Merge origin/main into apk-store-fixes, preserving store and headset features

Keep the union of server routes, desktop resources and responsive controls. Preserve OpenXR install defaults and telemetry hooks alongside library artwork. Adapt the resource test to single-file entries and avoid a completed-refresh race in the F-Droid test.

Co-Authored-By: GPT-6 Astra <noreply@openai.com>

tests/e2e/test_agents.py

@@ -0,0 +1,46 @@
+"""Real HTTP/MCP adapter against fake-Frame SSH; no model service needed."""
+import json
+from pathlib import Path
+import sys
+
+import harness
+from harness import api, ok, finished, ssh
+
+sys.path.insert(0, str(harness.ROOT / 'ui'))
+import frame_mcp
+
+
+class Agents(harness.FrameTestCase):
+    def client(self):
+        return frame_mcp.Client('http://127.0.0.1:%d' % harness.Server.port)
+
+    def call(self, name, args):
+        return json.loads(frame_mcp.call(self.client(), name, args)['content'][0]['text'])
+
+    def approve(self, proposal):
+        ok('POST', '/api/agent/approval', {'confirmation': proposal['confirmation'], 'accept': True})
+        return proposal['confirmation']
+
+    def test_status_and_approved_install_job(self):
+        self.assertIn('battery', self.call('status', {}))
+        proposal = self.call('install', {'id': 'org.example.AgentTest'})
+        before = api('POST', '/api/agent/call', {'name': 'install', 'arguments': {'id': 'org.example.AgentTest'}, 'confirmation': proposal['confirmation']})
+        self.assertEqual(before[0], 400)
+        token = self.approve(proposal)
+        job = self.call('install', {'id': 'org.example.AgentTest', 'confirmation': token})
+        self.assertFalse(finished(job).get('error'))
+        self.assertIn('org.example.AgentTest', ssh('flatpak list --app --columns=application'))
+        denied = api('POST', '/api/agent/call', {'name': 'install', 'arguments': {'id': 'org.example.AgentTest'}, 'confirmation': token})
+        self.assertEqual(denied[0], 400)
+
+    def test_approved_file_and_text(self):
+        path = Path(self.path('agent-note.txt'))
+        path.write_text('MCP file content\n')
+        args = {'path': str(path)}
+        token = self.approve(self.call('send_file', args))
+        self.call('send_file', {**args, 'confirmation': token})
+        self.assertEqual(ssh('cat ~/Downloads/agent-note.txt'), path.read_text())
+        args = {'text': 'MCP clipboard text'}
+        token = self.approve(self.call('send_text', args))
+        self.call('send_text', {**args, 'confirmation': token})
+        self.assertEqual(harness.state()['clipboard'], ['MCP clipboard text'])

tests/e2e/test_media_transfer.py

@@ -0,0 +1,21 @@
+"""Media transfer through the real HTTP/SSH path; the fake has no VR renderer."""
+import harness
+from harness import ok, ssh
+
+harness.require()
+
+
+class Media(harness.FrameTestCase):
+    def test_upload_and_list_without_launching_a_viewer(self):
+        # The transfer endpoint doesn't decode. Rendering belongs to the real
+        # headset smoke checks documented in docs/vr-video.md.
+        self.assertEqual(ssh('stat -c "%U:%G %a" ~/.local/share').strip(), 'steamos:steamos 755')
+        result = ok('POST', '/api/upload', raw=b'fake-media', headers={
+            'X-Mode': 'media', 'X-Filename': 'test_SBS.png'})
+        identity = result['id']
+        try:
+            files = ok('POST', '/api/media', {'action': 'list'})['files']
+            self.assertIn(identity, [f['id'] for f in files])
+            self.assertEqual(ssh('cat ~/Videos/FrameControl/'+identity), 'fake-media')
+        finally:
+            ssh('rm -rf ~/Videos/FrameControl/'+identity.split('/')[0])