macOS FDA permission prompt recurs after every CLI update

Problem

Every time the Claude Code CLI auto-updates, macOS prompts again for Full Disk Access (and potentially other TCC-protected permissions). Users must manually go to System Settings > Privacy & Security > Full Disk Access and toggle ON the new version entry each time.

This happens because each CLI version is installed as a separate Mach-O binary at ~/.local/share/claude/versions/X.Y.Z, and each binary appears to have a distinct code-signing identity. macOS TCC evaluates permissions per code signature, so a new signature = a new permission grant required.

Observed across: 2.1.133 → 2.1.136 → 2.1.137 → 2.1.138

Note: granting Full Disk Access to Terminal does not help — macOS TCC evaluates the Claude binary independently since it's a standalone executable, not a script running inside Terminal.

Expected behavior

FDA (and other TCC permissions) should carry forward across CLI updates without requiring the user to re-grant access each time.

Suggested fix

Sign all CLI version binaries with a stable code-signing identity (same Team ID + signing certificate + consistent bundle identifier or designated requirement). macOS TCC keys permissions on the code signing identity, so if the identity is stable across versions, permissions persist automatically.

Environment

• macOS 15 (Sequoia) / Darwin 25.4.0
• Apple Silicon (arm64)
• Claude Code CLI installed via standard method (~/.local/bin/claude symlink)