refactor: cut the daemon's commands-closure leak and its last root hubs (successor to #2278 and #2335)

[thymikee]

Purpose

Remove the last structural coupling that makes the daemon expensive to change and impossible to package, and stop it paying for the whole command pipeline it never calls. Successor to #2278 (residual semantic coupling, closed) and #2335 (decoupling wave 3, closed). Those waves moved code into packages and classified what remained; this one cuts the two things measurement shows are still load-bearing.

Measured at 9aa6465768 with the gate's own model (pnpm depgraph plus a throwaway probe against scripts/layering/model.ts): 1,684 production files, 8,689 edges, 38 zones, R4 = 0, R5 = 0, R6 = 4.

Two findings drive the sequence:

1. The daemon's eager value closure contains 121 src/commands/** files (717 files total in the closure). One value edge is responsible for 48 of them: src/runtime.ts → ./commands/index.ts. Five daemon files import src/runtime.ts.
2. Daemon → src/ outside the daemon is 51 file pairs (42 root flat files, 7 src/core/**, 2 src/cli-schema/**), down from 154 edges into 67 files at the wave-3 baseline. Twelve of those pairs are one file, src/provider-device-runtime.ts, and ten of its twelve importers need exactly one symbol, isActiveProviderDevice.

Fan-in is not cost. Churn over the last 400 commits: src/backend.ts 53, src/provider-device-runtime.ts 19, src/runtime.ts 6, src/runtime-contract.ts 5, src/io.ts 4. runtime-contract.ts has 27 importers and is nearly frozen; it is not a target.

Children

Wave A (independent):

• refactor(daemon): stop importing the commands barrel through src/runtime.ts #2540 — refactor(daemon): stop importing the commands barrel through src/runtime.ts. The closure leak; the only child that changes what the daemon loads.
• refactor(runtime): own provider-device admission behind a typed capability #2541 — refactor(runtime): own provider-device admission behind a typed capability. 12 pairs → 0.
• chore(gates): classify root hubs, dynamic edges, and the root-to-daemon entry #2542 — chore(gates): classify root hubs, dynamic edges, and the root-to-daemon entry. Makes the residue in this issue visible and non-regrowing.

Wave B (after Wave A):

• refactor(cli-schema): orient the schema layer below commands #2543 — refactor(cli-schema): orient the schema layer below commands. 5 value back-edges, 7 type-only.
• refactor(daemon): extract the maestro adapter and durable-capture admission subtrees #2544 — refactor(daemon): extract the maestro adapter and durable-capture admission subtrees. Blocked on where daemon-request lives.

Wave B is not scheduled while a Wave A branch is open on the same files; src/commands/index.ts (#2540) and cli-schema/command-schema.ts (#2543) overlap, and #2542 owns the R76 inventory both #2541 and #2544 want to edit.

Completion conditions

This umbrella closes when every child is closed and:

• The daemon's value closure reaches src/commands only through src/runtime-command-surface.ts, contains only the capture, selectors, and interactions runtime families (src/commands/*/runtime/**) plus their shared runtime helpers, and includes no command facet, CLI reader, output formatter, or the all-family barrel. Measured at 775163bb35: 34 files, 6,368 LOC, down from 121 files, 19,659 LOC. Zero was the original wording; it is unreachable while the daemon executes those three families in-process, and relocating the runtime directories would only change the count, not what loads (decided 2026-09-14 on refactor(daemon): stop importing the commands barrel through src/runtime.ts #2540).
• Daemon → src/ outside src/daemon/ carries only (a) edges classified composition-essential or daemon-policy-essential by the R76 inventory, (b) the shared runtime contracts and command surface (backend.ts, runtime-contract.ts, runtime-factory.ts, runtime-command-surface.ts, io.ts, src/core/**), and (c) process-root contracts that refactor(daemon): stop the client value-importing daemon internals (#2559) #2594 moved out of the daemon so the client could share them without importing daemon internals (daemon-resolution.ts, daemon-process.ts, request-progress-protocol.ts, session-repair-tombstone.ts). No daemon file imports a root hub that reaches platform mechanics outside the inventory. The raw pair count is not the target: it was 51 at 9aa6465768, 42 after Wave A, and 52 after refactor(daemon): stop the client value-importing daemon internals (#2559) #2594 by design, because the client-side repair added daemon → root leaves rather than removing them (reworded 2026-09-16).
• pnpm depgraph reports the same R4/R5 = 0 and R6 does not grow past its ratchet.

Explicitly not scheduled

• Packaging the daemon. Inbound is already only ~20 non-daemon files and no packages/** file imports src/**, but packaging it before the closure cut and the hub ports just relocates the eager-closure problem. gates: let the eager-closure budget tolerate a module split without admitting new eager work #2469 must also land first: the eager-closure budget cannot currently tolerate a module split.
• Moving src/backend.ts or src/runtime-contract.ts. Both are type-only surfaces (value closure of backend.ts is one file) with churn of 53 and 5 commits per 400. Relocating a near-frozen type surface is a rename, not decoupling.
• Growing @agent-device/contracts as a destination for src/core/** without a separate measurement of its own churn. At 18k LOC and 185 files it is the second hub in the repo.
• Collocation-only file moves, generic hook bags, and new gate detectors that do not name a measured edge. Per fix/refactor: 2026-09-11 audit execution, successor to #2409 #2531's rules: fix-shaped, not detector-shaped.

Reproduction

pnpm depgraph --out /tmp/depgraph.json, or a throwaway scripts/layering/.probe.ts over listSourceFiles() + resolveImportEdges() restricted to isProductionSourceFile, computing per-bucket outbound pairs, edge kinds (typeOnly/dynamic), and value-only transitive closure from src/daemon/**. Delete the probe after.

[thymikee]

Wave B review (#2543, #2544): both are implementable, with corrections posted on each

Sequencing change. The "zero src/commands/** in the daemon closure" condition is not reachable by #2540 alone. Probe at e6f288012b: cutting src/runtime.ts → commands/index.ts leaves 75 commands files in the closure; also cutting the daemon's two cli-schema/command-schema.ts imports takes it to 0. The second path is command-schema.ts → command-metadata.ts → family/registry.ts → every family. Details on #2540. Either #2540 owns those two edges or the umbrella condition waits for #2543.

#2543 — the premise "the back edges carry vocabulary that commands owns" is wrong for the two heaviest value edges. command-overrides.ts → family/registry.ts and command-schema.ts → command-metadata.ts consume the per-command cliSchema that each facet authors through defineCommandFacet; family/registry.ts imports all twelve families and cannot move into a package. The layer splits: flag grammar and text vocabulary go down to packages/command-registry, and the facet-schema aggregation goes up into commands. Body edited accordingly.

#2544 — the "where does daemon-request.ts live" blocker is already answered by the code. DaemonRequest = DaemonWireRequest & { internal?: DaemonRequestInternal }; daemon-request-wire.ts imports only contracts and kernel, and internal is what carries SessionState. Cut sets measured on the comment there. The admission family's cut set is SessionState/SessionStore types plus safeSessionName; that half will most likely end at the issue's own "stop and report" branch.

Both labelled ready-for-agent.

[thymikee]

Umbrella condition needs the same correction: 0 → 34

Wave A layer 1 is up as #2548. The umbrella's first completion condition ("daemon value closure contains zero src/commands/** files") is not reachable: the daemon executes capture/selectors/interactions commands in-process, and those families are ~34 files. Measured after #2548: 121 → 108; after #2543's two cli-schema/command-schema.ts edges: 34; 0 requires the daemon to stop running commands in-process, which no child proposes.

Proposed condition 1, replacing the zero: the daemon's value closure contains src/commands files only from the three families it dispatches through (capture, selectors, interactions), and no daemon file imports the all-family barrel.

Also correcting the Wave A/B note: recordedFlagKeys must move down to packages/command-registry under #2543, not be imported by the daemon directly — a direct daemon → commands edge violates R2 commands-floor. Full arithmetic on #2540.

[thymikee]

Decision: completion condition 1 is the dispatched-families invariant, not zero

Body updated. The 34-file residue after #2548 and #2562 is the execution code for the three families the daemon runs in-process (30 files under src/commands/{capture,interaction}/runtime/** plus four shared runtime helpers), reached through one entry, src/runtime-command-surface.ts. Reaching 0 would need either a path-only relocation of those directories (changes the count, not what loads; ruled out by the "no collocation-only moves" rule above) or the daemon dispatching through the client instead of executing in-process (an architecture change unrelated to the closure cost this issue targets).

Measured at 775163bb35 with the umbrella's probe:

	files	LOC
baseline 9aa6465768	121	19,659
now	34	6,368

#2540 is closed on this. Still open under this umbrella: #2543 step 3 (aggregation moves up; 2 cli-schema → commands value edges remain), #2559 (root → daemon entry, 6 daemon-client value edges), #2555 (core/interactors.ts edge), #2544 (not started), and #2541/#2542 pending their spin-offs.

[thymikee]

Status at ad9b906140: #2541, #2542, #2543 closed as complete (see each). Completion condition 2 reworded: the raw daemon → root pair count is not the target, since #2594 intentionally added daemon → root leaves so the client stops importing daemon internals; the condition now names the allowed residue. #2544 is the only open child and is in progress.

[thymikee]

Closing: every child is closed and every completion condition holds on main at 91652a8fc5.

condition	measured
daemon reaches src/commands only through src/runtime-command-surface.ts, runtime families only	36 files / 6,515 LOC, all */runtime/** + 4 shared runtime helpers; no facet, reader, formatter, or barrel (baseline 121 / 19,659)
daemon → root residue	52 pairs; every target outside the shared-contract set is a platform-runtime* / provider-device-runtime* module classified in R76
R4 / R5 / R6	0 / 0 / 3 (R6 down from 4)
daemon dynamic edges leaving the zone	0
packages/** → src/**	0
src/daemon/adapters/**	removed (#2652)
durable-capture admission family	in capture-kit (#2651); touches only { perfCapture, audioProbe, screenRecording } on SessionState

Daemon zone now: 313 production files, 49,501 LOC. Delivered by #2548, #2556, #2557, #2561, #2562, #2590, #2593, #2594, #2651, #2652.