#!/bin/bash
# postinstall — runs as root after pkgbuild installs payload.
#
# The .pkg installs:
#   /usr/local/lib/runlayer/aiwatch-enforce/   PyInstaller onedir bundle
#   /usr/local/bin/aiwatch-enforce             symlink → bundle exe
#
# No LaunchAgent — the hook is invoked on-demand by AI coding clients.

set -euo pipefail

chmod 755 /usr/local/lib/runlayer/aiwatch-enforce/aiwatch-enforce

exit 0
