feat: auto-repair stale CLI symlink on launch

v1.8.0/1.8.1 release scripts placed CLI at Contents/MacOS/tasktick,
silently colliding with the GUI binary on case-insensitive APFS.
v1.8.2 moved it to Contents/cli/ but DMG users with prior 'Enable
CLI' symlinks have a stale link pointing nowhere useful.

This patch adds CLISymlinkRepair: AppDelegate launches it once on
applicationDidFinishLaunching. If /opt/homebrew/bin/tasktick or
/usr/local/bin/tasktick resolves to a non-current path, NSAlert
asks to repair; on confirm, an osascript admin escalation runs
ln -sfn to update the symlink (single Touch ID prompt, no Settings
navigation, no Terminal copy-paste).

Localized in all 11 supported languages.

Author: lifedever

Sources/App/AppDelegate.swift

@@ -26,6 +26,13 @@ final class AppDelegate: NSObject, NSApplicationDelegate {
     func applicationDidFinishLaunching(_ notification: Notification) {
         NotificationManager.shared.requestPermission()
 
+        // One-shot launch-time CLI symlink repair: detects /usr/local/bin/tasktick
+        // (or /opt/homebrew/bin/tasktick) symlinks left over from v1.8.0/1.8.1
+        // pointing at the now-relocated CLI binary, and offers a single-click
+        // admin-prompt repair via osascript. No-op when symlinks are already
+        // correct or absent.
+        CLISymlinkRepair.checkAndRepairIfNeeded()
+
         // Apply saved appearance mode
         let mode = UserDefaults.standard.string(forKey: "appearanceMode") ?? "system"
         switch mode {

Sources/Engine/CLISymlinkRepair.swift

@@ -0,0 +1,106 @@
+import AppKit
+import Foundation
+import TaskTickCore
+
+/// Launch-time check + repair for the user's `tasktick` symlink.
+///
+/// Background: v1.8.0/1.8.1 release scripts placed the CLI binary at
+/// `.app/Contents/MacOS/tasktick`, which silently collided with the GUI
+/// binary `TaskTick` on default case-insensitive APFS. v1.8.2 moves the
+/// CLI to `Contents/cli/tasktick`, but DMG users who already ran the
+/// "Enable CLI" flow on a prior version are left with a symlink pointing
+/// at the old (now nonexistent or wrong) path. This module detects that
+/// state on app launch and offers a one-click in-place repair via
+/// `osascript … with administrator privileges` (a single Touch ID /
+/// password prompt — no Settings navigation, no Terminal copy-paste).
+@MainActor
+enum CLISymlinkRepair {
+
+    /// Standard PATH locations where the user might have installed the
+    /// `tasktick` symlink. Apple-Silicon Homebrew first.
+    private static let candidatePaths = [
+        "/opt/homebrew/bin/tasktick",
+        "/usr/local/bin/tasktick"
+    ]
+
+    /// Run on `applicationDidFinishLaunching`. No-op for dev builds and
+    /// when no broken symlink exists.
+    static func checkAndRepairIfNeeded() {
+        guard !BundleContext.isDev else { return }
+
+        // The CLI inside the running .app — what the symlink should resolve to.
+        let expected = Bundle.main.bundleURL
+            .appendingPathComponent("Contents/cli/tasktick")
+            .path
+        guard FileManager.default.fileExists(atPath: expected) else {
+            // CLI not bundled (e.g. swift run directly) — nothing to repair against.
+            return
+        }
+
+        for path in candidatePaths {
+            guard let target = try? FileManager.default.destinationOfSymbolicLink(atPath: path) else {
+                continue
+            }
+            if target != expected {
+                promptRepair(symlinkPath: path, expected: expected)
+                return // One prompt per launch; user can repeat next launch if multiple paths broken.
+            }
+        }
+    }
+
+    private static func promptRepair(symlinkPath: String, expected: String) {
+        // Don't nag — user can defer per app version.
+        let dismissKey = "cliRepair.dismissedVersion"
+        let version = Bundle.main.infoDictionary?["CFBundleShortVersionString"] as? String ?? ""
+        if UserDefaults.standard.string(forKey: dismissKey) == version {
+            return
+        }
+
+        let alert = NSAlert()
+        alert.messageText = L10n.tr("cli.repair.title")
+        alert.informativeText = L10n.tr("cli.repair.message", symlinkPath)
+        alert.alertStyle = .warning
+        alert.addButton(withTitle: L10n.tr("cli.repair.update_button"))
+        alert.addButton(withTitle: L10n.tr("cli.repair.later_button"))
+
+        let response = alert.runModal()
+        if response == .alertFirstButtonReturn {
+            performRepair(symlinkPath: symlinkPath, expected: expected)
+        } else {
+            UserDefaults.standard.set(version, forKey: dismissKey)
+        }
+    }
+
+    private static func performRepair(symlinkPath: String, expected: String) {
+        // Single auth prompt via AppleScript admin escalation. -n forces
+        // ln to overwrite the existing symlink without de-referencing it.
+        let script = """
+        do shell script "ln -sfn '\(expected)' '\(symlinkPath)'" with administrator privileges
+        """
+        let task = Process()
+        task.executableURL = URL(fileURLWithPath: "/usr/bin/osascript")
+        task.arguments = ["-e", script]
+        do {
+            try task.run()
+            task.waitUntilExit()
+            if task.terminationStatus == 0 {
+                NSLog("✓ CLI symlink repaired: \(symlinkPath) → \(expected)")
+                showSuccess(symlinkPath: symlinkPath)
+            } else {
+                NSLog("⚠️ osascript exited \(task.terminationStatus) during CLI repair")
+                // User likely cancelled the auth prompt. Don't dismiss for the
+                // version — they may try again next launch.
+            }
+        } catch {
+            NSLog("⚠️ CLI symlink repair failed: \(error)")
+        }
+    }
+
+    private static func showSuccess(symlinkPath: String) {
+        let alert = NSAlert()
+        alert.messageText = L10n.tr("cli.repair.success.title")
+        alert.informativeText = L10n.tr("cli.repair.success.message", symlinkPath)
+        alert.addButton(withTitle: "OK")
+        alert.runModal()
+    }
+}

Sources/TaskTickCore/Localization/de.lproj/Localizable.strings

@@ -435,3 +435,10 @@
 "toast.action.failed" = "Aktion fehlgeschlagen";
 "toast.action.failed.notReady" = "TaskTick startet";
 "toast.action.failed.taskNotFound" = "Aufgabe nicht gefunden";
+
+"cli.repair.title" = "tasktick-CLI-Verknüpfung aktualisieren";
+"cli.repair.message" = "%@ zeigt auf einen veralteten CLI-Pfad. Jetzt aktualisieren? (Admin-Rechte erforderlich)";
+"cli.repair.update_button" = "Jetzt aktualisieren";
+"cli.repair.later_button" = "Später";
+"cli.repair.success.title" = "tasktick-CLI aktualisiert";
+"cli.repair.success.message" = "%@ verweist nun auf die gebündelte CLI-Binärdatei.";

Sources/TaskTickCore/Localization/en.lproj/Localizable.strings

@@ -557,3 +557,10 @@
 "toast.action.failed" = "Action failed";
 "toast.action.failed.notReady" = "TaskTick is still starting";
 "toast.action.failed.taskNotFound" = "Task not found";
+
+"cli.repair.title" = "Update tasktick CLI link";
+"cli.repair.message" = "The tasktick command at %@ points to an outdated location. Update it to the new path now? (Requires admin permission.)";
+"cli.repair.update_button" = "Update Now";
+"cli.repair.later_button" = "Later";
+"cli.repair.success.title" = "tasktick CLI updated";
+"cli.repair.success.message" = "%@ now points at the bundled CLI binary.";

Sources/TaskTickCore/Localization/es.lproj/Localizable.strings

@@ -426,3 +426,10 @@
 "toast.action.failed" = "Acción fallida";
 "toast.action.failed.notReady" = "TaskTick está iniciando";
 "toast.action.failed.taskNotFound" = "Tarea no encontrada";
+
+"cli.repair.title" = "Actualizar enlace de tasktick CLI";
+"cli.repair.message" = "%@ apunta a una ruta antigua de la CLI. ¿Actualizar ahora? (Requiere permiso de administrador)";
+"cli.repair.update_button" = "Actualizar ahora";
+"cli.repair.later_button" = "Más tarde";
+"cli.repair.success.title" = "tasktick CLI actualizado";
+"cli.repair.success.message" = "%@ ahora apunta al binario de CLI incluido.";

Sources/TaskTickCore/Localization/fr.lproj/Localizable.strings

@@ -392,3 +392,10 @@
 "toast.action.failed" = "Action échouée";
 "toast.action.failed.notReady" = "TaskTick démarre";
 "toast.action.failed.taskNotFound" = "Tâche introuvable";
+
+"cli.repair.title" = "Mettre à jour le lien tasktick CLI";
+"cli.repair.message" = "%@ pointe vers un ancien chemin de la CLI. Mettre à jour maintenant ? (Permissions administrateur requises)";
+"cli.repair.update_button" = "Mettre à jour";
+"cli.repair.later_button" = "Plus tard";
+"cli.repair.success.title" = "tasktick CLI mis à jour";
+"cli.repair.success.message" = "%@ pointe maintenant vers le binaire CLI groupé.";

Sources/TaskTickCore/Localization/id.lproj/Localizable.strings

@@ -435,3 +435,10 @@
 "toast.action.failed" = "Aksi gagal";
 "toast.action.failed.notReady" = "TaskTick sedang memulai";
 "toast.action.failed.taskNotFound" = "Tugas tidak ditemukan";
+
+"cli.repair.title" = "Perbarui tautan tasktick CLI";
+"cli.repair.message" = "%@ menunjuk ke jalur CLI lama. Perbarui sekarang? (Memerlukan izin admin)";
+"cli.repair.update_button" = "Perbarui Sekarang";
+"cli.repair.later_button" = "Nanti";
+"cli.repair.success.title" = "tasktick CLI diperbarui";
+"cli.repair.success.message" = "%@ kini menunjuk ke biner CLI yang dibundel.";

Sources/TaskTickCore/Localization/it.lproj/Localizable.strings

@@ -435,3 +435,10 @@
 "toast.action.failed" = "Azione fallita";
 "toast.action.failed.notReady" = "TaskTick è in avvio";
 "toast.action.failed.taskNotFound" = "Attività non trovata";
+
+"cli.repair.title" = "Aggiorna il collegamento tasktick CLI";
+"cli.repair.message" = "%@ punta a un vecchio percorso della CLI. Aggiornare ora? (Richiede privilegi di amministratore)";
+"cli.repair.update_button" = "Aggiorna ora";
+"cli.repair.later_button" = "Più tardi";
+"cli.repair.success.title" = "tasktick CLI aggiornato";
+"cli.repair.success.message" = "%@ ora punta al binario della CLI incluso.";

Sources/TaskTickCore/Localization/ja.lproj/Localizable.strings

@@ -435,3 +435,10 @@
 "toast.action.failed" = "操作に失敗しました";
 "toast.action.failed.notReady" = "TaskTick は起動中です";
 "toast.action.failed.taskNotFound" = "タスクが見つかりません";
+
+"cli.repair.title" = "tasktick CLI のリンクを更新";
+"cli.repair.message" = "%@ は古い CLI パスを指しています。今すぐ更新しますか？（管理者権限が必要）";
+"cli.repair.update_button" = "今すぐ更新";
+"cli.repair.later_button" = "後で";
+"cli.repair.success.title" = "tasktick CLI を更新しました";
+"cli.repair.success.message" = "%@ は新しい CLI バイナリを指しています。";

Sources/TaskTickCore/Localization/ko.lproj/Localizable.strings

@@ -410,3 +410,10 @@
 "toast.action.failed" = "작업 실패";
 "toast.action.failed.notReady" = "TaskTick 시작 중";
 "toast.action.failed.taskNotFound" = "작업을 찾을 수 없음";
+
+"cli.repair.title" = "tasktick CLI 링크 업데이트";
+"cli.repair.message" = "%@ 가 오래된 CLI 경로를 가리키고 있습니다. 지금 업데이트할까요? (관리자 권한 필요)";
+"cli.repair.update_button" = "지금 업데이트";
+"cli.repair.later_button" = "나중에";
+"cli.repair.success.title" = "tasktick CLI 가 업데이트되었습니다";
+"cli.repair.success.message" = "%@ 가 이제 새 CLI 바이너리를 가리킵니다.";