Headless CLI on shared application service

[ksamaschke]

Objective

Restore a constrained headless CLI for automation and CI on top of the shared application-service layer in parallel with desktop productization.

In Scope

• Restore headless automation commands for install, uninstall, sync, list/state, sources, validate/publish, and diagnostics.
• Keep CLI behavior aligned with the shared application service rather than duplicating business logic.
• Treat CLI as automation support, not the primary runtime UX.

Out of Scope

• Reintroducing browser-era serve/launch as the main product path.
• Broad desktop UX ownership.

Acceptance Criteria

• Supported CLI commands execute through the shared application-service layer.
• CLI scope is explicitly documented as headless automation support.
• No duplicate business logic exists between CLI and desktop.

Required Test Evidence

• RED: failing CLI contract tests for restored automation paths.
• GREEN: passing CLI behavior on the shared service layer.
• REFACTOR: green regression suite after removing legacy runtime assumptions.

Agent Profile Expected To Implement It

developer

Tracking

• Type: story
• Priority: p2

Parent: #173

[ksamaschke]

Story complete in detached worktree codex/issue-191-cli-shared-service-20260314075856. Child work-items #191, #192, and #193 are complete with RED/GREEN/REFACTOR evidence recorded.

Outcome:

• headless CLI automation surface is explicitly primary
• browser-era serve/launch paths are deprecated side commands
• diagnostics and catalog access now flow through the shared application service
• direct CLI imports from executor/catalog/state/updateCheck were removed from the headless automation slice
• full regression gate passed after stabilizing API startup timing in api-security.test.ts

[ksamaschke]

Closed via merge of PR #194 into dev.