Fix App Management permission loop

Package.swift

@@ -37,5 +37,9 @@ let package = Package(
             dependencies: ["GhostTileCore"],
             exclude: ["Resources"]
         ),
+        .testTarget(
+            name: "GhostTileAppTests",
+            dependencies: ["GhostTileApp"]
+        ),
     ]
 )

Resources/Info.plist

@@ -19,9 +19,9 @@
 	<key>CFBundlePackageType</key>
 	<string>APPL</string>
 	<key>CFBundleShortVersionString</key>
-	<string>2.0.6</string>
+	<string>2.0.7</string>
 	<key>CFBundleVersion</key>
-	<string>23</string>
+	<string>24</string>
 	<key>LSMinimumSystemVersion</key>
 	<string>15.0</string>
 	<key>LSUIElement</key>

Sources/GhostTileApp/Services/Permissions/AppManagementPermissionStatusReader.swift

@@ -5,6 +5,7 @@ enum AppManagementPermissionStatusReader {
     private static let frameworkPath = "/System/Library/PrivateFrameworks/TCC.framework/TCC"
     private static let preflightSymbolName = "TCCAccessPreflight"
     private static let appManagementServiceSymbolName = "kTCCServiceSystemPolicyAppBundles"
+    private static let preflightGranted: Int32 = 0
 
     private typealias TCCAccessPreflightFunction = @convention(c) (
         CFString,
@@ -26,6 +27,10 @@ enum AppManagementPermissionStatusReader {
             to: TCCAccessPreflightFunction.self
         )
         let service = serviceSymbol.assumingMemoryBound(to: CFString.self).pointee
-        return preflight(service, nil) != 0
+        return isAllowed(preflightResult: preflight(service, nil))
+    }
+
+    static func isAllowed(preflightResult: Int32) -> Bool {
+        preflightResult == preflightGranted
     }
 }

Sources/GhostTileCore/BuildInfo.swift

@@ -1,6 +1,6 @@
 public enum BuildInfo {
-    public static let version = "2.0.6"
-    public static let build = "23"
+    public static let version = "2.0.7"
+    public static let build = "24"
 
     public static let displayVersion = "\(version) (\(build))"
 

Tests/GhostTileAppTests/AppManagementPermissionStatusReaderTests.swift

@@ -0,0 +1,14 @@
+@testable import GhostTileApp
+import Testing
+
+@Suite("AppManagementPermissionStatusReader")
+struct AppManagementPermissionStatusReaderTests {
+    @Test func preflightResultZeroMeansAllowed() {
+        #expect(AppManagementPermissionStatusReader.isAllowed(preflightResult: 0))
+    }
+
+    @Test func nonZeroPreflightResultsAreNotAllowed() {
+        #expect(!AppManagementPermissionStatusReader.isAllowed(preflightResult: 1))
+        #expect(!AppManagementPermissionStatusReader.isAllowed(preflightResult: 2))
+    }
+}

VERSION

@@ -1,2 +1,2 @@
-VERSION=2.0.6
-BUILD=23
+VERSION=2.0.7
+BUILD=24

project.yml

@@ -74,8 +74,8 @@ targets:
       properties:
         CFBundleDisplayName: GhostTile
         CFBundleIconName: app
-        CFBundleShortVersionString: 2.0.6
-        CFBundleVersion: "23"
+        CFBundleShortVersionString: 2.0.7
+        CFBundleVersion: "24"
         LSUIElement: false
         LSMinimumSystemVersion: "15.0"
         NSHighResolutionCapable: true

releases/2.0.7.html

@@ -0,0 +1,3 @@
+<ul>
+  <li>Fixed App Management permission detection. GhostTile no longer keeps showing the permission alert after access has already been granted.</li>
+</ul>