Studio agent generates AppleScript calendar workflows the app binary cannot execute

[JaredG99]

SUMMARY: The Studio agent generates AppleScript calendar workflows that the app binary cannot execute because the app is missing the com.apple.security.automation.apple-events entitlement.

ENVIRONMENT:

• App:Studio by Spotify Labs 1.2.95.293.gf2b39d54 (master)
• Components: super-connect v0.10.600, upload-to-spotify 0.1.5
• OS: macOS Tahoe 26.5.2
• Hardware: [Apple Silicon / Intel]
• App path: /Applications/Studio by Spotify Labs.app
  Code signature: Valid. Developer ID Application: Spotify (2FNC3A47ZF), notarized. The signature itself is intact; the defect is a missing entitlement within it.

ISSUE:

While configuring a Personal Podcast with Apple Calendar and Apple Reminders integration, the agent's access attempts are consistently blocked. Reproduced consistently; ruled out antivirus, VPN, firewall, and all user-configurable macOS permissions before isolating the root cause: a missing entitlement in the app's hardened-runtime code signature.

When asked to read Calendar or Reminders, the agent shells out to osascript. Every attempt fails with "privilege violation / Connection invalid" to com.apple.hiservices-xpcservice. The unified log shows tccd rejecting the request because the app's hardened runtime lacks the required entitlement:

Prompting policy for hardened runtime; service: kTCCServiceAppleEvents requires entitlement com.apple.security.automation.apple-events but it is missing for :

accessing={TCCDProcess: identifier=com.spotify.studio, ...}, requesting={TCCDProcess: identifier=com.apple.osascript, ...}

Under macOS's hardened runtime, an app must have com.apple.security.automation.apple-events compiled into its code signature to send AppleScript commands to other apps at all.

Without it, tccd refuses the request before any prompt or permission check occurs. That produces the "privilege violation / Connection invalid" error the agent sees, and it explains why the block sits upstream of everything user-configurable: the gate is not a setting but a missing declaration sealed into the app's signature at build time.

Denial timestamps in the tccd log correspond one-to-one with the agent's failed Calendar and Reminders attempts. Both features were independently reproduced and fail identically through the same kTCCServiceAppleEvents gate.

IMPACT

Calendar-driven Personal Podcasts cannot access local Apple Calendar or Reminders. User-side Automation permissions are granted and visible in System Settings > Privacy & Security > Automation (Calendar.app and Reminders.app both toggled on for Studio), but they are unreachable because the entitlement gate precedes the TCC check. No user configuration can resolve this.

SUGGESTED FIX

Either ship the binary with the com.apple.security.automation.apple-events entitlement, or route calendar access through EventKit or a native connector instead of agent-generated osascript.

RELATED ADDITIONAL FINDINGS

1. The same pattern fires for kTCCServiceMicrophone and kTCCServiceCamera. The binary also lacks com.apple.security.device.audio-input and com.apple.security.device.camera. Microphone and camera access appears similarly affected on these code paths.

2. Studio-driven Google Chrome sessions (Studio's browsing feature; Chrome running with Studio as the TCC responsible process) hit the same missing audio-input and camera entitlements. Same root cause, additional affected surfaces.

3. Note: I had not requested any camera or microphone functionality when these checks fired. Worth confirming these probes are intentional (for example, capability enumeration at startup) rather than unintended.

 

 

1. Terminal output (codesign -d --entitlements -) demonstrating the missing entitlements in the app's code signature
2. Unified log capture (log show, process tccd) of the failed Calendar and Reminders access attempts, showing the osascript attribution chain (requesting=com.apple.osascript, responsible=com.spotify.studio)
3. Deduplicated failure counts per entitlement (sort | uniq -c), filtered to com.spotify.studio