Permission Warnings

function getPermissionWarnings(
  manifestPermissions: string[],
  hostPermissions?: string[]
): string[]

import { getPermissionWarnings } from "@/modules/extensions/permission-warnings";

// Extension with common permissions
const manifestPermissions = ["tabs", "storage", "history"];
const warnings = getPermissionWarnings(manifestPermissions);

console.log(warnings);
// Output:
// [
//   "Read your Browse history"
// ]

const manifestPermissions = ["tabs", "storage"];
const hostPermissions = ["<all_urls>"];

const warnings = getPermissionWarnings(
  manifestPermissions,
  hostPermissions
);

console.log(warnings);
// Output:
// [
//   "Read and change all your data on all websites"
// ]

const manifestPerms = ["tabs", "activeTab", "scripting"];
const hostPerms = [
  "https://www.google.com/*",
  "https://developer.chrome.com/*"
];

const warnings = getPermissionWarnings(manifestPerms, hostPerms);

console.log(warnings);
// Output:
// [
//   "Read your Browse history",
//   "Access your data on specific sites"
// ]

import { getPermissionWarnings } from "@/modules/extensions/permission-warnings";
import { dialog } from "electron";

await installChromeWebStore({
  beforeInstall: async (details) => {
    const manifest = details.manifest;
    
    // Get permission warnings
    const warnings = getPermissionWarnings(
      manifest.permissions || [],
      manifest.host_permissions || []
    );
    
    // Build permission message
    let message = `Add "${details.localizedName}"?`;
    
    if (warnings.length > 0) {
      message += "\n\nThis extension can:\n";
      warnings.forEach(warning => {
        message += `• ${warning}\n`;
      });
    }
    
    // Show dialog
    const result = await dialog.showMessageBox({
      title: "Install Extension",
      message,
      icon: details.icon,
      buttons: ["Cancel", "Add Extension"]
    });
    
    return { action: result.response === 0 ? "deny" : "allow" };
  }
});

// These permissions...
const perms = ["tabs", "webNavigation", "<all_urls>"];

// Generate only ONE warning because <all_urls> absorbs the others:
const warnings = getPermissionWarnings(perms);
// ["Read and change all your data on all websites"]

// Instead of three separate warnings

// Extension with content scripts on specific sites
const manifest = {
  permissions: ["activeTab", "scripting"],
  host_permissions: [
    "https://github.com/*",
    "https://gitlab.com/*"
  ]
};

const warnings = getPermissionWarnings(
  manifest.permissions,
  manifest.host_permissions
);
// ["Access your data on specific sites"]

const permissions = [
  "tabs",
  "bookmarks",
  "history",
  "clipboardRead",
  "clipboardWrite",
  "notifications"
];

const warnings = getPermissionWarnings(permissions);
console.log(warnings);
// [
//   "Read and change your Browse history on all your signed-in devices",
//   "Read and change your bookmarks",
//   "Read and modify data you copy and paste",
//   "Display notifications"
// ]

const permissions = ["debugger", "tabs", "<all_urls>"];
const warnings = getPermissionWarnings(permissions);

console.log(warnings);
// ["Debug extensions and pages"]
// Note: This is a very high-privilege permission

const permissionMapping: Record<string, string> = {
  kDebugger: "debugger",
  kTab: "tabs",
  kHistory: "history",
  kBookmark: "bookmarks",
  // ... many more
};

const permissionMessages: Record<string, string> = {
  IDS_EXTENSION_PROMPT_WARNING_HISTORY: 
    "Read and change your Browse history",
  IDS_EXTENSION_PROMPT_WARNING_TABS: 
    "Read your Browse history",
  IDS_EXTENSION_PROMPT_WARNING_BOOKMARKS: 
    "Read and change your bookmarks",
  // ... hundreds more
};

function isSpecificHostPermission(permission: string): boolean {
  return permission.includes("://") || permission.startsWith("*");
}

// Examples:
isSpecificHostPermission("<all_urls>")                  // true
isSpecificHostPermission("https://*.google.com/*")      // true
isSpecificHostPermission("*://example.com/*")           // true
isSpecificHostPermission("tabs")                        // false

const chromeOSPermissions = [
  "chromeos.telemetry",
  "chromeos.diagnostics",
  "chromeos.events",
  "enterprise.platformKeys",
  "enterprise.deviceAttributes"
];

const warnings = getPermissionWarnings(chromeOSPermissions);
// These will show appropriate warnings even on non-ChromeOS platforms

// Always show permission warnings before installation
import { getPermissionWarnings } from "@/modules/extensions/permission-warnings";

async function showInstallDialog(manifest, extensionName) {
  const warnings = getPermissionWarnings(
    manifest.permissions || [],
    manifest.host_permissions || []
  );
  
  if (warnings.length === 0) {
    return await simpleConfirmDialog(extensionName);
  }
  
  return await detailedPermissionDialog(extensionName, warnings);
}

import { getPermissionWarnings } from "@/modules/extensions/permission-warnings";

// Test different permission combinations
const testCases = [
  {
    name: "Minimal extension",
    perms: ["storage"],
    expected: [] // storage doesn't generate warnings
  },
  {
    name: "History access",
    perms: ["history"],
    expected: ["Read and change your Browse history on all your signed-in devices"]
  },
  {
    name: "All sites",
    perms: [],
    hosts: ["<all_urls>"],
    expected: ["Read and change all your data on all websites"]
  }
];

testCases.forEach(({ name, perms, hosts, expected }) => {
  const warnings = getPermissionWarnings(perms, hosts);
  console.log(`${name}:`, warnings);
  console.assert(
    JSON.stringify(warnings) === JSON.stringify(expected),
    `Expected ${expected} but got ${warnings}`
  );
});