Repository navigation
install.sh member-set check rejects official v0.9.0 release assets (both standard and ui variants) #1510
Description
Summary
install.sh on main fails on the official v0.9.0 release assets for both the --standard and --ui variants, with:
error: release archive does not match the exact standard member set
and
error: release archive does not match the exact ui member set
Checksum verification passes in both cases — the archive itself is intact and matches checksums.txt. The failure is install.sh's post-extraction member-count/name check, not a corrupted download.
Repro
curl -fsSL https://raw.githubusercontent.com/DeusData/codebase-memory-mcp/main/install.sh | bash -s -- --standard
curl -fsSL https://raw.githubusercontent.com/DeusData/codebase-memory-mcp/main/install.sh | bash -s -- --uiBoth fail after "Checksum verified." on Linux/amd64.
Root cause (as far as I can tell)
install.sh (main) expects:
- standard: 5 members
- ui: 6 members, including
cbm-integrations.jsonand acbm-ui-<sha256>.packfile
I downloaded and inspected the actual v0.9.0 assets directly (bypassing the installer):
codebase-memory-mcp-linux-amd64-portable.tar.gz (standard) contains only 4 members:
codebase-memory-mcp
LICENSE
install.sh
THIRD_PARTY_NOTICES.md
— missing cbm-integrations.json.
codebase-memory-mcp-ui-linux-amd64-portable.tar.gz (ui) also contains only 4 members — identical list, no cbm-integrations.json and no cbm-ui-*.pack at all. So the currently published ui asset doesn't actually differ from standard.
This looks like install.sh on main was updated for a newer release-asset layout (adding cbm-integrations.json and a content-addressed UI pack file) before a matching release was cut. The v0.9.0 assets (published 2026-07-08) still use the older 4-member layout.
Impact
The one-line installer in the README currently cannot install either variant on Linux/amd64 — it always exits 1 after checksum verification.
Suggested fix
Either:
- Cut a new release whose assets match the member set
install.shonmainexpects, or - Pin
install.sh's member-set check to what's actually in the latest published release until the new asset layout ships.
Happy to provide the full tar tvzf output for other platform archives if useful.
Activity
archcorsair commentedon Aug 9, 2026
Confirming, I have the same issue.
FoTrix commentedon Aug 9, 2026
Confirming this also affects macOS (Apple Silicon, arm64) with the
--uivariant:I inspected the published
v0.9.0asset directly (codebase-memory-mcp-ui-darwin-arm64.tar.gz): it contains only 4 members —codebase-memory-mcp,LICENSE,install.sh,THIRD_PARTY_NOTICES.md— nocbm-integrations.jsonand nocbm-ui-*.pack. Thev0.9.1-rc.1asset has the same 4-member layout. So this is consistent with your analysis:install.shonmainenforces the new 5/6-member contract, but the last published releases still use the old 4-member layout.Workaround that worked for me on macOS: use the
install.shbundled inside the release archive (which predates the strict member check):This installed
codebase-memory-mcp 0.9.0successfully and configured all detected agents.Vkozlove commentedon Aug 10, 2026
I can confirm this issue on a second Apple Silicon Mac.
The one-line installer from the README fails exactly as reported:
curl -fsSL https://raw.githubusercontent.com/DeusData/codebase-memory-mcp/main/install.sh | bashResult:
The same happens with the
--uivariant.However, I found that the release assets themselves appear to be fine. If I download the release archive and run the
install.shincluded inside that archive, installation completes successfully:curl -fsSL -o /tmp/cbm.tar.gz \ "https://github.com/DeusData/codebase-memory-mcp/releases/latest/download/codebase-memory-mcp-ui-darwin-arm64.tar.gz" mkdir -p /tmp/cbm tar -xzf /tmp/cbm.tar.gz -C /tmp/cbm chmod +x /tmp/cbm/install.sh /tmp/cbm/install.sh --uiThis installs correctly, configures the coding agents, and
codebase-memory-mcp --versionreports0.9.0.That seems to confirm the issue is specifically a mismatch between the current
main/install.shand the published release assets, rather than a problem with the release archive itself.Until this is fixed, using the install.sh shipped inside the release archive seems to be a reliable workaround.
Special thanks to user FoTrix
github-actions commentedon Aug 10, 2026
Thanks for the report! To move this forward we need a bit more so we can reproduce it ourselves:
codebase-memory-mcp --versionyou're onOnce that's here we'll pick it straight back up. Heads-up: issues left
awaiting-reporterare automatically closed after a few weeks of silence, but a comment reopens the door anytime.DeusData commentedon Aug 10, 2026
Thank you for the multi-platform reproductions and archive inspection.
v0.10.0is now published, and the current installer no longer contains the exact five-member or six-member checks reported here.Could the original reporter or one of the confirmers retry the same one-line installer with
v0.10.0on Linux or macOS and report the command and resulting version? I have marked this awaiting reporter and kept it in the immediate bug train until the released path is confirmed.archcorsair commentedon Aug 10, 2026
Confirmed its working for me now, thank you
DeusData commentedon Aug 12, 2026
Fixed on main by @cyphercodes' #1514 (merge 60a2bbf) — shipping in v0.10.3.
FoTrix commentedon Aug 12, 2026
everything, correct and arranged. Thank you so much!
DeusData commentedon Aug 12, 2026
Thank you for confirming the repaired installer path, @FoTrix. That closes the loop cleanly; this issue does not need to be reopened.