chore(gates): admit the published proxy package to the gates

R11 reads a published package's bundled workspace siblings from
devDependencies, matching the public-package release rules. Fallow treats
the proxy entries as published surface. The wire-compat ledger acks the
fetch-based proxy declarations; their wire output is unchanged.

Author: thymikee

.fallowrc.json

@@ -15,6 +15,9 @@
     "src/sdk/selectors.ts",
     "src/sdk/finders.ts",
     "src/ai-sdk/index.ts",
+    "packages/proxy/src/index.ts",
+    "packages/proxy/src/node.ts",
+    "packages/proxy/tsdown.config.ts",
     "src/bin.ts",
     "src/client/companion-tunnel.ts",
     "src/daemon.ts",
@@ -276,8 +279,8 @@
       "exports": ["*"]
     },
     {
-      "comment": "Published package surface (see package.json#exports); consumed by SDK users, not internally.",
-      "file": "{src/sdk/*.ts,src/ai-sdk/index.ts}",
+      "comment": "Published package surfaces (see each package.json#exports); consumers may be external or reach them through workspace package exports Fallow does not follow.",
+      "file": "{src/sdk/*.ts,src/ai-sdk/index.ts,packages/proxy/src/index.ts,packages/proxy/src/node.ts}",
       "exports": ["*"]
     },
     {
@@ -287,7 +290,7 @@
     },
     {
       "comment": "Tool config default exports, loaded by the tool rather than imported.",
-      "file": "{oxlint.config.ts,tsdown.config.ts,vitest.mutation.config.ts,website/rspress.config.ts}",
+      "file": "{oxlint.config.ts,tsdown.config.ts,packages/proxy/tsdown.config.ts,vitest.mutation.config.ts,website/rspress.config.ts}",
       "exports": ["default"]
     },
     {

scripts/layering/package-boundaries.test.ts

@@ -19,6 +19,7 @@ import {
   rootExternalDependencyRanges,
   rootWorkspaceDependencyNames,
   specifierSites,
+  workspacePackagesFromManifests,
   type WorkspacePackage,
 } from './package-boundaries.ts';
 import { listTrackedTypeScriptFiles } from './tracked-sources.ts';
@@ -33,6 +34,7 @@ const kernel: WorkspacePackage = {
     ['@agent-device/kernel/device', 'packages/kernel/src/device.ts'],
   ]),
   workspaceDependencies: new Set(),
+  workspaceDependencyField: 'dependencies',
   externalDependencies: new Map(),
 };
 
@@ -43,6 +45,7 @@ const contracts: WorkspacePackage = {
     ['@agent-device/contracts/interaction', 'packages/contracts/src/interaction.ts'],
   ]),
   workspaceDependencies: new Set(['@agent-device/kernel']),
+  workspaceDependencyField: 'dependencies',
   externalDependencies: new Map(),
 };
 
@@ -368,6 +371,34 @@ test('root workspace specifiers need a root workspace:* entry and an exported su
   assert.equal(checkRootSites(unknown, ALL, new Set([kernel.name])).length, 1);
 });
 
+test('a published package declares its bundled workspace siblings as devDependencies', () => {
+  const manifest = (name: string, isPrivate: boolean) =>
+    JSON.stringify({
+      name,
+      private: isPrivate,
+      exports: { '.': './src/index.ts' },
+      devDependencies: { '@agent-device/kernel': 'workspace:*' },
+    });
+  const packages = workspacePackagesFromManifests(
+    new Map([
+      ['packages/published/package.json', manifest('@agent-device/published', false)],
+      ['packages/internal/package.json', manifest('@agent-device/internal', true)],
+    ]),
+  );
+  const published = packages.find((pkg) => pkg.name === '@agent-device/published');
+  const internal = packages.find((pkg) => pkg.name === '@agent-device/internal');
+  assert.ok(published && internal);
+  assert.deepEqual([...published.workspaceDependencies], ['@agent-device/kernel']);
+  assert.deepEqual([...internal.workspaceDependencies], []);
+
+  const undeclared = specifierSites(
+    'packages/published/src/index.ts',
+    "import { g } from '@agent-device/contracts/interaction';",
+  );
+  const [violation] = checkPackageInternalSites(published, undeclared, [...ALL, published]);
+  assert.match(violation?.message ?? '', /packages\/published\/package\.json devDependencies\.$/);
+});
+
 test('the real tree parses, declares, and passes R11', () => {
   const packages = readWorkspacePackages(repoRoot);
   assert.ok(packages.length >= 1, 'expected at least the kernel package');

scripts/layering/package-boundaries.ts

@@ -49,6 +49,8 @@ export type WorkspacePackage = {
   exportTargets: ReadonlyMap<string, string>;
   /** Declared `workspace:*` dependencies on sibling internal packages. */
   workspaceDependencies: ReadonlySet<string>;
+  /** Where siblings are declared: a published package bundles them, so it lists them as dev-only. */
+  workspaceDependencyField: 'dependencies' | 'devDependencies';
   /** Non-workspace dependencies that the root build must externalize. */
   externalDependencies: ReadonlyMap<string, string>;
 };
@@ -102,6 +104,7 @@ export function workspacePackagesFromManifests(
       private?: boolean;
       exports?: Record<string, { default?: string } | string>;
       dependencies?: Record<string, string>;
+      devDependencies?: Record<string, string>;
     };
     if (!manifest.name) continue;
     const exportTargets = new Map<string, string>();
@@ -113,8 +116,9 @@ export function workspacePackagesFromManifests(
         path.posix.join('packages', entry, path.posix.normalize(targetFile)),
       );
     }
+    const workspaceDependencyField = manifest.private === true ? 'dependencies' : 'devDependencies';
     const workspaceDependencies = new Set(
-      Object.entries(manifest.dependencies ?? {})
+      Object.entries(manifest[workspaceDependencyField] ?? {})
         .filter(([, range]) => range.startsWith('workspace:'))
         .map(([name]) => name),
     );
@@ -128,6 +132,7 @@ export function workspacePackagesFromManifests(
       name: manifest.name,
       exportTargets,
       workspaceDependencies,
+      workspaceDependencyField,
       externalDependencies,
     });
   }
@@ -190,7 +195,7 @@ export function checkPackageInternalSites(
         line: site.line,
         message:
           `${pkg.name} imports '${site.specifier}' without declaring "${name}": "workspace:*" ` +
-          `in ${pkg.dir}/package.json dependencies.`,
+          `in ${pkg.dir}/package.json ${pkg.workspaceDependencyField}.`,
       });
     }
     if (!target.exportTargets.has(site.specifier)) {

test/wire-compat/ledger.json

@@ -185,10 +185,10 @@
     "packages/contracts/src/daemon-http.ts#DAEMON_HTTP_UPSTREAM_INSTANCE_HEADER": "sha256:4564c2ce437d30d7a823e3326f4375c0750ba8d42bec22b4d02e8eb7f7db2973",
     "packages/contracts/src/daemon-http.ts#DAEMON_HTTP_INSTANCE_MISMATCH_HEADER": "sha256:a197edaf7f9fa94a6aab269856aa852da3204cc586f5fd23198689eb11908b61",
     "src/daemon/server/http-instance-precondition.ts#refuseStaleDaemonInstance": "sha256:cf9b6f9dd95bb2593e4810c5b5939936b6d6358bf2614c7c234266cab1922d29",
-    "packages/proxy/src/daemon-proxy.ts#refuseStaleProxyInstance": "sha256:82d39a1c241f1fb91c6bda2a55e9fde7b6d70db1a1a1496bef0eabf546ea706e",
-    "packages/proxy/src/daemon-proxy.ts#sendInstanceMismatch": "sha256:d61ce46ef35d7aee9be4a41a79c84f372b05370097e3d8c8c109f06d494bfc55",
+    "packages/proxy/src/daemon-proxy.ts#refuseStaleProxyInstance": "sha256:a5d802a666fd04a5c41a40bf3c96cbb4d05d6b449e950cf52098836df01df6ea",
+    "packages/proxy/src/daemon-proxy.ts#sendInstanceMismatch": "sha256:7d0a889f8c7a8151a5ac7a37f52620a269b707144303cae7304825fca49e2a0d",
     "packages/contracts/src/daemon-http.ts#buildDaemonInstanceMismatchRpcResponse": "sha256:24e50130bbd0c4a21dfc51005cabf118525b9121f918719a2c16f73fcfcfbcf9",
-    "packages/proxy/src/daemon-proxy.ts#buildUpstreamInstancePreconditionHeaders": "sha256:9f7a2f1a3f86fce2c939f03fce3c6db061c31d1a4bb8074a563e3c81196ecfbe",
+    "packages/proxy/src/daemon-proxy.ts#buildUpstreamInstancePreconditionHeaders": "sha256:9f5d76a1f761d65fabd7244fc67295fed5934a544e86a6455451ef8520cf1615",
     "src/daemon-client/daemon-client-transport.ts#buildRemoteInstancePreconditionHeaders": "sha256:70241561c4070a8ebbdbbdb4ebcdbdfcb9543501cbb649a6d71cf041aee55a08",
     "src/daemon-client/daemon-client-transport.ts#isRemoteInstanceMismatchResponse": "sha256:7670f48fe0fc7344f8a000cd303e49788ec7ea9d1c729bcdc2af73ff02dae04d",
     "src/daemon-client/daemon-client-transport.ts#isRemoteInstanceMismatch": "sha256:6d4cfdd36bd44686d2a48990491faf63ba9117fb760f982fd72922c99be8daee"
@@ -401,18 +401,18 @@
     },
     {
       "declaration": "packages/proxy/src/daemon-proxy.ts#refuseStaleProxyInstance",
-      "digest": "sha256:82d39a1c241f1fb91c6bda2a55e9fde7b6d70db1a1a1496bef0eabf546ea706e",
-      "rationale": "#2650 adds conditional RPC refusal and retry only for peers that advertise complete instance IDs. Released peers advertise none, so new clients keep per-command health probes and send their unchanged RPC; older clients omit the new request precondition and parse existing responses as before."
+      "digest": "sha256:a5d802a666fd04a5c41a40bf3c96cbb4d05d6b449e950cf52098836df01df6ea",
+      "rationale": "Moved into @agent-device/proxy and rewritten over fetch Request/Response so the proxy can run on any transport. The 409 status, instance-mismatch header, JSON-RPC error body, and forwarded upstream precondition header are unchanged on the wire, so peers on both sides parse them as before."
     },
     {
       "declaration": "packages/proxy/src/daemon-proxy.ts#sendInstanceMismatch",
-      "digest": "sha256:d61ce46ef35d7aee9be4a41a79c84f372b05370097e3d8c8c109f06d494bfc55",
-      "rationale": "#2650 adds conditional RPC refusal and retry only for peers that advertise complete instance IDs. Released peers advertise none, so new clients keep per-command health probes and send their unchanged RPC; older clients omit the new request precondition and parse existing responses as before."
+      "digest": "sha256:7d0a889f8c7a8151a5ac7a37f52620a269b707144303cae7304825fca49e2a0d",
+      "rationale": "Moved into @agent-device/proxy and rewritten over fetch Request/Response so the proxy can run on any transport. The 409 status, instance-mismatch header, JSON-RPC error body, and forwarded upstream precondition header are unchanged on the wire, so peers on both sides parse them as before."
     },
     {
       "declaration": "packages/proxy/src/daemon-proxy.ts#buildUpstreamInstancePreconditionHeaders",
-      "digest": "sha256:9f7a2f1a3f86fce2c939f03fce3c6db061c31d1a4bb8074a563e3c81196ecfbe",
-      "rationale": "#2650 adds conditional RPC refusal and retry only for peers that advertise complete instance IDs. Released peers advertise none, so new clients keep per-command health probes and send their unchanged RPC; older clients omit the new request precondition and parse existing responses as before."
+      "digest": "sha256:9f5d76a1f761d65fabd7244fc67295fed5934a544e86a6455451ef8520cf1615",
+      "rationale": "Moved into @agent-device/proxy and rewritten over fetch Request/Response so the proxy can run on any transport. The 409 status, instance-mismatch header, JSON-RPC error body, and forwarded upstream precondition header are unchanged on the wire, so peers on both sides parse them as before."
     },
     {
       "declaration": "src/daemon-client/daemon-client-transport.ts#buildRemoteInstancePreconditionHeaders",

test/wire-compat/module-resolution.ts

@@ -42,6 +42,7 @@ const TS_GLOBALS = new Set([
   'Error',
   'Exclude',
   'Extract',
+  'Headers',
   'Map',
   'NonNullable',
   'Omit',
@@ -54,7 +55,9 @@ const TS_GLOBALS = new Set([
   'ReadonlyArray',
   'Record',
   'RegExp',
+  'Request',
   'Required',
+  'Response',
   'ReturnType',
   'Set',
   'URL',

test/wire-compat/wire-mutations.test.ts

@@ -60,8 +60,8 @@ const MUTATIONS: readonly WireMutation[] = [
     breakClass: 'instance refusal: the proxy drops the mismatch response header',
     file: 'packages/proxy/src/daemon-proxy.ts',
     name: 'sendInstanceMismatch',
-    from: "res.setHeader(DAEMON_HTTP_INSTANCE_MISMATCH_HEADER, 'true');",
-    to: '',
+    from: "{ status: 409, headers: { [DAEMON_HTTP_INSTANCE_MISMATCH_HEADER]: 'true' } }",
+    to: '{ status: 409 }',
   },
   {
     breakClass: 'instance refusal: the shared RPC error code changes',