Ask for Screen Recording from the agent and Accessibility on first input

client/cmd/vnc_agent_darwin.go

@@ -9,6 +9,13 @@ import (
 )
 
 func newAgentResources() (vncserver.ScreenCapturer, vncserver.InputInjector, error) {
+	// Ask for Screen Recording here and nowhere else: this process runs as the
+	// console user, which is what TCC requires for a user-scope service, and it
+	// is the point where somebody is demonstrably trying to view the screen.
+	// Granting it also requires the capturing process to restart, which comes
+	// for free since the agent is respawned per session.
+	vncserver.PrimeScreenCapturePermission()
+
 	capturer := vncserver.NewMacPoller()
 	injector, err := vncserver.NewMacInputInjector()
 	if err != nil {