Harden launcher generation and align repository metadata

[arena-ai-coding-agent]

Summary

• Harden config validation and safely shell-quote generated values; use private per-app XDG state paths, PID validation, and a real --version mode plus browser/web aliases.
• Add atomic file replacement and tighten Rust plus shell-fallback integration ownership checks, including per-file desktop markers and an icon sidecar.
• Wire the standard show / standard validate CLI and make metadata inspection/edit behavior explicit for current DEED and legacy A2ML blocks.
• Refresh repository governance/community-health files, machine-readable records, tooling, and docs to describe the actual Linux-only provisioning and descriptor migration status.

Validation

• git diff --check passed.
• TOML parsing and local AsciiDoc link checks passed.
• Tera-stripped Bash syntax checks passed for server-url, remote, and process render branches.
• Generated shell --version and fallback integration smoke checks passed, including hostile HOME characters and refusal to overwrite an unmarked target.
• Rust build, rustfmt, tests, Clippy, and ShellCheck could not run locally because Rust/Cargo and ShellCheck are not installed in the sandbox. Please rely on CI before merge.

Follow-up work documented

Native macOS/Windows integration, implementation of platform/integrity/exceptions APIs, DEED migration for per-app descriptors (standards#960), and seven-consumer golden coverage remain open.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Advanced

Run ID: 5b6ab6be-d88b-4e3d-8509-c56644b729d1

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}