chore(release): merge release/v1.2.0 into main for 1.2.0 (#248)

## Issues addressed

- Closes #238: Imports compatible line-format mod lists, reorders
existing mods, imports sibling folders, reconciles library entries,
identifies missing Nexus mods, and queues Premium downloads into the
file order. Adds the in-row import-details correction and
version-unknown paths needed to resolve local imports.
- Closes #240: Makes a downloaded Nexus update become and remain the
latest version after a manual import, including protection from startup
cleanup.
- Closes #243: Shows complete Nexus thumbnails in responsive 16:9 frames
instead of cropping them.
- Closes #245: Clones the active profile with its metadata, launch
settings, complete mod membership, policies, load order, and locks while
keeping the copy independent.

## Additional changes

- Isolates the Linux NXM unregister test from the real managed handler
directory.

Author: ModifAmorphic

AGENTS.md

@@ -23,7 +23,9 @@ and it runs unmodified).
   profiles, dependency resolution, mod-source integrations). The backend
   libraries (Profiles, Mods, Steam, Integrations, Relay-client, General) and
   the UI (a left navigation rail with five destinations: Profiles, Mods, Nexus
-  Integrations, Preferences, Settings; plus profile management and the Launch
+  Integrations, Preferences, Settings; plus profile management, including
+  cloning a profile into an independent copy (named "Copy N", with mod files
+  shared rather than duplicated), and the Launch
   flow) are in place. The app is user-usable. The Mods list offers a persisted
   Compact and Detailed row density; Detailed rows show a Nexus summary and a
    cached thumbnail when one is available, with a neutral placeholder otherwise.

README.md

@@ -261,6 +261,18 @@ for the full contract (env-var table, logging, the hook-ready handshake).
   update of an entry already in the profile is a strict no-op that preserves
   the user's current order, enabled state, policy, and lock. Existing profile
   entries are not migrated.
+- **Cloning:** the focused `IProfileCloner.CloneProfile` capability persists an
+  independent copy of a profile in one operation (never reconstructed through
+  repeated `AddMod`, which would replay fresh-add policy such as DMF
+  placement). The copy gets a new id + creation timestamp, a generated
+  ` (Copy N)` family name (stable data, never localized; `Testing (Copy 1)`
+  belongs to the `Testing` family), and the source's description, complete mod
+  membership (enabled state, order, locks, policies incl. pinned version
+  ids), and launch settings. Mod files stay in the shared repository (the
+  clone references the same containers; nothing is duplicated), and the
+  staged tree is not copied: the clone receives an empty `staged/` scaffold
+  that ordinary launch staging rebuilds. Cloning raises no
+  `ProfileCreated`, so the DMF offer never fires for a clone.
 - Mods are stored **once, in a unified repository** keyed by `(source, identity)`
   per UUID container. Profiles reference a mod by `(containerId, policy)` and
   store no mod files of their own. See [Mod repository](#mod-repository).
@@ -287,9 +299,12 @@ Each version is a subfolder with an **opaque unique ID**; the raw version tag
 lives only in the manifest (for display + pin resolution), never as a folder
 name. **`isLatest` is a flag on one version entry**, not a duplicate folder:
 the repository re-evaluates the flag on every add/remove with the
-**effective-timestamp key** (`remoteUploadedAt` when the remote source
-published the file, else the import time, with the import time breaking exact
-ties), so importing an older remote file never flips latest. Each version
+**arrival rule** (the most recent arrival, i.e. the newest import time,
+decides the clock: a manual import with the newest arrival is latest;
+otherwise the newest downloaded version by `remoteUploadedAt`, with the
+import time breaking exact ties), so importing an older remote file never
+flips latest while a download arriving after a manual import takes the
+flag. Each version
 entry also records the remote file id it was acquired from (`FileId`, the
 exact identity the download queue's repository hit check keys on; null for
 manual imports, self-healing on re-acquisition). Moving latest is a one-field
@@ -367,7 +382,7 @@ contents; the archive is validated to have a single top-level folder before
 extraction). Container dedup: Untracked by name, Nexus by mod id. Version dedup:
 re-importing the same tag reuses its folder (refreshed); a new tag creates a new
 version, and the repository re-evaluates `isLatest` over all versions with its
-effective-timestamp key. The service returns `(containerId, versionId)`,
+arrival rule. The service returns `(containerId, versionId)`,
 where `versionId` is the imported version's opaque on-disk folder id (a
 `ModVersion.Folder` value); the display tag (`ModVersion.VersionString`) is
 recorded in the container manifest and is not returned. The caller then adds
@@ -647,10 +662,13 @@ is in [UI reference](../reference/ui.md).
   drag-reorder grip, column 1 is the thumbnail/placeholder slot, column 2
   holds the name + source badge (row 0) and a two-line summary (row 1), and
   row 2 is the action strip. When the card
-  is wide (greater than 680 DIP) a 112-DIP thumbnail spans all three rows and
-  the action strip occupies only the content column; when constrained (at or
-  below 680 DIP) the thumbnail shrinks to 72 DIP spanning name + summary and
-  the action strip moves to a full-width row beneath all three columns. The action
+  is wide (greater than 680 DIP) a 192x108 DIP 16:9 thumbnail (stretched
+  `Uniform`, so the complete source image shows with the frame's neutral
+  background letterboxing/pillarboxing non-16:9 assets) spans all three rows
+  and the action strip occupies only the content column; when constrained (at
+  or below 680 DIP) the thumbnail shrinks to 128x72 DIP spanning name +
+  summary and the action strip moves to a full-width row beneath all three
+  columns. The action
   strip is a right-aligned `WrapPanel` that wraps at the edge (no horizontal
   scrolling); width, height, row span, and the action column/span are driven by
   styles so the breakpoint changes them. The summary is plain text with `CharacterEllipsis` trimming and the full

docs/architecture/MODIFICUS-CURATOR.md

@@ -166,7 +166,7 @@ and `IHttpClientFactory` (for the raw CDN download) from the container.
    the archive structure (single base folder plus matching `<base>.mod`
    descriptor; archive detection is content-based via SharpCompress), handles
    find-or-create-container (dedup by `NexusSource.ModId`) plus add-version,
-   re-evaluates `IsLatest` with the repository's effective-timestamp key, records
+   re-evaluates `IsLatest` with the repository's arrival rule, records
    the publish date and the file id on the entry (new or reused), replaces the
    container's `DisplayMetadata` in the same
    manifest update as the version mutation, and extracts into

docs/architecture/mod-acquisition.md

@@ -68,7 +68,7 @@ a UI-layer singleton that the shell (and other view models) inject:
   │   │                         strip; mirrors session state
   │   │
   │   ├── ProfilesViewModel ─── the active profile editor (name + description
-  │   │   │                     + inline launch settings) + banner/picker
+  │   │   │                     + inline launch settings) + banner/picker/clone
   │   │   │
   │   │   └── LaunchSettingsEditorViewModel  the reusable inline launch-settings
   │   │                                       rows (env vars + args + toggles)
@@ -195,6 +195,42 @@ running-state change does not reload the list (the list stays put while the
 game runs; edits land on the profile the user will launch next). Active-id
 changes rebuild the list from the new profile.
 
+## The Profiles destination (`ProfilesViewModel`)
+
+The Profiles page edits the active profile only (name + description + the
+inline launch-settings editor), hosts the persisted-profile banner + picker,
+creates new drafts, and carries the Add / Clone / Delete action row for the
+active persisted profile. Every voluntary active-profile change routes
+through the session's `RequestActive` gate; the page never writes the
+persisted profile outside the atomic `UpdateProfile` / `CreateProfile`
+boundary.
+
+**Cloning** (the Clone action, between Add and Delete) copies the active
+persisted profile through the focused `IProfileCloner` capability:
+
+- **Gating.** Clone is visible only for an active persisted profile and
+  disabled while a new draft is open, while a Save is in flight, and while
+  Darktide runs (the clone becomes active, which is a profile switch). All
+  gates are re-checked in the command body after the dirty-transition await;
+  the disabled button keeps its tooltip (`ToolTip.ShowOnDisabled`) so the
+  running-state reason stays available.
+- **Dirty guard.** A dirty editor resolves through the same unsaved-changes
+  transition as navigation/switch/Add: Save persists the edits then clones
+  the saved profile, Don't save discards the edits then clones the previously
+  persisted profile, Cancel/ESC/X creates nothing and preserves the edits.
+- **Activation.** On success the returned clone is requested active through
+  the session (with the page's own-reload suppression so the session event
+  handler does not treat it as an outside displacement), then one
+  authoritative reload opens the clone in a clean editor. Cloning is
+  immediate + non-destructive, so it needs no confirmation; the new banner
+  name is the success feedback.
+- **DMF suppression.** `CloneProfile` raises no
+  `IProfileService.ProfileCreated` (the blank-profile signal behind the DMF
+  offer), so cloning a profile never queues the DMF prompt.
+- **Failure.** An expected clone/read/write failure logs, keeps the source
+  active + unchanged, and surfaces the localized generic clone error in the
+  page's fixed error area; raw exception text is never shown.
+
 ## The shell (`ShellViewModel` + `MainWindow`)
 
 The shell owns navigation across five hosted destinations (the
@@ -1085,11 +1121,13 @@ subscription re-hydrates from the store when the result lands.
   holds the name + source badge (row 0) and a two-line plain-text summary
   (row 1, `MaxLines=2`, `TextWrapping=Wrap`, `TextTrimming=CharacterEllipsis`,
   full text in the tooltip and the automation name), and row 2 is the action
-  strip. When the card is wide (greater than 680 DIP) a 112-DIP
-  `UniformToFill` thumbnail spans all three rows and the action strip occupies
-  only the right column; when constrained (at or below 680 DIP) the thumbnail
-  shrinks to 72 DIP spanning name + summary and the action strip moves to a
-  full-width row beneath both columns. Width, height, row span, and action
+  strip. When the card is wide (greater than 680 DIP) a 192x108 DIP 16:9
+  `Uniform` thumbnail (the complete source image; the frame's neutral
+  background letterboxes/pillarboxes non-16:9 assets) spans all three rows and
+  the action strip occupies only the right column; when constrained (at or
+  below 680 DIP) the thumbnail shrinks to 128x72 DIP spanning name + summary
+  and the action strip moves to a full-width row beneath both columns. Width,
+  height, row span, and action
   column/span that change at the breakpoint are driven by styles (not local
   values, which would outrank styles); constant row/column positions stay
   local. Both roots bind the exact same per-row state and route to the exact