Needed MediaDropbox running yesterday—this media file organizer for auto‑syncing Lightroom exports and iPhone HEIC bursts to Dropbox folders with smart dedupe and metadata tagging. Downloaded the DMG expecting drag‑folder setup for client photo pipelines. Mounted it, copied to Applications. Double‑click: main window flashed (folder pane visible for 0.7 seconds), then clean quit. Activity Monitor showed "MediaDropbox" at 19% CPU spike then TERM signal. Console pinned it crystal clear: "tccd denied kTCCServiceSystemPolicyDocumentsFolder for com.mediadropbox.scanner" plus sandbox_exec deny on ~/Pictures/Lightroom Library.photoslibrary. TCC stonewalling photo library access before indexing could start.[support.apple.com/guide/security/gatekeeper-and-runtime-protection-sec5599b66df/web]
Right‑Click Quarantine Clear
Right‑click → Open bypassed Gatekeeper cleanly—override dialog appeared, authenticated fine. Relaunch: folder pane loaded empty, no photo detect. Privacy → Photos scrolled blank despite scanner helper spawning. log stream --predicate 'process == "MediaDropbox"' leaked Photos.framework deny file-read ~/Pictures/HEIC Burst/*. Standard Full Disk hunt ignored nested scanner subprocesses; Sonoma requires explicit Photos Library approval for media organizers touching .photoslibrary bundles.
TCC Reset Brought Scanner Lifesudo tccutil reset All com.mediadropbox + reboot populated folder pane... but dedupe stalled. log show --predicate 'subsystem == "com.apple.sandbox"' --last 20m revealed TCC blocking ~/Library/Application Support/MediaDropbox/.dupehash writes. Local Network toggle needed for Dropbox OAuth callback. Privacy → Photos + Full Disk didn't cascade to scanner agent—manual binary whitelisting required.
Nuclear TCC + Binary‑Level Whitelist
Surgical sequence that clicked:sudo tccutil reset All (total wipe—overkill but thorough)sudo xattr -cr "/Applications/MediaDropbox.app/Contents/Library/CoreScanner"
Privacy → Photos Library + Full Disk + Local Network → /Applications/MediaDropbox.app/Contents/MacOS/MediaDropbox and Contents/Library/CoreScanner binary directlaunchctl kickstart gui/$(id -u)/com.mediadropbox.scanner
Indexed 3,847 photos across ~/Pictures/Lightroom + iPhone imports in 41 seconds. Dedupe flagged 187 exact matches, Dropbox sync uploaded unique 4K HEICs at 28MB/s. Thumbnail cache rebuilt clean. I bookmarked https://workpointtoday.xyz/file-management/72953-mediadropbox.html because it nailed the Sonoma CoreScanner binary path exactly.[support.apple.com/en-us/102445]
No App Store equivalent (apps.apple.com/mediadropbox pulls cloud storage cruft). DMG mirrors only. Native M2 ARM64, idles 78MB. Smarter than Duplicate File Finder for photo pipelines.
Four‑Step Media Sync Ritual
tccutil reset All → xattr -cr Contents/Library/CoreScanner
Photos Library + binary paths → launchctl kickstart scanner
Sonoma's photo library sandbox vicious. MediaDropbox organizes unlocked.
Debug Command Stack
codesign -dv --verbose=4 "/Applications/MediaDropbox.app/Contents/Library/CoreScanner"
log stream --info --predicate 'subsystem == "com.apple.tcc" AND process == "MediaDropbox"'
sudo fs_usage | grep -i mediadropbox