[matt-edmondson]

Fixes #21

What was wrong

Only ConsoleRunner installed signal handlers, and Avalonia handles neither signal. So a tray run sent SIGTERM (kill, systemctl stop, logout) or SIGINT (Ctrl+C in the launching terminal) died to the runtime's default handler:

• the tool's OnStop never ran;
• a toggle clicked inside the 500 ms debounce window was never saved.

That contradicted the README and the OnStop XML docs.

Change

• New internal ShutdownSignals, which RunTray holds for the length of the run:
  • It hooks Console.CancelKeyPress and registers PosixSignalRegistration for SIGTERM, mirroring ConsoleRunner.
  • Each handler cancels the default termination and asks the tray to shut down.
  • Before the tray host exists, the signal is left to end the process as it did before.
  • It is disposed before any fallback to the console, which installs its own handlers.
• TrayApplication.RequestShutdown() posts the existing Shutdown to the UI thread. That is the path the Quit item and the --for timer already take, so the run ends through OnExit → Dispose → OnStop → the FinishAsync flush, and exits 0. Only the first request posts anything, so a second Ctrl+C, or a signal during a Quit, doesn't shut down twice.
• New ShutdownSignalsTests call the handlers directly, with no display. They cover:
  • a signal before the tray exists is not taken;
  • a signal once the tray exists is taken and requests the shutdown;
  • repeated signals post only one shutdown.
• New scripts/check-tray-signals.sh is the end-to-end regression check, documented in CLAUDE.md under Testing.
  • It runs the demo in the tray under Xvfb with the status-notifier watcher and clicks the remembered Running toggle.
  • It sends the signal about 100 ms later, inside the debounce window.
  • It fails on a non-zero exit or a toggle that was not saved.

Verification

Run on Linux under dbus-run-session + Xvfb:

	exit	toggle saved
SIGTERM, before	143 (Terminated)	no ("Toggles": {})
SIGINT, before	130	no ("Toggles": {})
SIGTERM, after	0	yes ("running": false)
SIGINT, after	0	yes ("running": false)

• scripts/check-tray-signals.sh fails on the base commit (SIGTERM: exited 143 instead of shutting down) and passes with this change.
• Unit suite: 158 passed, 1 skipped, 0 failed.

Not covered here:

• Windows and macOS: the handlers are the same calls ConsoleRunner already makes on those platforms, but the tray path was only exercised on Linux.
• CI: the end-to-end script isn't wired in. The workflows call the shared pipeline, and adding an Xvfb + D-Bus job there is a separate decision.

🤖 Generated with Claude Code

https://claude.ai/code/session_017UuQscGFrjteUf9Ui3jWdd

[sonarqubecloud]

Quality Gate passed

Issues
4 New issues
0 Accepted issues

Measures
0 Security Hotspots
90.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud