@lobehub/lobehub 2.0.0-next.252 → 2.0.0-next.254

package/CHANGELOG.md

@@ -2,6 +2,64 @@
 
 # Changelog
 
+## [Version 2.0.0-next.254](https://github.com/lobehub/lobe-chat/compare/v2.0.0-next.253...v2.0.0-next.254)
+
+<sup>Released on **2026-01-10**</sup>
+
+#### 💄 Styles
+
+- **misc**: Update i18n.
+
+<br/>
+
+<details>
+<summary><kbd>Improvements and Fixes</kbd></summary>
+
+#### Styles
+
+- **misc**: Update i18n, closes [#11360](https://github.com/lobehub/lobe-chat/issues/11360) ([da09825](https://github.com/lobehub/lobe-chat/commit/da09825))
+
+</details>
+
+<div align="right">
+
+[![](https://img.shields.io/badge/-BACK_TO_TOP-151515?style=flat-square)](#readme-top)
+
+</div>
+
+## [Version 2.0.0-next.253](https://github.com/lobehub/lobe-chat/compare/v2.0.0-next.252...v2.0.0-next.253)
+
+<sup>Released on **2026-01-09**</sup>
+
+#### ✨ Features
+
+- **desktop**: Improve macOS permission requests and Full Disk Access detection.
+
+#### 🐛 Bug Fixes
+
+- **controls**: Update checkbox toggle behavior and pass value to ParamControlWrapper.
+
+<br/>
+
+<details>
+<summary><kbd>Improvements and Fixes</kbd></summary>
+
+#### What's improved
+
+- **desktop**: Improve macOS permission requests and Full Disk Access detection, closes [#11380](https://github.com/lobehub/lobe-chat/issues/11380) ([2d5868f](https://github.com/lobehub/lobe-chat/commit/2d5868f))
+
+#### What's fixed
+
+- **controls**: Update checkbox toggle behavior and pass value to ParamControlWrapper, closes [#11363](https://github.com/lobehub/lobe-chat/issues/11363) ([1f1ef94](https://github.com/lobehub/lobe-chat/commit/1f1ef94))
+
+</details>
+
+<div align="right">
+
+[![](https://img.shields.io/badge/-BACK_TO_TOP-151515?style=flat-square)](#readme-top)
+
+</div>
+
 ## [Version 2.0.0-next.252](https://github.com/lobehub/lobe-chat/compare/v2.0.0-next.251...v2.0.0-next.252)
 
 <sup>Released on **2026-01-09**</sup>

package/apps/desktop/build/entitlements.mac.plist

@@ -2,11 +2,20 @@
 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
 <plist version="1.0">
   <dict>
+    <!-- Hardened Runtime exceptions for Electron -->
     <key>com.apple.security.cs.allow-jit</key>
     <true/>
     <key>com.apple.security.cs.allow-unsigned-executable-memory</key>
     <true/>
     <key>com.apple.security.cs.allow-dyld-environment-variables</key>
     <true/>
+
+    <!-- Microphone access for voice interactions -->
+    <key>com.apple.security.device.audio-input</key>
+    <true/>
+
+    <!-- Camera access (for future video features) -->
+    <key>com.apple.security.device.camera</key>
+    <true/>
   </dict>
 </plist>

package/apps/desktop/resources/locales/zh-CN/dialog.json

@@ -11,6 +11,10 @@
   "error.detail": "操作未完成。你可以重试，或稍后再试。",
   "error.message": "发生错误",
   "error.title": "错误",
+  "fullDiskAccess.message": "LobeHub 需要完全磁盘访问权限来读取文件并启用知识库功能。请在系统设置中授予权限。",
+  "fullDiskAccess.openSettings": "打开设置",
+  "fullDiskAccess.skip": "稍后",
+  "fullDiskAccess.title": "需要完全磁盘访问权限",
   "update.checkingUpdate": "检查新版本",
   "update.checkingUpdateDesc": "正在获取版本信息…",
   "update.downloadAndInstall": "下载并安装",
@@ -41,4 +45,4 @@
   "waitingOAuth.helpText": "如果浏览器没有自动打开，请点击取消后重新尝试",
   "waitingOAuth.retry": "重试",
   "waitingOAuth.title": "等待授权连接"
-}
+}

package/apps/desktop/resources/locales/zh-CN/menu.json

@@ -7,6 +7,13 @@
   "dev.openStore": "打开本地数据目录",
   "dev.openUpdaterCacheDir": "更新缓存目录",
   "dev.openUserDataDir": "用户配置目录",
+  "dev.permissions.accessibility.request": "请求辅助功能权限",
+  "dev.permissions.fullDisk.open": "打开「完全磁盘访问」设置",
+  "dev.permissions.fullDisk.request": "请求完全磁盘访问权限",
+  "dev.permissions.microphone.request": "请求麦克风权限",
+  "dev.permissions.notification.request": "请求通知权限",
+  "dev.permissions.screen.request": "请求屏幕录制权限",
+  "dev.permissions.title": "权限",
   "dev.refreshMenu": "刷新菜单",
   "dev.reload": "重新加载",
   "dev.simulateAutoDownload": "模拟启动后台自动下载更新（3s 下完）",

package/apps/desktop/src/main/controllers/SystemCtr.ts

@@ -1,14 +1,12 @@
 import { ElectronAppState, ThemeMode } from '@lobechat/electron-client-ipc';
-import { app, dialog, nativeTheme, shell, systemPreferences } from 'electron';
+import { app, desktopCapturer, dialog, nativeTheme, shell, systemPreferences } from 'electron';
 import { macOS } from 'electron-is';
-import { spawn } from 'node:child_process';
-import path from 'node:path';
 import process from 'node:process';
 
+import { checkFullDiskAccess, openFullDiskAccessSettings } from '@/utils/fullDiskAccess';
 import { createLogger } from '@/utils/logger';
 
 import { ControllerModule, IpcMethod } from './index';
-import fullDiskAccessAutoAddScript from './scripts/full-disk-access.applescript?raw';
 
 const logger = createLogger('controllers:SystemCtr');
 
@@ -57,14 +55,98 @@ export default class SystemController extends ControllerModule {
 
   @IpcMethod()
   requestAccessibilityAccess() {
-    if (!macOS()) return true;
-    return systemPreferences.isTrustedAccessibilityClient(true);
+    if (!macOS()) {
+      logger.info('[Accessibility] Not macOS, returning true');
+      return true;
+    }
+    logger.info('[Accessibility] Requesting accessibility access (will prompt if not granted)...');
+    // Pass true to prompt user if not already trusted
+    const result = systemPreferences.isTrustedAccessibilityClient(true);
+    logger.info(`[Accessibility] isTrustedAccessibilityClient(true) returned: ${result}`);
+    return result;
   }
 
   @IpcMethod()
   getAccessibilityStatus() {
-    if (!macOS()) return true;
-    return systemPreferences.isTrustedAccessibilityClient(false);
+    if (!macOS()) {
+      logger.info('[Accessibility] Not macOS, returning true');
+      return true;
+    }
+    // Pass false to just check without prompting
+    const status = systemPreferences.isTrustedAccessibilityClient(false);
+    logger.info(`[Accessibility] Current status: ${status}`);
+    return status;
+  }
+
+  /**
+   * Check if Full Disk Access is granted.
+   * This works by attempting to read a protected system directory.
+   * Calling this also registers the app in the TCC database, making it appear
+   * in System Settings > Privacy & Security > Full Disk Access.
+   */
+  @IpcMethod()
+  getFullDiskAccessStatus(): boolean {
+    return checkFullDiskAccess();
+  }
+
+  /**
+   * Prompt the user with a native dialog if Full Disk Access is not granted.
+   * Based on https://github.com/inket/FullDiskAccess
+   *
+   * @param options - Dialog options
+   * @returns 'granted' if already granted, 'opened_settings' if user chose to open settings,
+   *          'skipped' if user chose to skip, 'cancelled' if dialog was cancelled
+   */
+  @IpcMethod()
+  async promptFullDiskAccessIfNotGranted(options?: {
+    message?: string;
+    openSettingsButtonText?: string;
+    skipButtonText?: string;
+    title?: string;
+  }): Promise<'cancelled' | 'granted' | 'opened_settings' | 'skipped'> {
+    // Check if already granted
+    if (checkFullDiskAccess()) {
+      logger.info('[FullDiskAccess] Already granted, skipping prompt');
+
+      return 'granted';
+    }
+
+    if (!macOS()) {
+      logger.info('[FullDiskAccess] Not macOS, returning granted');
+      return 'granted';
+    }
+
+    const mainWindow = this.app.browserManager.getMainWindow()?.browserWindow;
+
+    // Get localized strings
+    const t = this.app.i18n.ns('dialog');
+    const title = options?.title || t('fullDiskAccess.title');
+    const message = options?.message || t('fullDiskAccess.message');
+    const openSettingsButtonText =
+      options?.openSettingsButtonText || t('fullDiskAccess.openSettings');
+    const skipButtonText = options?.skipButtonText || t('fullDiskAccess.skip');
+
+    logger.info('[FullDiskAccess] Showing native prompt dialog');
+
+    const result = await dialog.showMessageBox(mainWindow!, {
+      buttons: [openSettingsButtonText, skipButtonText],
+      cancelId: 1,
+      defaultId: 0,
+      message: message,
+      title: title,
+      type: 'info',
+    });
+
+    if (result.response === 0) {
+      // User chose to open settings
+      logger.info('[FullDiskAccess] User chose to open settings');
+      await this.openFullDiskAccessSettings();
+      return 'opened_settings';
+    } else {
+      // User chose to skip or cancelled
+      logger.info('[FullDiskAccess] User chose to skip');
+      return 'skipped';
+    }
   }
 
   @IpcMethod()
@@ -75,119 +157,129 @@ export default class SystemController extends ControllerModule {
 
   @IpcMethod()
   async requestMicrophoneAccess(): Promise<boolean> {
-    if (!macOS()) return true;
-    return systemPreferences.askForMediaAccess('microphone');
+    if (!macOS()) {
+      logger.info('[Microphone] Not macOS, returning true');
+      return true;
+    }
+
+    const status = systemPreferences.getMediaAccessStatus('microphone');
+    logger.info(`[Microphone] Current status: ${status}`);
+
+    // Only ask for access if status is 'not-determined'
+    // If already denied/restricted, the system won't show a prompt
+    if (status === 'not-determined') {
+      logger.info('[Microphone] Status is not-determined, calling askForMediaAccess...');
+      try {
+        const result = await systemPreferences.askForMediaAccess('microphone');
+        logger.info(`[Microphone] askForMediaAccess result: ${result}`);
+        return result;
+      } catch (error) {
+        logger.error('[Microphone] askForMediaAccess failed:', error);
+        return false;
+      }
+    }
+
+    if (status === 'granted') {
+      logger.info('[Microphone] Already granted');
+      return true;
+    }
+
+    // If denied or restricted, open System Settings for manual enable
+    logger.info(`[Microphone] Status is ${status}, opening System Settings...`);
+    await shell.openExternal(
+      'x-apple.systempreferences:com.apple.preference.security?Privacy_Microphone',
+    );
+
+    return false;
   }
 
   @IpcMethod()
   async requestScreenAccess(): Promise<boolean> {
-    if (!macOS()) return true;
+    if (!macOS()) {
+      logger.info('[Screen] Not macOS, returning true');
+      return true;
+    }
+
+    const status = systemPreferences.getMediaAccessStatus('screen');
+    logger.info(`[Screen] Current status: ${status}`);
+
+    // If already granted, no need to do anything
+    if (status === 'granted') {
+      logger.info('[Screen] Already granted');
+      return true;
+    }
 
     // IMPORTANT:
     // On macOS, the app may NOT appear in "Screen Recording" list until it actually
     // requests the permission once (TCC needs to register this app).
-    // So we try to proactively request it first, then open System Settings for manual toggle.
-    // 1) Best-effort: try Electron runtime API if available (not typed in Electron 38).
+    // We use multiple approaches to ensure TCC registration:
+    // 1. desktopCapturer.getSources() in main process
+    // 2. getDisplayMedia() in renderer as fallback
+
+    // Approach 1: Use desktopCapturer in main process
+    logger.info('[Screen] Attempting TCC registration via desktopCapturer.getSources...');
     try {
-      const status = systemPreferences.getMediaAccessStatus('screen');
-      if (status !== 'granted') {
-        // eslint-disable-next-line @typescript-eslint/no-unsafe-call
-        await (systemPreferences as any).askForMediaAccess?.('screen');
-      }
+      // Using a reasonable thumbnail size and both types to ensure TCC registration
+      const sources = await desktopCapturer.getSources({
+        fetchWindowIcons: true,
+        thumbnailSize: { height: 144, width: 256 },
+        types: ['screen', 'window'],
+      });
+      // Access the sources to ensure the capture actually happens
+      logger.info(`[Screen] desktopCapturer.getSources returned ${sources.length} sources`);
     } catch (error) {
-      logger.warn('Failed to request screen recording access via systemPreferences', error);
+      logger.warn('[Screen] desktopCapturer.getSources failed:', error);
     }
 
-    // 2) Reliable trigger: run a one-shot getDisplayMedia in renderer to register TCC entry.
-    // This will show the OS capture picker; once the user selects/cancels, we stop tracks immediately.
+    // Approach 2: Trigger getDisplayMedia in renderer as additional attempt
+    // This shows the OS capture picker which definitely registers with TCC
+    logger.info('[Screen] Attempting TCC registration via getDisplayMedia in renderer...');
     try {
-      const status = systemPreferences.getMediaAccessStatus('screen');
-      if (status !== 'granted') {
-        const mainWindow = this.app.browserManager.getMainWindow()?.browserWindow;
-        if (mainWindow && !mainWindow.isDestroyed()) {
-          const script = `
-(() => {
-  const stop = (stream) => {
-    try { stream.getTracks().forEach((t) => t.stop()); } catch {}
-  };
-  return navigator.mediaDevices.getDisplayMedia({ video: true, audio: false })
-    .then((stream) => { stop(stream); return true; })
-    .catch(() => false);
+      const mainWindow = this.app.browserManager.getMainWindow()?.browserWindow;
+      if (mainWindow && !mainWindow.isDestroyed()) {
+        const script = `
+(async () => {
+  try {
+    const stream = await navigator.mediaDevices.getDisplayMedia({ video: true, audio: false });
+    stream.getTracks().forEach(t => t.stop());
+    return true;
+  } catch (e) {
+    console.error('[Screen] getDisplayMedia error:', e);
+    return false;
+  }
 })()
-          `.trim();
+        `.trim();
 
-          await mainWindow.webContents.executeJavaScript(script, true);
-        }
+        const result = await mainWindow.webContents.executeJavaScript(script, true);
+        logger.info(`[Screen] getDisplayMedia result: ${result}`);
+      } else {
+        logger.warn('[Screen] Main window not available for getDisplayMedia');
       }
     } catch (error) {
-      logger.warn('Failed to request screen recording access via getDisplayMedia', error);
+      logger.warn('[Screen] getDisplayMedia failed:', error);
     }
 
+    // Check status after attempts
+    const newStatus = systemPreferences.getMediaAccessStatus('screen');
+    logger.info(`[Screen] Status after TCC attempts: ${newStatus}`);
+
+    // Open System Settings for user to manually enable screen recording
+    logger.info('[Screen] Opening System Settings for Screen Recording...');
     await shell.openExternal(
       'x-apple.systempreferences:com.apple.preference.security?Privacy_ScreenCapture',
     );
 
-    return systemPreferences.getMediaAccessStatus('screen') === 'granted';
-  }
-
-  @IpcMethod()
-  openFullDiskAccessSettings(payload?: { autoAdd?: boolean }) {
-    if (!macOS()) return;
-    const { autoAdd = false } = payload || {};
-
-    // NOTE:
-    // - Full Disk Access cannot be requested programmatically like microphone/screen.
-    // - On macOS 13+ (Ventura), System Preferences is replaced by System Settings,
-    //   and deep links may differ. We try multiple known schemes for compatibility.
-    const candidates = [
-      // macOS 13+ (System Settings)
-      'com.apple.settings:Privacy&path=FullDiskAccess',
-      // Older macOS (System Preferences)
-      'x-apple.systempreferences:com.apple.preference.security?Privacy_AllFiles',
-    ];
-    if (autoAdd) this.tryAutoAddFullDiskAccess();
-
-    (async () => {
-      for (const url of candidates) {
-        try {
-          await shell.openExternal(url);
-          return;
-        } catch (error) {
-          logger.warn(`Failed to open Full Disk Access settings via ${url}`, error);
-        }
-      }
-    })();
+    const finalStatus = systemPreferences.getMediaAccessStatus('screen');
+    logger.info(`[Screen] Final status: ${finalStatus}`);
+    return finalStatus === 'granted';
   }
 
   /**
-   * Best-effort UI automation to add this app into Full Disk Access list.
-   *
-   * Limitations:
-   * - This uses AppleScript UI scripting (System Events) and may require the user to grant
-   *   additional "Automation" permission (to control System Settings).
-   * - UI structure differs across macOS versions/languages; we fall back silently.
+   * Open Full Disk Access settings page
    */
-  private tryAutoAddFullDiskAccess() {
-    if (!macOS()) return;
-
-    const exePath = app.getPath('exe');
-    // /Applications/App.app/Contents/MacOS/App -> /Applications/App.app
-    const appBundlePath = path.resolve(path.dirname(exePath), '..', '..');
-
-    // Keep the script minimal and resilient; failure should not break onboarding flow.
-    const script = fullDiskAccessAutoAddScript.trim();
-
-    try {
-      const child = spawn('osascript', ['-e', script, appBundlePath], { env: process.env });
-      child.on('error', (error) => {
-        logger.warn('Full Disk Access auto-add (osascript) failed to start', error);
-      });
-      child.on('exit', (code) => {
-        logger.debug('Full Disk Access auto-add (osascript) exited', { code });
-      });
-    } catch (error) {
-      logger.warn('Full Disk Access auto-add failed', error);
-    }
+  @IpcMethod()
+  async openFullDiskAccessSettings() {
+    return openFullDiskAccessSettings();
   }
 
   @IpcMethod()