docs(phase-06): complete phase execution and verification

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

.planning/STATE.md

@@ -4,7 +4,7 @@ milestone: v1.0
 milestone_name: milestone
 status: executing
 stopped_at: Completed 06-01-PLAN.md
-last_updated: "2026-04-10T14:22:10.956Z"
+last_updated: "2026-04-10T14:24:06.549Z"
 last_activity: "2026-04-10 — Plan 04-02 complete: uninstall/detect templates, render_uninstall/render_detect, 3 script API endpoints, 75 tests green"
 progress:
   total_phases: 7

.planning/phases/06-wire-icon-intunewin/06-VERIFICATION.md

@@ -0,0 +1,92 @@
+---
+phase: 06-wire-icon-intunewin
+verified: 2026-04-10T00:00:00Z
+status: passed
+score: 2/2 must-haves verified
+gaps: []
+---
+
+# Phase 06: Wire Icon into .intunewin Export — Verification Report
+
+**Phase Goal:** Wire uploaded icon into .intunewin export pipeline so printers with an icon include it in the deployment package.
+**Verified:** 2026-04-10
+**Status:** PASSED
+**Re-verification:** No — initial verification
+
+---
+
+## Goal Achievement
+
+### Observable Truths
+
+| # | Truth | Status | Evidence |
+|---|-------|--------|----------|
+| 1 | Exported .intunewin includes icon.png in staging when printer has an uploaded icon | VERIFIED | `test_intunewin_includes_icon` passes (line 200-231, test_packages.py). Monkeypatched `build_intunewin` captures `os.listdir(source_dir)` and asserts `"icon.png" in staged_files`. Live run: 15/15 passed. |
+| 2 | Exported .intunewin succeeds without error when printer has no icon | VERIFIED | `test_intunewin_without_icon_succeeds` passes (line 233-245, test_packages.py). No icon uploaded; export returns 200. Live run confirms. |
+
+**Score:** 2/2 truths verified
+
+---
+
+### Required Artifacts
+
+| Artifact | Expected | Status | Details |
+|----------|----------|--------|---------|
+| `imptune/api/packages.py` | Icon lookup and copy into tmpdir staging | VERIFIED | Contains `Icon.get_or_none` (line 149), `cfg.ICONS_DIR` (line 151), `shutil.copy2` (line 153). Substantive: 167 lines, full implementation with silent-skip guard. Wired: imported by FastAPI router and reachable from GET `/printers/{id}/packages/intunewin`. |
+| `tests/test_packages.py` | Integration tests for icon-in-package and no-icon baseline | VERIFIED | Contains `test_intunewin_includes_icon` and `test_intunewin_without_icon_succeeds` in `TestIntunewinIconInclusion` class (lines 199-246). Both tests pass. |
+
+---
+
+### Key Link Verification
+
+| From | To | Via | Status | Details |
+|------|----|-----|--------|---------|
+| `imptune/api/packages.py` | `imptune/db/models.py` | `Icon.get_or_none(Icon.printer == printer.id)` | WIRED | Pattern `Icon\.get_or_none` found at line 149. `Icon` imported at line 13: `from imptune.db.models import Icon, Printer`. |
+| `imptune/api/packages.py` | `imptune/config.py` | `cfg.ICONS_DIR` for icon source path | WIRED | Pattern `cfg\.ICONS_DIR` found at line 151. `cfg` imported at line 13: `import imptune.config as cfg`. |
+| `shutil.copy2` call | `build_intunewin` call | Icon staged BEFORE build | WIRED | `shutil.copy2` at line 153, `build_intunewin` at line 157 — ordering confirmed correct. |
+
+---
+
+### Requirements Coverage
+
+| Requirement | Source Plan | Description | Status | Evidence |
+|-------------|-------------|-------------|--------|----------|
+| PKG-04 | 06-01-PLAN.md | User can upload a custom PNG icon for Intune app display (256x256, max 750KB) | SATISFIED | Phase 5 delivered the upload endpoint; Phase 6 closes the PKG-04 gap by wiring the stored icon into the .intunewin staging pipeline. REQUIREMENTS.md traceability table confirms PKG-04 mapped to Phase 6, status Complete. |
+
+No orphaned requirements: REQUIREMENTS.md maps PKG-04 exclusively to Phase 6 and no other Phase 6 IDs appear in REQUIREMENTS.md.
+
+---
+
+### Anti-Patterns Found
+
+| File | Line | Pattern | Severity | Impact |
+|------|------|---------|----------|--------|
+| — | — | None | — | — |
+
+No TODO/FIXME/placeholder comments, no stub returns, no empty handlers found in either modified file.
+
+---
+
+### Human Verification Required
+
+None. All observable behaviors are verifiable via automated tests. The icon staging path is fully exercised by `test_intunewin_includes_icon` using a real PNG upload and a monkeypatched build step that captures the staged file list.
+
+---
+
+### Gaps Summary
+
+No gaps. Both must-have truths are verified, both artifacts are substantive and wired, both key links exist, PKG-04 is satisfied, and the full test suite (96 tests) is green with zero failures.
+
+---
+
+## Commit Verification
+
+| Commit | Message | Files Changed | Verified |
+|--------|---------|---------------|---------|
+| `2723cc8` | test(06-01): add failing test for icon inclusion in .intunewin export | tests/test_packages.py (+55 lines) | YES |
+| `6310be5` | feat(06-01): wire icon into .intunewin staging before build | imptune/api/packages.py (+9/-1 lines) | YES |
+
+---
+
+_Verified: 2026-04-10_
+_Verifier: Claude (gsd-verifier)_