Recurring [detectedProjects] failure every ~30min: sqlite3 'unable to open database file' (14) via disclaimer helper

Summary

Since app launch, a recurring background job ([detectedProjects]) fails on every single run (100% failure rate observed this session) with a SQLite "unable to open database file" error, spawned through an internal disclaimer helper.

Environment

• Claude desktop app (macOS / Darwin)
• App version: 1.18286.2 (packaged build)
• CCD version: 2.1.202 (falls back to installed CLI 2.1.197 in the same log window — may or may not be related)

Observed behavior

First occurrence at app launch, then recurring roughly every 30 minutes for the entire session so far — every single occurrence failed the same way:

2026-07-07 09:16:20 [error] [detectedProjects] source failed: Error: Failed to spawn /usr/bin/sqlite3 (via disclaimer): /Applications/Claude.app/Contents/Helpers/disclaimer exited with code 14: Error: in prepare, unable to open database file (14)

    at xn (app.asar/.vite/build/index.js:176:92614)
    at async ABr (app.asar/.vite/build/index.js:3981:25089)
    at async cut (app.asar/.vite/build/index.js:3981:25339)
    at async Promise.allSettled (index 1)
    at async bwe (app.asar/.vite/build/index.js:3982:2410)

Recurrence timestamps this session: 09:16:20, 09:16:22, 09:46:22, 10:16:22, 10:46:22, 11:16:22, 11:46:22, 12:16:22 — a steady ~30 min cadence, 100% failure rate since launch.

SQLite error code 14 = SQLITE_CANTOPEN. The helper name (disclaimer) and the symptom suggest this may be trying to read some other app's database (e.g. for recent-project detection) without the necessary file access / TCC permission on this machine, rather than a corrupt or locked file — but the log line doesn't include the actual DB path being opened, so this is a guess, not a confirmed cause.

Impact

Unclear from the client side — [detectedProjects] presumably degrades gracefully (no visible UI error tied to this), but it fails silently and continuously in the background every 30 minutes for the entire app session.

Question for the team

• What is [detectedProjects] meant to read via disclaimer/sqlite3, and does it need a file-system / TCC permission that isn't being requested or isn't granted on this machine?
• Since this fails 100% of the time in this session, is this expected/benign on setups without that permission, or is it a genuine regression?