{ "schemaVersion": "2026-06-04.aios-core-v1", "updatedAt": "2026-08-03", "hostedBaseUrl": "https://install.hatchedstacks.com", "localDashboardUrl": "http://127.0.0.1:9119", "mode": { "hosted": "static/public: serve /onboarding, /install, and /aios-core/* without localhost API calls.", "local": { "dashboardApi": "http://127.0.0.1:9119" } }, "defaultProfile": "ai-os-core", "profiles": [ { "id": "ai-os-core", "label": "AI-OS Core", "description": "Generic HatchStack-neutral install. No personal archive, no private memories, no copied OAuth tokens.", "default": true }, { "id": "future-custom", "label": "Future optional profile", "description": "Reserved extension point for later vertical-specific starters without changing the bootstrap contract." } ], "artifacts": { "manifestPath": "/aios-core/manifest.json", "bootstrapPath": "/aios-core/bootstrap.sh", "checksumPath": "/aios-core/bootstrap.sh.sha256", "fleetChecksumPath": "/aios-core/fleet-checksums.sha256", "dmgPath": "/aios-core/AI-OS-Core-Installer.dmg", "dmgChecksumPath": "/aios-core/AI-OS-Core-Installer.dmg.sha256", "packetPath": "/aios-core/packets/ai-os-core-packet-v1.tar.gz", "packetChecksumPath": "/aios-core/packets/ai-os-core-packet-v1.tar.gz.sha256", "packetApplyPath": "/aios-core/packets/apply.sh", "claudeSetupPromptPath": "/aios-core/prompts/CLAUDE-CODE-AI-STACK-SETUP-PROMPT.template.md", "hermesAuditPromptPath": "/aios-core/prompts/HERMES-POST-INSTALL-AUDIT-PROMPT.template.md" }, "sources": [ { "id": "core", "label": "Core-only source", "source": "Hosted channel manifest plus /aios-core/packets/ai-os-core-packet-v1.tar.gz; applied locally by verified bootstrap worker.", "privacy": "Clean public installer metadata. Secrets and OAuth are supplied later by the operator.", "useFor": "New generic AI-OS machines, demos, VA handoffs, and future subdomain installs that need a real downloadable scaffold packet." }, { "id": "golden", "label": "Golden sanitized source", "source": "Operator-private storage (see local recovery docs) after sanitizer/secret checks.", "privacy": "Sanitized/shareable only after guardrail scripts pass.", "useFor": "Reusable infrastructure recipe, not the operator\u2019s private workstation clone." }, { "id": "personal", "label": "Personal restore source", "source": "Operator-private storage only; never served from this site.", "privacy": "Private full-fat archive. Never publish, sanitize into public installer metadata, or use on shared machines.", "useFor": "The operator\u2019s replacement Mac only, after checksum verification and explicit human approval." } ], "cards": [ { "id": "hosted-source", "title": "Hosted source of truth", "status": "static/public", "description": "The hosted /onboarding page and /aios-core/manifest.json are the public source for installer copy, profile options, bootstrap paths, restore-source boundaries, and publish checks.", "includes": [ "/onboarding route", "/install redirect", "/aios-core/manifest.json", "/aios-core/bootstrap.sh", "/aios-core/bootstrap.sh.sha256", "/aios-core/fleet-checksums.sha256", "/aios-core/AI-OS-Core-Installer.dmg", "/aios-core/AI-OS-Core-Installer.dmg.sha256", "/aios-core/packets/ai-os-core-packet-v1.tar.gz", "/aios-core/packets/ai-os-core-packet-v1.tar.gz.sha256", "/aios-core/prompts/CLAUDE-CODE-AI-STACK-SETUP-PROMPT.template.md", "/aios-core/prompts/HERMES-POST-INSTALL-AUDIT-PROMPT.template.md" ], "commands": [ "open https://install.hatchedstacks.com/onboarding", "open https://install.hatchedstacks.com/aios-core/AI-OS-Core-Installer.dmg", "curl -fsSLO https://install.hatchedstacks.com/aios-core/bootstrap.sh", "curl -fsSLO https://install.hatchedstacks.com/aios-core/packets/ai-os-core-packet-v1.tar.gz", "curl -fsSLO https://install.hatchedstacks.com/aios-core/packets/ai-os-core-packet-v1.tar.gz.sha256" ] }, { "id": "core-install", "title": "AI-OS Core installer", "status": "fresh project-agnostic", "description": "Downloads and verifies the public AI-OS Core packet, applies neutral scaffold files into canonical local paths, prepares the install root, validates prerequisites, and hands the operator to the local dashboard for human-gated installs and account auth.", "includes": [ "Xcode Command Line Tools", "Homebrew install command", "1Password desktop and CLI", "GitHub CLI auth", "OrbStack-only Docker policy", "AI-OS Dashboard install root", "Hermes HatchStack-neutral profile", "rules/governance/scripts/templates", "AI-OS Core packet download", "packet checksum verification", "path-traversal-safe packet extraction", "idempotent install-map apply", "packet receipt under ~/.aios-core/receipts" ], "excludes": [ "personal .7z clone", "~/backups", "Colima", "Paperclip companies/backups", "OpenClaw source workspace", "Hermes personal memories" ], "commands": [ "curl -fsSLO https://install.hatchedstacks.com/aios-core/bootstrap.sh", "curl -fsSLO https://install.hatchedstacks.com/aios-core/bootstrap.sh.sha256", "shasum -a 256 -c bootstrap.sh.sha256", "bash bootstrap.sh --profile ai-os-core --install-tools", "xcode-select --install", "/bin/bash -c \"$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/HEAD/install.sh)\"", "brew install git gh node pnpm jq rclone age gnupg mas docker docker-compose", "brew install --cask 1password 1password-cli orbstack visual-studio-code", "eval \"$(op signin)\"", "gh auth login", "open -a OrbStack && docker version" ] }, { "id": "dashboard-onboarding", "title": "Dashboard-guided auth", "status": "local/human-gated", "description": "The dashboard is installed early, then switches to local API mode for accounts and permissions that cannot be restored automatically.", "includes": [ "1Password unlock/sign-in", "GitHub auth", "rclone/GDrive or object storage", "Claude/Codex/Cursor sign-in", "provider API keys", "Telegram wiring if selected" ], "excludes": [ "plaintext secrets", "browser cookies", "OAuth token copying", "silent account actions" ] }, { "id": "optional-companions", "title": "Optional companion installers", "status": "operator-selected", "description": "Separate, human-selected companion scripts can install supported generic services after the AI-OS Core baseline. Paperclip and OpenClaw are not provisioned by this product.", "includes": [ "OpenBrain fresh database/schema", "Ollama model pulls selected by the operator", "LiteLLM empty model configuration", "OMEGA and CodeGraph optional installers" ], "excludes": [ "Paperclip provisioning or company data", "OpenClaw provisioning or session data", "model blobs in backup artifacts" ] } ], "publishChecks": [ "Build and serve /onboarding plus /install from the hosted subdomain.", "Serve /aios-core/manifest.json, /aios-core/bootstrap.sh, and /aios-core/bootstrap.sh.sha256 from the same deploy.", "Keep destructive restore actions human-approved and local-only.", "Run secret scan/sanitizer before publishing any golden artifact.", "Verify supported optional companion installers fail closed; do not claim Paperclip or OpenClaw provisioning." ] }