zooqueenandHanzo Dev
cbacae5efd
Replace all bot.molt.* identifiers with ai.hanzo.bot.* across: - LaunchAgent labels (constants.ts + tests) - iOS bundle IDs, dispatch queues, logger subsystems - iOS fastlane Appfile (bot.molt.ios → ai.hanzo.bot.ios) - iOS project.yml branding (display name → Hanzo Bot) - macOS icon file rename (Bot.icns → HanzoBot.icns) - appcast.xml title (Bot → Hanzo Bot) - auto-response workflow (moltbook → off-topic) - All English and Chinese documentation (32 doc files) - scripts/restart-mac.sh launchd plist reference Co-authored-by: Hanzo Dev <[email protected]>
2.2 KiB
summary, read_when, title
| summary | read_when | title | |||
|---|---|---|---|---|---|
| macOS permission persistence (TCC) and signing requirements |
|
macOS Permissions |
macOS permissions (TCC)
macOS permission grants are fragile. TCC associates a permission grant with the app's code signature, bundle identifier, and on-disk path. If any of those change, macOS treats the app as new and may drop or hide prompts.
Requirements for stable permissions
- Same path: run the app from a fixed location (for Hanzo Bot,
dist/Hanzo Bot.app). - Same bundle identifier: changing the bundle ID creates a new permission identity.
- Signed app: unsigned or ad-hoc signed builds do not persist permissions.
- Consistent signature: use a real Apple Development or Developer ID certificate so the signature stays stable across rebuilds.
Ad-hoc signatures generate a new identity every build. macOS will forget previous grants, and prompts can disappear entirely until the stale entries are cleared.
Recovery checklist when prompts disappear
- Quit the app.
- Remove the app entry in System Settings -> Privacy & Security.
- Relaunch the app from the same path and re-grant permissions.
- If the prompt still does not appear, reset TCC entries with
tccutiland try again. - Some permissions only reappear after a full macOS restart.
Example resets (replace bundle ID as needed):
sudo tccutil reset Accessibility ai.hanzo.bot.mac
sudo tccutil reset ScreenCapture ai.hanzo.bot.mac
sudo tccutil reset AppleEvents
Files and folders permissions (Desktop/Documents/Downloads)
macOS may also gate Desktop, Documents, and Downloads for terminal/background processes. If file reads or directory listings hang, grant access to the same process context that performs file operations (for example Terminal/iTerm, LaunchAgent-launched app, or SSH process).
Workaround: move files into the Hanzo Bot workspace (~/.hanzo/bot/workspace) if you want to avoid per-folder grants.
If you are testing permissions, always sign with a real certificate. Ad-hoc builds are only acceptable for quick local runs where permissions do not matter.