@trillboards/edge-sdk 0.2.3 → 0.2.6

package/deploy/macos/TrillboardsSetupApp.m

@@ -0,0 +1,603 @@
+#import <Cocoa/Cocoa.h>
+#import <errno.h>
+#import <fcntl.h>
+#import <signal.h>
+#import <spawn.h>
+#import <stdlib.h>
+#import <string.h>
+#import <sys/file.h>
+#import <sys/stat.h>
+#import <sys/wait.h>
+#import <unistd.h>
+
+extern char **environ;
+static int setupInstanceLockFd = -1;
+static NSString *const TrillboardsSetupActivateNotification = @"com.trillboards.cctv-setup.activate";
+
+static void normalizeTemporaryDirectory(void) {
+  const char *temporaryDirectory = getenv("TMPDIR");
+  if (temporaryDirectory == NULL || temporaryDirectory[0] == '\0') return;
+
+  struct stat info;
+  BOOL installerSandbox = strstr(temporaryDirectory, "PKInstallSandbox") != NULL;
+  BOOL usable = !installerSandbox &&
+      stat(temporaryDirectory, &info) == 0 &&
+      S_ISDIR(info.st_mode) &&
+      access(temporaryDirectory, W_OK | X_OK) == 0;
+  if (!usable) setenv("TMPDIR", "/private/tmp", 1);
+}
+
+static BOOL acquireSetupInstanceLock(void) {
+  NSString *lockPath = [NSTemporaryDirectory() stringByAppendingPathComponent:@"com.trillboards.cctv-setup.lock"];
+  setupInstanceLockFd = open(lockPath.fileSystemRepresentation, O_RDWR | O_CREAT, 0600);
+  if (setupInstanceLockFd == -1) return YES;
+  if (flock(setupInstanceLockFd, LOCK_EX | LOCK_NB) == 0) return YES;
+  close(setupInstanceLockFd);
+  setupInstanceLockFd = -1;
+  return NO;
+}
+
+@interface TrillboardsSetupDelegate : NSObject <NSApplicationDelegate>
+@property(nonatomic, strong) NSWindow *window;
+@property(nonatomic, strong) NSTextField *headline;
+@property(nonatomic, strong) NSTextField *detail;
+@property(nonatomic, strong) NSTextField *statusValue;
+@property(nonatomic, strong) NSTextField *metric;
+@property(nonatomic, strong) NSProgressIndicator *progress;
+@property(nonatomic, strong) NSButton *actionButton;
+@property(nonatomic, strong) NSArray<NSTextField *> *stepLabels;
+@property(nonatomic, strong) NSTimer *timer;
+@property(nonatomic, assign) pid_t pairProcessIdentifier;
+@property(nonatomic, strong) dispatch_source_t pairProcessSource;
+@property(nonatomic, copy) NSString *lastStage;
+@property(nonatomic, copy) NSString *portalURL;
+@property(nonatomic, assign) BOOL setupStarted;
+@property(nonatomic, assign) BOOL terminating;
+@end
+
+@implementation TrillboardsSetupDelegate
+
+- (NSString *)homePath:(NSString *)relative {
+  return [NSHomeDirectory() stringByAppendingPathComponent:relative];
+}
+
+- (NSTextField *)label:(NSString *)text size:(CGFloat)size weight:(NSFontWeight)weight frame:(NSRect)frame {
+  NSTextField *field = [NSTextField labelWithString:text];
+  field.frame = frame;
+  field.font = [NSFont systemFontOfSize:size weight:weight];
+  field.lineBreakMode = NSLineBreakByWordWrapping;
+  field.maximumNumberOfLines = 0;
+  return field;
+}
+
+- (void)applicationDidFinishLaunching:(NSNotification *)notification {
+  (void)notification;
+  self.lastStage = @"welcome";
+  self.portalURL = @"https://trillboards.com/earner/screens";
+  self.setupStarted = NO;
+  [NSDistributedNotificationCenter.defaultCenter addObserver:self
+                                                    selector:@selector(activateSetupWindow:)
+                                                        name:TrillboardsSetupActivateNotification
+                                                      object:nil];
+  [self buildWindow];
+  [self showWelcome];
+  self.timer = [NSTimer scheduledTimerWithTimeInterval:0.45
+                                                target:self
+                                              selector:@selector(readProgress)
+                                              userInfo:nil
+                                               repeats:YES];
+  [self.window makeKeyAndOrderFront:nil];
+  [NSApp activateIgnoringOtherApps:YES];
+}
+
+- (void)activateSetupWindow:(NSNotification *)notification {
+  (void)notification;
+  [self.window makeKeyAndOrderFront:nil];
+  [NSApp activateIgnoringOtherApps:YES];
+}
+
+- (BOOL)applicationShouldTerminateAfterLastWindowClosed:(NSApplication *)sender {
+  (void)sender;
+  return YES;
+}
+
+- (void)applicationWillTerminate:(NSNotification *)notification {
+  (void)notification;
+  self.terminating = YES;
+  [NSDistributedNotificationCenter.defaultCenter removeObserver:self];
+  [self.timer invalidate];
+  [self stopPairProcess];
+}
+
+- (void)stopPairProcess {
+  pid_t pid = self.pairProcessIdentifier;
+  self.pairProcessIdentifier = 0;
+  if (self.pairProcessSource) {
+    dispatch_source_cancel(self.pairProcessSource);
+    self.pairProcessSource = nil;
+  }
+  if (pid <= 0) return;
+
+  kill(-pid, SIGTERM);
+  BOOL running = YES;
+  for (NSUInteger attempt = 0; attempt < 20 && running; attempt++) {
+    errno = 0;
+    running = kill(pid, 0) == 0 || errno != ESRCH;
+    if (!running) break;
+    [NSThread sleepForTimeInterval:0.05];
+  }
+  if (running) kill(-pid, SIGKILL);
+
+  int status = 0;
+  while (waitpid(pid, &status, 0) == -1 && errno == EINTR) {
+    // Retry an interrupted reap so the wrapper cannot remain a zombie.
+  }
+}
+
+- (BOOL)launchSetupExecutable:(NSString *)executable
+                    arguments:(NSArray<NSString *> *)arguments
+                      logPath:(NSString *)logPath
+                        error:(NSError **)error {
+  int logFd = open(logPath.fileSystemRepresentation, O_WRONLY | O_APPEND | O_CREAT, 0600);
+  if (logFd == -1) {
+    if (error) *error = [NSError errorWithDomain:NSPOSIXErrorDomain code:errno userInfo:nil];
+    return NO;
+  }
+
+  posix_spawn_file_actions_t fileActions;
+  posix_spawnattr_t attributes;
+  posix_spawn_file_actions_init(&fileActions);
+  posix_spawn_file_actions_adddup2(&fileActions, logFd, STDOUT_FILENO);
+  posix_spawn_file_actions_adddup2(&fileActions, logFd, STDERR_FILENO);
+  posix_spawn_file_actions_addclose(&fileActions, logFd);
+  posix_spawnattr_init(&attributes);
+  posix_spawnattr_setflags(&attributes, POSIX_SPAWN_SETPGROUP);
+  posix_spawnattr_setpgroup(&attributes, 0);
+
+  NSUInteger argumentCount = arguments.count + 2;
+  char **argv = calloc(argumentCount, sizeof(char *));
+  argv[0] = strdup(executable.fileSystemRepresentation);
+  for (NSUInteger index = 0; index < arguments.count; index++) {
+    argv[index + 1] = strdup(arguments[index].UTF8String);
+  }
+
+  pid_t pid = 0;
+  int spawnError = posix_spawn(&pid,
+                               executable.fileSystemRepresentation,
+                               &fileActions,
+                               &attributes,
+                               argv,
+                               environ);
+  for (NSUInteger index = 0; index < argumentCount; index++) free(argv[index]);
+  free(argv);
+  posix_spawnattr_destroy(&attributes);
+  posix_spawn_file_actions_destroy(&fileActions);
+  close(logFd);
+  if (spawnError != 0) {
+    if (error) *error = [NSError errorWithDomain:NSPOSIXErrorDomain code:spawnError userInfo:nil];
+    return NO;
+  }
+
+  self.pairProcessIdentifier = pid;
+  dispatch_source_t source = dispatch_source_create(DISPATCH_SOURCE_TYPE_PROC,
+                                                     (uintptr_t)pid,
+                                                     DISPATCH_PROC_EXIT,
+                                                     dispatch_get_main_queue());
+  self.pairProcessSource = source;
+  __weak typeof(self) weakSelf = self;
+  dispatch_source_set_event_handler(source, ^{
+    [weakSelf pairProcessDidExit:pid];
+  });
+  dispatch_resume(source);
+  return YES;
+}
+
+- (void)pairProcessDidExit:(pid_t)pid {
+  if (self.pairProcessIdentifier != pid) return;
+  int status = 0;
+  pid_t waited = waitpid(pid, &status, 0);
+  self.pairProcessIdentifier = 0;
+  if (self.pairProcessSource) {
+    dispatch_source_cancel(self.pairProcessSource);
+    self.pairProcessSource = nil;
+  }
+  BOOL failed = waited == -1 || !WIFEXITED(status) || WEXITSTATUS(status) != 0;
+  NSInteger exitCode = waited != -1 && WIFEXITED(status) ? WEXITSTATUS(status) : -1;
+  if (!failed || self.terminating || [self.lastStage isEqualToString:@"ready"] || [self.lastStage isEqualToString:@"error"] || [self.lastStage isEqualToString:@"local_ai_error"]) return;
+  __weak typeof(self) weakSelf = self;
+  dispatch_after(dispatch_time(DISPATCH_TIME_NOW, (int64_t)(0.6 * NSEC_PER_SEC)), dispatch_get_main_queue(), ^{
+    TrillboardsSetupDelegate *strongSelf = weakSelf;
+    if (!strongSelf || strongSelf.terminating || [strongSelf.lastStage isEqualToString:@"ready"] || [strongSelf.lastStage isEqualToString:@"error"] || [strongSelf.lastStage isEqualToString:@"local_ai_error"]) return;
+    NSString *message = exitCode >= 0
+        ? [NSString stringWithFormat:@"The camera setup helper exited with code %ld. Try again; if it repeats, send setup-app.log to Trillboards support.", (long)exitCode]
+        : @"The camera setup helper stopped unexpectedly. Try again; if it repeats, send setup-app.log to Trillboards support.";
+    [strongSelf showLocalError:@"Setup stopped before finishing" message:message];
+  });
+}
+
+- (void)buildWindow {
+  self.window = [[NSWindow alloc]
+      initWithContentRect:NSMakeRect(0, 0, 760, 540)
+                styleMask:NSWindowStyleMaskTitled | NSWindowStyleMaskClosable | NSWindowStyleMaskMiniaturizable
+                  backing:NSBackingStoreBuffered
+                    defer:NO];
+  self.window.title = @"Trillboards CCTV Setup";
+  self.window.minSize = NSMakeSize(760, 540);
+  self.window.maxSize = NSMakeSize(760, 540);
+  [self.window center];
+
+  NSView *root = self.window.contentView;
+  NSView *sidebar = [[NSView alloc] initWithFrame:NSMakeRect(0, 0, 190, 540)];
+  sidebar.wantsLayer = YES;
+  sidebar.layer.backgroundColor = NSColor.controlBackgroundColor.CGColor;
+  [root addSubview:sidebar];
+
+  NSTextField *brand = [self label:@"Trillboards" size:16 weight:NSFontWeightSemibold frame:NSMakeRect(24, 480, 145, 28)];
+  [sidebar addSubview:brand];
+
+  NSArray<NSString *> *names = @[@"Welcome", @"Account", @"Recorder", @"Cameras", @"Local AI", @"Ready"];
+  NSMutableArray<NSTextField *> *labels = [NSMutableArray array];
+  for (NSUInteger index = 0; index < names.count; index++) {
+    NSTextField *step = [self label:[NSString stringWithFormat:@"%lu    %@", index + 1, names[index]]
+                                size:13
+                              weight:NSFontWeightRegular
+                               frame:NSMakeRect(24, 420 - (index * 48), 150, 28)];
+    step.textColor = NSColor.secondaryLabelColor;
+    [sidebar addSubview:step];
+    [labels addObject:step];
+  }
+  self.stepLabels = labels;
+
+  NSTextField *eyebrow = [self label:@"CUSTOMER SETUP" size:12 weight:NSFontWeightMedium frame:NSMakeRect(236, 466, 465, 22)];
+  eyebrow.textColor = [NSColor colorWithCalibratedRed:0 green:0.43 blue:0.61 alpha:1];
+  [root addSubview:eyebrow];
+
+  self.headline = [self label:@"" size:30 weight:NSFontWeightSemibold frame:NSMakeRect(236, 385, 465, 76)];
+  [root addSubview:self.headline];
+  self.detail = [self label:@"" size:16 weight:NSFontWeightRegular frame:NSMakeRect(236, 303, 465, 76)];
+  self.detail.textColor = NSColor.secondaryLabelColor;
+  [root addSubview:self.detail];
+
+  self.statusValue = [self label:@"" size:25 weight:NSFontWeightSemibold frame:NSMakeRect(236, 218, 465, 62)];
+  self.statusValue.alignment = NSTextAlignmentCenter;
+  self.statusValue.font = [NSFont monospacedSystemFontOfSize:25 weight:NSFontWeightSemibold];
+  self.statusValue.wantsLayer = YES;
+  self.statusValue.layer.backgroundColor = NSColor.controlBackgroundColor.CGColor;
+  self.statusValue.layer.borderColor = NSColor.separatorColor.CGColor;
+  self.statusValue.layer.borderWidth = 1;
+  self.statusValue.layer.cornerRadius = 6;
+  [root addSubview:self.statusValue];
+
+  self.metric = [self label:@"" size:13 weight:NSFontWeightRegular frame:NSMakeRect(236, 174, 465, 28)];
+  self.metric.textColor = NSColor.secondaryLabelColor;
+  [root addSubview:self.metric];
+
+  self.progress = [[NSProgressIndicator alloc] initWithFrame:NSMakeRect(236, 151, 465, 10)];
+  self.progress.style = NSProgressIndicatorStyleBar;
+  self.progress.indeterminate = NO;
+  self.progress.minValue = 0;
+  self.progress.maxValue = 100;
+  [root addSubview:self.progress];
+
+  NSTextField *privacy = [self label:@"Camera credentials stay on this computer. Cloud inference is off by default."
+                                      size:12
+                                    weight:NSFontWeightRegular
+                                     frame:NSMakeRect(236, 34, 300, 42)];
+  privacy.textColor = NSColor.secondaryLabelColor;
+  [root addSubview:privacy];
+
+  self.actionButton = [[NSButton alloc] initWithFrame:NSMakeRect(562, 36, 139, 40)];
+  self.actionButton.title = @"Start setup";
+  self.actionButton.bezelStyle = NSBezelStyleRounded;
+  self.actionButton.target = self;
+  self.actionButton.action = @selector(actionPressed);
+  [root addSubview:self.actionButton];
+}
+
+- (void)showWelcome {
+  self.lastStage = @"welcome";
+  self.headline.stringValue = @"Set up this computer for CCTV";
+  self.detail.stringValue = @"Connect your Trillboards account, find your recorder, and verify every camera before screens are created.";
+  self.statusValue.stringValue = @"About 5 minutes";
+  self.statusValue.font = [NSFont systemFontOfSize:25 weight:NSFontWeightSemibold];
+  self.metric.stringValue = @"Keep this computer and the recorder on the same network.";
+  self.progress.doubleValue = 0;
+  self.actionButton.title = @"Start setup";
+  self.actionButton.enabled = YES;
+  [self updateSteps:0];
+}
+
+- (void)showLocalError:(NSString *)title message:(NSString *)message {
+  self.lastStage = @"error";
+  self.headline.stringValue = title;
+  self.detail.stringValue = message;
+  self.statusValue.stringValue = @"Setup stopped";
+  self.statusValue.font = [NSFont systemFontOfSize:25 weight:NSFontWeightSemibold];
+  self.metric.stringValue = @"Details: Library/Logs/Trillboards/setup-app.log";
+  self.progress.doubleValue = 0;
+  self.actionButton.title = @"Try again";
+  self.actionButton.enabled = YES;
+}
+
+- (void)actionPressed {
+  if ([self.lastStage isEqualToString:@"waiting_for_account"] ||
+      [self.lastStage isEqualToString:@"account_attention"]) {
+    [self openURL:self.portalURL];
+  } else if ([self.lastStage isEqualToString:@"ready"]) {
+    [self openURL:@"https://trillboards.com/earner/screens"];
+  } else if ([self.lastStage isEqualToString:@"local_ai_error"]) {
+    [NSApp terminate:nil];
+  } else if ([self.lastStage isEqualToString:@"welcome"] || [self.lastStage isEqualToString:@"error"]) {
+    [self startSetup];
+  }
+}
+
+- (void)startSetup {
+  NSString *pairer = [self homePath:@"Library/Trillboards/edge/bin/trillboards-pair"];
+  NSString *stateDirectory = [self homePath:@"Library/Application Support/Trillboards"];
+  NSString *statePath = [stateDirectory stringByAppendingPathComponent:@"setup-progress.json"];
+  NSString *logDirectory = [self homePath:@"Library/Logs/Trillboards"];
+  NSString *logPath = [logDirectory stringByAppendingPathComponent:@"setup-app.log"];
+  NSFileManager *files = NSFileManager.defaultManager;
+  if (![files isExecutableFileAtPath:pairer]) {
+    [self showLocalError:@"Setup app is incomplete" message:@"Reinstall the Trillboards CCTV connector, then try again."];
+    return;
+  }
+  [files createDirectoryAtPath:stateDirectory withIntermediateDirectories:YES attributes:nil error:nil];
+  [files removeItemAtPath:statePath error:nil];
+  [files createDirectoryAtPath:logDirectory withIntermediateDirectories:YES attributes:nil error:nil];
+  if (![files fileExistsAtPath:logPath]) [files createFileAtPath:logPath contents:nil attributes:nil];
+
+  self.lastStage = @"starting";
+  self.setupStarted = YES;
+  self.headline.stringValue = @"Starting camera setup";
+  self.detail.stringValue = @"Connecting securely to Trillboards.";
+  self.statusValue.stringValue = @"Please wait";
+  self.metric.stringValue = @"No Terminal or command window is required.";
+  self.progress.doubleValue = 8;
+  self.actionButton.enabled = NO;
+
+  NSError *error = nil;
+  if (![self launchSetupExecutable:pairer
+                         arguments:@[@"--setup", @"--status-file", statePath]
+                           logPath:logPath
+                             error:&error]) {
+    [self showLocalError:@"Could not start setup" message:@"Reinstall the Trillboards CCTV connector, then try again."];
+    return;
+  }
+}
+
+- (void)readProgress {
+  NSString *statePath = [self homePath:@"Library/Application Support/Trillboards/setup-progress.json"];
+  if (!self.setupStarted) return;
+  NSData *data = [NSData dataWithContentsOfFile:statePath];
+  if (!data) return;
+  NSDictionary *state = [NSJSONSerialization JSONObjectWithData:data options:0 error:nil];
+  if (![state isKindOfClass:NSDictionary.class]) return;
+  [self renderState:state];
+}
+
+- (void)renderState:(NSDictionary *)state {
+  NSString *stage = [state[@"stage"] isKindOfClass:NSString.class] ? state[@"stage"] : nil;
+  if (!stage) return;
+  self.lastStage = stage;
+  if ([state[@"portalUrl"] isKindOfClass:NSString.class]) self.portalURL = state[@"portalUrl"];
+  if ([state[@"title"] isKindOfClass:NSString.class]) self.headline.stringValue = state[@"title"];
+  if ([state[@"message"] isKindOfClass:NSString.class]) self.detail.stringValue = state[@"message"];
+
+  NSNumber *cameraCount = state[@"cameraCount"];
+  NSNumber *validated = state[@"validatedFeeds"];
+  NSNumber *devices = state[@"devicesFound"];
+  NSNumber *rejected = state[@"rejectedFeeds"];
+  if (([stage isEqualToString:@"waiting_for_account"] ||
+       [stage isEqualToString:@"account_attention"]) &&
+      [state[@"displayCode"] isKindOfClass:NSString.class]) {
+    self.statusValue.font = [NSFont monospacedSystemFontOfSize:25 weight:NSFontWeightSemibold];
+    self.statusValue.stringValue = state[@"displayCode"];
+  } else if (cameraCount.integerValue > 0) {
+    self.statusValue.font = [NSFont systemFontOfSize:25 weight:NSFontWeightSemibold];
+    self.statusValue.stringValue = [NSString stringWithFormat:@"%ld camera%@", cameraCount.integerValue, cameraCount.integerValue == 1 ? @"" : @"s"];
+  } else if (validated.integerValue > 0) {
+    self.statusValue.font = [NSFont systemFontOfSize:25 weight:NSFontWeightSemibold];
+    self.statusValue.stringValue = [NSString stringWithFormat:@"%ld feed%@ ready", validated.integerValue, validated.integerValue == 1 ? @"" : @"s"];
+  } else if (devices != nil) {
+    self.statusValue.font = [NSFont systemFontOfSize:25 weight:NSFontWeightSemibold];
+    self.statusValue.stringValue = [NSString stringWithFormat:@"%ld device%@ found", devices.integerValue, devices.integerValue == 1 ? @"" : @"s"];
+  } else if ([stage isEqualToString:@"ready"]) {
+    self.statusValue.font = [NSFont systemFontOfSize:25 weight:NSFontWeightSemibold];
+    self.statusValue.stringValue = @"Setup complete";
+  } else if ([stage isEqualToString:@"local_ai_error"]) {
+    self.statusValue.font = [NSFont systemFontOfSize:25 weight:NSFontWeightSemibold];
+    self.statusValue.stringValue = @"Local AI needs attention";
+  } else if ([stage isEqualToString:@"error"]) {
+    self.statusValue.font = [NSFont systemFontOfSize:25 weight:NSFontWeightSemibold];
+    self.statusValue.stringValue = @"Setup stopped";
+  } else {
+    self.statusValue.font = [NSFont systemFontOfSize:25 weight:NSFontWeightSemibold];
+    self.statusValue.stringValue = @"In progress";
+  }
+
+  if (rejected.integerValue > 0) {
+    self.metric.stringValue = [NSString stringWithFormat:@"%ld black or unavailable input%@ ignored.", rejected.integerValue, rejected.integerValue == 1 ? @" was" : @"s were"];
+  } else if ([stage isEqualToString:@"account_attention"]) {
+    self.metric.stringValue = @"No cameras were added. It is safe to switch accounts.";
+  } else if ([stage isEqualToString:@"local_ai"]) {
+    self.metric.stringValue = @"Checking the private model installed with Trillboards.";
+  } else if ([stage isEqualToString:@"local_ai_error"]) {
+    self.metric.stringValue = @"Reinstall Trillboards CCTV Setup; your camera pairing is saved.";
+  } else if ([stage isEqualToString:@"ready"]) {
+    self.metric.stringValue = @"Trillboards starts automatically when this computer logs in.";
+  } else if ([stage isEqualToString:@"error"]) {
+    self.metric.stringValue = @"Details: Library/Logs/Trillboards/setup-app.log";
+  } else {
+    self.metric.stringValue = @"Camera credentials stay encrypted on this computer.";
+  }
+
+  self.progress.doubleValue = [self progressForStage:stage];
+  [self updateSteps:[self stepForStage:stage]];
+  if ([stage isEqualToString:@"waiting_for_account"]) {
+    self.actionButton.title = @"Open Trillboards";
+    self.actionButton.enabled = YES;
+  } else if ([stage isEqualToString:@"account_attention"]) {
+    self.actionButton.title = @"Switch account";
+    self.actionButton.enabled = YES;
+  } else if ([stage isEqualToString:@"local_ai_error"]) {
+    self.actionButton.title = @"Close";
+    self.actionButton.enabled = YES;
+  } else if ([stage isEqualToString:@"ready"]) {
+    self.actionButton.title = @"View cameras";
+    self.actionButton.enabled = YES;
+  } else if ([stage isEqualToString:@"error"]) {
+    self.actionButton.title = @"Try again";
+    self.actionButton.enabled = YES;
+  } else {
+    self.actionButton.title = @"Working...";
+    self.actionButton.enabled = NO;
+  }
+}
+
+- (NSInteger)stepForStage:(NSString *)stage {
+  if ([@[@"waiting_for_account", @"account_attention", @"account_connected"] containsObject:stage]) return 1;
+  if ([@[@"discovering", @"devices_found"] containsObject:stage]) return 2;
+  if ([@[@"validating", @"cameras_created"] containsObject:stage]) return 3;
+  if ([@[@"local_ai", @"starting_service"] containsObject:stage]) return 4;
+  if ([stage isEqualToString:@"ready"]) return 5;
+  return 0;
+}
+
+- (double)progressForStage:(NSString *)stage {
+  NSDictionary<NSString *, NSNumber *> *values = @{
+    @"waiting_for_account": @18, @"account_attention": @18, @"account_connected": @30, @"discovering": @42,
+    @"devices_found": @50, @"validating": @68, @"cameras_created": @80,
+    @"local_ai": @88, @"starting_service": @94, @"ready": @100
+  };
+  return values[stage] ? values[stage].doubleValue : 8;
+}
+
+- (void)updateSteps:(NSInteger)active {
+  NSArray<NSString *> *names = @[@"Welcome", @"Account", @"Recorder", @"Cameras", @"Local AI", @"Ready"];
+  for (NSInteger index = 0; index < (NSInteger)self.stepLabels.count; index++) {
+    NSTextField *field = self.stepLabels[(NSUInteger)index];
+    NSString *prefix = index < active ? @"OK" : [NSString stringWithFormat:@"%ld", index + 1];
+    field.stringValue = [NSString stringWithFormat:@"%@    %@", prefix, names[(NSUInteger)index]];
+    field.font = [NSFont systemFontOfSize:13 weight:index == active ? NSFontWeightSemibold : NSFontWeightRegular];
+    field.textColor = index <= active ? NSColor.labelColor : NSColor.secondaryLabelColor;
+  }
+}
+
+- (void)openURL:(NSString *)string {
+  NSURL *url = [NSURL URLWithString:string];
+  if (url) [NSWorkspace.sharedWorkspace openURL:url];
+}
+
+@end
+
+static int runCancellationSmokeTest(void) {
+  NSString *pidPath = [NSTemporaryDirectory()
+      stringByAppendingPathComponent:[NSString stringWithFormat:@"trillboards-setup-child-%@.pid", NSUUID.UUID.UUIDString]];
+  NSArray<NSString *> *arguments = @[
+    @"-c",
+    @"sleep 120 & child=$!; printf '%s\\n' \"$child\" > \"$1\"; wait \"$child\"",
+    @"trillboards-setup-cancel-smoke",
+    pidPath
+  ];
+  TrillboardsSetupDelegate *delegate = [[TrillboardsSetupDelegate alloc] init];
+  NSError *launchError = nil;
+  if (![delegate launchSetupExecutable:@"/bin/bash"
+                              arguments:arguments
+                                logPath:@"/dev/null"
+                                  error:&launchError]) {
+    fprintf(stderr, "Could not launch cancellation smoke process: %s\n", launchError.localizedDescription.UTF8String);
+    return 1;
+  }
+  pid_t wrapperPid = delegate.pairProcessIdentifier;
+
+  pid_t childPid = 0;
+  for (NSUInteger attempt = 0; attempt < 40 && childPid <= 0; attempt++) {
+    NSString *rawPid = [NSString stringWithContentsOfFile:pidPath encoding:NSUTF8StringEncoding error:nil];
+    childPid = (pid_t)rawPid.integerValue;
+    if (childPid <= 0) [NSThread sleepForTimeInterval:0.05];
+  }
+
+  [delegate stopPairProcess];
+
+  BOOL wrapperStopped = NO;
+  BOOL childStopped = NO;
+  for (NSUInteger attempt = 0; attempt < 40; attempt++) {
+    errno = 0;
+    wrapperStopped = kill(wrapperPid, 0) == -1 && errno == ESRCH;
+    errno = 0;
+    childStopped = childPid > 0 && kill(childPid, 0) == -1 && errno == ESRCH;
+    if (wrapperStopped && childStopped) break;
+    [NSThread sleepForTimeInterval:0.05];
+  }
+  [NSFileManager.defaultManager removeItemAtPath:pidPath error:nil];
+  if (childPid <= 0 || !wrapperStopped || !childStopped) {
+    fprintf(stderr, "Native setup cancellation smoke test left a process running.\n");
+    return 1;
+  }
+  fprintf(stdout, "Trillboards CCTV Setup cancellation smoke test passed.\n");
+  return 0;
+}
+
+static int runTemporaryDirectorySmokeTest(void) {
+  const char *environmentTemporaryDirectory = getenv("TMPDIR");
+  if (environmentTemporaryDirectory != NULL &&
+      strstr(environmentTemporaryDirectory, "PKInstallSandbox") != NULL) {
+    fprintf(stderr, "Native setup retained PackageKit's temporary sandbox.\n");
+    return 1;
+  }
+
+  NSString *temporaryDirectory = NSTemporaryDirectory();
+  BOOL isDirectory = NO;
+  if (![NSFileManager.defaultManager fileExistsAtPath:temporaryDirectory isDirectory:&isDirectory] ||
+      !isDirectory ||
+      ![NSFileManager.defaultManager isWritableFileAtPath:temporaryDirectory]) {
+    fprintf(stderr, "Native setup temporary directory is unavailable: %s\n", temporaryDirectory.UTF8String);
+    return 1;
+  }
+
+  NSString *templatePath = [temporaryDirectory stringByAppendingPathComponent:@"trillboards-setup-tmp.XXXXXX"];
+  char *template = strdup(templatePath.fileSystemRepresentation);
+  if (template == NULL) {
+    fprintf(stderr, "Native setup could not allocate a temporary-directory template.\n");
+    return 1;
+  }
+  char *created = mkdtemp(template);
+  if (created == NULL) {
+    fprintf(stderr, "Native setup could not create a temporary directory: %s\n", strerror(errno));
+    free(template);
+    return 1;
+  }
+  rmdir(created);
+  free(template);
+  fprintf(stdout, "Trillboards CCTV Setup temporary-directory smoke test passed.\n");
+  return 0;
+}
+
+int main(int argc, const char *argv[]) {
+  // PackageKit deletes its sandbox immediately after postinstall. Never let a
+  // setup app or its pairing child retain that now-stale TMPDIR.
+  normalizeTemporaryDirectory();
+  @autoreleasepool {
+    if (argc == 2 && [[NSString stringWithUTF8String:argv[1]] isEqualToString:@"--smoke-test-cancel"]) {
+      return runCancellationSmokeTest();
+    }
+    if (argc == 2 && [[NSString stringWithUTF8String:argv[1]] isEqualToString:@"--smoke-test-tempdir"]) {
+      return runTemporaryDirectorySmokeTest();
+    }
+    if (!acquireSetupInstanceLock()) {
+      [NSDistributedNotificationCenter.defaultCenter postNotificationName:TrillboardsSetupActivateNotification
+                                                                   object:nil
+                                                                 userInfo:nil
+                                                       deliverImmediately:YES];
+      return 0;
+    }
+    NSApplication *application = NSApplication.sharedApplication;
+    TrillboardsSetupDelegate *delegate = [[TrillboardsSetupDelegate alloc] init];
+    application.delegate = delegate;
+    [application setActivationPolicy:NSApplicationActivationPolicyRegular];
+    [application run];
+  }
+  return 0;
+}