Scaffold OpenDisplay: monorepo + platform-independent safety core

.github/ISSUE_TEMPLATE/bug_report.yml

@@ -0,0 +1,80 @@
+name: Bug report
+description: Report a problem with OpenDisplay
+title: "[bug]: "
+labels: ["bug"]
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Thanks for the report. Please redact identifying data (display serials, usernames).
+        If a display became unreachable, note which recovery action you used.
+  - type: input
+    id: app-version
+    attributes:
+      label: OpenDisplay version
+      placeholder: "e.g. 0.3.0 (build 123)"
+    validations:
+      required: true
+  - type: dropdown
+    id: build-flavor
+    attributes:
+      label: Build flavor
+      options: ["Full", "Public-API-only"]
+    validations:
+      required: true
+  - type: input
+    id: macos
+    attributes:
+      label: macOS version / build
+      placeholder: "e.g. 15.5 (24F74)"
+    validations:
+      required: true
+  - type: input
+    id: mac-model
+    attributes:
+      label: Mac model & chip
+      placeholder: "e.g. MacBook Pro 14\" M3 Pro (Apple Silicon)"
+    validations:
+      required: true
+  - type: input
+    id: displays
+    attributes:
+      label: Display model(s)
+      placeholder: "e.g. LG UltraFine 4K + built-in Retina"
+    validations:
+      required: true
+  - type: dropdown
+    id: route
+    attributes:
+      label: Connection route
+      multiple: true
+      options: ["Direct USB-C/DP", "HDMI", "Thunderbolt dock", "USB-C hub", "KVM", "Adapter", "Wireless (Sidecar/AirPlay)"]
+    validations:
+      required: true
+  - type: textarea
+    id: steps
+    attributes:
+      label: Steps to reproduce
+      placeholder: |
+        1. ...
+        2. ...
+    validations:
+      required: true
+  - type: textarea
+    id: expected-actual
+    attributes:
+      label: Expected vs actual behavior
+    validations:
+      required: true
+  - type: dropdown
+    id: recovery
+    attributes:
+      label: Was a recovery action needed?
+      options: ["No", "Reconnect All", "Automatic rollback", "Rescue utility", "Safe mode", "Manual intervention"]
+    validations:
+      required: true
+  - type: textarea
+    id: logs
+    attributes:
+      label: Logs / diagnostics bundle
+      description: Attach a redacted diagnostics bundle if available.

.github/ISSUE_TEMPLATE/compatibility_report.yml

@@ -0,0 +1,63 @@
+name: Compatibility report
+description: Report hardware/OS compatibility results for a capability
+title: "[compat]: "
+labels: ["compatibility"]
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Helps build the certified compatibility matrix. **Redact serials and other
+        identifying data.**
+  - type: input
+    id: mac-model
+    attributes:
+      label: Mac model & chip
+      placeholder: "e.g. Mac mini M2 (Apple Silicon)"
+    validations:
+      required: true
+  - type: input
+    id: macos
+    attributes:
+      label: macOS build
+      placeholder: "e.g. 15.5 (24F74)"
+    validations:
+      required: true
+  - type: input
+    id: display
+    attributes:
+      label: Display model & firmware
+      placeholder: "e.g. Dell U2720Q (firmware M3B103)"
+    validations:
+      required: true
+  - type: dropdown
+    id: route
+    attributes:
+      label: Route
+      options: ["Direct", "Thunderbolt dock", "USB-C hub", "KVM", "Adapter", "Wireless"]
+    validations:
+      required: true
+  - type: dropdown
+    id: capability
+    attributes:
+      label: Capability tested
+      options:
+        - Logical disconnect / reconnect
+        - DDC brightness
+        - DDC volume / contrast / input
+        - Resolution / refresh / rotation modes
+        - HDR / XDR
+        - Mirroring / main display
+        - Virtual display
+    validations:
+      required: true
+  - type: dropdown
+    id: result
+    attributes:
+      label: Result
+      options: ["Works (verified)", "Works (unverified read-back)", "Degraded", "Fails"]
+    validations:
+      required: true
+  - type: textarea
+    id: notes
+    attributes:
+      label: Notes

.github/ISSUE_TEMPLATE/config.yml

@@ -0,0 +1,5 @@
+blank_issues_enabled: false
+contact_links:
+  - name: Security report (private)
+    url: https://github.com/aquitaine/opendisplay/security/policy
+    about: Please report vulnerabilities privately — do not open a public issue.

.github/ISSUE_TEMPLATE/feature_request.yml

@@ -0,0 +1,45 @@
+name: Feature request
+description: Suggest an improvement or new capability
+title: "[feature]: "
+labels: ["enhancement"]
+body:
+  - type: textarea
+    id: problem
+    attributes:
+      label: Problem / use-case
+      description: What are you trying to do? What's painful today?
+    validations:
+      required: true
+  - type: textarea
+    id: solution
+    attributes:
+      label: Proposed solution
+    validations:
+      required: true
+  - type: dropdown
+    id: domain
+    attributes:
+      label: Related capability domain
+      options:
+        - Display lifecycle & topology
+        - Modes, scaling & geometry
+        - Brightness, audio, color & input
+        - Virtual displays, capture & presentation
+        - Automation & integrations
+        - Diagnostics, configuration & recovery
+        - User experience & accessibility
+        - Other
+    validations:
+      required: true
+  - type: dropdown
+    id: tier
+    attributes:
+      label: Core or Labs?
+      description: Labs = experimental / system-sensitive / undocumented behavior.
+      options: ["Core", "Labs", "Not sure"]
+    validations:
+      required: true
+  - type: textarea
+    id: alternatives
+    attributes:
+      label: Alternatives considered

.github/PULL_REQUEST_TEMPLATE.md

@@ -0,0 +1,32 @@
+<!-- Thanks for contributing to OpenDisplay! Please complete this checklist. -->
+
+## Summary
+
+<!-- What does this change and why? Link the issue it closes. -->
+
+Closes #
+
+## Type of change
+
+- [ ] Bug fix
+- [ ] Feature
+- [ ] Refactor / internal
+- [ ] Docs
+- [ ] Lifecycle / recovery / safety (requires threat & recovery review)
+
+## Checklist
+
+- [ ] **Clean-room:** this contribution is my original work, or its source and license are
+      identified. No proprietary code, copied UI, copy, or assets.
+- [ ] Tests added/updated (unit/state-machine for logic; hardware evidence for provider changes).
+- [ ] `make test` passes locally (`swift test` green) and SwiftLint is clean. (No remote CI — local verification is the gate.)
+- [ ] The **public-API-only** build still compiles with experimental providers absent (NFR-010).
+- [ ] Docs updated where behavior changed.
+- [ ] Commits are signed off (`git commit -s`, DCO).
+
+## Safety & recovery
+
+- [ ] This PR does **not** touch lifecycle, the transaction coordinator, checkpoints, the
+      rescue path, startup, IPC, capture, update, or network.
+- [ ] If it does: I have described new failure modes and how recovery stays guaranteed, and
+      requested a threat & recovery review (RFC linked if applicable).

.gitignore

@@ -0,0 +1,39 @@
+# Swift / SwiftPM
+.build/
+.swiftpm/
+Package.resolved.user
+*.xcodeproj/xcuserdata/
+*.xcworkspace/xcuserdata/
+DerivedData/
+
+# Xcode — the project is generated by XcodeGen (`make xcode`); do not commit it.
+/OpenDisplay.xcodeproj/
+xcuserdata/
+*.xcuserstate
+*.moved-aside
+*.hmap
+*.ipa
+*.dSYM.zip
+*.dSYM
+
+# macOS
+.DS_Store
+
+# Release / signing artifacts (never commit secrets or signed binaries)
+*.app
+*.pkg
+*.dmg
+*.zip
+ExportOptions.plist
+*.p12
+*.cer
+*.provisionprofile
+notarization-*.json
+
+# Editor
+.idea/
+*.swp
+
+# Local build output (XcodeGen `make build` writes here) and local agent/session config
+build/
+.claude/

.swift-format

@@ -0,0 +1,18 @@
+{
+  "version": 1,
+  "lineLength": 110,
+  "indentation": { "spaces": 4 },
+  "maximumBlankLines": 1,
+  "respectsExistingLineBreaks": true,
+  "lineBreakBeforeEachArgument": false,
+  "indentConditionalCompilationBlocks": false,
+  "rules": {
+    "AllPublicDeclarationsHaveDocumentation": false,
+    "AlwaysUseLowerCamelCase": true,
+    "NeverForceUnwrap": false,
+    "OrderedImports": true,
+    "UseLetInEveryBoundCaseVariable": true,
+    "UseShorthandTypeNames": true,
+    "ReturnVoidInsteadOfEmptyTuple": true
+  }
+}

.swiftlint.yml

@@ -0,0 +1,46 @@
+# SwiftLint configuration for OpenDisplay.
+# Keep rules pragmatic; the domain packages are the strictest because they encode safety logic.
+included:
+  - Packages
+  - Providers
+  - Apps
+  - Tools
+excluded:
+  - .build
+  - "**/.build"
+  - Tests/Fixtures
+
+opt_in_rules:
+  - empty_count
+  - explicit_init
+  - first_where
+  - sorted_imports
+  - unused_import
+  - redundant_nil_coalescing
+  - closure_spacing
+  - operator_usage_whitespace
+
+line_length:
+  warning: 120
+  error: 160
+  ignores_comments: true
+
+type_body_length:
+  warning: 400
+  error: 600
+
+file_length:
+  warning: 600
+  error: 1000
+
+function_body_length:
+  warning: 80
+  error: 140
+
+identifier_name:
+  min_length: 2
+  excluded: [id, x, y, dx, dy, to, on]
+
+cyclomatic_complexity:
+  warning: 12
+  error: 20

Apps/OpenDisplay/README.md

@@ -0,0 +1,16 @@
+# OpenDisplay (app)
+
+**macOS app target** (SwiftUI + AppKit). The menu-bar popover (primary surface) and the
+settings window, built from `Packages/OpenDisplayDesignSystem`. Hosts the dependency
+composition root: `DisplayRegistry`, `TopologyCoordinator`, providers, stores, and the
+`RecoveryService` (Reconnect All + global hotkey).
+
+Surfaces (PRD §8.1): menu-bar root, topology workspace, display detail, scenes, automation,
+health & recovery, Labs. The UI consumes immutable snapshots and submits commands through the
+command gateway — it never mutates domain state directly.
+
+Milestone: **M1 (menu-bar + connect/disconnect) → M3 (Core 1.0)**.
+
+> Scaffolded: run `make xcode` to generate the project, then build/run the `OpenDisplay`
+> scheme. The app currently runs against `SimulatedDisplaySystem`; real providers land in M0.
+> Sources: `Apps/OpenDisplay/Sources` (`OpenDisplayApp`, `AppModel`, `MenuBarView`, `SettingsView`).

Apps/OpenDisplay/Resources/Info.plist

@@ -0,0 +1,23 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+	<key>CFBundleName</key>
+	<string>OpenDisplay</string>
+	<key>CFBundleDisplayName</key>
+	<string>OpenDisplay</string>
+	<key>CFBundleIdentifier</key>
+	<string>$(PRODUCT_BUNDLE_IDENTIFIER)</string>
+	<key>CFBundleShortVersionString</key>
+	<string>$(MARKETING_VERSION)</string>
+	<key>CFBundleVersion</key>
+	<string>$(CURRENT_PROJECT_VERSION)</string>
+	<key>CFBundlePackageType</key>
+	<string>APPL</string>
+	<key>LSMinimumSystemVersion</key>
+	<string>$(MACOSX_DEPLOYMENT_TARGET)</string>
+	<!-- Menu-bar agent: no Dock icon (PRD UX-001). -->
+	<key>LSUIElement</key>
+	<true/>
+</dict>
+</plist>

Apps/OpenDisplay/Resources/OpenDisplay.entitlements

@@ -0,0 +1,14 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+	<!--
+	  Display-lifecycle management needs access incompatible with the App Sandbox, so it is
+	  disabled here. The exact entitlement set (and whether any Labs feature needs more) is an
+	  open question pending technical/legal review — PRD Q-002. Distribution is Developer ID +
+	  hardened runtime (set via build settings), not the App Store (D-007).
+	-->
+	<key>com.apple.security.app-sandbox</key>
+	<false/>
+</dict>
+</plist>