feat: add External Storage Device permission support

Add support for checking and requesting external storage device
authorization via AVExternalStorageDevice, available since macOS 14.0.

New API:
- getAuthStatus('external-storage') - check current authorization
- askForExternalStorageAccess() - request authorization

Author: codebytere

README.md

@@ -14,6 +14,7 @@
   - [`permissions.askForCalendarAccess([accessLevel])`](#permissionsaskforcalendaraccessaccesslevel)
   - [`permissions.askForSpeechRecognitionAccess()`](#permissionsaskforspeechrecognitionaccess)
   - [`permissions.askForRemindersAccess()`](#permissionsaskforremindersaccess)
+  - [`permissions.askForExternalStorageAccess()`](#permissionsaskforexternalstorageaccess)
   - [`permissions.askForFocusStatusAccess()`](#permissionsaskforfocusstatusaccess)
   - [`permissions.askForFoldersAccess(folder)`](#permissionsaskforfoldersaccessfolder)
   - [`permissions.askForFullDiskAccess()`](#permissionsaskforfulldiskaccess)
@@ -39,6 +40,7 @@ This native Node.js module allows you to manage an app's access to:
 - Calendar
 - Camera
 - Contacts
+- External Storage Devices
 - Focus Status
 - Full Disk Access
 - Input Monitoring
@@ -62,7 +64,7 @@ If you're using macOS 12.3 or newer, you'll need to ensure you have Python insta
 
 ### `permissions.getAuthStatus(type)`
 
-- `type` String - The type of system component to which you are requesting access. Can be one of `accessibility`, `bluetooth`, `calendar`, `camera`, `contacts`, `focus-status`, `full-disk-access`, `input-monitoring`, `location`, `microphone`, `notifications`, `photos`, `reminders`, `screen`, or `speech-recognition`.
+- `type` String - The type of system component to which you are requesting access. Can be one of `accessibility`, `bluetooth`, `calendar`, `camera`, `contacts`, `external-storage`, `focus-status`, `full-disk-access`, `input-monitoring`, `location`, `microphone`, `notifications`, `photos`, `reminders`, `screen`, or `speech-recognition`.
 
 Returns `String` - Can be one of `not determined`, `denied`, `authorized`, `limited`, `provisional`, or `restricted`.
 
@@ -86,6 +88,7 @@ const types = [
   'calendar',
   'camera',
   'contacts',
+  'external-storage',
   'focus-status',
   'full-disk-access',
   'input-monitoring',
@@ -240,6 +243,27 @@ requesting Reminders access.
 <string>Your reason for wanting access to read and write Reminders data.</string>
 ```
 
+### `permissions.askForExternalStorageAccess()`
+
+Returns `Promise<String>` - Whether or not the request succeeded or failed; can be `authorized`, `denied`, or `not determined`.
+
+Checks the authorization status for capturing onto an external storage device. If the status check returns:
+
+- `not determined` - The external storage access authorization will prompt the user to authorize or deny. The Promise is resolved after the user selection with either `authorized` or `denied`.
+- `denied` - The Promise is resolved as `denied`.
+
+**Note:** Requires macOS 14.0 or higher. On older versions, the Promise resolves as `not determined`.
+
+Example:
+
+```js
+const { askForExternalStorageAccess } = require('node-mac-permissions')
+
+askForExternalStorageAccess().then(status => {
+  console.log(`Access to External Storage is ${status}`)
+})
+```
+
 ### `permissions.askForFocusStatusAccess()`
 
 Returns `Promise<String>` - Whether or not the request succeeded or failed; can be `authorized`, `denied`, `restricted`, or `not determined`.

index.d.ts

@@ -6,6 +6,7 @@ export function askForAccessibilityAccess(): undefined
 export function askForCalendarAccess(accessType?: 'write-only' | 'full'): Promise<Omit<PermissionType, 'restricted'>>
 export function askForCameraAccess(): Promise<PermissionType>
 export function askForContactsAccess(): Promise<Omit<PermissionType, 'restricted'>>
+export function askForExternalStorageAccess(): Promise<PermissionType>
 export function askForFocusStatusAccess(): Promise<PermissionType>
 export function askForFoldersAccess(): Promise<Omit<PermissionType, 'restricted'>>
 export function askForFullDiskAccess(): undefined
@@ -24,6 +25,7 @@ export type AuthType =
   | 'calendar'
   | 'camera'
   | 'contacts'
+  | 'external-storage'
   | 'focus-status'
   | 'full-disk-access'
   | 'input-monitoring'

index.js

@@ -8,6 +8,7 @@ function getAuthStatus(type) {
     'calendar',
     'camera',
     'contacts',
+    'external-storage',
     'focus-status',
     'full-disk-access',
     'input-monitoring',
@@ -98,6 +99,7 @@ module.exports = {
   askForLocationAccess: askForLocationAccess,
   askForCameraAccess: permissions.askForCameraAccess,
   askForContactsAccess: permissions.askForContactsAccess,
+  askForExternalStorageAccess: permissions.askForExternalStorageAccess,
   askForFocusStatusAccess: permissions.askForFocusStatusAccess,
   askForFoldersAccess,
   askForFullDiskAccess: permissions.askForFullDiskAccess,

permissions.mm

@@ -422,6 +422,25 @@ bool HasOpenSystemPreferencesDialog() {
   return kNotDetermined;
 }
 
+// Returns a status indicating whether the user has authorized External Storage
+// Device access.
+std::string ExternalStorageAuthStatus() {
+  if (@available(macOS 14.0, *)) {
+    switch ([AVExternalStorageDevice authorizationStatus]) {
+    case AVAuthorizationStatusAuthorized:
+      return kAuthorized;
+    case AVAuthorizationStatusDenied:
+      return kDenied;
+    case AVAuthorizationStatusRestricted:
+      return kRestricted;
+    default:
+      return kNotDetermined;
+    }
+  }
+
+  return kNotDetermined;
+}
+
 /***** EXPORTED FUNCTIONS *****/
 
 // Returns the user's access consent status as a string.
@@ -464,6 +483,8 @@ bool HasOpenSystemPreferencesDialog() {
     auth_status = NotificationAuthStatus();
   } else if (type == "focus-status") {
     auth_status = FocusStatusAuthStatus();
+  } else if (type == "external-storage") {
+    auth_status = ExternalStorageAuthStatus();
   }
 
   return Napi::Value::From(env, auth_status);
@@ -837,6 +858,39 @@ void AskForAccessibilityAccess(const Napi::CallbackInfo &info) {
   }
 }
 
+// Request External Storage Device access.
+Napi::Promise AskForExternalStorageAccess(const Napi::CallbackInfo &info) {
+  Napi::Env env = info.Env();
+  Napi::Promise::Deferred deferred = Napi::Promise::Deferred::New(env);
+
+  if (@available(macOS 14.0, *)) {
+    Napi::ThreadSafeFunction tsfn = Napi::ThreadSafeFunction::New(
+        env, Napi::Function::New(env, NoOp), "externalStorageCallback", 0, 1);
+
+    auto callback = [=](Napi::Env env, Napi::Function js_cb,
+                        const char *status) {
+      deferred.Resolve(Napi::String::New(env, status));
+    };
+
+    std::string auth_status = ExternalStorageAuthStatus();
+
+    if (auth_status == kNotDetermined) {
+      [AVExternalStorageDevice
+          requestAccessWithCompletionHandler:^(BOOL granted) {
+            tsfn.BlockingCall(granted ? "authorized" : "denied", callback);
+            tsfn.Release();
+          }];
+    } else {
+      tsfn.Release();
+      deferred.Resolve(Napi::String::New(env, auth_status));
+    }
+  } else {
+    deferred.Resolve(Napi::String::New(env, kNotDetermined));
+  }
+
+  return deferred.Promise();
+}
+
 // Request Focus Status access.
 Napi::Promise AskForFocusStatusAccess(const Napi::CallbackInfo &info) {
   Napi::Env env = info.Env();
@@ -898,6 +952,8 @@ void AskForAccessibilityAccess(const Napi::CallbackInfo &info) {
               Napi::Function::New(env, AskForCameraAccess));
   exports.Set(Napi::String::New(env, "askForContactsAccess"),
               Napi::Function::New(env, AskForContactsAccess));
+  exports.Set(Napi::String::New(env, "askForExternalStorageAccess"),
+              Napi::Function::New(env, AskForExternalStorageAccess));
   exports.Set(Napi::String::New(env, "askForFocusStatusAccess"),
               Napi::Function::New(env, AskForFocusStatusAccess));
   exports.Set(Napi::String::New(env, "askForFoldersAccess"),

test/module.spec.js

@@ -24,6 +24,7 @@ describe('node-mac-permissions', () => {
         'calendar',
         'camera',
         'contacts',
+        'external-storage',
         'focus-status',
         'full-disk-access',
         'input-monitoring',