# macOS packaging notes — Extreme Endpoint Agent

**Status:** shell installer ships today; signed `.pkg` is the planned enterprise path.

## Official logo

Bundle `public/brand/extreme-logo-circle.jpg` (or store `media/brand/`) as the package icon / DMG background mark. Do not substitute third-party marks.

## Planned `.pkg` flow

1. Build the desktop stub (`agents/desktop`) for `darwin-arm64` / `darwin-x64` (or universal).
2. Stage payload under `/Library/Application Support/ExtremeCyber/agent/`.
3. `pkgbuild` + `productbuild` with Extreme Developer ID Installer cert.
4. `notarytool submit` + `stapler staple`.
5. Gatekeeper-friendly distribution via the Agents portal download channel.

## LaunchAgent (optional heartbeat)

A future LaunchAgent plist may call `heartbeat` on an interval. It must **not** request:

- Accessibility
- Input Monitoring
- Screen Recording
- Full Disk Access (unless a future inventory policy explicitly documents it)

## TCC / privacy copy

Installer and first-run UI must state: enroll / heartbeat / fingerprint only — no spyware.

## Operator enroll

```bash
./install.sh --token "$ECS_ACTIVATION_TOKEN" --cloud-url https://cs.extreme.ps
```

Or complete the web install wizard at `/[locale]/app/agents`.