Deskflow Cannot Be Allowed to Control My Mac
FleetingRoot cause: Deskflow ships ad-hoc signed, and macOS pins Accessibility grants to the code signature.
snippet ⧉
Identifier=org.deskflow.deskflow flags=0x2(adhoc) TeamIdentifier=not set
With no Developer ID, TCC can’t identify the app by team/certificate, so it falls back to the cdhash of the binary. Every Deskflow release has a different cdhash, so your 1.25 grant simply doesn’t match the 1.26 binary.
The reason the untick/tick loop never terminated: toggling the checkbox re-authorizes the existing stale record (still pinned to the 1.25 hash). It never creates a record for the new binary. tccutil confirmed there were in fact two duplicate entries per service.
What I did on mac:
snippet ⧉
tccutil reset Accessibility org.deskflow.deskflow # 2 records cleared tccutil reset ListenEvent org.deskflow.deskflow # 2 records cleared (Input Monitoring) open -a Deskflow
— claude ()