fix(computer use): repair a TCC grant that outlived the signature it was given to

[sheehanmunim]

What changed

• t3-desktop-mcp request-permissions asks macOS for Accessibility and Screen Recording from inside the app bundle, so TCC records the grant against the app rather than whatever spawned the binary.
• Opening the Computer Use privacy pane now clears a stale TCC row first (tccutil reset <service> <bundle id>) when the permission reads as denied, then prompts. The prompt re-creates the row against the signature running now.

Why

Computer Use was refused on this Mac even though System Settings showed MT Code enabled. tccd said exactly why:

Failed to match existing code requirement for subject com.munim.mtcode and service kTCCServiceAccessibility

The row was granted to an earlier signature. macOS keeps showing the checkbox as on, the app keeps being refused, and toggling the checkbox changes nothing — the row has to be cleared and re-created. Every re-signed rebuild can land here, so the repair belongs in the app.

Checks

• vp run --filter @t3tools/desktop typecheck clean, computer-use suite green
• Swift binary builds; request-permissions prompts and reports both statuses as JSON

[sheehanmunim]

What changed

• t3-desktop-mcp request-permissions asks macOS for Accessibility and Screen Recording from inside the app bundle, so TCC records the grant against the app rather than whatever spawned the binary.
• Opening the Computer Use privacy pane now clears a stale TCC row first (tccutil reset <service> <bundle id>) when the permission reads as denied, then prompts. The prompt re-creates the row against the signature running now.

Why

Computer Use was refused on this Mac even though System Settings showed MT Code enabled. tccd said exactly why:

Failed to match existing code requirement for subject com.munim.mtcode and service kTCCServiceAccessibility

The row was granted to an earlier signature. macOS keeps showing the checkbox as on, the app keeps being refused, and toggling the checkbox changes nothing — the row has to be cleared and re-created. Every re-signed rebuild can land here, so the repair belongs in the app.

Checks

• vp run --filter @t3tools/desktop typecheck clean, computer-use suite green
• Swift binary builds; request-permissions prompts and reports both statuses as JSON

[sheehanmunim]

What changed

• t3-desktop-mcp request-permissions asks macOS for Accessibility and Screen Recording from inside the app bundle, so TCC records the grant against the app rather than whatever spawned the binary.
• Opening the Computer Use privacy pane now clears a stale TCC row first (tccutil reset <service> <bundle id>) when the permission reads as denied, then prompts. The prompt re-creates the row against the signature running now.

Why

Computer Use was refused on this Mac even though System Settings showed MT Code enabled. tccd said exactly why:

Failed to match existing code requirement for subject com.munim.mtcode and service kTCCServiceAccessibility

The row was granted to an earlier signature. macOS keeps showing the checkbox as on, the app keeps being refused, and toggling the checkbox changes nothing — the row has to be cleared and re-created. Every re-signed rebuild can land here, so the repair belongs in the app.

Checks

• vp run --filter @t3tools/desktop typecheck clean, computer-use suite green
• Swift binary builds; request-permissions prompts and reports both statuses as JSON

[sheehanmunim]

What changed

• t3-desktop-mcp request-permissions asks macOS for Accessibility and Screen Recording from inside the app bundle, so TCC records the grant against the app rather than whatever spawned the binary.
• Opening the Computer Use privacy pane now clears a stale TCC row first (tccutil reset <service> <bundle id>) when the permission reads as denied, then prompts. The prompt re-creates the row against the signature running now.

Why

Computer Use was refused on this Mac even though System Settings showed MT Code enabled. tccd said exactly why:

Failed to match existing code requirement for subject com.munim.mtcode and service kTCCServiceAccessibility

The row was granted to an earlier signature. macOS keeps showing the checkbox as on, the app keeps being refused, and toggling the checkbox changes nothing — the row has to be cleared and re-created. Every re-signed rebuild can land here, so the repair belongs in the app.

Checks

• vp run --filter @t3tools/desktop typecheck clean, computer-use suite green
• Swift binary builds; request-permissions prompts and reports both statuses as JSON

[sheehanmunim]

What changed

• t3-desktop-mcp request-permissions asks macOS for Accessibility and Screen Recording from inside the app bundle, so TCC records the grant against the app rather than whatever spawned the binary.
• Opening the Computer Use privacy pane now clears a stale TCC row first (tccutil reset <service> <bundle id>) when the permission reads as denied, then prompts. The prompt re-creates the row against the signature running now.

Why

Computer Use was refused on this Mac even though System Settings showed MT Code enabled. tccd said exactly why:

Failed to match existing code requirement for subject com.munim.mtcode and service kTCCServiceAccessibility

The row was granted to an earlier signature. macOS keeps showing the checkbox as on, the app keeps being refused, and toggling the checkbox changes nothing — the row has to be cleared and re-created. Every re-signed rebuild can land here, so the repair belongs in the app.

Checks

• vp run --filter @t3tools/desktop typecheck clean, computer-use suite green
• Swift binary builds; request-permissions prompts and reports both statuses as JSON

[sheehanmunim]

What changed

• t3-desktop-mcp request-permissions asks macOS for Accessibility and Screen Recording from inside the app bundle, so TCC records the grant against the app rather than whatever spawned the binary.
• Opening the Computer Use privacy pane now clears a stale TCC row first (tccutil reset <service> <bundle id>) when the permission reads as denied, then prompts. The prompt re-creates the row against the signature running now.

Why

Computer Use was refused on this Mac even though System Settings showed MT Code enabled. tccd said exactly why:

Failed to match existing code requirement for subject com.munim.mtcode and service kTCCServiceAccessibility

The row was granted to an earlier signature. macOS keeps showing the checkbox as on, the app keeps being refused, and toggling the checkbox changes nothing — the row has to be cleared and re-created. Every re-signed rebuild can land here, so the repair belongs in the app.

Checks

• vp run --filter @t3tools/desktop typecheck clean, computer-use suite green
• Swift binary builds; request-permissions prompts and reports both statuses as JSON

[sheehanmunim]

What changed

• t3-desktop-mcp request-permissions asks macOS for Accessibility and Screen Recording from inside the app bundle, so TCC records the grant against the app rather than whatever spawned the binary.
• Opening the Computer Use privacy pane now clears a stale TCC row first (tccutil reset <service> <bundle id>) when the permission reads as denied, then prompts. The prompt re-creates the row against the signature running now.

Why

Computer Use was refused on this Mac even though System Settings showed MT Code enabled. tccd said exactly why:

Failed to match existing code requirement for subject com.munim.mtcode and service kTCCServiceAccessibility

The row was granted to an earlier signature. macOS keeps showing the checkbox as on, the app keeps being refused, and toggling the checkbox changes nothing — the row has to be cleared and re-created. Every re-signed rebuild can land here, so the repair belongs in the app.

Checks

• vp run --filter @t3tools/desktop typecheck clean, computer-use suite green
• Swift binary builds; request-permissions prompts and reports both statuses as JSON

[sheehanmunim]

What changed

• t3-desktop-mcp request-permissions asks macOS for Accessibility and Screen Recording from inside the app bundle, so TCC records the grant against the app rather than whatever spawned the binary.
• Opening the Computer Use privacy pane now clears a stale TCC row first (tccutil reset <service> <bundle id>) when the permission reads as denied, then prompts. The prompt re-creates the row against the signature running now.

Why

Computer Use was refused on this Mac even though System Settings showed MT Code enabled. tccd said exactly why:

Failed to match existing code requirement for subject com.munim.mtcode and service kTCCServiceAccessibility

The row was granted to an earlier signature. macOS keeps showing the checkbox as on, the app keeps being refused, and toggling the checkbox changes nothing — the row has to be cleared and re-created. Every re-signed rebuild can land here, so the repair belongs in the app.

Checks

• vp run --filter @t3tools/desktop typecheck clean, computer-use suite green
• Swift binary builds; request-permissions prompts and reports both statuses as JSON