macOS Accessibility/Automation permission prompt doesn't identify Claude Code as the requester
Description
When Claude Code's background pty-host process needs to control Terminal (e.g. for background sessions / bg-spare processes), macOS shows a permission prompt that only displays a version string like:
"2.1.237" wants access to control "Terminal". Allow or Deny?
Nothing in the prompt indicates this is Claude Code. The requesting binary is /Users/dk86425/.local/share/claude/versions/2.1.237/... (confirmed via ps -aef), but macOS surfaces only the raw version folder name, not an app name.
Why this matters
This is alarming to users — a permission dialog asking to control Terminal, labeled only with an opaque version number, looks like it could be from an unrelated or even malicious process. Users have no way to tell at a glance that it's a legitimate, expected request from Claude Code itself.
Suggested fix
Ensure the binary/bundle invoked for background pty-host processes carries proper app identity metadata (e.g. CFBundleName / CFBundleDisplayName set to "Claude Code") so the macOS TCC prompt reads something like:
"Claude Code" wants access to control "Terminal".
or at minimum includes "Claude" alongside the version number, so users can immediately recognize and trust the request.
Environment
- Claude Code version: 2.1.237
- OS: macOS (Darwin 25.6.0)
- Install path:
~/.local/share/claude/versions/2.1.237