Update audio-device extension

[Inovvia]

Description

• Added windows support

Screencast

explorer_Gyt3gzCXFJ.mp4

Checklist

• I read the extension guidelines
• I read the documentation about publishing
• I ran npm run build and tested this distribution build in Raycast
• I checked that files in the assets folder are used by the extension itself
• I checked that assets used by the README are placed outside of the metadata folder

[raycastbot]

Thank you for your contribution! 🎉

🔔 @benvp @mathieudutour @mike182uk @FezVrasta @rcruzper @thomaspaulmann @arthur-fontaine @pernielsentikaer @taschaub @cballenar @joshmedeski @jdh747 you might want to have a look.

You can use this guide to learn how to check out the Pull Request locally in order to test it.

📋 Quick checkout commands

BRANCH="ext/audio-device"
FORK_URL="https://github.com/Inovvia/raycast-extensions.git"
EXTENSION_NAME="audio-device"
REPO_NAME="raycast-extensions"

git clone -n --depth=1 --filter=tree:0 -b $BRANCH $FORK_URL
cd $REPO_NAME
git sparse-checkout set --no-cone "extensions/$EXTENSION_NAME"
git checkout
cd "extensions/$EXTENSION_NAME"
npm install && npm run dev

We're currently experiencing a high volume of incoming requests. As a result, the initial review may take up to 10-15 business days.

[greptile-apps]

Greptile Summary

This PR adds Windows support to the audio-device extension through a platform abstraction layer, while preserving existing macOS functionality. The refactoring properly separates platform-specific implementations and correctly updates package metadata to reflect multi-platform support.

However, the PR introduces a critical security vulnerability in the Windows implementation where the deviceId parameter is directly interpolated into PowerShell commands without escaping, creating a command injection risk. Additionally, the new Windows-specific action has an incorrect macOS-only keyboard shortcut that will not work on the target platform.

Key changes:

• Platform abstraction layer (src/platform/) cleanly separates macOS and Windows implementations
• Windows support implemented via PowerShell AudioDeviceCmdlets module with auto-installation
• Cross-platform device handling with transport type detection for both platforms
• Package metadata updated to declare Windows platform support
• CHANGELOG properly formatted with {PR_MERGE_DATE} placeholder

Critical issues found:

• PowerShell command injection vulnerability in device ID handling (windows.ts:128)
• Incorrect macOS keyboard shortcut on Windows-only action (helpers.tsx:221)

Confidence Score: 1/5

• This PR should not be merged in its current state due to a critical PowerShell command injection vulnerability on Windows.
• The score reflects a critical security vulnerability where unescaped user input (deviceId) is directly interpolated into PowerShell commands, creating a command injection risk. Additionally, a Windows-only action uses a macOS-specific keyboard shortcut that will not function. These are blocking issues that must be resolved before merging.
• extensions/audio-device/src/platform/windows.ts (command injection vulnerability), extensions/audio-device/src/helpers.tsx (incorrect platform-specific shortcut)

Important Files Changed

Filename	Overview
extensions/audio-device/CHANGELOG.md	Updated with Windows support feature entry using {PR_MERGE_DATE} placeholder as per custom rules. Entry is properly placed at top with descending version order maintained.
extensions/audio-device/package.json	Added Windows to platforms array alongside macOS. Dependencies and configuration properly updated for multi-platform support.
extensions/audio-device/src/audio-device.ts	Clean platform abstraction wrapper that delegates to platform-specific implementations. Proper error handling for unsupported platforms.
extensions/audio-device/src/platform/windows.ts	New Windows implementation with PowerShell integration. Contains security vulnerability: unescaped deviceId interpolation in PowerShell command (line 128) allows command injection attacks. Module auto-installation feature may cause unexpected interruptions.
extensions/audio-device/src/helpers.tsx	Added Windows support with SetCommunicationDeviceAction. Issue: shortcut uses macOS-specific cmd key for Windows-only action (line 221) and uses bare string syntax instead of Keyboard object.

[greptile-apps]

_{8 files reviewed, 2 comments}

_{Edit Code Review Agent Settings | Greptile}

[raycastbot]

This pull request has been automatically marked as stale because it did not have any recent activity.

It will be closed if no further activity occurs in the next 7 days to keep our backlog clean 😊

[Inovvia]

Bumping so it doesn't auto close :3