Bootstrap install.sh fails: looks for `Personal_AI_Infrastructure-*` but renamed repo tarball extracts to `LifeOS-5.0.0/`

[jibla]

Bug

The one-line bootstrap installer (curl -sSL https://ourpai.ai/install.sh | bash) fails on a fresh macOS/Linux install with:

▸ 3/5  Fetching PAI v5.0.0 from GitHub
  ℹ Downloading v5.0.0 tarball (HTTPS, no auth required)...
  ℹ Source: https://github.com/danielmiessler/Personal_AI_Infrastructure/archive/refs/tags/v5.0.0.tar.gz
  ✗ Could not locate extracted tarball directory under /var/folders/.../pai-install-XXXXXX.XXXXXXXX
  ℹ Expected a directory matching: Personal_AI_Infrastructure-*

The download succeeds, but the script can't find the extracted directory and aborts at step 3/5.

Root cause

The repo was renamed Personal_AI_Infrastructure → LifeOS, but install.sh still hard-codes the old name:

PAI_REPO_NAME="Personal_AI_Infrastructure"
PAI_TARBALL_URL=".../${PAI_REPO_NAME}/archive/refs/tags/${PAI_TAG}.tar.gz"
curl -fsSL "$PAI_TARBALL_URL" | tar -xzf - -C "$TMP_DIR"
EXTRACTED_DIR="$(find "$TMP_DIR" -maxdepth 1 -type d -name "${PAI_REPO_NAME}-*" | head -n 1)"

GitHub redirects the old repo URL, so the download works — but it names the tarball's top-level folder after the current repo name. The archive therefore extracts to LifeOS-5.0.0/, while find ... -name "Personal_AI_Infrastructure-*" matches nothing → the abort.

Verified:

$ curl -fsSL https://github.com/danielmiessler/Personal_AI_Infrastructure/archive/refs/tags/v5.0.0.tar.gz | tar -tz | head -1
LifeOS-5.0.0/

The release contents themselves are intact at LifeOS-5.0.0/Releases/v5.0.0/.claude/ (including the bundled install.sh); only the directory-matching glob is wrong.

The script's own comment is ironic here:

# ... Resolve the prefix dynamically instead of hard-coding it, so a tag-format change doesn't silently break.

It resolves the tag suffix dynamically but hard-codes the repo-name prefix, which is exactly what broke.

Impact

Every fresh macOS/Linux user of the documented one-line installer is blocked at step 3/5.

Suggested fix

Any one of:

1. Set PAI_REPO_NAME="LifeOS" (works for both the tarball URL and the glob).
2. Make the glob repo-name-agnostic — match on the tag suffix instead:

   EXTRACTED_DIR="$(find "$TMP_DIR" -mindepth 1 -maxdepth 1 -type d | head -n 1)"

   (the tarball contains exactly one top-level dir), or -name "*-${PAI_VERSION}".

Environment

• macOS (Darwin), default bash/curl/tar/rsync
• PAI v5.0.0, via curl -sSL https://ourpai.ai/install.sh | bash

Workaround for others hitting this

curl -fsSL https://ourpai.ai/install.sh -o /tmp/pai-install.sh
sed -i '' 's/Personal_AI_Infrastructure/LifeOS/g' /tmp/pai-install.sh   # drop the '' on Linux
bash /tmp/pai-install.sh

[jibla]

Heads-up: this needs a server-side change, not a repo PR

I went to open a PR but the failing bootstrap script doesn't appear to be tracked in this repo. The only install.sh files in danielmiessler/LifeOS@main are the bundled second-stage installers (Releases/v*/.claude/install.sh) — not the bootstrap that downloads the tarball. The README points at the hosted https://ourpai.ai/install.sh (served via Cloudflare) as the canonical script, so the fix has to be applied wherever that file is served from. Posting the corrected script here so it's drop-in ready.

Minimal fix (the two lines that matter)

-PAI_REPO_NAME="Personal_AI_Infrastructure"
+PAI_REPO_NAME="LifeOS"

That single change fixes both the tarball URL and the directory glob, since GitHub now names the archive's top folder LifeOS-5.0.0/.

I'd also suggest making the directory resolution repo-name-agnostic so a future rename can't break it again — the tarball always contains exactly one top-level dir:

-# GitHub tarballs extract to {repo-name}-{tag}/. Resolve the prefix dynamically
-# instead of hard-coding it, so a tag-format change doesn't silently break.
+# GitHub tarballs extract to {repo-name}-{tag}/. Resolve the directory by
+# taking the single top-level entry rather than matching on the repo name —
+# so a repo rename (e.g. Personal_AI_Infrastructure -> LifeOS) or a tag-format
+# change can't silently break it.
 if [ "$DRY_RUN" = "1" ]; then
   EXTRACTED_DIR="$TMP_DIR/${PAI_REPO_NAME}-${PAI_VERSION}"  # placeholder for dry-run
 else
-  EXTRACTED_DIR="$(find "$TMP_DIR" -maxdepth 1 -type d -name "${PAI_REPO_NAME}-*" | head -n 1)"
+  EXTRACTED_DIR="$(find "$TMP_DIR" -mindepth 1 -maxdepth 1 -type d | head -n 1)"
   if [ -z "$EXTRACTED_DIR" ] || [ ! -d "$EXTRACTED_DIR" ]; then
     error "Could not locate extracted tarball directory under $TMP_DIR"
-    info "Expected a directory matching: ${PAI_REPO_NAME}-*"
+    info "The downloaded archive did not contain a top-level directory."
     exit 1
   fi
 fi

Verification

# Old glob finds nothing → the abort users hit:
$ find "$TMP_DIR" -maxdepth 1 -type d -name "Personal_AI_Infrastructure-*"
(empty)

# Actual top-level dir in the v5.0.0 tarball:
$ curl -fsSL https://github.com/danielmiessler/Personal_AI_Infrastructure/archive/refs/tags/v5.0.0.tar.gz | tar -tz | head -1
LifeOS-5.0.0/

# New logic resolves it correctly:
$ find "$TMP_DIR" -mindepth 1 -maxdepth 1 -type d | head -n 1
.../LifeOS-5.0.0

bash -n passes; shellcheck is clean apart from pre-existing unused-color-var warnings.

Full corrected install.sh (drop-in replacement)

#!/usr/bin/env bash
# ═══════════════════════════════════════════════════════════════════
#   PAI v5.0.0 — One-Line Bootstrap Installer
#   curl -fsSL https://ourpai.ai/install.sh | bash
#
#   What this does:
#     1. Verifies prerequisites (curl, bash, rsync, tar; offers to install bun)
#     2. Backs up existing ~/.claude/ to ~/.claude.backup-{TIMESTAMP}
#     3. Downloads the v5.0.0 release tarball from
#        github.com/danielmiessler/LifeOS (HTTPS, no auth)
#     4. Places the release content at ~/.claude/
#     5. Hands off to the bundled installer (~/.claude/install.sh)
#        which runs the wizard (DA identity, voice, Pulse setup)
#
#   Why a tarball, not git clone:
#     - HTTPS-only — works for anonymous users with no GitHub account
#     - Immune to local `git config url.<x>.insteadOf` rewrites
#     - No SSH-agent / SSH-key dependency
#     - One fewer prerequisite (git not required)
# ═══════════════════════════════════════════════════════════════════
set -euo pipefail

# ─── Pinned release ──────────────────────────────────────────────
PAI_VERSION="${PAI_VERSION:-5.0.0}"
PAI_TAG="v${PAI_VERSION}"
PAI_REPO_OWNER="danielmiessler"
PAI_REPO_NAME="LifeOS"
PAI_TARBALL_URL="https://github.com/${PAI_REPO_OWNER}/${PAI_REPO_NAME}/archive/refs/tags/${PAI_TAG}.tar.gz"
PAI_RELEASE_SUBPATH="Releases/${PAI_TAG}/.claude"
DRY_RUN="${DRY_RUN:-0}"

# ─── Colors ──────────────────────────────────────────────────────
if [ -t 1 ]; then
  BLUE='\033[38;2;59;130;246m'
  LIGHT_BLUE='\033[38;2;147;197;253m'
  NAVY='\033[38;2;30;58;138m'
  GREEN='\033[38;2;34;197;94m'
  YELLOW='\033[38;2;234;179;8m'
  RED='\033[38;2;239;68;68m'
  GRAY='\033[38;2;100;116;139m'
  STEEL='\033[38;2;51;65;85m'
  SILVER='\033[38;2;203;213;225m'
  RESET='\033[0m'
  BOLD='\033[1m'
else
  BLUE='' LIGHT_BLUE='' NAVY='' GREEN='' YELLOW='' RED='' GRAY='' STEEL='' SILVER='' RESET='' BOLD=''
fi

info()    { printf "  ${BLUE}ℹ${RESET} %b\n" "$1"; }
success() { printf "  ${GREEN}✓${RESET} %b\n" "$1"; }
warn()    { printf "  ${YELLOW}⚠${RESET} %b\n" "$1"; }
error()   { printf "  ${RED}✗${RESET} %b\n" "$1" >&2; }
step()    { printf "\n${BOLD}${LIGHT_BLUE}▸ %s${RESET}\n" "$1"; }
run()     { if [ "$DRY_RUN" = "1" ]; then echo "  [DRY-RUN] $*"; else "$@"; fi; }

# ─── Banner ──────────────────────────────────────────────────────
# Plain ASCII art — no escape sequences. `cat <<HEREDOC` does NOT interpret
# `\033` in expanded variables (only `printf` does), so any color codes here
# would print as literal "\033[..." garbage when the script is piped through
# `sh`. Keep this section ANSI-free; the helper functions (info/success/etc.)
# carry the colored output via printf below.
cat <<'BANNER'

  ============================================================

           ____    _    ___
          |  _ \  / \  |_ _|
          | |_) |/ _ \  | |
          |  __// ___ \ | |
          |_|  /_/   \_\___|

                Personal AI Infrastructure
BANNER
printf '                    v%s  bootstrap\n\n' "$PAI_VERSION"
cat <<'BANNER'
  ============================================================

BANNER

if [ "$DRY_RUN" = "1" ]; then
  warn "DRY-RUN mode — no changes will be made."
fi

# ─── Step 1: Prereqs ─────────────────────────────────────────────
step "1/5  Checking prerequisites"

OS="$(uname -s)"
case "$OS" in
  Darwin) info "Platform: macOS" ;;
  Linux)  info "Platform: Linux (partial support — Pulse menu bar is macOS-only)" ;;
  *)      error "Unsupported OS: $OS"; exit 1 ;;
esac

need() {
  local cmd="$1"
  if ! command -v "$cmd" >/dev/null 2>&1; then
    error "Required command not found: $cmd"
    return 1
  fi
  success "$cmd ($(command -v "$cmd"))"
}

PREREQ_FAIL=0
need curl  || PREREQ_FAIL=1
need bash  || PREREQ_FAIL=1
need rsync || PREREQ_FAIL=1
need tar   || PREREQ_FAIL=1

if [ $PREREQ_FAIL -ne 0 ]; then
  error "Install missing prerequisites and re-run."
  if [ "$OS" = "Darwin" ]; then
    info "On macOS: curl, bash, and tar ship by default; rsync ships by default."
  else
    info "On Debian/Ubuntu:  ${BOLD}sudo apt-get install curl bash rsync tar${RESET}"
  fi
  exit 1
fi

# Bun is required by the bundled installer; offer to install if absent.
if ! command -v bun >/dev/null 2>&1; then
  warn "bun not found — the bundled installer needs it."
  if [ "${PAI_AUTO_INSTALL_BUN:-1}" = "1" ] && [ -z "${CI:-}" ] && [ -t 0 ]; then
    info "Installing bun via the official install script..."
    run bash -c "curl -fsSL https://bun.sh/install | bash"
    if [ -f "$HOME/.bun/bin/bun" ]; then
      export PATH="$HOME/.bun/bin:$PATH"
      success "bun installed at $HOME/.bun/bin/bun"
    else
      error "bun install reported success but binary not found at \$HOME/.bun/bin/bun"
      exit 1
    fi
  else
    error "Install bun first:  ${BOLD}curl -fsSL https://bun.sh/install | bash${RESET}"
    exit 1
  fi
else
  success "bun ($(command -v bun))"
fi

# ─── Step 2: Backup existing ~/.claude/ ──────────────────────────
step "2/5  Backing up existing ~/.claude/ (if present)"

if [ -e "$HOME/.claude" ]; then
  TS="$(date +%Y%m%d-%H%M%S)"
  BACKUP="$HOME/.claude.backup-$TS"
  warn "Existing ~/.claude/ detected — moving to ${BOLD}$BACKUP${RESET}"
  run mv "$HOME/.claude" "$BACKUP"
  success "Backup created at $BACKUP"
  info "Restore later with:  ${BOLD}rm -rf ~/.claude && mv $BACKUP ~/.claude${RESET}"
else
  success "No existing ~/.claude/ — clean install."
fi

# ─── Step 3: Fetch v5.0.0 ────────────────────────────────────────
step "3/5  Fetching PAI ${PAI_TAG} from GitHub"

TMP_DIR="$(mktemp -d -t pai-install-XXXXXX)"
trap 'rm -rf "$TMP_DIR"' EXIT

info "Downloading ${PAI_TAG} tarball (HTTPS, no auth required)..."
info "Source: ${PAI_TARBALL_URL}"
# Stream tarball directly into tar — HTTPS-only, immune to git URL rewrites
# and SSH-agent state. No git installation required on the user's box.
if [ "$DRY_RUN" = "1" ]; then
  echo "  [DRY-RUN] curl -fsSL '$PAI_TARBALL_URL' | tar -xzf - -C '$TMP_DIR'"
else
  if ! curl -fsSL "$PAI_TARBALL_URL" | tar -xzf - -C "$TMP_DIR"; then
    error "Failed to download or extract tarball: $PAI_TARBALL_URL"
    info "Check your network connection and verify the tag exists at:"
    info "  https://github.com/${PAI_REPO_OWNER}/${PAI_REPO_NAME}/releases/tag/${PAI_TAG}"
    exit 1
  fi
fi

# GitHub tarballs extract to {repo-name}-{tag}/. Resolve the directory by
# taking the single top-level entry rather than matching on the repo name —
# so a repo rename (e.g. Personal_AI_Infrastructure -> LifeOS) or a tag-format
# change can't silently break it.
if [ "$DRY_RUN" = "1" ]; then
  EXTRACTED_DIR="$TMP_DIR/${PAI_REPO_NAME}-${PAI_VERSION}"  # placeholder for dry-run
else
  EXTRACTED_DIR="$(find "$TMP_DIR" -mindepth 1 -maxdepth 1 -type d | head -n 1)"
  if [ -z "$EXTRACTED_DIR" ] || [ ! -d "$EXTRACTED_DIR" ]; then
    error "Could not locate extracted tarball directory under $TMP_DIR"
    info "The downloaded archive did not contain a top-level directory."
    exit 1
  fi
fi

if [ "$DRY_RUN" != "1" ] && [ ! -d "$EXTRACTED_DIR/$PAI_RELEASE_SUBPATH" ]; then
  error "Release subpath not found in extracted tree: $PAI_RELEASE_SUBPATH"
  info "This usually means the tag $PAI_TAG was published without a Releases directory."
  exit 1
fi
success "Fetched ${PAI_TAG}"

# ─── Step 4: Place at ~/.claude/ ─────────────────────────────────
step "4/5  Installing to ~/.claude/"

run mkdir -p "$HOME/.claude"
# rsync -a preserves perms, copies hidden files, mirrors the tree exactly.
run rsync -a "$EXTRACTED_DIR/$PAI_RELEASE_SUBPATH/" "$HOME/.claude/"
success "Files placed at ~/.claude/"

if [ "$DRY_RUN" != "1" ] && [ ! -f "$HOME/.claude/install.sh" ]; then
  error "Bundled installer missing at ~/.claude/install.sh — fetch may have failed."
  exit 1
fi

# ─── Step 5: Hand off to bundled installer ───────────────────────
step "5/5  Launching the bundled installer (DA identity, voice, Pulse setup)"

if [ "$DRY_RUN" = "1" ]; then
  info "[DRY-RUN] Would now: cd ~/.claude && ./install.sh"
  info "Bootstrap complete in dry-run mode."
  exit 0
fi

cd "$HOME/.claude"
chmod +x ./install.sh
exec ./install.sh