如何在Mac App Store中的Sandbox中启用父母和子女应用程序之间的applescript？

Question

我有一个父级应用程序，该应用程序包含一个子应用程序。 Child应用程序使用AppleScript触发父应用程序中的某些事件。

现在，我正在准备App Store，我已经为应用程序打了盒装，并且缺少我不了解的权利或属性列表的内容。

在父级应用程序中，我定义了.sdef，我可以使用sdef/applications/parent.app将其转储，我从testflight安装后，我看到：

<!DOCTYPE dictionary SYSTEM "file://localhost/System/Library/DTDs/sdef.dtd">
<dictionary title="Parent">

<suite name="Parent Suite" code="prnt" description="Parent Scripts">

    <command name="is_first_run" code="prntisfr" description="Is this the first time running the app?">
        <cocoa class="MyScriptInterface"/>
    </command>

    <command name="activation_complete" code="prntWRac" description="Activation is complete">
        <cocoa class="MyScriptInterface"/>
    </command>

    <command name="sign_out" code="prntWRso" description="Sign out and delete local credentials">
        <cocoa class="MyScriptInterface"/>
    </command>

    <command name="get_version" code="prntgetv">
        <cocoa class="MyScriptInterface"/>
        <direct-parameter type="text" description="None"/>
        <result type="text"/>
    </command>

</suite>

在父级应用程序中在.plist中包含以下内容：

<key>NSAppleEventsUsageDescription</key>
    <string>AppleEvents needed to communicate between components</string>
<key>NSAppleScriptEnabled</key>
    <true/>
<key>OSAScriptingDefinition</key>
    <string>Parent.sdef</string>

在父权利中，我包括以下关键部分：

<key>com.apple.security.automation.apple-events</key>
    <true/>
<key>com.apple.security.scripting-targets</key>
    <dict>
            <key>com.foo.parent</key>
            <array>
                 <string>com.foo.parent.is_first_run</string>
                 <string>com.foo.parent.activation_complete</string>
                 <string>com.foo.parent.sign_out</string>                            
                 <string>com.foo.parent.get_version</string>
            </array>

            <key>com.foo.parent.child</key>
            <array>
                    <string>com.foo.parent.is_first_run</string>
                    <string>com.foo.parent.activation_complete</string>
                    <string>com.foo.parent.sign_out</string>
                    <string>com.foo.parent.get_version</string>
            </array>
    </dict>

在儿童应用程序中，我只有此键：

<key>NSAppleScriptEnabled</key>
    <true/>

在孩子的权利中，我只有这样的：

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">
<dict>
    <key>com.apple.security.app-sandbox</key>
    <true/>

    <key>com.apple.security.inherit</key>
    <true/>

我不了解某些东西。当我安装应用程序并观看控制台输出时，我会看到错误的组合：

对于父级应用程序：

AppleEvents/sandbox: Returning errAEPrivilegeError/-10004 and denying dispatch of event prnt/isfr from process '<private>'/0x0-0x7dccdc5, pid=95806, because it is not entitled to send an AppleEvent to this process.

我觉得它告诉我我的孩子应用需要以某种方式将其列入白色？我以为我已经明确地这样做了。

对于SandBoxD的儿童应用程序：

Violation:       deny(1) appleevent-send com.apple.systemevents

MetaData: {"platform-binary":false,"build":"macOS 12.3.1 (21E258)","sandbox_checker":"appleeventsd","process-path":"\/Applications\/Parent.app\/Contents\/MacOS\/Child.app\/Contents\/MacOS\/Child","profile-in-collection":false,"platform_binary":"no","primary-filter-value":"com.apple.systemevents","primary-filter":"appleevent-destination","checker":"appleeventsd","platform-policy":false,"policy-description":"Sandbox","summary":"deny(1) appleevent-send com.apple.systemevents","binary-in-trust-cache":false,"responsible-process-team-id":"367******2","target":"com.apple.systemevents","hardware":"Mac","pid":95806,"appleevent-destination":"com.apple.systemevents","flags":5,"responsible-process-signing-id":"com.foo.parent","apple-internal":false,"normalized_target":["com.apple.systemevents"],"checker-pid":359,"profile-flags":0,"operation":"appleevent-send","errno":1,"action":"deny","uid":501,"responsible-process-path":"\/Applications\/Parent.app\/Contents\/MacOS\/Parent","signing-id":"com.foo.parent.child","team-id":"367******2","container":"\/Users\/spartygw\/Library\/Containers\/com.foo.parent\/Data","process":"Child","release-type":"User"}

为了完整，我试图从Child.App.App中执行AppleScript。如下

NSDictionary* errorDict;
NSAppleScript* scriptObject = [[NSAppleScript alloc] initWithSource: @"tell application id \"com.foo.parent\" to sign_out"];
NSAppleEventDescriptor* returnDescriptor = [scriptObject executeAndReturnError: &errorDict];

：

apple：启用其他应用程序的脚本

.com/questions/70548909/how-to-run-applescript-from-c-in-macos-sandbox-environment-without-entitlement">Related stack question