Extend the exact-symbol façade gate to @agent-device/ad-script

[thymikee]

Small tooling chip, split out of the #1478 P5 follow-ups and named a prerequisite by #1557 (S1) — previously untracked.

Gap (verified on main ≥ 761317deb): scripts/layering/package-boundaries.test.ts pins @agent-device/ad-script only at the export-map level (exportTargets keys = ['@agent-device/ad-script'], workspace deps), while @agent-device/ad-replay additionally gets the readNamedExports exact exported-symbol pin on packages/ad-replay/src/index.ts (the #1555 review's "reviewer-required exact exported-symbol gate", with export * / export default rejection). ad-script's façade widened during P5 (identity vocabulary, classifyTargetBindingMatch, the vars module moved in) with no symbol-level ratchet — a stray export currently slips through the exports-subpath check.

Scope: mirror the ad-replay pattern — one readNamedExports assertion pinning the exact symbol list of packages/ad-script/src/index.ts, added beside the existing ad-script boundary rows. Pure test/tooling change; no production code.

Sequencing: land before the S1 spike (#1557) runs, per that issue's "after #1555 merges and the façade-ratchet follow-up lands".

[thymikee]

Already implemented by #1574, which is a strict superset of this scope: it pins exact façade symbols for @agent-device/ad-script and every other workspace package. PR #1574 is reviewed, green, and ready for human merge. Keep this tracker open until that PR lands, then close it as completed; do not schedule a duplicate worker.

[thymikee]

Completed by #1574, which landed a broader version of this: scripts/layering/facade-symbols.ts pins the exact exported-symbol list for every workspace package façade (ad-script included, at FACADE_SYMBOLS line 23), with facade-exports.ts/facade-exports.test.ts enforcing "every exports-map subpath needs a pinned symbol list (and vice versa)". The S1 spike (#1557) sequencing prerequisite is satisfied.

---

Generated by Claude Code