feat(linux): install artifacts and docs

[cserby]

Summary

• packaging/linux/udev/70-openlogi.rules — TAG+="uaccess" for Logitech hidraw nodes and uinput; no group membership required on systemd-logind systems. Includes non-systemd GROUP="input" fallback instructions in comments.
• packaging/linux/systemd/openlogi-agent.service — packaged user-unit template for /usr/lib/systemd/user/; complements the per-user unit written by the launch_at_login setting.
• packaging/linux/desktop/openlogi.desktop — XDG application launcher entry.
• packaging/linux/install.sh / uninstall.sh — POSIX sh, set -eu; copies binaries and all artifacts to system paths, reloads udevadm, and performs best-effort icon cache and desktop database updates.
• docs/INSTALL-linux.md — full Linux install guide: prerequisites, build from source, udev rules (uaccess + non-systemd fallback), install.sh usage, autostart via systemctl, verification steps, known limitations.
• README.md — Linux subsection under ## Install with the quick-start snippet and a link to the full guide.

Test plan

• desktop-file-validate packaging/linux/desktop/openlogi.desktop — clean
• shellcheck packaging/linux/install.sh packaging/linux/uninstall.sh — clean (requires shellcheck)
• udevadm verify packaging/linux/udev/70-openlogi.rules — clean (requires udevadm ≥ 252)
• bash -n packaging/linux/install.sh && bash -n packaging/linux/uninstall.sh — no syntax errors
• Full install.sh run after cargo build --release — binaries, rules, unit, desktop, icon all land in expected paths
• udevadm trigger after install — /dev/uinput and /dev/hidraw* become accessible without sudo
• uninstall.sh — all installed files removed, udevadm reloaded

🤖 Generated with Claude Code

[greptile-apps]

Greptile Summary

This PR adds the full Linux packaging layer for OpenLogi: udev rules, a systemd user-unit template, a .desktop launcher, install.sh/uninstall.sh scripts, and a comprehensive install guide. It also wires up Linux-specific autostart (launch_at_login via a per-user systemd unit) and a device-access permission indicator in the Settings UI.

• Packaging artifacts (packaging/linux/): POSIX sh install/uninstall scripts correctly handle SUDO_USER, escape @BINDIR@ for sed, set XDG_RUNTIME_DIR for systemctl --user, and trigger udev on both install and uninstall. The new udev rules use SUBSYSTEM=="hidraw" (more reliable than the old KERNEL=="hidraw*") and broaden the Bluetooth KERNELS pattern.
• Rust changes: reconcile_linux in launch_agent.rs writes/removes ~/.config/systemd/user/openlogi-agent.service idempotently, with correct disable-before-remove ordering and a well-tested escape_systemd_exec function. The Linux permission model in permissions.rs probes /dev/uinput and /dev/hidraw* via sysfs uevent vendor matching, with a pure classify function tested independently.
• Docs/README: docs/INSTALL-linux.md covers prerequisites through verification steps; the --check-uinput diagnostic snippet references a flag not yet implemented in the binary, and uninstall.sh does not remove the per-user unit file written by the launch_at_login feature.

Confidence Score: 5/5

Safe to merge; all install/uninstall logic is correct and the Rust permission and autostart code is well-tested.

The install/uninstall scripts handle the tricky sudo -u + XDG_RUNTIME_DIR pattern correctly, udev trigger runs on both install and uninstall, and the Rust reconciliation logic has solid unit tests. The two findings are documentation and cleanup gaps that do not affect correctness of the installed system.

packaging/linux/uninstall.sh and docs/INSTALL-linux.md

Important Files Changed

Filename	Overview
packaging/linux/install.sh	POSIX sh install script with set -eu; correctly uses SUDO_USER to detect the real user, sets XDG_RUNTIME_DIR for the systemctl --user daemon-reload call, and properly escapes the sed replacement for @bindir@.
packaging/linux/uninstall.sh	Correctly sets XDG_RUNTIME_DIR for systemctl --user disable --now, and triggers udev after rule removal. The per-user unit at ~/.config/systemd/user/openlogi-agent.service written by launch_at_login is not removed.
crates/openlogi-agent/src/launch_agent.rs	Adds Linux systemd user-unit reconciliation: idempotent write/remove of ~/.config/systemd/user/openlogi-agent.service, with correct disable-before-remove ordering and well-tested escape_systemd_exec covering %, $, spaces, and quoted paths.
crates/openlogi-core/src/paths.rs	Extracts xdg_config_home() as a public helper; existing config_dir() is correctly refactored to delegate through it, preserving behavior.
crates/openlogi-gui/src/platform/permissions.rs	Adds Linux permission model: probe_uinput, probe_logitech_hidraw, and a well-tested pure classify function. HID_ID vendor parsing via sysfs uevent is correct. macOS-only variants are properly gated.
crates/openlogi-gui/src/windows/settings.rs	Permissions page split into macOS and Linux cfg blocks; permission_item and permission_field correctly gated to macOS-only. Linux gets a single Input device access item with inline status and guidance text.
packaging/linux/udev/70-openlogi.rules	Replaces KERNEL=="hidraw*" with SUBSYSTEM=="hidraw" (more reliable), broadens Bluetooth KERNELS match from 0005:046D:* to :046D:, and drops redundant MODE="0660" alongside TAG+="uaccess".
docs/INSTALL-linux.md	Comprehensive install guide covering prerequisites, build, udev rules, install script usage, and autostart. References openlogi-agent --check-uinput which is not implemented in the binary.
packaging/linux/systemd/openlogi-agent.service	Systemd user unit template with @bindir@ placeholder substituted by install.sh at install time; matches the unit rendered by launch_agent.rs::render_unit exactly.

_{Reviews (9): Last reviewed commit: "refactor(linux): use @BINDIR@ placeholde..." | Re-trigger Greptile}

[recchia]

Nice to see the packaging come together — and thanks for carrying the Bluetooth/uhid matcher forward into the comment block; generalizing it to :046D: is a good call.
One thing I'd flag: this adds packaging/linux/udev/70-openlogi.rules as a new file, but udev/70-openlogi.rules already exists in master and neither this PR nor #179 removes it. If both land as-is, the tree ends up with two copies of the rules that will drift apart on the next fix. Suggest making this a git mv of the existing file into packaging/linux/udev/ so there's a single source of truth.

[cserby]

Nice to see the packaging come together — and thanks for carrying the Bluetooth/uhid matcher forward into the comment block; generalizing it to :046D: is a good call. One thing I'd flag: this adds packaging/linux/udev/70-openlogi.rules as a new file, but udev/70-openlogi.rules already exists in master and neither this PR nor #179 removes it. If both land as-is, the tree ends up with two copies of the rules that will drift apart on the next fix. Suggest making this a git mv of the existing file into packaging/linux/udev/ so there's a single source of truth.

Thank you @recchia for pointing this out, I was not aware of your work in the area being merged upstream.

[recchia]

Confirmed on the new push — single source of truth restored, and the rewritten rules look good (generalizing the Bluetooth matcher to :046D: covers more transports than my original). One small thing from my hardware testing that got lost in the rewrite, in case it's worth a line in INSTALL-linux.md: on my setup (Bolt receiver and Bluetooth-direct), already-connected devices needed a replug/power-cycle after installing the rules before the uaccess ACL applied — udevadm trigger alone didn't re-grant it on the existing hidraw nodes. Since install.sh will mostly run with the device already connected, a one-line note could save some "rules don't work" reports. Resolving this thread — thanks for the quick turnaround on the relocation.