[Epic 6] Automation: CLI, App Intents, selectors & APIs

[aquitaine]

Epic: Automation & integrations

Every external command takes the same identity/capability/safety/transaction/audit path as the UI.

Milestone: M1 (CLI) → M3 · PRD: AUT-001…AUT-012, §12

Scope

• opendisplay CLI: list/get/set/toggle/scene/connect/disconnect/recover/diagnose with documented exit codes (AUT-001).
• Stable selector grammar + parser; ambiguous = no mutation (AUT-002). (in DisplayDomain/Selector.swift)
• Machine-readable JSON result envelope, typed per-field results (AUT-003/004). (in AutomationSchema)
• Dry-run for every multi-field/lifecycle mutation (AUT-003).
• App Intents / Shortcuts (apply scene, brightness, input, Reconnect All) (AUT-005).
• Core 1.x: URL scheme, loopback HTTP API w/ bearer token, events, rules engine (AUT-006…009).
• Audit every automated mutation; shared coordinator rate limits (AUT-010/011); schema versioning (AUT-012).

Acceptance

• Golden tests validate CLI syntax/JSON/idempotency; a crafted untrusted URL/HTTP request cannot disconnect the last safe display.