feat: allow specifying input monitoring level

Author: codebytere

README.md

@@ -258,7 +258,9 @@ askForCameraAccess().then(status => {
 })
 ```
 
-### `permissions.askForInputMonitoringAccess()`
+### `permissions.askForInputMonitoringAccess(accessLevel)`
+
+* `accessLevel` String (optional) - The access level being requested of Input Monitoring. Can be either `post` or `listen`. Default is `listen` Only available on macOS 10.15 or higher.
 
 Returns `Promise<String>` - Current permission status; can be `authorized` or `denied`.
 
@@ -341,7 +343,7 @@ askForMusicLibraryAccess().then(status => {
 
 ### `permissions.askForPhotosAccess([accessLevel])`
 
-* `accessLevel` String (optional) - The access level being requested of Photos. Can be either `add-only` or `read-write`. Only available on macOS 11 or higher.
+* `accessLevel` String (optional) - The access level being requested of Photos. Can be either `add-only` or `read-write`. Default is `add-only`. Only available on macOS 11 or higher.
 
 Returns `Promise<String>` - Current permission status; can be `authorized`, `denied`, or `restricted`.
 
@@ -467,4 +469,7 @@ $ tccutil reset SystemPolicyDocumentsFolder <bundleID>
 
 # Reset Downloads folder access
 $ tccutil reset SystemPolicyDownloadsFolder <bundleID>
+
+# Reset Removable Volumes access
+$ tccutil reset SystemPolicyRemovableVolumes <bundleID>
 ```

index.js

@@ -52,14 +52,22 @@ function askForPhotosAccess(accessLevel = 'add-only') {
   return permissions.askForPhotosAccess.call(this, accessLevel)
 }
 
+function askForInputMonitoringAccess(accessLevel = 'listen') {
+  if (!['listen', 'post'].includes(accessLevel)) {
+    throw new TypeError(`${accessLevel} must be one of either 'listen' or 'post'`)
+  }
+
+  return permissions.askForInputMonitoringAccess.call(this, accessLevel)
+}
+
 module.exports = {
   askForAccessibilityAccess: permissions.askForAccessibilityAccess,
   askForCalendarAccess: permissions.askForCalendarAccess,
   askForCameraAccess: permissions.askForCameraAccess,
   askForContactsAccess: permissions.askForContactsAccess,
   askForFoldersAccess,
   askForFullDiskAccess: permissions.askForFullDiskAccess,
-  askForInputMonitoringAccess: permissions.askForInputMonitoringAccess,
+  askForInputMonitoringAccess,
   askForRemindersAccess: permissions.askForRemindersAccess,
   askForMicrophoneAccess: permissions.askForMicrophoneAccess,
   askForMusicLibraryAccess: permissions.askForMusicLibraryAccess,

permissions.mm

@@ -44,6 +44,12 @@ PHAccessLevel GetPHAccessLevel(const std::string &type)
   return type == "read-write" ? PHAccessLevelReadWrite : PHAccessLevelAddOnly;
 }
 
+IOHIDRequestType GetInputMonitoringAccessType(const std::string &type)
+    API_AVAILABLE(macosx(10.15)) {
+  return type == "post" ? kIOHIDRequestTypePostEvent
+                        : kIOHIDRequestTypeListenEvent;
+}
+
 NSURL *URLForDirectory(NSSearchPathDirectory directory) {
   NSFileManager *fm = [NSFileManager defaultManager];
   return [fm URLForDirectory:directory
@@ -726,10 +732,11 @@ void AskForFullDiskAccess(const Napi::CallbackInfo &info) {
   Napi::Promise::Deferred deferred = Napi::Promise::Deferred::New(env);
 
   if (@available(macOS 10.15, *)) {
+    std::string access_level = info[0].As<Napi::String>().Utf8Value();
     std::string auth_status = InputMonitoringAuthStatus();
 
     if (auth_status == kNotDetermined) {
-      IOHIDRequestAccess(kIOHIDRequestTypeListenEvent);
+      IOHIDRequestAccess(GetInputMonitoringAccessType(access_level));
       deferred.Resolve(Napi::String::New(env, kDenied));
     } else if (auth_status == kDenied) {
       OpenPrefPane("Privacy_ListenEvent");