fix(fs): allow open, seek and fstat in the write permission sets

The stream path of writeFile calls `open`, which only the nested command
list of `allow-write-file` granted (plugins/fs/permissions/write-all.toml,
write-files.toml), so `fs:allow-appdata-write-recursive` and the other
write sets rejected streamed writes; seek/fstat were missing for
FileHandles created under these sets.

Adds open, seek and fstat to write-all and write-files. This widens the
write sets slightly (open is already implied by allow-write-file); the
generated reference does not list set members, so nothing to regenerate.

Author: lucasfernog

.changes/fix-fs-write-sets-open.md

@@ -0,0 +1,6 @@
+---
+fs: patch
+fs-js: patch
+---
+
+The `write-all` and `write-files` permissions (and so every `allow-*-write[-recursive]` set) now also allow the `open`, `seek` and `fstat` commands. `writeFile` with a `ReadableStream` uses `open` and failed with "not allowed" under these sets, and the `FileHandle` returned by `create` could not `seek` or `stat`.

plugins/fs/permissions/write-all.toml

@@ -14,4 +14,8 @@ commands.allow = [
   "write",
   "write_file",
   "write_text_file",
+  # used by `writeFile` with a stream and by the `FileHandle` returned by `create` and `open`
+  "open",
+  "seek",
+  "fstat",
 ]

plugins/fs/permissions/write-files.toml

@@ -13,4 +13,8 @@ commands.allow = [
   "write",
   "write_file",
   "write_text_file",
+  # used by `writeFile` with a stream and by the `FileHandle` returned by `create` and `open`
+  "open",
+  "seek",
+  "fstat",
 ]