[iamnbutler]

The menu was mostly status the user doesn't need there. Now it shows:

• the status line;
• a Grant item only for a missing permission (granted ones are no longer listed);
• Show agent cursor, Highlight agent's window, Always Allow Agent-Supplied Passwords, Approved Agents;
• Open Log;
• Pause All Input, just above Quit.

Recent Activity, All Activity, the socket path and Serve agents are gone from the menu. Serve agents stopped the server outright, which Quit already does; Pause All Input blocks input while still letting agents look, and Approved Agents blocks one agent. The runtime now appends every listed operation to activity.log in the state folder (0600, moved to .1 past 1 MiB), one line each: time, operation, app and window, agent (pid), outcome. The app adds its own lines: start (version and socket), quit, pause/resume, the password setting, and allowing, refusing or forgetting an agent. Open Log opens the file with the default .log app (Console).

Embedding: desktop_tools_set_log(path) and desktop_tools_log(message). desktop_tools_activity is unchanged, so Ace keeps working.

Tests: npm test 81/81. The app and runtime build (unsigned, node dist/app.js --out build). Not run live: the dev app wasn't relaunched, so the live-check run on it isn't disturbed. To check: open the menu, run an agent action, Open Log.