Render command requires manual directory access grant on macOS

[tmustier]

Problem

When running pptx render on a new directory (e.g., .sandbox/elephant-deck/), macOS requires the user to physically grant access to that directory. This interrupts the workflow and requires manual intervention.

Steps to reproduce

1. Create a new directory: mkdir -p .sandbox/elephant-deck/
2. Generate a PPTX there: pptx generate spec.yaml -o .sandbox/elephant-deck/elephants.pptx
3. Try to render: pptx render .sandbox/elephant-deck/elephants.pptx 1 --out .sandbox/elephant-deck/
4. macOS prompts for directory access permission

Expected behavior

Rendering should work without manual permission grants, or at minimum the tool should detect the issue and provide a helpful error message.

Likely causes

• LibreOffice or PowerPoint (via AppleScript) running in a sandboxed context
• The render subprocess not inheriting the parent process's directory permissions
• TCC (Transparency, Consent, and Control) restrictions on automation tools

Possible solutions

1. Document the permission requirement in SKILL.md
2. Use a known-accessible temp directory for intermediate files
3. Pre-flight check for directory access before invoking renderer
4. Investigate if there's a way to request permissions programmatically