@crossbind/extension-page-permissions 0.0.0-bootstrap.0 → 2.0.0-beta.69

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Buğra Sarı and crossbind contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,6 +1,25 @@
 # @crossbind/extension-page-permissions
 
-This version, 0.0.0-bootstrap.0, holds no code. npm lets a trusted publisher be configured only for a
-package that exists, so it reserves the name for the crossbind release workflow.
+What a page may use, such as the camera and the microphone.
 
-Install the real package: `npm install @crossbind/extension-page-permissions@beta`. Source: https://github.com/crossbind/crossbind
+An app has it by having `@crossbind/core-app-host`, which lists it as a dependency: there is nothing to install or list.
+
+## What it does
+
+The page gets the devices `app.permissions` lists, as the camera and the microphone, and the clipboard's text, which a
+webview asks for on its user's gesture alone, and nothing else, so that no webview asks the app's user anything of its
+own. The system still asks for each device.
+
+## Options
+
+`app.permissions` lists each device with the reason the system shows, as `{ camera: 'To scan barcodes' }`.
+
+## Platforms
+
+macOS, iOS, Linux, Windows and Android.
+
+## Replace or leave out
+
+It holds the role `page-permissions`. An extension that gives `replaces: 'page-permissions'` takes it; `app: { without: ['page-permissions'] }` in `crossbind.config.js` leaves it out. Leaving it out while `app.permissions` is set stops the build. [The guide](https://crossbind.dev/guide/extensions/#replace) shows how, and [extensions.md](https://github.com/crossbind/crossbind/blob/main/docs/api/extensions.md#the-hosts-own-extensions) what a replacement answers.
+
+[extensions.md](https://github.com/crossbind/crossbind/blob/main/docs/api/extensions.md#the-pages-requests) has the hooks a replacement answers.

package/crossbind.extension.js

@@ -0,0 +1,15 @@
+export default function pagePermissions() {
+    return {
+        name: 'page-permissions',
+        contract: 1,
+        root: import.meta.dirname,
+        reads: ['permissions'],
+        app: {
+            macos: { sources: ['native/permissions.cpp'] },
+            ios: { sources: ['native/permissions.cpp'] },
+            linux: { sources: ['native/permissions.cpp'] },
+            windows: { sources: ['native/permissions.cpp'] },
+            android: { java: 'native/android', class: 'dev.crossbind.extension.pagepermissions.PagePermissionsExtension' },
+        },
+    };
+}

package/native/android/dev/crossbind/extension/pagepermissions/PagePermissionsExtension.java

@@ -0,0 +1,53 @@
+package dev.crossbind.extension.pagepermissions;
+
+import android.Manifest;
+import android.app.Activity;
+import android.content.pm.PackageManager;
+
+import java.util.Arrays;
+import java.util.List;
+import java.util.Map;
+
+import org.json.JSONObject;
+
+import dev.crossbind.app.Extension;
+import dev.crossbind.app.ExtensionHost;
+
+// The host's page-permissions on Android: the page gets the devices the manifest asks for, which crossbind writes from
+// app.permissions, once the app's user gives them, and nothing else, so that the WebView asks nothing of its own. The
+// location is the approximate one at least, which its user may give alone.
+public final class PagePermissionsExtension implements Extension {
+    private static final String COARSE = Manifest.permission.ACCESS_COARSE_LOCATION;
+    private static final Map<String, String> DEVICES = Map.of(
+            "camera", Manifest.permission.CAMERA,
+            "microphone", Manifest.permission.RECORD_AUDIO);
+
+    @Override
+    public void call(ExtensionHost host, String function, JSONObject options, Call call) {
+        call.reject("crossbind: page-permissions has no function " + function);
+    }
+
+    @Override
+    public void onPagePermission(ExtensionHost host, PagePermission request) {
+        Activity activity = host.activity();
+        if (!request.isListed()) {
+            request.deny();
+        } else if (request.kinds().equals(List.of("location"))) {
+            // Asked for the precise location again, a user who gave the approximate one is asked to change it.
+            if (isGranted(activity, COARSE)) request.allow();
+            else host.afterAsking(new String[] {COARSE, Manifest.permission.ACCESS_FINE_LOCATION}, () -> answer(activity, request, COARSE));
+        } else {
+            String[] permissions = request.kinds().stream().map(DEVICES::get).toArray(String[]::new);
+            host.afterAsking(permissions, () -> answer(activity, request, permissions));
+        }
+    }
+
+    private static void answer(Activity activity, PagePermission request, String... permissions) {
+        if (Arrays.stream(permissions).allMatch((permission) -> isGranted(activity, permission))) request.allow();
+        else request.deny();
+    }
+
+    private static boolean isGranted(Activity activity, String permission) {
+        return activity.checkSelfPermission(permission) == PackageManager.PERMISSION_GRANTED;
+    }
+}

package/native/permissions.cpp

@@ -0,0 +1,12 @@
+#include "crossbind/extension.h"
+
+// The host's page-permissions: the page gets the devices app.permissions lists, and the clipboard's text, which a
+// webview asks for on its user's gesture alone, and nothing else, so that no webview asks the app's user anything of
+// its own. The system still asks for each device.
+void crossbind_extension_page_permissions(crossbind::Registry &registry) {
+    registry.onPagePermission([](crossbind::PagePermission request) {
+        const auto &kinds = request.kinds();
+        if (request.isListed() || (kinds.size() == 1 && kinds.front() == "clipboard")) request.allow();
+        else request.deny();
+    });
+}

package/package.json

@@ -1,7 +1,29 @@
 {
-    "name": "@crossbind/extension-page-permissions",
-    "version": "0.0.0-bootstrap.0",
-    "description": "Placeholder that let npm trust the crossbind release workflow; install @crossbind/extension-page-permissions@beta.",
-    "license": "MIT",
-    "repository": "https://github.com/crossbind/crossbind.git"
-}
+  "name": "@crossbind/extension-page-permissions",
+  "version": "2.0.0-beta.69",
+  "description": "crossbind app extension: what a page may use, such as the camera and the microphone.",
+  "homepage": "https://github.com/crossbind/crossbind/tree/main/extensions/page-permissions#readme",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/crossbind/crossbind.git"
+  },
+  "license": "MIT",
+  "type": "module",
+  "exports": {
+    "./crossbind.extension.js": "./crossbind.extension.js"
+  },
+  "files": [
+    "crossbind.extension.js",
+    "native"
+  ],
+  "crossbind": {
+    "extension": "./crossbind.extension.js"
+  },
+  "keywords": [
+    "crossbind-extension",
+    "crossbind",
+    "page",
+    "permissions",
+    "app"
+  ]
+}