{ pkgs, lib, system, macos, ... }:
let
  up = macos.upstream.tahoe;
  # 18 GB full installer (App Store InstallAssistant.pkg, pinned)
  installer = pkgs.fetchurl { inherit (up.installer) url hash; name = "InstallAssistant.pkg"; };
  # Recovery BaseSystem.dmg: a pre-verified local store file when `recovery.file` is set
  # (Apple's CDN rotates Sequoia/Tahoe during the rollout), else fetched + pinned.
  # `nix store add-path --name macos-tahoe-BaseSystem.dmg BaseSystem.dmg` yields the same
  # content-addressed path on any host that has the file.
  recovery = if up.recovery ? file
    then builtins.storePath up.recovery.file
    else macos.fetchRecovery { inherit (up.recovery) shortname sha256; };
in
import ./images.nix { inherit pkgs lib system macos installer recovery; }