Improve development build experience

- compile_and_run.sh: Automatically source .envrc for APP_IDENTITY
  - Added comment acknowledging direnv trust model
- package_app.sh: Add privacy usage descriptions to Info.plist
  - Apple Events: Interact with other apps for URLs/sessions
  - Desktop/Documents/Downloads: Open config and log files
  - Photo Library/Apple Music: Explicitly state not used

Benefits:
- Consistent code signing across rebuilds
- Clear privacy descriptions instead of generic dialogs
- Streamlined development workflow

Note: Does NOT fix issue #485 (Claude keychain prompt cycle).
That requires changes to Claude OAuth keychain handling logic.

Co-authored-by: Qwen-Coder <qwen-coder@alibabacloud.com>

Author: johnyoonh

Scripts/compile_and_run.sh

@@ -4,6 +4,16 @@
 set -euo pipefail
 
 ROOT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+
+# Source .envrc if it exists to load APP_IDENTITY and other environment variables
+# Note: This executes all commands in .envrc, but direnv requires explicit user approval
+# via 'direnv allow', so this is safe for development use.
+if [[ -f "${ROOT_DIR}/.envrc" ]]; then
+    # shellcheck disable=SC1091
+    source "${ROOT_DIR}/.envrc"
+    export APP_IDENTITY
+fi
+
 APP_BUNDLE="${ROOT_DIR}/CodexBar.app"
 APP_PROCESS_PATTERN="CodexBar.app/Contents/MacOS/CodexBar"
 DEBUG_PROCESS_PATTERN="${ROOT_DIR}/.build/debug/CodexBar"

Scripts/package_app.sh

@@ -197,6 +197,13 @@ cat > "$APP/Contents/Info.plist" <<PLIST
     <key>SUEnableAutomaticChecks</key><${AUTO_CHECKS}/>
     <key>CodexBuildTimestamp</key><string>${BUILD_TIMESTAMP}</string>
     <key>CodexGitCommit</key><string>${GIT_COMMIT}</string>
+    <!-- Usage descriptions for macOS privacy permissions -->
+    <key>NSAppleEventsUsageDescription</key><string>CodexBar needs to interact with other applications to open URLs and manage your AI coding sessions.</string>
+    <key>NSDesktopFolderUsageDescription</key><string>CodexBar needs access to open configuration and log files from your Desktop.</string>
+    <key>NSDocumentsFolderUsageDescription</key><string>CodexBar needs access to open configuration and log files from your Documents folder.</string>
+    <key>NSDownloadsFolderUsageDescription</key><string>CodexBar needs access to open configuration and log files from your Downloads folder.</string>
+    <key>NSPhotoLibraryUsageDescription</key><string>CodexBar does not access your photo library. This permission is requested by a system framework but is not used.</string>
+    <key>NSAppleMusicUsageDescription</key><string>CodexBar does not access Apple Music. This permission is requested by a system framework but is not used.</string>
 </dict>
 </plist>
 PLIST