update tauri to cef/wry feature flag removal

revert to draft07 schema
Merge remote-tracking branch 'origin/v2' into feat/cef
2026-05-01 12:08:06 +02:00 · 2026-03-11 11:36:00 -03:00 · 2026-03-09 12:32:45 +01:00 · 2026-03-09 12:31:03 +01:00 · 2026-03-08 11:39:12 +01:00 · 2026-03-08 10:52:07 +01:00
242 changed files with 4956 additions and 9248 deletions
@@ -1,11 +1,5 @@
 [advisories]
 ignore = [
-  # time 0.1
-  "RUSTSEC-2020-0071",
-  # needs sqlx 0.7 (still in alpha)
-  "RUSTSEC-2022-0090",
-  # wry needs kuchiki on Android
-  "RUSTSEC-2023-0019",
-  # atty is only used when the `colored` feature is enabled on tauri-plugin-log
-  "RUSTSEC-2021-0145",
+  # time crate can't be updated in the repo because of MSRV, users are unaffected
+  "RUSTSEC-2026-0009",
 ]
@@ -1,6 +0,0 @@
---
-"dialog-js": minor:feat
-"dialog": minor:feat
---
-
-Add `xdg-portal` as an optional feature for `rfd`
@@ -1,6 +0,0 @@
---
-"log": "minor"
-"log-js": "minor"
---
-
-Allow specifying a log formatter per target using the `format` method on `Target`.
@@ -0,0 +1,6 @@
+---
+"sql": minor
+"sql-js": minor
+---
+
+Add support for Postgres `NUMERIC` and custom data types.
@@ -0,0 +1,6 @@
+---
+"fs": minor
+"fs-js": minor
+---
+
+Add `encoding` option for `readTextFile` and `readTextFileLines`
@@ -0,0 +1,6 @@
+---
+"http": patch
+"http-js": patch
+---
+
+Correct Response header initialization to support cloning and ensure Set-Cookie visibility.
@@ -0,0 +1,6 @@
+---
+"updater": patch
+"updater-js": patch
+---
+
+fix: preserve file extension of updater package, otherwise users may get confused when presented with a sudo dialog suggesting to install a file with the extension `.rpm` using `dpkg -i`
@@ -78,7 +78,6 @@
        "notification",
        "os",
        "process",
-        "secure-storage",
        "shell",
        "store",
        "updater",
@@ -105,7 +104,6 @@
        "notification-js",
        "os-js",
        "process-js",
-        "secure-storage-js",
        "shell-js",
        "store-js",
        "updater-js"
@@ -284,14 +282,6 @@
      "path": "./plugins/process",
      "manager": "javascript"
    },
-    "secure-storage": {
-      "path": "./plugins/secure-storage",
-      "manager": "rust"
-    },
-    "secure-storage-js": {
-      "path": "./plugins/secure-storage",
-      "manager": "javascript"
-    },
    "shell": {
      "path": "./plugins/shell",
      "manager": "rust"
@@ -1,6 +0,0 @@
---
-stronghold: patch
-stronghold-js: patch
---
-
-The `stronghold` plugin is now deprecated and will be removed in v3. The `secure-storage` plugin should be a replacement for most use-cases.
@@ -1,6 +0,0 @@
---
-"dialog": minor
-"dialog-js": minor
---
-
-Add `pickerMode` option to file picker (currently only used on iOS)
@@ -1,5 +0,0 @@
---
-"localhost": patch
---
-
-Disable caching on responses.
@@ -1,6 +0,0 @@
---
-"barcode-scanner": patch
-"barcode-scanner-js": patch
---
-
-Fix the `cameraView` is not removed after scanning in iOS.
@@ -1,6 +0,0 @@
---
-"log": patch
-"log-js": patch
---
-
-Fix log file rotation when exceeding `max_file_size`.
@@ -1,6 +0,0 @@
---
-"nfc": "patch"
-"nfc-js": "patch"
---
-
-Update return value of `isAvailable` to match TypeScript function signature
@@ -0,0 +1,6 @@
+---
+"dialog": minor
+"dialog-js": minor
+---
+
+Re-use `message` command in Rust side for `ask` and `confirm` commands, `allow-ask` and `allow-confirm` permissions are now aliases to `allow-message`
@@ -0,0 +1,6 @@
+---
+"fs": minor
+"fs-js": minor
+---
+
+Enable access for security-scoped resources on iOS by automatically calling `NSURL::startAccessingSecurityScopedResource` on resource access and adding the `stopAccessingSecurityScopedResource` API.
@@ -1,6 +0,0 @@
---
-"updater": minor
-"updater-js": minor
---
-
-Updater plugin now supports all bundle types: Deb, Rpm and AppImage for Linux; NSiS, MSI for Windows. This was added in https://github.com/tauri-apps/plugins-workspace/pull/2624
@@ -1,6 +0,0 @@
---
-"upload": minor
-"upload-js": minor
---
-
-Upload plugin now supports specifying an HTTP method i.e. POST, PUT etc.
@@ -0,0 +1,6 @@
+---
+"deep-link": patch
+"deep-link-js": patch
+---
+
+Validate Android new intent is actually a deep link before triggering the onOpenUrl event.
@@ -0,0 +1,63 @@
+# Copyright 2019-2023 Tauri Programme within The Commons Conservancy
+# SPDX-License-Identifier: Apache-2.0
+# SPDX-License-Identifier: MIT
+
+name: 🐞 Bug Report
+description: Report a bug
+labels: ['type: bug']
+
+body:
+  - type: markdown
+    attributes:
+      value: |
+        ## First of all
+        1. Please search for [existing issues](https://github.com/tauri-apps/plugins-workspace/issues?q=is%3Aissue) about this problem first.
+        2. Make sure `rustc` and all relevant Tauri packages are up to date.
+        3. Make sure it's an issue with a tauri plugin and not something else you are using.
+        4. Remember to follow our community guidelines and be friendly.
+
+  - type: textarea
+    id: description
+    attributes:
+      label: Describe the bug
+      description: A clear description of what the bug is. Include screenshots if applicable.
+      placeholder: Bug description
+    validations:
+      required: true
+
+  - type: textarea
+    id: reproduction
+    attributes:
+      label: Reproduction
+      description: A link to a reproduction repo or steps to reproduce the behaviour.
+      placeholder: |
+        Please provide a minimal reproduction or steps to reproduce, see this guide https://stackoverflow.com/help/minimal-reproducible-example
+        Why reproduction is required? see this article https://antfu.me/posts/why-reproductions-are-required
+
+  - type: textarea
+    id: expected-behavior
+    attributes:
+      label: Expected behavior
+      description: A clear description of what you expected to happen.
+
+  - type: textarea
+    id: info
+    attributes:
+      label: Full `tauri info` output
+      description: 'Output of `npm run tauri info` or `cargo tauri info`. Issues without this will be closed!'
+      render: text
+    validations:
+      required: true
+
+  - type: textarea
+    id: logs
+    attributes:
+      label: Stack trace
+      description: A stack trace or ANY error messages you may see.
+      render: text
+
+  - type: textarea
+    id: context
+    attributes:
+      label: Additional context
+      description: Add any other context about the problem here. For example a link to a Discord discussion.
@@ -0,0 +1,12 @@
+# Copyright 2019-2023 Tauri Programme within The Commons Conservancy
+# SPDX-License-Identifier: Apache-2.0
+# SPDX-License-Identifier: MIT
+
+#blank_issues_enabled: false
+contact_links:
+  - name: 💡 Request a new plugin
+    url: https://github.com/orgs/tauri-apps/discussions/new?category=plugin-requests
+    about: Propose a new Plugin to the community or the Tauri org.
+  - name: 💬 Discord Chat
+    url: https://discord.com/invite/tauri
+    about: Ask questions and talk to other Tauri users and the maintainers
@@ -0,0 +1,5 @@
+---
+name: 📚 Docs Report
+about: Create a report to help us improve the docs
+labels: 'type: documentation'
+---
@@ -0,0 +1,46 @@
+# Copyright 2019-2023 Tauri Programme within The Commons Conservancy
+# SPDX-License-Identifier: Apache-2.0
+# SPDX-License-Identifier: MIT
+
+name: 💡 Feature Request
+description: Request a feature or enhancement for an existing plugin
+labels: ['type: feature request']
+
+body:
+  - type: markdown
+    attributes:
+      value: |
+        ## First of all
+        - Please search for [existing issues](https://github.com/tauri-apps/plugins-workspace/issues?q=is%3Aissue) for this request first.
+        - Only requests for plugins that exist in this repo are allowed.
+        - You can request new plugins [here](https://github.com/orgs/tauri-apps/discussions/new?category=plugin-requests)
+
+  - type: textarea
+    id: problem
+    attributes:
+      label: Describe the problem
+      description: A clear description of the problem this feature would solve
+      placeholder: "I'm always frustrated when..."
+    validations:
+      required: true
+
+  - type: textarea
+    id: solution
+    attributes:
+      label: "Describe the solution you'd like"
+      description: A clear description of what change you would like
+      placeholder: 'I would like to...'
+    validations:
+      required: true
+
+  - type: textarea
+    id: alternatives
+    attributes:
+      label: Alternatives considered
+      description: "Any alternative solutions you've considered"
+
+  - type: textarea
+    id: context
+    attributes:
+      label: Additional context
+      description: Add any other context about the problem here.
@@ -34,7 +34,7 @@ jobs:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
-      - uses: rustsec/audit-check@v1
+      - uses: rustsec/audit-check@v2
        with:
          token: ${{ secrets.GITHUB_TOKEN }}
          # https://github.com/tauri-apps/plugins-workspace/issues/774
@@ -101,11 +101,6 @@ jobs:
              - pnpm-lock.yaml
              - plugins/process/guest-js/**
              - plugins/process/src/api-iife.js
-            secure-storage:
-              - .github/workflows/check-generated-files.yml
-              - pnpm-lock.yaml
-              - plugins/secure-storage/guest-js/**
-              - plugins/secure-storage/src/api-iife.js
            shell:
              - .github/workflows/check-generated-files.yml
              - pnpm-lock.yaml
@@ -5,6 +5,7 @@
 name: integration tests

 on:
+  workflow_dispatch:
  push:
    branches:
      - v1
@@ -98,9 +98,6 @@ jobs:
            tauri-plugin-process:
              - .github/workflows/lint-rust.yml
              - plugins/process/**
-            tauri-plugin-secure-storage:
-              - .github/workflows/lint-rust.yml
-              - plugins/secure-storage/**
            tauri-plugin-shell:
              - .github/workflows/lint-rust.yml
              - plugins/shell/**
@@ -137,11 +137,6 @@ jobs:
              - Cargo.toml
              - Cargo.lock
              - plugins/process/**
-            tauri-plugin-secure-storage:
-              - .github/workflows/test-rust.yml
-              - Cargo.toml
-              - Cargo.lock
-              - plugins/secure-storage/**
            tauri-plugin-shell:
              - .github/workflows/test-rust.yml
              - Cargo.toml
@@ -224,7 +219,7 @@ jobs:
              target: aarch64-linux-android,
              os: ubuntu-latest,
              runner: 'cross',
-              command: 'build --verbose'
+              command: 'build'
            }

    runs-on: ${{ matrix.platform.os }}
@@ -238,7 +233,7 @@ jobs:
          sudo apt-get update
          sudo apt-get install -y libwebkit2gtk-4.0-dev libwebkit2gtk-4.1-dev

-      - uses: dtolnay/rust-toolchain@1.85
+      - uses: dtolnay/rust-toolchain@1.77.2
        with:
          targets: ${{ matrix.platform.target }}

@@ -251,7 +246,7 @@ jobs:
        run: cargo +stable install cross --git https://github.com/cross-rs/cross

      - name: test ${{ matrix.package }}
-        if: matrix.package != 'tauri-plugin-http' && matrix.package != 'tauri-plugin-secure-storage' && matrix.package != 'tauri-plugin-dialog'
+        if: ${{ matrix.package != 'tauri-plugin-http' && matrix.package != 'tauri-plugin-dialog' }}
        run: ${{ matrix.platform.runner }} ${{ matrix.platform.command }} --package ${{ matrix.package }} --target ${{ matrix.platform.target }} --all-targets --all-features

      - name: test ${{ matrix.package }}
@@ -21,6 +21,7 @@ target/
 package-lock.json
 yarn.lock
 bun.lockb
+bun.lock

 # rust compiled folders
 target/
@@ -1,3 +1,2 @@
 plugins/*/permissions/autogenerated/
 plugins/*/android/.tauri/tauri-api/build/
-plugins/*/android/build/intermediates/
@@ -12,14 +12,16 @@ resolver = "2"
 serde = { version = "1", features = ["derive"] }
 tracing = "0.1"
 log = "0.4"
-tauri = { version = "2.8.2", default-features = false }
-tauri-build = "2.4"
-tauri-plugin = "2.4"
-tauri-utils = "2.7"
+tauri = { version = "2.10", default-features = false }
+tauri-runtime-wry = "2"
+tauri-runtime-cef = { git = "https://github.com/tauri-apps/tauri.git", branch = "refactor/runtime-feature-flag" }
+tauri-build = "2.5"
+tauri-plugin = "2.5"
+tauri-utils = "2.8"
 serde_json = "1"
 thiserror = "2"
 url = "2"
-schemars = "0.8"
+schemars = "1"
 dunce = "1"
 specta = "^2.0.0-rc.16"
 glob = "0.3"
@@ -39,3 +41,9 @@ codegen-units = 1
 lto = true
 incremental = false
 opt-level = "s"
+
+[patch.crates-io]
+tauri = { git = "https://github.com/tauri-apps/tauri.git", branch = "refactor/runtime-feature-flag" }
+tauri-utils = { git = "https://github.com/tauri-apps/tauri.git", branch = "refactor/runtime-feature-flag" }
+tauri-plugin = { git = "https://github.com/tauri-apps/tauri.git", branch = "refactor/runtime-feature-flag" }
+tauri-runtime-wry = { git = "https://github.com/tauri-apps/tauri.git", branch = "refactor/runtime-feature-flag" }
@@ -1,5 +1,35 @@
 # Changelog

+## \[2.0.37]
+
+### Dependencies
+
+- Upgraded to `updater-js@2.10.0`
+- Upgraded to `barcode-scanner-js@2.4.4`
+- Upgraded to `http-js@2.5.7`
+- Upgraded to `shell-js@2.3.5`
+
+## \[2.0.36]
+
+### Dependencies
+
+- Upgraded to `http-js@2.5.6`
+- Upgraded to `dialog-js@2.6.0`
+
+## \[2.0.35]
+
+### Dependencies
+
+- Upgraded to `dialog-js@2.5.0`
+- Upgraded to `log-js@2.8.0`
+- Upgraded to `shell-js@2.3.4`
+- Upgraded to `barcode-scanner-js@2.4.3`
+- Upgraded to `fs-js@2.4.5`
+- Upgraded to `http-js@2.5.5`
+- Upgraded to `nfc-js@2.3.4`
+- Upgraded to `opener-js@2.5.3`
+- Upgraded to `store-js@2.4.2`
+
 ## \[2.0.34]

 ### Dependencies
@@ -1,7 +1,7 @@
 {
  "name": "api",
  "private": true,
-  "version": "2.0.34",
+  "version": "2.0.37",
  "type": "module",
  "scripts": {
    "dev": "vite --clearScreen false",
@@ -10,26 +10,25 @@
    "tauri": "tauri"
  },
  "dependencies": {
-    "@tauri-apps/api": "2.9.0",
-    "@tauri-apps/plugin-barcode-scanner": "^2.4.2",
+    "@tauri-apps/api": "^2.10.1",
+    "@tauri-apps/plugin-barcode-scanner": "^2.4.4",
    "@tauri-apps/plugin-biometric": "^2.3.2",
    "@tauri-apps/plugin-cli": "^2.4.1",
    "@tauri-apps/plugin-clipboard-manager": "^2.3.2",
-    "@tauri-apps/plugin-dialog": "^2.4.2",
-    "@tauri-apps/plugin-fs": "^2.4.4",
+    "@tauri-apps/plugin-dialog": "^2.6.0",
+    "@tauri-apps/plugin-fs": "^2.4.5",
    "@tauri-apps/plugin-geolocation": "^2.2.0",
    "@tauri-apps/plugin-global-shortcut": "^2.3.1",
    "@tauri-apps/plugin-haptics": "^2.2.0",
-    "@tauri-apps/plugin-http": "^2.5.4",
-    "@tauri-apps/plugin-nfc": "^2.3.3",
+    "@tauri-apps/plugin-http": "^2.5.7",
+    "@tauri-apps/plugin-nfc": "^2.3.4",
    "@tauri-apps/plugin-notification": "^2.3.3",
-    "@tauri-apps/plugin-opener": "^2.5.2",
+    "@tauri-apps/plugin-opener": "^2.5.3",
    "@tauri-apps/plugin-os": "^2.3.2",
    "@tauri-apps/plugin-process": "^2.3.1",
-    "@tauri-apps/plugin-secure-storage": "file:../../plugins/secure-storage",
-    "@tauri-apps/plugin-shell": "^2.3.3",
-    "@tauri-apps/plugin-store": "^2.4.1",
-    "@tauri-apps/plugin-updater": "^2.9.0",
+    "@tauri-apps/plugin-shell": "^2.3.5",
+    "@tauri-apps/plugin-store": "^2.4.2",
+    "@tauri-apps/plugin-updater": "^2.10.0",
    "@tauri-apps/plugin-upload": "^2.3.0",
    "@zerodevx/svelte-json-view": "1.0.11"
  },
@@ -37,7 +36,7 @@
    "@iconify-json/codicon": "^1.2.12",
    "@iconify-json/ph": "^1.2.2",
    "@sveltejs/vite-plugin-svelte": "^6.0.0",
-    "@tauri-apps/cli": "2.9.4",
+    "@tauri-apps/cli": "2.10.1",
    "@unocss/extractor-svelte": "^66.3.3",
    "svelte": "^5.20.4",
    "unocss": "^66.3.3",
@@ -1,5 +1,35 @@
 # Changelog

+## \[2.0.41]
+
+### Dependencies
+
+- Upgraded to `updater@2.10.0`
+- Upgraded to `barcode-scanner@2.4.4`
+- Upgraded to `http@2.5.7`
+- Upgraded to `shell@2.3.5`
+
+## \[2.0.40]
+
+### Dependencies
+
+- Upgraded to `http@2.5.6`
+- Upgraded to `dialog@2.6.0`
+
+## \[2.0.39]
+
+### Dependencies
+
+- Upgraded to `dialog@2.5.0`
+- Upgraded to `log@2.8.0`
+- Upgraded to `shell@2.3.4`
+- Upgraded to `barcode-scanner@2.4.3`
+- Upgraded to `fs@2.4.5`
+- Upgraded to `http@2.5.5`
+- Upgraded to `nfc@2.3.4`
+- Upgraded to `opener@2.5.3`
+- Upgraded to `store@2.4.2`
+
 ## \[2.0.38]

 ### Dependencies
@@ -1,7 +1,7 @@
 [package]
 name = "api"
 publish = false
-version = "2.0.38"
+version = "2.0.41"
 description = "An example Tauri Application showcasing the api"
 edition = "2021"
 rust-version = { workspace = true }
@@ -20,33 +20,33 @@ serde = { workspace = true }
 tiny_http = "0.12"
 time = "0.3"
 log = { workspace = true }
-tauri-plugin-log = { path = "../../../plugins/log", version = "2.7.1" }
-tauri-plugin-fs = { path = "../../../plugins/fs", version = "2.4.4", features = [
+tauri-plugin-log = { path = "../../../plugins/log", version = "2.8.0" }
+tauri-plugin-fs = { path = "../../../plugins/fs", version = "2.4.5", features = [
  "watch",
 ] }
 tauri-plugin-clipboard-manager = { path = "../../../plugins/clipboard-manager", version = "2.3.2" }
-tauri-plugin-dialog = { path = "../../../plugins/dialog", version = "2.4.2" }
+tauri-plugin-dialog = { path = "../../../plugins/dialog", version = "2.6.0" }
 tauri-plugin-http = { path = "../../../plugins/http", features = [
  "multipart",
  "cookies",
-], version = "2.5.4" }
+], version = "2.5.7" }
 tauri-plugin-notification = { path = "../../../plugins/notification", version = "2.3.3", features = [
  "windows7-compat",
 ] }
 tauri-plugin-os = { path = "../../../plugins/os", version = "2.3.2" }
 tauri-plugin-process = { path = "../../../plugins/process", version = "2.3.1" }
-tauri-plugin-opener = { path = "../../../plugins/opener", version = "2.5.2" }
-tauri-plugin-secure-storage = { path = "../../../plugins/secure-storage" }
-tauri-plugin-shell = { path = "../../../plugins/shell", version = "2.3.3" }
-tauri-plugin-store = { path = "../../../plugins/store", version = "2.4.1" }
+tauri-plugin-opener = { path = "../../../plugins/opener", version = "2.5.3" }
+tauri-plugin-shell = { path = "../../../plugins/shell", version = "2.3.5" }
+tauri-plugin-store = { path = "../../../plugins/store", version = "2.4.2" }
 tauri-plugin-upload = { path = "../../../plugins/upload", version = "2.3.0" }
+tauri-runtime-wry = { workspace = true, optional = true, features = [
+  "macos-private-api",
+] }
+tauri-runtime-cef = { workspace = true, optional = true }

 [dependencies.tauri]
 workspace = true
 features = [
-  "wry",
-  "common-controls-v6",
-  "x11",
  "image-ico",
  "image-png",
  "isolation",
@@ -58,15 +58,18 @@ features = [
 [target."cfg(any(target_os = \"macos\", windows, target_os = \"linux\", target_os = \"dragonfly\", target_os = \"freebsd\", target_os = \"openbsd\", target_os = \"netbsd\"))".dependencies]
 tauri-plugin-cli = { path = "../../../plugins/cli", version = "2.4.1" }
 tauri-plugin-global-shortcut = { path = "../../../plugins/global-shortcut", version = "2.3.1" }
-tauri-plugin-updater = { path = "../../../plugins/updater", version = "2.9.0" }
+tauri-plugin-updater = { path = "../../../plugins/updater", version = "2.10.0" }
 tauri-plugin-window-state = { path = "../../../plugins/window-state", version = "2.2.0" }

 [target."cfg(any(target_os = \"android\", target_os = \"ios\"))".dependencies]
-tauri-plugin-barcode-scanner = { path = "../../../plugins/barcode-scanner/", version = "2.4.2" }
-tauri-plugin-nfc = { path = "../../../plugins/nfc", version = "2.3.3" }
+tauri-plugin-barcode-scanner = { path = "../../../plugins/barcode-scanner/", version = "2.4.4" }
+tauri-plugin-nfc = { path = "../../../plugins/nfc", version = "2.3.4" }
 tauri-plugin-biometric = { path = "../../../plugins/biometric/", version = "2.3.2" }
 tauri-plugin-geolocation = { path = "../../../plugins/geolocation/", version = "2.3.2" }
 tauri-plugin-haptics = { path = "../../../plugins/haptics/", version = "2.3.2" }

 [features]
+default = ["wry"]
+wry = ["dep:tauri-runtime-wry"]
+cef = ["dep:tauri-runtime-cef"]
 prod = ["tauri/custom-protocol"]
@@ -23,11 +23,7 @@
    "core:window:allow-start-dragging",
    "notification:default",
    "os:allow-platform",
-    "dialog:allow-open",
-    "dialog:allow-ask",
-    "dialog:allow-save",
-    "dialog:allow-confirm",
-    "dialog:allow-message",
+    "dialog:default",
    {
      "identifier": "shell:allow-spawn",
      "allow": [
@@ -102,10 +98,6 @@
      "identifier": "opener:allow-open-path",
      "allow": [{ "path": "$APPDATA" }, { "path": "$APPDATA/**" }]
    },
-    "upload:default",
-    "secure-storage:allow-get-string",
-    "secure-storage:allow-set-string",
-    "secure-storage:allow-get-binary",
-    "secure-storage:allow-set-binary"
+    "upload:default"
  ]
 }
@@ -14,11 +14,11 @@ pub struct RequestBody {

 #[command]
 pub fn log_operation(event: String, payload: Option<String>) {
-    log::info!("{event} {payload:?}");
+    log::info!("{} {:?}", event, payload);
 }

 #[command]
 pub fn perform_request(endpoint: String, body: RequestBody) -> String {
-    println!("{endpoint} {body:?}");
+    println!("{} {:?}", endpoint, body);
    "message response".into()
 }
@@ -6,6 +6,11 @@ mod cmd;
 #[cfg(desktop)]
 mod tray;

+#[cfg(feature = "cef")]
+type TauriRuntime = tauri_runtime_cef::CefRuntime<tauri::EventLoopMessage>;
+#[cfg(feature = "wry")]
+type TauriRuntime = tauri_runtime_wry::Wry<tauri::EventLoopMessage>;
+
 use serde::Serialize;
 use tauri::{
    webview::{PageLoadEvent, WebviewWindowBuilder},
@@ -17,13 +22,13 @@ struct Reply {
    data: String,
 }

-pub type SetupHook = Box<dyn FnOnce(&mut App) -> Result<(), Box<dyn std::error::Error>> + Send>;
-pub type OnEvent = Box<dyn FnMut(&AppHandle, RunEvent)>;
+pub type SetupHook<R> = Box<dyn FnOnce(&mut App<R>) -> Result<(), Box<dyn std::error::Error>> + Send>;
+pub type OnEvent<R> = Box<dyn FnMut(&AppHandle<R>, RunEvent)>;

 #[cfg_attr(mobile, tauri::mobile_entry_point)]
 pub fn run() {
    #[allow(unused_mut)]
-    let mut builder = tauri::Builder::default()
+    let mut builder = tauri::Builder::<TauriRuntime>::new()
        .plugin(
            tauri_plugin_log::Builder::default()
                .level(log::LevelFilter::Info)
@@ -38,7 +43,6 @@ pub fn run() {
        .plugin(tauri_plugin_process::init())
        .plugin(tauri_plugin_opener::init())
        .plugin(tauri_plugin_shell::init())
-        .plugin(tauri_plugin_secure_storage::init())
        .plugin(tauri_plugin_store::Builder::default().build())
        .plugin(tauri_plugin_upload::init())
        .setup(move |app| {
@@ -23,7 +23,6 @@
  import Biometric from './views/Biometric.svelte'
  import Geolocation from './views/Geolocation.svelte'
  import Haptics from './views/Haptics.svelte'
-  import SecureStorage from './views/SecureStorage.svelte'

  import { onMount, tick } from 'svelte'
  import { ask } from '@tauri-apps/plugin-dialog'
@@ -104,11 +103,6 @@
      component: Store,
      icon: 'i-codicon-file-code'
    },
-    {
-      label: 'SecureStorage',
-      component: SecureStorage,
-      icon: 'i-codicon-file-code'
-    },
    !isMobile && {
      label: 'Updater',
      component: Updater,
@@ -219,9 +213,9 @@
      ...r,
      {
        html:
-          `<pre><strong class="text-accent dark:text-darkAccent">[${new Date().toLocaleTimeString()}]:</strong> `
-          + (typeof value === 'string' ? value : JSON.stringify(value, null, 1))
-          + '</pre>'
+          `<pre><strong class="text-accent dark:text-darkAccent">[${new Date().toLocaleTimeString()}]:</strong> ` +
+          (typeof value === 'string' ? value : JSON.stringify(value, null, 1)) +
+          '</pre>'
      }
    ])
    await tick()
@@ -235,9 +229,9 @@
      ...r,
      {
        html:
-          `<pre><strong class="text-accent dark:text-darkAccent">[${new Date().toLocaleTimeString()}]:</strong> `
-          + html
-          + '</pre>'
+          `<pre><strong class="text-accent dark:text-darkAccent">[${new Date().toLocaleTimeString()}]:</strong> ` +
+          html +
+          '</pre>'
      }
    ])
    await tick()
@@ -8,7 +8,8 @@
  let filter = null;
  let multiple = false;
  let directory = false;
-  let pickerMode = "";
+  let pickerMode = "document";
+  let fileAccessMode = "scoped";

  function arrayBufferToBase64(buffer, callback) {
    var blob = new Blob([buffer], {
@@ -42,7 +43,7 @@
  }

  async function msg() {
-    await message("Tauri is awesome!");
+    await message("Tauri is awesome!").then((res) => onMessage(res));
  }

  async function msgCustom(result) {
@@ -52,54 +53,60 @@
      .catch(onMessage);
  }

-  function openDialog() {
-    open({
-      title: "My wonderful open dialog",
-      defaultPath,
-      filters: filter
-        ? [
-            {
-              name: "Tauri Example",
-              extensions: filter.split(",").map((f) => f.trim()),
-            },
-          ]
-        : [],
-      multiple,
-      directory,
-      pickerMode: pickerMode === "" ? undefined : pickerMode,
-    })
-      .then(function (res) {
-        if (Array.isArray(res)) {
-          onMessage(res);
-        } else {
-          var pathToRead = res;
-          var isFile = pathToRead.match(/\S+\.\S+$/g);
-          readFile(pathToRead)
-            .then(function (response) {
-              if (isFile) {
-                if (
-                  pathToRead.includes(".png") ||
-                  pathToRead.includes(".jpg") ||
-                  pathToRead.includes(".jpeg")
-                ) {
-                  arrayBufferToBase64(
-                    new Uint8Array(response),
-                    function (base64) {
-                      var src = "data:image/png;base64," + base64;
-                      insecureRenderHtml('<img src="' + src + '"></img>');
-                    }
-                  );
-                } else {
-                  onMessage(res);
-                }
-              } else {
-                onMessage(res);
-              }
-            })
-            .catch(onMessage);
-        }
+  async function openDialog() {
+    try {
+      var result = await open({
+        title: "My wonderful open dialog",
+        defaultPath,
+        filters: filter
+          ? [
+              {
+                name: "Tauri Example",
+                extensions: filter.split(",").map((f) => f.trim()),
+              },
+            ]
+          : [],
+        multiple,
+        directory,
+        pickerMode,
+        fileAccessMode,
      })
-      .catch(onMessage);
+
+      if (Array.isArray(result)) {
+        onMessage(result);
+      } else {
+        var pathToRead = result;
+        var isFile = pathToRead.match(/\S+\.\S+$/g);
+
+        await readFile(pathToRead)
+          .then(function (res) {
+            if (isFile) {
+              if (
+                pathToRead.includes(".png") ||
+                pathToRead.includes(".jpg") ||
+                pathToRead.includes(".jpeg")
+              ) {
+                arrayBufferToBase64(
+                  new Uint8Array(res),
+                  function (base64) {
+                    var src = "data:image/png;base64," + base64;
+                    insecureRenderHtml('<img src="' + src + '"></img>');
+                  }
+                );
+              } else {
+                // Convert byte array to UTF-8 string
+                const decoder = new TextDecoder('utf-8');
+                const text = decoder.decode(new Uint8Array(res));
+                onMessage(text);
+              }
+            } else {
+              onMessage(res);
+          }
+        })
+      }
+    } catch(exception) {
+      onMessage(exception)
+    }
  }

  function saveDialog() {
@@ -154,6 +161,13 @@
    <option value="document">Document</option>
  </select>
 </div>
+<div>
+  <label for="dialog-file-access-mode">File Access Mode:</label>
+  <select id="dialog-file-access-mode" bind:value={fileAccessMode}>
+    <option value="copy">Copy</option>
+    <option value="scoped">Scoped</option>
+  </select>
+</div>
 <br />

 <div class="flex flex-wrap flex-col md:flex-row gap-2 children:flex-shrink-0">
@@ -1,54 +0,0 @@
-<script>
-  import { onMount } from 'svelte'
-  import { getString, setString } from '@tauri-apps/plugin-secure-storage'
-
-  export let onMessage
-
-  let key
-  let value
-  let output
-
-  async function read(key) {
-    try {
-      output = await getString(key)
-    } catch (error) {
-      onMessage(error)
-    }
-  }
-
-  async function write(key, value) {
-    try {
-      await setString(key, value)
-    } catch (error) {
-      onMessage(error)
-    }
-  }
-
-  function reset() {
-    output = ''
-  }
-</script>
-
-<div class="flex flex-col childre:grow gap-1">
-  <div class="flex flex-col flex-row-md gap-4">
-    <div class="flex items-center gap-1">
-      Key:
-      <input class="grow input" bind:value={key} />
-    </div>
-
-    <div class="flex items-center gap-1">
-      Value:
-      <input class="grow input" bind:value />
-    </div>
-
-    <div>
-      <button class="btn" on:click={() => write(key, value)}>Write</button>
-      <button class="btn" on:click={() => read(key)}>Read</button>
-      <button class="btn" on:click={() => reset()}>Reset Output</button>
-    </div>
-  </div>
-
-  <div>
-    Output: {output}
-  </div>
-</div>
@@ -11,19 +11,18 @@
    "example:api:dev": "pnpm run --filter \"api\" tauri dev"
  },
  "devDependencies": {
-    "@eslint/js": "9.39.1",
+    "@eslint/js": "10.0.1",
    "@rollup/plugin-node-resolve": "16.0.3",
-    "@rollup/plugin-terser": "0.4.4",
+    "@rollup/plugin-terser": "1.0.0",
    "@rollup/plugin-typescript": "12.3.0",
-    "covector": "^0.12.4",
-    "eslint": "9.39.1",
+    "eslint": "10.0.2",
    "eslint-config-prettier": "10.1.8",
-    "eslint-plugin-security": "3.0.1",
-    "prettier": "3.6.2",
-    "rollup": "4.53.2",
+    "eslint-plugin-security": "4.0.0",
+    "prettier": "3.8.1",
+    "rollup": "4.59.0",
    "tslib": "2.8.1",
    "typescript": "5.9.3",
-    "typescript-eslint": "8.47.0"
+    "typescript-eslint": "8.56.1"
  },
  "minimumReleaseAge": 4320,
  "pnpm": {
@@ -24,6 +24,6 @@
    "LICENSE"
  ],
  "dependencies": {
-    "@tauri-apps/api": "^2.8.0"
+    "@tauri-apps/api": "^2.10.1"
  }
 }
@@ -24,20 +24,17 @@
    },
    "permission": {
      "description": "A list of inlined permissions",
-      "default": [],
      "type": "array",
      "items": {
        "$ref": "#/definitions/Permission"
-      }
+      },
+      "default": []
    }
  },
  "definitions": {
    "DefaultPermission": {
      "description": "The default permission set of the plugin.\n\nWorks similarly to a permission with the \"default\" identifier.",
      "type": "object",
-      "required": [
-        "permissions"
-      ],
      "properties": {
        "version": {
          "description": "The version of the permission.",
@@ -46,10 +43,10 @@
            "null"
          ],
          "format": "uint64",
-          "minimum": 1.0
+          "minimum": 1
        },
        "description": {
-          "description": "Human-readable description of what the permission does. Tauri convention is to use `<h4>` headings in markdown content for Tauri documentation generation purposes.",
+          "description": "Human-readable description of what the permission does.\nTauri convention is to use `<h4>` headings in markdown content\nfor Tauri documentation generation purposes.",
          "type": [
            "string",
            "null"
@@ -62,16 +59,14 @@
            "type": "string"
          }
        }
-      }
+      },
+      "required": [
+        "permissions"
+      ]
    },
    "PermissionSet": {
      "description": "A set of direct permissions grouped together under a new name.",
      "type": "object",
-      "required": [
-        "description",
-        "identifier",
-        "permissions"
-      ],
      "properties": {
        "identifier": {
          "description": "A unique identifier for the permission.",
@@ -85,17 +80,19 @@
          "description": "All permissions this set contains.",
          "type": "array",
          "items": {
-            "$ref": "#/definitions/PermissionKind"
+            "type": "string"
          }
        }
-      }
+      },
+      "required": [
+        "identifier",
+        "description",
+        "permissions"
+      ]
    },
    "Permission": {
      "description": "Descriptions of explicit privileges of commands.\n\nIt can enable commands to be accessible in the frontend of the application.\n\nIf the scope is defined it can be used to fine grain control the access of individual or multiple commands.",
      "type": "object",
-      "required": [
-        "identifier"
-      ],
      "properties": {
        "version": {
          "description": "The version of the permission.",
@@ -104,14 +101,14 @@
            "null"
          ],
          "format": "uint64",
-          "minimum": 1.0
+          "minimum": 1
        },
        "identifier": {
          "description": "A unique identifier for the permission.",
          "type": "string"
        },
        "description": {
-          "description": "Human-readable description of what the permission does. Tauri internal convention is to use `<h4>` headings in markdown content for Tauri documentation generation purposes.",
+          "description": "Human-readable description of what the permission does.\nTauri internal convention is to use `<h4>` headings in markdown content\nfor Tauri documentation generation purposes.",
          "type": [
            "string",
            "null"
@@ -147,7 +144,10 @@
            "$ref": "#/definitions/Target"
          }
        }
-      }
+      },
+      "required": [
+        "identifier"
+      ]
    },
    "Commands": {
      "description": "Allowed and denied commands inside a permission.\n\nIf two commands clash inside of `allow` and `deny`, it should be denied by default.",
@@ -155,24 +155,24 @@
      "properties": {
        "allow": {
          "description": "Allowed command.",
-          "default": [],
          "type": "array",
          "items": {
            "type": "string"
-          }
+          },
+          "default": []
        },
        "deny": {
          "description": "Denied command, which takes priority.",
-          "default": [],
          "type": "array",
          "items": {
            "type": "string"
-          }
+          },
+          "default": []
        }
      }
    },
    "Scopes": {
-      "description": "An argument for fine grained behavior control of Tauri commands.\n\nIt can be of any serde serializable type and is used to allow or prevent certain actions inside a Tauri command. The configured scope is passed to the command and will be enforced by the command implementation.\n\n## Example\n\n```json { \"allow\": [{ \"path\": \"$HOME/**\" }], \"deny\": [{ \"path\": \"$HOME/secret.txt\" }] } ```",
+      "description": "An argument for fine grained behavior control of Tauri commands.\n\nIt can be of any serde serializable type and is used to allow or prevent certain actions inside a Tauri command.\nThe configured scope is passed to the command and will be enforced by the command implementation.\n\n## Example\n\n```json\n{\n  \"allow\": [{ \"path\": \"$HOME/**\" }],\n  \"deny\": [{ \"path\": \"$HOME/secret.txt\" }]\n}\n```",
      "type": "object",
      "properties": {
        "allow": {
@@ -257,84 +257,27 @@
        {
          "description": "MacOS.",
          "type": "string",
-          "enum": [
-            "macOS"
-          ]
+          "const": "macOS"
        },
        {
          "description": "Windows.",
          "type": "string",
-          "enum": [
-            "windows"
-          ]
+          "const": "windows"
        },
        {
          "description": "Linux.",
          "type": "string",
-          "enum": [
-            "linux"
-          ]
+          "const": "linux"
        },
        {
          "description": "Android.",
          "type": "string",
-          "enum": [
-            "android"
-          ]
+          "const": "android"
        },
        {
          "description": "iOS.",
          "type": "string",
-          "enum": [
-            "iOS"
-          ]
-        }
-      ]
-    },
-    "PermissionKind": {
-      "type": "string",
-      "oneOf": [
-        {
-          "description": "Enables the disable command without any pre-configured scope.",
-          "type": "string",
-          "const": "allow-disable",
-          "markdownDescription": "Enables the disable command without any pre-configured scope."
-        },
-        {
-          "description": "Denies the disable command without any pre-configured scope.",
-          "type": "string",
-          "const": "deny-disable",
-          "markdownDescription": "Denies the disable command without any pre-configured scope."
-        },
-        {
-          "description": "Enables the enable command without any pre-configured scope.",
-          "type": "string",
-          "const": "allow-enable",
-          "markdownDescription": "Enables the enable command without any pre-configured scope."
-        },
-        {
-          "description": "Denies the enable command without any pre-configured scope.",
-          "type": "string",
-          "const": "deny-enable",
-          "markdownDescription": "Denies the enable command without any pre-configured scope."
-        },
-        {
-          "description": "Enables the is_enabled command without any pre-configured scope.",
-          "type": "string",
-          "const": "allow-is-enabled",
-          "markdownDescription": "Enables the is_enabled command without any pre-configured scope."
-        },
-        {
-          "description": "Denies the is_enabled command without any pre-configured scope.",
-          "type": "string",
-          "const": "deny-is-enabled",
-          "markdownDescription": "Denies the is_enabled command without any pre-configured scope."
-        },
-        {
-          "description": "This permission set configures if your\r\napplication can enable or disable auto\r\nstarting the application on boot.\r\n\r\n#### Granted Permissions\r\n\r\nIt allows all to check, enable and\r\ndisable the automatic start on boot.\r\n\r\n\n#### This default permission set includes:\n\n- `allow-enable`\n- `allow-disable`\n- `allow-is-enabled`",
-          "type": "string",
-          "const": "default",
-          "markdownDescription": "This permission set configures if your\r\napplication can enable or disable auto\r\nstarting the application on boot.\r\n\r\n#### Granted Permissions\r\n\r\nIt allows all to check, enable and\r\ndisable the automatic start on boot.\r\n\r\n\n#### This default permission set includes:\n\n- `allow-enable`\n- `allow-disable`\n- `allow-is-enabled`"
+          "const": "iOS"
        }
      ]
    }
@@ -1,5 +1,16 @@
 # Changelog

+## \[2.4.4]
+
+- [`82fbb0c7`](https://github.com/tauri-apps/plugins-workspace/commit/82fbb0c790288eca72af9ade13828ded7700ff90) ([#3221](https://github.com/tauri-apps/plugins-workspace/pull/3221)) On iOS, fixed an application crash happening when the scanner was started when user denied permission before.
+- [`b60dd887`](https://github.com/tauri-apps/plugins-workspace/commit/b60dd88702a2be2af942a3d104d728970a4c42d6) ([#3223](https://github.com/tauri-apps/plugins-workspace/pull/3223)) On iOS, start the scanning session on a separate thread to fix performance issues.
+- [`c27af912`](https://github.com/tauri-apps/plugins-workspace/commit/c27af9128d6cc7a2424ec49e98005e68b2d0eb1a) ([#3222](https://github.com/tauri-apps/plugins-workspace/pull/3222)) On iOS, fixed an application crash happening when the scanner was started on the iOS Simulator (no camera available).
+
+## \[2.4.3]
+
+- [`d8bfe61f`](https://github.com/tauri-apps/plugins-workspace/commit/d8bfe61f20f235314bad93a9c50d8b7f3eade734) ([#3121](https://github.com/tauri-apps/plugins-workspace/pull/3121) by [@NKIPSC](https://github.com/tauri-apps/plugins-workspace/../../NKIPSC)) Remove unnecessary checks on Android when requesting camera permission.
+- [`631d0e25`](https://github.com/tauri-apps/plugins-workspace/commit/631d0e256a37946b6a9102ca35511abfbebb92c5) ([#2440](https://github.com/tauri-apps/plugins-workspace/pull/2440) by [@kingsword09](https://github.com/tauri-apps/plugins-workspace/../../kingsword09)) Fix the `cameraView` is not removed after scanning in iOS.
+
 ## \[2.4.2]

 - [`93426f85`](https://github.com/tauri-apps/plugins-workspace/commit/93426f85120f49beb9f40222bff45185a32d54a9) Fixed an issue that caused docs.rs builds to fail. No user facing changes.
@@ -1,6 +1,6 @@
 [package]
 name = "tauri-plugin-barcode-scanner"
-version = "2.4.2"
+version = "2.4.4"
 description = "Scan QR codes, EAN-13 and other kinds of barcodes on Android and iOS"
 edition = { workspace = true }
 authors = { workspace = true }
@@ -31,4 +31,4 @@ log = { workspace = true }
 thiserror = { workspace = true }

 [target.'cfg(target_os = "ios")'.dependencies]
-tauri = { workspace = true, features = ["wry"] }
+tauri = { workspace = true }
@@ -54,7 +54,6 @@ import java.util.concurrent.ExecutionException

 private const val PERMISSION_ALIAS_CAMERA = "camera"
 private const val PERMISSION_NAME = Manifest.permission.CAMERA
-private const val PREFS_PERMISSION_FIRST_TIME_ASKING = "PREFS_PERMISSION_FIRST_TIME_ASKING"

@InvokeArg
 class ScanOptions {
@@ -354,17 +353,6 @@ class BarcodeScannerPlugin(private val activity: Activity) : Plugin(activity),
        }
    }

-    private fun markFirstPermissionRequest() {
-        val sharedPreference: SharedPreferences =
-            activity.getSharedPreferences(PREFS_PERMISSION_FIRST_TIME_ASKING, MODE_PRIVATE)
-        sharedPreference.edit().putBoolean(PERMISSION_NAME, false).apply()
-    }
-
-    private fun firstPermissionRequest(): Boolean {
-        return activity.getSharedPreferences(PREFS_PERMISSION_FIRST_TIME_ASKING, MODE_PRIVATE)
-            .getBoolean(PERMISSION_NAME, true)
-    }
-
    @SuppressLint("ObsoleteSdkInt")
    @PermissionCallback
    fun cameraPermissionCallback(invoke: Invoke) {
@@ -380,9 +368,7 @@ class BarcodeScannerPlugin(private val activity: Activity) : Plugin(activity),
            requestPermissionResponse.put(PERMISSION_ALIAS_CAMERA, PermissionState.GRANTED)
        } else {
            if (Build.VERSION.SDK_INT >= Build.VERSION_CODES.M) {
-                if (!activity.shouldShowRequestPermissionRationale(PERMISSION_NAME)) {
-                    requestPermissionResponse.put(PERMISSION_ALIAS_CAMERA, PermissionState.DENIED)
-                }
+                requestPermissionResponse.put(PERMISSION_ALIAS_CAMERA, PermissionState.DENIED)
            } else {
                requestPermissionResponse.put(PERMISSION_ALIAS_CAMERA, PermissionState.GRANTED)
            }
@@ -401,20 +387,12 @@ class BarcodeScannerPlugin(private val activity: Activity) : Plugin(activity),
            requestPermissionResponse.put(PERMISSION_ALIAS_CAMERA, PermissionState.GRANTED)
        } else {
            if (Build.VERSION.SDK_INT >= Build.VERSION_CODES.M) {
-                if (firstPermissionRequest() || activity.shouldShowRequestPermissionRationale(
-                        PERMISSION_NAME
-                    )
-                ) {
-                    markFirstPermissionRequest()
-                    requestPermissionForAlias(
-                        PERMISSION_ALIAS_CAMERA,
-                        invoke,
-                        "cameraPermissionCallback"
-                    )
-                    return
-                } else {
-                    requestPermissionResponse.put(PERMISSION_ALIAS_CAMERA, PermissionState.DENIED)
-                }
+                requestPermissionForAlias(
+                    PERMISSION_ALIAS_CAMERA,
+                    invoke,
+                    "cameraPermissionCallback"
+                )
+                return
            } else {
                requestPermissionResponse.put(PERMISSION_ALIAS_CAMERA, PermissionState.GRANTED)
            }
@@ -261,27 +261,34 @@ class BarcodeScannerPlugin: Plugin, AVCaptureMetadataOutputObjectsDelegate {
  }

  private func runScanner(_ invoke: Invoke, args: ScanOptions) {
+    if getPermissionState() != "granted" {
+      invoke.reject("Camera permission denied or not yet requested")
+      return
+    }
+
    scanFormats = [AVMetadataObject.ObjectType]()

    (args.formats ?? []).forEach { format in
-        if let formatValue = format.value {
-            scanFormats.append(formatValue)
-        } else {
-            invoke.reject("Unsupported barcode format on this iOS version: \(format)")
-            return
-        }
+      if let formatValue = format.value {
+        scanFormats.append(formatValue)
+      } else {
+        invoke.reject("Unsupported barcode format on this iOS version: \(format)")
+        return
+      }
    }

    if scanFormats.isEmpty {
-        for supportedFormat in SupportedFormat.allCases {
-            if let formatValue = supportedFormat.value {
-                scanFormats.append(formatValue)
-            }
+      for supportedFormat in SupportedFormat.allCases {
+        if let formatValue = supportedFormat.value {
+          scanFormats.append(formatValue)
        }
+      }
    }

    self.metaOutput!.metadataObjectTypes = self.scanFormats
-    self.captureSession!.startRunning()
+    DispatchQueue.main.async {
+      self.captureSession!.startRunning()
+    }

    self.isScanning = true
  }
@@ -298,6 +305,13 @@ class BarcodeScannerPlugin: Plugin, AVCaptureMetadataOutputObjectsDelegate {
      return
    }

+    // Check if camera is available on this platform (iOS simulator doesn't have cameras)
+    let availableVideoDevices = discoverCaptureDevices()
+    if availableVideoDevices.isEmpty {
+      invoke.reject("No camera available on this device (e.g., iOS Simulator)")
+      return
+    }
+
    var iOS14min: Bool = false
    if #available(iOS 14.0, *) { iOS14min = true }
    if !iOS14min && self.getPermissionState() != "granted" {
@@ -1,6 +1,6 @@
 {
  "name": "@tauri-apps/plugin-barcode-scanner",
-  "version": "2.4.2",
+  "version": "2.4.4",
  "description": "Scan QR codes, EAN-13 and other kinds of barcodes on Android and iOS",
  "license": "MIT OR Apache-2.0",
  "authors": [
@@ -25,6 +25,6 @@
    "LICENSE"
  ],
  "dependencies": {
-    "@tauri-apps/api": "^2.8.0"
+    "@tauri-apps/api": "^2.10.1"
  }
 }
@@ -24,20 +24,17 @@
    },
    "permission": {
      "description": "A list of inlined permissions",
-      "default": [],
      "type": "array",
      "items": {
        "$ref": "#/definitions/Permission"
-      }
+      },
+      "default": []
    }
  },
  "definitions": {
    "DefaultPermission": {
      "description": "The default permission set of the plugin.\n\nWorks similarly to a permission with the \"default\" identifier.",
      "type": "object",
-      "required": [
-        "permissions"
-      ],
      "properties": {
        "version": {
          "description": "The version of the permission.",
@@ -46,10 +43,10 @@
            "null"
          ],
          "format": "uint64",
-          "minimum": 1.0
+          "minimum": 1
        },
        "description": {
-          "description": "Human-readable description of what the permission does. Tauri convention is to use `<h4>` headings in markdown content for Tauri documentation generation purposes.",
+          "description": "Human-readable description of what the permission does.\nTauri convention is to use `<h4>` headings in markdown content\nfor Tauri documentation generation purposes.",
          "type": [
            "string",
            "null"
@@ -62,16 +59,14 @@
            "type": "string"
          }
        }
-      }
+      },
+      "required": [
+        "permissions"
+      ]
    },
    "PermissionSet": {
      "description": "A set of direct permissions grouped together under a new name.",
      "type": "object",
-      "required": [
-        "description",
-        "identifier",
-        "permissions"
-      ],
      "properties": {
        "identifier": {
          "description": "A unique identifier for the permission.",
@@ -85,17 +80,19 @@
          "description": "All permissions this set contains.",
          "type": "array",
          "items": {
-            "$ref": "#/definitions/PermissionKind"
+            "type": "string"
          }
        }
-      }
+      },
+      "required": [
+        "identifier",
+        "description",
+        "permissions"
+      ]
    },
    "Permission": {
      "description": "Descriptions of explicit privileges of commands.\n\nIt can enable commands to be accessible in the frontend of the application.\n\nIf the scope is defined it can be used to fine grain control the access of individual or multiple commands.",
      "type": "object",
-      "required": [
-        "identifier"
-      ],
      "properties": {
        "version": {
          "description": "The version of the permission.",
@@ -104,14 +101,14 @@
            "null"
          ],
          "format": "uint64",
-          "minimum": 1.0
+          "minimum": 1
        },
        "identifier": {
          "description": "A unique identifier for the permission.",
          "type": "string"
        },
        "description": {
-          "description": "Human-readable description of what the permission does. Tauri internal convention is to use `<h4>` headings in markdown content for Tauri documentation generation purposes.",
+          "description": "Human-readable description of what the permission does.\nTauri internal convention is to use `<h4>` headings in markdown content\nfor Tauri documentation generation purposes.",
          "type": [
            "string",
            "null"
@@ -147,7 +144,10 @@
            "$ref": "#/definitions/Target"
          }
        }
-      }
+      },
+      "required": [
+        "identifier"
+      ]
    },
    "Commands": {
      "description": "Allowed and denied commands inside a permission.\n\nIf two commands clash inside of `allow` and `deny`, it should be denied by default.",
@@ -155,24 +155,24 @@
      "properties": {
        "allow": {
          "description": "Allowed command.",
-          "default": [],
          "type": "array",
          "items": {
            "type": "string"
-          }
+          },
+          "default": []
        },
        "deny": {
          "description": "Denied command, which takes priority.",
-          "default": [],
          "type": "array",
          "items": {
            "type": "string"
-          }
+          },
+          "default": []
        }
      }
    },
    "Scopes": {
-      "description": "An argument for fine grained behavior control of Tauri commands.\n\nIt can be of any serde serializable type and is used to allow or prevent certain actions inside a Tauri command. The configured scope is passed to the command and will be enforced by the command implementation.\n\n## Example\n\n```json { \"allow\": [{ \"path\": \"$HOME/**\" }], \"deny\": [{ \"path\": \"$HOME/secret.txt\" }] } ```",
+      "description": "An argument for fine grained behavior control of Tauri commands.\n\nIt can be of any serde serializable type and is used to allow or prevent certain actions inside a Tauri command.\nThe configured scope is passed to the command and will be enforced by the command implementation.\n\n## Example\n\n```json\n{\n  \"allow\": [{ \"path\": \"$HOME/**\" }],\n  \"deny\": [{ \"path\": \"$HOME/secret.txt\" }]\n}\n```",
      "type": "object",
      "properties": {
        "allow": {
@@ -257,120 +257,27 @@
        {
          "description": "MacOS.",
          "type": "string",
-          "enum": [
-            "macOS"
-          ]
+          "const": "macOS"
        },
        {
          "description": "Windows.",
          "type": "string",
-          "enum": [
-            "windows"
-          ]
+          "const": "windows"
        },
        {
          "description": "Linux.",
          "type": "string",
-          "enum": [
-            "linux"
-          ]
+          "const": "linux"
        },
        {
          "description": "Android.",
          "type": "string",
-          "enum": [
-            "android"
-          ]
+          "const": "android"
        },
        {
          "description": "iOS.",
          "type": "string",
-          "enum": [
-            "iOS"
-          ]
-        }
-      ]
-    },
-    "PermissionKind": {
-      "type": "string",
-      "oneOf": [
-        {
-          "description": "Enables the cancel command without any pre-configured scope.",
-          "type": "string",
-          "const": "allow-cancel",
-          "markdownDescription": "Enables the cancel command without any pre-configured scope."
-        },
-        {
-          "description": "Denies the cancel command without any pre-configured scope.",
-          "type": "string",
-          "const": "deny-cancel",
-          "markdownDescription": "Denies the cancel command without any pre-configured scope."
-        },
-        {
-          "description": "Enables the check_permissions command without any pre-configured scope.",
-          "type": "string",
-          "const": "allow-check-permissions",
-          "markdownDescription": "Enables the check_permissions command without any pre-configured scope."
-        },
-        {
-          "description": "Denies the check_permissions command without any pre-configured scope.",
-          "type": "string",
-          "const": "deny-check-permissions",
-          "markdownDescription": "Denies the check_permissions command without any pre-configured scope."
-        },
-        {
-          "description": "Enables the open_app_settings command without any pre-configured scope.",
-          "type": "string",
-          "const": "allow-open-app-settings",
-          "markdownDescription": "Enables the open_app_settings command without any pre-configured scope."
-        },
-        {
-          "description": "Denies the open_app_settings command without any pre-configured scope.",
-          "type": "string",
-          "const": "deny-open-app-settings",
-          "markdownDescription": "Denies the open_app_settings command without any pre-configured scope."
-        },
-        {
-          "description": "Enables the request_permissions command without any pre-configured scope.",
-          "type": "string",
-          "const": "allow-request-permissions",
-          "markdownDescription": "Enables the request_permissions command without any pre-configured scope."
-        },
-        {
-          "description": "Denies the request_permissions command without any pre-configured scope.",
-          "type": "string",
-          "const": "deny-request-permissions",
-          "markdownDescription": "Denies the request_permissions command without any pre-configured scope."
-        },
-        {
-          "description": "Enables the scan command without any pre-configured scope.",
-          "type": "string",
-          "const": "allow-scan",
-          "markdownDescription": "Enables the scan command without any pre-configured scope."
-        },
-        {
-          "description": "Denies the scan command without any pre-configured scope.",
-          "type": "string",
-          "const": "deny-scan",
-          "markdownDescription": "Denies the scan command without any pre-configured scope."
-        },
-        {
-          "description": "Enables the vibrate command without any pre-configured scope.",
-          "type": "string",
-          "const": "allow-vibrate",
-          "markdownDescription": "Enables the vibrate command without any pre-configured scope."
-        },
-        {
-          "description": "Denies the vibrate command without any pre-configured scope.",
-          "type": "string",
-          "const": "deny-vibrate",
-          "markdownDescription": "Denies the vibrate command without any pre-configured scope."
-        },
-        {
-          "description": "This permission set configures which\nbarcode scanning features are by default exposed.\n\n#### Granted Permissions\n\nIt allows all barcode related features.\n\n\n#### This default permission set includes:\n\n- `allow-cancel`\n- `allow-check-permissions`\n- `allow-open-app-settings`\n- `allow-request-permissions`\n- `allow-scan`\n- `allow-vibrate`",
-          "type": "string",
-          "const": "default",
-          "markdownDescription": "This permission set configures which\nbarcode scanning features are by default exposed.\n\n#### Granted Permissions\n\nIt allows all barcode related features.\n\n\n#### This default permission set includes:\n\n- `allow-cancel`\n- `allow-check-permissions`\n- `allow-open-app-settings`\n- `allow-request-permissions`\n- `allow-scan`\n- `allow-vibrate`"
+          "const": "iOS"
        }
      ]
    }
@@ -25,6 +25,6 @@
    "LICENSE"
  ],
  "dependencies": {
-    "@tauri-apps/api": "^2.8.0"
+    "@tauri-apps/api": "^2.10.1"
  }
 }
@@ -24,20 +24,17 @@
    },
    "permission": {
      "description": "A list of inlined permissions",
-      "default": [],
      "type": "array",
      "items": {
        "$ref": "#/definitions/Permission"
-      }
+      },
+      "default": []
    }
  },
  "definitions": {
    "DefaultPermission": {
      "description": "The default permission set of the plugin.\n\nWorks similarly to a permission with the \"default\" identifier.",
      "type": "object",
-      "required": [
-        "permissions"
-      ],
      "properties": {
        "version": {
          "description": "The version of the permission.",
@@ -46,10 +43,10 @@
            "null"
          ],
          "format": "uint64",
-          "minimum": 1.0
+          "minimum": 1
        },
        "description": {
-          "description": "Human-readable description of what the permission does. Tauri convention is to use `<h4>` headings in markdown content for Tauri documentation generation purposes.",
+          "description": "Human-readable description of what the permission does.\nTauri convention is to use `<h4>` headings in markdown content\nfor Tauri documentation generation purposes.",
          "type": [
            "string",
            "null"
@@ -62,16 +59,14 @@
            "type": "string"
          }
        }
-      }
+      },
+      "required": [
+        "permissions"
+      ]
    },
    "PermissionSet": {
      "description": "A set of direct permissions grouped together under a new name.",
      "type": "object",
-      "required": [
-        "description",
-        "identifier",
-        "permissions"
-      ],
      "properties": {
        "identifier": {
          "description": "A unique identifier for the permission.",
@@ -85,17 +80,19 @@
          "description": "All permissions this set contains.",
          "type": "array",
          "items": {
-            "$ref": "#/definitions/PermissionKind"
+            "type": "string"
          }
        }
-      }
+      },
+      "required": [
+        "identifier",
+        "description",
+        "permissions"
+      ]
    },
    "Permission": {
      "description": "Descriptions of explicit privileges of commands.\n\nIt can enable commands to be accessible in the frontend of the application.\n\nIf the scope is defined it can be used to fine grain control the access of individual or multiple commands.",
      "type": "object",
-      "required": [
-        "identifier"
-      ],
      "properties": {
        "version": {
          "description": "The version of the permission.",
@@ -104,14 +101,14 @@
            "null"
          ],
          "format": "uint64",
-          "minimum": 1.0
+          "minimum": 1
        },
        "identifier": {
          "description": "A unique identifier for the permission.",
          "type": "string"
        },
        "description": {
-          "description": "Human-readable description of what the permission does. Tauri internal convention is to use `<h4>` headings in markdown content for Tauri documentation generation purposes.",
+          "description": "Human-readable description of what the permission does.\nTauri internal convention is to use `<h4>` headings in markdown content\nfor Tauri documentation generation purposes.",
          "type": [
            "string",
            "null"
@@ -147,7 +144,10 @@
            "$ref": "#/definitions/Target"
          }
        }
-      }
+      },
+      "required": [
+        "identifier"
+      ]
    },
    "Commands": {
      "description": "Allowed and denied commands inside a permission.\n\nIf two commands clash inside of `allow` and `deny`, it should be denied by default.",
@@ -155,24 +155,24 @@
      "properties": {
        "allow": {
          "description": "Allowed command.",
-          "default": [],
          "type": "array",
          "items": {
            "type": "string"
-          }
+          },
+          "default": []
        },
        "deny": {
          "description": "Denied command, which takes priority.",
-          "default": [],
          "type": "array",
          "items": {
            "type": "string"
-          }
+          },
+          "default": []
        }
      }
    },
    "Scopes": {
-      "description": "An argument for fine grained behavior control of Tauri commands.\n\nIt can be of any serde serializable type and is used to allow or prevent certain actions inside a Tauri command. The configured scope is passed to the command and will be enforced by the command implementation.\n\n## Example\n\n```json { \"allow\": [{ \"path\": \"$HOME/**\" }], \"deny\": [{ \"path\": \"$HOME/secret.txt\" }] } ```",
+      "description": "An argument for fine grained behavior control of Tauri commands.\n\nIt can be of any serde serializable type and is used to allow or prevent certain actions inside a Tauri command.\nThe configured scope is passed to the command and will be enforced by the command implementation.\n\n## Example\n\n```json\n{\n  \"allow\": [{ \"path\": \"$HOME/**\" }],\n  \"deny\": [{ \"path\": \"$HOME/secret.txt\" }]\n}\n```",
      "type": "object",
      "properties": {
        "allow": {
@@ -257,72 +257,27 @@
        {
          "description": "MacOS.",
          "type": "string",
-          "enum": [
-            "macOS"
-          ]
+          "const": "macOS"
        },
        {
          "description": "Windows.",
          "type": "string",
-          "enum": [
-            "windows"
-          ]
+          "const": "windows"
        },
        {
          "description": "Linux.",
          "type": "string",
-          "enum": [
-            "linux"
-          ]
+          "const": "linux"
        },
        {
          "description": "Android.",
          "type": "string",
-          "enum": [
-            "android"
-          ]
+          "const": "android"
        },
        {
          "description": "iOS.",
          "type": "string",
-          "enum": [
-            "iOS"
-          ]
-        }
-      ]
-    },
-    "PermissionKind": {
-      "type": "string",
-      "oneOf": [
-        {
-          "description": "Enables the authenticate command without any pre-configured scope.",
-          "type": "string",
-          "const": "allow-authenticate",
-          "markdownDescription": "Enables the authenticate command without any pre-configured scope."
-        },
-        {
-          "description": "Denies the authenticate command without any pre-configured scope.",
-          "type": "string",
-          "const": "deny-authenticate",
-          "markdownDescription": "Denies the authenticate command without any pre-configured scope."
-        },
-        {
-          "description": "Enables the status command without any pre-configured scope.",
-          "type": "string",
-          "const": "allow-status",
-          "markdownDescription": "Enables the status command without any pre-configured scope."
-        },
-        {
-          "description": "Denies the status command without any pre-configured scope.",
-          "type": "string",
-          "const": "deny-status",
-          "markdownDescription": "Denies the status command without any pre-configured scope."
-        },
-        {
-          "description": "This permission set configures which\r\nbiometric features are by default exposed.\r\n\r\n#### Granted Permissions\r\n\r\nIt allows acccess to all biometric commands.\r\n\r\n\n#### This default permission set includes:\n\n- `allow-authenticate`\n- `allow-status`",
-          "type": "string",
-          "const": "default",
-          "markdownDescription": "This permission set configures which\r\nbiometric features are by default exposed.\r\n\r\n#### Granted Permissions\r\n\r\nIt allows acccess to all biometric commands.\r\n\r\n\n#### This default permission set includes:\n\n- `allow-authenticate`\n- `allow-status`"
+          "const": "iOS"
        }
      ]
    }
@@ -24,6 +24,6 @@
    "LICENSE"
  ],
  "dependencies": {
-    "@tauri-apps/api": "^2.8.0"
+    "@tauri-apps/api": "^2.10.1"
  }
 }
@@ -24,20 +24,17 @@
    },
    "permission": {
      "description": "A list of inlined permissions",
-      "default": [],
      "type": "array",
      "items": {
        "$ref": "#/definitions/Permission"
-      }
+      },
+      "default": []
    }
  },
  "definitions": {
    "DefaultPermission": {
      "description": "The default permission set of the plugin.\n\nWorks similarly to a permission with the \"default\" identifier.",
      "type": "object",
-      "required": [
-        "permissions"
-      ],
      "properties": {
        "version": {
          "description": "The version of the permission.",
@@ -46,10 +43,10 @@
            "null"
          ],
          "format": "uint64",
-          "minimum": 1.0
+          "minimum": 1
        },
        "description": {
-          "description": "Human-readable description of what the permission does. Tauri convention is to use `<h4>` headings in markdown content for Tauri documentation generation purposes.",
+          "description": "Human-readable description of what the permission does.\nTauri convention is to use `<h4>` headings in markdown content\nfor Tauri documentation generation purposes.",
          "type": [
            "string",
            "null"
@@ -62,16 +59,14 @@
            "type": "string"
          }
        }
-      }
+      },
+      "required": [
+        "permissions"
+      ]
    },
    "PermissionSet": {
      "description": "A set of direct permissions grouped together under a new name.",
      "type": "object",
-      "required": [
-        "description",
-        "identifier",
-        "permissions"
-      ],
      "properties": {
        "identifier": {
          "description": "A unique identifier for the permission.",
@@ -85,17 +80,19 @@
          "description": "All permissions this set contains.",
          "type": "array",
          "items": {
-            "$ref": "#/definitions/PermissionKind"
+            "type": "string"
          }
        }
-      }
+      },
+      "required": [
+        "identifier",
+        "description",
+        "permissions"
+      ]
    },
    "Permission": {
      "description": "Descriptions of explicit privileges of commands.\n\nIt can enable commands to be accessible in the frontend of the application.\n\nIf the scope is defined it can be used to fine grain control the access of individual or multiple commands.",
      "type": "object",
-      "required": [
-        "identifier"
-      ],
      "properties": {
        "version": {
          "description": "The version of the permission.",
@@ -104,14 +101,14 @@
            "null"
          ],
          "format": "uint64",
-          "minimum": 1.0
+          "minimum": 1
        },
        "identifier": {
          "description": "A unique identifier for the permission.",
          "type": "string"
        },
        "description": {
-          "description": "Human-readable description of what the permission does. Tauri internal convention is to use `<h4>` headings in markdown content for Tauri documentation generation purposes.",
+          "description": "Human-readable description of what the permission does.\nTauri internal convention is to use `<h4>` headings in markdown content\nfor Tauri documentation generation purposes.",
          "type": [
            "string",
            "null"
@@ -147,7 +144,10 @@
            "$ref": "#/definitions/Target"
          }
        }
-      }
+      },
+      "required": [
+        "identifier"
+      ]
    },
    "Commands": {
      "description": "Allowed and denied commands inside a permission.\n\nIf two commands clash inside of `allow` and `deny`, it should be denied by default.",
@@ -155,24 +155,24 @@
      "properties": {
        "allow": {
          "description": "Allowed command.",
-          "default": [],
          "type": "array",
          "items": {
            "type": "string"
-          }
+          },
+          "default": []
        },
        "deny": {
          "description": "Denied command, which takes priority.",
-          "default": [],
          "type": "array",
          "items": {
            "type": "string"
-          }
+          },
+          "default": []
        }
      }
    },
    "Scopes": {
-      "description": "An argument for fine grained behavior control of Tauri commands.\n\nIt can be of any serde serializable type and is used to allow or prevent certain actions inside a Tauri command. The configured scope is passed to the command and will be enforced by the command implementation.\n\n## Example\n\n```json { \"allow\": [{ \"path\": \"$HOME/**\" }], \"deny\": [{ \"path\": \"$HOME/secret.txt\" }] } ```",
+      "description": "An argument for fine grained behavior control of Tauri commands.\n\nIt can be of any serde serializable type and is used to allow or prevent certain actions inside a Tauri command.\nThe configured scope is passed to the command and will be enforced by the command implementation.\n\n## Example\n\n```json\n{\n  \"allow\": [{ \"path\": \"$HOME/**\" }],\n  \"deny\": [{ \"path\": \"$HOME/secret.txt\" }]\n}\n```",
      "type": "object",
      "properties": {
        "allow": {
@@ -257,60 +257,27 @@
        {
          "description": "MacOS.",
          "type": "string",
-          "enum": [
-            "macOS"
-          ]
+          "const": "macOS"
        },
        {
          "description": "Windows.",
          "type": "string",
-          "enum": [
-            "windows"
-          ]
+          "const": "windows"
        },
        {
          "description": "Linux.",
          "type": "string",
-          "enum": [
-            "linux"
-          ]
+          "const": "linux"
        },
        {
          "description": "Android.",
          "type": "string",
-          "enum": [
-            "android"
-          ]
+          "const": "android"
        },
        {
          "description": "iOS.",
          "type": "string",
-          "enum": [
-            "iOS"
-          ]
-        }
-      ]
-    },
-    "PermissionKind": {
-      "type": "string",
-      "oneOf": [
-        {
-          "description": "Enables the cli_matches command without any pre-configured scope.",
-          "type": "string",
-          "const": "allow-cli-matches",
-          "markdownDescription": "Enables the cli_matches command without any pre-configured scope."
-        },
-        {
-          "description": "Denies the cli_matches command without any pre-configured scope.",
-          "type": "string",
-          "const": "deny-cli-matches",
-          "markdownDescription": "Denies the cli_matches command without any pre-configured scope."
-        },
-        {
-          "description": "Allows reading the CLI matches\n#### This default permission set includes:\n\n- `allow-cli-matches`",
-          "type": "string",
-          "const": "default",
-          "markdownDescription": "Allows reading the CLI matches\n#### This default permission set includes:\n\n- `allow-cli-matches`"
+          "const": "iOS"
        }
      ]
    }
@@ -32,7 +32,7 @@ log = { workspace = true }
 thiserror = { workspace = true }

 [target.'cfg(target_os = "ios")'.dependencies]
-tauri = { workspace = true, features = ["wry"] }
+tauri = { workspace = true }

 [target."cfg(any(target_os = \"macos\", windows, target_os = \"linux\", target_os = \"dragonfly\", target_os = \"freebsd\", target_os = \"openbsd\", target_os = \"netbsd\"))".dependencies]
 arboard = { version = "3", features = ["wayland-data-control"] }
@@ -24,6 +24,6 @@
    "LICENSE"
  ],
  "dependencies": {
-    "@tauri-apps/api": "^2.8.0"
+    "@tauri-apps/api": "^2.10.1"
  }
 }
@@ -1,7 +1,7 @@
 ## Default Permission

 No features are enabled by default, as we believe
-the clipboard can be inherently dangerous and it is
+the clipboard can be inherently dangerous and it is 
 application specific if read and/or write access is needed.

 Clipboard interaction needs to be explicitly enabled.
@@ -2,7 +2,7 @@
 [default]
 description = """
 No features are enabled by default, as we believe
-the clipboard can be inherently dangerous and it is
+the clipboard can be inherently dangerous and it is 
 application specific if read and/or write access is needed.

 Clipboard interaction needs to be explicitly enabled.
@@ -24,20 +24,17 @@
    },
    "permission": {
      "description": "A list of inlined permissions",
-      "default": [],
      "type": "array",
      "items": {
        "$ref": "#/definitions/Permission"
-      }
+      },
+      "default": []
    }
  },
  "definitions": {
    "DefaultPermission": {
      "description": "The default permission set of the plugin.\n\nWorks similarly to a permission with the \"default\" identifier.",
      "type": "object",
-      "required": [
-        "permissions"
-      ],
      "properties": {
        "version": {
          "description": "The version of the permission.",
@@ -46,10 +43,10 @@
            "null"
          ],
          "format": "uint64",
-          "minimum": 1.0
+          "minimum": 1
        },
        "description": {
-          "description": "Human-readable description of what the permission does. Tauri convention is to use `<h4>` headings in markdown content for Tauri documentation generation purposes.",
+          "description": "Human-readable description of what the permission does.\nTauri convention is to use `<h4>` headings in markdown content\nfor Tauri documentation generation purposes.",
          "type": [
            "string",
            "null"
@@ -62,16 +59,14 @@
            "type": "string"
          }
        }
-      }
+      },
+      "required": [
+        "permissions"
+      ]
    },
    "PermissionSet": {
      "description": "A set of direct permissions grouped together under a new name.",
      "type": "object",
-      "required": [
-        "description",
-        "identifier",
-        "permissions"
-      ],
      "properties": {
        "identifier": {
          "description": "A unique identifier for the permission.",
@@ -85,17 +80,19 @@
          "description": "All permissions this set contains.",
          "type": "array",
          "items": {
-            "$ref": "#/definitions/PermissionKind"
+            "type": "string"
          }
        }
-      }
+      },
+      "required": [
+        "identifier",
+        "description",
+        "permissions"
+      ]
    },
    "Permission": {
      "description": "Descriptions of explicit privileges of commands.\n\nIt can enable commands to be accessible in the frontend of the application.\n\nIf the scope is defined it can be used to fine grain control the access of individual or multiple commands.",
      "type": "object",
-      "required": [
-        "identifier"
-      ],
      "properties": {
        "version": {
          "description": "The version of the permission.",
@@ -104,14 +101,14 @@
            "null"
          ],
          "format": "uint64",
-          "minimum": 1.0
+          "minimum": 1
        },
        "identifier": {
          "description": "A unique identifier for the permission.",
          "type": "string"
        },
        "description": {
-          "description": "Human-readable description of what the permission does. Tauri internal convention is to use `<h4>` headings in markdown content for Tauri documentation generation purposes.",
+          "description": "Human-readable description of what the permission does.\nTauri internal convention is to use `<h4>` headings in markdown content\nfor Tauri documentation generation purposes.",
          "type": [
            "string",
            "null"
@@ -147,7 +144,10 @@
            "$ref": "#/definitions/Target"
          }
        }
-      }
+      },
+      "required": [
+        "identifier"
+      ]
    },
    "Commands": {
      "description": "Allowed and denied commands inside a permission.\n\nIf two commands clash inside of `allow` and `deny`, it should be denied by default.",
@@ -155,24 +155,24 @@
      "properties": {
        "allow": {
          "description": "Allowed command.",
-          "default": [],
          "type": "array",
          "items": {
            "type": "string"
-          }
+          },
+          "default": []
        },
        "deny": {
          "description": "Denied command, which takes priority.",
-          "default": [],
          "type": "array",
          "items": {
            "type": "string"
-          }
+          },
+          "default": []
        }
      }
    },
    "Scopes": {
-      "description": "An argument for fine grained behavior control of Tauri commands.\n\nIt can be of any serde serializable type and is used to allow or prevent certain actions inside a Tauri command. The configured scope is passed to the command and will be enforced by the command implementation.\n\n## Example\n\n```json { \"allow\": [{ \"path\": \"$HOME/**\" }], \"deny\": [{ \"path\": \"$HOME/secret.txt\" }] } ```",
+      "description": "An argument for fine grained behavior control of Tauri commands.\n\nIt can be of any serde serializable type and is used to allow or prevent certain actions inside a Tauri command.\nThe configured scope is passed to the command and will be enforced by the command implementation.\n\n## Example\n\n```json\n{\n  \"allow\": [{ \"path\": \"$HOME/**\" }],\n  \"deny\": [{ \"path\": \"$HOME/secret.txt\" }]\n}\n```",
      "type": "object",
      "properties": {
        "allow": {
@@ -257,120 +257,27 @@
        {
          "description": "MacOS.",
          "type": "string",
-          "enum": [
-            "macOS"
-          ]
+          "const": "macOS"
        },
        {
          "description": "Windows.",
          "type": "string",
-          "enum": [
-            "windows"
-          ]
+          "const": "windows"
        },
        {
          "description": "Linux.",
          "type": "string",
-          "enum": [
-            "linux"
-          ]
+          "const": "linux"
        },
        {
          "description": "Android.",
          "type": "string",
-          "enum": [
-            "android"
-          ]
+          "const": "android"
        },
        {
          "description": "iOS.",
          "type": "string",
-          "enum": [
-            "iOS"
-          ]
-        }
-      ]
-    },
-    "PermissionKind": {
-      "type": "string",
-      "oneOf": [
-        {
-          "description": "Enables the clear command without any pre-configured scope.",
-          "type": "string",
-          "const": "allow-clear",
-          "markdownDescription": "Enables the clear command without any pre-configured scope."
-        },
-        {
-          "description": "Denies the clear command without any pre-configured scope.",
-          "type": "string",
-          "const": "deny-clear",
-          "markdownDescription": "Denies the clear command without any pre-configured scope."
-        },
-        {
-          "description": "Enables the read_image command without any pre-configured scope.",
-          "type": "string",
-          "const": "allow-read-image",
-          "markdownDescription": "Enables the read_image command without any pre-configured scope."
-        },
-        {
-          "description": "Denies the read_image command without any pre-configured scope.",
-          "type": "string",
-          "const": "deny-read-image",
-          "markdownDescription": "Denies the read_image command without any pre-configured scope."
-        },
-        {
-          "description": "Enables the read_text command without any pre-configured scope.",
-          "type": "string",
-          "const": "allow-read-text",
-          "markdownDescription": "Enables the read_text command without any pre-configured scope."
-        },
-        {
-          "description": "Denies the read_text command without any pre-configured scope.",
-          "type": "string",
-          "const": "deny-read-text",
-          "markdownDescription": "Denies the read_text command without any pre-configured scope."
-        },
-        {
-          "description": "Enables the write_html command without any pre-configured scope.",
-          "type": "string",
-          "const": "allow-write-html",
-          "markdownDescription": "Enables the write_html command without any pre-configured scope."
-        },
-        {
-          "description": "Denies the write_html command without any pre-configured scope.",
-          "type": "string",
-          "const": "deny-write-html",
-          "markdownDescription": "Denies the write_html command without any pre-configured scope."
-        },
-        {
-          "description": "Enables the write_image command without any pre-configured scope.",
-          "type": "string",
-          "const": "allow-write-image",
-          "markdownDescription": "Enables the write_image command without any pre-configured scope."
-        },
-        {
-          "description": "Denies the write_image command without any pre-configured scope.",
-          "type": "string",
-          "const": "deny-write-image",
-          "markdownDescription": "Denies the write_image command without any pre-configured scope."
-        },
-        {
-          "description": "Enables the write_text command without any pre-configured scope.",
-          "type": "string",
-          "const": "allow-write-text",
-          "markdownDescription": "Enables the write_text command without any pre-configured scope."
-        },
-        {
-          "description": "Denies the write_text command without any pre-configured scope.",
-          "type": "string",
-          "const": "deny-write-text",
-          "markdownDescription": "Denies the write_text command without any pre-configured scope."
-        },
-        {
-          "description": "No features are enabled by default, as we believe\r\nthe clipboard can be inherently dangerous and it is\r\napplication specific if read and/or write access is needed.\r\n\r\nClipboard interaction needs to be explicitly enabled.\r\n",
-          "type": "string",
-          "const": "default",
-          "markdownDescription": "No features are enabled by default, as we believe\r\nthe clipboard can be inherently dangerous and it is\r\napplication specific if read and/or write access is needed.\r\n\r\nClipboard interaction needs to be explicitly enabled.\r\n"
+          "const": "iOS"
        }
      ]
    }
@@ -1,5 +1,13 @@
 # Changelog

+## \[2.4.7]
+
+- [`8374e997`](https://github.com/tauri-apps/plugins-workspace/commit/8374e997b82c95516fc0c1f6d665d9fc3b52edf8) ([#3258](https://github.com/tauri-apps/plugins-workspace/pull/3258) by [@lucasfernog](https://github.com/tauri-apps/plugins-workspace/../../lucasfernog)) Fix runtime deep link registration failing on Linux when the app path has spaces.
+
+## \[2.4.6]
+
+- [`28048039`](https://github.com/tauri-apps/plugins-workspace/commit/28048039496e84b46847c008416d341f1349e30e) ([#3143](https://github.com/tauri-apps/plugins-workspace/pull/3143) by [@Tunglies](https://github.com/tauri-apps/plugins-workspace/../../Tunglies)) Fix clippy warnings. No user facing changes.
+
 ## \[2.4.5]

 - [`93426f85`](https://github.com/tauri-apps/plugins-workspace/commit/93426f85120f49beb9f40222bff45185a32d54a9) Fixed an issue that caused docs.rs builds to fail. No user facing changes.
@@ -1,6 +1,6 @@
 [package]
 name = "tauri-plugin-deep-link"
-version = "2.4.5"
+version = "2.4.7"
 description = "Set your Tauri application as the default handler for an URL"
 authors = { workspace = true }
 license = { workspace = true }
@@ -6,9 +6,8 @@ package app.tauri.deep_link

 import android.app.Activity
 import android.content.Intent
-import android.os.Bundle
+import android.os.PatternMatcher
 import android.webkit.WebView
-import app.tauri.Logger
 import app.tauri.annotation.InvokeArg
 import app.tauri.annotation.Command
 import app.tauri.annotation.TauriPlugin
@@ -16,18 +15,35 @@ import app.tauri.plugin.Channel
 import app.tauri.plugin.JSObject
 import app.tauri.plugin.Plugin
 import app.tauri.plugin.Invoke
+import androidx.core.net.toUri

@InvokeArg
 class SetEventHandlerArgs {
    lateinit var handler: Channel
 }

+@InvokeArg
+class AssociatedDomain {
+    var scheme: List<String> = listOf("https", "http")
+    var host: String? = null
+    var path: List<String> = listOf()
+    var pathPattern: List<String> = listOf()
+    var pathPrefix: List<String> = listOf()
+    var pathSuffix: List<String> = listOf()
+}
+
+@InvokeArg
+class PluginConfig {
+    var mobile: List<AssociatedDomain> = listOf()
+}
+
@TauriPlugin
 class DeepLinkPlugin(private val activity: Activity): Plugin(activity) {
    //private val implementation = Example()
    private var webView: WebView? = null
    private var currentUrl: String? = null
    private var channel: Channel? = null
+    private var config: PluginConfig? = null

    companion object {
        var instance: DeepLinkPlugin? = null
@@ -51,27 +67,105 @@ class DeepLinkPlugin(private val activity: Activity): Plugin(activity) {

    override fun load(webView: WebView) {
        instance = this
-
-        val intent = activity.intent
-
-        if (intent.action == Intent.ACTION_VIEW) {
-            // TODO: check if it makes sense to split up init url and last url
-            this.currentUrl = intent.data.toString()
-            val event = JSObject()
-            event.put("url", this.currentUrl)
-            this.channel?.send(event)
-        }
+        config = getConfig(PluginConfig::class.java)

        super.load(webView)
        this.webView = webView
+
+        val intent = activity.intent
+
+        if (intent.action == Intent.ACTION_VIEW && intent.data != null) {
+            val url = intent.data.toString()
+            if (isDeepLink(url)) {
+                // TODO: check if it makes sense to split up init url and last url
+                this.currentUrl = url
+                val event = JSObject()
+                event.put("url", this.currentUrl)
+                this.channel?.send(event)
+            }
+        }
    }

    override fun onNewIntent(intent: Intent) {
-        if (intent.action == Intent.ACTION_VIEW) {
-            this.currentUrl = intent.data.toString()
-            val event = JSObject()
-            event.put("url", this.currentUrl)
-            this.channel?.send(event)
+        if (intent.action == Intent.ACTION_VIEW && intent.data != null) {
+            val url = intent.data.toString()
+            if (isDeepLink(url)) {
+                this.currentUrl = url
+                val event = JSObject()
+                event.put("url", this.currentUrl)
+                this.channel?.send(event)
+            }
        }
    }
+
+    private fun isDeepLink(url: String): Boolean {
+        val config = this.config ?: return false
+        
+        if (config.mobile.isEmpty()) {
+            return false
+        }
+
+        val uri = try {
+            url.toUri()
+        } catch (_: Exception) {
+            // not a URL
+            return false
+        }
+
+        val scheme = uri.scheme ?: return false
+        val host = uri.host
+        val path = uri.path ?: ""
+
+        // Check if URL matches any configured mobile deep link
+        for (domain in config.mobile) {
+            // Check scheme
+            if (!domain.scheme.any { it.equals(scheme, ignoreCase = true) }) {
+                continue
+            }
+
+            // Check host (if configured)
+            if (domain.host != null) {
+                if (!host.equals(domain.host, ignoreCase = true)) {
+                    continue
+                }
+            }
+
+            // Check path constraints
+            // According to Android docs:
+            // - path: exact match, must begin with /
+            // - pathPrefix: matches initial part of path
+            // - pathSuffix: matches ending part, doesn't need to begin with /
+            // - pathPattern: simple glob pattern (., *, .*)
+            val pathMatches = when {
+                // Exact path match (must begin with /)
+                domain.path.isNotEmpty() && domain.path.any { it == path } -> true
+                // Path pattern match (simple glob: ., *, .*)
+                domain.pathPattern.isNotEmpty() && domain.pathPattern.any { pattern ->
+                    try {
+                        PatternMatcher(pattern, PatternMatcher.PATTERN_SIMPLE_GLOB).match(path)
+                    } catch (e: Exception) {
+                        false
+                    }
+                } -> true
+                // Path prefix match
+                domain.pathPrefix.isNotEmpty() && domain.pathPrefix.any { prefix ->
+                    path.startsWith(prefix)
+                } -> true
+                // Path suffix match
+                domain.pathSuffix.isNotEmpty() && domain.pathSuffix.any { suffix ->
+                    path.endsWith(suffix)
+                } -> true
+                // If no path constraints, any path is allowed
+                domain.path.isEmpty() && domain.pathPattern.isEmpty() && 
+                domain.pathPrefix.isEmpty() && domain.pathSuffix.isEmpty() -> true
+                else -> false
+            }
+
+            if (pathMatches) {
+                return true
+            }
+        }
+
+        return false
+    }
 }
@@ -137,13 +137,7 @@ fn main() {
            let deep_link_domains = config
                .mobile
                .iter()
-                .filter_map(|domain| {
-                    if domain.is_app_link() {
-                        return None;
-                    }
-
-                    Some(domain)
-                })
+                .filter(|domain| domain.is_app_link())
                .collect::<Vec<_>>();

            if deep_link_domains.is_empty() {
@@ -177,7 +171,7 @@ fn main() {
                                );
                                dict.insert(
                                    "CFBundleURLName".into(),
-                                    format!("{}", domain.scheme[0]).into(),
+                                    domain.scheme[0].clone().into(),
                                );
                                plist::Value::Dictionary(dict)
                            })
@@ -1,5 +1,17 @@
 # Changelog

+## \[2.2.10]
+
+### Dependencies
+
+- Upgraded to `deep-link-js@2.4.7`
+
+## \[2.2.9]
+
+### Dependencies
+
+- Upgraded to `deep-link-js@2.4.6`
+
 ## \[2.2.8]

 ### Dependencies
@@ -1,7 +1,7 @@
 {
  "name": "deep-link-example",
  "private": true,
-  "version": "2.2.8",
+  "version": "2.2.10",
  "type": "module",
  "scripts": {
    "dev": "vite",
@@ -10,12 +10,12 @@
    "tauri": "tauri"
  },
  "dependencies": {
-    "@tauri-apps/api": "2.9.0",
-    "@tauri-apps/plugin-deep-link": "2.4.5"
+    "@tauri-apps/api": "^2.10.1",
+    "@tauri-apps/plugin-deep-link": "2.4.7"
  },
  "devDependencies": {
-    "@tauri-apps/cli": "2.9.4",
+    "@tauri-apps/cli": "2.10.1",
    "typescript": "^5.7.3",
-    "vite": "^7.0.7"
+    "vite": "^7.3.1"
  }
 }
@@ -19,7 +19,9 @@ tauri-build = { workspace = true }
 [dependencies]
 serde = { workspace = true }
 serde_json = { workspace = true }
-tauri = { workspace = true, features = ["wry", "common-controls-v6", "x11"] }
+tauri = { workspace = true }
+tauri-runtime-wry = { workspace = true, optional = true }
+tauri-runtime-cef = { workspace = true, optional = true }
 tauri-plugin-deep-link = { path = "../../../" }
 tauri-plugin-log = { path = "../../../../log" }
 tauri-plugin-single-instance = { path = "../../../../single-instance", features = [
@@ -28,6 +30,9 @@ tauri-plugin-single-instance = { path = "../../../../single-instance", features
 log = "0.4"

 [features]
+default = ["wry"]
+wry = ["dep:tauri-runtime-wry"]
+cef = ["dep:tauri-runtime-cef"]
 # this feature is used for production builds or when `devUrl` points to the filesystem and the built-in dev server is disabled.
 # If you use cargo directly instead of tauri's cli you can use this feature flag to switch between tauri's `dev` and `build` modes.
 # DO NOT REMOVE!!
@@ -2,6 +2,11 @@
 // SPDX-License-Identifier: Apache-2.0
 // SPDX-License-Identifier: MIT

+#[cfg(feature = "cef")]
+type TauriRuntime = tauri_runtime_cef::CefRuntime<tauri::EventLoopMessage>;
+#[cfg(feature = "wry")]
+type TauriRuntime = tauri_runtime_wry::Wry<tauri::EventLoopMessage>;
+
 use tauri_plugin_deep_link::DeepLinkExt;

 // Learn more about Tauri commands at https://tauri.app/v1/guides/features/command
@@ -13,7 +18,7 @@ fn greet(name: &str) -> String {
 #[cfg_attr(mobile, tauri::mobile_entry_point)]
 pub fn run() {
    #[allow(unused_mut)]
-    let mut builder = tauri::Builder::default();
+    let mut builder = tauri::Builder::<TauriRuntime>::new();

    #[cfg(desktop)]
    {
@@ -1,6 +1,6 @@
 {
  "name": "@tauri-apps/plugin-deep-link",
-  "version": "2.4.5",
+  "version": "2.4.7",
  "description": "Set your Tauri application as the default handler for an URL",
  "license": "MIT OR Apache-2.0",
  "authors": [
@@ -25,9 +25,9 @@
    "LICENSE"
  ],
  "dependencies": {
-    "@tauri-apps/api": "^2.8.0"
+    "@tauri-apps/api": "^2.10.1"
  },
  "devDependencies": {
-    "@tauri-apps/cli": "2.9.4"
+    "@tauri-apps/cli": "2.10.1"
  }
 }
@@ -24,20 +24,17 @@
    },
    "permission": {
      "description": "A list of inlined permissions",
-      "default": [],
      "type": "array",
      "items": {
        "$ref": "#/definitions/Permission"
-      }
+      },
+      "default": []
    }
  },
  "definitions": {
    "DefaultPermission": {
      "description": "The default permission set of the plugin.\n\nWorks similarly to a permission with the \"default\" identifier.",
      "type": "object",
-      "required": [
-        "permissions"
-      ],
      "properties": {
        "version": {
          "description": "The version of the permission.",
@@ -46,10 +43,10 @@
            "null"
          ],
          "format": "uint64",
-          "minimum": 1.0
+          "minimum": 1
        },
        "description": {
-          "description": "Human-readable description of what the permission does. Tauri convention is to use `<h4>` headings in markdown content for Tauri documentation generation purposes.",
+          "description": "Human-readable description of what the permission does.\nTauri convention is to use `<h4>` headings in markdown content\nfor Tauri documentation generation purposes.",
          "type": [
            "string",
            "null"
@@ -62,16 +59,14 @@
            "type": "string"
          }
        }
-      }
+      },
+      "required": [
+        "permissions"
+      ]
    },
    "PermissionSet": {
      "description": "A set of direct permissions grouped together under a new name.",
      "type": "object",
-      "required": [
-        "description",
-        "identifier",
-        "permissions"
-      ],
      "properties": {
        "identifier": {
          "description": "A unique identifier for the permission.",
@@ -85,17 +80,19 @@
          "description": "All permissions this set contains.",
          "type": "array",
          "items": {
-            "$ref": "#/definitions/PermissionKind"
+            "type": "string"
          }
        }
-      }
+      },
+      "required": [
+        "identifier",
+        "description",
+        "permissions"
+      ]
    },
    "Permission": {
      "description": "Descriptions of explicit privileges of commands.\n\nIt can enable commands to be accessible in the frontend of the application.\n\nIf the scope is defined it can be used to fine grain control the access of individual or multiple commands.",
      "type": "object",
-      "required": [
-        "identifier"
-      ],
      "properties": {
        "version": {
          "description": "The version of the permission.",
@@ -104,14 +101,14 @@
            "null"
          ],
          "format": "uint64",
-          "minimum": 1.0
+          "minimum": 1
        },
        "identifier": {
          "description": "A unique identifier for the permission.",
          "type": "string"
        },
        "description": {
-          "description": "Human-readable description of what the permission does. Tauri internal convention is to use `<h4>` headings in markdown content for Tauri documentation generation purposes.",
+          "description": "Human-readable description of what the permission does.\nTauri internal convention is to use `<h4>` headings in markdown content\nfor Tauri documentation generation purposes.",
          "type": [
            "string",
            "null"
@@ -147,7 +144,10 @@
            "$ref": "#/definitions/Target"
          }
        }
-      }
+      },
+      "required": [
+        "identifier"
+      ]
    },
    "Commands": {
      "description": "Allowed and denied commands inside a permission.\n\nIf two commands clash inside of `allow` and `deny`, it should be denied by default.",
@@ -155,24 +155,24 @@
      "properties": {
        "allow": {
          "description": "Allowed command.",
-          "default": [],
          "type": "array",
          "items": {
            "type": "string"
-          }
+          },
+          "default": []
        },
        "deny": {
          "description": "Denied command, which takes priority.",
-          "default": [],
          "type": "array",
          "items": {
            "type": "string"
-          }
+          },
+          "default": []
        }
      }
    },
    "Scopes": {
-      "description": "An argument for fine grained behavior control of Tauri commands.\n\nIt can be of any serde serializable type and is used to allow or prevent certain actions inside a Tauri command. The configured scope is passed to the command and will be enforced by the command implementation.\n\n## Example\n\n```json { \"allow\": [{ \"path\": \"$HOME/**\" }], \"deny\": [{ \"path\": \"$HOME/secret.txt\" }] } ```",
+      "description": "An argument for fine grained behavior control of Tauri commands.\n\nIt can be of any serde serializable type and is used to allow or prevent certain actions inside a Tauri command.\nThe configured scope is passed to the command and will be enforced by the command implementation.\n\n## Example\n\n```json\n{\n  \"allow\": [{ \"path\": \"$HOME/**\" }],\n  \"deny\": [{ \"path\": \"$HOME/secret.txt\" }]\n}\n```",
      "type": "object",
      "properties": {
        "allow": {
@@ -257,96 +257,27 @@
        {
          "description": "MacOS.",
          "type": "string",
-          "enum": [
-            "macOS"
-          ]
+          "const": "macOS"
        },
        {
          "description": "Windows.",
          "type": "string",
-          "enum": [
-            "windows"
-          ]
+          "const": "windows"
        },
        {
          "description": "Linux.",
          "type": "string",
-          "enum": [
-            "linux"
-          ]
+          "const": "linux"
        },
        {
          "description": "Android.",
          "type": "string",
-          "enum": [
-            "android"
-          ]
+          "const": "android"
        },
        {
          "description": "iOS.",
          "type": "string",
-          "enum": [
-            "iOS"
-          ]
-        }
-      ]
-    },
-    "PermissionKind": {
-      "type": "string",
-      "oneOf": [
-        {
-          "description": "Enables the get_current command without any pre-configured scope.",
-          "type": "string",
-          "const": "allow-get-current",
-          "markdownDescription": "Enables the get_current command without any pre-configured scope."
-        },
-        {
-          "description": "Denies the get_current command without any pre-configured scope.",
-          "type": "string",
-          "const": "deny-get-current",
-          "markdownDescription": "Denies the get_current command without any pre-configured scope."
-        },
-        {
-          "description": "Enables the is_registered command without any pre-configured scope.",
-          "type": "string",
-          "const": "allow-is-registered",
-          "markdownDescription": "Enables the is_registered command without any pre-configured scope."
-        },
-        {
-          "description": "Denies the is_registered command without any pre-configured scope.",
-          "type": "string",
-          "const": "deny-is-registered",
-          "markdownDescription": "Denies the is_registered command without any pre-configured scope."
-        },
-        {
-          "description": "Enables the register command without any pre-configured scope.",
-          "type": "string",
-          "const": "allow-register",
-          "markdownDescription": "Enables the register command without any pre-configured scope."
-        },
-        {
-          "description": "Denies the register command without any pre-configured scope.",
-          "type": "string",
-          "const": "deny-register",
-          "markdownDescription": "Denies the register command without any pre-configured scope."
-        },
-        {
-          "description": "Enables the unregister command without any pre-configured scope.",
-          "type": "string",
-          "const": "allow-unregister",
-          "markdownDescription": "Enables the unregister command without any pre-configured scope."
-        },
-        {
-          "description": "Denies the unregister command without any pre-configured scope.",
-          "type": "string",
-          "const": "deny-unregister",
-          "markdownDescription": "Denies the unregister command without any pre-configured scope."
-        },
-        {
-          "description": "Allows reading the opened deep link via the get_current command\n#### This default permission set includes:\n\n- `allow-get-current`",
-          "type": "string",
-          "const": "default",
-          "markdownDescription": "Allows reading the opened deep link via the get_current command\n#### This default permission set includes:\n\n- `allow-get-current`"
+          "const": "iOS"
        }
      ]
    }
@@ -293,7 +293,7 @@ mod imp {
                    .unwrap_or_else(|| bin.into_os_string())
                    .to_string_lossy()
                    .to_string();
-                let qualified_exec = format!("{} %u", exec);
+                let qualified_exec = format!("\"{}\" %u", exec);

                let target = self.app.path().data_dir()?.join("applications");

@@ -540,7 +540,7 @@ pub fn init<R: Runtime>() -> TauriPlugin<R, Option<config::Config>> {
            Ok(())
        })
        .on_event(|_app, _event| {
-            #[cfg(any(target_os = "macos", target_os = "ios"))]
+            #[cfg(desktop)]
            if let tauri::RunEvent::Opened { urls } = _event {
                use tauri::Emitter;

@@ -1,5 +1,21 @@
 # Changelog

+## \[2.6.0]
+
+- [`d7a0bb32`](https://github.com/tauri-apps/plugins-workspace/commit/d7a0bb325dad919d6cc132eb3898c33540de77c4) ([#3136](https://github.com/tauri-apps/plugins-workspace/pull/3136) by [@onehumandev](https://github.com/tauri-apps/plugins-workspace/../../onehumandev)) Add `fileAccessMode` option to file picker.
+
+## \[2.5.0]
+
+- [`dff6fa98`](https://github.com/tauri-apps/plugins-workspace/commit/dff6fa986a9a05ba98b6ca660fea78ae97251fc2) ([#3034](https://github.com/tauri-apps/plugins-workspace/pull/3034) by [@onehumandev](https://github.com/tauri-apps/plugins-workspace/../../onehumandev)) Add `pickerMode` option to file picker (currently only used on iOS)
+
+### Dependencies
+
+- Upgraded to `fs-js@2.4.5`
+
+### feat
+
+- [`c23fa03f`](https://github.com/tauri-apps/plugins-workspace/commit/c23fa03f07d5c1c220bcf0bca482364513e3f754) ([#3098](https://github.com/tauri-apps/plugins-workspace/pull/3098) by [@Lepidopteran](https://github.com/tauri-apps/plugins-workspace/../../Lepidopteran)) Add `xdg-portal` as an optional feature for `rfd`
+
 ## \[2.4.2]

 - [`93426f85`](https://github.com/tauri-apps/plugins-workspace/commit/93426f85120f49beb9f40222bff45185a32d54a9) Fixed an issue that caused docs.rs builds to fail. No user facing changes.
@@ -1,6 +1,6 @@
 [package]
 name = "tauri-plugin-dialog"
-version = "2.4.2"
+version = "2.6.0"
 description = "Native system dialogs for opening and saving files along with message dialogs on your Tauri application."
 edition = { workspace = true }
 authors = { workspace = true }
@@ -11,7 +11,7 @@ links = "tauri-plugin-dialog"

 [features]
 default = ["gtk3"]
-xdg-portal = ["rfd/xdg-portal"]
+xdg-portal = ["rfd/xdg-portal", "rfd/tokio", "rfd/wayland"]
 gtk3 = ["rfd/gtk3"]

 [package.metadata.docs.rs]
@@ -28,7 +28,7 @@ ios = { level = "partial", notes = "Does not support folder picker" }
 tauri-plugin = { workspace = true, features = ["build"] }

 [dev-dependencies]
-tauri = { workspace = true, features = ["wry"] }
+tauri = { workspace = true }

 [dependencies]
 serde = { workspace = true }
@@ -37,14 +37,13 @@ tauri = { workspace = true }
 log = { workspace = true }
 thiserror = { workspace = true }
 url = { workspace = true }
-tauri-plugin-fs = { path = "../fs", version = "2.4.4" }
+tauri-plugin-fs = { path = "../fs", version = "2.4.5" }

 [target.'cfg(target_os = "ios")'.dependencies]
-tauri = { workspace = true, features = ["wry"] }
+tauri = { workspace = true }

 [target."cfg(any(target_os = \"macos\", windows, target_os = \"linux\", target_os = \"dragonfly\", target_os = \"freebsd\", target_os = \"openbsd\", target_os = \"netbsd\"))".dependencies]
-rfd = { version = "0.15", default-features = false, features = [
-  "tokio",
+rfd = { version = "0.16", default-features = false, features = [
  "common-controls-v6",
 ] }

@@ -1 +1 @@
-if("__TAURI__"in window){var __TAURI_PLUGIN_DIALOG__=function(t){"use strict";async function n(t,n={},e){return window.__TAURI_INTERNALS__.invoke(t,n,e)}function e(t){if(void 0!==t)return"string"==typeof t?t:"ok"in t&&"cancel"in t?{OkCancelCustom:[t.ok,t.cancel]}:"yes"in t&&"no"in t&&"cancel"in t?{YesNoCancelCustom:[t.yes,t.no,t.cancel]}:"ok"in t?{OkCustom:t.ok}:void 0}return"function"==typeof SuppressedError&&SuppressedError,t.ask=async function(t,e){const o="string"==typeof e?{title:e}:e;return await n("plugin:dialog|ask",{message:t.toString(),title:o?.title?.toString(),kind:o?.kind,yesButtonLabel:o?.okLabel?.toString(),noButtonLabel:o?.cancelLabel?.toString()})},t.confirm=async function(t,e){const o="string"==typeof e?{title:e}:e;return await n("plugin:dialog|confirm",{message:t.toString(),title:o?.title?.toString(),kind:o?.kind,okButtonLabel:o?.okLabel?.toString(),cancelButtonLabel:o?.cancelLabel?.toString()})},t.message=async function(t,o){const i="string"==typeof o?{title:o}:o;return n("plugin:dialog|message",{message:t.toString(),title:i?.title?.toString(),kind:i?.kind,okButtonLabel:i?.okLabel?.toString(),buttons:e(i?.buttons)})},t.open=async function(t={}){return"object"==typeof t&&Object.freeze(t),await n("plugin:dialog|open",{options:t})},t.save=async function(t={}){return"object"==typeof t&&Object.freeze(t),await n("plugin:dialog|save",{options:t})},t}({});Object.defineProperty(window.__TAURI__,"dialog",{value:__TAURI_PLUGIN_DIALOG__})}
+if("__TAURI__"in window){var __TAURI_PLUGIN_DIALOG__=function(n){"use strict";async function e(n,e={},t){return window.__TAURI_INTERNALS__.invoke(n,e,t)}function t(n){if(void 0!==n)return"string"==typeof n?n:"ok"in n&&"cancel"in n?{OkCancelCustom:[n.ok,n.cancel]}:"yes"in n&&"no"in n&&"cancel"in n?{YesNoCancelCustom:[n.yes,n.no,n.cancel]}:"ok"in n?{OkCustom:n.ok}:void 0}async function o(n,o){return await e("plugin:dialog|message",{message:n,title:o?.title,kind:o?.kind,buttons:t(o?.buttons)})}return"function"==typeof SuppressedError&&SuppressedError,n.ask=async function(n,e){const t="string"==typeof e?{title:e}:e,i=t?.okLabel||t?.cancelLabel,a=t?.okLabel??"Yes";return await o(n,{title:t?.title,kind:t?.kind,buttons:i?{ok:a,cancel:t.cancelLabel??"No"}:"YesNo"})===a},n.confirm=async function(n,e){const t="string"==typeof e?{title:e}:e,i=t?.okLabel||t?.cancelLabel,a=t?.okLabel??"Ok";return await o(n,{title:t?.title,kind:t?.kind,buttons:i?{ok:a,cancel:t.cancelLabel??"Cancel"}:"OkCancel"})===a},n.message=async function(n,e){const t="string"==typeof e?{title:e}:e;return t&&!t.buttons&&t.okLabel&&(t.buttons={ok:t.okLabel}),o(n,t)},n.open=async function(n={}){return"object"==typeof n&&Object.freeze(n),await e("plugin:dialog|open",{options:n})},n.save=async function(n={}){return"object"==typeof n&&Object.freeze(n),await e("plugin:dialog|save",{options:n})},n}({});Object.defineProperty(window.__TAURI__,"dialog",{value:__TAURI_PLUGIN_DIALOG__})}
@@ -2,7 +2,7 @@
 // SPDX-License-Identifier: Apache-2.0
 // SPDX-License-Identifier: MIT

-const COMMANDS: &[&str] = &["open", "save", "message", "ask", "confirm"];
+const COMMANDS: &[&str] = &["open", "save", "message"];

 fn main() {
    let result = tauri_plugin::Builder::new(COMMANDS)
@@ -76,6 +76,31 @@ interface OpenDialogOptions {
   * On desktop, this option is ignored.
   */
  pickerMode?: PickerMode
+  /**
+   * The file access mode of the dialog.
+   * If not provided, `copy` is used, which matches the behavior of the {@linkcode open} method before the introduction of this option.
+   *
+   * **Usage**
+   * If a file is opened with {@linkcode fileAccessMode: 'copy'}, it will be copied to the app's sandbox.
+   * This means the file can be read, edited, deleted, copied, or any other operation without any issues, since the file
+   * now belongs to the app.
+   * This also means that the caller has responsibility of deleting the file if this file is not meant to be retained
+   * in the app sandbox.
+   *
+   * If a file is opened with {@linkcode fileAccessMode: 'scoped'}, the file will remain in its original location
+   * and security-scoped access will be automatically managed by the system.
+   *
+   * **Note**
+   * This is specifically meant for document pickers on iOS or MacOS, in conjunction with [security scoped resources](https://developer.apple.com/documentation/foundation/nsurl/startaccessingsecurityscopedresource()).
+   *
+   * Why only document pickers, and not image or video pickers?
+   * The image and video pickers on iOS behave differently from the document pickers, and return [NSItemProvider](https://developer.apple.com/documentation/foundation/nsitemprovider) objects instead of file URLs.
+   * These are meant to be ephemeral (only available within the callback of the picker), and are not accessible outside of the callback.
+   * So for image and video pickers, the only way to access the file is to copy it to the app's sandbox, and this is the URL that is returned from this API.
+   * This means there is no provision for using `scoped` mode with image or video pickers.
+   * If an image or video picker is used, `copy` is always used.
+   */
+  fileAccessMode?: FileAccessMode
 }

 /**
@@ -111,6 +136,16 @@ interface SaveDialogOptions {
 */
 export type PickerMode = 'document' | 'media' | 'image' | 'video'

+/**
+ * The file access mode of the dialog.
+ *
+ * - `copy`: copy/move the picked file to the app sandbox; no scoped access required.
+ * - `scoped`: keep file in place; security-scoped access is automatically managed.
+ *
+ * **Note:** This option is only supported on iOS 14 and above. This parameter is ignored on iOS 13 and below.
+ */
+export type FileAccessMode = 'copy' | 'scoped'
+
 /**
 * Default buttons for a message dialog.
 *
@@ -370,6 +405,18 @@ async function save(options: SaveDialogOptions = {}): Promise<string | null> {
 */
 export type MessageDialogResult = 'Yes' | 'No' | 'Ok' | 'Cancel' | (string & {})

+async function messageCommand(
+  message: string,
+  options?: Omit<MessageDialogOptions, 'okLabel'>
+) {
+  return await invoke<MessageDialogResult>('plugin:dialog|message', {
+    message,
+    title: options?.title,
+    kind: options?.kind,
+    buttons: buttonsToRust(options?.buttons)
+  })
+}
+
 /**
 * Shows a message dialog with an `Ok` button.
 * @example
@@ -392,18 +439,17 @@ async function message(
  options?: string | MessageDialogOptions
 ): Promise<MessageDialogResult> {
  const opts = typeof options === 'string' ? { title: options } : options
-
-  return invoke<MessageDialogResult>('plugin:dialog|message', {
-    message: message.toString(),
-    title: opts?.title?.toString(),
-    kind: opts?.kind,
-    okButtonLabel: opts?.okLabel?.toString(),
-    buttons: buttonsToRust(opts?.buttons)
-  })
+  if (opts && !opts.buttons && opts.okLabel) {
+    opts.buttons = { ok: opts.okLabel }
+  }
+  return messageCommand(message, opts)
 }

 /**
 * Shows a question dialog with `Yes` and `No` buttons.
+ *
+ * Convenient wrapper for `await message('msg', { buttons: 'YesNo' }) === 'Yes'`
+ *
 * @example
 * ```typescript
 * import { ask } from '@tauri-apps/plugin-dialog';
@@ -423,17 +469,24 @@ async function ask(
  options?: string | ConfirmDialogOptions
 ): Promise<boolean> {
  const opts = typeof options === 'string' ? { title: options } : options
-  return await invoke('plugin:dialog|ask', {
-    message: message.toString(),
-    title: opts?.title?.toString(),
-    kind: opts?.kind,
-    yesButtonLabel: opts?.okLabel?.toString(),
-    noButtonLabel: opts?.cancelLabel?.toString()
-  })
+  const customButtons = opts?.okLabel || opts?.cancelLabel
+  const okLabel = opts?.okLabel ?? 'Yes'
+  return (
+    (await messageCommand(message, {
+      title: opts?.title,
+      kind: opts?.kind,
+      buttons: customButtons
+        ? { ok: okLabel, cancel: opts.cancelLabel ?? 'No' }
+        : 'YesNo'
+    })) === okLabel
+  )
 }

 /**
 * Shows a question dialog with `Ok` and `Cancel` buttons.
+ *
+ * Convenient wrapper for `await message('msg', { buttons: 'OkCancel' }) === 'Ok'`
+ *
 * @example
 * ```typescript
 * import { confirm } from '@tauri-apps/plugin-dialog';
@@ -453,13 +506,17 @@ async function confirm(
  options?: string | ConfirmDialogOptions
 ): Promise<boolean> {
  const opts = typeof options === 'string' ? { title: options } : options
-  return await invoke('plugin:dialog|confirm', {
-    message: message.toString(),
-    title: opts?.title?.toString(),
-    kind: opts?.kind,
-    okButtonLabel: opts?.okLabel?.toString(),
-    cancelButtonLabel: opts?.cancelLabel?.toString()
-  })
+  const customButtons = opts?.okLabel || opts?.cancelLabel
+  const okLabel = opts?.okLabel ?? 'Ok'
+  return (
+    (await messageCommand(message, {
+      title: opts?.title,
+      kind: opts?.kind,
+      buttons: customButtons
+        ? { ok: okLabel, cancel: opts.cancelLabel ?? 'Cancel' }
+        : 'OkCancel'
+    })) === okLabel
+  )
 }

 export type {
@@ -34,6 +34,7 @@ struct FilePickerOptions: Decodable {
  var filters: [Filter]?
  var defaultPath: String?
  var pickerMode: PickerMode?
+  var fileAccessMode: FileAccessMode?
 }

 struct SaveFileDialogOptions: Decodable {
@@ -41,6 +42,11 @@ struct SaveFileDialogOptions: Decodable {
  var defaultPath: String?
 }

+enum FileAccessMode: String, Decodable {
+  case copy
+  case scoped
+}
+
 enum PickerMode: String, Decodable {
  case document
  case media
@@ -56,6 +62,7 @@ class DialogPlugin: Plugin {
  override init() {
    super.init()
    filePickerController = FilePickerController(self)
+
  }

  @objc public func showFilePicker(_ invoke: Invoke) throws {
@@ -70,12 +77,13 @@ class DialogPlugin: Plugin {
      case .error(let error):
        invoke.reject(error)
      }
-      }
+    }

    if #available(iOS 14, *) {
      let parsedTypes = parseFiltersOption(args.filters ?? [])

-      let mimeKinds = Set(parsedTypes.compactMap { $0.preferredMIMEType?.components(separatedBy: "/")[0] })
+      let mimeKinds = Set(
+        parsedTypes.compactMap { $0.preferredMIMEType?.components(separatedBy: "/")[0] })
      let filtersIncludeImage = mimeKinds.contains("image")
      let filtersIncludeVideo = mimeKinds.contains("video")
      let filtersIncludeNonMedia = mimeKinds.contains(where: { $0 != "image" && $0 != "video" })
@@ -85,7 +93,8 @@ class DialogPlugin: Plugin {
      if args.pickerMode == .media
        || args.pickerMode == .image
        || args.pickerMode == .video
-        || (!filtersIncludeNonMedia && (filtersIncludeImage || filtersIncludeVideo)) {
+        || (!filtersIncludeNonMedia && (filtersIncludeImage || filtersIncludeVideo))
+      {
        DispatchQueue.main.async {
          var configuration = PHPickerConfiguration(photoLibrary: PHPhotoLibrary.shared())
          configuration.selectionLimit = (args.multiple ?? false) ? 0 : 1
@@ -107,8 +116,10 @@ class DialogPlugin: Plugin {
        DispatchQueue.main.async {
          // The UTType.item is the catch-all, allowing for any file type to be selected.
          let contentTypes = parsedTypes.isEmpty ? [UTType.item] : parsedTypes
-          let picker: UIDocumentPickerViewController = UIDocumentPickerViewController(forOpeningContentTypes: contentTypes, asCopy: true)
-          
+          let picker: UIDocumentPickerViewController = UIDocumentPickerViewController(
+            forOpeningContentTypes: contentTypes,
+            asCopy: args.fileAccessMode == .scoped ? false : true)
+
          if let defaultPath = args.defaultPath {
            picker.directoryURL = URL(string: defaultPath)
          }
@@ -181,7 +192,7 @@ class DialogPlugin: Plugin {
        }
      }
    }
-    
+
    return parsedTypes
  }

@@ -203,14 +214,14 @@ class DialogPlugin: Plugin {
    if !filtersIncludeNonMedia && (filtersIncludeImage || filtersIncludeVideo) {
      DispatchQueue.main.async {
        let picker = UIImagePickerController()
-          picker.delegate = self.filePickerController
+        picker.delegate = self.filePickerController

-          if filtersIncludeImage && !filtersIncludeVideo {
-            picker.sourceType = .photoLibrary
-          }
+        if filtersIncludeImage && !filtersIncludeVideo {
+          picker.sourceType = .photoLibrary
+        }

-          picker.modalPresentationStyle = .fullScreen
-          self.presentViewController(picker)
+        picker.modalPresentationStyle = .fullScreen
+        self.presentViewController(picker)
      }
    } else {
      let documentTypes = parsedTypes.isEmpty ? ["public.data"] : parsedTypes
@@ -234,7 +245,8 @@ class DialogPlugin: Plugin {
    for filter in filters {
      for ext in filter.extensions ?? [] {
        guard
-          let utType: String = UTTypeCreatePreferredIdentifierForTag(kUTTagClassMIMEType, ext as CFString, nil)?.takeRetainedValue() as String?
+          let utType: String = UTTypeCreatePreferredIdentifierForTag(
+            kUTTagClassMIMEType, ext as CFString, nil)?.takeRetainedValue() as String?
        else {
          continue
        }
@@ -292,6 +304,7 @@ class DialogPlugin: Plugin {
      manager.viewController?.present(alert, animated: true, completion: nil)
    }
  }
+
 }

@_cdecl("init_plugin_dialog")
@@ -95,16 +95,33 @@ public class FilePickerController: NSObject {
 			return nil
 		}
 	}
-
+    
+	/// ## In which cases do we need to save a copy of a file selected by a user to the app sandbox?
+	/// In short, only when the file is **not** selected using UIDocumentPickerDelegate.
+	/// For the rest of the cases, we need to write a copy of the file to the app sandbox. 
+	/// 
+	/// For PHPicker (used for photos and videos), `NSItemProvider.loadFileRepresentation` returns a temporary file URL that is deleted after the completion handler.
+	/// The recommendation is to [Persist](https://developer.apple.com/documentation/foundation/nsitemprovider/2888338-loadfilerepresentation) the file by moving/copying
+	/// it to your app’s directory within the completion handler.
+	/// 
+	/// If available, `loadInPlaceFileRepresentation` can open a file in place; Photos assets typically do not support true in-place access,
+	/// so fall back to persisting a local file.
+	/// Ref: https://developer.apple.com/documentation/foundation/nsitemprovider/2888335-loadinplacefilerepresentation
+	/// 
+	/// For UIDocumentPicker, prefer "open in place" and avoid copying when possible.
+	/// Ref: https://developer.apple.com/documentation/uikit/uidocumentpickerviewcontroller
 	private func saveTemporaryFile(_ sourceUrl: URL) throws -> URL {
+
 		var directory = URL(fileURLWithPath: NSTemporaryDirectory())
 		if let cachesDirectory = FileManager.default.urls(for: .cachesDirectory, in: .userDomainMask).first {
 			directory = cachesDirectory
 		}
+		
 		let targetUrl = directory.appendingPathComponent(sourceUrl.lastPathComponent)
 		do {
 			try deleteFile(targetUrl)
 		}
+
 		try FileManager.default.copyItem(at: sourceUrl, to: targetUrl)
 		return targetUrl
 	}
@@ -119,8 +136,7 @@ public class FilePickerController: NSObject {
 extension FilePickerController: UIDocumentPickerDelegate {
 	public func documentPicker(_ controller: UIDocumentPickerViewController, didPickDocumentsAt urls: [URL]) {
 		do {
-			let temporaryUrls = try urls.map { try saveTemporaryFile($0) }
-			self.plugin.onFilePickerEvent(.selected(temporaryUrls))
+			self.plugin.onFilePickerEvent(.selected(urls))
 		} catch {
 			self.plugin.onFilePickerEvent(.error("Failed to create a temporary copy of the file"))
 		}
@@ -191,6 +207,8 @@ extension FilePickerController: PHPickerViewControllerDelegate {
 						return
 					}
 					do {
+						// We have to make a copy of the file to the app sandbox here, as PHPicker returns an NSItemProvider with either an ephemeral file URL or content that is deleted after the completion handler.
+						// This is a different behavior from UIDocumentPicker, where the file can either be copied to the app sandbox or opened in place, and then accessed with `startAccessingSecurityScopedResource`.
 						let temporaryUrl = try self.saveTemporaryFile(url)
 						temporaryUrls.append(temporaryUrl)
 					} catch {
@@ -212,6 +230,8 @@ extension FilePickerController: PHPickerViewControllerDelegate {
 						return
 					}
 					do {
+						// We have to make a copy of the file to the app sandbox here, as PHPicker returns an NSItemProvider with either an ephemeral file URL or content that is deleted after the completion handler.
+						// This is a different behavior from UIDocumentPicker, where the file can either be copied to the app sandbox or opened in place, and then accessed with `startAccessingSecurityScopedResource`.
 						let temporaryUrl = try self.saveTemporaryFile(url)
 						temporaryUrls.append(temporaryUrl)
 					} catch {
@@ -1,6 +1,6 @@
 {
  "name": "@tauri-apps/plugin-dialog",
-  "version": "2.4.2",
+  "version": "2.6.0",
  "license": "MIT OR Apache-2.0",
  "authors": [
    "Tauri Programme within The Commons Conservancy"
@@ -24,6 +24,6 @@
    "LICENSE"
  ],
  "dependencies": {
-    "@tauri-apps/api": "^2.8.0"
+    "@tauri-apps/api": "^2.10.1"
  }
 }
@@ -0,0 +1,11 @@
+"$schema" = "schemas/schema.json"
+
+[[permission]]
+identifier = "allow-ask"
+description = "Enables the ask command without any pre-configured scope. (**DEPRECATED**: This is now an alias to `allow-message` and will be removed in v3)"
+commands.allow = ["message"]
+
+[[permission]]
+identifier = "deny-ask"
+description = "Denies the ask command without any pre-configured scope. (**DEPRECATED**: This is now an alias to `deny-message` and will be removed in v3)"
+commands.deny = ["message"]
@@ -1,13 +0,0 @@
-# Automatically generated - DO NOT EDIT!
-
-"$schema" = "../../schemas/schema.json"
-
-[[permission]]
-identifier = "allow-ask"
-description = "Enables the ask command without any pre-configured scope."
-commands.allow = ["ask"]
-
-[[permission]]
-identifier = "deny-ask"
-description = "Denies the ask command without any pre-configured scope."
-commands.deny = ["ask"]
@@ -1,13 +0,0 @@
-# Automatically generated - DO NOT EDIT!
-
-"$schema" = "../../schemas/schema.json"
-
-[[permission]]
-identifier = "allow-confirm"
-description = "Enables the confirm command without any pre-configured scope."
-commands.allow = ["confirm"]
-
-[[permission]]
-identifier = "deny-confirm"
-description = "Denies the confirm command without any pre-configured scope."
-commands.deny = ["confirm"]
@@ -9,8 +9,6 @@ All dialog types are enabled.

 #### This default permission set includes the following:

- `allow-ask`
- `allow-confirm`
 - `allow-message`
 - `allow-save`
 - `allow-open`
@@ -32,7 +30,7 @@ All dialog types are enabled.
 </td>
 <td>

-Enables the ask command without any pre-configured scope.
+Enables the ask command without any pre-configured scope. (**DEPRECATED**: This is now an alias to `allow-message` and will be removed in v3)

 </td>
 </tr>
@@ -45,33 +43,7 @@ Enables the ask command without any pre-configured scope.
 </td>
 <td>

-Denies the ask command without any pre-configured scope.
-
-</td>
-</tr>
-
-<tr>
-<td>
-
-`dialog:allow-confirm`
-
-</td>
-<td>
-
-Enables the confirm command without any pre-configured scope.
-
-</td>
-</tr>
-
-<tr>
-<td>
-
-`dialog:deny-confirm`
-
-</td>
-<td>
-
-Denies the confirm command without any pre-configured scope.
+Denies the ask command without any pre-configured scope. (**DEPRECATED**: This is now an alias to `deny-message` and will be removed in v3)

 </td>
 </tr>
@@ -151,6 +123,32 @@ Enables the save command without any pre-configured scope.

 Denies the save command without any pre-configured scope.

+</td>
+</tr>
+
+<tr>
+<td>
+
+`dialog:allow-confirm`
+
+</td>
+<td>
+
+Enables the confirm command without any pre-configured scope. (**DEPRECATED**: This is now an alias to `allow-message` and will be removed in v3)
+
+</td>
+</tr>
+
+<tr>
+<td>
+
+`dialog:deny-confirm`
+
+</td>
+<td>
+
+Denies the confirm command without any pre-configured scope. (**DEPRECATED**: This is now an alias to `deny-message` and will be removed in v3)
+
 </td>
 </tr>
 </table>
@@ -0,0 +1,11 @@
+"$schema" = "schemas/schema.json"
+
+[[permission]]
+identifier = "allow-confirm"
+description = "Enables the confirm command without any pre-configured scope. (**DEPRECATED**: This is now an alias to `allow-message` and will be removed in v3)"
+commands.allow = ["message"]
+
+[[permission]]
+identifier = "deny-confirm"
+description = "Denies the confirm command without any pre-configured scope. (**DEPRECATED**: This is now an alias to `deny-message` and will be removed in v3)"
+commands.deny = ["message"]
@@ -11,10 +11,4 @@ All dialog types are enabled.


 """
-permissions = [
-  "allow-ask",
-  "allow-confirm",
-  "allow-message",
-  "allow-save",
-  "allow-open",
-]
+permissions = ["allow-message", "allow-save", "allow-open"]
@@ -24,20 +24,17 @@
    },
    "permission": {
      "description": "A list of inlined permissions",
-      "default": [],
      "type": "array",
      "items": {
        "$ref": "#/definitions/Permission"
-      }
+      },
+      "default": []
    }
  },
  "definitions": {
    "DefaultPermission": {
      "description": "The default permission set of the plugin.\n\nWorks similarly to a permission with the \"default\" identifier.",
      "type": "object",
-      "required": [
-        "permissions"
-      ],
      "properties": {
        "version": {
          "description": "The version of the permission.",
@@ -46,10 +43,10 @@
            "null"
          ],
          "format": "uint64",
-          "minimum": 1.0
+          "minimum": 1
        },
        "description": {
-          "description": "Human-readable description of what the permission does. Tauri convention is to use `<h4>` headings in markdown content for Tauri documentation generation purposes.",
+          "description": "Human-readable description of what the permission does.\nTauri convention is to use `<h4>` headings in markdown content\nfor Tauri documentation generation purposes.",
          "type": [
            "string",
            "null"
@@ -62,16 +59,14 @@
            "type": "string"
          }
        }
-      }
+      },
+      "required": [
+        "permissions"
+      ]
    },
    "PermissionSet": {
      "description": "A set of direct permissions grouped together under a new name.",
      "type": "object",
-      "required": [
-        "description",
-        "identifier",
-        "permissions"
-      ],
      "properties": {
        "identifier": {
          "description": "A unique identifier for the permission.",
@@ -85,17 +80,19 @@
          "description": "All permissions this set contains.",
          "type": "array",
          "items": {
-            "$ref": "#/definitions/PermissionKind"
+            "type": "string"
          }
        }
-      }
+      },
+      "required": [
+        "identifier",
+        "description",
+        "permissions"
+      ]
    },
    "Permission": {
      "description": "Descriptions of explicit privileges of commands.\n\nIt can enable commands to be accessible in the frontend of the application.\n\nIf the scope is defined it can be used to fine grain control the access of individual or multiple commands.",
      "type": "object",
-      "required": [
-        "identifier"
-      ],
      "properties": {
        "version": {
          "description": "The version of the permission.",
@@ -104,14 +101,14 @@
            "null"
          ],
          "format": "uint64",
-          "minimum": 1.0
+          "minimum": 1
        },
        "identifier": {
          "description": "A unique identifier for the permission.",
          "type": "string"
        },
        "description": {
-          "description": "Human-readable description of what the permission does. Tauri internal convention is to use `<h4>` headings in markdown content for Tauri documentation generation purposes.",
+          "description": "Human-readable description of what the permission does.\nTauri internal convention is to use `<h4>` headings in markdown content\nfor Tauri documentation generation purposes.",
          "type": [
            "string",
            "null"
@@ -147,7 +144,10 @@
            "$ref": "#/definitions/Target"
          }
        }
-      }
+      },
+      "required": [
+        "identifier"
+      ]
    },
    "Commands": {
      "description": "Allowed and denied commands inside a permission.\n\nIf two commands clash inside of `allow` and `deny`, it should be denied by default.",
@@ -155,24 +155,24 @@
      "properties": {
        "allow": {
          "description": "Allowed command.",
-          "default": [],
          "type": "array",
          "items": {
            "type": "string"
-          }
+          },
+          "default": []
        },
        "deny": {
          "description": "Denied command, which takes priority.",
-          "default": [],
          "type": "array",
          "items": {
            "type": "string"
-          }
+          },
+          "default": []
        }
      }
    },
    "Scopes": {
-      "description": "An argument for fine grained behavior control of Tauri commands.\n\nIt can be of any serde serializable type and is used to allow or prevent certain actions inside a Tauri command. The configured scope is passed to the command and will be enforced by the command implementation.\n\n## Example\n\n```json { \"allow\": [{ \"path\": \"$HOME/**\" }], \"deny\": [{ \"path\": \"$HOME/secret.txt\" }] } ```",
+      "description": "An argument for fine grained behavior control of Tauri commands.\n\nIt can be of any serde serializable type and is used to allow or prevent certain actions inside a Tauri command.\nThe configured scope is passed to the command and will be enforced by the command implementation.\n\n## Example\n\n```json\n{\n  \"allow\": [{ \"path\": \"$HOME/**\" }],\n  \"deny\": [{ \"path\": \"$HOME/secret.txt\" }]\n}\n```",
      "type": "object",
      "properties": {
        "allow": {
@@ -257,108 +257,27 @@
        {
          "description": "MacOS.",
          "type": "string",
-          "enum": [
-            "macOS"
-          ]
+          "const": "macOS"
        },
        {
          "description": "Windows.",
          "type": "string",
-          "enum": [
-            "windows"
-          ]
+          "const": "windows"
        },
        {
          "description": "Linux.",
          "type": "string",
-          "enum": [
-            "linux"
-          ]
+          "const": "linux"
        },
        {
          "description": "Android.",
          "type": "string",
-          "enum": [
-            "android"
-          ]
+          "const": "android"
        },
        {
          "description": "iOS.",
          "type": "string",
-          "enum": [
-            "iOS"
-          ]
-        }
-      ]
-    },
-    "PermissionKind": {
-      "type": "string",
-      "oneOf": [
-        {
-          "description": "Enables the ask command without any pre-configured scope.",
-          "type": "string",
-          "const": "allow-ask",
-          "markdownDescription": "Enables the ask command without any pre-configured scope."
-        },
-        {
-          "description": "Denies the ask command without any pre-configured scope.",
-          "type": "string",
-          "const": "deny-ask",
-          "markdownDescription": "Denies the ask command without any pre-configured scope."
-        },
-        {
-          "description": "Enables the confirm command without any pre-configured scope.",
-          "type": "string",
-          "const": "allow-confirm",
-          "markdownDescription": "Enables the confirm command without any pre-configured scope."
-        },
-        {
-          "description": "Denies the confirm command without any pre-configured scope.",
-          "type": "string",
-          "const": "deny-confirm",
-          "markdownDescription": "Denies the confirm command without any pre-configured scope."
-        },
-        {
-          "description": "Enables the message command without any pre-configured scope.",
-          "type": "string",
-          "const": "allow-message",
-          "markdownDescription": "Enables the message command without any pre-configured scope."
-        },
-        {
-          "description": "Denies the message command without any pre-configured scope.",
-          "type": "string",
-          "const": "deny-message",
-          "markdownDescription": "Denies the message command without any pre-configured scope."
-        },
-        {
-          "description": "Enables the open command without any pre-configured scope.",
-          "type": "string",
-          "const": "allow-open",
-          "markdownDescription": "Enables the open command without any pre-configured scope."
-        },
-        {
-          "description": "Denies the open command without any pre-configured scope.",
-          "type": "string",
-          "const": "deny-open",
-          "markdownDescription": "Denies the open command without any pre-configured scope."
-        },
-        {
-          "description": "Enables the save command without any pre-configured scope.",
-          "type": "string",
-          "const": "allow-save",
-          "markdownDescription": "Enables the save command without any pre-configured scope."
-        },
-        {
-          "description": "Denies the save command without any pre-configured scope.",
-          "type": "string",
-          "const": "deny-save",
-          "markdownDescription": "Denies the save command without any pre-configured scope."
-        },
-        {
-          "description": "This permission set configures the types of dialogs\navailable from the dialog plugin.\n\n#### Granted Permissions\n\nAll dialog types are enabled.\n\n\n\n#### This default permission set includes:\n\n- `allow-ask`\n- `allow-confirm`\n- `allow-message`\n- `allow-save`\n- `allow-open`",
-          "type": "string",
-          "const": "default",
-          "markdownDescription": "This permission set configures the types of dialogs\navailable from the dialog plugin.\n\n#### Granted Permissions\n\nAll dialog types are enabled.\n\n\n\n#### This default permission set includes:\n\n- `allow-ask`\n- `allow-confirm`\n- `allow-message`\n- `allow-save`\n- `allow-open`"
+          "const": "iOS"
        }
      ]
    }
@@ -9,8 +9,8 @@ use tauri::{command, Manager, Runtime, State, Window};
 use tauri_plugin_fs::FsExt;

 use crate::{
-    Dialog, FileDialogBuilder, FilePath, MessageDialogBuilder, MessageDialogButtons,
-    MessageDialogKind, MessageDialogResult, PickerMode, Result, CANCEL, NO, OK, YES,
+    Dialog, FileAccessMode, FileDialogBuilder, FilePath, MessageDialogButtons, MessageDialogKind,
+    MessageDialogResult, PickerMode, Result,
 };

 #[derive(Serialize)]
@@ -63,6 +63,10 @@ pub struct OpenDialogOptions {
    #[serde(default)]
    #[cfg_attr(mobile, allow(dead_code))]
    picker_mode: Option<PickerMode>,
+    /// The file access mode of the dialog.
+    #[serde(default)]
+    #[cfg_attr(mobile, allow(dead_code))]
+    file_access_mode: Option<FileAccessMode>,
 }

 /// The options for the save dialog API.
@@ -141,6 +145,9 @@ pub(crate) async fn open<R: Runtime>(
        let extensions: Vec<&str> = filter.extensions.iter().map(|s| &**s).collect();
        dialog_builder = dialog_builder.add_filter(filter.name, &extensions);
    }
+    if let Some(file_access_mode) = options.file_access_mode {
+        dialog_builder = dialog_builder.set_file_access_mode(file_access_mode);
+    }

    let res = if options.directory {
        #[cfg(desktop)]
@@ -251,17 +258,20 @@ pub(crate) async fn save<R: Runtime>(
    Ok(path.map(|p| p.simplified()))
 }

-fn message_dialog<R: Runtime>(
-    #[allow(unused_variables)] window: Window<R>,
+#[command]
+pub(crate) async fn message<R: Runtime>(
+    #[allow(unused)] window: Window<R>,
    dialog: State<'_, Dialog<R>>,
    title: Option<String>,
    message: String,
    kind: Option<MessageDialogKind>,
-    buttons: MessageDialogButtons,
-) -> MessageDialogBuilder<R> {
+    buttons: Option<MessageDialogButtons>,
+) -> Result<MessageDialogResult> {
    let mut builder = dialog.message(message);

-    builder = builder.buttons(buttons);
+    if let Some(buttons) = buttons {
+        builder = builder.buttons(buttons);
+    }

    if let Some(title) = title {
        builder = builder.title(title);
@@ -276,86 +286,5 @@ fn message_dialog<R: Runtime>(
        builder = builder.kind(kind);
    }

-    builder
-}
-
-#[command]
-pub(crate) async fn message<R: Runtime>(
-    window: Window<R>,
-    dialog: State<'_, Dialog<R>>,
-    title: Option<String>,
-    message: String,
-    kind: Option<MessageDialogKind>,
-    ok_button_label: Option<String>,
-    buttons: Option<MessageDialogButtons>,
-) -> Result<MessageDialogResult> {
-    let buttons = buttons.unwrap_or(if let Some(ok_button_label) = ok_button_label {
-        MessageDialogButtons::OkCustom(ok_button_label)
-    } else {
-        MessageDialogButtons::Ok
-    });
-
-    Ok(message_dialog(window, dialog, title, message, kind, buttons).blocking_show_with_result())
-}
-
-#[command]
-pub(crate) async fn ask<R: Runtime>(
-    window: Window<R>,
-    dialog: State<'_, Dialog<R>>,
-    title: Option<String>,
-    message: String,
-    kind: Option<MessageDialogKind>,
-    yes_button_label: Option<String>,
-    no_button_label: Option<String>,
-) -> Result<bool> {
-    let dialog = message_dialog(
-        window,
-        dialog,
-        title,
-        message,
-        kind,
-        if let Some(yes_button_label) = yes_button_label {
-            MessageDialogButtons::OkCancelCustom(
-                yes_button_label,
-                no_button_label.unwrap_or(NO.to_string()),
-            )
-        } else if let Some(no_button_label) = no_button_label {
-            MessageDialogButtons::OkCancelCustom(YES.to_string(), no_button_label)
-        } else {
-            MessageDialogButtons::YesNo
-        },
-    );
-
-    Ok(dialog.blocking_show())
-}
-
-#[command]
-pub(crate) async fn confirm<R: Runtime>(
-    window: Window<R>,
-    dialog: State<'_, Dialog<R>>,
-    title: Option<String>,
-    message: String,
-    kind: Option<MessageDialogKind>,
-    ok_button_label: Option<String>,
-    cancel_button_label: Option<String>,
-) -> Result<bool> {
-    let dialog = message_dialog(
-        window,
-        dialog,
-        title,
-        message,
-        kind,
-        if let Some(ok_button_label) = ok_button_label {
-            MessageDialogButtons::OkCancelCustom(
-                ok_button_label,
-                cancel_button_label.unwrap_or(CANCEL.to_string()),
-            )
-        } else if let Some(cancel_button_label) = cancel_button_label {
-            MessageDialogButtons::OkCancelCustom(OK.to_string(), cancel_button_label)
-        } else {
-            MessageDialogButtons::OkCancel
-        },
-    );
-
-    Ok(dialog.blocking_show())
+    Ok(builder.blocking_show_with_result())
 }
@@ -53,9 +53,19 @@ pub enum PickerMode {
    Video,
 }

+#[derive(Debug, Serialize, Deserialize, Clone)]
+#[serde(rename_all = "lowercase")]
+pub enum FileAccessMode {
+    Copy,
+    Scoped,
+}
+
 pub(crate) const OK: &str = "Ok";
+#[cfg(mobile)]
 pub(crate) const CANCEL: &str = "Cancel";
+#[cfg(mobile)]
 pub(crate) const YES: &str = "Yes";
+#[cfg(mobile)]
 pub(crate) const NO: &str = "No";

 macro_rules! blocking_fn {
@@ -190,8 +200,6 @@ pub fn init<R: Runtime>() -> TauriPlugin<R> {
            commands::open,
            commands::save,
            commands::message,
-            commands::ask,
-            commands::confirm
        ])
        .setup(|app, api| {
            #[cfg(mobile)]
@@ -239,8 +247,8 @@ impl<R: Runtime> MessageDialogBuilder<R> {
            dialog,
            title: title.into(),
            message: message.into(),
-            kind: Default::default(),
-            buttons: Default::default(),
+            kind: MessageDialogKind::default(),
+            buttons: MessageDialogButtons::default(),
            #[cfg(desktop)]
            parent: None,
        }
@@ -379,6 +387,7 @@ pub struct FileDialogBuilder<R: Runtime> {
    pub(crate) title: Option<String>,
    pub(crate) can_create_directories: Option<bool>,
    pub(crate) picker_mode: Option<PickerMode>,
+    pub(crate) file_access_mode: Option<FileAccessMode>,
    #[cfg(desktop)]
    pub(crate) parent: Option<crate::desktop::WindowHandle>,
 }
@@ -391,6 +400,7 @@ pub(crate) struct FileDialogPayload<'a> {
    filters: &'a Vec<Filter>,
    multiple: bool,
    picker_mode: &'a Option<PickerMode>,
+    file_access_mode: &'a Option<FileAccessMode>,
 }

 // raw window handle :(
@@ -407,6 +417,7 @@ impl<R: Runtime> FileDialogBuilder<R> {
            title: None,
            can_create_directories: None,
            picker_mode: None,
+            file_access_mode: None,
            #[cfg(desktop)]
            parent: None,
        }
@@ -419,6 +430,7 @@ impl<R: Runtime> FileDialogBuilder<R> {
            filters: &self.filters,
            multiple,
            picker_mode: &self.picker_mode,
+            file_access_mode: &self.file_access_mode,
        }
    }

@@ -488,6 +500,14 @@ impl<R: Runtime> FileDialogBuilder<R> {
        self
    }

+    /// Set the file access mode of the dialog.
+    /// This is only used on iOS.
+    /// On desktop and Android, this option is ignored.
+    pub fn set_file_access_mode(mut self, mode: FileAccessMode) -> Self {
+        self.file_access_mode.replace(mode);
+        self
+    }
+
    /// Shows the dialog to select a single file.
    ///
    /// This is not a blocking operation,
@@ -1,5 +1,11 @@
 # Changelog

+## \[2.4.5]
+
+- [`521cd8b3`](https://github.com/tauri-apps/plugins-workspace/commit/521cd8b372c862d96b1637775710e4d7cf2443e2) ([#3155](https://github.com/tauri-apps/plugins-workspace/pull/3155) by [@EliasStar](https://github.com/tauri-apps/plugins-workspace/../../EliasStar)) Fix off by one error in the implementation of readTextFileLines causing all lines to end with an (additional) null byte.
+  Issue: [#3154](https://github.com/tauri-apps/plugins-workspace/issues/3154)
+  PR: [#3155](https://github.com/tauri-apps/plugins-workspace/pull/3155)
+
 ## \[2.4.4]

 - [`93426f85`](https://github.com/tauri-apps/plugins-workspace/commit/93426f85120f49beb9f40222bff45185a32d54a9) Fixed an issue that caused docs.rs builds to fail. No user facing changes.
@@ -1,6 +1,6 @@
 [package]
 name = "tauri-plugin-fs"
-version = "2.4.4"
+version = "2.4.5"
 description = "Access the file system."
 authors = { workspace = true }
 license = { workspace = true }
@@ -30,6 +30,7 @@ serde_repr = "0.1"
 tauri = { workspace = true }
 thiserror = { workspace = true }
 url = { workspace = true }
+log = { workspace = true }
 anyhow = "1"
 glob = { workspace = true }
 # TODO: Remove `serialization-compat-6` in v3
@@ -41,5 +42,8 @@ notify-debouncer-full = { version = "0.6", optional = true }
 dunce = { workspace = true }
 percent-encoding = "2"

+[target.'cfg(target_os = "ios")'.dependencies]
+objc2-foundation = { version = "0.3", features = ["NSURL", "NSString"] }
+
 [features]
 watch = ["notify", "notify-debouncer-full"]
@@ -104,6 +104,8 @@ const COMMANDS: &[(&str, &[&str])] = &[
    // TODO: Remove this in v3
    ("unwatch", &[]),
    ("size", &[]),
+    ("start_accessing_security_scoped_resource", &[]),
+    ("stop_accessing_security_scoped_resource", &[]),
 ];

 fn main() {
@@ -218,7 +220,10 @@ permissions = [
            .collect::<Vec<_>>(),
    )
    .global_api_script_path("./api-iife.js")
-    .global_scope_schema(schemars::schema_for!(FsScopeEntry))
+    .global_scope_schema(
+        schemars::SchemaGenerator::new(schemars::generate::SchemaSettings::draft07())
+            .into_root_schema_for::<FsScopeEntry>(),
+    )
    .android_path("android")
    .build();

@@ -5,6 +5,19 @@
 /**
 * Access the file system.
 *
+ * ## iOS security-scoped resources
+ *
+ * On iOS, the `fs` plugin automatically manages access to security-scoped resources when a file URL is accessed.
+ * This is required for files outside the app's sandbox (e.g., from file picker).
+ *
+ * @example
+ * ```typescript
+ * import { open } from '@tauri-apps/plugin-fs';
+ *
+ * const file = await open('file:///path/to/file.txt');
+ * await file.close();
+ * ```
+ *
 * ## Security
 *
 * This module prevents path traversal, not allowing parent directory accessors to be used
@@ -723,6 +736,8 @@ async function readDir(
 interface ReadFileOptions {
  /** Base directory for `path` */
  baseDir?: BaseDirectory
+  /** Text encoding to use when reading a text file. Defaults to 'utf-8'. */
+  encoding?: string
 }

 /**
@@ -753,7 +768,7 @@ async function readFile(
 }

 /**
- * Reads and returns the entire contents of a file as UTF-8 string.
+ * Reads and returns the entire contents of a file as a string using the specified encoding (default: UTF-8).
 * @example
 * ```typescript
 * import { readTextFile, BaseDirectory } from '@tauri-apps/plugin-fs';
@@ -777,11 +792,11 @@ async function readTextFile(

  const bytes = arr instanceof ArrayBuffer ? arr : Uint8Array.from(arr)

-  return new TextDecoder().decode(bytes)
+  return new TextDecoder(options?.encoding ?? 'utf-8').decode(bytes)
 }

 /**
- * Returns an async {@linkcode AsyncIterableIterator} over the lines of a file as UTF-8 string.
+ * Returns an async {@linkcode AsyncIterableIterator} over the lines of a file, decoded using the specified encoding (default: UTF-8).
 * @example
 * ```typescript
 * import { readTextFileLines, BaseDirectory } from '@tauri-apps/plugin-fs';
@@ -810,10 +825,15 @@ async function readTextFileLines(
    rid: null as number | null,

    async next(): Promise<IteratorResult<string>> {
+      const decoder = new TextDecoder(options?.encoding ?? 'utf-8')
+
      if (this.rid === null) {
+        // Use the normalized encoding label for options.
+        const encoding = decoder.encoding
+
        this.rid = await invoke<number>('plugin:fs|read_text_file_lines', {
          path: pathStr,
-          options
+          options: options != null ? { ...options, encoding } : undefined
        })
      }

@@ -838,7 +858,7 @@ async function readTextFileLines(
        return { value: null, done }
      }

-      const line = new TextDecoder().decode(bytes.slice(0, bytes.byteLength))
+      const line = decoder.decode(bytes.slice(0, bytes.byteLength - 1))

      return {
        value: line,
@@ -1346,6 +1366,79 @@ async function size(path: string | URL): Promise<number> {
  })
 }

+/**
+ * Starts accessing a security-scoped resource for the given file URL.
+ * This should be called when you're accessing a file that was opened
+ * using a security-scoped URL (e.g., from a file picker).
+ *
+ * Note that accessing security-scoped resources is automatically managed by the plugin on iOS, so you don't need to call this function
+ * unless you want to manage the scope manually.
+ *
+ * You must call {@linkcode stopAccessingSecurityScopedResource} when you're done accessing the resource.
+ *
+ * #### Platform-specific
+ *
+ * - **iOS:** Starts accessing the security-scoped resource.
+ * - **Other platforms:** does nothing.
+ *
+ * @example
+ * ```typescript
+ * import { startAccessingSecurityScopedResource } from '@tauri-apps/plugin-fs';
+ *
+ * const filePath = 'file:///path/to/file.txt';
+ * await startAccessingSecurityScopedResource(filePath);
+ * // ... use the resource ...
+ * ```
+ *
+ * @since 2.5.0
+ */
+async function startAccessingSecurityScopedResource(
+  path: string | URL
+): Promise<void> {
+  if (path instanceof URL && path.protocol !== 'file:') {
+    throw new TypeError('Must be a file URL.')
+  }
+
+  await invoke('plugin:fs|start_accessing_security_scoped_resource', {
+    path: path instanceof URL ? path.toString() : path
+  })
+}
+
+/**
+ * Stops accessing a security-scoped resource for the given file URL.
+ * This should be called when you're done accessing a file that was opened
+ * using a security-scoped URL (e.g., from a file picker) when using manual tracking via {@linkcode startAccessingSecurityScopedResource}.
+ *
+ * #### Platform-specific
+ *
+ * - **iOS:** Stops accessing the security-scoped resource.
+ * - **Other platforms:** does nothing.
+ *
+ * @example
+ * ```typescript
+ * import { stopAccessingSecurityScopedResource } from '@tauri-apps/plugin-fs';
+ *
+ * const filePath = 'file:///path/to/file.txt';
+ * await startAccessingSecurityScopedResource(filePath);
+ * // ... use the resource ...
+ * // when you're done with the resource:
+ * await stopAccessingSecurityScopedResource(filePath);
+ * ```
+ *
+ * @since 2.5.0
+ */
+async function stopAccessingSecurityScopedResource(
+  path: string | URL
+): Promise<void> {
+  if (path instanceof URL && path.protocol !== 'file:') {
+    throw new TypeError('Must be a file URL.')
+  }
+
+  await invoke('plugin:fs|stop_accessing_security_scoped_resource', {
+    path: path instanceof URL ? path.toString() : path
+  })
+}
+
 export type {
  CreateOptions,
  OpenOptions,
@@ -1394,5 +1487,7 @@ export {
  exists,
  watch,
  watchImmediate,
-  size
+  size,
+  startAccessingSecurityScopedResource,
+  stopAccessingSecurityScopedResource
 }
@@ -1,6 +1,6 @@
 {
  "name": "@tauri-apps/plugin-fs",
-  "version": "2.4.4",
+  "version": "2.4.5",
  "description": "Access the file system.",
  "license": "MIT OR Apache-2.0",
  "authors": [
@@ -25,6 +25,6 @@
    "LICENSE"
  ],
  "dependencies": {
-    "@tauri-apps/api": "^2.8.0"
+    "@tauri-apps/api": "^2.10.1"
  }
 }
@@ -0,0 +1,13 @@
+# Automatically generated - DO NOT EDIT!
+
+"$schema" = "../../schemas/schema.json"
+
+[[permission]]
+identifier = "allow-start-accessing-security-scoped-resource"
+description = "Enables the start_accessing_security_scoped_resource command without any pre-configured scope."
+commands.allow = ["start_accessing_security_scoped_resource"]
+
+[[permission]]
+identifier = "deny-start-accessing-security-scoped-resource"
+description = "Denies the start_accessing_security_scoped_resource command without any pre-configured scope."
+commands.deny = ["start_accessing_security_scoped_resource"]
@@ -0,0 +1,13 @@
+# Automatically generated - DO NOT EDIT!
+
+"$schema" = "../../schemas/schema.json"
+
+[[permission]]
+identifier = "allow-stop-accessing-security-scoped-resource"
+description = "Enables the stop_accessing_security_scoped_resource command without any pre-configured scope."
+commands.allow = ["stop_accessing_security_scoped_resource"]
+
+[[permission]]
+identifier = "deny-stop-accessing-security-scoped-resource"
+description = "Denies the stop_accessing_security_scoped_resource command without any pre-configured scope."
+commands.deny = ["stop_accessing_security_scoped_resource"]
@@ -1,6 +1,6 @@
 ## Default Permission

-This set of permissions describes what kind of
+This set of permissions describes the what kind of
 file system access the `fs` plugin has enabled or denied by default.

 #### Granted Permissions
@@ -3435,6 +3435,32 @@ Denies the size command without any pre-configured scope.
 <tr>
 <td>

+`fs:allow-start-accessing-security-scoped-resource`
+
+</td>
+<td>
+
+Enables the start_accessing_security_scoped_resource command without any pre-configured scope.
+
+</td>
+</tr>
+
+<tr>
+<td>
+
+`fs:deny-start-accessing-security-scoped-resource`
+
+</td>
+<td>
+
+Denies the start_accessing_security_scoped_resource command without any pre-configured scope.
+
+</td>
+</tr>
+
+<tr>
+<td>
+
 `fs:allow-stat`

 </td>
@@ -3461,6 +3487,32 @@ Denies the stat command without any pre-configured scope.
 <tr>
 <td>

+`fs:allow-stop-accessing-security-scoped-resource`
+
+</td>
+<td>
+
+Enables the stop_accessing_security_scoped_resource command without any pre-configured scope.
+
+</td>
+</tr>
+
+<tr>
+<td>
+
+`fs:deny-stop-accessing-security-scoped-resource`
+
+</td>
+<td>
+
+Denies the stop_accessing_security_scoped_resource command without any pre-configured scope.
+
+</td>
+</tr>
+
+<tr>
+<td>
+
 `fs:allow-truncate`

 </td>
@@ -2,7 +2,7 @@

 [default]
 description = """
-This set of permissions describes what kind of
+This set of permissions describes the what kind of
 file system access the `fs` plugin has enabled or denied by default.

 #### Granted Permissions
@@ -3,37 +3,31 @@
 // SPDX-License-Identifier: MIT

 use serde::de::DeserializeOwned;
-use tauri::{
-    plugin::{PluginApi, PluginHandle},
-    AppHandle, Runtime,
-};
+use tauri::{plugin::PluginApi, AppHandle, Runtime};

 use crate::{models::*, FilePath, OpenOptions};

-#[cfg(target_os = "android")]
 const PLUGIN_IDENTIFIER: &str = "com.plugin.fs";

-#[cfg(target_os = "ios")]
-tauri::ios_plugin_binding!(init_plugin_fs);
+pub struct Fs<R: Runtime>(tauri::plugin::PluginHandle<R>);

-// initializes the Kotlin or Swift plugin classes
 pub fn init<R: Runtime, C: DeserializeOwned>(
    _app: &AppHandle<R>,
    api: PluginApi<R, C>,
 ) -> crate::Result<Fs<R>> {
-    #[cfg(target_os = "android")]
    let handle = api
        .register_android_plugin(PLUGIN_IDENTIFIER, "FsPlugin")
        .unwrap();
-    #[cfg(target_os = "ios")]
-    let handle = api.register_ios_plugin(init_plugin_android - intent - send)?;
    Ok(Fs(handle))
 }

-/// Access to the android-intent-send APIs.
-pub struct Fs<R: Runtime>(PluginHandle<R>);
-
 impl<R: Runtime> Fs<R> {
+    /// Open a file.
+    ///
+    /// # Platform-specific
+    ///
+    /// - **iOS**: This method will automatically start accessing a security-scoped resource if the path is a file URL.
+    ///   You must call `stop_accessing_security_scoped_resource` when you're done accessing the file.
    pub fn open<P: Into<FilePath>>(
        &self,
        path: P,
@@ -68,29 +62,25 @@ impl<R: Runtime> Fs<R> {
        }
    }

-    #[cfg(target_os = "android")]
    fn resolve_content_uri(
        &self,
        uri: impl Into<String>,
        mode: impl Into<String>,
    ) -> crate::Result<std::fs::File> {
-        #[cfg(target_os = "android")]
-        {
-            let result = self.0.run_mobile_plugin::<GetFileDescriptorResponse>(
-                "getFileDescriptor",
-                GetFileDescriptorPayload {
-                    uri: uri.into(),
-                    mode: mode.into(),
-                },
-            )?;
-            if let Some(fd) = result.fd {
-                Ok(unsafe {
-                    use std::os::fd::FromRawFd;
-                    std::fs::File::from_raw_fd(fd)
-                })
-            } else {
-                unimplemented!()
-            }
+        let result = self.0.run_mobile_plugin::<GetFileDescriptorResponse>(
+            "getFileDescriptor",
+            GetFileDescriptorPayload {
+                uri: uri.into(),
+                mode: mode.into(),
+            },
+        )?;
+        if let Some(fd) = result.fd {
+            Ok(unsafe {
+                use std::os::fd::FromRawFd;
+                std::fs::File::from_raw_fd(fd)
+            })
+        } else {
+            unimplemented!()
        }
    }
 }
--- a/Show More
+++ b/Show More
Author	SHA1	Message	Date
Lucas Nogueira	8cf1cb9d02	update tauri to cef/wry feature flag removal	2026-03-11 11:36:00 -03:00
FabianLars	c6561ab6b4	revert to draft07 schema	2026-03-09 12:32:45 +01:00
FabianLars	8d6a6d6d31	Merge remote-tracking branch 'origin/v2' into feat/cef	2026-03-09 12:31:03 +01:00
Fabian-Lars	2e432f70c9	chore(deps): remove covector from package.json (#3334 )	2026-03-08 11:39:12 +01:00
renovate[bot]	b19dcd25cb	chore(deps): update dependency @rollup/plugin-terser to v1 (#3333 ) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2026-03-08 10:52:07 +01:00
renovate[bot]	995e76436f	chore(deps): update dependency @tauri-apps/cli to v2.10.1 (#3332 ) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2026-03-07 21:56:47 +08:00
Mike	1dc3612862	fix(sql): add SQL support for Postgres `NUMERIC` and custom data types (fix: #3158 ) (#3275 )	2026-03-05 13:31:20 +01:00
Lucas Fernandes Nogueira	f5f68063e4	feat(fs): access security scoped resources on iOS (#3185 ) Co-authored-by: FabianLars <30730186+FabianLars@users.noreply.github.com>	2026-03-04 13:59:03 +01:00
Tony	36d3d19247	fix(ci): bump rustsec/audit-check to v2 (#3329 )	2026-03-04 18:28:32 +08:00
hrzlgnm	31ab6f8d24	fix(updater): preserve file extension of updater package (fix: #3283 ) (#3285 ) * fix: preserve file extension of updated package (fix: #3283) Otherwise users may get confused when seing a sudo dialog which suggests a `rpm` package is installed using `dpkg -i` * pass on package extension more thoroughly * add changes file Update the updater package to preserve file extension, clarifying installation prompts for users. * Apply suggestion from @hrzlgnm * Apply suggestion from @hrzlgnm * Apply suggestion from @Legend-Master * More rpm and log `pkg_path` instead --------- Co-authored-by: Tony <68118705+Legend-Master@users.noreply.github.com> Co-authored-by: Tony <legendmastertony@gmail.com>	2026-03-03 13:53:48 +08:00
renovate[bot]	21ae430ea3	chore(deps): update rust crate cookie_store to 0.22.0 (#3308 ) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: FabianLars <30730186+FabianLars@users.noreply.github.com>	2026-03-02 17:36:16 +01:00
Lucas Fernandes Nogueira	015e817cf2	feat(deep-link): validate new intent URLs against configured deep links (#3186 )	2026-03-02 14:33:21 +01:00
dependabot[bot]	2a6d4b42bb	chore(deps): bump time in fixture (#3261 ) Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-03-02 09:34:50 +01:00
Tony	550d137c64	chore(deps): disable renovate bot on v1 (#3305 )	2026-03-02 16:29:31 +08:00
Tony	3f21f39584	refactor(dialog): handle `okLabel` in js side (#3295 ) * refactor(dialog): handle `okLabel` in js side * Allow unused instead of `cfg(desktop)`	2026-03-01 23:22:25 +08:00
renovate[bot]	759c22758e	chore(deps): update eslint monorepo to v10 (v2) (#3293 ) * chore(deps): update eslint monorepo to v9.39.3 * Update to eslint 10	2026-03-01 11:25:21 +08:00
renovate[bot]	6816dd1960	chore(deps): update dependency rollup to v4.59.0 [security] (v2) (#3291 ) * chore(deps): update dependency rollup to v4.59.0 [security] * Update svelte * pnpm dedupe --------- Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: Tony <legendmastertony@gmail.com>	2026-03-01 11:11:05 +08:00
Tony	24154472a6	refactor(dialog): reuse `message` command for confirm (#3287 ) * chore(dialog): reuse `message` command for confirm * Add change file * Remove ask and confirm from default permissions * Format * Remove extra `toString` * Point `allow-confirm` to `allow-message`	2026-03-01 10:55:33 +08:00
Thibault Tisserand	2574ec89e7	refactor(store-example): replace load_from_store with TryFrom impl in example (#3277 )	2026-02-19 00:22:25 +01:00
Lucas Nogueira	352381c6c6	update to latest tauri feat/cef (schemars v1)	2026-02-18 12:45:33 -03:00
Lucas Nogueira	e2840a7b52	Merge branch 'v2' into feat/cef	2026-02-18 12:43:41 -03:00
Niklas Volcz	2971289252	fix(http): correct Response header initialization to support cloning (fix #14892 ) (#3252 ) Previously, headers were patched onto the Response object after construction, which bypassed the internal header list and caused `response.clone().headers` to be empty. This change passes the headers directly to the Response constructor, ensuring they are properly stored and clonable.	2026-02-16 16:35:09 +02:00
aiueo13	6c3da6d290	fix(fs): use correct line detection for encodings in `readTextFileLines` (#3273 ) Co-authored-by: OkaYu <aiueo13>	2026-02-13 03:41:43 +02:00
Seiji Okuda	e97a4dedab	feat(fs): #3243 add encoding option to readTextFile functions (#3244 ) * feat(fs): #3243 add encoding option to readFile and readTextFile functions * feat(fs): add encoding option to ReadFileOptions and update readTextFileLines functions * add change file	2026-02-09 16:08:26 +02:00
Lucas Nogueira	93ac4cb59b	fix mobile build	2026-02-05 17:29:29 -03:00
github-actions[bot]	05045f9a72	publish new versions (#3249 ) Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>	2026-02-05 18:13:33 +01:00
Fabian-Lars	4f53e36a50	fix(single-instance): append version at the end	2026-02-05 18:08:35 +01:00
Lucas Nogueira	ad8ec1b6b8	feat(deep-link): handle RunEvent::Opened on Linux for CEF support	2026-02-05 12:32:26 -03:00
Lucas Fernandes Nogueira	8374e997b8	fix(deep-link): runtime register on Linux when app path has spaces (#3258 )	2026-02-05 12:30:29 -03:00
Lucas Nogueira	35aa52f45e	fix(single-instance): dbus_path should start with `/`, can't include `-`	2026-02-05 10:28:58 -03:00
renovate[bot]	bbc177150f	chore(deps): update dependency prettier to v3.8.1 (#3235 ) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2026-02-04 23:37:55 +08:00
renovate[bot]	e6e2edca11	chore(deps): update dependency typescript-eslint to v8.54.0 (#3232 ) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2026-02-04 23:08:54 +08:00
renovate[bot]	7ecd19da51	chore(deps): update dependency rollup to v4.57.1 (#3230 ) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2026-02-04 23:08:24 +08:00
dependabot[bot]	a0b6c8ff3b	chore(deps): bump bytes (#3248 ) Bumps [bytes](https://github.com/tokio-rs/bytes) from 1.7.1 to 1.11.1. - [Release notes](https://github.com/tokio-rs/bytes/releases) - [Changelog](https://github.com/tokio-rs/bytes/blob/master/CHANGELOG.md) - [Commits](https://github.com/tokio-rs/bytes/compare/v1.7.1...v1.11.1) --- updated-dependencies: - dependency-name: bytes dependency-version: 1.11.1 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-02-04 23:07:49 +08:00
renovate[bot]	c12ea9306a	chore(deps): update rust crate bytes to v1.11.1 [security] (#3247 ) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2026-02-03 23:53:44 +01:00
Demir Yerli	98e2c11eef	fix(single-instance): unconventional dbus names (fixes #3184 ) (#3194 ) Co-authored-by: FabianLars <github@fabianlars.de> Co-authored-by: Amr Bashir <github@amrbashir.me>	2026-02-03 23:36:48 +01:00
github-actions[bot]	50b159f668	Publish New Versions (v2) (#3211 ) Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>	2026-02-03 12:18:37 +01:00
Fabian-Lars	305c4f6b4e	ci: add workflow_dipatch trigger to integration tests	2026-02-03 10:55:10 +01:00
Lucas Fernandes Nogueira	89f3e17952	chore: bump tauri to 2.10 (#3246 ) * chore: bump tauri to 2.10 * pnpm i * audit fix	2026-02-02 21:48:08 -03:00
Ale Sanchez	d4613ff002	fix(shell): Make sidecars work in tests (fix #13767 ) (#3234 )	2026-01-26 17:12:42 +01:00
Tony	69a9d5771c	chore(updater): use `keep` from tempfile 3.20 (#3229 )	2026-01-22 11:40:43 +08:00
Del	61e9b0ab64	fix(http): ensure body resources are released on stream cancellation (#3228 ) Co-authored-by: Amr Bashir <github@amrbashir.me>	2026-01-22 05:20:29 +02:00
dependabot[bot]	25ad21beff	chore(deps): bump diff from 5.2.0 to 5.2.2 (#3226 ) Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: FabianLars <github@fabianlars.de>	2026-01-20 20:30:35 +01:00
Madhusudhan	2dc3f3f039	fix(sql): uuid columns returning null in postgres query results (#2039 ) (#3144 ) Co-authored-by: Fabian-Lars <github@fabianlars.de>	2026-01-19 17:30:28 +01:00
Lucas Fernandes Nogueira	c27af9128d	fix(barcode-scanner): check if iOS platform supports scanning (#3222 )	2026-01-19 13:16:31 -03:00
Lucas Fernandes Nogueira	b60dd88702	fix(barcode-scanner): start capture session on a separate thread (#3223 ) fixes the given warning: Thread Performance Checker: -[AVCaptureSession startRunning] should be called from background thread. Calling it on the main thread can lead to UI unresponsiveness which might cause a UI freeze	2026-01-19 13:16:16 -03:00
renovate[bot]	a97033bcd9	chore(deps): update dependency rollup to v4.55.1 (#3201 ) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2026-01-19 16:44:07 +01:00
miaoshengkun	4375c98bed	feat(updater): add no_proxy config to disable system proxy (#3073 ) Co-authored-by: Claude <noreply@anthropic.com> Co-authored-by: Fabian-Lars <github@fabianlars.de>	2026-01-19 16:17:37 +01:00
Fabian-Lars	82fbb0c790	fix(barcode-scanner): early return scanner if missing permissions (#3221 )	2026-01-19 10:21:33 -03:00
Tony	de6bf68585	docs(store): fix outdated fn link (#3220 )	2026-01-19 12:21:55 +01:00
renovate[bot]	734c627084	chore(deps): update dependency prettier to v3.8.0 (#3217 )	2026-01-18 10:54:16 +08:00
Tony	05c5da072b	chore(deps): update reqwest to 0.13 for updater (#3213 )	2026-01-16 18:37:20 +08:00
renovate[bot]	0d126ff0ad	chore(deps): update dependency typescript-eslint to v8.53.0 (v2) (#3189 ) * chore(deps): update dependency typescript-eslint to v8.53.0 * Update api-iife.js	2026-01-16 18:36:41 +08:00
FabianLars	f122ee98c6	Revert "temp: delete updater changefiles" This reverts commit `82c404635b`.	2026-01-14 20:48:59 +01:00
github-actions[bot]	2308f2299d	publish new versions (#3203 ) Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>	2026-01-14 20:48:22 +01:00
FabianLars	82c404635b	temp: delete updater changefiles	2026-01-14 20:30:54 +01:00
Fabian-Lars	b1dbee2c55	fix(http): manually set origin header to tauri://localhost (#3210 )	2026-01-14 20:26:17 +01:00
Andrew de Waal	d7a0bb325d	feat(dialog) - Support fileAccessMode for open dialog (#3030 ) (#3136 ) * feat(dialog) - Support fileAccessMode for open dialog (#3030) On iOS, when trying to access a file that exists outside of the app sandbox, one of 2 things need to happen to be able to perform any operations on said file: * A copy of the file needs to be made to the internal app sandbox * The method startAccessingSecurityScopedResource needs to be called. Previously, a copy of the file was always being made when a file was selected through the picker dialog. While this did ensure there were no file access exceptions when reading from the file, it does not scale well for large files. To resolve this, we now support `fileAccessMode`, which allows a file handle to be returned without copying the file to the app sandbox. This MR only supports this change for iOS; MacOS has a different set of needs for security scoped resources. See discussion in #3716 for more discussion of the difference between iOS and MacOS. See MR #3185 to see how these scoped files will be accessible using security scoping. * fmt, clippy * use enum --------- Co-authored-by: Lucas Nogueira <lucas@tauri.app>	2026-01-14 08:35:06 -03:00
FabianLars	f3d75f7abb	Revert "temp: remove updater changefiles" This reverts commit `9a2c98f450`.	2026-01-08 15:54:33 +01:00
github-actions[bot]	6e2e7e48c3	publish new versions (#3070 ) Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>	2026-01-08 15:34:17 +01:00
FabianLars	9a2c98f450	temp: remove updater changefiles	2026-01-08 15:17:30 +01:00
FabianLars	4a2ecb6287	chore(deps): update rkyv, closes #3196	2026-01-06 11:05:04 +01:00
Tunglies	31415effdf	docs(shell): update example to include Encoding usage in `Command::spawn` (#3183 ) * docs(shell): update example to include Encoding usage in `Command::spawn` * docs(shell): update patch level to minor for Encoding usage in `Command::spawn` documentation * Update .changes/doc-to-Encoding-usage-in-shell.md Co-authored-by: Tony <68118705+Legend-Master@users.noreply.github.com> * docs(shell): update examples to demonstrate manual Encoding usage in command output * Update plugins/shell/src/process/mod.rs Co-authored-by: Tony <68118705+Legend-Master@users.noreply.github.com> * docs(shell): update example to use 'windows-1252' encoding in command output * Update plugins/shell/src/process/mod.rs Co-authored-by: Tony <68118705+Legend-Master@users.noreply.github.com> * docs(shell): update example command in documentation to use 'some-program' with 'some-arg' * Bump shell-js in change file * Fix indent	2025-12-29 10:58:55 +08:00
renovate[bot]	04b33ea0b0	chore(deps): update dependency typescript-eslint to v8.50.1 (#3181 ) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2025-12-27 22:30:26 +08:00
renovate[bot]	54e21f142b	chore(deps): update dependency rollup to v4.54.0 (#3179 ) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2025-12-23 22:50:36 +08:00
renovate[bot]	d528c88b4f	chore(deps): update dependency rollup to v4.53.5 (#3172 ) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2025-12-19 19:16:32 +08:00
renovate[bot]	69146fa852	chore(deps): update dependency rollup to v4.53.4 (#3167 ) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2025-12-19 11:20:50 +08:00
renovate[bot]	9f68f2d827	chore(deps): update dependency typescript-eslint to v8.50.0 (#3170 ) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2025-12-19 10:58:03 +08:00
Fabian-Lars	3d0d2e041b	fix(opener): ignore inAppBrowser on desktop (#3163 )	2025-12-16 07:07:15 -03:00
renovate[bot]	1e3d7ef16e	chore(deps): update eslint monorepo to v9.39.2 (#3164 ) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2025-12-16 12:36:13 +08:00
renovate[bot]	ce6835d50f	chore(deps): update dependency @tauri-apps/cli to v2.9.6 (#3162 ) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2025-12-12 22:13:33 +08:00
renovate[bot]	1d9f47c882	chore(deps): update dependency typescript-eslint to v8.49.0 (#3160 ) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2025-12-12 10:39:11 +08:00
Fabian-Lars	e221a04ef4	docs(stronghold): add scrypt opt-level recommendation, closes #2048	2025-12-09 11:50:09 +01:00
Tony	eebfd2ed3e	fix(store): error instead of panic on invalid rid (#3157 )	2025-12-09 18:02:23 +08:00
Elias*	521cd8b372	fix(fs): off by one error in readTextFileLines (#3155 ) * fix: off by one error in readTextFileLines (#3154) Signed-off-by: EliasStar <31409841+EliasStar@users.noreply.github.com> * Format and regenerate `api-iife.js` --------- Signed-off-by: EliasStar <31409841+EliasStar@users.noreply.github.com> Co-authored-by: Tony <legendmastertony@gmail.com>	2025-12-09 11:48:18 +08:00
renovate[bot]	e4a40f4423	chore(deps): update tauri monorepo (v2) (#3142 ) * chore(deps): update tauri monorepo * Build * Bump rust tauri --------- Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: Tony <legendmastertony@gmail.com>	2025-12-07 00:03:50 +08:00
renovate[bot]	fa8b11f19d	chore(deps): update dependency prettier to v3.7.4 (#3150 ) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2025-12-06 13:10:40 +08:00
renovate[bot]	baefd761e0	chore(deps): update dependency typescript-eslint to v8.48.1 (#3146 ) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2025-12-05 18:35:15 +08:00
Tunglies	2804803949	fix: deep-link clippy warnings (#3143 ) * Update build.rs * fix: address clippy warnings in deep-link module * fix: add deep-link-js patch to address clippy warnings	2025-12-04 20:04:56 +08:00
renovate[bot]	d9d51eb8ea	chore(deps): update dependency prettier to v3.7.3 (#3140 ) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2025-12-03 09:58:49 +08:00
renovate[bot]	1483c63101	chore(deps): update dependency prettier to v3.7.2 (#3137 ) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2025-12-02 10:31:13 +08:00
renovate[bot]	26ed78989a	chore(deps): update dependency prettier to v3.7.1 (#3134 ) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2025-11-30 20:01:16 +08:00
renovate[bot]	f1564e58b6	chore(deps): update dependency prettier to v3.7.0 (#3132 ) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2025-11-30 19:53:50 +08:00
Fabian-Lars	f2d4abb9e2	fix(dialog): rfd feature flags (#3129 )	2025-11-28 15:25:58 +01:00
renovate[bot]	3dcf7522b1	chore(deps): update dependency typescript-eslint to v8.48.0 (#3126 ) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2025-11-28 14:45:59 +08:00
renovate[bot]	02068550e8	chore(deps): update rust crate rfd to 0.16 (#3128 ) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2025-11-28 13:47:22 +08:00
Fabian-Lars	66a75ece27	fix(websocket): install crypto provider if needed (#3124 )	2025-11-25 20:02:47 +01:00
Christian Leingang	fa601e8754	feat(updater): allow accepting invalid TLS certs/hostnames via config (#3057 ) Co-authored-by: Fabian-Lars <github@fabianlars.de>	2025-11-24 14:56:59 +01:00
Niccolò Gnani	d8bfe61f20	fix(barcode-scanner): remove unnecessary permission checks on Android (fix #2312 ) (#3121 )	2025-11-24 14:27:46 +01:00
Amr Bashir	e8915f17e4	fix(http): fix aborting a streaming response (#2562 )	2025-11-24 13:55:11 +01:00
Lucas Fernandes Nogueira	6de61f854b	chore(log): remove iOS simulator workarounds (#3113 )	2025-11-24 13:35:19 +01:00
renovate[bot]	ad7a8d3e42	chore(deps): update dependency rollup to v4.53.3 (#3119 ) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2025-11-24 16:25:46 +08:00
FabianLars	d5509a9ac8	chore: add docs issue template and enable blank issues	2025-11-23 13:55:52 +01:00
FabianLars	06727b19c1	chore: fix issue templates	2025-11-23 13:51:01 +01:00
Fabian-Lars	2f9fa79747	chore: add issue templates (#3122 )	2025-11-23 13:42:24 +01:00