[sandwichlegend]

Why

Try edit-preserving updates in a browser terminal without letting a failed fixture setup reuse the operator's home.

What changed

• Give every fixture a new home under /tmp inside Bubblewrap. Validate HOME and every config directory before any tool or installer runs.
• Refuse reused fixture targets and missing env files. Check each shell, fake agent, merge helper, server, and verifier entry point.
• Preserve synchronous session reservations while preparing fresh scratch folders. Keep the existing loopback, tailnet authentication, limits, and expiry checks.
• Include feat(install): keep edits to installed skills across updates #21 through ordinary merges, with real CLI listing and replacement contracts and late-edit preservation before Codex marketplace upgrade.

Scope

Known remaining failure: a late edit injected inside the Codex command wrapper after the final installer recheck is still lost during marketplace upgrade. The new check protects edits present before it runs. This race remains unresolved.

Linux, disposable fixtures, fake agents, and private tailnet use. Reflect making a backup before editing a skill, class_policy, and splitting install.sh remain separate follow-ups.

Blast Radius

Sandbox bootstrap paths, generated shell startup, and fixture helpers. Host homes remain absent from the namespace; the checkout and system mounts stay read only.

Verification

• npm test passes all 21 terminal scenarios, fake merges, file and backup assertions, isolation, unsafe-home rejection, missing-env rejection, and HTTP checks.
• Installer fixtures pass under GNU tools, Bash 3.2, and BusyBox. Folder replacement contracts match saved real CLI captures.
• Repository and docs checks and all 82 poteto-mode Bun tests pass.
• Real Claude, Codex, and OpenCode pass the guarded install, edit, update, remove, and reinstall lifecycle. Codex remove deletes its cache; update backups remain available.

Lines not from upstream

• p3stack/skills/reflect/SKILL.md: inherited from feat(install): keep edits to installed skills across updates #21. Reflect edits installed p3stack skills in place after creating an install record, while other plugins retain the personal-copy rule.

🤖 Generated with Claude Code