Skip to content

Onboarding: open the Accessibility pane directly#2

Merged
EitaroY merged 2 commits into
mainfrom
fix-sandboxed-onboarding
Jul 13, 2026
Merged

Onboarding: open the Accessibility pane directly#2
EitaroY merged 2 commits into
mainfrom
fix-sandboxed-onboarding

Conversation

@EitaroY

@EitaroY EitaroY commented Jul 13, 2026

Copy link
Copy Markdown
Owner

macOS suppresses the Accessibility consent alert for sandboxed apps, so a button that only calls AXIsProcessTrustedWithOptions appears to do nothing. Open the Privacy & Security → Accessibility pane from the button instead, and reword the onboarding copy for the manual flow (enable Fit in the list, + to add it if missing). The trusted-check call stays so Fit registers itself in that list.

Update the review-notes template and BUILDING.md to describe the same manual flow — App Review will hit the exact same behavior.

What & why

Checklist

  • swift test passes
  • The app builds and runs (⌘R)
  • Ran the relevant items of the manual smoke-test checklist if Windowing/ or Input/ changed
  • Updated the docs (README.md / README.ja.md / docs/DESIGN.ja.md) if behavior or architecture changed
  • No new third-party dependencies

EitaroY and others added 2 commits July 14, 2026 00:04
macOS suppresses the Accessibility consent alert for sandboxed apps,
so a button that only calls AXIsProcessTrustedWithOptions appears to
do nothing. Open the Privacy & Security → Accessibility pane from the
button instead, and reword the onboarding copy for the manual flow
(enable Fit in the list, + to add it if missing). The trusted-check
call stays so Fit registers itself in that list.

Update the review-notes template and BUILDING.md to describe the same
manual flow — App Review will hit the exact same behavior.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Real-device verification showed that with the sandbox enabled, AX
writes to other apps' windows fail even after the user grants
Accessibility permission — every snap action dies with a beep. The
existing Mac App Store window managers (checked Magnet's entitlements
on-device: no com.apple.security.app-sandbox) are non-sandboxed apps
grandfathered from before the 2012 sandbox mandate, not proof that
sandboxed AX control works. New apps in this category cannot ship on
the Mac App Store; docs/APPSTORE.ja.md now records that finding and
lays out the Developer ID + notarization + external-payment route
instead.

Keeps from the App Store work: PrivacyInfo.xcprivacy, version 1.0,
and the onboarding button opening the Accessibility pane directly
(the consent alert never reappears after a rebuild, so the pane is
the reliable path regardless of sandboxing).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
@EitaroY
EitaroY merged commit 41a55f0 into main Jul 13, 2026
1 check passed
@EitaroY
EitaroY deleted the fix-sandboxed-onboarding branch July 13, 2026 15:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant