Add mediated automation surface

[jmcte]

Summary

• Add a shared BrokerAutomation request/response path for mediated login and fill automation.
• Expose macOS Shortcuts actions for APW login/fill through App Intents.
• Run Shortcuts broker requests through an async detached broker path instead of synchronously on MainActor.
• Publish an AppleScript dictionary in the built app bundle and wire its commands to NSScriptCommand implementations that call BrokerAutomation.
• Run bundled serve launches under NSApplication so Cocoa scripting can dispatch the SDEF command classes while the broker socket server runs on a background thread.
• Keep AppleScript command requests off the main thread while pumping the AppKit run loop, preserving credential UI dispatch for non-demo broker requests.
• Keep AuthenticationServices callable from synchronous automation contexts by pumping the main run loop when the broker is invoked on the main thread.
• Add a fast native automation contract test so CI guards Shortcuts/AppIntents wiring, AppleScript command wiring, dictionary packaging, and broker automation test coverage.

Closes #50.

Verification

• bash scripts/test-native-automation-config.sh
• bash scripts/ci/run-fast-checks.sh
• swift test --package-path native-app --filter BrokerCoreTests/testAutomation (outside sandbox; SwiftPM/Xcode need user cache access)
• swift test --package-path native-app (outside sandbox; 18 tests passed)
• ./scripts/build-native-app.sh (outside sandbox; Swift emits the existing AuthenticationServices exhaustive-switch warning)
• plutil -p native-app/dist/APW.app/Contents/Info.plist confirmed NSAppleScriptEnabled=true and OSAScriptingDefinition=APW.sdef
• test -f native-app/dist/APW.app/Contents/Resources/APW.sdef
• xmllint --noout native-app/Resources/APW.sdef
• sdp -fh -o /private/tmp/apw-sdef.h native-app/Resources/APW.sdef
• nm -m native-app/dist/APW.app/Contents/MacOS/APW | rg 'APWRequest(Login|Fill)Command|BrokerApplicationDelegate'
• git diff --check

Notes

• I verified the compiled App Intents and packaged AppleScript dictionary locally. I did not manually open the Shortcuts app UI in this run.

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 527d2e34a4

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[chatgpt-codex-connector]

Avoid running broker request synchronously on MainActor

Calling BrokerAutomation.performResponseData from an @MainActor perform() can deadlock the non-demo credential flow: AppleAuthenticationServicesBroker.login enqueues work onto DispatchQueue.main and then blocks on a semaphore, so when the caller is already on the main actor/thread the enqueued block cannot run and the request times out. This makes Shortcuts login/fill fail in normal (non-APW_DEMO) use.

Useful? React with 👍 / 👎.

[chatgpt-codex-connector]

Wire AppleScript commands to an implementation

This commit publishes custom AppleScript verbs in the sdef, but there is no corresponding command handler path in the APW app target to execute broker automation for these events (no NSScriptCommand subclass/selector wiring, and main.swift only launches runBrokerAppMain()). As shipped, request login/request fill Apple events have terminology but no executable bridge to BrokerAutomation, so the new AppleScript surface is non-functional.

Useful? React with 👍 / 👎.

[pheidon]

Approved from Pheidon sweep. Mediated automation surface is covered by native automation config tests and green PR Fast CI, Rust, lint, secrets, and Swift checks.

[pheidon]

Second-pass approval after Hephaestus repair: current head has green required checks, the prior connector comments are stale against older commits, and the branch is no longer blocked by failing CI. Approved for merge readiness pending GitHub merge-state refresh.