Files
readest/apps/readest-app/src-tauri/plugins/tauri-plugin-native-bridge/permissions/autogenerated/reference.md
T
Huang Xin 75f1fafe9f feat(reader): slide and page curl turn animations (#555) (#4940)
* feat(reader): slide and page curl turn animations (#555)

Add an Animation Style setting (Push, Slide, Page Curl) next to the
Paging Animation switch. Slide moves the turning page over the still
previous or next page like the Apple Books slide; Page Curl folds it
open in 3D so the page underneath is partially visible as it turns.
Both styles track the finger: the page follows a horizontal drag and
commits past halfway or on a flick, or settles back. The page header
and footer stay in place while the page turns.

The styles layer a View Transitions snapshot of the outgoing page over
the live, stationary incoming page, since the pages of one section live
in a single iframe and can never be on screen twice. They work for all
writing modes including vertical-rl, and on engines without the View
Transitions API (older WebViews) the paginator falls back to the
existing push animation, so all platforms keep working page turns.

The paginator changes live in the foliate-js submodule; this bumps the
pointer, wires viewSettings.pageTurnStyle to the renderer turn-style
attribute, and adds browser tests covering slide layering, curl,
vertical-rl, finger tracking with commit and revert, and the push
fallback.

Fixes #555

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* feat(reader): add WebGL page curl renderer for mesh turn animations (#555)

Grid mesh deformed around a cylinder: content past the fold wraps over
and lands mirrored on top with a whitened page back, transparent where
the page has curled away. Corner grabs start as a steep diagonal pinch
that straightens as the turn completes so the whole page clears by the
end. Groundwork for the Tauri mesh curl; capture and orchestration land
separately.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* feat(native-bridge): capture webview region as PNG on macOS and iOS (#555)

New capture_webview_region plugin command returns a binary PNG snapshot
of the calling webview (tauri::ipc::Response, no JSON overhead) for the
mesh page-curl texture. macOS goes through WKWebView
takeSnapshotWithConfiguration via with_webview on the main thread with
a 500ms timeout; iOS snapshots in Swift and hands the PNG across the
JSON-only plugin boundary base64-encoded, decoded back to bytes in
mobile.rs. Windows, Linux, and Android reject for now so the JS side
falls back to the CSS curl.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* feat(reader): drive the mesh page curl on Tauri platforms (#555)

Wire the WebGL curl renderer and the native webview capture into page
turns. A MeshCurlTurn controller runs the pipeline per turn: snapshot
the content box, overlay the captured page drawn flat, turn the live
view instantly underneath (the paginator's animated paths all gate on
the animated attribute), then curl the capture away. Backward turns
mirror the fold to the spine edge, matching the layered VT curl's
old-page-recedes choreography.

useMeshPageCurl wraps the view's prev/next so taps, keys, and wheel
turns all curl, and registers a touch interceptor (between the reading
ruler and the fixed-layout swipe) that scrubs the curl from the finger,
committing past halfway or on a flick and otherwise un-curling and
turning back under the overlay. The paginator stays out of the way via
no-swipe while the mesh is active; if the native capture ever fails the
session falls back to the paginator's CSS arc-fold curl and the shared
applyPageTurnAttributes helper restores turn-style.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* fix(build): restore iOS builds on Xcode 26.2 with a vendored swift-rs

Swift 6.2's driver no longer honors swift-rs 1.0.7's cross-compilation
style (swift build --arch <host> with per-swiftc -target overrides and
an inherited SDKROOT): plugin sources compile against the wrong
platform's Swift overlays and fail with baffling errors like type
'Bundle' has no member 'main' and extra argument 'privacy' in call.
Upstream swift-rs is unmaintained, so vendor it under packages/swift-rs
via a crates-io patch and build with SPM's first-class --triple/--sdk
flags instead, dropping the leaked SDKROOT so the host-targeted
manifest compile stays clean. Artifacts land in the unversioned-triple
directory now, so the link search path follows.

With --triple, SPM enforces the deployment floor declared in
Package.swift (the old override bypassed it): bump native-bridge to
iOS 15.0, matching the app's deployment target, since StoreKit's
Storefront is used unguarded.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* feat(native-bridge): capture webview region on Android via PixelCopy (#555)

Implements the Android side of capture_webview_region so the mesh page
curl works there too. The Kotlin command scales the CSS-pixel rect by
the display density, offsets it by the webview's window position, and
reads the pixels back from the window surface with PixelCopy (API 26+,
the app's minSdk), which includes the hardware-accelerated WebView that
View.draw would miss. PNG encoding runs off the main thread and the
result crosses the JSON plugin boundary base64-encoded, decoded back to
bytes in mobile.rs like iOS.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* fix(reader): right the upside-down page curl on iOS (#555)

The renderer oriented its texture with UNPACK_FLIP_Y_WEBGL, which WebKit
ignores for ImageBitmap uploads: on iOS the captured page rendered
upside down, and the mirrored page back read as rotated 180 degrees
instead of the ink-through-paper horizontal mirror Apple Books shows.
Upload unflipped and sample page coordinates directly so no pixel-store
flag is involved.

The page texture in the browser test was only horizontally asymmetric,
which is how the flip slipped through; it now uses four quadrants fed
through the production PNG-blob-to-ImageBitmap path and pins the
vertical orientation. Verified red/green by running the suite on
Playwright WebKit, which reproduces the iOS behavior.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* fix(reader): curl the whole page including header, footer, and margins (#555)

The mesh curl captured only the margin-inset content box, leaving the
running header, footer, and page margins static while just the text
column turned. A physical page turn takes the whole sheet with it, as
Apple Books does, so the capture and overlay now span the full reader
cell. The overlay mounts above the in-cell header (z-10) and footer, so
the static copies never show through the turning page.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* fix(reader): gate layered View Transition turns and slide from a capture instead (#555)

iOS 18 WebKit ships document.startViewTransition but crashes the WebContent
process when a page-turn transition snapshots the reader, so the mere
presence of the API is not enough for the layered slide/curl turns. Require
nested view-transition groups (Chrome/WebView 140+) as the marker of a
mature engine before setting turn-style on the renderer.

Engines that fail the check no longer lose the slide on Tauri: the mesh
curl's capture pipeline generalizes to CapturedPageTurn and now also drives
a flat slide overlay (capture the outgoing page, turn instantly underneath,
translate the captured page out toward the spine, mirrored for backward
turns), clipped to the content box with an edge shadow like the VT slide.
On the web, engines without full support fall back to push and the
Slide/Page Curl options are hidden from the Animation Style select; a
synced slide/curl setting from another device reads as Push there.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* fix(reader): make the Android page curl start instantly (#555)

The Android capture encoded a full-density PNG: 1080x2400 on a 3x
Xiaomi 13 took ~1.5s per turn, so the page sat frozen long enough to
read as the curl not working at all. Encode JPEG instead (the page is
opaque) and cap the destination bitmap at 2x CSS pixels - PixelCopy
scales into a smaller bitmap for free and the moving page stays sharp.
Measured on device over CDP: the capture invoke drops from 1550ms to
34ms and the curl overlay mounts 132ms after the tap.

The JS side stops hardcoding an image/png blob type and lets the
decoder sniff the platform's actual format.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* perf(reader): encode iOS page-curl captures as capped JPEG (#555)

Apply the Android speedup to iOS: encode the snapshot as JPEG (the
page is opaque) off the main thread, and cap it at 2x CSS pixels via
WKSnapshotConfiguration.snapshotWidth on 3x screens, cutting both the
encode time and the base64 payload crossing the JSON plugin boundary.
The JS side already sniffs the image format from the bytes.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

---------

Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
2026-07-05 20:49:57 +02:00

16 KiB

Default Permission

Default permissions for the plugin

This default permission set includes the following:

  • allow-auth-with-safari
  • allow-auth-with-custom-tab
  • allow-copy-uri-to-path
  • allow-save-image-to-gallery
  • allow-use-background-audio
  • allow-install-package
  • allow-set-system-ui-visibility
  • allow-get-status-bar-height
  • allow-get-sys-fonts-list
  • allow-intercept-keys
  • allow-lock-screen-orientation
  • allow-iap-is-available
  • allow-iap-initialize
  • allow-iap-fetch-products
  • allow-iap-purchase-product
  • allow-iap-restore-purchases
  • allow-get-system-color-scheme
  • allow-get-safe-area-insets
  • allow-get-screen-brightness
  • allow-set-screen-brightness
  • allow-get-external-sdcard-path
  • allow-open-external-url
  • allow-show-lookup-popover
  • allow-get-lookup-dictionary
  • allow-clear-lookup-dictionary
  • allow-select-directory
  • allow-get-storefront-region-code
  • allow-request-manage-storage-permission
  • allow-register-listener
  • allow-remove-listener
  • allow-check-permissions
  • allow-request-permissions
  • allow-checkPermissions
  • allow-requestPermissions
  • allow-set-sync-passphrase
  • allow-get-sync-passphrase
  • allow-clear-sync-passphrase
  • allow-is-sync-keychain-available
  • allow-set-secure-item
  • allow-get-secure-item
  • allow-clear-secure-item
  • allow-refresh-eink-screen
  • allow-update-reading-widget
  • allow-capture-webview-region

Permission Table

Identifier Description

native-bridge:allow-auth-with-custom-tab

Enables the auth_with_custom_tab command without any pre-configured scope.

native-bridge:deny-auth-with-custom-tab

Denies the auth_with_custom_tab command without any pre-configured scope.

native-bridge:allow-auth-with-safari

Enables the auth_with_safari command without any pre-configured scope.

native-bridge:deny-auth-with-safari

Denies the auth_with_safari command without any pre-configured scope.

native-bridge:allow-capture-webview-region

Enables the capture_webview_region command without any pre-configured scope.

native-bridge:deny-capture-webview-region

Denies the capture_webview_region command without any pre-configured scope.

native-bridge:allow-check-permissions

Enables the check-permissions command without any pre-configured scope.

native-bridge:deny-check-permissions

Denies the check-permissions command without any pre-configured scope.

native-bridge:allow-checkPermissions

Enables the checkPermissions command without any pre-configured scope.

native-bridge:deny-checkPermissions

Denies the checkPermissions command without any pre-configured scope.

native-bridge:allow-check-permissions

Enables the check_permissions command without any pre-configured scope.

native-bridge:deny-check-permissions

Denies the check_permissions command without any pre-configured scope.

native-bridge:allow-clear-lookup-dictionary

Enables the clear_lookup_dictionary command without any pre-configured scope.

native-bridge:deny-clear-lookup-dictionary

Denies the clear_lookup_dictionary command without any pre-configured scope.

native-bridge:allow-clear-secure-item

Enables the clear_secure_item command without any pre-configured scope.

native-bridge:deny-clear-secure-item

Denies the clear_secure_item command without any pre-configured scope.

native-bridge:allow-clear-sync-passphrase

Enables the clear_sync_passphrase command without any pre-configured scope.

native-bridge:deny-clear-sync-passphrase

Denies the clear_sync_passphrase command without any pre-configured scope.

native-bridge:allow-clip-url

Enables the clip_url command without any pre-configured scope.

native-bridge:deny-clip-url

Denies the clip_url command without any pre-configured scope.

native-bridge:allow-copy-uri-to-path

Enables the copy_uri_to_path command without any pre-configured scope.

native-bridge:deny-copy-uri-to-path

Denies the copy_uri_to_path command without any pre-configured scope.

native-bridge:allow-get-external-sdcard-path

Enables the get_external_sdcard_path command without any pre-configured scope.

native-bridge:deny-get-external-sdcard-path

Denies the get_external_sdcard_path command without any pre-configured scope.

native-bridge:allow-get-lookup-dictionary

Enables the get_lookup_dictionary command without any pre-configured scope.

native-bridge:deny-get-lookup-dictionary

Denies the get_lookup_dictionary command without any pre-configured scope.

native-bridge:allow-get-safe-area-insets

Enables the get_safe_area_insets command without any pre-configured scope.

native-bridge:deny-get-safe-area-insets

Denies the get_safe_area_insets command without any pre-configured scope.

native-bridge:allow-get-screen-brightness

Enables the get_screen_brightness command without any pre-configured scope.

native-bridge:deny-get-screen-brightness

Denies the get_screen_brightness command without any pre-configured scope.

native-bridge:allow-get-secure-item

Enables the get_secure_item command without any pre-configured scope.

native-bridge:deny-get-secure-item

Denies the get_secure_item command without any pre-configured scope.

native-bridge:allow-get-status-bar-height

Enables the get_status_bar_height command without any pre-configured scope.

native-bridge:deny-get-status-bar-height

Denies the get_status_bar_height command without any pre-configured scope.

native-bridge:allow-get-storefront-region-code

Enables the get_storefront_region_code command without any pre-configured scope.

native-bridge:deny-get-storefront-region-code

Denies the get_storefront_region_code command without any pre-configured scope.

native-bridge:allow-get-sync-passphrase

Enables the get_sync_passphrase command without any pre-configured scope.

native-bridge:deny-get-sync-passphrase

Denies the get_sync_passphrase command without any pre-configured scope.

native-bridge:allow-get-sys-fonts-list

Enables the get_sys_fonts_list command without any pre-configured scope.

native-bridge:deny-get-sys-fonts-list

Denies the get_sys_fonts_list command without any pre-configured scope.

native-bridge:allow-get-system-color-scheme

Enables the get_system_color_scheme command without any pre-configured scope.

native-bridge:deny-get-system-color-scheme

Denies the get_system_color_scheme command without any pre-configured scope.

native-bridge:allow-iap-fetch-products

Enables the iap_fetch_products command without any pre-configured scope.

native-bridge:deny-iap-fetch-products

Denies the iap_fetch_products command without any pre-configured scope.

native-bridge:allow-iap-initialize

Enables the iap_initialize command without any pre-configured scope.

native-bridge:deny-iap-initialize

Denies the iap_initialize command without any pre-configured scope.

native-bridge:allow-iap-is-available

Enables the iap_is_available command without any pre-configured scope.

native-bridge:deny-iap-is-available

Denies the iap_is_available command without any pre-configured scope.

native-bridge:allow-iap-purchase-product

Enables the iap_purchase_product command without any pre-configured scope.

native-bridge:deny-iap-purchase-product

Denies the iap_purchase_product command without any pre-configured scope.

native-bridge:allow-iap-restore-purchases

Enables the iap_restore_purchases command without any pre-configured scope.

native-bridge:deny-iap-restore-purchases

Denies the iap_restore_purchases command without any pre-configured scope.

native-bridge:allow-install-package

Enables the install_package command without any pre-configured scope.

native-bridge:deny-install-package

Denies the install_package command without any pre-configured scope.

native-bridge:allow-intercept-keys

Enables the intercept_keys command without any pre-configured scope.

native-bridge:deny-intercept-keys

Denies the intercept_keys command without any pre-configured scope.

native-bridge:allow-is-sync-keychain-available

Enables the is_sync_keychain_available command without any pre-configured scope.

native-bridge:deny-is-sync-keychain-available

Denies the is_sync_keychain_available command without any pre-configured scope.

native-bridge:allow-lock-screen-orientation

Enables the lock_screen_orientation command without any pre-configured scope.

native-bridge:deny-lock-screen-orientation

Denies the lock_screen_orientation command without any pre-configured scope.

native-bridge:allow-open-external-url

Enables the open_external_url command without any pre-configured scope.

native-bridge:deny-open-external-url

Denies the open_external_url command without any pre-configured scope.

native-bridge:allow-refresh-eink-screen

Enables the refresh_eink_screen command without any pre-configured scope.

native-bridge:deny-refresh-eink-screen

Denies the refresh_eink_screen command without any pre-configured scope.

native-bridge:allow-register-listener

Enables the register_listener command without any pre-configured scope.

native-bridge:deny-register-listener

Denies the register_listener command without any pre-configured scope.

native-bridge:allow-remove-listener

Enables the remove_listener command without any pre-configured scope.

native-bridge:deny-remove-listener

Denies the remove_listener command without any pre-configured scope.

native-bridge:allow-request-permissions

Enables the request-permissions command without any pre-configured scope.

native-bridge:deny-request-permissions

Denies the request-permissions command without any pre-configured scope.

native-bridge:allow-requestPermissions

Enables the requestPermissions command without any pre-configured scope.

native-bridge:deny-requestPermissions

Denies the requestPermissions command without any pre-configured scope.

native-bridge:allow-request-manage-storage-permission

Enables the request_manage_storage_permission command without any pre-configured scope.

native-bridge:deny-request-manage-storage-permission

Denies the request_manage_storage_permission command without any pre-configured scope.

native-bridge:allow-request-permissions

Enables the request_permissions command without any pre-configured scope.

native-bridge:deny-request-permissions

Denies the request_permissions command without any pre-configured scope.

native-bridge:allow-save-image-to-gallery

Enables the save_image_to_gallery command without any pre-configured scope.

native-bridge:deny-save-image-to-gallery

Denies the save_image_to_gallery command without any pre-configured scope.

native-bridge:allow-select-directory

Enables the select_directory command without any pre-configured scope.

native-bridge:deny-select-directory

Denies the select_directory command without any pre-configured scope.

native-bridge:allow-set-screen-brightness

Enables the set_screen_brightness command without any pre-configured scope.

native-bridge:deny-set-screen-brightness

Denies the set_screen_brightness command without any pre-configured scope.

native-bridge:allow-set-secure-item

Enables the set_secure_item command without any pre-configured scope.

native-bridge:deny-set-secure-item

Denies the set_secure_item command without any pre-configured scope.

native-bridge:allow-set-sync-passphrase

Enables the set_sync_passphrase command without any pre-configured scope.

native-bridge:deny-set-sync-passphrase

Denies the set_sync_passphrase command without any pre-configured scope.

native-bridge:allow-set-system-ui-visibility

Enables the set_system_ui_visibility command without any pre-configured scope.

native-bridge:deny-set-system-ui-visibility

Denies the set_system_ui_visibility command without any pre-configured scope.

native-bridge:allow-show-lookup-popover

Enables the show_lookup_popover command without any pre-configured scope.

native-bridge:deny-show-lookup-popover

Denies the show_lookup_popover command without any pre-configured scope.

native-bridge:allow-update-reading-widget

Enables the update_reading_widget command without any pre-configured scope.

native-bridge:deny-update-reading-widget

Denies the update_reading_widget command without any pre-configured scope.

native-bridge:allow-use-background-audio

Enables the use_background_audio command without any pre-configured scope.

native-bridge:deny-use-background-audio

Denies the use_background_audio command without any pre-configured scope.