Release: UI improvements, deb packaging, MSIX pipeline fixes

.clinerules

@@ -0,0 +1,23 @@
+# Cline Rules
+
+## ⚠️ PRIORITY ORDER — NON-NEGOTIABLE ⚠️
+
+**Speed is never more important than following workspace procedures.**
+
+Before doing ANY work on ANY user request, you MUST complete these steps in order:
+
+1. **Read `AGENTS-README-FIRST.yaml`** in the repo root for the current API key and endpoints
+2. **GET `/health`** to verify the MCP server is running
+3. **POST `/mcp/sessionlog`** with your session entry — do NOT proceed until this succeeds
+4. **GET `/mcp/sessionlog?limit=5`** to review recent session history for context
+5. **GET `/mcp/todo`** to check current tasks
+6. **THEN** begin working on the user's request
+
+On EVERY subsequent user message:
+1. POST an updated session log entry BEFORE starting work
+2. Complete the user's request
+3. POST the final session log with results, actions taken, and files modified
+
+**If you skip any of these steps, STOP and go back and do them before continuing.**
+Session logging is not optional, not deferred, and not secondary to the task.
+Failure to maintain the session log is a compliance violation.

.github/copilot-instructions.md

@@ -1,5 +1,7 @@
 # GitHub Copilot Instructions for Remote Agent
 
+For specific operational instructions (session bootstrap, session log turn workflow, and helper command sequence), follow `AGENTS-README-FIRST.yaml`.
+
 ## Development Branch Strategy
 
 **IMPORTANT: Always work in the `develop` branch for all development tasks.**
@@ -22,6 +24,17 @@
 
 ## Code Quality Standards
 
+### UI Buttons — CQRS Required
+
+**Every button added to the Desktop UI must be backed by a CQRS request/handler pair with complete tests.**
+
+- Create `*Request` in `src/RemoteAgent.Desktop/Requests/` and `*Handler` in `src/RemoteAgent.Desktop/Handlers/`
+- Register the handler as a transient in `App.axaml.cs` `ConfigureServices`
+- The ViewModel command **must dispatch via `IRequestDispatcher`** — no handler logic in the ViewModel
+- Add `*HandlerTests.cs` in `tests/RemoteAgent.Desktop.UiTests/Handlers/` covering success, failure, and edge cases
+- Add a `Null*` stub for any new infrastructure interface to `SharedHandlerTestStubs.cs`
+- See `docs/REPOSITORY_RULES.md` for full details and the `CopyStatusLogHandler` as a reference implementation
+
 ### Warnings as Errors
 
 - All warnings are treated as errors (see `Directory.Build.props`)
@@ -101,3 +114,5 @@ Before completing any task:
 ✅ **Sign commits**
 ✅ **Run tests before completing tasks**
 ✅ **Use bash only in workflows (no Python)**
+✅ **Every UI button → CQRS request/handler + complete tests**
+

.github/workflows/build-deploy.yml

@@ -197,6 +197,79 @@ jobs:
           dotnet restore RemoteAgent.Desktop.csproj --configfile ../../NuGet.Config -v minimal -p:TargetFramework=net9.0 -p:TargetFrameworks=net9.0
           dotnet build RemoteAgent.Desktop.csproj -c Release --no-restore -v minimal -p:TargetFramework=net9.0 -p:TargetFrameworks=net9.0
 
+  build-msix:
+    name: Build MSIX (Windows)
+    runs-on: windows-latest
+    needs: [detect, build]
+    if: needs.detect.outputs.code == 'true'
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+          submodules: recursive
+
+      - name: Setup .NET 10
+        uses: actions/setup-dotnet@v4
+        with:
+          dotnet-version: '10.0.x'
+
+      - name: Setup .NET 9 (desktop)
+        uses: actions/setup-dotnet@v4
+        with:
+          dotnet-version: '9.0.x'
+
+      - name: Build MSIX package
+        shell: pwsh
+        env:
+          VERSION: ${{ needs.build.outputs.semver }}
+        run: |
+          .\scripts\package-msix.ps1 -Version $env:VERSION -Force
+
+      - name: Upload MSIX artifact
+        uses: actions/upload-artifact@v4
+        with:
+          name: msix-${{ needs.build.outputs.major_minor_patch }}
+          path: |
+            artifacts/*.msix
+            artifacts/*.cer
+          if-no-files-found: error
+          retention-days: 30
+
+  build-deb:
+    name: Build .deb (Linux)
+    runs-on: ubuntu-latest
+    needs: [detect, build]
+    if: needs.detect.outputs.code == 'true'
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Setup .NET 10
+        uses: actions/setup-dotnet@v4
+        with:
+          dotnet-version: '10.0.x'
+
+      - name: Setup .NET 9 (desktop)
+        uses: actions/setup-dotnet@v4
+        with:
+          dotnet-version: '9.0.x'
+
+      - name: Build .deb packages
+        env:
+          VERSION: ${{ needs.build.outputs.semver }}
+        run: |
+          chmod +x scripts/package-deb.sh
+          ./scripts/package-deb.sh --version "$VERSION"
+
+      - name: Upload .deb artifacts
+        uses: actions/upload-artifact@v4
+        with:
+          name: deb-${{ needs.build.outputs.major_minor_patch }}
+          path: artifacts/*.deb
+          if-no-files-found: error
+          retention-days: 30
+
   android:
     name: Build Android APK
     runs-on: ubuntu-latest
@@ -273,7 +346,7 @@ jobs:
   release-beta:
     name: Create beta release
     runs-on: ubuntu-latest
-    needs: [build, desktop-build, android, docker]
+    needs: [build, desktop-build, android, docker, build-msix, build-deb]
     permissions:
       contents: write
     steps:
@@ -313,14 +386,30 @@ jobs:
         with:
           name: android-apk
 
+      - name: Download MSIX artifacts
+        uses: actions/download-artifact@v4
+        with:
+          name: msix-${{ needs.build.outputs.major_minor_patch }}
+          path: release-assets/msix
+
+      - name: Download .deb artifacts
+        uses: actions/download-artifact@v4
+        with:
+          name: deb-${{ needs.build.outputs.major_minor_patch }}
+          path: release-assets/deb
+
       - name: Create beta release
         uses: softprops/action-gh-release@v2
         with:
           tag_name: v${{ steps.version.outputs.version }}-beta.${{ github.run_number }}
           name: Beta v${{ steps.version.outputs.version }} (build ${{ github.run_number }})
           prerelease: true
           body_path: release-notes.md
-          files: com.companyname.remoteagent.app-Signed.apk
+          files: |
+            com.companyname.remoteagent.app-Signed.apk
+            release-assets/msix/*.msix
+            release-assets/msix/*.cer
+            release-assets/deb/*.deb
 
   docker:
     name: Build and push Docker image

.gitmodules

@@ -0,0 +1,3 @@
+[submodule "scripts/MsixTools"]
+	path = scripts/MsixTools
+	url = https://github.com/sharpninja/MsixTools.git

.vscode/settings.json

@@ -5,5 +5,6 @@
       "path": "pwsh.exe",
       "args": ["-NoProfile"]
     }
-  }
+  },
+  "fusion-360-helper.enabled": false
 }

AGENTS.md

@@ -1,5 +1,27 @@
 # Repository Guidelines
 
+## ⚠️ PRIORITY ORDER — NON-NEGOTIABLE ⚠️
+
+**Speed is never more important than following workspace procedures.**
+
+Before doing ANY work on ANY user request, you MUST complete these steps in order:
+
+1. **Read `AGENTS-README-FIRST.yaml`** in the repo root for the current API key and endpoints
+2. **GET `/health`** to verify the MCP server is running
+3. **POST `/mcp/sessionlog`** with your session turn — do NOT proceed until this succeeds
+4. **GET `/mcp/sessionlog?limit=5`** to review recent session history for context
+5. **GET `/mcp/todo`** to check current tasks
+6. **THEN** begin working on the user's request
+
+On EVERY subsequent user message:
+1. Post a new session log turn (`Add-McpSessionTurn`) before starting work.
+2. Complete the user's request.
+3. Update the turn with results (`Response`) and actions (`Add-McpAction`) when done.
+
+**If you skip any of these steps, STOP and go back and do them before continuing.**
+Session logging is not optional, not deferred, and not secondary to the task.
+Failure to maintain the session log is a compliance violation.
+
 ## Project Structure & Module Organization
 - `src/RemoteAgent.App`: .NET MAUI Android client UI and platform services.
 - `src/RemoteAgent.Service`: ASP.NET Core gRPC service that runs and streams agent sessions.
@@ -43,3 +65,4 @@ Use default/minimal verbosity. Do not pass `-q` to `dotnet build` or `dotnet res
 - Use concise imperative commit messages, optionally with issue references (example: `Fix Android CI job (#8)`).
 - Sign commits (verified signature required by branch protection).
 - PRs should include: purpose, summary of changes, test evidence (`dotnet test`), and docs updates when behavior/config changes.
+

CONTRIBUTING.md

@@ -76,6 +76,34 @@ All warnings are treated as errors. See [REPOSITORY_RULES.md](docs/REPOSITORY_RU
 - Ensure all tests pass before submitting a PR.
 - Integration tests should go in `RemoteAgent.Service.IntegrationTests`.
 
+### Requirements Traceability
+
+All test classes and methods should be annotated with the functional (FR) and technical (TR) requirements they cover:
+
+```csharp
+/// <summary>Tests for authentication. FR-13.5; TR-18.1, TR-18.2.</summary>
+[Trait("Category", "Requirements")]
+[Trait("Requirement", "FR-13.5")]
+[Trait("Requirement", "TR-18.1")]
+[Trait("Requirement", "TR-18.2")]
+public class AuthUserServiceTests
+{
+    [Fact]
+    public void UpsertListDelete_ShouldPersistUser()
+    {
+        // Test implementation
+    }
+}
+```
+
+After adding or updating requirement annotations, regenerate the traceability matrix:
+
+```bash
+./scripts/generate-requirements-matrix.sh
+```
+
+This updates `docs/requirements-test-coverage.md`, which maps all requirements to their test coverage.
+
 ## Building and Testing
 
 ### Prerequisites