Merge remote-tracking branch 'origin/main' into feat/maestro-setPermissions

# Conflicts:
#	packages/maestro/src/internal/__tests__/program-ir-parser.test.ts
#	packages/maestro/src/internal/__tests__/runtime-port-fixtures.ts
#	packages/maestro/src/internal/conformance-normalize.ts
#	packages/maestro/src/internal/program-ir-command-parser.ts
#	packages/maestro/src/internal/program-ir.ts
#	packages/maestro/src/internal/runtime-port-commands.ts
#	packages/maestro/src/internal/runtime-port-types.ts
#	packages/maestro/test/conformance/expected-divergence.ts
#	scripts/fuzz/validation-arbitraries-maestro.ts
#	src/daemon/adapters/maestro/__tests__/daemon-runtime-public-operation.test.ts
#	src/daemon/adapters/maestro/daemon-runtime-port.ts
#	src/daemon/adapters/maestro/daemon-runtime-public-operation.ts

Author: Rohit3523

.fallowrc.json

@@ -19,7 +19,6 @@
     "src/daemon.ts",
     "packages/capture-kit/src/png-worker.ts",
     "scripts/patch-xcuitest-runner-icon.ts",
-    "scripts/runner-request-count/run.ts",
     "packages/capture-kit/src/ios-snapshot-engine/replay.ts",
     // #1596 regression fixture: runs as a real `node --experimental-strip-types`
     // subprocess (test/integration/daemon-replace-exit-flush.test.ts), so
@@ -31,7 +30,6 @@
     "examples/sdk/contracts-result.ts",
     "examples/sdk/batch-orchestration.ts",
     "examples/sdk/ai-sdk-tools.ts",
-    "test/scripts/metro-prepare-packaged-smoke.mjs",
     "test/integration/*.test.ts",
     "website/docs/404.mdx",
     "website/rspress.config.ts"
@@ -91,6 +89,16 @@
       "file": "packages/platform-apple/src/app-resolution-facade.ts",
       "exports": ["buildAppNotInstalledError"]
     },
+    {
+      "comment": "Runner operations reach the daemon only through the memoized loader in src/platform-runtime-apple-application-tools.ts (one dynamic import per specifier, #2314). Fallow cannot connect a member read off that loader's promise to these re-exports; keep the list to the facade members no static import consumes.",
+      "file": "packages/platform-apple/src/runner-operations-facade.ts",
+      "exports": [
+        "detachIosSimulatorRunnerSessionsForShutdown",
+        "hasLiveIosRunnerSession",
+        "releaseSpeculativeIosRunnerSessionFor",
+        "stopAllIosRunnerSessions"
+      ]
+    },
     {
       "comment": "Apple install mechanics are reached through the named install-artifact façade. Fallow cannot connect workspace package exports to these source exports; keep this list limited to the actual facade re-exports.",
       "file": "packages/platform-apple/src/core/install-artifact.ts",
@@ -496,6 +504,11 @@
         "summarizeAgentBrowserProcesses",
         "summarizeManagedAgentBrowserProcesses"
       ]
+    },
+    {
+      "comment": "src/runtime.ts keeps its published type surface while its implementation moves to src/runtime-factory.ts (#2540). These two re-exports have no in-repo consumer; they stay so the module's exported shape is unchanged.",
+      "file": "src/runtime.ts",
+      "exports": ["CommandPolicy", "CommandSessionRecord"]
     }
   ],
   "usedClassMembers": [

.github/actions/setup-android-replay-host/action.yml

@@ -39,6 +39,17 @@ runs:
         echo "value=${{ hashFiles('android/snapshot-helper/AndroidManifest.xml', 'android/snapshot-helper/debug.keystore', 'android/snapshot-helper/src/**', 'android/ime-helper/AndroidManifest.xml', 'android/ime-helper/res/**', 'android/ime-helper/src/**', 'scripts/build-android-helper.sh', 'scripts/package-android-helper.sh', '.github/actions/setup-android-replay-host/action.yml') }}" >> "$GITHUB_OUTPUT"
       shell: bash
 
+    # The helper build refuses to guess its build-tools version on CI, and that version decides
+    # the APK bytes, so both cache keys name it as well.
+    - name: Declare the pinned Android build tools
+      if: inputs.package-helpers == 'true'
+      id: android-build-tools
+      run: |
+        BUILD_TOOLS_VERSION=36.0.0
+        echo "AGENT_DEVICE_ANDROID_BUILD_TOOLS=$BUILD_TOOLS_VERSION" >> "$GITHUB_ENV"
+        echo "version=$BUILD_TOOLS_VERSION" >> "$GITHUB_OUTPUT"
+      shell: bash
+
     - name: Restore packaged Android helpers
       if: inputs.package-helpers == 'true'
       id: android-helpers-cache
@@ -47,7 +58,7 @@ runs:
         path: |
           android/snapshot-helper/dist
           android/ime-helper/dist
-        key: android-helpers-${{ runner.os }}-${{ runner.arch }}-api36-v${{ steps.android-helper-source.outputs.version }}-${{ steps.android-helper-source.outputs.value }}
+        key: android-helpers-${{ runner.os }}-${{ runner.arch }}-api36-bt${{ steps.android-build-tools.outputs.version }}-v${{ steps.android-helper-source.outputs.version }}-${{ steps.android-helper-source.outputs.value }}
 
     - name: Install Android helper SDK packages
       if: inputs.package-helpers == 'true' && steps.android-helpers-cache.outputs.cache-hit != 'true'
@@ -62,7 +73,7 @@ runs:
           exit 1
         fi
         yes | "$SDKMANAGER" --licenses >/dev/null || true
-        "$SDKMANAGER" "platforms;android-36" "build-tools;36.0.0"
+        "$SDKMANAGER" "platforms;android-36" "build-tools;$AGENT_DEVICE_ANDROID_BUILD_TOOLS"
       shell: bash
 
     - name: Package npm-bundled Android helpers
@@ -86,4 +97,4 @@ runs:
         path: |
           android/snapshot-helper/dist
           android/ime-helper/dist
-        key: android-helpers-${{ runner.os }}-${{ runner.arch }}-api36-v${{ steps.android-helper-source.outputs.version }}-${{ steps.android-helper-source.outputs.value }}
+        key: android-helpers-${{ runner.os }}-${{ runner.arch }}-api36-bt${{ steps.android-build-tools.outputs.version }}-v${{ steps.android-helper-source.outputs.version }}-${{ steps.android-helper-source.outputs.value }}

.github/workflows/ios.yml

@@ -29,7 +29,7 @@ on:
       - 'packages/*/src/**/*.test.ts'
       - 'packages/*/src/**/__tests__/**/*.ts'
       - 'packages/platform-android/src/**'
-      - 'src/snapshot/snapshot-presentation/android/**'
+      - 'packages/capture-kit/src/snapshot/snapshot-presentation/android/**'
       - 'packages/platform-harmonyos/src/**'
       - 'packages/platform-linux/src/**'
       - 'packages/platform-vega/src/**'
@@ -147,12 +147,15 @@ jobs:
 
       - name: Run targeted iOS runner XCTest regressions
         run: |
+          set -o pipefail
           XCTESTRUN_PATH="$(find "$AGENT_DEVICE_IOS_RUNNER_DERIVED_PATH/Build/Products" -maxdepth 1 -name '*.xctestrun' -print -quit)"
           test -n "$XCTESTRUN_PATH"
           xcodebuild test-without-building \
             -xctestrun "$XCTESTRUN_PATH" \
             -destination "platform=iOS Simulator,id=${{ steps.ios-simulator.outputs.simulator-udid }}" \
             -only-testing:AgentDeviceRunnerUITests/RunnerTests/testSinglePointerFlingFallsBackToXCTestCoordinateDragWhenPrivateSynthesisFails \
+            -only-testing:AgentDeviceRunnerUITests/RunnerTests/testAlertDispatchResolvesItsOwnModalWithoutCoordinateTapRoutingProbe \
+            -only-testing:AgentDeviceRunnerUITests/RunnerTests/testAlertResolutionCannotBypassRequestedDeadline \
             -only-testing:AgentDeviceRunnerUITests/RunnerTests/testTypeWithoutResolvedInputReturnsTypedFailureBeforeDispatchingText \
             -only-testing:AgentDeviceRunnerUITests/RunnerTests/testBareTypeUsesTappedInputWhenSoftwareKeyboardIsHidden \
             -only-testing:AgentDeviceRunnerUITests/RunnerTests/testHardwareKeyboardResponderConfirmsItsOwnKeyboardFocus \
@@ -162,6 +165,16 @@ jobs:
             -only-testing:AgentDeviceRunnerUITests/RunnerTests/testEmptyReplacementWithoutResolvableTargetFailsClosed \
             -only-testing:AgentDeviceRunnerUITests/RunnerTests/testTextEntryTapWitnessIsBoundToTargetIdentity \
             -only-testing:AgentDeviceRunnerUITests/RunnerTests/testCoordinateTapTextInputProbeSkipsPenalizedXCTestChannel \
+            -only-testing:AgentDeviceRunnerUITests/RunnerTests/testScrollViewportKeyboardClipMatchesGoldenParityTable \
+            -only-testing:AgentDeviceRunnerUITests/RunnerTests/testScrollViewportPolicyUsesParityTableConstants \
+            -only-testing:AgentDeviceRunnerUITests/RunnerTests/testScrollViewportDispatchKeepsTheUnclippedFrameAsItsCoordinateRotationBasis \
+            -only-testing:AgentDeviceRunnerUITests/RunnerTests/testSynthesizedGesturePoliciesMatchCommandContracts \
+            -only-testing:AgentDeviceRunnerUITests/RunnerTests/testFreshCoordinateTapContainsUnavailableTextInputProbe \
+            -only-testing:AgentDeviceRunnerUITests/RunnerTests/testTextInputProbeIssueScopeIsThreadBound \
+            -only-testing:AgentDeviceRunnerUITests/RunnerTests/testTextInputProbePreservesEnclosingRunnerWait \
+            -only-testing:AgentDeviceRunnerUITests/RunnerTests/testSuppressedAxIssueMakesTextInputProbeUnavailable \
+            -only-testing:AgentDeviceRunnerUITests/RunnerTests/testHealthyCoordinateTapPreservesBareTypingWitness \
+            -only-testing:AgentDeviceRunnerUITests/RunnerTests/testTextInputProbeContainmentExcludesRequiredReadsAndLaterIssues \
             -only-testing:AgentDeviceRunnerUITests/RunnerTests/testCoordinateTextInputCandidateMustBeEnabledAndContainTheTouchPoint \
             -only-testing:AgentDeviceRunnerUITests/RunnerTests/testQuerySelectorPrefersHittableMatchOverNonHittableDuplicate \
             -only-testing:AgentDeviceRunnerUITests/RunnerTests/testActivateTargetSkipsForegroundAndActivatesNonForegroundApplication \
@@ -173,6 +186,7 @@ jobs:
             -only-testing:AgentDeviceRunnerUITests/RunnerTests/testAlertDismissDoesNotActivateAReplacementWithTheSameTitle \
             -only-testing:AgentDeviceRunnerUITests/RunnerTests/testAlertCannotProveAnIdenticalReplacementAndDoesNotActivateIt \
             -only-testing:AgentDeviceRunnerUITests/RunnerTests/testAlertDeadlineBeforeActivationLeavesTheOriginalUntouched \
+            -only-testing:AgentDeviceRunnerUITests/RunnerTests/testAlertHittableProbeCompletingAfterDeadlineLeavesTheOriginalUntouched \
             -only-testing:AgentDeviceRunnerUITests/RunnerTests/testSystemModalProbeSliceSharesAndClampsToPlanDeadline \
             -only-testing:AgentDeviceRunnerUITests/RunnerTests/testDispatchRecoverySkipsBookkeepingWhileXCTestChannelOccupied \
             -only-testing:AgentDeviceRunnerUITests/RunnerTests/testBoundedSystemModalProbeTimeoutRecoversThenReleasesOnDrain \
@@ -232,7 +246,15 @@ jobs:
             -only-testing:AgentDeviceRunnerUITests/RunnerTests/testCustomActionCoverageParsesOnlyCompletePairs \
             -only-testing:AgentDeviceRunnerUITests/RunnerTests/testPartialCustomActionPassIsDisclosedAndCompleteOneIsNot \
             -only-testing:AgentDeviceRunnerUITests/RunnerTests/testActionNamesAreCappedPerElementAndReported \
-            -only-testing:AgentDeviceRunnerUITests/RunnerTests/testHungCustomActionReadIsContainedAndRecovers
+            -only-testing:AgentDeviceRunnerUITests/RunnerTests/testHungCustomActionReadIsContainedAndRecovers \
+            -only-testing:AgentDeviceRunnerUITests/RunnerTests/testPrivateAXPinnedRegularDepthReachesAcquisitionAndPresentation 2>&1 | tee /tmp/agent-device-runner-regressions.log
+          node --input-type=module -e '
+            import { readFileSync } from "node:fs";
+            const log = readFileSync("/tmp/agent-device-runner-regressions.log", "utf8");
+            if (!/\] AGENT_DEVICE_RUNNER_OPTIONAL_PROBE_WAIT_COMPLETED$/m.test(log)) {
+              throw new Error("Optional observation ended the runner test before its wait completed");
+            }
+          '
 
       - name: Preflight iOS runner through public CLI
         run: |

.github/workflows/macos.yml

@@ -70,6 +70,14 @@ jobs:
         uses: ./.github/actions/run-gate
         with: { gate: macos-coverage }
 
+      # The npm package ships apple/runner/** as rewritten Swift source, and nothing in the repo
+      # compiles the result — the first consumer is a user's xcodebuild. This lane is the only one
+      # with a Swift toolchain, so it is where `swiftc -parse` over the packaged files runs; the
+      # line-parity half of the same gate needs no toolchain. Seconds, no simulator (#2461).
+      - name: Check the packaged runner Swift parses and keeps its line numbering
+        uses: ./.github/actions/run-gate
+        with: { gate: packaged-runner-swift }
+
       - name: Run iOS snapshot Swift/TypeScript differential
         uses: ./.github/actions/run-gate
         with: { gate: ios-snapshot-differential }

.github/workflows/release-android-snapshot-helper.yml

@@ -23,6 +23,9 @@ jobs:
     name: Publish Android Snapshot Helper
     runs-on: ubuntu-latest
     timeout-minutes: 30
+    env:
+      # The helper build refuses to guess its build-tools version on CI.
+      AGENT_DEVICE_ANDROID_BUILD_TOOLS: 36.0.0
     steps:
       - name: Checkout
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
@@ -46,7 +49,7 @@ jobs:
             exit 1
           fi
           yes | "$SDKMANAGER" --licenses >/dev/null
-          "$SDKMANAGER" "platforms;android-36" "build-tools;36.0.0"
+          "$SDKMANAGER" "platforms;android-36" "build-tools;$AGENT_DEVICE_ANDROID_BUILD_TOOLS"
 
       - name: Check Java toolchain
         run: |

.github/workflows/size.yml

@@ -31,6 +31,9 @@ jobs:
     if: github.event.pull_request.head.repo.full_name == github.repository
     runs-on: ubuntu-latest
     timeout-minutes: 10
+    env:
+      # The helper build refuses to guess its build-tools version on CI.
+      AGENT_DEVICE_ANDROID_BUILD_TOOLS: 36.0.0
     steps:
       - name: Checkout
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
@@ -58,7 +61,7 @@ jobs:
             exit 1
           fi
           yes | "$SDKMANAGER" --licenses >/dev/null || true
-          "$SDKMANAGER" "platforms;android-36" "build-tools;36.0.0"
+          "$SDKMANAGER" "platforms;android-36" "build-tools;$AGENT_DEVICE_ANDROID_BUILD_TOOLS"
 
       # dist is fully determined by the base commit, so reuse it across PR runs
       # against the same base. Startup medians are still measured fresh on this
@@ -73,6 +76,7 @@ jobs:
       - name: Measure base size
         run: |
           git checkout --detach "${{ github.event.pull_request.base.sha }}"
+          cp scripts/size-report-package.mjs /tmp/agent-device-size-report/
           pnpm install --frozen-lockfile
           if [ "${{ steps.base-dist-cache.outputs.cache-hit }}" != "true" ]; then
             pnpm build

.prettierignore

@@ -10,8 +10,6 @@ examples/test-app/.expo/
 DerivedData/
 android/snapshot-helper/build/
 android/snapshot-helper/dist/
-android/multitouch-helper/build/
-android/multitouch-helper/dist/
 
 # Tool caches
 .fallow/

.worktreeinclude

@@ -56,9 +56,8 @@ Read the declaration rather than maintaining a prose copy:
   `src/commands/common-input-fields.ts` and `src/commands/input-audience.ts`
 
 Shared selector parsing and matching belongs in `@agent-device/selectors`; request cancellation
-and progress in `@agent-device/capture-kit` (`request-cancel`, `request-progress`); cross-layer
-contracts in `@agent-device/contracts`; CLI flags in `src/commands/cli-grammar`; cross-surface schema
-composition in `src/cli-schema`.
+and progress in `@agent-device/host-kit/request`; cross-layer contracts in `packages/contracts/src`;
+CLI flags in `src/commands/cli-grammar`; cross-surface schema composition in `src/cli-schema`.
 
 Resolve registry completeness failures at the missing declaration. Diagnose other gate failures
 at their reported invariant; do not suppress them or add an allowlist to get a pass. Build interaction
@@ -82,13 +81,11 @@ under `contracts/fixtures/`.
 
 - Name modules for the domain question they answer and colocate machine-readable claims with their
   enforcement. Internal barrels are legacy; add barrels only at package boundaries.
-- Implementation files target at most 300 lines. Extract before adding behavior past 500 lines;
-  files past 1,000 lines are architecture debt unless generated or fixture data.
+- Files past 1,000 lines are architecture debt; split them before adding behavior, unless they
+  are generated or fixture data.
 - Tests mirror source topology one-to-one. Split a source module and its test together; do not add to
   the legacy `interaction.test.ts` or platform `index.test.ts` aggregations. Pure moves carry their
   tests unchanged; rename-only hunks owe no new coverage.
-- `src/daemon/handlers/session.ts` is already over budget; extract the relevant platform-specific
-  concept before adding behavior.
 
 ## Toolchain and worktree traps
 
@@ -104,8 +101,8 @@ under `contracts/fixtures/`.
 
 ## Runtime and diagnostics seams
 
-Diagnostics use `@agent-device/capture-kit/diagnostics`. Request diagnostics belong in the session request log;
-session artifact paths come from `src/daemon/session-store.ts`. App/device logs remain in `app.log`;
+Diagnostics use `@agent-device/host-kit/diagnostics`. Request diagnostics belong in the session request log;
+session artifact paths come from `src/daemon/session-artifact-paths.ts`. App/device logs remain in `app.log`;
 Apple runner and xcodebuild output remains in `runner.log`.
 
 Normalize failures with `normalizeError` and preserve `hint`, `diagnosticId`, `logPath`, and typed