rune/oai-swift
1
0
Fork 0
Code Issues Pull Requests Releases 16 Activity

Fix Mail Automation permission: missing entitlement, not an OS bug

Browse Source 
Confab.entitlements was missing com.apple.security.automation.apple-events,
so tccd's hardened-runtime policy silently refused to even prompt for
Automation consent to Mail.app — confirmed via tccd's own log, the same
failure class as the earlier Calendar/Contacts entitlement bug. Unhides
the Mail integration (MailTools.isHiddenPendingAppleFix = false).
Live-verified: Request Access now grants successfully on macOS 27 beta 7.
This commit is contained in:
rune
2026-08-26 11:48:29 +02:00
parent f1d739f309
commit 6b4448df43
3 changed files with 12 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files
oAI/Confab.entitlements
+2
View File
@@ -16,5 +16,7 @@
<true/>
<key>com.apple.security.personal-information.location</key>
<true/>
<key>com.apple.security.automation.apple-events</key>
<true/>
</dict>
</plist>
oAI/Services/SettingsService.swift
+8 -6
View File
@@ -32,13 +32,15 @@ enum PersonalDataTools {
static let isHiddenPendingAppleFix = false
}
/// Kill switch for the Mail integration, hidden while blocked by a confirmed macOS 27 beta bug:
/// first-time Automation consent grants never show a dialog or create a TCC record at all (not
/// fixable in-app — see feature_mail_applescript_integration in memory for the full investigation).
/// Same shape as `PersonalDataTools` above. Flip back to `false` once Rune confirms a newer beta/RC
/// fixes it — the tool code itself is complete and doesn't need changes, just re-enabling.
/// Kill switch for the Mail integration. Was hidden after first-time Automation consent grants
/// appeared to fail on macOS 27 beta with no dialog and no TCC record — turned out to be a real
/// Confab bug, not an OS bug: `Confab.entitlements` was missing `com.apple.security.automation.
/// apple-events`, so `tccd` refused to even prompt (confirmed via `tccd`'s own log, same failure
/// class as the earlier Calendar/Contacts entitlement bug on `PersonalDataTools`). Fixed and
/// live-verified granting successfully on beta 7 (2026-08-26). Same shape as `PersonalDataTools`
/// above — kept as infrastructure, not deleted, in case a future regression needs it again.
enum MailTools {
static let isHiddenPendingAppleFix = true
static let isHiddenPendingAppleFix = false
}
@Observable
oAI/Views/Screens/SettingsView.swift
+2 -3
View File
@@ -1140,9 +1140,8 @@ It's better to admit "I need more information" or "I cannot do that" than to fak
@ViewBuilder
private var mailSection: some View {
// Hidden while MailTools.isHiddenPendingAppleFix is true — blocked by a confirmed macOS 27
// beta bug (first-time Automation consent grants never work), not an app bug. See
// feature_mail_applescript_integration in memory. Flip the switch back once fixed.
// MailTools.isHiddenPendingAppleFix: was a missing entitlement, not an OS bug — fixed, see
// feature_mail_applescript_integration in memory. Kill switch kept as infrastructure.
if !MailTools.isHiddenPendingAppleFix {
VStack(alignment: .leading, spacing: 8) {
HStack(spacing: 8) {