Release v3.2.4 — install.sh data-loss fix

Guard process-layout content dirs in the legacyDeletions pass: non-empty
reports/ and references/ dirs under process/ are now deferred (preserved)
for vc-update to migrate, instead of being rm -rf'd by the deterministic
installer. Deprecated harness dirs and dead files are still removed.

Co-Authored-By: Claude Haiku 4.5 <noreply@anthropic.com>

Author: withkynam

CHANGELOG.md

@@ -2,6 +2,12 @@
 
 All notable changes to vibecode-pro-max-kit are documented in this file.
 
+## [3.2.4] - 2026-06-20
+
+### Fixed
+
+- **Data-loss fix in `install.sh`:** the legacyDeletions pass `rm -rf`'d every listed directory unconditionally, including process-layout content dirs (`process/general-plans/reports`, `process/general-plans/references`, and the `_seeds` equivalents). Because `install.sh` is deterministic (no agent) it cannot run the adaptive safe-migration that `vc-update` Part D performs — so on the documented `curl install.sh | bash` upgrade path, a project with real reports/references content under those dirs would have that content **permanently destroyed** before `vc-update` ever ran. `install.sh` now guards process-layout content dirs: any non-empty `reports/` or `references/` directory under `process/` is **deferred** (preserved, not deleted) with a notice to run `vc-update`, which migrates the contents into task folders before removing the now-empty dir. Deprecated harness dirs (e.g. `.claude/skills/vc-*`) and dead files carry no user content and are still removed. Verified against a real v2.4.1 project: 15 real report/reference files preserved, 0 user-content loss, deprecated harness still cleaned up.
+
 ## [3.2.3] - 2026-06-20
 
 ### Fixed

README.md

@@ -88,7 +88,7 @@
   <a href="LICENSE"><img src="https://img.shields.io/github/license/withkynam/vibecode-pro-max-kit" alt="License"></a>
   <a href="https://github.com/withkynam/vibecode-pro-max-kit/graphs/contributors"><img src="https://img.shields.io/github/contributors/withkynam/vibecode-pro-max-kit" alt="Contributors"></a>
   <a href="https://github.com/withkynam/vibecode-pro-max-kit/actions/workflows/validate.yml"><img src="https://img.shields.io/github/actions/workflow/status/withkynam/vibecode-pro-max-kit/validate.yml" alt="CI"></a>
-  <a href="CHANGELOG.md"><img src="https://img.shields.io/badge/version-3.2.3-2EA043" alt="Version"></a>
+  <a href="CHANGELOG.md"><img src="https://img.shields.io/badge/version-3.2.4-2EA043" alt="Version"></a>
   <img src="https://img.shields.io/badge/agents-15-orange" alt="Agents">
   <img src="https://img.shields.io/badge/skills-33-purple" alt="Skills">
   <img src="https://img.shields.io/badge/hooks-10-blue" alt="Hooks">

install.sh

@@ -339,9 +339,29 @@ done <<< "$SYMLINKS_JSON"
 if [ -n "$LEGACY_DELETIONS" ]; then
   echo "  Removing deprecated paths (legacyDeletions)..."
   DELETED_DIRS=()
+  DEFERRED_LAYOUT=()
   while IFS= read -r legacy_path; do
     [ -z "$legacy_path" ] && continue
     if [ -d "$legacy_path" ]; then
+      # ── Content-safety guard ──────────────────────────────────────────────
+      # install.sh is deterministic (no agent) and cannot run the adaptive
+      # safe-migration that vc-update Part D performs. A process-layout content
+      # dir (reports/ or references/ under process/) may hold real user files
+      # (plans, reports, references). NEVER rm -rf such a dir when it is
+      # non-empty — defer it to vc-update, which migrates the contents into
+      # task folders BEFORE removing the empty dir. Deprecated harness dirs
+      # (e.g. .claude/skills/vc-*) carry no user content and are still removed.
+      base=$(basename "$legacy_path")
+      case "$legacy_path" in
+        process/*)
+          if { [ "$base" = "reports" ] || [ "$base" = "references" ]; } \
+             && [ -n "$(find "$legacy_path" -type f -print -quit 2>/dev/null)" ]; then
+            echo "    deferred (has content — vc-update will migrate then remove): $legacy_path"
+            DEFERRED_LAYOUT+=("$legacy_path")
+            continue
+          fi
+          ;;
+      esac
       rm -rf "$legacy_path"
       echo "    removed dir: $legacy_path"
       DELETED_DIRS+=("$legacy_path")
@@ -359,6 +379,9 @@ if [ -n "$LEGACY_DELETIONS" ]; then
       [ -d "$parent" ] && rmdir "$parent" 2>/dev/null || true
     done
   done
+  if [ "${#DEFERRED_LAYOUT[@]}" -gt 0 ]; then
+    echo "  ${#DEFERRED_LAYOUT[@]} legacy content dir(s) preserved (have files) — run vc-update to migrate them into task folders."
+  fi
 fi
 
 # ══════════════════════════════════════════════════════

vc-manifest.json

@@ -1,5 +1,5 @@
 {
-  "version": "3.2.3",
+  "version": "3.2.4",
   "include": [
     ".claude/agents/**",
     ".claude/skills/**",