fix(macos): recover from stale Accessibility grants

[0xNyk]

Problem

• Builds without a stable signing identity get a designated requirement tied to the binary hash (codesign -d -r- shows designated => cdhash H"..."). After a rebuild or update, System Settings still shows Dictx enabled, but AXIsProcessTrusted returns false. Toggling the switch does not fix it; removing the entry and granting again does.
• The Accessibility trust prompt appears only once per app, so repeat clicks on "Grant Permission" or "Open System Settings" did nothing visible.

Fix

• Grant buttons always open the Accessibility pane of System Settings (new open_accessibility_settings command).
• If a grant has not registered 8 seconds after the user starts it, onboarding and the settings card offer "Reset and grant again", which runs tccutil reset Accessibility <bundle id> for Dictx only (new reset_accessibility_permission command) and reopens the pane. If the reset fails, the pane still opens and a toast explains the manual remove-and-add step.
• New English strings only; other locales fall back to English.

Verification

• bun run lint, bun run build, Prettier on changed files: pass
• cargo fmt -- --check, cargo clippy -- -D warnings: pass
• Reviewed independently; the review's finding (settings card showed the reset hint immediately) is fixed.

Not yet verified on a real Mac: that tccutil reset succeeds when run by the app, and that the trust prompt reappears right after a reset.

The root cause remains ad-hoc signing; only a stable Developer ID signature stops grants going stale.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
dictx	Ready	Preview	Sep 17, 2026 10:21am UTC