Kalenderberechtigung: Anfrage aus dem Vordergrundfenster

TCC zeigt den Dialog nur, wenn eine App im Vordergrund ist, an die er gehören
kann. Bei einer App ohne Fenster verpufft die Anfrage kommentarlos: sie kommt
mit false zurück, der Status bleibt notDetermined, und in den
Systemeinstellungen taucht die App nie auf — dort lässt sich auch nichts von
Hand hinzufügen, Einträge entstehen ausschließlich durch eine echte Anfrage.

Deshalb fragt der Reiter Berechtigungen jetzt selbst, sobald er sichtbar ist,
mit 400 ms Vorlauf: Aktivierung wirkt asynchron, ohne die Pause fragt Onyx
während es formal noch im Hintergrund liegt.

CalendarAuthorization trennt undetermined von denied. Im ersten Fall lohnt eine
Anfrage, im zweiten zeigt macOS nie wieder einen Dialog und es hilft nur der
Weg über die Systemeinstellungen — dorthin führt der Knopf dann auch.

Korrektur einer eigenen Fehldiagnose: promptPolicy = 0 im tccd-Protokoll gehört
zu kTCCServiceReminders, nicht zum Kalender. Der bekommt durchgehend
promptPolicy = 4, Nachfragen war also die ganze Zeit erlaubt. Die tatsächlichen
Ursachen waren die ausgelagerte Debug-dylib und ein verklemmter TCC-Eintrag.
This commit is contained in:
Guido Schmit
2026-08-10 18:26:10 +02:00
parent 40bd83e49e
commit 873c763d50
5 changed files with 336 additions and 294 deletions

View File

@@ -1,453 +1,458 @@
{
"sourceLanguage": "en",
"strings": {
"menu.openPanel": {
"extractionState": "stale",
"localizations": {
"de": {
"stringUnit": {
"state": "translated",
"value": "Panel öffnen"
"sourceLanguage" : "en",
"strings" : {
"menu.openPanel" : {
"extractionState" : "stale",
"localizations" : {
"de" : {
"stringUnit" : {
"state" : "translated",
"value" : "Panel öffnen"
}
},
"en": {
"stringUnit": {
"state": "translated",
"value": "Open Panel"
"en" : {
"stringUnit" : {
"state" : "translated",
"value" : "Open Panel"
}
}
}
},
"menu.quit": {
"extractionState": "stale",
"localizations": {
"de": {
"stringUnit": {
"state": "translated",
"value": "Onyx beenden"
"menu.quit" : {
"extractionState" : "stale",
"localizations" : {
"de" : {
"stringUnit" : {
"state" : "translated",
"value" : "Onyx beenden"
}
},
"en": {
"stringUnit": {
"state": "translated",
"value": "Quit Onyx"
"en" : {
"stringUnit" : {
"state" : "translated",
"value" : "Quit Onyx"
}
}
}
},
"menu.settings": {
"extractionState": "stale",
"localizations": {
"de": {
"stringUnit": {
"state": "translated",
"value": "Einstellungen …"
"menu.settings" : {
"extractionState" : "stale",
"localizations" : {
"de" : {
"stringUnit" : {
"state" : "translated",
"value" : "Einstellungen …"
}
},
"en": {
"stringUnit": {
"state": "translated",
"value": "Settings…"
"en" : {
"stringUnit" : {
"state" : "translated",
"value" : "Settings…"
}
}
}
},
"settings.display.all": {
"localizations": {
"de": {
"stringUnit": {
"state": "translated",
"value": "Allen Displays"
"settings.display.all" : {
"localizations" : {
"de" : {
"stringUnit" : {
"state" : "translated",
"value" : "Allen Displays"
}
},
"en": {
"stringUnit": {
"state": "translated",
"value": "All displays"
"en" : {
"stringUnit" : {
"state" : "translated",
"value" : "All displays"
}
}
}
},
"settings.display.builtInOnly": {
"localizations": {
"de": {
"stringUnit": {
"state": "translated",
"value": "Nur dem internen Display"
"settings.display.builtInOnly" : {
"localizations" : {
"de" : {
"stringUnit" : {
"state" : "translated",
"value" : "Nur dem internen Display"
}
},
"en": {
"stringUnit": {
"state": "translated",
"value": "Built-in display only"
"en" : {
"stringUnit" : {
"state" : "translated",
"value" : "Built-in display only"
}
}
}
},
"settings.display.hint": {
"localizations": {
"de": {
"stringUnit": {
"state": "translated",
"value": "Auf Displays ohne echte Notch erscheint oben mittig ein Balken, der sich genauso verhält. Ist der Deckel geschlossen und kein internes Display vorhanden, erscheint das Panel trotzdem auf einem externen — sonst wäre Onyx nicht erreichbar."
"settings.display.hint" : {
"localizations" : {
"de" : {
"stringUnit" : {
"state" : "translated",
"value" : "Auf Displays ohne echte Notch erscheint oben mittig ein Balken, der sich genauso verhält. Ist der Deckel geschlossen und kein internes Display vorhanden, erscheint das Panel trotzdem auf einem externen — sonst wäre Onyx nicht erreichbar."
}
},
"en": {
"stringUnit": {
"state": "translated",
"value": "On displays without a real notch, a bar appears at the top centre and behaves the same. With the lid closed and no built-in display present, the panel still appears on an external one — otherwise Onyx would be unreachable."
"en" : {
"stringUnit" : {
"state" : "translated",
"value" : "On displays without a real notch, a bar appears at the top centre and behaves the same. With the lid closed and no built-in display present, the panel still appears on an external one — otherwise Onyx would be unreachable."
}
}
}
},
"settings.display.menuBarIcon": {
"extractionState": "stale",
"localizations": {
"de": {
"stringUnit": {
"state": "translated",
"value": "Symbol in der Menüleiste anzeigen"
"settings.display.menuBarIcon" : {
"extractionState" : "stale",
"localizations" : {
"de" : {
"stringUnit" : {
"state" : "translated",
"value" : "Symbol in der Menüleiste anzeigen"
}
},
"en": {
"stringUnit": {
"state": "translated",
"value": "Show icon in the menu bar"
"en" : {
"stringUnit" : {
"state" : "translated",
"value" : "Show icon in the menu bar"
}
}
}
},
"settings.display.menuBarIcon.hint": {
"localizations": {
"de": {
"stringUnit": {
"state": "translated",
"value": "Über das Symbol erreichst du Panel, Einstellungen und Beenden. Ohne es kommst du nur über die Notch an Onyx heran."
"settings.display.menuBarIcon.hint" : {
"localizations" : {
"de" : {
"stringUnit" : {
"state" : "translated",
"value" : "Über das Symbol erreichst du Panel, Einstellungen und Beenden. Ohne es kommst du nur über die Notch an Onyx heran."
}
},
"en": {
"stringUnit": {
"state": "translated",
"value": "The icon gives you the panel, settings and quit. Without it, the notch is the only way to reach Onyx."
"en" : {
"stringUnit" : {
"state" : "translated",
"value" : "The icon gives you the panel, settings and quit. Without it, the notch is the only way to reach Onyx."
}
}
}
},
"settings.display.policy": {
"extractionState": "stale",
"localizations": {
"de": {
"stringUnit": {
"state": "translated",
"value": "Panel anzeigen auf"
"settings.display.policy" : {
"extractionState" : "stale",
"localizations" : {
"de" : {
"stringUnit" : {
"state" : "translated",
"value" : "Panel anzeigen auf"
}
},
"en": {
"stringUnit": {
"state": "translated",
"value": "Show panel on"
"en" : {
"stringUnit" : {
"state" : "translated",
"value" : "Show panel on"
}
}
}
},
"settings.size.large": {
"extractionState": "stale",
"localizations": {
"de": {
"stringUnit": {
"state": "translated",
"value": "Groß (2×2)"
"settings.permissions.calendar" : {
"extractionState" : "stale",
"localizations" : {
"de" : {
"stringUnit" : {
"state" : "translated",
"value" : "Kalender"
}
},
"en": {
"stringUnit": {
"state": "translated",
"value": "Large (2×2)"
"en" : {
"stringUnit" : {
"state" : "translated",
"value" : "Calendar"
}
}
}
},
"settings.size.medium": {
"extractionState": "stale",
"localizations": {
"de": {
"stringUnit": {
"state": "translated",
"value": "Mittel (2×1)"
"settings.permissions.calendar.why" : {
"localizations" : {
"de" : {
"stringUnit" : {
"state" : "translated",
"value" : "Onyx zeigt deine Termine im Kalender-Widget an. Es wird ausschließlich gelesen, nie geschrieben."
}
},
"en": {
"stringUnit": {
"state": "translated",
"value": "Medium (2×1)"
"en" : {
"stringUnit" : {
"state" : "translated",
"value" : "Onyx shows your events in the calendar widget. It only ever reads, never writes."
}
}
}
},
"settings.size.small": {
"extractionState": "stale",
"localizations": {
"de": {
"stringUnit": {
"state": "translated",
"value": "Klein (1×1)"
"settings.permissions.granted" : {
"extractionState" : "stale",
"localizations" : {
"de" : {
"stringUnit" : {
"state" : "translated",
"value" : "Erteilt"
}
},
"en": {
"stringUnit": {
"state": "translated",
"value": "Small (1×1)"
"en" : {
"stringUnit" : {
"state" : "translated",
"value" : "Granted"
}
}
}
},
"settings.size.wide": {
"extractionState": "stale",
"localizations": {
"de": {
"stringUnit": {
"state": "translated",
"value": "Breit (4×1)"
"settings.permissions.openSystem" : {
"extractionState" : "stale",
"localizations" : {
"de" : {
"stringUnit" : {
"state" : "translated",
"value" : "Systemeinstellungen öffnen"
}
},
"en": {
"stringUnit": {
"state": "translated",
"value": "Wide (4×1)"
"en" : {
"stringUnit" : {
"state" : "translated",
"value" : "Open System Settings"
}
}
}
},
"settings.tab.display": {
"extractionState": "stale",
"localizations": {
"de": {
"stringUnit": {
"state": "translated",
"value": "Anzeige"
"settings.permissions.request" : {
"extractionState" : "stale",
"localizations" : {
"de" : {
"stringUnit" : {
"state" : "translated",
"value" : "Anfragen"
}
},
"en": {
"stringUnit": {
"state": "translated",
"value": "Display"
"en" : {
"stringUnit" : {
"state" : "translated",
"value" : "Request"
}
}
}
},
"settings.tab.widgets": {
"extractionState": "stale",
"localizations": {
"de": {
"stringUnit": {
"state": "translated",
"value": "Widgets"
"settings.size.large" : {
"extractionState" : "stale",
"localizations" : {
"de" : {
"stringUnit" : {
"state" : "translated",
"value" : "Groß (2×2)"
}
},
"en": {
"stringUnit": {
"state": "translated",
"value": "Widgets"
"en" : {
"stringUnit" : {
"state" : "translated",
"value" : "Large (2×2)"
}
}
}
},
"settings.widgets.add": {
"extractionState": "stale",
"localizations": {
"de": {
"stringUnit": {
"state": "translated",
"value": "Hinzufügen"
"settings.size.medium" : {
"extractionState" : "stale",
"localizations" : {
"de" : {
"stringUnit" : {
"state" : "translated",
"value" : "Mittel (2×1)"
}
},
"en": {
"stringUnit": {
"state": "translated",
"value": "Add"
"en" : {
"stringUnit" : {
"state" : "translated",
"value" : "Medium (2×1)"
}
}
}
},
"settings.widgets.available": {
"extractionState": "stale",
"localizations": {
"de": {
"stringUnit": {
"state": "translated",
"value": "Verfügbar"
"settings.size.small" : {
"extractionState" : "stale",
"localizations" : {
"de" : {
"stringUnit" : {
"state" : "translated",
"value" : "Klein (1×1)"
}
},
"en": {
"stringUnit": {
"state": "translated",
"value": "Available"
"en" : {
"stringUnit" : {
"state" : "translated",
"value" : "Small (1×1)"
}
}
}
},
"settings.widgets.empty": {
"localizations": {
"de": {
"stringUnit": {
"state": "translated",
"value": "Keine Widgets im Panel. Das Panel bleibt leer, bis du eins hinzufügst."
"settings.size.wide" : {
"extractionState" : "stale",
"localizations" : {
"de" : {
"stringUnit" : {
"state" : "translated",
"value" : "Breit (4×1)"
}
},
"en": {
"stringUnit": {
"state": "translated",
"value": "No widgets in the panel. It stays empty until you add one."
"en" : {
"stringUnit" : {
"state" : "translated",
"value" : "Wide (4×1)"
}
}
}
},
"settings.widgets.hint": {
"localizations": {
"de": {
"stringUnit": {
"state": "translated",
"value": "Die Reihenfolge bestimmt die Anordnung im Panel. Jedes Widget rückt an die erste Stelle, an die es passt."
"settings.tab.display" : {
"extractionState" : "stale",
"localizations" : {
"de" : {
"stringUnit" : {
"state" : "translated",
"value" : "Anzeige"
}
},
"en": {
"stringUnit": {
"state": "translated",
"value": "The order determines the arrangement in the panel. Each widget takes the first spot it fits into."
"en" : {
"stringUnit" : {
"state" : "translated",
"value" : "Display"
}
}
}
},
"settings.widgets.inPanel": {
"extractionState": "stale",
"localizations": {
"de": {
"stringUnit": {
"state": "translated",
"value": "Im Panel"
"settings.tab.permissions" : {
"extractionState" : "stale",
"localizations" : {
"de" : {
"stringUnit" : {
"state" : "translated",
"value" : "Berechtigungen"
}
},
"en": {
"stringUnit": {
"state": "translated",
"value": "In the panel"
"en" : {
"stringUnit" : {
"state" : "translated",
"value" : "Permissions"
}
}
}
},
"settings.widgets.remove": {
"extractionState": "stale",
"localizations": {
"de": {
"stringUnit": {
"state": "translated",
"value": "Aus dem Panel entfernen"
"settings.tab.widgets" : {
"extractionState" : "stale",
"localizations" : {
"de" : {
"stringUnit" : {
"state" : "translated",
"value" : "Widgets"
}
},
"en": {
"stringUnit": {
"state": "translated",
"value": "Remove from panel"
"en" : {
"stringUnit" : {
"state" : "translated",
"value" : "Widgets"
}
}
}
},
"settings.tab.permissions": {
"localizations": {
"de": {
"stringUnit": {
"state": "translated",
"value": "Berechtigungen"
"settings.widgets.add" : {
"extractionState" : "stale",
"localizations" : {
"de" : {
"stringUnit" : {
"state" : "translated",
"value" : "Hinzufügen"
}
},
"en": {
"stringUnit": {
"state": "translated",
"value": "Permissions"
"en" : {
"stringUnit" : {
"state" : "translated",
"value" : "Add"
}
}
}
},
"settings.permissions.calendar": {
"localizations": {
"de": {
"stringUnit": {
"state": "translated",
"value": "Kalender"
"settings.widgets.available" : {
"extractionState" : "stale",
"localizations" : {
"de" : {
"stringUnit" : {
"state" : "translated",
"value" : "Verfügbar"
}
},
"en": {
"stringUnit": {
"state": "translated",
"value": "Calendar"
"en" : {
"stringUnit" : {
"state" : "translated",
"value" : "Available"
}
}
}
},
"settings.permissions.granted": {
"localizations": {
"de": {
"stringUnit": {
"state": "translated",
"value": "Erteilt"
"settings.widgets.empty" : {
"localizations" : {
"de" : {
"stringUnit" : {
"state" : "translated",
"value" : "Keine Widgets im Panel. Das Panel bleibt leer, bis du eins hinzufügst."
}
},
"en": {
"stringUnit": {
"state": "translated",
"value": "Granted"
"en" : {
"stringUnit" : {
"state" : "translated",
"value" : "No widgets in the panel. It stays empty until you add one."
}
}
}
},
"settings.permissions.request": {
"localizations": {
"de": {
"stringUnit": {
"state": "translated",
"value": "Anfragen"
"settings.widgets.hint" : {
"localizations" : {
"de" : {
"stringUnit" : {
"state" : "translated",
"value" : "Die Reihenfolge bestimmt die Anordnung im Panel. Jedes Widget rückt an die erste Stelle, an die es passt."
}
},
"en": {
"stringUnit": {
"state": "translated",
"value": "Request"
"en" : {
"stringUnit" : {
"state" : "translated",
"value" : "The order determines the arrangement in the panel. Each widget takes the first spot it fits into."
}
}
}
},
"settings.permissions.calendar.why": {
"localizations": {
"de": {
"stringUnit": {
"state": "translated",
"value": "Onyx zeigt deine Termine im Kalender-Widget an. Es wird ausschließlich gelesen, nie geschrieben."
"settings.widgets.inPanel" : {
"extractionState" : "stale",
"localizations" : {
"de" : {
"stringUnit" : {
"state" : "translated",
"value" : "Im Panel"
}
},
"en": {
"stringUnit": {
"state": "translated",
"value": "Onyx shows your events in the calendar widget. It only ever reads, never writes."
"en" : {
"stringUnit" : {
"state" : "translated",
"value" : "In the panel"
}
}
}
},
"settings.permissions.openSystem": {
"localizations": {
"de": {
"stringUnit": {
"state": "translated",
"value": "Systemeinstellungen öffnen"
"settings.widgets.remove" : {
"extractionState" : "stale",
"localizations" : {
"de" : {
"stringUnit" : {
"state" : "translated",
"value" : "Aus dem Panel entfernen"
}
},
"en": {
"stringUnit": {
"state": "translated",
"value": "Open System Settings"
"en" : {
"stringUnit" : {
"state" : "translated",
"value" : "Remove from panel"
}
}
}
}
},
"version": "1.0"
"version" : "1.0"
}

View File

@@ -76,9 +76,24 @@ private struct PermissionSettings: View {
}
.formStyle(.grouped)
.padding()
.onAppear { granted = calendarModel.hasAccess }
.task {
granted = calendarModel.hasAccess
guard !granted, !didAutoRequest,
calendarModel.authorization == .undetermined else { return }
didAutoRequest = true
// Kurz warten, bis das Fenster wirklich vorne steht. TCC zeigt den
// Dialog nur, wenn eine App im Vordergrund ist, an die er gehören
// kann und Aktivierung wirkt asynchron. Ohne diese Pause fragt
// Onyx, während es formal noch im Hintergrund liegt, und die
// Anfrage verpufft kommentarlos.
try? await Task.sleep(for: .milliseconds(400))
granted = await calendarModel.requestAccessNow()
}
}
@State private var didAutoRequest = false
private func openPrivacySettings() {
guard let url = URL(string:
"x-apple.systempreferences:com.apple.preference.security?Privacy_Calendars") else { return }

View File

@@ -80,12 +80,25 @@ public enum CalendarSourceState: Equatable, Sendable {
case unreadable(reason: String)
}
/// Der Berechtigungszustand einer Quelle.
///
/// `undetermined` und `denied` müssen getrennt bleiben: im ersten Fall lohnt
/// eine Anfrage, im zweiten zeigt macOS nie wieder einen Dialog und es hilft
/// nur der Weg über die Systemeinstellungen.
public enum CalendarAuthorization: Equatable, Sendable {
case granted
case denied
case undetermined
/// Die Quelle braucht gar keine Berechtigung (z. B. Calendarr).
case notRequired
}
/// Eine Quelle für Termine. Apple-Kalender und Calendarr liefern beide dies.
public protocol CalendarSource: Sendable {
var id: String { get }
/// Ob bereits gelesen werden darf **ohne** dabei nachzufragen.
/// Die Einstellungen brauchen das, um den Zustand anzuzeigen, ohne
/// nebenbei einen Systemdialog auszulösen.
/// Der Zustand **ohne** dabei nachzufragen. Die Einstellungen brauchen
/// das, um ihn anzuzeigen, ohne nebenbei einen Systemdialog auszulösen.
var authorization: CalendarAuthorization { get }
var isAuthorized: Bool { get }
func requestAccess() async -> Bool
func calendars() async -> [OnyxCalendar]

View File

@@ -25,6 +25,7 @@ public final class CalendarModel {
/// Ob gelesen werden darf. Fragt nicht nach nur zum Anzeigen.
public var hasAccess: Bool { source.isAuthorized }
public var authorization: CalendarAuthorization { source.authorization }
/// Fragt die Berechtigung an und lädt bei Erfolg gleich.
///

View File

@@ -16,10 +16,18 @@ public final class EventKitSource: CalendarSource, @unchecked Sendable {
public init() {}
public var isAuthorized: Bool {
EKEventStore.authorizationStatus(for: .event) == .fullAccess
public var authorization: CalendarAuthorization {
switch EKEventStore.authorizationStatus(for: .event) {
case .fullAccess: .granted
case .denied, .restricted: .denied
// `writeOnly` ist für uns so gut wie nichts Onyx zeigt nur an.
case .notDetermined, .writeOnly: .undetermined
@unknown default: .denied
}
}
public var isAuthorized: Bool { authorization == .granted }
public func requestAccess() async -> Bool {
switch EKEventStore.authorizationStatus(for: .event) {
case .fullAccess: