feat(clipboard-manager): add support for writing secrets

add `write_secret` command that writes a text into the clipboard and
hints clipboard managers to not save the text.

uses `arboard`'s `SetExtLinux`, `SetExtWindows`, and `SetExtApple`
extensions for each platform.

Author: umtdg

Cargo.lock

@@ -11,6 +11,7 @@
     "global-shortcut:allow-register",
     "global-shortcut:allow-unregister-all",
     { "identifier": "fs:allow-watch", "allow": ["*", "**/*"] },
-    "fs:allow-unwatch"
+    "fs:allow-unwatch",
+    "clipboard-manager:allow-write-secret"
   ]
 }

examples/api/src-tauri/capabilities/desktop.json

@@ -36,6 +36,13 @@
     }
   }
 
+  function writeSecret() {
+    clipboard.writeSecret(text).then(() => {
+      onMessage("Wrote secret to the clipboard")
+    })
+    .catch(onMessage)
+  }
+
   async function read() {
     try {
       const image = await clipboard.readImage()
@@ -64,6 +71,7 @@
     bind:value={text}
   />
   <button class="btn" type="button" on:click={writeText}>Write</button>
+  <button class="btn" type="button" on:click={writeSecret}>Write Secret</button>
   <button class="btn" type="button" on:click={writeImage}>Pick Image</button>
   <button class="btn" type="button" on:click={read}>Read</button>
 </div>

examples/api/src/views/Clipboard.svelte

@@ -9,6 +9,7 @@ const COMMANDS: &[&str] = &[
     "read_image",
     "write_html",
     "clear",
+    "write_secret",
 ];
 
 fn main() {

plugins/clipboard-manager/api-iife.js

@@ -148,4 +148,22 @@ async function clear(): Promise<void> {
   await invoke('plugin:clipboard-manager|clear')
 }
 
-export { writeText, readText, writeHtml, clear, readImage, writeImage }
+/**
+ * Writes text to clipboard and sets hints for clipboard managers to exclude it
+ * from history
+ *
+ * @returns A promise indicating the success or failure of the operation.
+ */
+async function writeSecret(text: string): Promise<void> {
+  await invoke('plugin:clipboard-manager|write_secret', { text })
+}
+
+export {
+  writeText,
+  readText,
+  writeHtml,
+  clear,
+  readImage,
+  writeImage,
+  writeSecret
+}

plugins/clipboard-manager/build.rs

@@ -0,0 +1,13 @@
+# Automatically generated - DO NOT EDIT!
+
+"$schema" = "../../schemas/schema.json"
+
+[[permission]]
+identifier = "allow-write-secret"
+description = "Enables the write_secret command without any pre-configured scope."
+commands.allow = ["write_secret"]
+
+[[permission]]
+identifier = "deny-write-secret"
+description = "Denies the write_secret command without any pre-configured scope."
+commands.deny = ["write_secret"]

plugins/clipboard-manager/guest-js/index.ts

@@ -148,6 +148,32 @@ Denies the write_image command without any pre-configured scope.
 <tr>
 <td>
 
+`clipboard-manager:allow-write-secret`
+
+</td>
+<td>
+
+Enables the write_secret command without any pre-configured scope.
+
+</td>
+</tr>
+
+<tr>
+<td>
+
+`clipboard-manager:deny-write-secret`
+
+</td>
+<td>
+
+Denies the write_secret command without any pre-configured scope.
+
+</td>
+</tr>
+
+<tr>
+<td>
+
 `clipboard-manager:allow-write-text`
 
 </td>

plugins/clipboard-manager/permissions/autogenerated/commands/write_secret.toml

@@ -354,6 +354,18 @@
           "const": "deny-write-image",
           "markdownDescription": "Denies the write_image command without any pre-configured scope."
         },
+        {
+          "description": "Enables the write_secret command without any pre-configured scope.",
+          "type": "string",
+          "const": "allow-write-secret",
+          "markdownDescription": "Enables the write_secret command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the write_secret command without any pre-configured scope.",
+          "type": "string",
+          "const": "deny-write-secret",
+          "markdownDescription": "Denies the write_secret command without any pre-configured scope."
+        },
         {
           "description": "Enables the write_text command without any pre-configured scope.",
           "type": "string",

plugins/clipboard-manager/permissions/autogenerated/reference.md

@@ -78,3 +78,13 @@ pub(crate) async fn clear<R: Runtime>(
 ) -> Result<()> {
     clipboard.clear()
 }
+
+#[command]
+#[cfg(desktop)]
+pub(crate) async fn write_secret<R: Runtime>(
+    _app: AppHandle<R>,
+    clipboard: State<'_, Clipboard<R>>,
+    text: &str,
+) -> Result<()> {
+    clipboard.write_secret(text)
+}