Can a sandboxed macOS app manage other applications windows with user consent?

I'm planning to develop a macOS tiling window manager for potential distribution through the Mac App Store.

Planned Features
  1. Detect application windows and observe focus changes.
  2. Move, resize, and focus windows belonging to other applications.
  3. Organize windows into app-defined virtual workspaces rather than native macOS Spaces.
  4. Display a separate workspace navigation bar without replacing or disabling the native macOS menu bar.
Security and Permissions

The application would:

  • Use only public macOS APIs.
  • Not load user-provided plugins.
  • Not require root privileges.
  • Request explicit Accessibility permission from users.
  • Not replace or disable native macOS functionality.
App Sandbox Considerations

Apple's Protecting User Data with App Sandbox documentation lists "Use of accessibility APIs in assistive apps" as a restricted activity.

Questions
  1. Sandbox restrictions: Does this restriction prevent a sandboxed application from managing windows belonging to other applications, even when the user explicitly grants Accessibility permission?

  2. Supported APIs and entitlements: Are there public macOS APIs or entitlements that allow these window management operations while remaining compliant with App Sandbox requirements?

  3. Mac App Store distribution: Is there an Apple-supported architecture or approach that would allow this functionality to be distributed through the Mac App Store?

Goal

I'd like to confirm the technical feasibility of implementing these features within Apple's App Sandbox and Mac App Store requirements before beginning development.

A sandboxed application cannot bypass Accessibility, I believe. But you may want to ask DTS about it if you have doubts. You could probably use exception entitlements if targets are non-Apple applications.