<?xml version="1.0" encoding="utf-8" standalone="yes"?>
<installer-gui-script minSpecVersion="2">
    <title>Quint Agent</title>
    <organization>com.quint.security</organization>
    <options customize="never" require-scripts="false" hostArchitectures="arm64,x86_64"/>
    <!-- Data-capture notice, shown as a Read Me pane BEFORE the user installs.
         Generated at build time by deploy/build-signed-pkg.sh, from the same
         constant the CLI prints, so it cannot drift from what the CLI says.
         This is the only disclosure surface in a GUI install: postinstall's
         stdout goes to a log file no human reads.
         NOTE: no double hyphen anywhere in this file. XML forbids it inside a
         comment, and productbuild refuses to read the file at the very END of
         a release build, after the whole Swift build has been paid for. -->
    <readme file="disclosure.txt"/>
    <!-- Require macOS 13 Ventura or later (EndpointSecurity framework requirement) -->
    <volume-check>
        <allowed-os-versions>
            <os-version min="13.0"/>
        </allowed-os-versions>
    </volume-check>
    <!-- Component packages -->
    <pkg-ref id="com.quint.security.daemon">
        <bundle-version/>
    </pkg-ref>
    <pkg-ref id="com.quint.security.app">
        <bundle-version>
            <bundle CFBundleShortVersionString="1.1.29" CFBundleVersion="2635" id="com.quint.security" path="Applications/QuintAgent.app"/>
        </bundle-version>
    </pkg-ref>
    <!-- Install choices (both required, not user-selectable) -->
    <choices-outline>
        <line choice="daemon"/>
        <line choice="app"/>
    </choices-outline>
    <choice id="daemon" title="Quint Daemon" description="The Quint proxy daemon — monitors AI agent traffic and forwards events to your cloud." visible="false">
        <pkg-ref id="com.quint.security.daemon"/>
    </choice>
    <choice id="app" title="Quint ES Extension" description="EndpointSecurity system extension — detects AI agents via code signing." visible="false">
        <pkg-ref id="com.quint.security.app"/>
    </choice>
    <!-- Package references (version placeholder replaced at build time) -->
    <pkg-ref id="com.quint.security.daemon" version="1.1.29" installKBytes="42495" updateKBytes="0">#daemon.pkg</pkg-ref>
    <pkg-ref id="com.quint.security.app" version="1.1.29" installKBytes="5453" updateKBytes="0">#app.pkg</pkg-ref>
</installer-gui-script>