feat(core): seed Finder/Safari navigation profiles for pointing devices

[alexrzem]

Summary

Back/Forward work in Chrome but do nothing in Finder or Safari: neither app implements mouse-button-4/5 navigation, and every driver that makes them work there (Logi Options+ included) synthesizes the app's own Go/History shortcut instead. This PR seeds the same two per-app overrides — com.apple.finder / com.apple.Safari → BrowserBack/BrowserForward (⌘[ / ⌘]) — for every pointing device.

Because the seeded actions differ from the Back/Forward defaults, the app-scoped capture plan HID++-diverts the buttons while those apps are frontmost, so dispatch does not depend on the OS hook attributing Bluetooth-direct mice (#722). Builds on #1225.

Changes

• openlogi-core: seed_navigation_profiles, applied exactly once per device (first identity record) and once per config (v7→v8 migration). An app key with any existing per-app entry is never touched, and a v8 file missing the profile is the user's deletion, not a gap to refill. macOS-only — the stock file managers and browsers on Linux/Windows navigate on buttons 4/5 natively. SCHEMA_VERSION 7 → 8; docs/config.example.toml updated.
• openlogi-desktop: five state tests moved off com.apple.Safari onto neutral bundle ids (Safari now legitimately ships a built-in profile), plus a new test pinning the inventory → identity → seed path.

Testing

• cargo fmt --all -- --check, cargo clippy --workspace --all-targets -- -D warnings (RUSTFLAGS=-D warnings), cargo test --workspace, and the non-GUI rustdoc gate — green on macOS arm64.
• cargo xtask ci: rustfmt, clippy, MSRV, rustdoc, macOS tests, windows clippy proxy, typos, wasm — pass. Not run locally: tests (linux), cargo-deny (no dependency changes), shell (no shell changes).
• Cross-lints for the cfg-gated diff: clippy --target aarch64-unknown-linux-musl and --target x86_64-pc-windows-gnu — green.
• Not runtime-tested on hardware. To verify: build this branch, start from a fresh config (or delete the two seeded profiles), let the device be sighted once, then press Back/Forward in Finder and Safari — both navigate; Chrome keeps the native buttons 4/5. The hand-written equivalent (per-app ⌘[/⌘] overrides) is what [Bug]: macOS: Back/Forward never navigate in Finder on a Bluetooth-direct MX Master 3S — MouseBack posts a button 4/5 Finder ignores, and the default ⌘[ binding is never HID++-diverted so it dies in the fail-closed hook #1263's commenters confirmed working on hardware.

Refs #1263, #354, #1118, #722

Fixes #582

[greptile-apps]

Confidence Score: 4/5

This PR is not yet safe to merge because a provisionally unidentified mouse can permanently miss the navigation profiles the feature is intended to provide.

Findings

1.  Provisional identity prevents seeding ▶

Summary

• Adds one-shot Finder and Safari BrowserBack/BrowserForward profiles.
• Migrates recorded pre-v8 pointing-device identities while preserving existing app profiles.
• Updates desktop state tests and the example configuration.
• The first-identity gate misses devices whose initially provisional kind is corrected on a later inventory refresh.

Diagram

%%{init: {'theme': 'neutral'}}%%
flowchart TD
  A[Device inventory snapshot] --> B{Identity already recorded?}
  B -- No --> C{Kind is Mouse or Trackball?}
  C -- Yes --> D[Seed Finder and Safari profiles]
  C -- No or Unknown --> E[Do not seed]
  D --> F[Persist identity]
  E --> F
  B -- Yes --> G[Refresh identity without seeding]
  F --> H[Later probe corrects kind]
  H --> G
  G --> I[Corrected mouse may remain unseeded]

Loading

_{Reviews (1) · Last reviewed commit: "feat(core): seed Finder/Safari navigatio..."}

[greptile-apps]

Provisional identity prevents seeding

When a device’s first persisted identity has DeviceKind::Unknown because its marketing-type probe was temporarily unavailable, this branch skips seeding but still records the identity. A later refresh that correctly identifies the device as a mouse cannot seed the profiles because device.identity is already populated. As a result, Back and Forward remain inactive in Finder and Safari for that device. The inventory persists measured capabilities independently of the provisional kind, and direct devices explicitly fall back to Unknown, so partial probing can reach this state.

Knowledge Base Used:

• Core domain and configuration
• Shared platform services