n    additional_capabilities.as_deref(),\n  )\n  .unwrap();\n\n  let resolved = Resolved::resolve(&acl, capabilities, target).expect(\"failed to resolve ACL\");\n\n  let acl_tokens = map_lit(\n    quote! { ::std::collections::BTreeMap },\n    &acl,\n    str_lit,\n    identity,","sourceCodeStart":387,"sourceCodeEnd":423,"githubUrl":"https://github.com/tauri-apps/tauri/blob/52e4b6e71d8632a7e648f866c442e287ecddee34/crates/tauri-codegen/src/context.rs#L387-L423","documentation":"Build-time panic in tauri-codegen reading OUT_DIR/capabilities.json — the cache of the app's capability files written by tauri-build. std::fs::read_to_string(&capabilities_file_path).expect(\"failed to read capabilities\") fires when the file exists (the exists() check passed) but the read fails: permission loss, deletion or locking between check and read, or non-UTF-8 bytes.","triggerScenarios":"generate_context! reading capabilities.json while a parallel cargo build, antivirus, or cleanup process removes or locks it; target directory shared across users; truncated cache from a build that was killed mid-write.","commonSituations":"Concurrent CI jobs sharing one target volume; rust-analyzer racing a command-line build; one build step executed as root leaving root-owned artifacts.","solutions":["cargo clean and rebuild so capabilities.json is regenerated","Serialize builds on the same target directory (CI locking, disable rust-analyzer during release builds)","Fix ownership/permissions of target/ and never mix root/user builds","Stop external tools (antivirus, indexers, backup) from touching target/"],"exampleFix":"# before: panic: failed to read capabilities\n\n# after\ncargo clean && cargo build","handlingStrategy":"validation","validationCode":"# remove torn capability caches from interrupted builds before compiling\nfind target -name capabilities.json -size -10c -delete 2>/dev/null || true","typeGuard":null,"tryCatchPattern":null,"preventionTips":["Do not edit capability files while a build is running","Serialize CI builds sharing a target directory","cargo clean after interrupted builds"],"tags":["acl","capabilities","build","filesystem"],"backgroundTag":"stale-build-artifact","analyzedSha":"52e4b6e71d8632a7e648f866c442e287ecddee34","analyzedAt":"2026-08-20T13:59:20.734Z","schemaVersion":2},"datasetVersion":"2026-08-31T19:17:28.585Z"}