- Background Service (Login Item) — keeps blocks enforced even when the app window is closed.
- Full Disk Access — lets the background service modify /etc/hosts to block domains system-wide.
- Browser Extension (Safari / Chrome) — blocks sites inside the browser and provides page text to the AI classifier.
- Accessibility (only for AI) — lets the AI read window titles and visible text on native apps (Teams, Slack, VS Code, etc.). Not needed if you only block websites.
AI-powered blocks will refuse to start until Accessibility access is granted. You'll see a deep link to the correct System Settings pane.