feat(electron): grant microphone and clipboard permissions (#40)

* feat(electron): grant microphone and clipboard permissions

Add permission handler for media (microphone) and clipboard-read access.
Add audio-input entitlement for macOS builds.

* fix(electron): scope media permission to audio-only, add NSMicrophoneUsageDescription

- Check details.mediaTypes to grant only audio (microphone), deny video (camera)
- Add NSMicrophoneUsageDescription for macOS hardened runtime compatibility

---------

Co-authored-by: maskar <Maskar@users.noreply.github.com>
Co-authored-by: Johannes Millan <johannes.millan@gmail.com>

Author: maskar

build/entitlements.mac.plist

@@ -8,5 +8,7 @@
     <true/>
     <key>com.apple.security.cs.disable-library-validation</key>
     <true/>
+    <key>com.apple.security.device.audio-input</key>
+    <true/>
 </dict>
 </plist>

electron/main.ts

@@ -1,4 +1,4 @@
-import { app, BrowserWindow, shell } from 'electron';
+import { app, BrowserWindow, session, shell } from 'electron';
 import path from 'path';
 import fs from 'fs';
 import { fileURLToPath } from 'url';
@@ -138,7 +138,23 @@ function createWindow() {
   });
 }
 
-app.whenReady().then(createWindow);
+app.whenReady().then(() => {
+  // Grant microphone and clipboard access (deny camera/video)
+  session.defaultSession.setPermissionRequestHandler(
+    (_webContents, permission, callback, details) => {
+      if (permission === 'clipboard-read') {
+        return callback(true);
+      }
+      if (permission === 'media') {
+        const types = (details as { mediaTypes?: string[] }).mediaTypes ?? [];
+        return callback(types.every((t) => t === 'audio'));
+      }
+      callback(false);
+    },
+  );
+
+  createWindow();
+});
 
 app.on('before-quit', () => {
   killAllAgents();

package.json

@@ -113,6 +113,9 @@
       "target": "dmg",
       "category": "public.app-category.developer-tools",
       "hardenedRuntime": true,
+      "extendInfo": {
+        "NSMicrophoneUsageDescription": "Parallel Code needs microphone access for voice input in terminal sessions."
+      },
       "gatekeeperAssess": false,
       "notarize": true,
       "x64ArchFiles": "Contents/Resources/app.asar.unpacked/node_modules/node-pty/prebuilds/**",