@polderlabs/bizar 4.3.0 → 4.4.0

package/install.sh

@@ -1,47 +1,30 @@
 #!/usr/bin/env bash
 #
-# install.sh — One-shot BizarHarness installer.
+# install.sh — Cross-platform BizarHarness installer.
 #
-# v4.0.0 — Single-package layout. Dashboard, plugin, and SDK all ship
-# inside @polderlabs/bizar. No more separate npm packages.
+# v3.22.0 — Rewritten for cross-platform dispatch. Linux (apt/dnf/pacman/zypper),
+# macOS (brew), and a pointer to install.ps1 for Windows.
 #
-# v3.20.11 — Comprehensive auto-installer with full dependency
-# resolution. Replaces the older "print 4 manual next steps" flow
-# with: (1) install every system dep we can reasonably fetch
-# (uv, python3.12, chrome-headless-shell, jq, Chrome runtime libs);
-# (2) install browser-harness + register its skill; (3) start Chrome
-# for browser-driven E2E; (4) install + configure all BizarHarness
-# files (agents, commands, opencode.json, plugin); (5) print a
-# single status banner that tells the operator what is ready and
-# what (if anything) they still need to do.
-#
-# Idempotent — every step checks for the existing install and
-# skips re-work. Re-running after a failed install picks up
-# where it left off. Same script can run from a fresh `git clone`
-# or via `bizar install` (which spawns this script under bash).
+# Features:
+#   - Dependency detection via node scripts/check-deps.mjs
+#   - Auto-install missing deps for the current platform/distro
+#   - Idempotent — every step checks before acting
+#   - --update: git pull --ff-only, re-install config, re-install service
+#   - --dry-run: print what would happen, do nothing
+#   - --non-interactive: skip all prompts (CI safe)
+#   - --force: overwrite files even when they match
+#   - Plugin registration verification in ~/.config/opencode/opencode.json
+#   - Service registration via node scripts/install-service.mjs
 #
 # What this script does NOT do (intentional):
-#   - Configure provider API keys (MINIMAX_API_KEY, etc.). The user
-#     does that via `/connect` in opencode after install. We deliberately
-#     do not collect secrets here — the install is idempotent and safe
-#     to re-run, and asking for keys during install breaks CI / scripted
-#     deployments.
-#   - Reload opencode. The opencode session picks up the new config on
-#     next start. We print a status line at the end; we do not kill or
-#     restart the opencode process from here (it would interrupt
-#     in-flight agent sessions).
-#   - Hide `.obsidian/`. The Obsidian vault is a first-class part of
-#     the project tree. We do not add it to any .gitignore / .npmignore
-#     / IDE-exclusion list.
-#
-# Idempotent: every step checks for the existing install and skips
-# re-work. Re-running after a failed install picks up where it left off.
-#
-# Cross-platform: bash + curl work on Linux + macOS. On Windows run
-# `npm install -g @polderlabs/bizar` which triggers the npm postinstall
-# hook (cli/install.mjs → install.sh via git bash).
+#   - Configure provider API keys. The user does that via /connect.
+#   - Reload opencode. The next opencode session picks up new config.
+#   - Windows installation (see install.ps1 for that).
+
 set -euo pipefail
 
+# ── Constants ──────────────────────────────────────────────────────────────────
+
 BOLD='\033[1m'
 GREEN='\033[0;32m'
 YELLOW='\033[1;33m'
@@ -52,824 +35,502 @@ NC='\033[0m'
 
 REPO_DIR="$(cd "$(dirname "$0")" && pwd)"
 CONFIG_DIR="${XDG_CONFIG_HOME:-$HOME/.config}/opencode"
-SKILLS_DIR="$HOME/.opencode/skills"
-BIZAR_STATE_DIR="${XDG_CONFIG_HOME:-$HOME/.config}/bizar"
-BIZAR_STATE_FILE="$BIZAR_STATE_DIR/install-state.json"
-PYTHON_BIN="${PYTHON_BIN:-python3.12}"
-CHROME_PORT="${CHROME_PORT:-9222}"
-
-# Counters for the final summary.
-INSTALLED=()
-SKIPPED=()
-FAILED=()
-
-note() {
-  echo -e "  ${GREEN}✓${NC} $1"
-  INSTALLED+=("$1")
-}
-warn() {
-  echo -e "  ${YELLOW}⚠${NC} $1"
-  SKIPPED+=("$1")
-}
-err() {
-  echo -e "  ${RED}✗${NC} $1"
-  FAILED+=("$1")
-}
-section() {
+PLUGIN_DIR="$CONFIG_DIR/plugins/bizar"
+
+# Flags parsed from CLI args
+DRY_RUN=false
+NON_INTERACTIVE=false
+FORCE=false
+UPDATE_MODE=false
+
+# ── UI helpers ─────────────────────────────────────────────────────────────────
+
+note()  { echo -e "  ${GREEN}✓${NC} $1"; }
+warn()  { echo -e "  ${YELLOW}⚠${NC} $1"; }
+err()   { echo -e "  ${RED}✗${NC} $1"; }
+action(){ echo -e "  ${CYAN}→${NC} $1"; }
+dim()   { echo -e "  ${DIM}$1${NC}"; }
+section(){
   echo ""
   echo -e "${BOLD}${CYAN}── $1 ──${NC}"
 }
 
-# ── verify_dependencies: final check that all required tools are on PATH ─
-verify_dependencies() {
-  local missing=()
-  for cmd in node uv uvx bun jq sqlite3 gh opencode python3 make g++; do
-    if ! command -v "$cmd" &>/dev/null; then
-      missing+=("$cmd")
-    fi
+have_cmd() { command -v "$1" >/dev/null 2>&1; }
+
+# ── Usage ──────────────────────────────────────────────────────────────────────
+
+show_usage() {
+  cat <<'EOF'
+
+  install.sh — BizarHarness cross-platform installer
+
+  Usage:
+    ./install.sh                     Interactive install (Linux/macOS)
+    ./install.sh --help              Show this help
+    ./install.sh --dry-run           Dry run — print actions, no changes
+    ./install.sh --non-interactive   Non-interactive (CI safe)
+    ./install.sh --force             Overwrite existing files
+    ./install.sh --update            Pull latest + re-install config + service
+
+  On Windows, run install.ps1 instead.
+
+EOF
+}
+
+# ── Parse CLI flags ────────────────────────────────────────────────────────────
+
+parse_flags() {
+  for arg in "$@"; do
+    case "$arg" in
+      --help|-h)         show_usage; exit 0 ;;
+      --dry-run)         DRY_RUN=true ;;
+      --non-interactive) NON_INTERACTIVE=true ;;
+      --force)           FORCE=true ;;
+      --update)          UPDATE_MODE=true ;;
+      *)                 warn "Unknown flag: $arg"; show_usage; exit 1 ;;
+    esac
   done
-  if [ ${#missing[@]} -gt 0 ]; then
-    echo -e "  ${RED}✗${NC} missing required commands: ${missing[*]}"
-    return 1
-  fi
-  return 0
 }
 
-# ── Pre-flight: which tools are missing? ───────────────────────────────
-section "Pre-flight: checking system tools"
+# ── Dry-run guard ──────────────────────────────────────────────────────────────
 
-have_cmd() { command -v "$1" >/dev/null 2>&1; }
-have_file() { [ -e "$1" ]; }
-
-# Pre-populate PATH with the common install locations for opencode + npm
-# so the rest of this script can find them even if the calling shell
-# didn't source ~/.profile first.
-for p in "$HOME/.opencode/bin" "$HOME/.local/npm/bin" "$HOME/.cargo/bin"; do
-  case ":$PATH:" in
-    *":$p:"*) ;;
-    *) [ -d "$p" ] && export PATH="$p:$PATH" ;;
-  esac
-done
-
-MISSING=()
-have_cmd node || MISSING+=("node")
-have_cmd uv || MISSING+=("uv")
-have_cmd uvx || MISSING+=("uvx")
-have_cmd "$PYTHON_BIN" || MISSING+=("$PYTHON_BIN")
-have_cmd jq || MISSING+=("jq")
-have_cmd npx || MISSING+=("npx")
-have_cmd git || MISSING+=("git")
-have_cmd bun || MISSING+=("bun")
-have_cmd gh || MISSING+=("gh")
-have_cmd opencode || MISSING+=("opencode")
-have_cmd sqlite3 || MISSING+=("sqlite3")
-have_cmd make || MISSING+=("make")
-have_cmd g++ || MISSING+=("g++")
-
-# Chrome detection: prefer chrome-headless-shell from puppeteer cache, then
-# system chromium / chrome / google-chrome. We don't require Chrome — the
-# installer works without it — but we report it so the operator knows.
-CHROME_BIN=""
-for cand in \
-  "$HOME/.cache/puppeteer/chrome-headless-shell"*/chrome-headless-shell/chrome-headless-shell \
-  /usr/bin/chromium \
-  /usr/bin/chrome \
-  /usr/bin/google-chrome \
-  "$(command -v chromium 2>/dev/null || true)" \
-  "$(command -v chrome 2>/dev/null || true)" \
-  "$(command -v google-chrome 2>/dev/null || true)"; do
-  [ -n "$cand" ] && [ -x "$cand" ] && CHROME_BIN="$cand" && break
-done
-
-for t in "${MISSING[@]}"; do warn "missing system tool: $t"; done
-if [ -z "$CHROME_BIN" ]; then warn "no chrome / chromium found — browser-harness won't work until installed"; fi
-[ ${#MISSING[@]} -eq 0 ] && [ -n "$CHROME_BIN" ] && note "all system tools present"
-
-# ── Install missing system tools (best effort, never abort) ─────────────
-section "Install missing system tools"
-
-# uv (Python package manager — needed for browser-harness + Semble)
-if ! have_cmd uv; then
-  echo -e "  ${CYAN}→${NC} Installing uv (Python package manager)..."
-  if have_cmd curl; then
-    if curl -LsSf https://astral.sh/uv/install.sh | sh >/dev/null 2>&1; then
-      # uv's installer drops the binary at ~/.local/bin/uv
-      export PATH="$HOME/.local/bin:$PATH"
-      if have_cmd uv; then
-        note "uv installed at $(command -v uv)"
-      else
-        warn "uv install ran but uv not on PATH — try 'export PATH=\$HOME/.local/bin:\$PATH'"
-      fi
-    else
-      warn "uv installer script failed — install manually: https://docs.astral.sh/uv/"
-    fi
-  else
-    warn "curl not found — install uv manually: https://docs.astral.sh/uv/"
+dry() {
+  if $DRY_RUN; then
+    dim "  [DRY-RUN] $*"
+    return 0
   fi
-else
-  note "uv $(uv --version 2>/dev/null | head -1)"
-fi
-
-# python3.12 (uv will manage its own python via --python 3.12, but
-# we also accept system python3.12 if present). Only install if uv
-# is available — uv can fetch its own python.
-if ! have_cmd "$PYTHON_BIN"; then
-  if have_cmd uv; then
-    echo -e "  ${CYAN}→${NC} python3.12 not on PATH — uv will fetch on first use"
-    note "python3.12 will be auto-fetched by uv (browser-harness will trigger first fetch)"
+  "$@"
+}
+
+sudo_if_needed() {
+  if [ "$EUID" -eq 0 ]; then
+    dry "$@"
   else
-    warn "no $PYTHON_BIN and no uv — install manually: sudo apt install python3.12 / brew install python@3.12"
+    dry sudo "$@"
   fi
-else
-  note "$PYTHON_BIN $($PYTHON_BIN --version 2>&1 | head -1)"
-fi
-
-# jq (for safe opencode.json merging)
-if ! have_cmd jq; then
-  echo -e "  ${CYAN}→${NC} Trying to install jq..."
-  case "$(uname -s 2>/dev/null || echo unknown)" in
-    Linux)
-      if have_cmd apt-get; then sudo apt-get install -y jq 2>/dev/null && note "jq installed (apt)" || warn "apt install jq failed — install manually"
-      elif have_cmd dnf; then sudo dnf install -y jq 2>/dev/null && note "jq installed (dnf)" || warn "dnf install jq failed — install manually"
-      elif have_cmd pacman; then sudo pacman -S --noconfirm jq 2>/dev/null && note "jq installed (pacman)" || warn "pacman install jq failed — install manually"
-      elif have_cmd apk; then sudo apk add jq 2>/dev/null && note "jq installed (apk)" || warn "apk install jq failed — install manually"
-      else warn "no known package manager — install jq manually"
-      fi
-      ;;
-    Darwin)
-      if have_cmd brew; then brew install jq 2>/dev/null && note "jq installed (brew)" || warn "brew install jq failed — install manually"
-      else warn "no brew — install jq manually"
-      fi
-      ;;
-    *) warn "unknown OS — install jq manually";;
-  esac
-else
-  note "jq $(jq --version)"
-fi
-
-# Chrome (best effort — install chrome-headless-shell from chrome-for-testing
-# or the puppeteer cache). The dashboard/browser-harness will work without
-# it (the user can install later), but we try.
-if [ -z "$CHROME_BIN" ]; then
-  echo -e "  ${CYAN}→${NC} Trying to install chrome-headless-shell..."
-  PUPPETEER_CACHE_DIR="$HOME/.cache/puppeteer"
-  mkdir -p "$PUPPETEER_CACHE_DIR"
-  # chrome-for-testing JSON API — find the latest stable chrome-headless-shell
-  # URL for linux64. Fall back to nothing if the request fails.
-  CHROME_CT_URL=$(curl -fsSL "https://googlechromelabs.github.io/chrome-for-testing/last-known-good-versions-with-downloads.json" 2>/dev/null \
-    | grep -o '"url": *"[^"]*chrome-headless-shell-linux64[^"]*"' \
-    | head -1 \
-    | sed 's/.*"url": *"\([^"]*\)".*/\1/')
-  if [ -n "$CHROME_CT_URL" ]; then
-    TMP_DIR=$(mktemp -d)
-    if curl -fsSL "$CHROME_CT_URL" -o "$TMP_DIR/chrome-headless-shell.zip" 2>/dev/null; then
-      TARGET_DIR="$PUPPETEER_CACHE_DIR/chrome-headless-shell"
-      mkdir -p "$TARGET_DIR"
-      unzip -q -o "$TMP_DIR/chrome-headless-shell.zip" -d "$TARGET_DIR"
-      CHROME_BIN=$(find "$TARGET_DIR" -name chrome-headless-shell -type f 2>/dev/null | head -1)
-      [ -n "$CHROME_BIN" ] && [ -x "$CHROME_BIN" ] && note "chrome-headless-shell installed at $CHROME_BIN" || warn "chrome-headless-shell install failed"
-      rm -rf "$TMP_DIR"
-    else
-      warn "download from chrome-for-testing failed — install Chrome manually"
-    fi
-  else
-    warn "could not resolve latest chrome-for-testing URL — install Chrome manually"
+}
+
+# ── Shared arrays (populated by check_deps, consumed by install_missing_deps) ──
+MISSING_DEPS=()
+MISSING_CMDS=()
+
+# ── check_deps: run node scripts/check-deps.mjs and parse result ───────────────
+
+check_deps() {
+  section "Checking dependencies"
+  action "Running dependency detector..."
+  local json
+  if ! json=$(node "$REPO_DIR/scripts/check-deps.mjs" --strict 2>/dev/null); then
+    warn "dependency detector failed — proceeding with best-effort checks"
+    return
   fi
-fi
-
-# Chrome runtime libs (v3.20.11). chrome-headless-shell needs ~10 shared
-# libraries that Debian/Ubuntu don't ship by default. Without these,
-# chrome starts but immediately errors with `libnspr4.so: cannot open
-# shared object file`. We install them on apt-based systems; on others
-# we warn but continue (Chrome won't work, but the rest of the install
-# will).
-if [ -n "$CHROME_BIN" ] || [ -z "$CHROME_BIN" ]; then
-  # Check if chrome-headless-shell actually runs (libs satisfied)
-  if [ -n "$CHROME_BIN" ] && ! "$CHROME_BIN" --version >/dev/null 2>&1; then
-    case "$(uname -s 2>/dev/null || echo unknown)" in
-      Linux)
-        if have_cmd apt-get; then
-          echo -e "  ${CYAN}→${NC} chrome-headless-shell needs runtime libs — installing via apt..."
-          if sudo -n apt-get install -y --no-install-recommends \
-              libnss3 libnspr4 libatk1.0-0 libatk-bridge2.0-0 \
-              libxdamage1 libxkbcommon0 libasound2t64 libatspi2.0-0 \
-              2>/dev/null; then
-            note "chrome runtime libs installed (libnss3, libnspr4, libatk*, libxkbcommon, libasound, libatspi)"
-          else
-            warn "apt install of chrome runtime libs failed (needs sudo). run manually:"
-            warn "  sudo apt-get install -y libnss3 libnspr4 libatk1.0-0 libatk-bridge2.0-0 \\"
-            warn "    libxdamage1 libxkbcommon0 libasound2t64 libatspi2.0-0"
-          fi
-        else
-          warn "chrome-headless-shell runtime libs missing — install libnss3, libnspr4, libatk* for your distro"
-        fi
-        ;;
-      Darwin)
-        warn "chrome-headless-shell runtime libs missing — on macOS: brew install --cask chromium"
-        ;;
-      *) warn "chrome-headless-shell runtime libs missing — install via your package manager";;
-    esac
+
+  local ok
+  ok=$(echo "$json" | node -e "console.log(JSON.parse(require('fs').readFileSync('/dev/stdin','utf8')).ok)")
+  if [ "$ok" = "true" ]; then
+    note "all required dependencies satisfied"
+    return
   fi
-fi
 
-# ── Native build deps (better-sqlite3 compiles, etc.) ─────────────────
-section "Install native build dependencies"
+  # Print missing deps
+  while IFS='|' read -r name cmd; do
+    [ -z "$name" ] && continue
+    warn "missing dependency: $name"
+    if [ -n "$cmd" ]; then
+      MISSING_CMDS+=("$cmd")
+    fi
+  done < <(echo "$json" | node -e "
+    const d = JSON.parse(require('fs').readFileSync('/dev/stdin','utf8'));
+    for (const m of d.missing) {
+      if (m.name === 'tmux') continue;
+      console.log(m.name + '|' + (m.installCmd || ''));
+    }
+  ")
+}
 
-if [ "${NO_SUDO:-}" != "1" ] && have_cmd apt-get; then
-  echo -e "  ${CYAN}→${NC} Installing build-essential, python3, sqlite3-dev..."
-  if sudo -n apt-get install -y --no-install-recommends \
-    build-essential python3 sqlite3 libsqlite3-dev \
-    2>/dev/null; then
-    note "native build deps installed (build-essential, python3, sqlite3-dev)"
-  else
-    warn "apt install of native build deps failed (needs sudo). Install manually:"
-    warn "  sudo apt-get install -y build-essential python3 sqlite3 libsqlite3-dev"
+# ── install_missing_deps: run install commands for missing deps ─────────────────
+
+install_missing_deps() {
+  if [ ${#MISSING_CMDS[@]} -eq 0 ]; then
+    return
   fi
-else
-  note "native build deps check skipped (NO_SUDO=1 or non-apt system)"
-fi
-
-# ── Skills CLI (for skills.sh domain skills) ──────────────────────────
-section "Install skills CLI"
-
-if ! have_cmd skills; then
-  if have_cmd npm; then
-    echo -e "  ${CYAN}→${NC} Installing skills CLI via npm..."
-    if npm install -g skills >/dev/null 2>&1; then
-      note "skills CLI installed at $(command -v skills 2>/dev/null || echo 'npm global')"
-    else
-      warn "skills CLI install failed (run manually: npm install -g skills)"
+
+  section "Installing missing dependencies"
+
+  local i
+  for i in "${!MISSING_CMDS[@]}"; do
+    local cmd="${MISSING_CMDS[$i]}"
+    action "Running: $cmd"
+    if $DRY_RUN; then
+      dim "  would execute: $cmd"
+      continue
     fi
-  else
-    warn "npm not found — cannot install skills CLI"
-  fi
-else
-  note "skills CLI already installed"
-fi
-
-# ── Bun (JavaScript runtime, for plugin tests) ────────────────────────
-section "Install Bun"
-
-if ! have_cmd bun; then
-  echo -e "  ${CYAN}→${NC} Installing Bun..."
-  if have_cmd curl; then
-    if curl -fsSL https://bun.sh/install | bash >/dev/null 2>&1; then
-      export PATH="$HOME/.bun/bin:$PATH"
-      if have_cmd bun; then
-        note "Bun installed at $(command -v bun)"
-      else
-        warn "Bun installer ran but bun not on PATH — try 'export PATH=\$HOME/.bun/bin:\$PATH'"
-      fi
+    if eval "$cmd" >/dev/null 2>&1; then
+      note "dependency installed"
     else
-      warn "Bun installer failed — install manually: https://bun.sh"
+      warn "install command failed — you may need to install this manually"
     fi
-  else
-    warn "curl not found — install Bun manually: https://bun.sh"
-  fi
-else
-  note "Bun $(bun --version 2>/dev/null | head -1)"
-fi
+  done
+}
 
-# ── GitHub CLI (gh, for PR/issue operations) ──────────────────────────
-section "Install GitHub CLI"
+# ── ensure_node: node MUST be available for the rest of the install ────────────
 
-if ! have_cmd gh; then
-  case "$(uname -s 2>/dev/null || echo unknown)" in
+ensure_node() {
+  if have_cmd node; then return; fi
+  section "Node.js is required"
+  action "Install Node.js 18+ first, then re-run this script."
+  if $DRY_RUN; then
+    dim "  would install nodejs via platform package manager"
+    return
+  fi
+  case "$(uname -s)" in
     Linux)
       if have_cmd apt-get; then
-        echo -e "  ${CYAN}→${NC} Installing gh via apt..."
-        if sudo -n apt-get install -y gh >/dev/null 2>&1; then
-          note "gh installed (apt)"
-        else
-          warn "apt install gh failed. Install manually: https://cli.github.com/"
-        fi
+        action "Detected apt — installing via NodeSource..."
+        curl -fsSL https://deb.nodesource.com/setup_20.x | sudo bash -
+        sudo apt-get install -y nodejs
       elif have_cmd dnf; then
-        sudo -n dnf install -y gh >/dev/null 2>&1 && note "gh installed (dnf)" || warn "dnf install gh failed"
+        action "Detected dnf — installing nodejs..."
+        sudo dnf install -y nodejs
       elif have_cmd pacman; then
-        sudo -n pacman -S --noconfirm gh >/dev/null 2>&1 && note "gh installed (pacman)" || warn "pacman install gh failed"
+        action "Detected pacman — installing nodejs..."
+        sudo pacman -S --noconfirm nodejs npm
+      elif have_cmd zypper; then
+        action "Detected zypper — installing nodejs..."
+        sudo zypper install -y nodejs20
       else
-        warn "no known package manager — install gh manually: https://cli.github.com/"
+        err "No known package manager. Install Node.js manually: https://nodejs.org/"
+        exit 1
       fi
       ;;
     Darwin)
-      if have_cmd brew; then
-        brew install gh >/dev/null 2>&1 && note "gh installed (brew)" || warn "brew install gh failed"
-      else
-        warn "no brew — install gh manually: https://cli.github.com/"
-      fi
+      action "Installing node via Homebrew..."
+      brew install node@18
       ;;
     *)
-      warn "unknown OS — install gh manually: https://cli.github.com/"
+      err "Unsupported OS. Install Node.js manually: https://nodejs.org/"
+      exit 1
       ;;
   esac
-else
-  note "gh $(gh --version 2>/dev/null | head -1)"
-fi
-
-# ── opencode CLI (via curl installer) ────────────────────────────────
-section "Install opencode CLI"
-
-if ! have_cmd opencode; then
-  echo -e "  ${CYAN}→${NC} Installing opencode CLI..."
-  if have_cmd curl; then
-    if curl -fsSL https://opencode.ai/install | sh >/dev/null 2>&1; then
-      if have_cmd opencode; then
-        note "opencode CLI installed at $(command -v opencode)"
-      else
-        warn "opencode installer ran but binary not on PATH"
-      fi
-    else
-      warn "opencode installer failed — install manually: https://opencode.ai"
-    fi
-  else
-    warn "curl not found — install opencode manually: https://opencode.ai"
+  note "Node.js installed: $(node --version)"
+}
+
+# ── git operations (clone or update) ───────────────────────────────────────────
+
+ensure_repo() {
+  if $UPDATE_MODE; then
+    section "Updating BizarHarness repository"
+    action "Pulling latest via git pull --ff-only..."
+    dry git -C "$REPO_DIR" pull --ff-only
+    note "repository updated"
+    return
   fi
-else
-  note "opencode CLI already installed"
-fi
-
-# ── npm packages (BizarHarness — dashboard + plugin + SDK all in one) ──
-section "Install BizarHarness npm packages"
-
-if have_cmd npm; then
-  for pkg in @polderlabs/bizar; do
-    if npm ls -g "$pkg" --depth=0 >/dev/null 2>&1; then
-      cur=$(npm ls -g "$pkg" --depth=0 --json 2>/dev/null | grep -oE '"version":\s*"[^"]+"' | head -1 | sed 's/.*"\([^"]*\)".*/\1/')
-      note "$pkg already installed (v$cur)"
-    else
-      echo -e "  ${CYAN}→${NC} Installing $pkg..."
-      if npm install -g "$pkg" >/dev/null 2>&1; then
-        note "$pkg installed"
-      else
-        err "$pkg install failed (run manually: npm install -g $pkg)"
-      fi
-    fi
-  done
-else
-  err "npm not found — install Node.js 20+ first: https://nodejs.org/"
-fi
-
-# ── browser-harness (Python tool via uv, requires Python 3.12) ─────────
-section "Install browser-harness (Python via uv)"
-
-if have_cmd browser-harness; then
-  note "browser-harness $(browser-harness --version 2>&1 | head -1) already installed"
-else
-  if have_cmd uv; then
-    echo -e "  ${CYAN}→${NC} uv tool install --python 3.12 --upgrade --force browser-harness"
-    if uv tool install --python 3.12 --upgrade --force browser-harness >/dev/null 2>&1; then
-      note "browser-harness installed"
-    else
-      err "browser-harness install failed (run manually: uv tool install --python 3.12 --upgrade --force browser-harness)"
+
+  # If we're already inside the repo, skip clone.
+  if [ -d "$REPO_DIR/.git" ]; then
+    note "repository already present at $REPO_DIR"
+    if $FORCE || $UPDATE_MODE; then
+      dry git -C "$REPO_DIR" pull --ff-only
     fi
-  else
-    warn "uv not installed — skipping browser-harness (install uv first, then re-run this script)"
+    return
   fi
-fi
-
-# Register the browser-harness skill so any agent that needs it picks it up.
-if have_cmd browser-harness; then
-  BH_SKILL_DIR="$SKILLS_DIR/browser-harness"
-  mkdir -p "$BH_SKILL_DIR"
-  if browser-harness skill > "$BH_SKILL_DIR/SKILL.md" 2>/dev/null; then
-    note "browser-harness skill registered at $BH_SKILL_DIR/SKILL.md"
-  else
-    warn "browser-harness skill registration failed (re-run: browser-harness skill > $BH_SKILL_DIR/SKILL.md)"
-  fi
-fi
-
-# ── Chrome lifecycle (start browser-harness-up.sh) ────────────────────
-section "Start Chrome for browser-harness"
-
-if [ -x "$REPO_DIR/cli/browser-harness-up.sh" ]; then
-  # The script knows how to find chrome-headless-shell from the
-  # puppeteer cache (or any system chrome).
-  if BH_OUTPUT=$("$REPO_DIR/cli/browser-harness-up.sh" start 2>&1); then
-    # Trim verbose output; just keep the success lines.
-    while IFS= read -r line; do
-      case "$line" in
-        *"✓"*|*"already"*|*"stopped"*|*"restarted"*) note "$line" ;;
-        *) ;;
-      esac
-    done <<< "$BH_OUTPUT"
+
+  section "Cloning BizarHarness repository"
+  local target
+  target="$(dirname "$REPO_DIR")/BizarHarness"
+  if [ ! -d "$target" ]; then
+    action "Cloning into $target..."
+    dry git clone https://github.com/DrB0rk/BizarHarness.git "$target"
+    note "cloned"
   else
-    warn "browser-harness-up.sh start failed (run manually: $REPO_DIR/cli/browser-harness-up.sh start)"
-  fi
-elif have_cmd "$REPO_DIR/../bin/bizar"; then
-  if "$REPO_DIR/../bin/bizar" browser-harness-up start 2>&1 | grep -E '✓|✗' | head -3; then
-    note "Chrome started via bizar browser-harness-up"
+    note "already cloned at $target"
   fi
-else
-  warn "cli/browser-harness-up.sh not found at $REPO_DIR — skipping Chrome auto-start"
-fi
+}
 
-# ── BizarHarness config files ─────────────────────────────────────────
-section "Install BizarHarness config files"
+# ── Install agent/config files via cli/install.mjs ──────────────────────────────
 
-mkdir -p "$CONFIG_DIR/agents"
+install_config() {
+  section "Installing BizarHarness config files"
 
-# Agents — copy every .md except those already in place.
-for f in "$REPO_DIR/config/agents/"*.md; do
-  [ -f "$f" ] || continue
-  name="$(basename "$f")"
-  if [ -f "$CONFIG_DIR/agents/$name" ] && cmp -s "$f" "$CONFIG_DIR/agents/$name"; then
-    : # identical, skip silently
-  else
-    cp "$f" "$CONFIG_DIR/agents/$name"
-    INSTALLED+=("agents/$name")
+  if $DRY_RUN; then
+    dim "  would run: node \"$REPO_DIR/cli/install.mjs\" --non-interactive"
+    return
   fi
-done
-note "agents synced ($(ls "$CONFIG_DIR/agents/"*.md 2>/dev/null | wc -l) files)"
-
-# Shared baseline (used as a skill AND as the on-disk reference)
-if [ -d "$REPO_DIR/config/agents/_shared" ]; then
-  mkdir -p "$CONFIG_DIR/agents/_shared"
-  cp -R "$REPO_DIR/config/agents/_shared/." "$CONFIG_DIR/agents/_shared/"
-  note "agents/_shared/ synced"
-fi
-
-# Slash commands
-if [ -d "$REPO_DIR/config/commands/" ]; then
-  mkdir -p "$CONFIG_DIR/commands"
-  for f in "$REPO_DIR/config/commands/"*.md; do
-    [ -f "$f" ] || continue
-    name="$(basename "$f")"
-    cp "$f" "$CONFIG_DIR/commands/$name"
-  done
-  note "slash commands synced"
-fi
-
-# Hooks
-if [ -d "$REPO_DIR/config/hooks/" ]; then
-  mkdir -p "$CONFIG_DIR/hooks"
-  for entry in "$REPO_DIR/config/hooks/"*; do
-    [ -e "$entry" ] || continue
-    name="$(basename "$entry")"
-    cp -R "$entry" "$CONFIG_DIR/hooks/$name"
-  done
-  note "hooks synced"
-fi
-
-# AGENTS.md
-if [ -f "$REPO_DIR/config/AGENTS.md" ]; then
-  cp "$REPO_DIR/config/AGENTS.md" "$CONFIG_DIR/AGENTS.md"
-  note "AGENTS.md synced"
-fi
-
-# ── Bundled skills (bizar, self-improvement, agent-baseline, …) ───────
-section "Install bundled skills"
-
-mkdir -p "$SKILLS_DIR"
-# Core skills — bundled from config/skills/ in the repo.
-for skill in bizar self-improvement cpp-coding-standards cpp-testing embedded-esp-idf \
-             obsidian glyph read-the-damn-docs; do
-  if [ -d "$REPO_DIR/config/skills/$skill" ]; then
-    mkdir -p "$SKILLS_DIR/$skill"
-    cp -R "$REPO_DIR/config/skills/$skill/." "$SKILLS_DIR/$skill/"
-    note "skill: $skill"
+
+  if [ -f "$REPO_DIR/cli/install.mjs" ]; then
+    action "Running cli/install.mjs (agent files, skills, plugin)..."
+
+    # cli/install.mjs runInstaller() spawns bash install.sh — we need to pass
+    # the flags through. Use the canonical entry point with environment hints.
+    # The installer automatically copies agents, commands, hooks, skills, plugin.
+    if node "$REPO_DIR/cli/install.mjs" --non-interactive 2>&1; then
+      note "config files installed"
+    else
+      warn "cli/install.mjs exited non-zero — some config may be incomplete"
+    fi
   else
-    # Fallback: write inline SKILL.md so install.sh remains self-contained.
-    mkdir -p "$SKILLS_DIR/$skill"
-    case "$skill" in
-      obsidian)
-        # v3.24.0 — Prefer the on-disk SKILL.md so the inline copy can't
-        # drift. Fall back to an inline heredoc ONLY when the repo source
-        # is missing (e.g. someone running install.sh outside a clone).
-        if [ -f "$REPO_DIR/config/skills/obsidian/SKILL.md" ]; then
-          cp "$REPO_DIR/config/skills/obsidian/SKILL.md" "$SKILLS_DIR/$skill/SKILL.md"
-          note "skill: $skill (from repo)"
-        else
-          cat > "$SKILLS_DIR/$skill/SKILL.md" << 'OBSIDIAN_SKILL'
----
-name: obsidian
-description: Interact with the Obsidian vault for persistent per-project memory. Use when searching notes, creating notes, writing wikilinks, using callouts, setting properties, or managing the project's obsidian knowledge bank.
----
-
-# Obsidian Vault
-
-Per-project persistent memory for Bizar agents. Every project gets its own vault bank, keyed by project name.
-
-## Operations
-
-- **Search vault**: `obsidian_search` with `bank_id: "<project-name>"` — use before writing code that might have prior context
-- **Create/update notes**: `obsidian_write` with bank_id — store decisions, ADRs, architecture notes
-- **Append to notes**: `obsidian_append` — add to existing notes
-- **List notes**: `obsidian_list_notes` with optional directory prefix
-
-## Conventions
-
-- Use `bank_id: "<project-name>"` determined from the project root (the directory name)
-- Use wikilinks `[[Note Name]]` for cross-references within the vault
-- Use frontmatter for structured properties (tags, status, date)
-- Store ADRs under `adr/` prefix
-- Store implementation notes under `notes/` prefix
-OBSIDIAN_SKILL
-          note "skill: $skill (inline)"
-        fi
-        ;;
-      glyph)
-        cat > "$SKILLS_DIR/$skill/SKILL.md" << 'GLYPH_SKILL'
----
-name: glyph
-description: Work with the project knowledge graph (graphify). Query the graph before searching source files for structural and relationship questions. Use for architecture discovery, dependency mapping, and cross-module understanding.
----
-
-# Glyph — Knowledge Graph
-
-Graph-based codebase navigation using graphify (`.bizar/graph/`). Maps source files, functions, types, and their relationships into a queryable graph with community detection.
-
-## Commands
-
-```bash
-bizar graph status          # node/edge/community counts
-bizar graph query <term>    # BFS traversal from a concept
-bizar graph path <A> <B>    # shortest path between two concepts
-bizar graph explain <X>     # all nodes related to X
-bizar graph update          # incremental rebuild
-bizar graph build           # full rebuild
-```
-
-## When to Use
-
-- Before reading a large file: `bizar graph explain "<module>"`
-- Mapping unfamiliar code: `bizar graph query "<feature>"`
-- Debugging cross-module: `bizar graph path "<symptom>" "<root-cause>"`
-- Before grep: check the graph first — may point directly to the file
-GLYPH_SKILL
-        note "skill: $skill (inline)"
-        ;;
-      read-the-damn-docs)
-        cat > "$SKILLS_DIR/$skill/SKILL.md" << 'RTDD_SKILL'
----
-name: read-the-damn-docs
-description: Before writing code, read the official documentation. Use websearch/webfetch to find docs for any API, library, framework, or tool. Never guess API signatures, parameter names, or return types.
----
-
-# Read the Damn Docs
-
-Discipline: always check official documentation before writing code against an unfamiliar API.
-
-## Rules
-
-1. **Search docs first**: Before using any function/API/component you haven't used recently, `websearch` or `webfetch` the official docs
-2. **No guessing**: Never invent parameter names, return types, or method signatures from training data alone
-3. **Read error messages**: When something fails, read the full error and search docs for the exact error text
-4. **Version matters**: Note the library/tool version and use docs matching that version
-5. **Check examples**: Most good docs have worked examples — find and follow them
-
-## When to Apply
-
-- Adding a new dependency — read its install/setup docs
-- Using an unfamiliar API method — check signature and return type
-- Debugging an error you don't understand — search docs + error message
-- Configuring a tool — read the official config reference
-RTDD_SKILL
-        note "skill: $skill (inline)"
-        ;;
-      *)
-        warn "skill source missing: $skill (no inline fallback)"
-        ;;
-    esac
+    warn "cli/install.mjs not found — config files not auto-installed"
   fi
-done
+}
 
-# Shared agent baseline skill — referenced by every agent file.
-if [ -f "$REPO_DIR/config/agents/_shared/AGENT_BASELINE.md" ]; then
-  mkdir -p "$SKILLS_DIR/agent-baseline"
-  cp "$REPO_DIR/config/agents/_shared/AGENT_BASELINE.md" "$SKILLS_DIR/agent-baseline/SKILL.md"
-  note "skill: agent-baseline (shared by all 14 agents)"
-fi
+# ── Verify opencode.json has the Bizar plugin registered ───────────────────────
 
-# Make bundled scripts executable.
-chmod +x "$SKILLS_DIR"/embedded-esp-idf/scripts/*.sh 2>/dev/null || true
+verify_plugin() {
+  section "Verifying Bizar plugin registration"
 
-# ── Domain skills via skills.sh (impeccable, ponytail, obsidian-skills) ─
-section "Install domain skills from skills.sh"
+  local opencode_config="$CONFIG_DIR/opencode.json"
 
-if have_cmd npx; then
-  # Impeccable — UI anti-pattern detection (frontend quality)
-  if npx --yes impeccable skills install -y --scope=user --providers=opencode >/dev/null 2>&1; then
-    note "impeccable (UI anti-pattern detector)"
-  else
-    warn "impeccable install failed (run: npx impeccable skills install)"
+  if [ ! -f "$opencode_config" ]; then
+    warn "opencode.json not found at $opencode_config — plugin not registered"
+    return
   fi
 
-  # Ponytail — minimal-code skill for AI agents
-  if npx --yes @dietrichgebert/ponytail install --scope=user >/dev/null 2>&1; then
-    note "ponytail (minimal-code skill)"
-  else
-    warn "ponytail install failed (run: npx @dietrichgebert/ponytail install)"
+  # Check if plugin entry exists using node's JSON parser (avoid jq dependency)
+  local has_plugin
+  has_plugin=$(node -e "
+    const cfg = JSON.parse(require('fs').readFileSync('$opencode_config', 'utf8'));
+    const plugins = cfg.plugin || [];
+    const found = plugins.some(function(p) {
+      return Array.isArray(p) && p[0] && p[0].includes('plugins/bizar');
+    });
+    console.log(found ? 'yes' : 'no');
+  " 2>/dev/null || echo "no")
+
+  if [ "$has_plugin" = "yes" ]; then
+    note "Bizar plugin registered in opencode.json"
+    return
   fi
 
-  # Obsidian skills — Obsidian Flavored Markdown, Bases, JSON Canvas, CLI
-  if npx --yes skills add https://github.com/kepano/obsidian-skills --all -y >/dev/null 2>&1; then
-    note "obsidian-skills (Obsidian Markdown/Bases/Canvas)"
-  else
-    warn "obsidian-skills install failed (run: npx skills add kepano/obsidian-skills)"
+  action "Adding Bizar plugin entry to opencode.json..."
+
+  if $DRY_RUN; then
+    dim "  would patch opencode.json to add plugin entry"
+    return
   fi
-else
-  warn "npx not found — skipping domain skill installation"
-fi
 
-# ── Bizar plugin (mirrored from npm package to ~/.config/opencode/plugins/) ─
-section "Install Bizar opencode plugin"
+  # Patch via node script (no jq dependency needed)
+  node -e "
+    const fs = require('fs');
+    const path = '$opencode_config';
+    let cfg;
+    try {
+      cfg = JSON.parse(fs.readFileSync(path, 'utf8'));
+    } catch(e) {
+      console.error('Failed to read opencode.json:', e.message);
+      process.exit(1);
+    }
+    if (!cfg.plugin) cfg.plugin = [];
+    const has = cfg.plugin.some(function(p) {
+      return Array.isArray(p) && p[0] && p[0].includes('plugins/bizar');
+    });
+    if (!has) {
+      cfg.plugin.push(['./plugins/bizar/index.ts', {
+        loopThresholdWarn: 5,
+        loopThresholdEscalate: 8,
+        loopThresholdBlock: 12,
+        loopWindowSize: 10
+      }]);
+    }
+    fs.writeFileSync(path, JSON.stringify(cfg, null, 2) + '\n', 'utf8');
+    console.log(has ? 'already registered' : 'plugin entry added');
+  "
+
+  note "opencode.json updated with Bizar plugin"
+}
 
-PLUGIN_DST="$CONFIG_DIR/plugins/bizar"
+# ── Install background service ─────────────────────────────────────────────────
 
-# v4.0.0: The plugin, dashboard, and SDK are all part of the same
-# @polderlabs/bizar npm package, so there is no separate
-# @polderlabs/bizar-plugin to resolve from the global node_modules.
-# The local-repo copy path is the only one we exercise now; the global
-# fallback is kept for users who still have a legacy install with the
-# old plugin on disk.
-#
-# v3.20.12: two sources, in priority order:
-#   1. Local repo's plugins/bizar/ (for `git clone` users)
-#   2. Globally installed @polderlabs/bizar-plugin (for `npm i -g` users)
-# The npm-installed plugin also needs its bundled node_modules/ copied
-# alongside (it depends on @polderlabs/bizar-sdk, which isn't on npm).
-# This previously lived in cli/install.mjs:installPluginFromGlobal();
-# duplicating the logic here makes install.sh the single source of truth.
-PLUGIN_SRC=""
-if [ -d "$REPO_DIR/plugins/bizar" ]; then
-  PLUGIN_SRC="$REPO_DIR/plugins/bizar"
-  PLUGIN_SRC_KIND="local repo"
-elif have_cmd npm; then
-  # Resolve the npm global plugin path. `npm root -g` gives us
-  # /usr/local/lib/node_modules; the plugin lives in @polderlabs/bizar-plugin/.
-  NPM_GLOBAL_ROOT=$(npm root -g 2>/dev/null || echo "")
-  if [ -n "$NPM_GLOBAL_ROOT" ] && [ -d "$NPM_GLOBAL_ROOT/@polderlabs/bizar-plugin" ]; then
-    PLUGIN_SRC="$NPM_GLOBAL_ROOT/@polderlabs/bizar-plugin"
-    PLUGIN_SRC_KIND="@polderlabs/bizar-plugin (global)"
-  fi
-fi
-
-if [ -n "$PLUGIN_SRC" ]; then
-  mkdir -p "$PLUGIN_DST"
-  while IFS= read -r -d '' f; do
-    rel="${f#$PLUGIN_SRC/}"
-    case "$rel" in
-      node_modules/*|dist/*|*.log|.DS_Store) continue ;;
-    esac
-    mkdir -p "$(dirname "$PLUGIN_DST/$rel")"
-    cp "$f" "$PLUGIN_DST/$rel"
-  done < <(find "$PLUGIN_SRC" -type f -print0)
-  note "plugins/bizar/ copied from $PLUGIN_SRC_KIND"
-  # v4.0.0: No bundled node_modules copy. The SDK ships inside the same
-  # @polderlabs/bizar package, so plugin imports resolve from opencode's
-  # own node_modules at runtime.
-else
-  warn "Bizar plugin source not found (install @polderlabs/bizar: npm i -g @polderlabs/bizar)"
-fi
-
-# ── Merge opencode.json (template + user's existing config) ────────────
-section "Configure opencode.json"
-
-# Prefer the .template copy; fall back to the legacy tracked file.
-if [ -f "$REPO_DIR/config/opencode.json.template" ]; then
-  TEMPLATE="$REPO_DIR/config/opencode.json.template"
-elif [ -f "$REPO_DIR/config/opencode.json" ]; then
-  TEMPLATE="$REPO_DIR/config/opencode.json"
-else
-  warn "No opencode.json template found"
-  TEMPLATE=""
-fi
-
-if [ -n "$TEMPLATE" ]; then
-  if [ -f "$CONFIG_DIR/opencode.json" ]; then
-    cp "$CONFIG_DIR/opencode.json" "$CONFIG_DIR/opencode.json.bak"
+install_service() {
+  section "Installing background service"
+
+  if $DRY_RUN; then
+    dim "  would run: node \"$REPO_DIR/scripts/install-service.mjs\""
+    return
   fi
 
-  if have_cmd jq; then
-    MERGE_TMP="$CONFIG_DIR/opencode.json.merge.$$"
-    if [ -f "$CONFIG_DIR/opencode.json" ]; then
-      jq -s '.[0] * .[1]' "$TEMPLATE" "$CONFIG_DIR/opencode.json" > "$MERGE_TMP" 2>/dev/null \
-        && mv "$MERGE_TMP" "$CONFIG_DIR/opencode.json" \
-        || { rm -f "$MERGE_TMP"; cp "$TEMPLATE" "$CONFIG_DIR/opencode.json"; }
+  if [ -f "$REPO_DIR/scripts/install-service.mjs" ]; then
+    local result
+    result=$(node "$REPO_DIR/scripts/install-service.mjs" 2>&1) || true
+    # Parse the JSON result
+    local ok
+    ok=$(echo "$result" | node -e "
+      try {
+        const r = JSON.parse(require('fs').readFileSync('/dev/stdin','utf8'));
+        console.log(r.ok !== false ? 'yes' : 'no');
+      } catch(e) { console.log('no'); }
+    " 2>/dev/null <<< "$result" || echo "no")
+
+    local skipped
+    skipped=$(echo "$result" | node -e "
+      try {
+        const r = JSON.parse(require('fs').readFileSync('/dev/stdin','utf8'));
+        console.log(r.skipped ? 'yes' : 'no');
+      } catch(e) { console.log('no'); }
+    " 2>/dev/null <<< "$result" || echo "no")
+
+    if [ "$ok" = "yes" ]; then
+      if [ "$skipped" = "yes" ]; then
+        dim "  (service-controller not yet available — will be completed when Stream A lands)"
+      fi
+      note "service registration complete"
     else
-      cp "$TEMPLATE" "$CONFIG_DIR/opencode.json"
+      warn "service registration had issues — see output above"
+      dim "  manual command: node cli/service-controller.mjs install"
     fi
-
-    # Ensure the Bizar plugin entry is registered (idempotent).
-    PLUGIN_TMP="$CONFIG_DIR/opencode.json.tmp.$$"
-    jq '
-      if (.plugin // []) | map(.[0] == "./plugins/bizar/index.ts") | any then .
-      else .plugin = (.plugin // []) + [["./plugins/bizar/index.ts", {
-        "loopThresholdWarn": 5,
-        "loopThresholdEscalate": 8,
-        "loopThresholdBlock": 12,
-        "loopWindowSize": 10
-      }]]
-      end
-    ' "$CONFIG_DIR/opencode.json" > "$PLUGIN_TMP" \
-      && mv "$PLUGIN_TMP" "$CONFIG_DIR/opencode.json" \
-      || rm -f "$PLUGIN_TMP"
-    note "opencode.json (template merged with existing config; plugin entry ensured)"
   else
-    cp "$TEMPLATE" "$CONFIG_DIR/opencode.json"
-    warn "jq not available — copied template directly. Re-install jq for safe merging."
+    warn "scripts/install-service.mjs not found"
   fi
-fi
-
-# ── Bootstrap Bizar Memory Service ───────────────────────────────────
-section "Bootstrap Bizar Memory Service"
-
-if have_cmd node; then
-  MEMORY_REPO_NAME="${BIZAR_MEMORY_REPO_NAME:-bizar-memory}"
-  note "initializing local memory vault"
-  if node "$REPO_DIR/cli/bin.mjs" memory init \
-        --memory-mode managed \
-        --memory-repo-name "$MEMORY_REPO_NAME" \
-        --yes 2>/dev/null; then
-    note "memory service ready (mode: managed, repo: ~/.local/share/bizar/memory/$MEMORY_REPO_NAME)"
-    note "next steps:"
-    note "  bizar memory status    # check vault + git state"
-    note "  bizar memory sync      # pull, validate, scan, commit, push"
-    note "  bizar memory doctor    # health check"
+}
+
+# ── Verify .opencode/plugins/bizar exists ──────────────────────────────────────
+
+verify_plugin_dir() {
+  section "Verifying plugin directory"
+
+  local dst_plugin="${XDG_CONFIG_HOME:-$HOME/.config}/opencode/plugins/bizar"
+  if [ -d "$dst_plugin" ]; then
+    note "plugin directory exists at $dst_plugin"
   else
-    warn "memory init skipped (run 'bizar memory init' manually later)"
+    action "Setting up plugin directory..."
+    dry mkdir -p "$dst_plugin"
+    # Copy from repo if available
+    if [ -d "$REPO_DIR/plugins/bizar" ]; then
+      if ! $DRY_RUN; then
+        cp -R "$REPO_DIR/plugins/bizar/." "$dst_plugin/"
+      fi
+      note "plugin files copied from repo"
+    else
+      warn "no plugin source found in repo — run 'bizar install' or 'npm install -g @polderlabs/bizar-plugin'"
+    fi
   fi
-else
-  warn "node not on PATH — skipping memory service bootstrap"
-fi
-
-# ── Write install-state.json (used by `bizar update` for migrations) ───
-section "Write install-state"
-
-mkdir -p "$BIZAR_STATE_DIR"
-BH_VERSION=$(browser-harness --version 2>/dev/null | head -1 | sed 's/[^0-9.]//g' || echo "")
-BIZAR_VERSION=$(npm ls -g @polderlabs/bizar --depth=0 --json 2>/dev/null | grep -oE '"@polderlabs/bizar":\s*\{[^}]*"version":\s*"[^"]+"' | grep -oE '"version":\s*"[^"]+"' | grep -oE '"[^"]+"' | tail -1 | tr -d '"' || echo "")
-PY_VERSION=$("$PYTHON_BIN" --version 2>/dev/null | head -1 | sed 's/[^0-9.]//g' || echo "")
-UV_VERSION=$(uv --version 2>/dev/null | head -1 | sed 's/[^0-9.]//g' || echo "")
-JQ_VERSION=$(jq --version 2>/dev/null | sed 's/[^0-9.]//g' || echo "")
-
-STATE_JSON=$(cat <<JSON
-{
-  "installedAt": "$(date -u +%Y-%m-%dT%H:%M:%SZ 2>/dev/null || date -u +%Y-%m-%dT%H:%M:%S.%NZ | sed 's/\.[0-9]*//')",
-  "components": {
-    "bizar": "${BIZAR_VERSION:-unknown}",
-    "browser-harness": "${BH_VERSION:-unknown}",
-    "uv": "${UV_VERSION:-unknown}",
-    "python3.12": "${PY_VERSION:-unknown}",
-    "jq": "${JQ_VERSION:-unknown}"
-  }
 }
-JSON
-)
-echo "$STATE_JSON" > "$BIZAR_STATE_FILE"
-note "install-state written to $BIZAR_STATE_FILE"
-
-# ── Final dependency verification ────────────────────────────────────
-section "Verify all dependencies"
-
-if verify_dependencies; then
-  note "all required tools available on PATH"
-else
-  err "some required tools are missing — see list above"
-fi
-
-# ── Final status banner ──────────────────────────────────────────────
-section "Install complete"
-
-echo ""
-echo -e "${BOLD}${CYAN}┌────────────────────────────────────────────────────────────┐${NC}"
-echo -e "${BOLD}${CYAN}│${NC}  ${BOLD}BizarHarness ready.${NC}                                             │"
-echo -e "${BOLD}${CYAN}│${NC}                                                          │"
-
-if [ ${#INSTALLED[@]} -gt 0 ]; then
-  echo -e "${BOLD}${CYAN}│${NC}  ${GREEN}✓ Installed:${NC}                                                │"
-  for entry in "${INSTALLED[@]}"; do
-    short=$(echo "$entry" | head -c 56)
-    echo -e "${BOLD}${CYAN}│${NC}    • $short$(printf '%*s' $((56 - ${#short})) '') │"
-  done
-fi
 
-if [ ${#SKIPPED[@]} -gt 0 ]; then
+# ── Final success banner ───────────────────────────────────────────────────────
+
+print_banner() {
+  local dashboard_url="http://localhost:3333"
+  section "Install complete"
+
+  echo ""
+  echo -e "${BOLD}${CYAN}┌────────────────────────────────────────────────────────────┐${NC}"
+  echo -e "${BOLD}${CYAN}│${NC}  ${BOLD}BizarHarness ready.${NC}                                             │"
   echo -e "${BOLD}${CYAN}│${NC}                                                          │"
-  echo -e "${BOLD}${CYAN}│${NC}  ${YELLOW}⚠ Skipped:${NC}                                                  │"
-  for entry in "${SKIPPED[@]}"; do
-    short=$(echo "$entry" | head -c 56)
-    echo -e "${BOLD}${CYAN}│${NC}    • $short$(printf '%*s' $((56 - ${#short})) '') │"
+  echo -e "${BOLD}${CYAN}│${NC}  ${GREEN}✓${NC} Cross-platform installer v3.22.0                             │"
+  echo -e "${BOLD}${CYAN}│${NC}                                                          │"
+  echo -e "${BOLD}${CYAN}│${NC}  Dashboard: ${CYAN}$dashboard_url${NC}                                    │"
+  echo -e "${BOLD}${CYAN}│${NC}                                                          │"
+  echo -e "${BOLD}${CYAN}│${NC}  ${DIM}Next:${NC}                                                            │"
+  echo -e "${BOLD}${CYAN}│${NC}  ${DIM}  1. Restart opencode to pick up new config${NC}                     │"
+  echo -e "${BOLD}${CYAN}│${NC}  ${DIM}  2. Run /connect in opencode to add API keys${NC}                   │"
+  echo -e "${BOLD}${CYAN}│${NC}  ${DIM}  3. Run 'bizar dash start' to launch the dashboard${NC}             │"
+  echo -e "${BOLD}${CYAN}│${NC}  ${DIM}  4. Visit $dashboard_url in your browser${NC}                │"
+  echo -e "${BOLD}${CYAN}│${NC}                                                          │"
+  echo -e "${BOLD}${CYAN}└────────────────────────────────────────────────────────────┘${NC}"
+  echo ""
+
+  if $DRY_RUN; then
+    warn "DRY RUN — no changes were made"
+  fi
+}
+
+# ── install_linux: Debian/Ubuntu, Fedora/RHEL, Arch, openSUSE ──────────────────
+
+install_linux() {
+  note "Detected Linux ($(uname -m))"
+
+  ensure_node
+
+  # Pre-flight: populate PATH with common locations
+  for p in "$HOME/.opencode/bin" "$HOME/.local/bin" "$HOME/.bun/bin"; do
+    case ":$PATH:" in *":$p:"*) ;; *) [ -d "$p" ] && export PATH="$p:$PATH" ;; esac
   done
-fi
 
-if [ ${#FAILED[@]} -gt 0 ]; then
-  echo -e "${BOLD}${CYAN}│${NC}                                                          │"
-  echo -e "${BOLD}${CYAN}│${NC}  ${RED}✗ Failed:${NC}                                                  │"
-  for entry in "${FAILED[@]}"; do
-    short=$(echo "$entry" | head -c 56)
-    echo -e "${BOLD}${CYAN}│${NC}    • $short$(printf '%*s' $((56 - ${#short})) '') │"
+  check_deps
+  install_missing_deps
+
+  ensure_repo
+  install_config
+  verify_plugin_dir
+  verify_plugin
+  install_service
+}
+
+# ── install_macos: Homebrew-based ──────────────────────────────────────────────
+
+install_macos() {
+  note "Detected macOS ($(uname -m))"
+
+  # Ensure Homebrew
+  if ! have_cmd brew; then
+    section "Homebrew"
+    action "Installing Homebrew..."
+    if $DRY_RUN; then
+      dim "  would install Homebrew via /bin/bash -c '\$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/HEAD/install.sh)'"
+    else
+      /bin/bash -c "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/HEAD/install.sh)"
+      note "Homebrew installed"
+    fi
+  else
+    note "Homebrew already installed"
+  fi
+
+  ensure_node
+
+  # Pre-flight: populate PATH
+  for p in "$HOME/.opencode/bin" "$HOME/.local/bin" "$HOME/.bun/bin" "/opt/homebrew/bin"; do
+    case ":$PATH:" in *":$p:"*) ;; *) [ -d "$p" ] && export PATH="$p:$PATH" ;; esac
   done
-fi
-
-echo -e "${BOLD}${CYAN}│${NC}                                                          │"
-echo -e "${BOLD}${CYAN}│${NC}  ${DIM}Next: open /connect in your next opencode session${NC}        │"
-echo -e "${BOLD}${CYAN}│${NC}  ${DIM}       to add API keys (opencode-zen is free; MiniMax${NC}        │"
-echo -e "${BOLD}${CYAN}│${NC}  ${DIM}       is paid). The installer never asks for keys —${NC}         │"
-echo -e "${BOLD}${CYAN}│${NC}  ${DIM}       do that part yourself so secrets stay on your${NC}        │"
-echo -e "${BOLD}${CYAN}│${NC}  ${DIM}       machine, not in any installer log.${NC}                       │"
-echo -e "${BOLD}${CYAN}└────────────────────────────────────────────────────────────┘${NC}"
-echo ""
-
-[ ${#FAILED[@]} -gt 0 ] && exit 1
-exit 0
+
+  check_deps
+  install_missing_deps
+
+  ensure_repo
+  install_config
+  verify_plugin_dir
+  verify_plugin
+  install_service
+}
+
+# ── Main entry ──────────────────────────────────────────────────────────────────
+
+main() {
+  parse_flags "$@"
+
+  if $DRY_RUN; then
+    dim "DRY RUN MODE — no changes will be made"
+    echo ""
+  fi
+
+  # Header
+  echo ""
+  echo -e "${BOLD}${CYAN}  ⚡ BizarHarness Installer v3.22.0${NC}"
+  if $UPDATE_MODE; then echo -e "  ${DIM}Update mode${NC}"; fi
+  echo ""
+
+  # OS detection
+  local os
+  os="$(uname -s)"
+  case "$os" in
+    Linux)
+      install_linux
+      ;;
+    Darwin)
+      install_macos
+      ;;
+    *)
+      echo ""
+      err "Unsupported OS: $os"
+      echo ""
+      warn "On Windows, run install.ps1 instead."
+      warn "On other Unix systems, ensure Node.js 18+ is available and run:"
+      warn "  node scripts/check-deps.mjs"
+      echo ""
+      exit 1
+      ;;
+  esac
+
+  print_banner
+  exit 0
+}
+
+main "$@"