feat(automation): add macOS permission check before automation start

apps/companion/main/preload.ts

@@ -1,13 +1,37 @@
 import { contextBridge, ipcRenderer } from 'electron';
 import type { HostedSessionConfig } from '../../../packages/domain/entities/HostedSessionConfig';
 
+export interface PermissionStatus {
+  accessibility: boolean;
+  screenRecording: boolean;
+  platform: NodeJS.Platform;
+}
+
+export interface PermissionCheckResponse {
+  success: boolean;
+  granted: boolean;
+  status: PermissionStatus;
+  missingPermissions: string[];
+  error?: string;
+}
+
 export interface ElectronAPI {
-  startAutomation: (config: HostedSessionConfig) => Promise<{ success: boolean; sessionId?: string; error?: string }>;
+  startAutomation: (config: HostedSessionConfig) => Promise<{
+    success: boolean;
+    sessionId?: string;
+    error?: string;
+    permissionError?: boolean;
+    missingPermissions?: string[];
+  }>;
   stopAutomation: (sessionId: string) => Promise<{ success: boolean; error?: string }>;
   getSessionStatus: (sessionId: string) => Promise<any>;
   pauseAutomation: (sessionId: string) => Promise<{ success: boolean; error?: string }>;
   resumeAutomation: (sessionId: string) => Promise<{ success: boolean; error?: string }>;
   onSessionProgress: (callback: (progress: any) => void) => void;
+  // Permission APIs
+  checkPermissions: () => Promise<PermissionCheckResponse>;
+  requestAccessibility: () => Promise<{ success: boolean; granted: boolean; error?: string }>;
+  openPermissionSettings: (pane?: 'accessibility' | 'screenRecording') => Promise<{ success: boolean; error?: string }>;
 }
 
 contextBridge.exposeInMainWorld('electronAPI', {
@@ -18,5 +42,10 @@ contextBridge.exposeInMainWorld('electronAPI', {
   resumeAutomation: (sessionId: string) => ipcRenderer.invoke('resume-automation', sessionId),
   onSessionProgress: (callback: (progress: any) => void) => {
     ipcRenderer.on('session-progress', (_event, progress) => callback(progress));
-  }
+  },
+  // Permission APIs
+  checkPermissions: () => ipcRenderer.invoke('automation:checkPermissions'),
+  requestAccessibility: () => ipcRenderer.invoke('automation:requestAccessibility'),
+  openPermissionSettings: (pane?: 'accessibility' | 'screenRecording') =>
+    ipcRenderer.invoke('automation:openPermissionSettings', pane),
 } as ElectronAPI);