feat(webview): in-page screen-share picker for getDisplayMedia (#713)

app/src-tauri/Cargo.toml

@@ -69,6 +69,7 @@ semver = "1"
 
 log = "0.4"
 env_logger = "0.11"
+base64 = "0.22"
 
 # Used by the imessage_scanner module.
 anyhow = "1.0"

app/src-tauri/permissions/allow-core-process.toml

@@ -20,5 +20,8 @@ allow = [
     "webview_account_show",
     "webview_recipe_event",
     "activate_main_window",
+    "screen_share_begin_session",
+    "screen_share_thumbnail",
+    "screen_share_finalize_session",
 ]
 deny = []

app/src-tauri/permissions/allow-webview-recipe.toml

@@ -1,7 +1,12 @@
 [[permission]]
 identifier = "allow-webview-recipe"
-description = "Allow injected per-provider recipe code (running inside the third-party site's origin) to invoke the recipe ingest command back to Rust."
+description = "Allow injected per-provider recipe code (running inside the third-party site's origin) to invoke the recipe ingest command back to Rust. Also includes the session-gated screen-share commands (#713 / #812) so the in-page getDisplayMedia shim can open a short-lived enumeration session after a real user gesture. The session gate prevents drive-by window-title / thumbnail exfiltration by third-party scripts running in the same origin."
 
 [permission.commands]
-allow = ["webview_recipe_event"]
+allow = [
+    "webview_recipe_event",
+    "screen_share_begin_session",
+    "screen_share_thumbnail",
+    "screen_share_finalize_session",
+]
 deny = []

app/src-tauri/src/lib.rs

@@ -12,6 +12,8 @@ mod gmail;
 mod imessage_scanner;
 mod notification_settings;
 #[cfg(feature = "cef")]
+mod screen_capture;
+#[cfg(feature = "cef")]
 mod slack_scanner;
 #[cfg(feature = "cef")]
 mod telegram_scanner;
@@ -631,6 +633,8 @@ pub fn run() {
     let builder = builder.manage(discord_scanner::ScannerRegistry::new());
     #[cfg(feature = "cef")]
     let builder = builder.manage(telegram_scanner::ScannerRegistry::new());
+    #[cfg(feature = "cef")]
+    let builder = builder.manage(screen_capture::ScreenShareState::new());
     builder
         .setup(move |app| {
             #[cfg(any(windows, target_os = "linux"))]
@@ -1020,6 +1024,12 @@ pub fn run() {
             webview_accounts::webview_set_focused_account,
             notification_settings::notification_settings_get,
             notification_settings::notification_settings_set,
+            #[cfg(feature = "cef")]
+            screen_capture::screen_share_begin_session,
+            #[cfg(feature = "cef")]
+            screen_capture::screen_share_thumbnail,
+            #[cfg(feature = "cef")]
+            screen_capture::screen_share_finalize_session,
             gmail::gmail_list_labels,
             gmail::gmail_list_messages,
             gmail::gmail_search,