refactor(replay): dispatch through a neutral envelope and consume the daemon through typed capabilities

The replay unit no longer imports anything under src/daemon outside itself:
request types come from the wire shape in contracts, nested dispatch carries a
ReplayDispatchOptions bag the handler folds into the request's private half,
the session is a structural ReplaySessionState slice, the coordinator is built
by the handler and passed in, and the five daemon policy calls arrive as
capabilities on the session and a dependencies bag.

Author: thymikee

packages/ad-script/package.json

@@ -6,18 +6,13 @@
   "type": "module",
   "description": "Private canonical .ad replay script codec (read + write) for agent-device.",
   "dependencies": {
-    "@agent-device/capture-kit": "workspace:*",
     "@agent-device/contracts": "workspace:*",
     "@agent-device/kernel": "workspace:*"
   },
   "exports": {
     ".": {
       "types": "./src/index.ts",
       "default": "./src/index.ts"
-    },
-    "./target-evidence": {
-      "types": "./src/target-evidence.ts",
-      "default": "./src/target-evidence.ts"
     }
   }
 }

packages/ad-script/src/internal/__tests__/target-annotation-identity.test.ts

@@ -70,7 +70,7 @@ test('matchesLocalIdentity: with no recorded id, role+label must both match, abs
 // ---------------------------------------------------------------------------
 // Shared id demotion. `idMatchCountInTree` / `demoteNonUniqueLocalIdentity`
 // are the ONE shared uniqueness predicate behind both id-demotion sites (the
-// `target-v1` identity tuple `@agent-device/ad-script/target-evidence` writes at record
+// `target-v1` identity tuple `@agent-device/selectors/target-evidence` writes at record
 // time, and the selector chain `buildSelectorChainForNode` builds — see
 // `src/__tests__/selectors-build.test.ts` for that consumer's own coverage). Neither
 // consumer test exercises the pair directly; these tests pin the shared

packages/ad-script/src/internal/target-annotation-classification.ts

@@ -8,7 +8,7 @@
  * deviations"): this used to live in `@agent-device/ad-replay`'s
  * `target-identity.ts`, reasoning that it was engine-owned policy rather
  * than script vocabulary. In practice its only real consumers were the
- * daemon's RECORD-time self-check (`target-evidence.ts`)
+ * daemon's RECORD-time self-check (`@agent-device/selectors/target-evidence`)
  * and its REPLAY-time classification wrapper
  * (`src/daemon/replay/internal/session-replay-target-classification.ts`) — both
  * daemon files, neither reachable through `inspectAdReplay`/`runAdReplay`.

packages/ad-script/src/internal/target-annotation-identity.ts

@@ -2,7 +2,7 @@
  * ADR 0012 decision 3: the record/replay-shared local-identity + ancestry-
  * prefix matching over versioned `.ad` target-binding evidence, plus the
  * bounded diagnostic diffs built on top of it. Both the writer (over
- * `SnapshotNode`-derived values, `target-evidence.ts`) and
+ * `SnapshotNode`-derived values, `@agent-device/selectors/target-evidence`) and
  * replay-time verification (`src/daemon/replay/internal/session-replay-target-classification.ts` and
  * `src/commands/interaction/runtime/selector-wait.ts`) share this verbatim so both
  * sides compute the SAME identity/ancestry match by construction (#1478 P5
@@ -49,7 +49,7 @@ type IdentityTreeNode = Pick<RawSnapshotNode, 'type' | 'identifier' | 'label'>;
  * ADR 0012 decision 3: the ONE snapshot-node local-identity reader —
  * normalized (NFC, label whitespace collapse, `normalizeType` role) AND
  * 256-byte field-capped, on every path. Shared by the record-time writer
- * (`target-evidence.ts`), replay-time verification
+ * (`@agent-device/selectors/target-evidence`), replay-time verification
  * (`src/daemon/replay/internal/session-replay-target-verification.ts`), and the
  * dispatch-side post-resolution guard
  * (`src/commands/interaction/runtime/resolution.ts`), so all three compute

packages/ad-script/src/internal/target-annotation-serde.ts

@@ -1,7 +1,7 @@
 /**
  * ADR 0012 decision 3: versioned `.ad` target-binding evidence — the
  * comment-line SERDE half shared by the writer
- * (`target-evidence.ts`) and the parser
+ * (`@agent-device/selectors/target-evidence`) and the parser
  * (`packages/ad-script/src/internal/script.ts`). Owns the wire type,
  * canonical field order, normalization, size caps, and payload
  * parsing/validation.

packages/capture-kit/src/ios-snapshot-engine/index.ts

@@ -5,6 +5,6 @@ export {
   presentIosInteractiveSnapshot,
 } from './semantic-index.ts';
 export { collectIosStructuralIdentifierSuppression } from './noise-structural.ts';
-export { findNearestScrollableContainer, mergeReplacement, updateReplacement } from './tree.ts';
+export { mergeReplacement, updateReplacement } from './tree.ts';
 export { IosSnapshotEngineError, toIosSnapshotEngineErrorDetails } from './types.ts';
 export type { SnapshotTreeRuleContext } from './tree.ts';

packages/contracts/src/daemon-wire-request.ts

@@ -14,7 +14,10 @@ export type DaemonInstallSource = PublicDaemonInstallSource;
  * wire can express and the lease coordinates the router reads. Public throughout: nothing here
  * names live session state.
  */
-export type DaemonWireRequestMeta = Omit<PublicDaemonRequestMeta, 'installSource' | 'lockPlatform'> & {
+export type DaemonWireRequestMeta = Omit<
+  PublicDaemonRequestMeta,
+  'installSource' | 'lockPlatform'
+> & {
   installSource?: DaemonInstallSource;
   lockPlatform?: PlatformSelector;
   leaseBackend?: LeaseBackend;

packages/selectors/package.json

@@ -4,7 +4,7 @@
   "private": true,
   "sideEffects": false,
   "type": "module",
-  "description": "Shared selector matching, argument, and replay semantics for agent-device. `.` is string-only; `./ast` is the published parser surface behind `agent-device/selectors`; `./engine` is the resolve/list surface reserved for the selector-pipeline owner (R19); `./parameterized-recorded-fill` parameterizes recorded fill payloads against their selectors; the interaction-resolution subpaths (`./selector-pipeline`, `./interaction-targeting`, `./interaction-touch-point`, `./press-retarget`, `./absence-observation*`, …) host the engine execution surface owned by the pipeline; `./snapshot-geometry-fixtures` is the canonical home for the geometry/touch-point test fixtures this package and root tests both build on (it re-exports `makeSnapshotState` from `@agent-device/capture-kit/snapshot-state-fixtures`, its own canonical home).",
+  "description": "Shared selector matching, argument, and replay semantics for agent-device. `.` is string-only; `./ast` is the published parser surface behind `agent-device/selectors`; `./engine` is the resolve/list surface reserved for the selector-pipeline owner (R19); `./parameterized-recorded-fill` parameterizes recorded fill payloads against their selectors; the interaction-resolution subpaths (`./selector-pipeline`, `./interaction-targeting`, `./interaction-touch-point`, `./press-retarget`, `./absence-observation*`, \u2026) host the engine execution surface owned by the pipeline; `./snapshot-geometry-fixtures` is the canonical home for the geometry/touch-point test fixtures this package and root tests both build on (it re-exports `makeSnapshotState` from `@agent-device/capture-kit/snapshot-state-fixtures`, its own canonical home).",
   "dependencies": {
     "@agent-device/ad-script": "workspace:*",
     "@agent-device/capture-kit": "workspace:*",
@@ -79,6 +79,10 @@
     "./touch-semantics": {
       "types": "./src/touch-semantics.ts",
       "default": "./src/touch-semantics.ts"
+    },
+    "./target-evidence": {
+      "types": "./src/target-evidence.ts",
+      "default": "./src/target-evidence.ts"
     }
   },
   "devDependencies": {

…es/ad-script/src/target-evidence.test.ts …es/selectors/src/target-evidence.test.tspackages/ad-script/src/target-evidence.test.ts renamed to packages/selectors/src/target-evidence.test.ts packages/ad-script/src/target-evidence.test.ts renamed to packages/selectors/src/target-evidence.test.ts

@@ -29,21 +29,21 @@ import type {
   TargetScrollRegion,
   TargetVerification,
 } from '@agent-device/contracts/replay';
-import { classifyTargetBindingMatch } from './internal/target-annotation-classification.ts';
 import {
+  buildAncestryChain,
+  buildIndexMap,
+  classifyTargetBindingMatch,
   demoteNonUniqueLocalIdentity,
+  filterIdentitySet,
   matchesLocalIdentity,
   readNodeLocalIdentity,
-  siblingOrdinal,
-} from './internal/target-annotation-identity.ts';
-import {
   serializeTargetAnnotationV1,
+  siblingOrdinal,
   utf8ByteLength,
+  type LocalIdentity,
   TARGET_ANNOTATION_MAX_ANCESTRY,
   TARGET_ANNOTATION_MAX_PAYLOAD_BYTES,
-} from './internal/target-annotation-serde.ts';
-import { buildAncestryChain, buildIndexMap, filterIdentitySet } from './internal/target-evidence-tree.ts';
-import type { LocalIdentity } from './internal/target-annotation-identity.ts';
+} from '@agent-device/ad-script';
 
 /** ADR 0012 decision 3: the resolved winner and the tree it was resolved from. */
 export type RecordedTargetCapture = {