fix(desktop): stop losing imported identity on every launch

desktop/playwright.config.ts

@@ -84,6 +84,7 @@ export default defineConfig({
         "**/drafts-screenshots.spec.ts",
         "**/buzz-theme-screenshots.spec.ts",
         "**/channel-sort.spec.ts",
+        "**/identity-lost.spec.ts",
       ],
       use: {
         ...devices["Desktop Chrome"],

desktop/scripts/check-file-sizes.mjs

@@ -133,7 +133,11 @@ const overrides = new Map([
   // baked-env-required-badge: getBakedBuildEnvKeys wrapper adds ~16 lines. Queued to split.
   // restart-badge: started the queued split — start/stopManagedAgent moved to
   // tauriManagedAgents.ts; limit ratcheted down 1388 → 1380 to bank the headroom.
-  ["src/shared/api/tauri.ts", 1380],
+  // identity-import-keyring: identity wrappers (RawIdentity, getIdentity, getNsec,
+  // importIdentity, persistCurrentIdentity) moved to tauriIdentity.ts;
+  // limit ratcheted down 1380 → 1360 to bank the headroom (absorbs main-side
+  // growth landed between the split and the rebase).
+  ["src/shared/api/tauri.ts", 1360],
   // readiness-gate: PersonaDialog.tsx threads computeLocalModeGate +
   // requiredCredentialEnvKeys + RequiredFieldLabel so the "New agent" dialog
   // shows required markers and credential amber rows (parity with
@@ -160,6 +164,12 @@ const overrides = new Map([
   // unified-agent-model 1A.1: inline test module moved to discovery/tests.rs,
   // ratcheting 1259 -> 802 (under the 1000 default; entry kept as a ratchet).
   ["src-tauri/src/managed_agents/discovery.rs", 802],
+  // identity-import-keyring: the identity resolution state machine's behavioral
+  // matrix (46 tests over FakeIdentityStore — probe × marker × file cells,
+  // adoption / read-back-corruption / marker-failure arms, recovery-mode
+  // gating). Load-bearing regression coverage for silent identity rotation,
+  // not generic debt growth. Approved override; split if the matrix grows.
+  ["src-tauri/src/app_state_tests.rs", 1290],
   // migration_tests.rs carries the harness-sync migration coverage plus the
   // patch_json_records owner-only writeback regression test (SECURITY.md:90
   // crash-safe 0o600 fallback). Load-bearing security + feature coverage, not
@@ -198,7 +208,6 @@ const overrides = new Map([
   // uid-keyed lockfile path + behavioral tests add ~303 lines. Load-bearing
   // security fix for the lost-update race that stranded agent keys.
   ["src-tauri/src/secret_store.rs", 1043],
-  ["src-tauri/src/app_state.rs", 1033],
   // multi-slot splitting + no-op suppression (#1309): the ReadStateManager
   // class grew from ~700 lines to ~1019 with the addition of
   // splitContextsIntoBudgetedSlots (pure fn + 5 tests), publishSplitSlots,

desktop/src-tauri/build.rs

@@ -102,5 +102,20 @@ fn main() {
         println!("cargo:rustc-cfg=buzz_updater_enabled");
     }
 
+    // Cargo test executables get no embedded Windows manifest (tauri_build
+    // attaches one to bin targets only), so the loader binds comctl32 v5, which
+    // lacks TaskDialogIndirect (statically imported via tauri-plugin-dialog/rfd)
+    // and debug test exes die at load with STATUS_ENTRYPOINT_NOT_FOUND. Declaring
+    // the Common Controls v6 dependency makes link.exe emit a side-by-side
+    // <exe>.manifest that the loader honors for manifest-less executables;
+    // binaries with an embedded manifest (the real app) ignore it.
+    if std::env::var("CARGO_CFG_TARGET_OS").as_deref() == Ok("windows")
+        && std::env::var("CARGO_CFG_TARGET_ENV").as_deref() == Ok("msvc")
+    {
+        println!(
+            "cargo:rustc-link-arg=/MANIFESTDEPENDENCY:type='win32' name='Microsoft.Windows.Common-Controls' version='6.0.0.0' processorArchitecture='*' publicKeyToken='6595b64144ccf1df' language='*'"
+        );
+    }
+
     tauri_build::build()
 }