feat: delegate reviewed managed automation
Summary
Delegate reviewed managed operations through exact lease authority and transport scope: iOS/Android deployment, push, clipboard and settings, plus Android screenshots. Each operation passes its actual task into admission; deep readiness validates canonical identity without recursively admitting or booting locally. Cleanup retains transport scope after fencing.
Simulator readiness captures its callback at lazy runtime binding, preserving eager-import budgets. Unsupported Android bundles fail before uninstall or bundletool dispatch. Unreviewed operations remain unavailable; Simlock owns allocation and lifecycle. Request admission wiring follows this layer.
Based on published #2311 65bcfb1696037872ff2159a19097f18153ea2731, following #2308 and #2307 on main 80997b6bf1. Scope: 18 files, 992 gross lines across the authorized managed owner and Apple/Android mechanics.
Validation
Tested commit: 9195cb7b37ba0af09a1c6b7c3b58e2a0c1545293.
The exact-head pnpm check:affected --run passed: 4,214 selected tests across 549 files, plus all runnable build, package, structural, typecheck, lint and Fallow checks. The explicit import-closure rerun passed all 420 cases.
All 456 focused checks pass, including 420 import-closure checks. Planted regressions exposed dispatch after admission, local readiness, deep clipboard boot, and unsupported deployment work. Native fixtures cover private transports, cancellation, fencing, and cleanup. Independent final contract/consumer review found no concrete issues.
Three scenarios moved unchanged to provider-integration. Both CI selectors caught a planted failure at the new path; all 12 focused instrumented tests passed.
Current-head CI, including Integration, Coverage and iOS smoke, is green. Live managed-device evidence remains blocked by later admission/publication wiring, so this is published, not merge-ready.
Docs and skills are unchanged because no public managed request path is activated.