refactor: Reorganize macos_permissions into module structure

- Split macos_permissions.rs into organized module structure:
  - mod.rs: Public API and common types
  - mac.rs: macOS-specific implementations with FFI
  - stub.rs: Non-macOS stub implementations
- Improves code organization and maintainability
- Cleaner separation of platform-specific logic
- Same public API, better internal structure

Author: malpern

src/macos_permissions.rs

@@ -0,0 +1,73 @@
+use kanata_tcp_protocol::PermissionState;
+
+type Boolean = u8;
+type CFDictionaryRef = *const core::ffi::c_void;
+
+#[repr(C)]
+pub enum IOHIDRequestType {
+    IOHIDRequestTypeListenEvent = 0,
+}
+
+#[link(name = "ApplicationServices", kind = "framework")]
+unsafe extern "C" {
+    fn AXIsProcessTrustedWithOptions(options: CFDictionaryRef) -> Boolean;
+}
+
+#[link(name = "IOKit", kind = "framework")]
+unsafe extern "C" {
+    fn IOHIDCheckAccess(request_type: IOHIDRequestType) -> Boolean;
+}
+
+#[derive(Debug)]
+pub struct MacosPermissionStatus {
+    pub accessibility: PermissionState,
+    pub input_monitoring: PermissionState,
+}
+
+pub fn check_macos_permissions() -> MacosPermissionStatus {
+    let accessibility = unsafe {
+        let trusted = AXIsProcessTrustedWithOptions(core::ptr::null());
+        if trusted == 1 {
+            PermissionState::Granted
+        } else {
+            PermissionState::Denied
+        }
+    };
+
+    let input_monitoring = unsafe {
+        let granted = IOHIDCheckAccess(IOHIDRequestType::IOHIDRequestTypeListenEvent);
+        if granted == 1 {
+            PermissionState::Granted
+        } else {
+            PermissionState::Denied
+        }
+    };
+
+    MacosPermissionStatus {
+        accessibility,
+        input_monitoring,
+    }
+}
+
+pub fn restart_process() -> Result<(), String> {
+    use std::ffi::CString;
+
+    let args: Vec<_> = std::env::args().collect();
+    if args.is_empty() {
+        return Err("No arguments found".to_string());
+    }
+
+    let c_args: Result<Vec<CString>, _> = args.iter().map(|s| CString::new(s.as_str())).collect();
+    let c_args = match c_args {
+        Ok(v) => v,
+        Err(e) => return Err(format!("Invalid argument: {}", e)),
+    };
+
+    let mut c_ptrs: Vec<*const libc::c_char> = c_args.iter().map(|s| s.as_ptr()).collect();
+    c_ptrs.push(core::ptr::null());
+
+    unsafe {
+        libc::execv(c_ptrs[0], c_ptrs.as_ptr());
+        Err(format!("execv failed: {}", std::io::Error::last_os_error()))
+    }
+}

src/macos_permissions/mac.rs

@@ -0,0 +1,9 @@
+#[cfg(target_os = "macos")]
+mod mac;
+#[cfg(not(target_os = "macos"))]
+mod stub;
+
+#[cfg(target_os = "macos")]
+pub use mac::*;
+#[cfg(not(target_os = "macos"))]
+pub use stub::*;

src/macos_permissions/mod.rs

@@ -0,0 +1,18 @@
+use kanata_tcp_protocol::PermissionState;
+
+#[derive(Debug)]
+pub struct MacosPermissionStatus {
+    pub accessibility: PermissionState,
+    pub input_monitoring: PermissionState,
+}
+
+pub fn check_macos_permissions() -> MacosPermissionStatus {
+    MacosPermissionStatus {
+        accessibility: PermissionState::NotApplicable,
+        input_monitoring: PermissionState::NotApplicable,
+    }
+}
+
+pub fn restart_process() -> Result<(), String> {
+    Err("Process restart is only supported on macOS".to_string())
+}