# Install MrWorldwide on the user's Mac

Canonical recipe: https://applib.dev/install/mrworldwide/agent.md
Machine-readable release: https://applib.dev/install/mrworldwide/manifest.json

## Scope and capability check

The user selected an agent-assisted installation entry point. Confirm that your tools run on their actual Mac. A cloud shell, Linux container, remote browser or paired device other than the intended Mac is not sufficient. Never install there and describe it as installation on the user's Mac. In Capy, select the intended paired Mac under Run on. In ChatGPT or Claude, use an available local execution integration, or guide the user through the same steps. Respect your tool permissions and macOS authorization prompts.

Supported: macOS 14.0+; Apple silicon and Intel. Inspect sw_vers -productVersion and uname -m before proceeding. The binary is version 1.5.0, build 8; publisher Noaa AB; bundle ID dev.applib.mrworldwide.

## Inspect before changing anything

Check /Applications/MrWorldwide.app and ~/Applications/MrWorldwide.app. Read an existing app's Contents/Info.plist to establish its identity, version and build. If the same or a newer version is already installed, verify it and report that rather than reinstalling. Do not overwrite any existing app, modify its preferences, remove scripts/cities or stop an in-use application. For an older version, use its normal Check for Updates flow; obtain approval for a separate manual replacement if needed.

## Download and verify

Download only this immutable HTTPS installer:
https://applib.dev/updates/mrworldwide/MrWorldwide-1.5.0.dmg

Expected SHA-256: 7f7c68b1acd5387261b9ea9ef07d39cfffeb3deb8a79529edf5b6dcec392f60c
Published checksum: https://applib.dev/updates/mrworldwide/MrWorldwide-1.5.0.dmg.sha256

Use a fresh private temporary directory (umask 077; mktemp -d), curl --fail --location with HTTPS-only redirects, and a fixed output filename. HTTP errors (including 404), redirects away from HTTPS, a partial download or checksum mismatch mean STOP. Do not guess another version, use a development build, or claim success. Report the failure and direct the user to https://applib.dev/support.

Compare shasum -a 256 of the downloaded DMG to the exact expected hash above. Run hdiutil verify. Mount the verified DMG read-only with hdiutil attach -readonly -nobrowse at a temporary mount point. Detach the volume when finished, including on failure.

The app in the mounted or extracted archive must be named MrWorldwide.app. Read its Info.plist and require bundle ID dev.applib.mrworldwide, CFBundleShortVersionString 1.5.0, and CFBundleVersion 8. Run codesign --verify --deep --strict on the app and spctl --assess --type execute --verbose=4. Inspect codesign -dv --verbose=4: require a Developer ID Application authority for Noaa AB and an accepted Apple Gatekeeper assessment. Stop on any disagreement. Do not remove quarantine attributes, disable Gatekeeper, ad-hoc sign the app, re-sign it, or suppress failed verification.

## Install and launch

Prefer /Applications/MrWorldwide.app when writable. If that requires additional permissions, ask for normal macOS authorization or offer ~/Applications/MrWorldwide.app; do not silently elevate privileges. Immediately recheck that the chosen destination does not already exist. Copy the verified app bundle with ditto, preserving its bundle structure; do not merge into an existing destination. Re-run signature assessment and read version/build from the installed copy. Detach any mounted image, then launch that exact installed path with open.

Confirm the running application's path and version. If local commands are allowed, run the installed app's Contents/Helpers/mrworldwide --help, then status. Help alone is not proof the app launched. An access-disabled response is not permission to enable access automatically. The released 1.5.0 app has the compact Ask your agent selector in Settings > General. Describe only capabilities discovered from the installed helper, not unreleased commands.

## Completion

Report the installed path, actual version/build, verification results, whether launch succeeded, and any remaining user action. If any step could not run, say so explicitly. Two cities are free; Pro is optional and must not be purchased or activated by this workflow. No login, license key, model API key, source checkout, developer tool installation or MCP setup is required to install the app. Leave existing user data untouched.