smash-os-install 0.4.3 → 0.4.6

package/install.mjs

@@ -10,13 +10,13 @@
  *
  * What it does:
  *   1. Prompts for project name and tech stack
- *   2. Writes CLAUDE.md + /ai/ skeleton + .smash-os-mode=local
+ *   2. Writes CLAUDE.md + /.smashOS/ skeleton + .smash-os-mode=local
  *   3. Installs SmashOS skills globally (~/.claude/skills/)
  *   4. No web app, no API keys, no cloud dependencies required
  */
 
 import { execSync }                                          from 'child_process';
-import { existsSync, readFileSync, writeFileSync, mkdirSync, rmSync } from 'fs';
+import { existsSync, readFileSync, writeFileSync, mkdirSync, rmSync, readdirSync } from 'fs';
 import { join, dirname, basename }                            from 'path';
 import { fileURLToPath }                                     from 'url';
 import { homedir }                                            from 'os';
@@ -25,14 +25,14 @@ import chalk from 'chalk';
 import {
   getClaudeMd, getAiFiles, getFrontendFiles,
   agentFiles, settingsJson, bootHook, syncHook,
-  localSkills, localSkillExtras,
+  localSkills, localSkillExtras, osDocsFiles,
 } from './templates.mjs';
 
 const cwd = process.cwd();
 const isUpgrade = process.argv.includes('--upgrade');
 const isVerify = process.argv.includes('--verify');
 const isUninstall = process.argv.includes('--uninstall');
-const SMASH_VERSION = '0.4.3';
+const SMASH_VERSION = '0.4.6';
 const vaultConventions = join(process.env.USERPROFILE || process.env.HOME || homedir(), 'Desktop', 'SmashBurgerBar', 'SmashVault', 'Architecture', 'conventions.md');
 const globalConventions = join(homedir(), '.claude', 'conventions.md');
 const conventionsFile = existsSync(vaultConventions) ? vaultConventions : globalConventions;
@@ -226,7 +226,10 @@ function findClaude() {
 
 function loadRegistry() {
   if (!existsSync(REGISTRY_FILE)) return [];
-  try { return JSON.parse(readFileSync(REGISTRY_FILE, 'utf8')); } catch { return []; }
+  try {
+    const raw = JSON.parse(readFileSync(REGISTRY_FILE, 'utf8'));
+    return raw.filter(p => p && p.path && !p.path.includes('..'));
+  } catch { return []; }
 }
 
 function saveRegistry(projects) {
@@ -235,7 +238,7 @@ function saveRegistry(projects) {
 }
 
 function schtask(name, batPath, schedule) {
-  const user = process.env.USERNAME || process.env.USER || 'Administrator';
+  const user = (process.env.USERNAME || process.env.USER || 'Administrator').replace(/[^a-zA-Z0-9._\-]/g, '_');
   try {
     autoRun(`schtasks /create /tn "SmashOS\\${name}" /tr "${batPath}" ${schedule} /f /ru "${user}"`);
     console.log('  ' + chalk.green('✓') + ' SmashOS\\' + name);
@@ -246,7 +249,7 @@ function schtask(name, batPath, schedule) {
 
 function buildBats(projects, claudeExe) {
   const base = `"${claudeExe}" --dangerously-skip-permissions --print`;
-  const home = process.env.USERPROFILE || process.env.HOME || 'C:\\Users\\Administrator';
+  const home = process.env.USERPROFILE || process.env.HOME || homedir();
 
   // Scoped tool allowlists per task type — never grant unrestricted access
   const SCOPE = {
@@ -257,25 +260,29 @@ function buildBats(projects, claudeExe) {
   const C_MED  = `${base} --max-turns 50 ${SCOPE.medium}`;
   const hdr    = `@echo off\nset CLAUDE=${base} --max-turns 20 ${SCOPE.light}\n`;
 
+  const safeN = n => n.replace(/[^a-zA-Z0-9._-]/g, '_');
+  const safePath = p => p.replace(/"/g, '');
   function block(p, prompt, slug, cmd = C) {
     const log = join(SMASH_BASE, p.name, 'logs', `${slug}.log`);
-    return `\n:: === ${p.name} ===\ncd /d "${p.path}"\necho [%date% %time%] Running ${slug}... >> "${log}"\n${cmd} "${prompt}" >> "${log}" 2>&1\necho [%date% %time%] Done. >> "${log}"`;
+    return `\n:: === ${safeN(p.name)} ===\ncd /d "${safePath(p.path)}"\necho [%date% %time%] Running ${slug}... >> "${log}"\n${cmd} "${prompt}" >> "${log}" 2>&1\necho [%date% %time%] Done. >> "${log}"`;
   }
   function blockCmd(p, cmd, slug, exe = C) {
     const log = join(SMASH_BASE, p.name, 'logs', `${slug}.log`);
-    return `\n:: === ${p.name} ===\ncd /d "${p.path}"\necho [%date% %time%] Running ${slug}... >> "${log}"\n${exe} "${cmd}" >> "${log}" 2>&1\necho [%date% %time%] Done. >> "${log}"`;
+    return `\n:: === ${safeN(p.name)} ===\ncd /d "${safePath(p.path)}"\necho [%date% %time%] Running ${slug}... >> "${log}"\n${exe} "${cmd}" >> "${log}" 2>&1\necho [%date% %time%] Done. >> "${log}"`;
   }
   function bat(slug, getBlock) { return hdr + '\n' + projects.map(p => getBlock(p)).join('\n') + '\n'; }
-  function batMed(slug, getBlock) { return `@echo off\nset CLAUDE=${base} ${SCOPE.medium}\n` + '\n' + projects.map(p => getBlock(p)).join('\n') + '\n'; }
+  function batMed(slug, getBlock) { return `@echo off\nset CLAUDE=${base} --max-turns 50 ${SCOPE.medium}\n` + '\n' + projects.map(p => getBlock(p)).join('\n') + '\n'; }
 
   return [
     { taskName: 'Projects\\LockCleanup',        batFile: join(SCRIPTS_DIR, 'lock-cleanup.bat'),         schedule: '/sc hourly /st 00:00',        content: bat('lock-cleanup',         p => block(p, 'Review .claude/scheduled_tasks.lock and any stale pipeline lock files. Delete any locks older than 2 hours and report what was cleaned. Act autonomously. Do not ask for clarification. If uncertain, use best judgment and log your reasoning.', 'lock-cleanup')) },
-    { taskName: 'Projects\\MemoryConsolidation', batFile: join(SCRIPTS_DIR, 'memory-consolidation.bat'), schedule: '/sc daily /st 01:00',         content: bat('memory-consolidation', p => block(p, 'Read all files in ai/memory/. Consolidate duplicates and summarise entries older than 30 days into a single summary entry. Save the updated files. Act autonomously. Do not ask for clarification. If uncertain, use best judgment and log your reasoning.', 'memory-consolidation')) },
+    { taskName: 'Projects\\MemoryConsolidation', batFile: join(SCRIPTS_DIR, 'memory-consolidation.bat'), schedule: '/sc daily /st 01:00',         content: bat('memory-consolidation', p => block(p, 'Read all files in .smashOS/memory/. Consolidate duplicates and summarise entries older than 30 days into a single summary entry. Save the updated files. Act autonomously. Do not ask for clarification. If uncertain, use best judgment and log your reasoning.', 'memory-consolidation')) },
     { taskName: 'Projects\\NightlyAudit',        batFile: join(SCRIPTS_DIR, 'nightly-audit.bat'),        schedule: '/sc daily /st 02:00',         content: batMed('nightly-audit',     p => blockCmd(p, '/smash-os:audit', 'nightly-audit', C_MED)) },
     { taskName: '_skills\\DreamMemory',          batFile: join(SKILL_SCRIPTS, 'dream-memory.bat'),       schedule: '/sc daily /st 04:00',         content: `@echo off\ncd /d "${home}"\necho [%date% %time%] Running dream-memory... >> "${join(SKILL_LOGS, 'dream-memory.log')}"\n"${claudeExe}" --dangerously-skip-permissions --print --max-turns 20 --allowedTools Read,Write,Glob,Grep "/dream-memory" >> "${join(SKILL_LOGS, 'dream-memory.log')}" 2>&1\necho [%date% %time%] Done. >> "${join(SKILL_LOGS, 'dream-memory.log')}"\n` },
     { taskName: 'Projects\\WeeklyImprovement',   batFile: join(SCRIPTS_DIR, 'weekly-improvement.bat'),   schedule: '/sc weekly /d MON /st 05:00', content: batMed('weekly-improvement', p => blockCmd(p, '/smash-os:run weekly-improvement', 'weekly-improvement', C_MED)) },
     { taskName: '_skills\\SkillEvolution',       batFile: join(SKILL_SCRIPTS, 'skill-evolution.bat'),    schedule: '/sc weekly /d MON /st 06:00', content: `@echo off\ncd /d "${home}"\necho [%date% %time%] Running skill evolution... >> "${join(SKILL_LOGS, 'skill-evolution.log')}"\n"${claudeExe}" --dangerously-skip-permissions --print --max-turns 20 --allowedTools Read,Write,Glob,Grep "/skill-evolution" >> "${join(SKILL_LOGS, 'skill-evolution.log')}" 2>&1\necho [%date% %time%] Done. >> "${join(SKILL_LOGS, 'skill-evolution.log')}"\n` },
     { taskName: 'Projects\\RoleEvolution',       batFile: join(SCRIPTS_DIR, 'role-evolution.bat'),       schedule: '/sc weekly /d MON /st 06:30', content: batMed('role-evolution',     p => blockCmd(p, '/smash-os:role-improve', 'role-evolution', C_MED)) },
+    { taskName: 'Projects\\HarnessEvolution',    batFile: join(SCRIPTS_DIR, 'harness-evolution.bat'),    schedule: '/sc weekly /d MON /st 07:00', content: batMed('harness-evolution',  p => blockCmd(p, '/smash-os:evolve', 'harness-evolution', C_MED)) },
+    { taskName: 'Projects\\DailyLogReport',      batFile: join(SCRIPTS_DIR, 'daily-log-report.bat'),     schedule: '/sc daily /st 03:00',         content: bat('daily-log-report',      p => block(p, `Scan all .log files in ${join(SMASH_BASE, p.name, 'logs')}. For each log file identify errors, warnings, task failures, and notable events. Append a new dated section to .smashOS/todo/todo.md with: (1) status row per scheduled task showing ran/failed/skipped, (2) errors or issues requiring attention with context, (3) concrete next-step suggestions. Create .smashOS/todo/todo.md if it does not exist. Act autonomously. Do not ask for clarification. If uncertain, use best judgment and log your reasoning.`, 'daily-log-report')) },
   ];
 }
 
@@ -299,7 +306,7 @@ function setupWindowsTaskScheduler(projects, claudeExe, projectName) {
   for (const b of bats) schtask(b.taskName, b.batFile, b.schedule);
 
   console.log('');
-  console.log(chalk.dim('  Schedule: hourly lock-cleanup · 1am memory · 2am audit · 4am dream-memory · Mon 5am improvement · Mon 6am skill-evolution · Mon 6:30am role-evolution'));
+  console.log(chalk.dim('  Schedule: hourly lock-cleanup · 1am memory · 2am audit · 3am log-report · 4am dream-memory · Mon 5am improvement · Mon 6am skill-evolution · Mon 6:30am role-evolution · Mon 7am harness-evolution'));
   console.log(chalk.dim(`  Logs: ${join(SMASH_BASE, projectName, 'logs')}`));
 }
 
@@ -319,8 +326,9 @@ function setupMacOSLaunchAgents(projects, claudeExe, projectName) {
     medium: 'Read,Write,Edit,Bash,Glob,Grep',
   };
 
+  const xmlEsc = s => s.replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;').replace(/"/g, '&quot;').replace(/'/g, '&apos;');
   function plist(label, args, workDir, logFile, calendarInterval) {
-    const argXml = args.map(a => `\t\t<string>${a}</string>`).join('\n');
+    const argXml = args.map(a => `\t\t<string>${xmlEsc(a)}</string>`).join('\n');
     const intervalXml = Object.entries(calendarInterval)
       .map(([k, v]) => `\t\t<key>${k}</key>\n\t\t<integer>${v}</integer>`)
       .join('\n');
@@ -335,92 +343,77 @@ function setupMacOSLaunchAgents(projects, claudeExe, projectName) {
 ${argXml}
 \t</array>
 \t<key>WorkingDirectory</key>
-\t<string>${workDir}</string>
+\t<string>${xmlEsc(workDir)}</string>
 \t<key>StartCalendarInterval</key>
 \t<dict>
 ${intervalXml}
 \t</dict>
 \t<key>StandardOutPath</key>
-\t<string>${logFile}</string>
+\t<string>${xmlEsc(logFile)}</string>
 \t<key>StandardErrorPath</key>
-\t<string>${logFile}</string>
+\t<string>${xmlEsc(logFile)}</string>
 \t<key>RunAtLoad</key>
 \t<false/>
 </dict>
 </plist>`;
   }
 
-  function projectArgs(prompt, tools, turns = 20) {
+  function paArgs(prompt, tools, turns = 20) {
     return [claudeExe, '--dangerously-skip-permissions', '--print', '--max-turns', String(turns), '--allowedTools', tools, prompt];
   }
+  const safePName = n => n.replace(/[^a-zA-Z0-9._-]/g, '_');
 
-  const tasks = [
-    {
-      label: 'com.smash-os.lock-cleanup',
-      args: projectArgs('Review .claude/scheduled_tasks.lock and any stale pipeline lock files. Delete any locks older than 2 hours and report what was cleaned. Act autonomously. Do not ask for clarification. If uncertain, use best judgment and log your reasoning.', scope.light),
-      workDir: projects[0]?.path || homedir(),
-      logFile: join(SMASH_BASE, projectName, 'logs', 'lock-cleanup.log'),
-      interval: { Hour: 0, Minute: 0 },
-    },
-    {
-      label: 'com.smash-os.memory-consolidation',
-      args: projectArgs('Read all files in ai/memory/. Consolidate duplicates and summarise entries older than 30 days into a single summary entry. Save the updated files. Act autonomously. Do not ask for clarification. If uncertain, use best judgment and log your reasoning.', scope.light),
-      workDir: projects[0]?.path || homedir(),
-      logFile: join(SMASH_BASE, projectName, 'logs', 'memory-consolidation.log'),
-      interval: { Hour: 1, Minute: 0 },
-    },
-    {
-      label: 'com.smash-os.nightly-audit',
-      args: [claudeExe, '--dangerously-skip-permissions', '--print', '--max-turns', '50', '--allowedTools', scope.medium, '/smash-os:audit'],
-      workDir: projects[0]?.path || homedir(),
-      logFile: join(SMASH_BASE, projectName, 'logs', 'nightly-audit.log'),
-      interval: { Hour: 2, Minute: 0 },
-    },
-    {
-      label: 'com.smash-os.dream-memory',
-      args: [claudeExe, '--dangerously-skip-permissions', '--print', '--max-turns', '20', '--allowedTools', scope.light, '/dream-memory'],
-      workDir: homedir(),
-      logFile: join(SKILL_LOGS, 'dream-memory.log'),
-      interval: { Hour: 4, Minute: 0 },
-    },
-    {
-      label: 'com.smash-os.weekly-improvement',
-      args: [claudeExe, '--dangerously-skip-permissions', '--print', '--max-turns', '50', '--allowedTools', scope.medium, '/smash-os:run weekly-improvement'],
-      workDir: projects[0]?.path || homedir(),
-      logFile: join(SMASH_BASE, projectName, 'logs', 'weekly-improvement.log'),
-      interval: { Weekday: 1, Hour: 5, Minute: 0 },
-    },
-    {
-      label: 'com.smash-os.skill-evolution',
-      args: [claudeExe, '--dangerously-skip-permissions', '--print', '--max-turns', '20', '--allowedTools', scope.light, '/skill-evolution'],
-      workDir: homedir(),
-      logFile: join(SKILL_LOGS, 'skill-evolution.log'),
-      interval: { Weekday: 1, Hour: 6, Minute: 0 },
-    },
-    {
-      label: 'com.smash-os.role-evolution',
-      args: [claudeExe, '--dangerously-skip-permissions', '--print', '--max-turns', '50', '--allowedTools', scope.medium, '/smash-os:role-improve'],
-      workDir: projects[0]?.path || homedir(),
-      logFile: join(SMASH_BASE, projectName, 'logs', 'role-evolution.log'),
-      interval: { Weekday: 1, Hour: 6, Minute: 30 },
-    },
-  ];
-
-  let written = 0;
-  for (const t of tasks) {
-    const plistPath = join(launchAgentsDir, `${t.label}.plist`);
-    writeFileSync(plistPath, plist(t.label, t.args, t.workDir, t.logFile, t.interval), 'utf8');
+  function writePlist(label, args, workDir, logFile, interval) {
+    const plistPath = join(launchAgentsDir, `${label}.plist`);
+    writeFileSync(plistPath, plist(label, args, workDir, logFile, interval), 'utf8');
     try {
       autoRun(`launchctl load "${plistPath}"`);
-      console.log('  ' + chalk.green('✓') + ' ' + t.label);
+      console.log('  ' + chalk.green('✓') + ' ' + label);
     } catch {
-      console.log('  ' + chalk.yellow('⚠') + ' ' + t.label + chalk.dim(' — written but not loaded (run launchctl load manually)'));
+      console.log('  ' + chalk.yellow('⚠') + ' ' + label + chalk.dim(' — written but not loaded (run launchctl load manually)'));
     }
-    written++;
+  }
+
+  // Skill tasks — not project-specific, always run from homedir (one plist each)
+  writePlist('com.smash-os.dream-memory',
+    [claudeExe, '--dangerously-skip-permissions', '--print', '--max-turns', '20', '--allowedTools', scope.light, '/dream-memory'],
+    homedir(), join(SKILL_LOGS, 'dream-memory.log'), { Hour: 4, Minute: 0 });
+  writePlist('com.smash-os.skill-evolution',
+    [claudeExe, '--dangerously-skip-permissions', '--print', '--max-turns', '20', '--allowedTools', scope.light, '/skill-evolution'],
+    homedir(), join(SKILL_LOGS, 'skill-evolution.log'), { Weekday: 1, Hour: 6, Minute: 0 });
+
+  // Project tasks — one plist per (task, project) so all registered projects get automation
+  let written = 2; // skill tasks already written above
+  for (const p of projects) {
+    const pn      = safePName(p.name);
+    const pLogDir = join(SMASH_BASE, p.name, 'logs');
+    mkdirSync(pLogDir, { recursive: true });
+    writePlist(`com.smash-os.lock-cleanup.${pn}`,
+      paArgs('Review .claude/scheduled_tasks.lock and any stale pipeline lock files. Delete any locks older than 2 hours and report what was cleaned. Act autonomously. Do not ask for clarification. If uncertain, use best judgment and log your reasoning.', scope.light),
+      p.path, join(pLogDir, 'lock-cleanup.log'), { Hour: 0, Minute: 0 });
+    writePlist(`com.smash-os.memory-consolidation.${pn}`,
+      paArgs('Read all files in .smashOS/memory/. Consolidate duplicates and summarise entries older than 30 days into a single summary entry. Save the updated files. Act autonomously. Do not ask for clarification. If uncertain, use best judgment and log your reasoning.', scope.light),
+      p.path, join(pLogDir, 'memory-consolidation.log'), { Hour: 1, Minute: 0 });
+    writePlist(`com.smash-os.nightly-audit.${pn}`,
+      [claudeExe, '--dangerously-skip-permissions', '--print', '--max-turns', '50', '--allowedTools', scope.medium, '/smash-os:audit'],
+      p.path, join(pLogDir, 'nightly-audit.log'), { Hour: 2, Minute: 0 });
+    writePlist(`com.smash-os.daily-log-report.${pn}`,
+      paArgs(`Scan all .log files in ${pLogDir}. For each log file identify errors, warnings, task failures, and notable events. Append a new dated section to .smashOS/todo/todo.md with: (1) status row per scheduled task showing ran/failed/skipped, (2) errors or issues requiring attention with context, (3) concrete next-step suggestions. Create .smashOS/todo/todo.md if it does not exist. Act autonomously. Do not ask for clarification. If uncertain, use best judgment and log your reasoning.`, scope.light),
+      p.path, join(pLogDir, 'daily-log-report.log'), { Hour: 3, Minute: 0 });
+    writePlist(`com.smash-os.weekly-improvement.${pn}`,
+      [claudeExe, '--dangerously-skip-permissions', '--print', '--max-turns', '50', '--allowedTools', scope.medium, '/smash-os:run weekly-improvement'],
+      p.path, join(pLogDir, 'weekly-improvement.log'), { Weekday: 1, Hour: 5, Minute: 0 });
+    writePlist(`com.smash-os.role-evolution.${pn}`,
+      [claudeExe, '--dangerously-skip-permissions', '--print', '--max-turns', '50', '--allowedTools', scope.medium, '/smash-os:role-improve'],
+      p.path, join(pLogDir, 'role-evolution.log'), { Weekday: 1, Hour: 6, Minute: 30 });
+    writePlist(`com.smash-os.harness-evolution.${pn}`,
+      [claudeExe, '--dangerously-skip-permissions', '--print', '--max-turns', '50', '--allowedTools', scope.medium, '/smash-os:evolve'],
+      p.path, join(pLogDir, 'harness-evolution.log'), { Weekday: 1, Hour: 7, Minute: 0 });
+    written += 7;
   }
 
   console.log('');
-  console.log(chalk.dim(`  ${written} LaunchAgents installed (hourly lock-cleanup · 1am memory · 2am audit · 4am dream-memory · Mon 5am improvement · Mon 6am skill-evolution · Mon 6:30am role-evolution)`));
+  console.log(chalk.dim(`  ${written} LaunchAgents installed (hourly lock-cleanup · 1am memory · 2am audit · 3am log-report · 4am dream-memory · Mon 5am improvement · Mon 6am skill-evolution · Mon 6:30am role-evolution · Mon 7am harness-evolution)`));
   console.log(chalk.dim(`  Logs: ${join(SMASH_BASE, projectName, 'logs')}`));
 }
 
@@ -438,31 +431,52 @@ function setupLinuxCron(projects, claudeExe, projectName) {
     medium: 'Read,Write,Edit,Bash,Glob,Grep',
   };
 
-  const projectDir  = projects[0]?.path || homedir();
-  const logDir      = join(SMASH_BASE, projectName, 'logs');
-  const C           = `"${claudeExe}" --dangerously-skip-permissions --print --max-turns 20 --allowedTools ${scope.light}`;
-  const C_MED       = `"${claudeExe}" --dangerously-skip-permissions --print --max-turns 50 --allowedTools ${scope.medium}`;
-
-  const entries = [
-    `0 * * * * cd "${projectDir}" && ${C} "Review .claude/scheduled_tasks.lock and any stale pipeline lock files. Delete any locks older than 2 hours. Act autonomously. Do not ask for clarification. If uncertain, use best judgment and log your reasoning." >> "${join(logDir, 'lock-cleanup.log')}" 2>&1`,
-    `0 1 * * * cd "${projectDir}" && ${C} "Read all files in ai/memory/. Consolidate duplicates and summarise entries older than 30 days. Save the updated files. Act autonomously. Do not ask for clarification. If uncertain, use best judgment and log your reasoning." >> "${join(logDir, 'memory-consolidation.log')}" 2>&1`,
-    `0 2 * * * cd "${projectDir}" && ${C_MED} "/smash-os:audit" >> "${join(logDir, 'nightly-audit.log')}" 2>&1`,
+  const primaryLogDir = join(SMASH_BASE, projectName, 'logs');
+  const C             = `"${claudeExe}" --dangerously-skip-permissions --print --max-turns 20 --allowedTools ${scope.light}`;
+  const C_MED         = `"${claudeExe}" --dangerously-skip-permissions --print --max-turns 50 --allowedTools ${scope.medium}`;
+
+  // Build per-project entries (one set per registered project)
+  const entries = [];
+  for (const p of projects) {
+    const pDir    = p.path;
+    const pLogDir = join(SMASH_BASE, p.name, 'logs');
+    mkdirSync(pLogDir, { recursive: true });
+    entries.push(
+      `0 * * * * cd "${pDir}" && ${C} "Review .claude/scheduled_tasks.lock and any stale pipeline lock files. Delete any locks older than 2 hours. Act autonomously. Do not ask for clarification. If uncertain, use best judgment and log your reasoning." >> "${join(pLogDir, 'lock-cleanup.log')}" 2>&1`,
+      `0 1 * * * cd "${pDir}" && ${C} "Read all files in .smashOS/memory/. Consolidate duplicates and summarise entries older than 30 days. Save the updated files. Act autonomously. Do not ask for clarification. If uncertain, use best judgment and log your reasoning." >> "${join(pLogDir, 'memory-consolidation.log')}" 2>&1`,
+      `0 2 * * * cd "${pDir}" && ${C_MED} "/smash-os:audit" >> "${join(pLogDir, 'nightly-audit.log')}" 2>&1`,
+      `0 5 * * 1 cd "${pDir}" && ${C_MED} "/smash-os:run weekly-improvement" >> "${join(pLogDir, 'weekly-improvement.log')}" 2>&1`,
+      `30 6 * * 1 cd "${pDir}" && ${C_MED} "/smash-os:role-improve" >> "${join(pLogDir, 'role-evolution.log')}" 2>&1`,
+      `0 7 * * 1 cd "${pDir}" && ${C_MED} "/smash-os:evolve" >> "${join(pLogDir, 'harness-evolution.log')}" 2>&1`,
+      `0 3 * * * cd "${pDir}" && ${C} "Scan all .log files in ${pLogDir}. For each log file identify errors, warnings, task failures, and notable events. Append a new dated section to .smashOS/todo/todo.md with: (1) status row per scheduled task showing ran/failed/skipped, (2) errors or issues requiring attention with context, (3) concrete next-step suggestions. Create .smashOS/todo/todo.md if it does not exist. Act autonomously. Do not ask for clarification. If uncertain, use best judgment and log your reasoning." >> "${join(pLogDir, 'daily-log-report.log')}" 2>&1`,
+    );
+  }
+  // Skill tasks (not project-specific — always run from homedir)
+  entries.push(
     `0 4 * * * cd "${homedir()}" && ${C} "/dream-memory" >> "${join(SKILL_LOGS, 'dream-memory.log')}" 2>&1`,
-    `0 5 * * 1 cd "${projectDir}" && ${C_MED} "/smash-os:run weekly-improvement" >> "${join(logDir, 'weekly-improvement.log')}" 2>&1`,
     `0 6 * * 1 cd "${homedir()}" && ${C} "/skill-evolution" >> "${join(SKILL_LOGS, 'skill-evolution.log')}" 2>&1`,
-    `30 6 * * 1 cd "${projectDir}" && ${C_MED} "/smash-os:role-improve" >> "${join(logDir, 'role-evolution.log')}" 2>&1`,
-  ];
+  );
 
   const smashMarker = '# SmashOS — managed by smash-os-install';
   let currentCrontab = '';
   try { currentCrontab = autoRun('crontab -l'); } catch { /* no existing crontab */ }
 
-  // Strip existing SmashOS block
+  // Strip existing SmashOS block (find end dynamically to handle variable entry counts)
   const lines = currentCrontab.split('\n');
   const startIdx = lines.findIndex(l => l === smashMarker);
-  const filteredLines = startIdx >= 0
-    ? lines.filter((_, i) => i < startIdx || i > startIdx + entries.length)
-    : lines;
+  let filteredLines;
+  if (startIdx >= 0) {
+    let endIdx = lines.length;
+    for (let i = startIdx + 1; i < lines.length; i++) {
+      if (lines[i].trim() === '' || (!lines[i].startsWith('#') && !lines[i].includes('smash-os') && lines[i].trim() !== '')) {
+        endIdx = i - 1;
+        break;
+      }
+    }
+    filteredLines = lines.filter((_, i) => i < startIdx || i > endIdx);
+  } else {
+    filteredLines = lines;
+  }
 
   const newCrontab = [...filteredLines.filter(l => l !== ''), '', smashMarker, ...entries, ''].join('\n');
 
@@ -476,8 +490,8 @@ function setupLinuxCron(projects, claudeExe, projectName) {
   }
 
   console.log('');
-  console.log(chalk.dim('  Schedule: hourly lock-cleanup · 1am memory · 2am audit · 4am dream-memory · Mon 5am improvement · Mon 6am skill-evolution · Mon 6:30am role-evolution'));
-  console.log(chalk.dim(`  Logs: ${logDir}`));
+  console.log(chalk.dim('  Schedule: hourly lock-cleanup · 1am memory · 2am audit · 3am log-report · 4am dream-memory · Mon 5am improvement · Mon 6am skill-evolution · Mon 6:30am role-evolution · Mon 7am harness-evolution'));
+  console.log(chalk.dim(`  Logs: ${primaryLogDir}`));
 }
 
 // ─── Platform-agnostic automation dispatcher ──────────────────────────────────
@@ -542,12 +556,15 @@ async function runUpgrade() {
   const { toUpdate } = await prompts({
     type: 'multiselect',
     name: 'toUpdate',
-    message: 'What to update? (ai/memory/ and ai/context/ are never touched)',
+    message: 'What to update? (.smashOS/memory/ and .smashOS/context/ are never touched)',
     choices: [
       { title: 'Agents   (.claude/agents/)       — sub-agent definitions', value: 'agents', selected: true },
       { title: 'Hooks    (.claude/hooks/)         — boot + sync hooks', value: 'hooks', selected: true },
       { title: 'Skills   (~/.claude/skills/)      — slash commands', value: 'skills', selected: true },
-      { title: 'Roles    (ai/roles/)              — role definitions', value: 'roles', selected: false },
+      { title: 'Docs      (.smashOS/docs/)       — SmashOS documentation', value: 'docs', selected: true },
+      { title: 'Workflows (.smashOS/workflows/) — pipeline definitions', value: 'workflows', selected: true },
+      { title: 'Roles     (.smashOS/roles/)     — role definitions', value: 'roles', selected: false },
+      { title: 'CLAUDE.md                        — patch missing sections (non-destructive)', value: 'claudemd', selected: true },
     ],
     hint: '← Space to toggle, Enter to confirm',
   }, { onCancel: () => { console.log(chalk.yellow('\n  Upgrade cancelled.')); process.exit(0); } });
@@ -592,17 +609,73 @@ async function runUpgrade() {
     }
   }
 
+  if (toUpdate.includes('docs')) {
+    console.log(chalk.dim('  Updating docs...'));
+    for (const [relPath, content] of Object.entries(osDocsFiles)) {
+      writeFile(relPath, content);
+      console.log('  ' + chalk.green('✓') + ' ' + chalk.white(relPath));
+    }
+  }
+
+  // Detect frontend project from installed files (avoids hardcoding isFrontend=false)
+  const isFrontend = existsSync(join(cwd, '.smashOS', 'roles', 'frontend-developer.md'));
+
+  if (toUpdate.includes('workflows')) {
+    console.log(chalk.dim('  Updating workflows...'));
+    const workflowFiles = getAiFiles(basename(cwd), 'TypeScript', isFrontend, '', '', '');
+    for (const [relPath, content] of Object.entries(workflowFiles)) {
+      if (relPath.startsWith('.smashOS/workflows/')) {
+        writeFile(relPath, content);
+        console.log('  ' + chalk.green('✓') + ' ' + chalk.white(relPath));
+      }
+    }
+  }
+
   if (toUpdate.includes('roles')) {
     console.log(chalk.dim('  Updating AI roles...'));
-    const roleFiles = getAiFiles(basename(cwd), 'TypeScript', false, '', '', '');
+    const roleFiles = getAiFiles(basename(cwd), 'TypeScript', isFrontend, '', '', '');
     for (const [relPath, content] of Object.entries(roleFiles)) {
-      if (relPath.startsWith('ai/roles/')) {
+      if (relPath.startsWith('.smashOS/roles/')) {
         writeFile(relPath, content);
         console.log('  ' + chalk.green('✓') + ' ' + chalk.white(relPath));
       }
     }
   }
 
+  if (toUpdate.includes('claudemd')) {
+    const claudeMdPath = join(cwd, 'CLAUDE.md');
+    if (existsSync(claudeMdPath)) {
+      const existing = readFileSync(claudeMdPath, 'utf8');
+      if (!existing.includes('## Agent Dispatch Rules')) {
+        const agentDispatchSection = `
+## Agent Dispatch Rules
+
+**Fresh agents** (use \`subagent_type\`): any agent that writes files, produces a verdict, or gates the pipeline.
+**Forks** (no \`subagent_type\`): noisy intermediate work — only the structured summary returns to main context.
+
+**Parallel dispatch:**
+- Independent read-only agents: fire in a single message (same Agent tool call batch)
+- Write agents on non-overlapping files: dispatch with \`isolation: "worktree"\`
+- Maximum 3 parallel agents at once; merge before proceeding
+
+**Background agents:**
+- Long-running read-only work (test suite, large scans): use \`run_in_background: true\`
+- Collect background results before the synthesis/reporter step
+
+**Brief discipline:** Write a 3-5 sentence brief per agent — what to do, exact file paths, output schema, pipeline context. Do NOT pass a context dump.
+
+`;
+        const patched = existing.replace(/(\n## Tech Stack\b)/, `${agentDispatchSection}$1`);
+        writeFileSync(claudeMdPath, patched, 'utf8');
+        console.log('  ' + chalk.green('✓') + ' CLAUDE.md' + chalk.dim(' (Agent Dispatch Rules patched in)'));
+      } else {
+        console.log('  ' + chalk.dim('·') + ' CLAUDE.md already has Agent Dispatch Rules — skipped');
+      }
+    } else {
+      console.log('  ' + chalk.yellow('⚠') + ' CLAUDE.md not found — skipped');
+    }
+  }
+
   writeFile('.smash-os-version', SMASH_VERSION + '\n');
   console.log('');
   console.log(chalk.bold.green(`  ✓ SmashOS upgraded to v${SMASH_VERSION}`));
@@ -616,14 +689,37 @@ async function runVerify() {
   const checks = [
     ['.smash-os-mode', 'mode flag'],
     ['CLAUDE.md', 'CLAUDE.md'],
-    ['ai/orchestrator.md', 'orchestrator'],
-    ['ai/context/product.md', 'product context'],
-    ['ai/context/architecture.md', 'architecture context'],
-    ['ai/roles/staff-engineer.md', 'Staff Engineer role'],
-    ['ai/roles/senior-developer.md', 'Senior Developer role'],
-    ['ai/roles/qa-engineer.md', 'QA Engineer role'],
+    ['.smashOS/orchestrator.md', 'orchestrator'],
+    ['.smashOS/context/product.md', 'product context'],
+    ['.smashOS/context/architecture.md', 'architecture context'],
+    ['.smashOS/context/coding-standards.md', 'coding standards'],
+    ['.smashOS/context/evaluation-rubrics.md', 'evaluation rubrics'],
+    ['.smashOS/roles/staff-engineer.md', 'Staff Engineer role'],
+    ['.smashOS/roles/senior-developer.md', 'Senior Developer role'],
+    ['.smashOS/roles/qa-engineer.md', 'QA Engineer role'],
+    ['.smashOS/roles/security-engineer.md', 'Security Engineer role'],
+    ['.smashOS/roles/product-manager.md', 'Product Manager role'],
+    ['.smashOS/roles/devops-engineer.md', 'DevOps Engineer role'],
+    ['.smashOS/workflows/feature.md', 'feature workflow'],
+    ['.smashOS/workflows/harness-evolution.md', 'harness-evolution workflow'],
+    ['.smashOS/docs/01-quickstart.md', 'docs'],
+    ['.claude/agents/senior-dev-implementation-planner.md', 'senior-dev-implementation-planner agent'],
+    ['.claude/agents/qa-test-runner.md', 'qa-test-runner agent'],
+    ['.claude/agents/senior-dev-code-writer.md', 'senior-dev-code-writer agent'],
+    ['.claude/agents/senior-dev-test-writer.md', 'senior-dev-test-writer agent'],
+    ['.claude/agents/devops-deploy-runner.md', 'devops-deploy-runner agent'],
+    ['.claude/agents/devops-smoke-tester.md', 'devops-smoke-tester agent'],
+    ['.smashOS/context/hard-rules.md', 'hard rules'],
+    ['.smashOS/context/memory-schema.md', 'memory schema'],
+    ['.smashOS/context/pipeline-continuation.md', 'pipeline continuation'],
+    ['.smashOS/context/role-protocols.md', 'role protocols'],
+    ['.smashOS/workflows/bug-fix.md', 'bug-fix workflow'],
+    ['.smashOS/workflows/weekly-improvement.md', 'weekly-improvement workflow'],
+    ['.smashOS/roles/ui-ux-designer.md', 'UI/UX Designer role'],
+    ['.smashOS/roles/frontend-developer.md', 'Frontend Developer role'],
     ['.claude/settings.json', 'settings.json'],
     ['.claude/hooks/smash-os-boot.mjs', 'boot hook'],
+    ['.claude/hooks/smash-os-sync.mjs', 'sync hook'],
   ];
   let passed = 0;
   let failed = 0;
@@ -661,7 +757,7 @@ async function runUninstall() {
   console.log(chalk.bold('  SmashOS Uninstall'));
   console.log('');
   console.log(chalk.dim('  This will remove all SmashOS harness files from this project.'));
-  console.log(chalk.yellow('  ⚠  ai/memory/ and ai/context/ will be preserved by default.'));
+  console.log(chalk.yellow('  ⚠  .smashOS/memory/ and .smashOS/context/ will be preserved by default.'));
   console.log('');
 
   const { confirm } = await prompts({
@@ -679,7 +775,7 @@ async function runUninstall() {
   const { removeUserData } = await prompts({
     type: 'confirm',
     name: 'removeUserData',
-    message: 'Also delete ai/memory/ and ai/context/? (your project notes — NOT recommended)',
+    message: 'Also delete .smashOS/memory/ and .smashOS/context/? (your project notes — NOT recommended)',
     initial: false,
   }, { onCancel: () => ({ removeUserData: false }) });
 
@@ -699,18 +795,29 @@ async function runUninstall() {
   remove('CLAUDE.md',         'CLAUDE.md');
 
   // Harness directories (never touch user content by default)
-  remove('.claude-state',              '.claude-state/');
   remove('.planning',                  '.planning/');
-  remove('ai/orchestrator.md',         'ai/orchestrator.md');
-  remove('ai/roles',                   'ai/roles/');
-  remove('ai/workflows',               'ai/workflows/');
+  remove('.smashOS/orchestrator.md',         '.smashOS/orchestrator.md');
+  remove('.smashOS/roles',                   '.smashOS/roles/');
+  remove('.smashOS/workflows',               '.smashOS/workflows/');
+  remove('.smashOS/docs',                    '.smashOS/docs/');
   remove('.claude/agents',             '.claude/agents/');
   remove('.claude/hooks/smash-os-boot.mjs', '.claude/hooks/smash-os-boot.mjs');
   remove('.claude/hooks/smash-os-sync.mjs', '.claude/hooks/smash-os-sync.mjs');
 
   if (removeUserData) {
-    remove('ai/memory',  'ai/memory/');
-    remove('ai/context', 'ai/context/');
+    remove('.claude-state',    '.claude-state/');
+    remove('.smashOS/memory',  '.smashOS/memory/');
+    remove('.smashOS/context', '.smashOS/context/');
+    remove('.smashOS/todo',    '.smashOS/todo/');
+  }
+
+  // Remove globally-installed skills
+  for (const skillName of Object.keys(localSkills)) {
+    const skillDir = join(homedir(), '.claude', 'skills', skillName);
+    if (existsSync(skillDir)) {
+      rmSync(skillDir, { recursive: true, force: true });
+      console.log('  ' + chalk.red('–') + ' ' + chalk.white(`~/.claude/skills/${skillName}/`));
+    }
   }
 
   // Scrub smash-os hooks from .claude/settings.json
@@ -721,8 +828,10 @@ async function runUninstall() {
       if (s.hooks) {
         for (const event of Object.keys(s.hooks)) {
           s.hooks[event] = (s.hooks[event] || []).filter(h => {
-            const cmd = typeof h === 'string' ? h : (h.command || '');
-            return !cmd.includes('smash-os');
+            if (typeof h === 'string') return !h.includes('smash-os');
+            if (h.command) return !h.command.includes('smash-os');
+            if (h.hooks) return !h.hooks.some(inner => inner.command?.includes('smash-os'));
+            return true;
           });
           if (s.hooks[event].length === 0) delete s.hooks[event];
         }
@@ -748,15 +857,13 @@ async function runUninstall() {
   // macOS: unload and remove LaunchAgents
   if (process.platform === 'darwin') {
     const laDir = join(homedir(), 'Library', 'LaunchAgents');
-    const smashPlists = ['lock-cleanup', 'memory-consolidation', 'nightly-audit', 'docs-regeneration',
-      'weekly-improvement', 'dream-memory', 'skill-evolution', 'role-evolution'];
-    for (const name of smashPlists) {
-      const p = join(laDir, `com.smash-os.${name}.plist`);
-      if (existsSync(p)) {
-        try { execSync(`launchctl unload "${p}"`, { stdio: 'pipe' }); } catch { /* not loaded */ }
-        rmSync(p, { force: true });
-        console.log('  ' + chalk.red('–') + ` com.smash-os.${name}.plist`);
-      }
+    let smashPlists = [];
+    try { smashPlists = readdirSync(laDir).filter(f => f.startsWith('com.smash-os.') && f.endsWith('.plist')); } catch { /* dir not found */ }
+    for (const plistFile of smashPlists) {
+      const p = join(laDir, plistFile);
+      try { execSync(`launchctl unload "${p}"`, { stdio: 'pipe' }); } catch { /* not loaded */ }
+      rmSync(p, { force: true });
+      console.log('  ' + chalk.red('–') + ` ${plistFile}`);
     }
   }
 
@@ -768,7 +875,15 @@ async function runUninstall() {
       if (current.includes(marker)) {
         const lines = current.split('\n');
         const start = lines.findIndex(l => l === marker);
-        const filtered = lines.filter((_, i) => i < start || i > start + 10).filter(l => l !== '');
+        // Find block end dynamically: next blank line or end of file after the marker
+        let end = lines.length;
+        for (let i = start + 1; i < lines.length; i++) {
+          if (lines[i].trim() === '' || (!lines[i].startsWith('#') && !lines[i].includes('smash-os') && lines[i].trim() !== '')) {
+            end = i - 1;
+            break;
+          }
+        }
+        const filtered = lines.filter((_, i) => i < start || i > end).filter(l => l !== '');
         execSync('crontab -', { input: filtered.join('\n') + '\n', encoding: 'utf8', stdio: ['pipe', 'pipe', 'pipe'] });
         console.log('  ' + chalk.red('–') + ' Linux crontab: SmashOS entries removed');
       }
@@ -1009,6 +1124,14 @@ if (isFrontend) {
   }
 }
 
+console.log('');
+console.log(chalk.dim('  Docs (.smashOS/docs/):'));
+for (const [relPath, content] of Object.entries(osDocsFiles)) {
+  writeFile(relPath, content);
+  console.log('  ' + chalk.green('✓') + ' ' + chalk.white(relPath));
+  written++;
+}
+
 writeFile('.claude/hooks/smash-os-boot.mjs', bootHook);
 console.log('  ' + chalk.green('✓') + ' ' + chalk.white('.claude/hooks/smash-os-boot.mjs'));
 written++;
@@ -1049,7 +1172,7 @@ console.log('  ' + chalk.white('/smash-os:status') + chalk.dim('
 console.log('  ' + chalk.white('/smash-os:doctor') + chalk.dim('              — diagnose any missing files'));
 console.log('  ' + chalk.white('/smash-os:run feature "Add X"') + chalk.dim('  — run your first pipeline'));
 console.log('');
-console.log(chalk.dim('  Next: fill in ai/context/ with your project details.'));
+console.log(chalk.dim('  Next: fill in .smashOS/context/ with your project details.'));
 console.log('');
 
 // ── Guided tour opt-in ────────────────────────────────────────────────────────
@@ -1072,9 +1195,9 @@ if (wantsTour) {
   console.log(chalk.dim('     Shows your harness state, recent decisions, and pipeline health.'));
   console.log('');
   console.log('  3. Fill in your project context:');
-  console.log('     ' + chalk.white('ai/context/product.md') + chalk.dim('          ← what your product does'));
-  console.log('     ' + chalk.white('ai/context/architecture.md') + chalk.dim('     ← your tech stack and key decisions'));
-  console.log('     ' + chalk.white('ai/context/coding-standards.md') + chalk.dim('  ← your style rules'));
+  console.log('     ' + chalk.white('.smashOS/context/product.md') + chalk.dim('          ← what your product does'));
+  console.log('     ' + chalk.white('.smashOS/context/architecture.md') + chalk.dim('     ← your tech stack and key decisions'));
+  console.log('     ' + chalk.white('.smashOS/context/coding-standards.md') + chalk.dim('  ← your style rules'));
   console.log('');
   console.log('  4. Run your first pipeline:');
   console.log('     ' + chalk.white('/smash-os:run feature "Add a health check endpoint"'));
@@ -1089,5 +1212,3 @@ if (wantsTour) {
 
 if (setupAutomation) runAutomation(cwd);
 
-console.log(chalk.dim('  Optional: run /smash-os:setup-mcps to add MCP integrations (context7, playwright, chrome-devtools, etc.)'));
-console.log('');