Sravan
e562099344
Fixes the core "viewer can't control the sharer even on desktop" gap. Three root
causes addressed:
- share.html DISCARDED every input-channel message (onmessage=()=>{}). It now
parses the viewer's mouse/keyboard events and forwards them to the desktop shell.
- The main desktop app had NO OS injector (it lived only in the separate agent).
Ported the nut-js injector (agent/input/inject.js) into desktop/input, wired an
inject IPC + injectInput bridge, HARD-gated behind a consent flag (rcArmed).
- /share runs in an iframe (no direct bridge access) → it postMessages input to
the top frame (home.html), which relays to the native bridge.
Consent + safety: the sharer sees an Allow/Deny prompt the first time the agent
interacts; while active a persistent "your screen is being controlled — Stop"
banner; instant revoke; auto-release on session end/teardown. Browser sharers stay
view-only (no OS injection possible). nut-js is an optionalDependency (N-API, ABI-
stable across Electron) — degrades to no-op if the native module is unavailable.
Windows-first; maps to the primary display.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
45 lines
3.3 KiB
JavaScript
45 lines
3.3 KiB
JavaScript
// Minimal, safe bridge into the web UI. Runs with contextIsolation, so it only exposes a
|
|
// frozen marker the web app can feature-detect against (e.g. to hide the PWA install prompt
|
|
// or prefer native push). No Node APIs are exposed to page JS.
|
|
const { contextBridge, ipcRenderer } = require('electron');
|
|
|
|
// Pull the stable install id + version/os from main (synchronous, one-time at preload).
|
|
let info = { installId: '', appVersion: '', os: '' };
|
|
try { info = ipcRenderer.sendSync('get-install-info') || info; } catch (_) {}
|
|
|
|
contextBridge.exposeInMainWorld('__NATIVE__', 'desktop');
|
|
contextBridge.exposeInMainWorld('bizConnectNative', Object.freeze({
|
|
platform: 'desktop',
|
|
version: info.appVersion || '0.1.0',
|
|
installId: info.installId || '',
|
|
os: info.os || '',
|
|
// Bring the app window to the foreground (e.g. when a notification is clicked) — the web
|
|
// Notification's window.focus() can't raise an Electron window; the main process must.
|
|
focusApp: () => ipcRenderer.send('focus-window'),
|
|
// Show the unread-chat count as a badge on the taskbar icon. count=number of chats with
|
|
// unread; dataUrl=a small PNG badge the renderer drew (null to clear).
|
|
setUnread: (count, dataUrl) => ipcRenderer.send('set-unread', { count, dataUrl }),
|
|
// Native Windows toast with an inline reply box. Resolves to {text} (replied), {open} (clicked)
|
|
// or null. Lets the user reply to a chat straight from the notification.
|
|
replyNotify: (payload) => ipcRenderer.invoke('reply-notification', payload),
|
|
// Pre-warm the notification DP cache with contact photo URLs (called after chats load) so the first
|
|
// toast from anyone already has their photo — no per-notification download lag.
|
|
precacheAvatars: (urls) => { try { return ipcRenderer.invoke('precache-avatars', urls); } catch (_) { return Promise.resolve(false); } },
|
|
// Ask the shell to show native spelling suggestions for the word at page coords (x,y) — used to bring
|
|
// up corrections on a LEFT click in the message box (not just right-click).
|
|
spellSuggestAt: (x, y) => { try { ipcRenderer.send('spell-suggest', { x, y }); } catch (_) {} },
|
|
// Remote control (screen the local user is sharing): whether OS injection is possible on this machine,
|
|
// arm/disarm the consent gate, and forward a viewer's input event for injection. Injection only happens
|
|
// while armed (the user granted control) — see main.js rcArmed.
|
|
rcAvailable: () => { try { return !!ipcRenderer.sendSync('rc-available'); } catch (_) { return false; } },
|
|
rcArm: (on) => { try { ipcRenderer.send('rc-arm', !!on); } catch (_) {} },
|
|
rcInput: (evt) => { try { ipcRenderer.send('rc-input', evt); } catch (_) {} },
|
|
// Manual "Check for updates" from Settings. Resolves {status:'available'|'current'|'dev'|'error', version?}.
|
|
// On 'available' the shell downloads in the background and prompts to restart when ready.
|
|
checkForUpdates: () => ipcRenderer.invoke('check-updates'),
|
|
// #3: subscribe to auto-update lifecycle events so the UI can show download progress + "ready".
|
|
// cb receives {phase:'checking'|'available'|'downloading'|'ready'|'current'|'error', percent?, version?}.
|
|
onUpdateEvent: (cb) => { try { ipcRenderer.on('update-event', (_e, data) => { try { cb(data); } catch (_) {} }); } catch (_) {} },
|
|
restartToUpdate: () => ipcRenderer.invoke('restart-to-update'),
|
|
}));
|