fix: restore paste focus and auto-refresh permissions

[sykuang]

Summary

• reactivate the exact previously focused macOS app before sending Cmd+V
• wait for and verify the target bundle ID to prevent paste focus races
• automatically recheck permissions when returning from System Settings
• align Tauri JavaScript packages with the Rust crates
• update random byte generation for rand 0.10
• ignore local .worktrees/ directories

Validation

• npm ci
• npm test -- --run src/App.test.tsx
• npm run build
• cargo check --manifest-path src-tauri/Cargo.toml
• cargo test --manifest-path src-tauri/Cargo.toml --lib paste_target_bundle_must_be_frontmost_before_pasting
• npm run tauri -- build --no-bundle

[Copilot]

Pull request overview

This PR improves macOS paste reliability by restoring focus to the exact previously frontmost app (using bundle IDs and verification) and improves the permissions UX by automatically rechecking permissions when the permissions window regains focus.

Changes:

• Auto-refresh permissions when the permissions window regains focus (plus a focused unit test).
• macOS paste now reactivates the previously frontmost app by bundle ID and verifies focus before issuing Cmd+V.
• Minor UX/docs updates (permissions hint text) and ignore local .worktrees/ directories.

Reviewed changes

Copilot reviewed 4 out of 5 changed files in this pull request and generated 1 comment.

Show a summary per file

File	Description
src/components/PermissionsModal.tsx	Updates hint text to reflect automatic permission rechecks.
src/App.tsx	Adds focus-based permission refresh logic for the permissions window.
src/App.test.tsx	Adds a test ensuring permissions are rechecked when the window regains focus.
src-tauri/src/platform/macos.rs	Restores focus to the last frontmost app by bundle ID and verifies focus before pasting.
.gitignore	Ignores local .worktrees/ directories.

[Copilot]

Pull request overview

Copilot reviewed 7 out of 9 changed files in this pull request and generated 1 comment.

Comments suppressed due to low confidence (2)

src/App.tsx:734

• refreshPermissions can still be invoked after the effect cleanup via a queued focus event, which would call setCheckingPermissions(true) even when cancelled is already true (potential setState-after-unmount warning). Add an early cancelled guard before mutating local/state flags.

    const refreshPermissions = async () => {
      if (checking) return;
      checking = true;
      setCheckingPermissions(true);
      try {
        const res = await checkPermissions();
        if (cancelled) return;
        setPermissions(res);

src-tauri/src/platform/macos.rs:12

• set_last_frontmost_app_name currently overwrites the stored last frontmost app with None when query_frontmost_app_bundle_id() returns None, which can erase a previously valid paste target and cause perform_paste to fail with "no previous app available". Preserve the prior value when the bundle ID can’t be determined.

pub fn set_last_frontmost_app_name(name: String) {
    let cell = LAST_FRONTMOST_APP.get_or_init(|| Mutex::new(None));
    let mut guard = cell.lock().unwrap_or_else(|e| e.into_inner());
    *guard = query_frontmost_app_bundle_id().map(|bundle_id| (name, bundle_id));
}