fix(computer use): repair a TCC grant that outlived the signature it was given to - #7
Merged
Merged
Conversation
…was given to `tccd` refused every Accessibility call with "Failed to match existing code requirement for subject com.munim.mtcode" while System Settings still showed the app enabled - the row was granted to an earlier signature, and toggling the checkbox changes nothing. The privacy pane now clears a stale row before prompting, and the desktop MCP gains a `request-permissions` mode that asks from inside the app bundle so the grant lands on the app. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
github-actions
Bot
added
vouch:trusted
This was referenced Aug 19, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What changed
t3-desktop-mcp request-permissionsasks macOS for Accessibility and Screen Recording from inside the app bundle, so TCC records the grant against the app rather than whatever spawned the binary.tccutil reset <service> <bundle id>) when the permission reads as denied, then prompts. The prompt re-creates the row against the signature running now.Why
Computer Use was refused on this Mac even though System Settings showed MT Code enabled.
tccdsaid exactly why:The row was granted to an earlier signature. macOS keeps showing the checkbox as on, the app keeps being refused, and toggling the checkbox changes nothing — the row has to be cleared and re-created. Every re-signed rebuild can land here, so the repair belongs in the app.
Checks
vp run --filter @t3tools/desktop typecheckclean, computer-use suite greenrequest-permissionsprompts and reports both statuses as JSON