Updater, signing, and release promotion

[ksamaschke]

Objective

Make the desktop application releasable with real updater, signing, and promotion flows tied to actual packaged artifacts.

In Scope

• Publish updater metadata for real desktop artifacts.
• Wire signing and notarization requirements to actual package outputs.
• Define channel promotion and failure behavior for desktop releases.
• Ensure release workflow publishes real desktop assets plus updater metadata.

Out of Scope

• Core desktop runtime feature development.
• Primary QA ownership.

Acceptance Criteria

• Release flow works with actual desktop artifacts.
• Signing/notarization requirements are attached to real outputs.
• Update behavior is testable and documented per platform family.

Required Test Evidence

• RED: failing release/update validation checks for real artifacts.
• GREEN: passing workflow validation for updater/signing on scoped targets.
• REFACTOR: passing release suite after workflow cleanup.

Agent Profile Expected To Implement It

devops-engineer

Tracking

• Type: story
• Priority: p1

Parent: #173

[ksamaschke]

Completed on \ via merged PR #197 (merge commit , implementation commit ). This story's updater/signing/release-promotion work is already in the repo and was locally validated with \

intelligent-code-agents@12.3.0 test
npm run build:quick && node --test dist/tests/installer/*.test.js && bash tests/run-tests.sh

intelligent-code-agents@12.3.0 build:quick
npm run clean:compiled-tests && tsc -p tsconfig.json && node dist/src/installer-core/catalog/generateCatalog.js

intelligent-code-agents@12.3.0 clean:compiled-tests
node -e "const fs=require('fs');fs.rmSync('dist/tests',{recursive:true,force:true});", the focused desktop regression suite,
intelligent-code-agents@12.3.0 build:desktop:release
npm run build:desktop:preview && electron-builder --config electron-builder.json --publish never

intelligent-code-agents@12.3.0 build:desktop:preview
npm run build:quick && npm run build:dashboard:web

intelligent-code-agents@12.3.0 build:quick
npm run clean:compiled-tests && tsc -p tsconfig.json && node dist/src/installer-core/catalog/generateCatalog.js

intelligent-code-agents@12.3.0 clean:compiled-tests
node -e "const fs=require('fs');fs.rmSync('dist/tests',{recursive:true,force:true});", and fail-closed desktop release validation behavior. Closing stale tracking entry.

[ksamaschke]

Completed on dev via merged PR #197 (merge commit 9f8cebb, implementation commit c1f2436). This story's updater/signing/release-promotion work is already in the repo and was locally validated with npm test, the focused desktop regression suite, npm run build:desktop:release, and fail-closed desktop release validation behavior. Closing stale tracking entry.