Repository navigation
fix: 修复旧版 macOS 的 Grok Bot 后台钥匙串弹窗 - #138
Closed
shezhiyuan wants to merge 2 commits into
Closed
shezhiyuan wants to merge 2 commits into
shezhiyuan wants to merge 2 commits into
Conversation
Restore process-level interaction suppression for legacy keychain ACL reads on older macOS. Preserve the macOS 26 query-only policy and restore the previous interaction state after each read.
Exercise real process interaction flags, successful and failed legacy reads, restoration of an already disabled flag, explicit authorization, and the macOS 26+ bypass in the existing native bridge fixture.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Fixes #137
Related #136
v1.0.48 为兼容 macOS 26 移除了进程级钥匙串交互抑制后，在 macOS 15.1 上，后台
--grok-bot-verify会每约 5 分钟触发一次“Grok Bot Safe Storage”系统授权窗口。这次按系统版本恢复非交互保护：
LAContext.interactionNotAllowed/kSecUseAuthenticationUI路径，避免旧接口导致已授权读取报errSecAuthFailed。allowInteraction: true路径继续允许交互。扩展现有原生 Swift bridge 检查，验证旧版本分支的成功/失败读取、原状态恢复、原先已禁止交互的情况、macOS 26+ 分支，以及主动授权。测试读取实际进程交互状态，版本参数用于在同一 runner 上覆盖不同策略。
验证在 GitHub Actions 对提交
2cc0c6b执行：tearDownClass清理scan_cache.json.lock时发生WinError 32；Windows 全量测试 执行 820 个测试，同一清理错误导致 1 个 error、58 个 skipped。对应的 Python 文件未在本 PR 中修改。