fix(macos): request Input Monitoring and Bluetooth from the agent

[EyJunge1]

Summary

• Raise Accessibility, Input Monitoring, and Bluetooth consent from OpenLogi Agent (org.openlogi.agent), not the GUI — TCC is per identity, which is why Settings could show a grant while the agent still could not open HID ([Bug]: Permissions - Input monitoring #1261).
• The GUI asks for any missing agent rights after its first Ready snapshot; Settings Grant buttons use the same RPCs. System Settings opens only when the grant is already denied (or the user declined).
• Arming never prompts (login or GUI-demand). A fresh Input Monitoring Allow relaunches the agent because IOHIDCheckAccess stays stale in the granting process. Bluetooth CBCentralManager is created on the AppKit main queue; authorization is polled off the tray thread. NSBluetoothAlwaysUsageDescription is stamped on the agent Info.plist.

Closes #1261

[greptile-apps]

Confidence Score: 5/5

The PR appears safe to merge; the previously reported permission-flow failures are resolved and no actionable new defect remains.

Summary

This PR moves macOS Accessibility, Input Monitoring, and Bluetooth consent requests to the agent identity and reports their status to the desktop over IPC.

• Adds agent-owned Input Monitoring and CoreBluetooth prompt implementations.
• Relays permission state and prompt requests through the IPC protocol.
• Sequences automatic prompts around the required Input Monitoring relaunch.
• Adds Bluetooth permission watching and the agent bundle usage description.
• Updates Settings behavior, localization, tests, and macOS permission documentation.

Diagram

sequenceDiagram
    participant GUI as OpenLogi Desktop
    participant Agent as OpenLogi Agent
    participant macOS as macOS TCC
    GUI->>Agent: Observe Ready permission status
    GUI->>Agent: Request missing Accessibility/Input Monitoring
    Agent->>macOS: Invoke permission API as agent identity
    alt Input Monitoring granted
        Agent->>Agent: Graceful shutdown and relaunch
        Agent-->>GUI: Reconnect with refreshed status
    end
    GUI->>Agent: Request Bluetooth when Input Monitoring is granted
    Agent->>macOS: Create CBCentralManager on main queue
    Agent-->>GUI: Publish updated Bluetooth status

Loading

_{Reviews (8) · Last reviewed commit: "fix(macos): relaunch through the lifecyc..."}