fix: rename boot artifacts to boot_cyb.zip/Boot Cyb.app + improve boot.dat discovery

- Rename boot-cyb.zip → boot_cyb.zip and boot cyb.app → Boot Cyb.app everywhere
- Add ~/Desktop as boot.dat search path
- Scan immediate subdirectories of ~/Downloads and ~/Desktop for boot.dat

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: 2 people

.github/workflows/macos_release.yml

@@ -160,15 +160,15 @@ jobs:
           codesign --force --options runtime --sign "$APPLE_SIGNING_IDENTITY" "$BOOT_BIN"
 
           # Create .app bundle (no boot.dat — server appends it per-user)
-          APP="$RUNNER_TEMP/boot cyb.app"
+          APP="$RUNNER_TEMP/Boot Cyb.app"
           mkdir -p "$APP/Contents/MacOS"
           cp "$BOOT_BIN" "$APP/Contents/MacOS/cyb-boot"
           printf '%s\n' '<?xml version="1.0" encoding="UTF-8"?>' \
             '<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">' \
             '<plist version="1.0"><dict>' \
             '<key>CFBundleExecutable</key><string>cyb-boot</string>' \
-            '<key>CFBundleName</key><string>boot cyb</string>' \
-            '<key>CFBundleDisplayName</key><string>boot cyb</string>' \
+            '<key>CFBundleName</key><string>Boot Cyb</string>' \
+            '<key>CFBundleDisplayName</key><string>Boot Cyb</string>' \
             '<key>CFBundleIdentifier</key><string>ai.cyb.boot</string>' \
             '<key>CFBundleVersion</key><string>1.0</string>' \
             '<key>CFBundleShortVersionString</key><string>1.0</string>' \
@@ -181,17 +181,17 @@ jobs:
           codesign --force --options runtime --sign "$APPLE_SIGNING_IDENTITY" "$APP"
 
           # Notarize
-          ditto -c -k --keepParent "$APP" "$RUNNER_TEMP/boot-cyb-notarize.zip"
-          xcrun notarytool submit "$RUNNER_TEMP/boot-cyb-notarize.zip" \
+          ditto -c -k --keepParent "$APP" "$RUNNER_TEMP/boot_cyb_notarize.zip"
+          xcrun notarytool submit "$RUNNER_TEMP/boot_cyb_notarize.zip" \
             --key "$APPLE_API_KEY_PATH" --key-id "$APPLE_API_KEY" \
             --issuer "$APPLE_API_ISSUER" --wait
-          rm -f "$RUNNER_TEMP/boot-cyb-notarize.zip"
+          rm -f "$RUNNER_TEMP/boot_cyb_notarize.zip"
 
           # Staple notarization ticket into the .app
           xcrun stapler staple "$APP"
 
           # Final zip (with stapled ticket) — internal artifact for boot server
-          ditto -c -k --keepParent "$APP" "$RUNNER_TEMP/boot-cyb.zip"
+          ditto -c -k --keepParent "$APP" "$RUNNER_TEMP/boot_cyb.zip"
 
       # ── Artifacts ───────────────────────────────────────────────
       - name: Collect release artifacts
@@ -214,7 +214,7 @@ jobs:
           mkdir -p boot-artifacts
 
           # Notarized .app bundle template (upload to Cyberproxy artifacts/)
-          cp "$RUNNER_TEMP/boot-cyb.zip" boot-artifacts/
+          cp "$RUNNER_TEMP/boot_cyb.zip" boot-artifacts/
 
           # Bare cyb-boot binary (upload to Cyberproxy artifacts/)
           cp cyb-boot/target/aarch64-apple-darwin/release/cyb-boot \

cyb-boot/CLAUDE.md

@@ -48,14 +48,14 @@ cd server && GOOS=linux GOARCH=amd64 go build -o cyb-boot-server .
 
 - Server runs on Cyberproxy (167.235.28.94:8098), locally proxied via cyb.ai/api/boot
 - Server binary: `/home/cyber/cyb-boot/server/cyb-boot-server`
-- Artifacts: `/home/cyber/cyb-boot/artifacts/` (platform binaries + boot-cyb.zip)
+- Artifacts: `/home/cyber/cyb-boot/artifacts/` (platform binaries + boot_cyb.zip)
 - Systemd service: `cyb-boot-server.service`
 - Artifacts are auto-deployed via webhook on master/tag pushes (secret: `BOOT_DEPLOY_WEBHOOK_SECRET`). Manual SCP still works as fallback
-- boot-cyb.zip is an internal server artifact, NOT a GitHub Release asset
+- boot_cyb.zip is an internal server artifact, NOT a GitHub Release asset
 
 ## Rules
 
-- Never put boot-cyb.zip in GitHub Releases — it's an internal server template
+- Never put boot_cyb.zip in GitHub Releases — it's an internal server template
 - The distribution server's only job is bundling pre-built binaries with boot.dat
 - cyb-boot does the smart work: iroh networking, registry resolution, app download
 - The version registry lives in the knowledge graph (particle at known CID), not on the server

cyb-boot/README.md

@@ -94,13 +94,13 @@ The current `main.rs` is a **simplified stepping stone**:
 
 macOS Gatekeeper blocks unsigned apps. For macOS, CI:
 1. Builds the cyb-boot binary
-2. Wraps it in an `.app` bundle (`boot cyb.app`)
+2. Wraps it in an `.app` bundle (`Boot Cyb.app`)
 3. Signs with Developer ID Application certificate + hardened runtime
 4. Notarizes with Apple (xcrun notarytool)
 5. Staples the notarization ticket
-6. Zips as `boot-cyb.zip`
+6. Zips as `boot_cyb.zip`
 
-The server stores `boot-cyb.zip` as a template. On each macOS request, it clones the zip and appends `boot.dat` alongside the `.app`. The binary inside cannot be modified (would break signature), but `boot.dat` sits next to the `.app` in the zip.
+The server stores `boot_cyb.zip` as a template. On each macOS request, it clones the zip and appends `boot.dat` alongside the `.app`. The binary inside cannot be modified (would break signature), but `boot.dat` sits next to the `.app` in the zip.
 
 For Windows/Linux, the server zips the bare binary + `boot.dat` directly.
 
@@ -133,14 +133,14 @@ Go HTTP server on Cyberproxy. Its only job: serve pre-built cyb-boot binaries bu
 
 **API:** `POST /api/boot` with `{"platform": "<target-triple>", "data": "<base64-encrypted-bootstrap>"}`
 
-**macOS:** reads `boot-cyb.zip` template from artifacts, appends `boot.dat`, returns combined zip.
+**macOS:** reads `boot_cyb.zip` template from artifacts, appends `boot.dat`, returns combined zip.
 **Windows/Linux:** reads bare binary from artifacts, zips with `boot.dat`, returns zip.
 
 ### Server artifacts (on Cyberproxy)
 
 ```
 /home/cyber/cyb-boot/artifacts/
-├── boot-cyb.zip                      # notarized macOS .app template
+├── boot_cyb.zip                      # notarized macOS .app template
 ├── cyb-boot-aarch64-apple-darwin        # bare macOS ARM binary
 ├── cyb-boot-x86_64-apple-darwin         # bare macOS Intel binary
 ├── cyb-boot-x86_64-pc-windows-msvc      # Windows binary
@@ -219,7 +219,7 @@ CI builds artifacts → uploads to GitHub Actions artifacts
 
 ```bash
 # Upload new macOS .app bundle template
-scp -P 8333 boot-cyb.zip cyber@cyberproxy:/home/cyber/cyb-boot/artifacts/
+scp -P 8333 boot_cyb.zip cyber@cyberproxy:/home/cyber/cyb-boot/artifacts/
 
 # Upload new platform binary
 scp -P 8333 cyb-boot-aarch64-apple-darwin cyber@cyberproxy:/home/cyber/cyb-boot/artifacts/
@@ -244,7 +244,7 @@ location = /api/boot {
 
 `.github/workflows/macos_release.yml` produces:
 - **Release artifacts** (GitHub Releases): `cyb.dmg`, `cyb.pkg` — the actual cyb app
-- **Boot server artifacts** (auto-deployed to Cyberproxy via webhook on master/tag push): `boot-cyb.zip`, `cyb-boot-aarch64-apple-darwin`
+- **Boot server artifacts** (auto-deployed to Cyberproxy via webhook on master/tag push): `boot_cyb.zip`, `cyb-boot-aarch64-apple-darwin`
 
 ## Open Questions
 

cyb-boot/server/main.go

@@ -85,11 +85,11 @@ func handleBoot(w http.ResponseWriter, r *http.Request) {
 	isDarwin := strings.Contains(req.Platform, "darwin")
 
 	if isDarwin {
-		// macOS: read pre-signed notarized boot-cyb.zip and append boot.dat
-		templatePath := filepath.Join(artifactsDir, "boot-cyb.zip")
+		// macOS: read pre-signed notarized boot_cyb.zip and append boot.dat
+		templatePath := filepath.Join(artifactsDir, "boot_cyb.zip")
 		templateZip, err := os.ReadFile(templatePath)
 		if err != nil {
-			log.Printf("boot-cyb.zip not found: %s", templatePath)
+			log.Printf("boot_cyb.zip not found: %s", templatePath)
 			http.Error(w, "macOS app bundle not available", http.StatusServiceUnavailable)
 			return
 		}
@@ -102,10 +102,10 @@ func handleBoot(w http.ResponseWriter, r *http.Request) {
 		}
 
 		w.Header().Set("Content-Type", "application/zip")
-		w.Header().Set("Content-Disposition", `attachment; filename="boot-cyb.zip"`)
+		w.Header().Set("Content-Disposition", `attachment; filename="boot_cyb.zip"`)
 		w.Header().Set("Content-Length", fmt.Sprintf("%d", outBuf.Len()))
 		w.Write(outBuf.Bytes())
-		log.Printf("Served boot-cyb.zip + boot.dat for %s (%d bytes)", req.Platform, outBuf.Len())
+		log.Printf("Served boot_cyb.zip + boot.dat for %s (%d bytes)", req.Platform, outBuf.Len())
 		return
 	}
 

cyb-boot/src/main.rs

@@ -43,13 +43,34 @@ fn find_boot_dat() -> Option<PathBuf> {
         }
     }
 
-    // ~/Downloads/ — browser download flow
+    // Common user directories — browser download flow, Desktop extraction
     if let Some(home) = dirs::home_dir() {
-        let downloads = home.join("Downloads").join(BOOT_DAT);
-        println!("[cyb-boot] Checking: {:?}", downloads);
-        if downloads.exists() {
-            println!("[cyb-boot] Found boot.dat at {:?}", downloads);
-            return Some(downloads);
+        let search_dirs = vec![
+            home.join("Downloads"),
+            home.join("Desktop"),
+        ];
+
+        for search_dir in &search_dirs {
+            // Direct: ~/Downloads/boot.dat or ~/Desktop/boot.dat
+            let direct = search_dir.join(BOOT_DAT);
+            println!("[cyb-boot] Checking: {:?}", direct);
+            if direct.exists() {
+                println!("[cyb-boot] Found boot.dat at {:?}", direct);
+                return Some(direct);
+            }
+
+            // Scan immediate subdirectories (e.g. ~/Downloads/boot_cyb/boot.dat)
+            if let Ok(entries) = fs::read_dir(search_dir) {
+                for entry in entries.flatten() {
+                    if entry.path().is_dir() {
+                        let nested = entry.path().join(BOOT_DAT);
+                        if nested.exists() {
+                            println!("[cyb-boot] Found boot.dat at {:?}", nested);
+                            return Some(nested);
+                        }
+                    }
+                }
+            }
         }
     }