feat(desktop): enable meeting microphone access (MEET-8)

[eliotlim]

Problem

The desktop app (Tauri/WKWebView) had no microphone entitlement, no usage description, and no documented permission path — meeting recording (MEET-5 / #369) was web-only. Board: MEET-8.

Solution

com.apple.security.device.audio-input entitlement; new src-tauri/Info.plist with an honest NSMicrophoneUsageDescription (merged via Tauri 2's bare-Info.plist convention — verified against the locked tauri-codegen/bundler source); module docs recording Wry 0.55.1's media-capture delegate behavior (retained, comment-only Rust change); IPC transport test proving two 360 KB chunks (webm+mp4) round-trip byte-for-byte through desktop base64 IPC within the server's exact cap formula. Stacked on #369 — merge after it. No deps, no signing config touched.

Key files: packages/app/src-tauri/{entitlements.plist,Info.plist,src/main.rs}, packages/app/src/data/microphoneTransport.test.ts, packages/app/README.md.

Before / After

Behavior	Before	After
getUserMedia in desktop app	fails (no entitlement/usage string; hardened app would crash on prompt)	OS TCC prompt → recording works (signed build) — manual steps in README
Audio chunk over desktop IPC	untested	byte-for-byte round-trip test vs the server cap formula
Denied permission	n/a	MEET-5's graceful copy (existing automated tests)

No visual change (native plumbing).

Test procedure

pnpm verify green; cargo check --locked green; pnpm --filter @book.dev/app test. Live: README §Manual microphone verification (build, launch, record >45s two chunks, reload persistence, TCC deny/recover).

Operational notes

Owner acceptance required on a SIGNED build (signing key unavailable to agents, config untouched): run the README manual steps; step 2's OS prompt implicitly proves the Info.plist merged (hardened runtime hard-crashes without the purpose string — or plutil -p .../Contents/Info.plist | grep Microphone). Security containment verified in review: nav guard keeps webview first-party; artifact iframes have opaque origins + empty permissions policy. Follow-up filed (MEET-11): gate loopback origins to dev builds — a release-build co-resident-attacker hardening, not a blocker.

---

Verify: green (full suite + both e2e). Reviews cleared: security (Sasha), code (Quinn) — zero fix rounds.

🤖 Generated with Claude Code

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
app.book.pub	Ready	Preview	Oct 4, 2026 2:09pm UTC