fix(installer): recover update and preserve brownfield config

[rafaelscosta]

Summary

• recover aiox update by syncing the newly installed package .aiox-core before validation
• preserve mutable brownfield project files during install/update, including settings/config/env/MEMORY flows
• enforce the wizard dry-run guard and add aiox validate --no-signature for documented recovery scenarios

Validation

• npm run lint
• npm run typecheck
• npm test
• manual smoke tests previously completed for:
  • brownfield install --force --dry-run --quiet with no writes
  • preservation of .claude/settings.json, .aiox-core/core-config.yaml, .env.example, and development/agents/dev/MEMORY.md
  • published baseline flow 5.0.4 -> 5.0.7
  • customized project update preserving brownfield MEMORY.md

Scope Notes

• this PR contains only the isolated installer recovery commit cherry-picked from a17eab94
• unrelated dirty workspace changes were intentionally excluded via a clean publication worktree
• the .minisig packaging/publish pipeline concern is a separate release issue and is not addressed by this patch

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
aiox-core	Ready	Preview, Comment	Apr 22, 2026 9:26pm

[coderabbitai]

Important

Review skipped

Draft detected.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro

Run ID: 39f32fec-d3ea-459c-a9a6-35b88339525a

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch release/5.0.8-installer-recovery

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[github-actions]

📊 Coverage Report

Coverage report not available

📈 Full coverage report available in Codecov

---

Generated by PR Automation (Story 6.1)