feat(linux): launch_at_login + input device access permission check

[cserby]

Summary

• launch_at_login on Linux — writes/removes a systemd user unit at $XDG_CONFIG_HOME/systemd/user/openlogi-agent.service. Mirrors the macOS LaunchAgent behaviour exactly: Restart=on-failure (crash respawns; clean exit(0) stays stopped), WantedBy=graphical-session.target (takes effect at next login). Unit content is compared before writing (idempotent). systemctl --user enable/disable is best-effort — failures are logged, not propagated.
• Input device access permission check on Linux — Settings → Permissions now shows a Linux-specific row ("Input device access") backed by probes of /dev/uinput (write) and /dev/hidraw* (read/write, Logitech vendor verified numerically from sysfs HID_ID). Returns Granted / Denied / Unknown (unknown = uinput accessible but no Logitech device connected yet). Description is shown only when access is not yet granted.
• macOS-only UI hidden on Linux — accessibility footer, permission "Open" button, and "log in to macOS" copy are all gated to macOS.

Test plan

• cargo test -p openlogi-agent -p openlogi-gui passes on Linux (7 new unit tests in launch_agent.rs, 4 in permissions.rs)
• cargo clippy --workspace --all-targets -- -D warnings clean
• cargo fmt --check clean
• Toggle "Launch at login" → ~/.config/systemd/user/openlogi-agent.service appears; systemctl --user is-enabled openlogi-agent reports enabled; toggle off → file removed, disabled
• Settings → Permissions shows "Granted" with udev rules installed; "Not granted" without
• No macOS-specific text or buttons visible in Linux GUI build

🤖 Generated with Claude Code

[greptile-apps]

Greptile Summary

This PR brings Linux parity for two agent features: launch_at_login via a systemd user unit, and an input-device permission check in the Settings window backed by probes of /dev/uinput and /dev/hidraw*. macOS-only UI surfaces (accessibility footer, "Open" button, login copy) are now gated behind #[cfg(target_os = "macos")].

• launch_agent.rs — writes/removes $XDG_CONFIG_HOME/systemd/user/openlogi-agent.service; systemctl enable/disable calls are best-effort with logging. Proper % and $ escaping for ExecStart is implemented and well-tested (7 new unit tests).
• permissions.rs — new input_device_access() probes uinput writability and Logitech hidraw read/write access via sysfs VID lookup; classify() is factored out and covered by 4 unit tests.
• Locale files — "Input device access" key added to all 22 locales (mostly untranslated placeholders for non-Italian/Japanese/Russian/Chinese variants).

Confidence Score: 5/5

Safe to merge — all new Linux code paths are additive and gated behind #[cfg(target_os = "linux")]; existing macOS and Windows behaviour is unchanged.

The Linux additions are well-structured, idempotent, and covered by 11 new unit tests. The only notable concern is that input_device_access() performs live filesystem I/O inside a GPUI render closure rather than being cached — a quality-of-life issue for future work, not a correctness defect. No logic errors, data-loss paths, or security issues were found.

crates/openlogi-gui/src/windows/settings.rs and crates/openlogi-gui/src/platform/permissions.rs — the render-time device probing is worth revisiting when adding a background refresh model.

Important Files Changed

Filename	Overview
crates/openlogi-agent/src/launch_agent.rs	Adds Linux systemd user-unit reconcile: writes/removes the unit file, calls systemctl enable/disable best-effort, includes proper % and $ escaping; 7 new unit tests cover all escape paths.
crates/openlogi-gui/src/platform/permissions.rs	Adds Linux device-file probes (/dev/uinput, /dev/hidraw* via sysfs VID check); logic is correct but input_device_access() is called directly in the render closure, performing filesystem I/O on every repaint.
crates/openlogi-core/src/paths.rs	Adds xdg_config_home() (raw base without the app subdir) and refactors config_dir() to delegate to it; no logic change, existing tests unaffected.
crates/openlogi-gui/src/windows/settings.rs	Gates macOS-only UI behind #[cfg(target_os = "macos")]; adds Linux SettingField for input device access with correct Denied/Unknown/Granted messages. The input_device_access() call in the render closure performs live I/O on every repaint.
crates/openlogi-gui/src/app.rs	Gates accessibility_status to macOS only and silences the unused granted parameter on other platforms; straightforward conditional compilation change.

Flowchart

%%{init: {'theme': 'neutral'}}%%
flowchart TD
    A["reconcile(enabled)"] --> B{platform}
    B -->|macOS| C[reconcile_macos]
    B -->|Windows| D[reconcile_windows]
    B -->|Linux| E[reconcile_linux]
    B -->|other| F["log: no backend"]
    E --> G["unit_path via xdg_config_home"]
    G --> H["read current unit file"]
    H --> I{desired vs current}
    I -->|same content| J["no-op: already current"]
    I -->|"enable - file differs"| K["write unit file"]
    I -->|"disable - file exists"| L["systemctl disable"]
    K --> M["systemctl daemon-reload"]
    M --> N["systemctl enable"]
    L --> O["remove_file"]
    O --> P["systemctl daemon-reload"]
    I -->|"disable - no file"| Q["no-op: already absent"]
    subgraph "Linux permissions probe"
        R["input_device_access()"] --> S["probe_uinput"]
        R --> T["probe_logitech_hidraw"]
        T --> U["is_logitech_hidraw via sysfs HID_ID"]
        S --> W["classify(uinput_ok, hidraw_ok)"]
        U --> W
        W -->|"true + Some(true)"| X[Granted]
        W -->|"false or Some(false)"| Y[Denied]
        W -->|"true + None"| Z[Unknown]
    end

Loading

_{Reviews (11): Last reviewed commit: "Merge remote-tracking branch 'origin/mas..." | Re-trigger Greptile}