feat(electron): meeting recording permissions checks (#11505)

fix AF-2472, AF-2446

![image.png](https://graphite-user-uploaded-assets-prod.s3.amazonaws.com/T2klNLEk0wxLh4NRDzhk/536f8412-cbf1-47ad-a8a0-0b86e97521d7.png)

![image.png](https://graphite-user-uploaded-assets-prod.s3.amazonaws.com/T2klNLEk0wxLh4NRDzhk/b49a64cc-d288-49c9-8382-e4e8b5806850.png)

packages/frontend/apps/electron/src/main/recording/feature.ts

@@ -473,7 +473,7 @@ function setupMediaListeners() {
 
 // will be called when the app is ready or when the user has enabled the recording feature in settings
 export function setupRecordingFeature() {
-  if (!MeetingsSettingsState.value.enabled || !checkRecordingAvailable()) {
+  if (!MeetingsSettingsState.value.enabled || !checkCanRecordMeeting()) {
     return;
   }
 
@@ -767,9 +767,24 @@ export const checkRecordingAvailable = () => {
   return (version.major === 14 && version.minor >= 2) || version.major > 14;
 };
 
-export const checkScreenRecordingPermission = () => {
+export const checkMeetingPermissions = () => {
   if (!isMacOS()) {
-    return false;
+    return undefined;
   }
-  return systemPreferences.getMediaAccessStatus('screen') === 'granted';
+  const mediaTypes = ['screen', 'microphone'] as const;
+  return Object.fromEntries(
+    mediaTypes.map(mediaType => [
+      mediaType,
+      systemPreferences.getMediaAccessStatus(mediaType) === 'granted',
+    ])
+  ) as Record<(typeof mediaTypes)[number], boolean>;
+};
+
+export const checkCanRecordMeeting = () => {
+  const features = checkMeetingPermissions();
+  return (
+    checkRecordingAvailable() &&
+    features &&
+    Object.values(features).every(feature => feature)
+  );
 };

packages/frontend/apps/electron/src/main/recording/index.ts

@@ -9,8 +9,8 @@ import { shell } from 'electron';
 import { isMacOS } from '../../shared/utils';
 import type { NamespaceHandlers } from '../type';
 import {
+  checkMeetingPermissions,
   checkRecordingAvailable,
-  checkScreenRecordingPermission,
   disableRecordingFeature,
   getRawAudioBuffers,
   getRecording,
@@ -73,13 +73,17 @@ export const recordingHandlers = {
   disableRecordingFeature: async () => {
     return disableRecordingFeature();
   },
-  checkScreenRecordingPermission: async () => {
-    return checkScreenRecordingPermission();
+  checkMeetingPermissions: async () => {
+    return checkMeetingPermissions();
   },
-  showScreenRecordingPermissionSetting: async () => {
+  showRecordingPermissionSetting: async (_, type: 'screen' | 'microphone') => {
+    const urlMap = {
+      screen: 'Privacy_ScreenCapture',
+      microphone: 'Privacy_Microphone',
+    };
     if (isMacOS()) {
       return shell.openExternal(
-        'x-apple.systempreferences:com.apple.preference.security?Privacy_ScreenCapture'
+        `x-apple.systempreferences:com.apple.preference.security?${urlMap[type]}`
       );
     }
     // this only available on MacOS

packages/frontend/apps/electron/src/main/tray/index.ts

@@ -15,8 +15,8 @@ import { beforeAppQuit } from '../cleanup';
 import { logger } from '../logger';
 import {
   appGroups$,
+  checkCanRecordMeeting,
   checkRecordingAvailable,
-  checkScreenRecordingPermission,
   MeetingsSettingsState,
   recordingStatus$,
   startRecording,
@@ -89,7 +89,7 @@ class TrayState implements Disposable {
   // tray's icon
   icon: NativeImage = nativeImage
     .createFromPath(icons.tray)
-    .resize({ width: 16, height: 16 });
+    .resize({ width: 18, height: 18 });
 
   // tray's tooltip
   tooltip: string = 'AFFiNE';
@@ -142,10 +142,17 @@ class TrayState implements Disposable {
 
     const getConfig = () => {
       const items: TrayMenuConfig = [];
-      if (
-        checkScreenRecordingPermission() &&
-        MeetingsSettingsState.value.enabled
-      ) {
+      if (!MeetingsSettingsState.value.enabled) {
+        items.push({
+          label: 'Meetings are disabled',
+          disabled: true,
+        });
+      } else if (!checkCanRecordMeeting()) {
+        items.push({
+          label: 'Required permissions not granted',
+          disabled: true,
+        });
+      } else {
         const appGroups = appGroups$.value;
         const runningAppGroups = appGroups.filter(
           appGroup => appGroup.isRunning