Poll for mic permission when denied (handle launchd restart race)

When launchd restarts capsper after a crash, a mic permission dialog
from the previous launch may still be visible. The old code saw
status=denied and immediately exited, causing a restart loop that
spawned multiple overlapping dialogs.

Now when status is denied, poll every 2s for up to 30s to give the
user time to click Allow on an existing dialog. This eliminates the
cascade of permission prompts on first install.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: danielbodart

src/platform/macos/audio.zig

@@ -63,20 +63,22 @@ pub const AudioCapture = struct {
         // virtual devices deliver real audio without mic permission, and the user
         // explicitly chose the device.
         const mic_status = if (target != null) @as(c_int, 3) else capsper_mic_permission_status();
-        if (mic_status == 0) {
+        if (mic_status != 3) {
+            // Not yet authorized: request permission (or poll if denied).
+            // For notDetermined (0): shows the system permission dialog and blocks.
+            // For denied (2): polls for 30s in case a dialog from a previous
+            //   launch is still visible (launchd restarts race with user clicking Allow).
+            // For restricted (1): polls briefly then fails.
+            if (mic_status == 1) {
+                log.err("Microphone access is restricted by system policy.", .{});
+                return error.AudioInitFailed;
+            }
             log.info("Requesting microphone permission...", .{});
             if (capsper_mic_request_permission() == 0) {
                 log.err("Microphone permission denied.", .{});
                 log.err("Grant access in: System Settings → Privacy & Security → Microphone", .{});
                 return error.AudioInitFailed;
             }
-        } else if (mic_status == 2) {
-            log.err("Microphone permission denied.", .{});
-            log.err("Grant access in: System Settings → Privacy & Security → Microphone", .{});
-            return error.AudioInitFailed;
-        } else if (mic_status == 1) {
-            log.err("Microphone access is restricted by system policy.", .{});
-            return error.AudioInitFailed;
         }
 
         // Create pipe for passing PCM from CoreAudio thread to main thread

src/platform/macos/mic_permission.m

@@ -12,19 +12,35 @@ int capsper_mic_permission_status(void) {
 
 // Blocks until the user responds to the permission dialog.
 // Returns 1 if granted, 0 if denied.
-// If permission was already determined, returns immediately.
+// If status is notDetermined, shows the permission dialog and blocks.
+// If status is denied, polls for up to 30 seconds in case a permission
+// dialog from a previous launch is still visible (launchd restarts can
+// race with the user clicking "Allow").
 int capsper_mic_request_permission(void) {
     AVAuthorizationStatus status = [AVCaptureDevice authorizationStatusForMediaType:AVMediaTypeAudio];
     if (status == AVAuthorizationStatusAuthorized) return 1;
-    if (status != AVAuthorizationStatusNotDetermined) return 0;
 
-    __block int granted = 0;
-    dispatch_semaphore_t sem = dispatch_semaphore_create(0);
-    [AVCaptureDevice requestAccessForMediaType:AVMediaTypeAudio completionHandler:^(BOOL g) {
-        granted = g ? 1 : 0;
-        dispatch_semaphore_signal(sem);
-    }];
-    dispatch_semaphore_wait(sem, DISPATCH_TIME_FOREVER);
-    return granted;
+    if (status == AVAuthorizationStatusNotDetermined) {
+        __block int granted = 0;
+        dispatch_semaphore_t sem = dispatch_semaphore_create(0);
+        [AVCaptureDevice requestAccessForMediaType:AVMediaTypeAudio completionHandler:^(BOOL g) {
+            granted = g ? 1 : 0;
+            dispatch_semaphore_signal(sem);
+        }];
+        dispatch_semaphore_wait(sem, DISPATCH_TIME_FOREVER);
+        return granted;
+    }
+
+    // Status is denied or restricted. Poll briefly in case the user is
+    // responding to a mic dialog from a previous launch attempt — launchd's
+    // KeepAlive restarts can overlap with a pending permission prompt.
+    for (int i = 0; i < 15; i++) {
+        [NSThread sleepForTimeInterval:2.0];
+        if ([AVCaptureDevice authorizationStatusForMediaType:AVMediaTypeAudio]
+                == AVAuthorizationStatusAuthorized) {
+            return 1;
+        }
+    }
+    return 0;
 }