@stim-cli/core 1.15.0 → 1.17.0

package/dist/state.mjs

@@ -1,12 +1,312 @@
 import { _ as releaseClaim, f as isClaimRefusal, g as readClaimSet, x as tryAcquireClaim } from "./ownership-claim-O31Y5iIb.mjs";
 import { inspectProcessIdentity } from "./process-identity.mjs";
-import { C as workspaceStateDir, h as rotatedLogPath, j as withDirLock, l as configDir, x as workspaceName } from "./core-BwaxUjLX.mjs";
-import { closeSync, existsSync, mkdirSync, openSync, readFileSync, readSync, readdirSync, realpathSync, statSync } from "node:fs";
+import { C as workspaceStateDir, h as rotatedLogPath, j as withDirLock, l as configDir, x as workspaceName } from "./core-DWOUn9xp.mjs";
+import { closeSync, existsSync, fstatSync, lstatSync, mkdirSync, openSync, readFileSync, readSync, readdirSync, realpathSync, statSync } from "node:fs";
 import { availableParallelism, homedir, loadavg } from "node:os";
 import { basename, dirname, isAbsolute, join, posix, relative, resolve, sep } from "node:path";
 import { createHash } from "node:crypto";
+import { isIP } from "node:net";
 import { AsyncLocalStorage } from "node:async_hooks";
 import { StringDecoder } from "node:string_decoder";
+//#region state/agent-actions.ts
+const EVENTS_VERSION = 1;
+function object$1(value) {
+	return value && typeof value === "object" && !Array.isArray(value) ? value : null;
+}
+function parseAgentEvents(lines) {
+	const events = [];
+	const started = [];
+	const finished = [];
+	let session = null;
+	let unknownVersion = null;
+	for (const line of lines) {
+		let entry;
+		try {
+			entry = object$1(JSON.parse(line));
+		} catch {
+			continue;
+		}
+		if (!entry) continue;
+		const ts = typeof entry.ts === "string" ? Date.parse(entry.ts) : NaN;
+		if (entry.version !== EVENTS_VERSION) {
+			unknownVersion ??= {
+				version: entry.version,
+				ts: Number.isFinite(ts) ? ts : null
+			};
+			continue;
+		}
+		if (typeof entry.session === "string") session ??= entry.session;
+		const { kind, command, summary } = entry;
+		const requestId = typeof entry.requestId === "string" ? entry.requestId : null;
+		if (kind === "request.started" && requestId && Number.isFinite(ts)) started.push([requestId, ts]);
+		const scopeChange = kind === "request.started" && (command === "open" || command === "close");
+		if (kind !== "action.recorded" && kind !== "request.finished" && !scopeChange) continue;
+		const failed = kind === "request.finished" && entry.status === "error";
+		if (kind === "request.finished" && !failed) {
+			if (requestId) finished.push(requestId);
+			continue;
+		}
+		if (!Number.isFinite(ts) || typeof entry.session !== "string" || typeof command !== "string") continue;
+		if (typeof summary !== "string" && !scopeChange) continue;
+		events.push({
+			ts,
+			session: entry.session,
+			kind,
+			command,
+			summary: typeof summary === "string" ? summary : "",
+			failed,
+			details: object$1(entry.details),
+			requestId
+		});
+	}
+	return {
+		events,
+		started,
+		finished,
+		session,
+		unknownVersion
+	};
+}
+const RUNNER_DEVICE = /-destination\s+"?platform=iOS Simulator,id=([^",\s]+)|AgentDeviceRunner\.env\.session-(.+?)-owner-/;
+const LOG_TIME = /^(\d{4}-\d{2}-\d{2}) (\d{2}:\d{2}:\d{2})(\.\d+)?([+-]\d{2})?(\d{2})?\b/;
+function logTime(line) {
+	const match = LOG_TIME.exec(line);
+	if (!match) return null;
+	const [, date, time, fraction = "", offsetHours, offsetMinutes] = match;
+	const offset = offsetHours && offsetMinutes ? `${offsetHours}:${offsetMinutes}` : "";
+	const at = Date.parse(`${date}T${time}${fraction.slice(0, 4)}${offset}`);
+	return Number.isFinite(at) ? at : null;
+}
+function parseRunnerSpans(text) {
+	const spans = [];
+	let pending = null;
+	for (const line of text.split("\n")) {
+		const device = RUNNER_DEVICE.exec(line);
+		if (device) {
+			pending = device[1] ?? device[2] ?? null;
+			continue;
+		}
+		if (pending === null) continue;
+		const at = logTime(line);
+		if (at === null) continue;
+		if (spans.at(-1)?.deviceId !== pending) spans.push({
+			deviceId: pending,
+			from: spans.length ? at : -Infinity
+		});
+		pending = null;
+	}
+	return spans;
+}
+function sessionSpans(runner, closes) {
+	return runner.map((span, i) => {
+		const previous = runner[i - 1]?.from ?? -Infinity;
+		const close = closes.findLast((at) => at > previous && at < span.from);
+		return close === void 0 ? span : {
+			...span,
+			from: close + 1
+		};
+	});
+}
+function spanDevice(spans, ts) {
+	let device = null;
+	for (const span of spans) if (span.from <= ts) device = span.deviceId;
+	return device;
+}
+function platformOf(event) {
+	const platform = event.details?.platform;
+	return platform === "ios" || platform === "android" ? platform : void 0;
+}
+function agentRecord(event, deviceId, target, startedAt) {
+	return {
+		ts: event.ts,
+		...startedAt !== void 0 && startedAt <= event.ts ? { startedAt } : {},
+		src: "agent",
+		level: event.failed ? "error" : "info",
+		msg: event.summary,
+		event: event.failed ? "agent_failed" : "agent_action",
+		command: event.command,
+		session: event.session,
+		...target.platform ? { platform: target.platform } : {},
+		...deviceId ? { deviceId } : {},
+		...target.slot === "default" ? {} : { slot: target.slot },
+		...event.details ? { details: event.details } : {}
+	};
+}
+function formatUnknownRecord(session, unknown, target, now) {
+	return {
+		ts: unknown.ts ?? now,
+		src: "agent",
+		level: "warn",
+		msg: `agent-device session ${session} records events in an unrecognized format (version ${JSON.stringify(unknown.version) ?? "missing"}); its actions are not shown.`,
+		event: "agent_format_unknown",
+		session,
+		...target.platform ? { platform: target.platform } : {},
+		...target.slot === "default" ? {} : { slot: target.slot }
+	};
+}
+function readCompleteLines(path, start) {
+	let fd;
+	try {
+		fd = openSync(path, "r");
+		const stat = fstatSync(fd);
+		const size = stat.size;
+		const identity = `${stat.dev}:${stat.ino}`;
+		if (size <= start) return {
+			text: "",
+			next: start,
+			size,
+			identity
+		};
+		const buffer = Buffer.alloc(size - start);
+		const read = readSync(fd, buffer, 0, buffer.length, start);
+		const end = buffer.subarray(0, read).lastIndexOf(10);
+		return {
+			text: end < 0 ? "" : buffer.toString("utf8", 0, end + 1),
+			next: start + end + 1,
+			size,
+			identity
+		};
+	} catch {
+		return null;
+	} finally {
+		if (fd !== void 0) closeSync(fd);
+	}
+}
+function trackMacosOpen(cursor, event, unknownVersion) {
+	const flags = object$1(event.details?.flags);
+	if (!event.failed) cursor.macos = event.details?.platform === "macos" || flags?.platform === "macos";
+	cursor.bundleId = cursor.macos && !event.failed && !unknownVersion && flags?.surface === "app" && typeof event.details?.appBundleId === "string" ? event.details.appBundleId : null;
+}
+/**
+* Reads agent-device session actions incrementally from the supplied sessions directories. With targets,
+* records are restricted to those devices; without targets, retained session metadata supplies attribution.
+* Missing directories and unreadable files yield no records.
+*/
+function createAgentActionReader({ sessionsDirs, targets: resolveTargets, sinceTs = -Infinity, now = Date.now, claimedDevice = () => null }) {
+	const cursors = /* @__PURE__ */ new Map();
+	return () => {
+		const targets = typeof resolveTargets === "function" ? resolveTargets() : resolveTargets;
+		if (targets && !targets.length) return [];
+		const byId = new Map(targets?.map((target) => [target.id, target]));
+		const macosByBundle = new Map(targets?.flatMap((target) => target.platform === "macos" ? [[target.bundleId, target]] : []));
+		const sessionDirs = (typeof sessionsDirs === "function" ? sessionsDirs() : sessionsDirs).flatMap((sessionsDir) => {
+			try {
+				return readdirSync(sessionsDir).map((name) => ({
+					name,
+					sessionsDir,
+					dir: join(sessionsDir, name)
+				}));
+			} catch {
+				return [];
+			}
+		});
+		const out = [];
+		for (const { name, sessionsDir, dir } of sessionDirs) {
+			const eventsPath = join(dir, "events.ndjson");
+			const lines = [];
+			let cursor = cursors.get(dir);
+			if (!cursor) {
+				try {
+					if (statSync(eventsPath).mtimeMs < sinceTs) continue;
+				} catch {
+					continue;
+				}
+				cursor = {
+					offset: 0,
+					closes: [],
+					runner: null,
+					session: null,
+					unknownReported: false,
+					started: /* @__PURE__ */ new Map(),
+					macos: false,
+					bundleId: null,
+					closing: null
+				};
+				cursors.set(dir, cursor);
+				try {
+					lines.push(...readFileSync(`${eventsPath}.1`, "utf8").split("\n"));
+				} catch {}
+			}
+			let chunk = readCompleteLines(eventsPath, cursor.offset);
+			if (chunk && (chunk.size < cursor.offset || cursor.identity && chunk.identity !== cursor.identity)) {
+				cursor.bundleId = null;
+				chunk = readCompleteLines(eventsPath, 0);
+			}
+			if (!chunk) continue;
+			cursor.identity = chunk.identity;
+			cursor.offset = chunk.next;
+			lines.push(...chunk.text.split("\n"));
+			const parsed = parseAgentEvents(lines);
+			for (const [requestId, at] of parsed.started) cursor.started.set(requestId, at);
+			cursor.session ??= parsed.session;
+			const session = cursor.session;
+			const matched = new Map(parsed.events.flatMap((event) => event.requestId && cursor.started.has(event.requestId) ? [[event.requestId, cursor.started.get(event.requestId)]] : []));
+			const failed = parsed.events.flatMap((event) => event.failed && event.requestId ? [event.requestId] : []);
+			for (const requestId of [...parsed.finished, ...failed]) cursor.started.delete(requestId);
+			for (const requestId of [...cursor.started.keys()].slice(0, -64)) cursor.started.delete(requestId);
+			if (!parsed.events.length && !parsed.unknownVersion) continue;
+			const runnerPath = join(dir, "runner.log");
+			let runnerSize = -1;
+			try {
+				runnerSize = statSync(runnerPath).size;
+			} catch {}
+			if (cursor.runner?.size !== runnerSize) {
+				let text = "";
+				try {
+					text = readFileSync(runnerPath, "utf8");
+				} catch {}
+				cursor.runner = {
+					size: runnerSize,
+					spans: parseRunnerSpans(text)
+				};
+			}
+			for (const event of parsed.events) if (event.command === "close" && event.kind === "action.recorded") cursor.closes.push(event.ts);
+			const spans = sessionSpans(cursor.runner.spans, cursor.closes);
+			const deviceAt = (ts) => spans.length ? spanDevice(spans, ts) : session && claimedDevice(session, sessionsDir);
+			cursor.platform ??= parsed.events.map(platformOf).find((platform) => platform !== void 0);
+			cursor.platform ??= spans.length ? "ios" : void 0;
+			const retainedTarget = () => ({
+				platform: cursor.platform,
+				slot: "default"
+			});
+			if (parsed.unknownVersion && !cursor.unknownReported) {
+				const deviceId = spans.at(-1)?.deviceId ?? (session && claimedDevice(session, sessionsDir));
+				const target = !targets ? retainedTarget() : cursor.macos ? cursor.bundleId ? macosByBundle.get(cursor.bundleId) : void 0 : deviceId ? byId.get(deviceId) : void 0;
+				if (target) {
+					cursor.unknownReported = true;
+					out.push(formatUnknownRecord(session ?? name, parsed.unknownVersion, target, now()));
+				}
+			}
+			if (parsed.unknownVersion) cursor.bundleId = null;
+			for (const event of parsed.events) {
+				if (event.kind === "request.started") {
+					cursor.closing = event.command === "close" ? cursor.bundleId : null;
+					cursor.bundleId = null;
+					continue;
+				}
+				if (targets && event.command === "open") trackMacosOpen(cursor, event, Boolean(parsed.unknownVersion));
+				if (targets && cursor.macos) {
+					if (event.command === "screenshot") continue;
+					const bundleId = cursor.bundleId ?? (event.command === "close" ? cursor.closing : null);
+					cursor.closing = null;
+					const target = bundleId ? macosByBundle.get(bundleId) : void 0;
+					const startedAt = event.requestId ? matched.get(event.requestId) : void 0;
+					if (target?.platform === "macos" && event.ts >= Math.max(sinceTs, target.launchedAt) && (startedAt ?? event.ts) >= target.launchedAt) out.push(agentRecord(event, target.id, target, startedAt));
+					if (event.command === "close") cursor.bundleId = null;
+					continue;
+				}
+				if (event.ts < sinceTs) continue;
+				if (!targets) cursor.platform = platformOf(event) ?? cursor.platform;
+				const deviceId = !targets && cursor.platform === "android" ? null : deviceAt(event.ts);
+				const target = targets ? deviceId ? byId.get(deviceId) : void 0 : retainedTarget();
+				const startedAt = event.requestId ? matched.get(event.requestId) : void 0;
+				if (target) out.push(agentRecord(event, deviceId || null, target, startedAt));
+			}
+		}
+		return out.toSorted((a, b) => a.ts - b.ts);
+	};
+}
+//#endregion
 //#region state/json-file.ts
 const readScope = new AsyncLocalStorage();
 /**
@@ -49,6 +349,64 @@ function readJsonObject(path) {
 	}
 }
 //#endregion
+//#region state/agent-device-usage.ts
+function agentDeviceUsageFile() {
+	return join(configDir(), "agent-device-usage.json");
+}
+function readAgentDeviceUsageCache() {
+	const value = readJsonObject(agentDeviceUsageFile());
+	if (!value || value.version !== 1) return null;
+	const { roots, ...usage } = value;
+	if (!validUsage(usage) || !validRoots(roots)) return null;
+	return {
+		usage,
+		roots
+	};
+}
+function readAgentDeviceUsage() {
+	const value = readJsonObject(agentDeviceUsageFile());
+	if (!value) return null;
+	const { roots: _roots, ...usage } = value;
+	return validUsage(usage) ? usage : null;
+}
+function object(value) {
+	return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+function bytes(value) {
+	return value === null || typeof value === "number" && Number.isFinite(value) && value >= 0;
+}
+function sized(value) {
+	return object(value) && typeof value.dir === "string" && bytes(value.bytes);
+}
+function count$1(value) {
+	return typeof value === "number" && Number.isInteger(value) && value >= 0;
+}
+function nullableString(value) {
+	return value === null || typeof value === "string";
+}
+function validRoots(value) {
+	return object(value) && typeof value.stateDir === "string" && typeof value.runnerRoot === "string" && typeof value.hostedDir === "string" && Array.isArray(value.workspaceDirs) && value.workspaceDirs.every((dir) => typeof dir === "string");
+}
+function validUsage(value) {
+	const { stateDir: state, runnerBuilds: runner, workspaces, hosted } = value;
+	return value.version === 1 && typeof value.measuredAt === "string" && Number.isFinite(Date.parse(value.measuredAt)) && typeof value.bytes === "number" && bytes(value.bytes) && typeof value.complete === "boolean" && sized(state) && typeof state.present === "boolean" && sized(state.sessions) && count$1(state.sessions.count) && sized(state.logs) && object(state.other) && bytes(state.other.bytes) && Array.isArray(state.other.largest) && state.other.largest.every((entry) => object(entry) && typeof entry.name === "string" && bytes(entry.bytes)) && sized(runner) && typeof runner.present === "boolean" && bytes(runner.sharedBytes) && Array.isArray(runner.platforms) && runner.platforms.every((platform) => sized(platform) && typeof platform.platform === "string" && Array.isArray(platform.entries) && platform.entries.every((entry) => sized(entry) && typeof entry.name === "string" && nullableString(entry.lastUsedAt) && nullableString(entry.packageVersion) && nullableString(entry.xcodeBuildVersion) && typeof entry.inUse === "boolean" && [
+		null,
+		"lease",
+		"lock",
+		"unreadable"
+	].includes(entry.inUseReason))) && Array.isArray(workspaces) && workspaces.every((entry) => sized(entry) && nullableString(entry.projectRoot)) && (hosted === null || sized(hosted) && count$1(hosted.sessions));
+}
+//#endregion
+//#region state/swiftpm-cache-usage.ts
+function swiftpmCacheUsageFile() {
+	return join(configDir(), "swiftpm-cache-usage.json");
+}
+function readSwiftpmCacheUsage() {
+	const value = readJsonObject(swiftpmCacheUsageFile());
+	if (!value || value.version !== 1 || typeof value.measuredAt !== "string" || !Number.isFinite(Date.parse(value.measuredAt)) || typeof value.dir !== "string" || typeof value.present !== "boolean" || typeof value.complete !== "boolean" || !(value.bytes === null || typeof value.bytes === "number" && Number.isFinite(value.bytes) && value.bytes >= 0)) return null;
+	return value;
+}
+//#endregion
 //#region state/paths.ts
 function getConfigPath() {
 	return join(configDir(), "config.json");
@@ -59,6 +417,9 @@ function configLockPath() {
 function workspaceMetadataFile(projectRoot) {
 	return join(workspaceStateDir(projectRoot), "workspace.json");
 }
+function workspaceAgentDeviceDir(projectRoot) {
+	return join(workspaceStateDir(projectRoot), "agent-device");
+}
 function workspaceLogsDir(projectRoot) {
 	return join(workspaceStateDir(projectRoot), "logs");
 }
@@ -164,6 +525,39 @@ function deviceViewersDir() {
 function statsFile() {
 	return join(configDir(), "stats.json");
 }
+function maintenanceDir() {
+	return join(configDir(), "maintenance");
+}
+function maintenanceStateFile() {
+	return join(maintenanceDir(), "state.json");
+}
+function maintenanceAttemptFile() {
+	return join(maintenanceDir(), "attempt.json");
+}
+function maintenanceNdjsonFile() {
+	return join(maintenanceDir(), "maintenance.ndjson");
+}
+function maintenanceChildLogFile() {
+	return join(maintenanceDir(), "child.log");
+}
+function maintenanceRunClaims() {
+	return join(maintenanceDir(), "run.claims");
+}
+function archiveRoot() {
+	return join(configDir(), "archive");
+}
+function archiveDir(id) {
+	return join(archiveRoot(), id);
+}
+function archiveLock() {
+	return join(archiveRoot(), ".lock");
+}
+function serverSetupDir() {
+	return join(configDir(), "server", "setup");
+}
+function setupJournalFile(hash) {
+	return hash.length === 64 && /^[a-f0-9]{64}$/.test(hash) ? join(serverSetupDir(), `${hash}.json`) : null;
+}
 //#endregion
 //#region state/config.ts
 function withConfigLock(fn) {
@@ -233,6 +627,46 @@ function getConcurrencyLimits({ env = process.env } = {}) {
 		maxDevices: resolveLimit(env.STIM_MAX_DEVICES, c.maxDevices)
 	};
 }
+const MAX_SETTING = {
+	ios: {
+		key: "iosParkedMax",
+		env: "STIM_POOL_IOS_PARKED_MAX"
+	},
+	android: {
+		key: "androidParkedMax",
+		env: "STIM_POOL_ANDROID_PARKED_MAX"
+	}
+};
+function parseMax(raw, strings) {
+	const value = strings && typeof raw === "string" ? /^\d+$/.test(raw.trim()) ? Number(raw.trim()) : NaN : raw;
+	if (typeof value !== "number" || !Number.isSafeInteger(value) || value < 0) return null;
+	return value;
+}
+function getParkedMax(platform, { config, env = process.env } = {}) {
+	const { key, env: envKey } = MAX_SETTING[platform];
+	const fromEnv = env[envKey];
+	const explicit = fromEnv !== void 0 && fromEnv !== "";
+	const pool = (config === void 0 ? loadConfig() : config)?.pool;
+	if (!explicit && pool !== void 0 && (pool === null || typeof pool !== "object" || Array.isArray(pool))) return {
+		max: 0,
+		error: "Invalid pool value. Expected an object with simulator and emulator bounds."
+	};
+	const fromConfig = pool !== null && typeof pool === "object" && !Array.isArray(pool) ? pool[key] : void 0;
+	const raw = explicit ? fromEnv : fromConfig;
+	if (raw === void 0) return {
+		max: env.STIM_HOME ? 0 : 3,
+		error: null
+	};
+	const parsed = parseMax(raw, explicit);
+	if (parsed === null) return {
+		max: 0,
+		error: `Invalid ${explicit ? envKey : `pool.${key}`} value ${JSON.stringify(raw)}. Expected a whole number of parked ${platform === "ios" ? "simulators" : "emulators"}, 0 or more.`
+	};
+	return {
+		max: explicit ? parsed : env.STIM_HOME ? 0 : parsed,
+		error: null
+	};
+}
 function resolveLimit(envVal, cfgVal) {
 	const raw = envVal !== void 0 && envVal !== null && envVal !== "" ? Number(envVal) : typeof cfgVal === "number" ? cfgVal : NaN;
 	if (!Number.isFinite(raw) || raw <= 0) return 0;
@@ -288,6 +722,66 @@ function findProjectByMetroPort(port) {
 	return null;
 }
 //#endregion
+//#region state/tailnet.ts
+const DEFAULT_SERVE_PORT = 7443;
+const TAILNET_MACHINE_PATTERN = "^[A-Za-z0-9][A-Za-z0-9.-]*(?::(?!0+$)(?:[0-5]?[0-9]{1,4}|6[0-4][0-9]{3}|65[0-4][0-9]{2}|655[0-2][0-9]|6553[0-5]))?$";
+function parseMachine(entry) {
+	if (!(/* @__PURE__ */ new RegExp("^[A-Za-z0-9][A-Za-z0-9.-]*(?::(?!0+$)(?:[0-5]?[0-9]{1,4}|6[0-4][0-9]{3}|65[0-4][0-9]{2}|655[0-2][0-9]|6553[0-5]))?$")).test(entry.trim())) return null;
+	const [name, port] = entry.trim().split(":");
+	return {
+		name: name.toLowerCase(),
+		port: port === void 0 ? DEFAULT_SERVE_PORT : Number(port)
+	};
+}
+/**
+* The one peer in `tailscale status --json` whose MagicDNS name is `name` or starts with `name.`. `ID` there is
+* the node's StableID, the same value `tailscale whois` reports as `Node.StableID`.
+*/
+function findPeer(status, name) {
+	const found = (isJsonObject(status) && isJsonObject(status.Peer) ? Object.values(status.Peer) : []).flatMap((peer) => {
+		if (!isJsonObject(peer) || typeof peer.ID !== "string" || typeof peer.DNSName !== "string") return [];
+		const dnsName = peer.DNSName.replace(/\.$/, "").toLowerCase();
+		const addresses = Array.isArray(peer.TailscaleIPs) ? peer.TailscaleIPs.filter((ip) => typeof ip === "string") : [];
+		const address = addresses.find((ip) => !ip.includes(":")) ?? addresses[0];
+		if (!address || !(dnsName === name || dnsName.startsWith(`${name}.`))) return [];
+		return [{
+			nodeId: peer.ID,
+			dnsName,
+			address
+		}];
+	});
+	if (found.length === 0) return "missing";
+	return found.length === 1 ? found[0] : "ambiguous";
+}
+/**
+* Connects to the pinned node's own tailnet address rather than resolving its name, so the socket reaches the
+* node whose ID was just checked. `tailscale serve` still needs the MagicDNS name for TLS (SNI and certificate)
+* and for its Host routing.
+*/
+function endpoint(peer, port) {
+	const address = peer.address.includes(":") ? `[${peer.address}]` : peer.address;
+	const suffix = port === 443 ? "" : `:${port}`;
+	return {
+		url: `wss://${address}${suffix}`,
+		servername: peer.dnsName,
+		host: `${peer.dnsName}${suffix}`
+	};
+}
+/**
+* The endpoint of a paired machine's pinned node, or why Stim does not connect to it. The name must still
+* resolve to exactly the pinned node; the token is never sent anywhere else.
+*/
+function pinnedEndpoint(credential, current) {
+	const parsed = parseMachine(credential.machine);
+	if (!parsed) return `${credential.machine} is not a tailnet name`;
+	if (!isJsonObject(current)) return "Tailscale is not running";
+	const peer = findPeer(current, parsed.name);
+	if (peer === "missing") return `no peer on this tailnet is named ${parsed.name}`;
+	if (peer === "ambiguous") return `several tailnet peers match ${parsed.name}`;
+	if (peer.nodeId !== credential.nodeId) return `${peer.dnsName} is now node ${peer.nodeId}, not the pinned ${credential.nodeId}; run stim doctor`;
+	return endpoint(peer, parsed.port);
+}
+//#endregion
 //#region state/hosted-macos.ts
 /** App slots one host offers; a slot names the host-assigned bundle id `<bundleId>.hosted<slot>`. */
 const HOSTED_MACOS_APP_SLOTS = 64;
@@ -317,11 +811,11 @@ const AGENT_PATH = /^\/device-host\/agent\/[a-f0-9-]{36}\/$/;
 const LEASE_NAME = /^[A-Za-z0-9._-]{1,128}$/;
 const LEASE_DEVICE_KEY = /^[A-Za-z0-9_-]+(?:\.[A-Za-z0-9_-]+)+@[1-9][0-9]{0,9}$/;
 function parseHostedAgentLease(value) {
-	if (!isJsonObject(value) || Object.keys(value).length !== 4 || ![
+	if (!isJsonObject(value) || Object.keys(value).length !== (value.backend === "ios-instance" || value.backend === "android-instance" ? 5 : 4) || ![
 		value.tenant,
 		value.runId,
 		value.clientId
-	].every((name) => typeof name === "string" && LEASE_NAME.test(name)) || typeof value.deviceKey !== "string" || !LEASE_DEVICE_KEY.test(value.deviceKey)) return null;
+	].every((name) => typeof name === "string" && LEASE_NAME.test(name)) || typeof value.deviceKey !== "string" || !(value.backend === "ios-instance" ? /^ios:mobile:[a-fA-F0-9-]{36}$/.test(value.deviceKey) : value.backend === "android-instance" ? /^android:mobile:emulator-[0-9]+$/.test(value.deviceKey) : value.backend === void 0 && LEASE_DEVICE_KEY.test(value.deviceKey))) return null;
 	return value;
 }
 /** A grant naming a driver this client does not know is not usable; it parses as null. */
@@ -345,7 +839,7 @@ function parseHostedAgentAccess(value) {
 		driver: "none",
 		setting: "hosting.agentDriver"
 	} : null;
-	if (value.driver !== "agent-device" || typeof value.remoteConfig !== "string" || !value.remoteConfig.startsWith("/") || typeof value.command !== "string" || !value.command || Object.keys(value).length !== 3) return null;
+	if (value.driver !== "agent-device" || typeof value.remoteConfig !== "string" || !isAbsolute(value.remoteConfig) || typeof value.command !== "string" || !value.command || Object.keys(value).length !== 3) return null;
 	return {
 		driver: "agent-device",
 		remoteConfig: value.remoteConfig,
@@ -434,10 +928,6 @@ const RELATIVE_PATH = {
 };
 const BOOLEAN = { kind: "boolean" };
 const OBJECT = { kind: "object" };
-const REMOTE = {
-	kind: "choice",
-	choices: REMOTE_DEVICE_BACKENDS
-};
 const PARKED_MAX = {
 	kind: "number",
 	integer: true,
@@ -494,7 +984,7 @@ const SETTINGS = [
 		default: "auto"
 	},
 	optimization("android.gradleBuildCache", "Gradle build cache"),
-	optimization("android.targetAbiOnly", "Narrow Debug builds to the device ABI"),
+	optimization("android.targetAbiOnly", "Narrow Debug and hosted Android builds to the device ABI"),
 	{
 		key: "ios.deviceType",
 		type: STRING,
@@ -516,9 +1006,13 @@ const SETTINGS = [
 	},
 	{
 		key: "ios.remote",
-		type: REMOTE,
+		type: {
+			kind: "string",
+			pattern: TAILNET_MACHINE_PATTERN,
+			patternHelp: "eas, proxy, auto, or a tailnet machine name"
+		},
 		scopes: PROJECT,
-		description: "Default remote backend for iOS"
+		description: "Default iOS remote target: eas, proxy, or an approved Mac in hosting.machines; auto places on an approved Mac when this Mac is full or busy"
 	},
 	{
 		key: "ios.simslimProfile",
@@ -610,9 +1104,13 @@ const SETTINGS = [
 	},
 	{
 		key: "android.remote",
-		type: REMOTE,
+		type: {
+			kind: "string",
+			pattern: TAILNET_MACHINE_PATTERN,
+			patternHelp: "eas, proxy, auto, or a tailnet machine name"
+		},
 		scopes: PROJECT,
-		description: "Default remote backend for Android"
+		description: "Default Android remote target: eas, proxy, or an approved Mac in hosting.machines; auto places on an approved Mac when this Mac is full or busy"
 	},
 	{
 		key: "metro.tunnel",
@@ -679,9 +1177,20 @@ const SETTINGS = [
 			minimum: 0
 		},
 		scopes: EVERY,
-		default: 0,
+		default: 30,
 		description: "Minutes an owned simulator or emulator stays idle before the workspace supervisor shuts it down; 0 never"
 	},
+	{
+		key: "devices.reclaimIdleMinutes",
+		type: {
+			kind: "number",
+			integer: true,
+			minimum: 0
+		},
+		scopes: EVERY,
+		default: 10,
+		description: "Minutes an owned simulator or emulator stays idle before a waiting run reclaims its device slot; 0 never"
+	},
 	{
 		key: "macos.product",
 		type: {
@@ -751,6 +1260,79 @@ const SETTINGS = [
 		env: "STIM_RECORDING",
 		description: "Let stim-server record device screens for replay; false stops it and deletes the recordings"
 	},
+	{
+		key: "archive.enabled",
+		type: BOOLEAN,
+		scopes: EVERY,
+		default: true,
+		env: "STIM_ARCHIVE_ENABLED",
+		scopedHomeValue: false,
+		description: "Keep workspace history on removal; false under STIM_HOME unless explicitly enabled"
+	},
+	{
+		key: "archive.maxAgeDays",
+		type: CAPACITY,
+		scopes: MACHINE,
+		default: 30,
+		env: "STIM_ARCHIVE_MAX_AGE_DAYS",
+		description: "Days to keep archived workspace records; 0 keeps nothing"
+	},
+	{
+		key: "archive.maxCount",
+		type: CAPACITY,
+		scopes: MACHINE,
+		default: 200,
+		env: "STIM_ARCHIVE_MAX_COUNT",
+		description: "Archived workspace count; oldest records go first, 0 keeps nothing"
+	},
+	{
+		key: "archive.maxTotalGb",
+		type: GIGABYTES,
+		scopes: MACHINE,
+		default: 5,
+		env: "STIM_ARCHIVE_MAX_TOTAL_GB",
+		description: "Total archived bytes in binary GB; 0 keeps no artifacts"
+	},
+	{
+		key: "archive.logs.maxAgeDays",
+		type: CAPACITY,
+		scopes: MACHINE,
+		default: 14,
+		env: "STIM_ARCHIVE_LOGS_MAX_AGE_DAYS",
+		description: "Days to keep archived logs; 0 keeps none"
+	},
+	{
+		key: "archive.logs.maxMbPerWorkspace",
+		type: GIGABYTES,
+		scopes: MACHINE,
+		default: 100,
+		env: "STIM_ARCHIVE_LOGS_MAX_MB_PER_WORKSPACE",
+		description: "Archived logs per workspace in binary MB; 0 keeps none"
+	},
+	{
+		key: "archive.recordings.maxAgeDays",
+		type: CAPACITY,
+		scopes: MACHINE,
+		default: 3,
+		env: "STIM_ARCHIVE_RECORDINGS_MAX_AGE_DAYS",
+		description: "Days to keep archived recordings; 0 keeps none"
+	},
+	{
+		key: "archive.recordings.maxTotalGb",
+		type: GIGABYTES,
+		scopes: MACHINE,
+		default: 2,
+		env: "STIM_ARCHIVE_RECORDINGS_MAX_TOTAL_GB",
+		description: "Archived recordings in binary GB; 0 keeps none"
+	},
+	{
+		key: "archive.agentActions.maxAgeDays",
+		type: CAPACITY,
+		scopes: MACHINE,
+		default: 7,
+		env: "STIM_ARCHIVE_AGENT_ACTIONS_MAX_AGE_DAYS",
+		description: "Days to keep archived agent-device sessions; 0 keeps none"
+	},
 	{
 		key: "worktree.exclude",
 		type: { kind: "strings" },
@@ -849,6 +1431,179 @@ const SETTINGS = [
 		scopedHomeValue: 0,
 		description: "Live workspaces before idle ones are reclaimed; unset or 0 means no limit"
 	},
+	{
+		key: "maintenance.mode",
+		type: {
+			kind: "choice",
+			choices: ["off", "report"]
+		},
+		scopes: MACHINE,
+		default: "report",
+		env: "STIM_MAINTENANCE",
+		scopedHomeValue: "off",
+		ciValue: "off",
+		description: "Automatic resource maintenance. report measures, plans and logs what it would do and never deletes or stops anything; off disables it. Off under STIM_HOME or CI unless STIM_MAINTENANCE is set"
+	},
+	{
+		key: "maintenance.pressureCheckMinutes",
+		type: {
+			kind: "number",
+			integer: true,
+			minimum: 1
+		},
+		scopes: MACHINE,
+		default: 1,
+		env: "STIM_MAINTENANCE_PRESSURE_CHECK_MINUTES",
+		description: "Disk and memory check interval in minutes"
+	},
+	{
+		key: "maintenance.sizeCheckMinutes",
+		type: {
+			kind: "number",
+			integer: true,
+			minimum: 1
+		},
+		scopes: MACHINE,
+		default: 60,
+		env: "STIM_MAINTENANCE_SIZE_CHECK_MINUTES",
+		description: "Directory size check interval in minutes"
+	},
+	{
+		key: "maintenance.maxLoadPerCore",
+		type: {
+			kind: "number",
+			exclusiveMinimum: 0
+		},
+		scopes: MACHINE,
+		default: 4,
+		env: "STIM_MAINTENANCE_MAX_LOAD_PER_CORE",
+		description: "Defer size scans above this one-minute load per CPU"
+	},
+	{
+		key: "maintenance.logMaxMb",
+		type: {
+			kind: "number",
+			exclusiveMinimum: 0
+		},
+		scopes: MACHINE,
+		default: 1,
+		env: "STIM_MAINTENANCE_LOG_MAX_MB",
+		description: "Machine maintenance log rotation size in MiB"
+	},
+	{
+		key: "maintenance.logRetentionDays",
+		type: {
+			kind: "number",
+			integer: true,
+			minimum: 1
+		},
+		scopes: MACHINE,
+		default: 30,
+		env: "STIM_MAINTENANCE_LOG_RETENTION_DAYS",
+		description: "Retention of the rotated machine maintenance log in days"
+	},
+	{
+		key: "maintenance.logChecks",
+		type: BOOLEAN,
+		scopes: MACHINE,
+		default: false,
+		env: "STIM_MAINTENANCE_LOG_CHECKS",
+		description: "Write debug check records and routine skips"
+	},
+	{
+		key: "maintenance.memoryPressureLevel",
+		type: {
+			kind: "choice",
+			choices: [
+				"warning",
+				"critical",
+				"off"
+			]
+		},
+		scopes: MACHINE,
+		default: "warning",
+		env: "STIM_MAINTENANCE_MEMORY_PRESSURE_LEVEL",
+		description: "Lowest macOS memory pressure level considered; off disables memory pressure reporting"
+	},
+	{
+		key: "maintenance.memoryWarningMinutes",
+		type: {
+			kind: "number",
+			integer: true,
+			minimum: 0
+		},
+		scopes: MACHINE,
+		default: 10,
+		env: "STIM_MAINTENANCE_MEMORY_WARNING_MINUTES",
+		description: "Consecutive warning minutes before memory counts as pressure"
+	},
+	{
+		key: "maintenance.minAvailableMemoryGb",
+		type: {
+			kind: "number",
+			minimum: 0
+		},
+		scopes: MACHINE,
+		env: "STIM_MAINTENANCE_MIN_AVAILABLE_MEMORY_GB",
+		description: "Available-memory threshold in GiB; unset is 10% of RAM"
+	},
+	{
+		key: "maintenance.capTargetPercent",
+		type: {
+			kind: "number",
+			integer: true,
+			minimum: 10,
+			maximum: 100
+		},
+		scopes: MACHINE,
+		default: 80,
+		env: "STIM_MAINTENANCE_CAP_TARGET_PERCENT",
+		description: "Plan toward this percentage of each size cap"
+	},
+	{
+		key: "maintenance.workspaceOutputsMaxGb",
+		type: {
+			kind: "number",
+			minimum: 0
+		},
+		scopes: MACHINE,
+		default: 20,
+		env: "STIM_MAINTENANCE_WORKSPACE_OUTPUTS_MAX_GB",
+		description: "Workspace build-output cap in GiB; 0 means no cap"
+	},
+	{
+		key: "caches.buildCacheMaxGb",
+		type: {
+			kind: "number",
+			minimum: 0
+		},
+		scopes: MACHINE,
+		default: 10,
+		env: "STIM_CACHES_BUILD_CACHE_MAX_GB",
+		description: "Shared native build-cache cap in GiB; 0 means no cap"
+	},
+	{
+		key: "caches.metroCacheMaxGb",
+		type: {
+			kind: "number",
+			minimum: 0
+		},
+		scopes: MACHINE,
+		default: 5,
+		env: "STIM_CACHES_METRO_CACHE_MAX_GB",
+		description: "Combined Metro transform-cache cap in GiB; 0 means no cap"
+	},
+	{
+		key: "caches.swiftCompilationCacheMaxGb",
+		type: {
+			kind: "number",
+			minimum: 0
+		},
+		scopes: MACHINE,
+		default: 15,
+		env: "STIM_CACHES_SWIFT_COMPILATION_CACHE_MAX_GB",
+		description: "Swift compilation-cache cap in GiB; planned emptying is whole; 0 means no cap"
+	},
 	{
 		key: "gc.worktreeGraceMinutes",
 		type: CAPACITY,
@@ -889,7 +1644,7 @@ const SETTINGS = [
 		},
 		scopes: MACHINE,
 		default: "none",
-		description: "Tool this Mac starts so a client's coding agent can drive the macOS apps it hosts for that client; none starts nothing"
+		description: "Tool this Mac starts so a client's coding agent can drive the macOS apps, iOS simulators and Android emulators it hosts for that client; none starts nothing"
 	},
 	{
 		key: "server.acceptClientBuilds",
@@ -908,7 +1663,7 @@ const SETTINGS = [
 		key: "offload.machine",
 		type: {
 			kind: "string",
-			pattern: "^[A-Za-z0-9][A-Za-z0-9.-]*(?::(?!0+$)(?:[0-5]?[0-9]{1,4}|6[0-4][0-9]{3}|65[0-4][0-9]{2}|655[0-2][0-9]|6553[0-5]))?$",
+			pattern: TAILNET_MACHINE_PATTERN,
 			patternHelp: "auto, local, or a tailnet machine name"
 		},
 		scopes: MACHINE,
@@ -935,7 +1690,7 @@ const SETTINGS = [
 		},
 		scopes: MACHINE,
 		default: 2,
-		description: "Load per core (5-minute load average divided by the CPU count) at which a Mac counts as saturated: a build machine declines offloaded builds, and auto offload stops preferring this Mac"
+		description: "Load per core (5-minute load average divided by the CPU count) at which a Mac counts as saturated: a build machine declines offloaded builds, and auto offload stops preferring this Mac; also the busy threshold for automatic iOS and Android device placement"
 	},
 	{
 		key: "offload.workerRoot",
@@ -1025,6 +1780,7 @@ function acceptsShape(setting, value) {
 function numberBounds(type) {
 	const noun = type.integer ? "a whole number" : "a number";
 	if (type.minimum !== void 0 && type.maximum !== void 0) return `${noun} from ${type.minimum} through ${type.maximum}`;
+	if (type.exclusiveMinimum !== void 0) return `${noun}, greater than ${type.exclusiveMinimum}`;
 	if (type.minimum !== void 0) return `${noun}, ${type.minimum} or more`;
 	return noun;
 }
@@ -1033,7 +1789,7 @@ function settingValueError(setting, value) {
 	if (!acceptsShape(setting, value)) return type.kind === "number" ? numberBounds(type) : expectedShape(type);
 	if (type.kind === "number") {
 		const number = value;
-		if (!Number.isFinite(number) || type.integer && !Number.isSafeInteger(number) || type.minimum !== void 0 && number < type.minimum || type.maximum !== void 0 && number > type.maximum) return numberBounds(type);
+		if (!Number.isFinite(number) || type.integer && !Number.isSafeInteger(number) || type.minimum !== void 0 && number < type.minimum || type.exclusiveMinimum !== void 0 && number <= type.exclusiveMinimum || type.maximum !== void 0 && number > type.maximum) return numberBounds(type);
 	}
 	if (type.kind === "path") {
 		const path = value;
@@ -1207,7 +1963,8 @@ function parseCredential(value) {
 		deviceId,
 		deviceToken,
 		state,
-		requestedAt
+		requestedAt,
+		...typeof value.ticketHash === "string" ? { ticketHash: value.ticketHash } : {}
 	};
 }
 function readBuildMachines() {
@@ -1375,7 +2132,8 @@ const SOURCES = [
 	"client",
 	"device",
 	"build",
-	"agent"
+	"agent",
+	"maintenance"
 ];
 function levelRank(level) {
 	const i = LEVELS.indexOf(level);
@@ -1486,7 +2244,7 @@ function bundleMarkerPlatform(record) {
 	return (/^RSC\((.+)\)$/.exec(tag)?.[1] ?? tag).toLowerCase();
 }
 function isAppDeviceRecord(record) {
-	return record.src === "device" && (record.event === "native_crash" || record.platform === "web");
+	return record.src === "device" && (record.event === "native_crash" || record.event === "hosted_native_log" || record.platform === "web");
 }
 function recordMatches(record, criteria = {}) {
 	if (!record) return false;
@@ -1495,6 +2253,7 @@ function recordMatches(record, criteria = {}) {
 	if (sources && sources.length > 0 && !sources.includes(record.src) && !(criteria.includeAppDeviceErrors && isAppDeviceRecord(record))) return false;
 	if (minLevel && levelRank(record.level) < levelRank(minLevel)) return false;
 	if (errorsOnly) {
+		if (record.src === "maintenance" && record.event !== "maintenance_failure") return false;
 		if (record.level !== "error" && record.level !== "fatal") return false;
 		if (typeof markerTs === "number") {
 			const ts = tsOf(record);
@@ -1559,6 +2318,11 @@ function readLogRecords(dir, include = () => true) {
 	for (const name of logFiles(dir).filter(include)) for (const record of readNdjsonGenerations(join(dir, name))) all.push(record);
 	return sortByTs(all);
 }
+const NATIVE_CRASH_LOG_PREFIX = "native-crash-";
+/** Reads the CLI timeline with retained native crash records after other records at the same timestamp. */
+function readLogTimeline(dir, records) {
+	return sortByTs([...records ?? readLogRecords(dir, (name) => !name.startsWith("native-crash-")), ...readLogRecords(dir, (name) => name.startsWith(NATIVE_CRASH_LOG_PREFIX))]);
+}
 function isExpoErrorContext(record, event) {
 	if (record.src !== "metro" || record.raw !== true || record.event !== event || typeof record.msg !== "string") return false;
 	return /^Code: \S/.test(record.msg) || /^\s*>?\s*\d+\s*\|/.test(record.msg) || /^\s*\|\s*\^/.test(record.msg) || /^Call Stack$/.test(record.msg) || /^\s+.+\([^()]+:\d+:\d+\)\s*$/.test(record.msg) || /^\s+at\s+\S+:\d+:\d+\s*$/.test(record.msg);
@@ -1739,6 +2503,16 @@ function queryLogs({ slot, dir, records, sources, minLevel, since, grep, tail, e
 	if (typeof tail === "number" && tail >= 0 && matched.length > tail) matched = matched.slice(matched.length - tail);
 	return errorContext ? includeBareErrorContext(all, attachExpoErrorContext(all, matched), launchTs, criteria.sinceTs) : matched;
 }
+/** Queries the JSON timeline, including Expo context fields on errors as `stim logs --json` does. */
+function queryJsonLogs(options = {}) {
+	const records = options.records ?? readLogTimeline(options.dir);
+	const matched = queryLogs({
+		...options,
+		records,
+		errorContext: false
+	});
+	return options.errorsOnly ? attachExpoErrorContext(records, matched, "field") : matched;
+}
 function tailRead(prev, size) {
 	const state = prev && typeof prev.offset === "number" ? prev : {
 		offset: 0,
@@ -1882,13 +2656,13 @@ function listDir(dir) {
 		return [];
 	}
 }
-/** The segments in one device directory, oldest first. Files that are not segments are left out. */
-function listSegments(dir) {
+/** The segments in one device directory, oldest first. Files that are not segments are left out; `closedOnly` excludes files still being written. */
+function listSegments(dir, closedOnly = false) {
 	const segments = [];
 	for (const name of listDir(dir)) {
 		const closed = SEGMENT.exec(name);
 		const part = closed ? null : PART.exec(name);
-		if (!closed && !part) continue;
+		if (!closed && (closedOnly || !part)) continue;
 		let stat;
 		try {
 			stat = statSync(join(dir, name));
@@ -1907,7 +2681,7 @@ function listSegments(dir) {
 	return segments.toSorted((a, b) => a.start - b.start);
 }
 /** Every device slot recorded under a workspace's recordings directory. */
-function listRecordedDevices(recordingsDir) {
+function listRecordedDevices(recordingsDir, closedOnly = false) {
 	return listDir(recordingsDir).flatMap((name) => {
 		const match = DEVICE.exec(name);
 		if (!match) return [];
@@ -1916,7 +2690,7 @@ function listRecordedDevices(recordingsDir) {
 			platform: match[1],
 			slot: match[2],
 			dir,
-			segments: listSegments(dir)
+			segments: listSegments(dir, closedOnly)
 		}];
 	});
 }
@@ -1993,6 +2767,7 @@ function leafSchema(setting, scope) {
 		case "number":
 			schema.type = type.integer ? "integer" : "number";
 			if (type.minimum !== void 0) schema.minimum = type.minimum;
+			if (type.exclusiveMinimum !== void 0) schema.exclusiveMinimum = type.exclusiveMinimum;
 			if (type.maximum !== void 0) schema.maximum = type.maximum;
 			break;
 		case "boolean":
@@ -2152,6 +2927,8 @@ const WORKSPACE_PHASES = [
 	"live",
 	"idle"
 ];
+/** The tutorial format version the installed Stim writes into the tutorial app. */
+const TUTORIAL_VERSION = 1;
 /**
 * Where a memory figure comes from. `footprint` is each process's physical footprint, which Activity Monitor's Memory
 * column shows. `rss` sums resident set sizes, which count pages shared between processes once per process, so a
@@ -2537,6 +3314,7 @@ function readIdleStop(state) {
 		idleMinutes: record.idleMinutes
 	};
 }
+const DEVICE_RECLAIM_REASON = "reclaimed for a waiting run";
 const DEVICE_IDLE_SHUTDOWN_KEY = "deviceIdleShutdowns";
 /** The recorded idle shutdowns by device slot key (`ios`, `android`, `ios:<slot>`). */
 function readDeviceIdleShutdowns(state) {
@@ -2547,7 +3325,8 @@ function readDeviceIdleShutdowns(state) {
 		const record = value;
 		if (typeof record?.at === "string" && typeof record.idleMinutes === "number") found[key] = {
 			at: record.at,
-			idleMinutes: record.idleMinutes
+			idleMinutes: record.idleMinutes,
+			...typeof record.reason === "string" ? { reason: record.reason } : {}
 		};
 	}
 	return found;
@@ -2666,6 +3445,22 @@ function buildDiagnostics(value) {
 		}];
 	}).toSorted((a, b) => Number(b.file !== null) - Number(a.file !== null)).slice(0, DIAGNOSTIC_CAP);
 }
+function devicePlacement(value) {
+	if (!value || typeof value !== "object" || Array.isArray(value)) return null;
+	const record = value;
+	if (record.decision !== "local" && record.decision !== "hosted" && record.decision !== "waited-locally" || typeof record.reason !== "string") return null;
+	return {
+		decision: record.decision,
+		reason: record.reason,
+		...typeof record.machine === "string" ? { machine: record.machine } : {}
+	};
+}
+function readDevicePlacement(state, platform, slot = "default") {
+	const slots = isJsonObject(state?.deviceSlots) ? state.deviceSlots : {};
+	const saved = isJsonObject(slots[slot]) ? slots[slot] : {};
+	const device = slot === "default" ? state?.[platform] : saved[platform];
+	return devicePlacement(isJsonObject(device) ? device.devicePlacement : void 0);
+}
 function lastBuildReport(platform, value) {
 	if (!value || typeof value !== "object" || Array.isArray(value)) return null;
 	const record = value;
@@ -2675,6 +3470,7 @@ function lastBuildReport(platform, value) {
 	const finished = new Date(Date.parse(record.startedAt) + (durationMs ?? NaN));
 	const reason = record.cacheHit === "local" || record.cacheHit === "remote" ? null : parseMissReason(record.missReason);
 	const diagnostics = record.status === "failed" ? buildDiagnostics(record.diagnostics) : [];
+	const placed = devicePlacement(record.devicePlacement);
 	return {
 		platform,
 		status: record.status,
@@ -2686,6 +3482,7 @@ function lastBuildReport(platform, value) {
 		finishedAt: Number.isNaN(finished.getTime()) ? null : finished.toISOString(),
 		...typeof record.errorCode === "string" ? { errorCode: record.errorCode } : {},
 		...reason ? { missReason: reason } : {},
+		...placed ? { devicePlacement: placed } : {},
 		...typeof record.buildMachine === "string" ? { buildMachine: record.buildMachine } : {},
 		...typeof record.builtOn === "string" ? { builtOn: record.builtOn } : {},
 		...typeof record.offloadedTo === "string" ? { offloadedTo: record.offloadedTo } : {},
@@ -2831,12 +3628,21 @@ const PLACEMENT_DECISIONS = [
 	"offloaded",
 	"fell-back"
 ];
+const CAPACITY_REFUSAL_LIMIT = 50;
+const CAPACITY_REFUSAL_MAX_AGE_MS = 6048e5;
+function trimCapacityRefusals(events, now) {
+	return events.filter((event) => {
+		const age = now - Date.parse(event.at);
+		return age >= 0 && age <= 6048e5;
+	}).toSorted((a, b) => Date.parse(a.at) - Date.parse(b.at)).slice(-50);
+}
+const trimCapacityWaits = trimCapacityRefusals;
 const PLATFORMS = ["ios", "android"];
 const OUTCOMES = ["hit", "cold"];
 const HISTORY_LIMIT = 10;
 function statsProjectKey({ root, commonDir, repoRoot }) {
-	if (commonDir && repoRoot && basename(commonDir) === ".git") return canonical(join(canonical(dirname(commonDir)), relative(canonical(repoRoot), canonical(root))));
-	return canonical(root);
+	if (commonDir && repoRoot && basename(commonDir) === ".git") return canonical$1(join(canonical$1(dirname(commonDir)), relative(canonical$1(repoRoot), canonical$1(root))));
+	return canonical$1(root);
 }
 /** Placement counts for the local calendar day of `now`, per-machine totals, and the retained placements. */
 function offloadSummary(record, now) {
@@ -2969,6 +3775,8 @@ function normalize(record) {
 		if (Object.keys(normalized).length) history[key] = normalized;
 	}
 	const placements = Array.isArray(record.placements) ? record.placements.flatMap(normalizePlacement) : [];
+	const capacityRefusals = Array.isArray(record.capacityRefusals) ? record.capacityRefusals.flatMap(normalizeCapacityRefusal) : [];
+	const capacityWaits = Array.isArray(record.capacityWaits) ? record.capacityWaits.flatMap(normalizeCapacityWait) : [];
 	const buildMachines = {};
 	if (isObject(record.buildMachines)) {
 		for (const [name, totals] of Object.entries(record.buildMachines)) if (isObject(totals)) buildMachines[name] = normalizeMachineTotals(totals);
@@ -2979,6 +3787,8 @@ function normalize(record) {
 		projects,
 		...Object.keys(history).length ? { history } : {},
 		...placements.length ? { placements } : {},
+		...capacityRefusals.length ? { capacityRefusals } : {},
+		...capacityWaits.length ? { capacityWaits } : {},
 		...Object.keys(buildMachines).length ? { buildMachines } : {}
 	};
 }
@@ -2988,6 +3798,8 @@ function normalizePlacement(value) {
 	if (!PLACEMENT_DECISIONS.includes(decision) || !PLATFORMS.includes(platform)) return [];
 	if (typeof reason !== "string" || typeof project !== "string") return [];
 	const buildMs = wholeMs(value.buildMs);
+	const slotWaitMs = wholeMs(value.slotWaitMs);
+	const deviceSlotWaitMs = wholeMs(value.deviceSlotWaitMs);
 	const localEstimateMs = wholeMs(value.localEstimateMs);
 	return [{
 		at: timestamp(value.at),
@@ -2997,10 +3809,41 @@ function normalizePlacement(value) {
 		reason,
 		...typeof machine === "string" && machine !== "" ? { machine } : {},
 		...buildMs > 0 ? { buildMs } : {},
+		...slotWaitMs > 0 ? { slotWaitMs } : {},
+		...deviceSlotWaitMs > 0 ? { deviceSlotWaitMs } : {},
 		...localEstimateMs > 0 ? { localEstimateMs } : {},
 		...value.failed === true ? { failed: true } : {}
 	}];
 }
+function normalizeCapacityRefusal(value) {
+	if (!isObject(value)) return [];
+	const { at, kind, platform, max, workspace } = value;
+	if (kind !== "device" || !PLATFORMS.includes(platform)) return [];
+	if (typeof at !== "string" || !Number.isFinite(Date.parse(at))) return [];
+	if (typeof max !== "number" || !Number.isInteger(max) || max <= 0) return [];
+	if (typeof workspace !== "string" || workspace === "") return [];
+	return [{
+		at: new Date(at).toISOString(),
+		kind,
+		platform,
+		max,
+		workspace
+	}];
+}
+function normalizeCapacityWait(value) {
+	if (!isObject(value) || value.kind !== "device-wait") return [];
+	const refusal = normalizeCapacityRefusal({
+		...value,
+		kind: "device"
+	})[0];
+	if (!refusal || typeof value.ms !== "number" || !Number.isFinite(value.ms) || value.ms < 0) return [];
+	return [{
+		...refusal,
+		kind: "device-wait",
+		ms: Math.round(value.ms),
+		...typeof value.reclaimed === "number" && Number.isInteger(value.reclaimed) && value.reclaimed > 0 ? { reclaimed: value.reclaimed } : {}
+	}];
+}
 function normalizeMachineTotals(totals) {
 	const savedMs = Number(totals.savedMs);
 	return {
@@ -3095,7 +3938,7 @@ function count(value) {
 function timestamp(value) {
 	return typeof value === "string" && value !== "" ? value : (/* @__PURE__ */ new Date(0)).toISOString();
 }
-function canonical(path) {
+function canonical$1(path) {
 	try {
 		return realpathSync.native(path);
 	} catch {
@@ -3120,6 +3963,8 @@ function decodeStats(text) {
 function readStatsReport(key, now) {
 	const { record, note } = readStats();
 	const project = key ? record?.projects[key] : null;
+	const capacityRefusals = trimCapacityRefusals(record?.capacityRefusals ?? [], now).toReversed();
+	const capacityWaits = trimCapacityWaits(record?.capacityWaits ?? [], now).toReversed();
 	return {
 		report: {
 			version: 1,
@@ -3132,7 +3977,11 @@ function readStatsReport(key, now) {
 				ios: record?.machine.ios ?? null,
 				android: record?.machine.android ?? null
 			},
-			offload: offloadSummary(record, now)
+			offload: offloadSummary(record, now),
+			...capacityRefusals.length ? { capacityRefusals } : {},
+			...capacityWaits.length ? { capacityWaits } : {},
+			agentDevice: readAgentDeviceUsage(),
+			swiftpmCache: readSwiftpmCacheUsage()
 		},
 		note
 	};
@@ -3231,9 +4080,16 @@ function parseHostedOfferRequest(value) {
 		...typeof value.deviceProfile === "string" ? { deviceProfile: value.deviceProfile } : {}
 	};
 }
+function parseHostedLocalDeviceCount(value) {
+	if (typeof value === "number" && Number.isSafeInteger(value) && value >= 0) return value;
+	if (isJsonObject(value) && typeof value.unknown === "string" && value.unknown) return { unknown: value.unknown.slice(0, 4e3) };
+	return null;
+}
 function parseHostedNativeOffer(value) {
 	if (!isJsonObject(value) || !isJsonObject(value.resources)) return null;
 	const { resources } = value;
+	const local = parseHostedLocalDeviceCount(resources.localDevices);
+	if (resources.localDevices !== void 0 && local === null) return null;
 	if (value.platform !== "ios" && value.platform !== "android" && value.platform !== "macos" || value.declined !== null && (typeof value.declined !== "string" || !value.declined || value.declined.length > 4e3) || !Number.isInteger(resources.cpus) || Number(resources.cpus) < 1 || ["loadPerCore", "memoryFreeBytes"].some((key) => typeof resources[key] !== "number" || !Number.isFinite(resources[key]) || resources[key] < 0) || resources.workerDiskFreeBytes !== null && (typeof resources.workerDiskFreeBytes !== "number" || !Number.isFinite(resources.workerDiskFreeBytes) || resources.workerDiskFreeBytes < 0) || resources.memoryPressure !== null && resources.memoryPressure !== "normal" && resources.memoryPressure !== "warning" && resources.memoryPressure !== "critical") return null;
 	let choice = null;
 	if (value.choice !== null) {
@@ -3269,7 +4125,8 @@ function parseHostedNativeOffer(value) {
 			loadPerCore: resources.loadPerCore,
 			memoryFreeBytes: resources.memoryFreeBytes,
 			memoryPressure: resources.memoryPressure,
-			workerDiskFreeBytes: resources.workerDiskFreeBytes
+			workerDiskFreeBytes: resources.workerDiskFreeBytes,
+			...local !== null ? { localDevices: local } : {}
 		}
 	};
 }
@@ -3299,7 +4156,7 @@ function readHostedSessions() {
 			"stopping",
 			"stopped",
 			"unknown"
-		].includes(String(entry.state)) || entry.platform === "android" && !hostedConsolePort(entry.consolePort) || (entry.platform === "macos" ? !hostedMacosAppSlot(entry.appSlot) : entry.appSlot !== void 0) || entry.device !== null && !parseHostedPlatformDevice(entry.device, entry.platform) || entry.platform === "macos" && entry.device !== null && entry.device.appSlot !== entry.appSlot || entry.platform === "android" && entry.device !== null && entry.device.consolePort !== entry.consolePort || entry.state === "ready" && entry.device === null || entry.notice !== void 0 && typeof entry.notice !== "string" || entry.appAttempt !== void 0 && (typeof entry.appAttempt !== "string" || !/^[a-zA-Z0-9_-]{1,128}$/.test(entry.appAttempt)) || entry.metroPort !== void 0 && (typeof entry.metroPort !== "number" || !Number.isInteger(entry.metroPort) || entry.metroPort < 1 || entry.metroPort > 65535)) throw new Error(`Malformed hosted session record: ${root}`);
+		].includes(String(entry.state)) || entry.platform === "android" && !hostedConsolePort(entry.consolePort) || (entry.platform === "macos" ? !hostedMacosAppSlot(entry.appSlot) : entry.appSlot !== void 0) || entry.device !== null && !parseHostedPlatformDevice(entry.device, entry.platform) || entry.platform === "macos" && entry.device !== null && entry.device.appSlot !== entry.appSlot || entry.platform === "android" && entry.device !== null && entry.device.consolePort !== entry.consolePort || entry.state === "ready" && entry.device === null || entry.parked !== void 0 && (!isJsonObject(entry.parked) || typeof entry.parked.at !== "string" || !Number.isFinite(Date.parse(entry.parked.at)) || new Date(entry.parked.at).toISOString() !== entry.parked.at || entry.state !== "stopped" || entry.platform === "macos") || entry.notice !== void 0 && typeof entry.notice !== "string" || entry.appAttempt !== void 0 && (typeof entry.appAttempt !== "string" || !/^[a-zA-Z0-9_-]{1,128}$/.test(entry.appAttempt)) || entry.clientMetroPort !== void 0 && (typeof entry.clientMetroPort !== "number" || !Number.isInteger(entry.clientMetroPort) || entry.clientMetroPort < 1 || entry.clientMetroPort > 65535 || entry.platform !== "android") || entry.metroPort !== void 0 && (typeof entry.metroPort !== "number" || !Number.isInteger(entry.metroPort) || entry.metroPort < 1 || entry.metroPort > 65535)) throw new Error(`Malformed hosted session record: ${root}`);
 		ids.add(entry.id);
 		return entry;
 	});
@@ -3309,16 +4166,30 @@ function readHostedDevice(home, platform = "ios") {
 	if (!device) throw new Error("The hosted device record is malformed.");
 	return device;
 }
-/** Hosted sessions use isolated homes: only one exact device of their platform may appear in this ledger. */
-function assertHostedDeviceLedger(home, id, platform = "ios") {
+function readHostedDeviceLedger(home, options = {}) {
 	let value;
 	try {
 		value = JSON.parse(readFileSync(join(home, "created-devices.json"), "utf8"));
 	} catch (error) {
-		if (platform === "macos" && error.code === "ENOENT") return;
+		if (!options.required && error.code === "ENOENT") return null;
 		throw error;
 	}
-	if (!isJsonObject(value) || value.version !== 1 || !Array.isArray(value.ios) || value.ios.length !== (platform === "ios" ? 1 : 0) || platform === "ios" && value.ios[0] !== id || !Array.isArray(value.android) || value.android.length !== (platform === "android" ? 1 : 0) || platform === "android" && value.android[0] !== id || !Array.isArray(value.web) || value.web.length !== 0) throw new Error("The hosted device ownership ledger is missing, malformed or names another device.");
+	if (!isJsonObject(value) || value.version !== 1 || ![
+		"ios",
+		"android",
+		"web"
+	].every((key) => Array.isArray(value[key]) && value[key].every((id) => typeof id === "string"))) throw new Error("The hosted device ownership ledger is malformed.");
+	return value;
+}
+/** Hosted sessions use isolated homes: only one exact device of their platform may appear in this ledger. */
+function assertHostedDeviceLedger(home, id, platform = "ios", options = {}) {
+	const value = readHostedDeviceLedger(home, { required: platform !== "macos" });
+	if (!value && platform === "macos") return "empty";
+	if (value && !value.ios.length && !value.android.length && !value.web.length) {
+		if (platform === "macos" || options.allowEmpty) return "empty";
+	}
+	if (!value || value.ios.length !== (platform === "ios" ? 1 : 0) || platform === "ios" && value.ios[0] !== id || value.android.length !== (platform === "android" ? 1 : 0) || platform === "android" && value.android[0] !== id || value.web.length !== 0) throw new Error("The hosted device ownership ledger is missing, malformed or names another device.");
+	return "listed";
 }
 //#endregion
 //#region state/hosted-app.ts
@@ -3331,6 +4202,41 @@ function hostedAppArea(session, attempt, workerHome) {
 	if (workerHome) return join(workerHome, "..", "apps", attempt);
 	return join(deviceHostArea(session), "apps", attempt);
 }
+function hostedAppBlobs(session, workerHome) {
+	return join(workerHome ? join(workerHome, "..") : deviceHostArea(session), "blobs");
+}
+const verifiedBlobs = /* @__PURE__ */ new Map();
+/** Transfers cached verification after a rename, only for the same inode, size, mtime and digest. */
+function rememberHostedAppBlobRename(from, to, file) {
+	const previous = verifiedBlobs.get(from);
+	verifiedBlobs.delete(from);
+	const stat = lstatSync(to, { throwIfNoEntry: false });
+	if (!previous || !stat?.isFile() || stat.size !== file.size) return;
+	const prefix = `${stat.dev}:${stat.ino}:${stat.size}:${stat.mtimeMs}:`;
+	if (previous.startsWith(prefix) && previous.endsWith(`:${file.sha256}`)) verifiedBlobs.set(to, `${prefix}${stat.ctimeMs}:${file.sha256}`);
+}
+/** Checks regular blob bytes, including their size, before content-addressed reuse. */
+function validHostedAppBlob(path, file) {
+	const stat = lstatSync(path, { throwIfNoEntry: false });
+	if (!stat?.isFile() || stat.size !== file.size) return false;
+	const key = `${stat.dev}:${stat.ino}:${stat.size}:${stat.mtimeMs}:${stat.ctimeMs}:${file.sha256}`;
+	if (verifiedBlobs.get(path) === key) return true;
+	const hash = createHash("sha256");
+	const fd = openSync(path, "r");
+	try {
+		const buffer = Buffer.alloc(65536);
+		let count;
+		while (count = readSync(fd, buffer, 0, buffer.length, null)) hash.update(buffer.subarray(0, count));
+	} finally {
+		closeSync(fd);
+	}
+	const valid = hash.digest("hex") === file.sha256;
+	if (valid) {
+		if (verifiedBlobs.size >= 20001) verifiedBlobs.delete(verifiedBlobs.keys().next().value);
+		verifiedBlobs.set(path, key);
+	} else verifiedBlobs.delete(path);
+	return valid;
+}
 /** At most 32 plain arguments of 1024 characters (8192 in total), with no NUL, CR or LF. */
 function validHostedAppArguments(value) {
 	return Array.isArray(value) && value.length <= 32 && value.every((argument) => typeof argument === "string" && argument.length <= 1024 && !/[\0\r\n]/.test(argument)) && value.reduce((total, argument) => total + argument.length, 0) <= 8192;
@@ -3405,7 +4311,8 @@ function readHostedAppMetadata(session, attempt, workerHome) {
 }
 function readHostedApp(session, attempt, workerHome) {
 	const record = readHostedAppMetadata(session, attempt, workerHome);
-	const manifest = join(hostedAppArea(session, attempt, workerHome), "blobs", record.manifest.sha256);
+	const manifest = join(hostedAppBlobs(session, workerHome), record.manifest.sha256);
+	if (existsSync(manifest) && !validHostedAppBlob(manifest, record.manifest)) throw new Error("The hosted app manifest differs from its digest.");
 	const files = existsSync(manifest) ? parseHostedAppManifest(JSON.parse(readFileSync(manifest, "utf8"))) : [];
 	if (!files || !files.length && record.state !== "receiving") throw new Error("The hosted app manifest is missing or malformed.");
 	return {
@@ -3435,7 +4342,11 @@ function readDeviceHostMachines() {
 			"deviceToken",
 			"requestedAt"
 		].every((key) => typeof entry[key] === "string" && entry[key]) || entry.state !== "pending" && entry.state !== "approved" || machines.some((each) => each.machine === entry.machine)) throw new Error("Invalid device-host machine credential store");
-		machines.push(entry);
+		const { ticketHash, ...credential } = entry;
+		machines.push({
+			...credential,
+			...typeof ticketHash === "string" ? { ticketHash } : {}
+		});
 	}
 	return machines;
 }
@@ -3524,64 +4435,117 @@ function macosAppState(record) {
 	};
 }
 //#endregion
-//#region state/tailnet.ts
-const DEFAULT_SERVE_PORT = 7443;
-function parseMachine(entry) {
-	const match = /^([A-Za-z0-9][A-Za-z0-9.-]*?)(?::(\d{1,5}))?$/.exec(entry.trim());
-	if (!match) return null;
-	const port = match[2] === void 0 ? DEFAULT_SERVE_PORT : Number(match[2]);
-	return port >= 1 && port <= 65535 ? {
-		name: match[1].toLowerCase(),
-		port
-	} : null;
+//#region state/hosted-native.ts
+function parseHostedNativePlacement(value, platform) {
+	if (!isJsonObject(value) || typeof value.machine !== "string" || !parseMachine(value.machine) || typeof value.session !== "string" || !/^[a-f0-9-]{36}$/.test(value.session)) return null;
+	return {
+		machine: value.machine,
+		session: value.session,
+		appAttempt: typeof value.appAttempt === "string" && /^[a-zA-Z0-9_-]{1,128}$/.test(value.appAttempt) ? value.appAttempt : "",
+		selected: typeof value.selected === "string" && parseMachine(value.selected) ? value.selected : value.machine,
+		...typeof value.reason === "string" ? { reason: value.reason } : {},
+		device: parseHostedPlatformDevice(value.device, platform),
+		agent: parseHostedAgentAccess(value.agent) ?? {
+			driver: "none",
+			setting: "hosting.agentDriver"
+		}
+	};
 }
-/**
-* The one peer in `tailscale status --json` whose MagicDNS name is `name` or starts with `name.`. `ID` there is
-* the node's StableID, the same value `tailscale whois` reports as `Node.StableID`.
-*/
-function findPeer(status, name) {
-	const found = (isJsonObject(status) && isJsonObject(status.Peer) ? Object.values(status.Peer) : []).flatMap((peer) => {
-		if (!isJsonObject(peer) || typeof peer.ID !== "string" || typeof peer.DNSName !== "string") return [];
-		const dnsName = peer.DNSName.replace(/\.$/, "").toLowerCase();
-		const addresses = Array.isArray(peer.TailscaleIPs) ? peer.TailscaleIPs.filter((ip) => typeof ip === "string") : [];
-		const address = addresses.find((ip) => !ip.includes(":")) ?? addresses[0];
-		if (!address || !(dnsName === name || dnsName.startsWith(`${name}.`))) return [];
-		return [{
-			nodeId: peer.ID,
-			dnsName,
-			address
-		}];
-	});
-	if (found.length === 0) return "missing";
-	return found.length === 1 ? found[0] : "ambiguous";
+function hostedNativeRecords(state, platform) {
+	const slots = isJsonObject(state?.deviceSlots) ? state.deviceSlots : {};
+	const records = {
+		default: state?.[platform],
+		...Object.fromEntries(Object.entries(slots).map(([slot, value]) => [slot, isJsonObject(value) ? value[platform] : void 0]))
+	};
+	return Object.fromEntries(Object.entries(records).flatMap(([slot, record]) => isJsonObject(record) && record.host !== void 0 ? [[slot, record.host]] : []));
 }
-/**
-* Connects to the pinned node's own tailnet address rather than resolving its name, so the socket reaches the
-* node whose ID was just checked. `tailscale serve` still needs the MagicDNS name for TLS (SNI and certificate)
-* and for its Host routing.
-*/
-function endpoint(peer, port) {
-	const address = peer.address.includes(":") ? `[${peer.address}]` : peer.address;
-	const suffix = port === 443 ? "" : `:${port}`;
+function unreadableHostedNative(slot, platform) {
+	const key = slot === "default" ? `${platform}.host` : `deviceSlots.${slot}.${platform}.host`;
+	return `The hosted ${platform === "ios" ? "iOS" : "Android"} placement at workspace-state key ${key} is unreadable. Inspect ${key}.machine and ${key}.session before reconciling it.`;
+}
+//#endregion
+//#region state/hosted-ios.ts
+function parseHostedIosPlacement(value) {
+	return parseHostedNativePlacement(value, "ios");
+}
+function hostedIosStatus(placement) {
 	return {
-		url: `wss://${address}${suffix}`,
-		servername: peer.dnsName,
-		host: `${peer.dnsName}${suffix}`
+		machine: placement.machine,
+		session: placement.session,
+		selected: placement.selected,
+		...placement.reason ? { reason: placement.reason } : {},
+		agent: placement.agent,
+		device: placement.device ? {
+			name: placement.device.deviceType,
+			runtime: placement.device.runtime
+		} : null
 	};
 }
-/**
-* The endpoint of a paired machine's pinned node, or why Stim does not connect to it. The name must still
-* resolve to exactly the pinned node; the token is never sent anywhere else.
-*/
-function pinnedEndpoint(credential, current) {
-	const parsed = parseMachine(credential.machine);
-	if (!parsed) return `${credential.machine} is not a tailnet name`;
-	if (!isJsonObject(current)) return "Tailscale is not running";
-	const peer = findPeer(current, parsed.name);
-	if (peer === "missing") return `no peer on this tailnet is named ${parsed.name}`;
-	if (peer === "ambiguous") return `several tailnet peers match ${parsed.name}`;
-	if (peer.nodeId !== credential.nodeId) return `${peer.dnsName} is now node ${peer.nodeId}, not the pinned ${credential.nodeId}; run stim doctor`;
-	return endpoint(peer, parsed.port);
+function hostedIosRecords(state) {
+	return hostedNativeRecords(state, "ios");
+}
+function unreadableHostedIos(slot) {
+	return unreadableHostedNative(slot, "ios");
+}
+function hostedIosPlacements(state) {
+	return Object.assign(Object.create(null), Object.fromEntries(Object.entries(hostedIosRecords(state)).flatMap(([slot, record]) => {
+		const placement = parseHostedIosPlacement(record);
+		return placement ? [[slot, placement]] : [];
+	})));
+}
+//#endregion
+//#region state/hosted-android.ts
+function parseHostedAndroidPlacement(value) {
+	return parseHostedNativePlacement(value, "android");
+}
+function hostedAndroidStatus(placement) {
+	return {
+		machine: placement.machine,
+		session: placement.session,
+		selected: placement.selected,
+		...placement.reason ? { reason: placement.reason } : {},
+		agent: placement.agent,
+		device: placement.device ? {
+			name: hostedAndroidDeviceName(placement.device),
+			systemImage: placement.device.systemImage,
+			api: Number(/^system-images;android-(\d+);/.exec(placement.device.systemImage)?.[1])
+		} : null
+	};
+}
+function hostedAndroidRecords(state) {
+	return hostedNativeRecords(state, "android");
+}
+function unreadableHostedAndroid(slot) {
+	return unreadableHostedNative(slot, "android");
+}
+function hostedAndroidPlacements(state) {
+	return Object.assign(Object.create(null), Object.fromEntries(Object.entries(hostedAndroidRecords(state)).flatMap(([slot, record]) => {
+		const placement = parseHostedAndroidPlacement(record);
+		return placement ? [[slot, placement]] : [];
+	})));
+}
+function hostedAndroidDeviceName(device) {
+	return `${device.deviceProfile} (API ${/^system-images;android-(\d+);/.exec(device.systemImage)?.[1]})`;
+}
+//#endregion
+//#region state/hosted-metro.ts
+const HOSTED_METRO_REQUESTS_KEY = "hostedMetroRequests";
+const HOSTED_METRO_GATEWAYS_KEY = "hostedMetroGateways";
+function hostedMetroRequests(state) {
+	const raw = state?.[HOSTED_METRO_REQUESTS_KEY];
+	if (!isJsonObject(raw)) return {};
+	return Object.fromEntries(Object.entries(raw).filter((entry) => {
+		const [session, value] = entry;
+		return /^[a-f0-9-]{36}$/.test(session) && isJsonObject(value) && typeof value.id === "string" && typeof value.machine === "string" && typeof value.address === "string" && isIP(value.address) !== 0 && typeof value.peer === "string" && isIP(value.peer) !== 0 && typeof value.secret === "string" && /^[a-f0-9]{64}$/.test(value.secret);
+	}));
+}
+function hostedMetroGateways(state) {
+	const raw = state?.[HOSTED_METRO_GATEWAYS_KEY];
+	if (!isJsonObject(raw)) return {};
+	return Object.fromEntries(Object.entries(raw).filter((entry) => {
+		const value = entry[1];
+		return isJsonObject(value) && typeof value.id === "string" && typeof value.processToken === "string" && (value.port === void 0 || typeof value.port === "number" && Number.isInteger(value.port) && value.port > 0 && value.port <= 65535) && (value.error === void 0 || typeof value.error === "string");
+	}));
 }
 //#endregion
 //#region state/hosted-logs.ts
@@ -3606,6 +4570,25 @@ function hostedMacosLogsDir(home) {
 		return null;
 	}
 }
+const hostedNativeLogsDir = (home, platform) => join(home, `${platform}-logs`);
+/** The completed query window and overlap digests, or null for a missing, malformed or unreadable checkpoint. */
+function readHostedNativeLogsCheckpoint(home, platform = "ios") {
+	try {
+		const value = JSON.parse(readFileSync(join(hostedNativeLogsDir(home, platform), "checkpoint.json"), "utf8"));
+		if (!isJsonObject(value) || !Number.isSafeInteger(value.until) || value.until < 0 || value.windowMs !== void 0 && (!Number.isSafeInteger(value.windowMs) || value.windowMs < 1e3) || !Array.isArray(value.boundary) || !value.boundary.every((each) => typeof each === "string" && /^[a-f0-9]{64}$/.test(each))) return null;
+		return {
+			until: value.until,
+			boundary: value.boundary,
+			...typeof value.appAttempt === "string" && Number.isSafeInteger(value.pid) && value.pid > 0 ? {
+				appAttempt: value.appAttempt,
+				pid: value.pid
+			} : {},
+			...typeof value.windowMs === "number" ? { windowMs: value.windowMs } : {}
+		};
+	} catch {
+		return null;
+	}
+}
 function readSpan(path, from, to) {
 	const fd = openSync(path, "r");
 	try {
@@ -3675,4 +4658,221 @@ function readLogsSince(dir, cursor) {
 	};
 }
 //#endregion
-export { ACTIVITY_RECENCY_BASES, AGENT_TOOLS, ANDROID_COMPILER_CACHE_CHOICES, ANDROID_EMULATOR_APPS, ANDROID_PCH_CHOICES, APP_PROCESS_STATES, BUILD_HISTORY_KEY, BUILD_HISTORY_LIMIT, BUILD_PHASES, BUILD_RESULTS, DEVICE_IDLE_SHUTDOWN_KEY, DEV_SERVER_STOP_REQUEST_KEY, ENDED_AGENT_RETENTION_MS, ERROR_SOURCES, HISTORY_LIMIT, HOSTED_AGENT_DRIVERS, HOSTED_APP_CHUNK_BYTES, HOSTED_LOGS_FIRST_BYTES, HOSTED_LOGS_PAGE_BYTES, HOSTED_MACOS_APP_SLOTS, IDLE_STOP_KEY, IOS_SIMULATOR_APPS, LAST_BUILD_KEYS, LEVELS, MACHINE_OWNER_KINDS, MEMORY_SOURCES, NATIVE_BUILD_STEPS, OFFLOAD_MODES, PHYSICAL_DEVICE_CONNECTIONS, PLACEMENT_DECISIONS, READY_PHASE_MS, RECORDING_CAP_BYTES, RECORDING_FOOTAGE_MS, RECORDING_PLATFORMS, REMOTE_DEVICE_BACKENDS, SETTINGS, SETTINGS_SCHEMA_FILE, SETTINGS_SCHEMA_URL, SETTING_GROUPS, SETTING_SCOPES, SOURCES, STATS_VERSION, STATUS_ISSUE_CODES, TUNNEL_MODES, WARM_KEY, WEB_PAGE_STATES, WEB_VIEWPORTS, WORKSPACE_AGENT_KEY, WORKSPACE_PHASES, WORKSPACE_STAGE_KINDS, acceptsShape, advanceTail, agentSessionOf, agentSessionsCacheFile, allMetroPorts, assertHostedDeviceLedger, attachExpoErrorContext, buildCriteria, buildDiagnostics, buildMachinesFile, buildMachinesLock, buildSlotPath, buildSlotsDir, buildWorkerRoot, bundleMarkerPlatform, capDrops, closedSegmentName, coerceSettingText, compileGrep, configCorruptRepair, configLockPath, countErrorEntries, createdDevicesFile, createdDevicesLock, decodeStats, deviceHostArea, deviceHostMachinesClaims, deviceHostMachinesFile, deviceHostMachinesLock, deviceHostRoot, deviceViewersDir, diskUsageCacheDir, diskUsageCacheFile, easMachineStateRoot, easSessionLedgerFile, easSessionLedgerLock, emulatorLogFile, endedAgentSessionOf, endpoint, expectedShape, fileSizes, findEnclosingWorktreeRoot, findPeer, findProjectByMetroPort, findProjectRoot, followLogs, footageDrops, getConcurrencyLimits, getConfigPath, getProject, getProjectSetting, getProjectSettings, getRepoSettings, gitMergeCacheDir, hostedAppArea, hostedAppAttempt, hostedConsolePort, hostedDeviceId, hostedMacosAppSlot, hostedMacosBundleId, hostedMacosLogsDir, isJsonObject, isLayeredSetting, isPathPrefix, isSensitiveReference, lastUseFrom, levelRank, listRecordedDevices, listSegments, listStatusCacheEntries, loadConfig, logFiles, machineCapacity, macosAppState, markerWindow, offloadSummary, openSegmentName, parseHostedAgentGrant, parseHostedAndroidDevice, parseHostedAppManifest, parseHostedAppOffer, parseHostedChoice, parseHostedDevice, parseHostedLogsCursor, parseHostedMacosChoice, parseHostedMacosDevice, parseHostedMacosPlacement, parseHostedNativeOffer, parseHostedOfferRequest, parseHostedPlatformDevice, parseHostedRequest, parseMachine, parseMacosRecord, parseMissReason, parseNdjsonLine, parseNdjsonText, parseSince, pinnedEndpoint, pullRequestCacheDir, pullRequestCacheFile, queryLogs, readAgentSessionsCache, readBuildDetail, readBuildHistory, readBuildMachines, readCreatedDevices, readDevServerStop, readDevServerStopRequest, readDeviceHostMachines, readDeviceIdleShutdowns, readDiskUsage, readEasSessionLedger, readEndedAgentSessions, readHostedApp, readHostedAppMetadata, readHostedDevice, readHostedMacosApp, readHostedSessions, readIdleStop, readJsonFile, readJsonObject, readLastBuilds, readLogRecords, readLogsSince, readMacosRecord, readNdjsonGenerations, readPullRequestCache, readRunEstimates, readStateFile, readStats, readStatsReport, readViewedDevices, readWarmRecord, readWorkspaceAgent, readWorkspaceState, recordMatches, recordedBytes, recordingDeviceName, recordingEnabled, saturation, settingDefinition, settingValueError, settingsJsonSchema, sharedCcache, sharedCompilationCache, sharedGradle, sharedPods, sortByTs, statsFile, statsProjectKey, stimBuildDigest, supervisorLogFile, supervisorPidFile, tailRead, trimSamples, tryAcquireBuildSlotClaim, validEasSessionClaim, validHostedAppArguments, wholePhases, withConfigLock, withDerivedFacts, withGitChip, withStateReadCache, workspaceBuildDetailFile, workspaceDerivedData, workspaceEndedAgentsFile, workspaceEndedAgentsLock, workspaceGradleBuild, workspaceLastUsed, workspaceLogErrorIndex, workspaceLogsDir, workspaceMetadataFile, workspaceRecordingsDir, workspaceStateFile, workspaceStateLock };
+//#region state/maintenance.ts
+const finite = (value) => typeof value === "number" && Number.isFinite(value);
+const nullableNumber = (value) => value === null || finite(value);
+const strings = (value) => Array.isArray(value) && value.every((entry) => typeof entry === "string");
+const KINDS = [
+	"would-clear-outputs",
+	"would-trim-cache",
+	"would-empty-cache",
+	"would-shutdown-device",
+	"would-stop-workspace"
+];
+/** Rejects missing, corrupt or unsupported payloads without throwing. */
+function parseMaintenanceState(value) {
+	if (!isJsonObject(value) || value.version !== 1 || !isJsonObject(value.lastAt)) return null;
+	if (!Object.values(value.lastAt).every(finite)) return null;
+	if (value.skipKeys !== void 0 && !strings(value.skipKeys)) return null;
+	if (value.deferredAt !== void 0 && (!isJsonObject(value.deferredAt) || !Object.values(value.deferredAt).every(finite))) return null;
+	if (!Array.isArray(value.sizes) || !value.sizes.every((size) => isJsonObject(size) && typeof size.name === "string" && typeof size.dir === "string" && finite(size.bytes) && finite(size.measuredAt) && [
+		"workspace-outputs",
+		"build-cache",
+		"metro-cache",
+		"compilation-cache",
+		"ccache",
+		"other"
+	].includes(String(size.category)) && (size.workspace === void 0 || typeof size.workspace === "string") && (size.blocked === void 0 || typeof size.blocked === "string") && (size.idleDays === void 0 || nullableNumber(size.idleDays)))) return null;
+	if (!Array.isArray(value.plan) || !value.plan.every((action) => isJsonObject(action) && KINDS.includes(String(action.kind)) && typeof action.target === "string" && finite(action.bytes) && typeof action.reason === "string" && (action.workspace === void 0 || typeof action.workspace === "string"))) return null;
+	if (!Array.isArray(value.recent) || !value.recent.every((record) => isJsonObject(record) && record.src === "maintenance" && finite(record.ts) && typeof record.msg === "string" && [
+		"debug",
+		"info",
+		"warn",
+		"error"
+	].includes(String(record.level)) && [
+		"maintenance_pass",
+		"maintenance_action",
+		"maintenance_skip",
+		"maintenance_failure",
+		"maintenance_check"
+	].includes(String(record.event)) && typeof record.pass === "string" && typeof record.trigger === "string" && record.mode === "report")) return null;
+	if (value.lastPass !== null && (!isJsonObject(value.lastPass) || !finite(value.lastPass.startedAt) || !finite(value.lastPass.durationMs) || typeof value.lastPass.trigger !== "string" || value.lastPass.mode !== "report" || value.lastPass.freedBytes !== 0 || value.lastPass.stopped !== 0 || !finite(value.lastPass.actions) || !strings(value.lastPass.blocked))) return null;
+	if (value.pressure !== null) {
+		const pressure = value.pressure;
+		if (!isJsonObject(pressure) || !Array.isArray(pressure.disk) || !pressure.disk.every((disk) => isJsonObject(disk) && typeof disk.volume === "string" && finite(disk.freeMb)) || !nullableNumber(pressure.warningSince) || !isJsonObject(pressure.memory) || ![
+			null,
+			"normal",
+			"warning",
+			"critical"
+		].includes(pressure.memory.level) || !nullableNumber(pressure.memory.availableBytes) || typeof pressure.memory.pressured !== "boolean") return null;
+	}
+	return value;
+}
+function readMaintenanceState() {
+	return parseMaintenanceState(readJsonObject(maintenanceStateFile()));
+}
+function readMaintenanceAttempt() {
+	const value = readJsonObject(maintenanceAttemptFile())?.attemptedAt;
+	return finite(value) ? value : void 0;
+}
+//#endregion
+//#region state/agent-device.ts
+function agentDeviceStateDirs(home = homedir()) {
+	const override = process.env.AGENT_DEVICE_STATE_DIR?.trim();
+	const dirs = /* @__PURE__ */ new Set([override ? resolve(override) : join(home, ".agent-device")]);
+	const workspaces = join(configDir(), "workspaces");
+	try {
+		for (const name of readdirSync(workspaces)) {
+			const dir = join(workspaces, name, "agent-device");
+			try {
+				if (statSync(dir).isDirectory()) dirs.add(dir);
+			} catch {}
+		}
+	} catch {}
+	return [...dirs];
+}
+//#endregion
+//#region state/archive.ts
+function readArchives() {
+	let names;
+	try {
+		names = readdirSync(archiveRoot());
+	} catch {
+		return [];
+	}
+	return names.flatMap((name) => {
+		const archive = readArchive(name);
+		return archive ? [archive] : [];
+	}).toSorted((a, b) => Date.parse(b.removedAt) - Date.parse(a.removedAt) || b.id.localeCompare(a.id));
+}
+function readArchive(id) {
+	if (!id || id.startsWith(".") || basename(id) !== id || id.includes("\0")) return null;
+	try {
+		if (!lstatSync(join(archiveRoot(), id)).isDirectory()) return null;
+		if (!lstatSync(join(archiveRoot(), id, "archive.json")).isFile()) return null;
+	} catch {
+		return null;
+	}
+	const record = readJsonObject(join(archiveRoot(), id, "archive.json"));
+	if (!record || record.id !== id || [
+		"projectRoot",
+		"project",
+		"workspace",
+		"removedAt",
+		"removedBy"
+	].some((key) => typeof record[key] !== "string") || !Number.isFinite(Date.parse(record.removedAt)) || !isJsonObject(record.bytes) || !isJsonObject(record.expires) || !isJsonObject(record.worktree) || !isJsonObject(record.builds) || !Array.isArray(record.agents) || typeof record.version !== "number") return null;
+	const bytes = record.bytes;
+	if ([
+		"logs",
+		"recordings",
+		"agentActions",
+		"record",
+		"total"
+	].some((key) => typeof bytes[key] !== "number" || !Number.isFinite(bytes[key]) || bytes[key] < 0)) return null;
+	return record;
+}
+function readArchiveState(id) {
+	if (!id || id.startsWith(".") || basename(id) !== id || id.includes("\0")) return null;
+	const file = join(archiveRoot(), id, "state.json");
+	try {
+		if (!lstatSync(join(archiveRoot(), id)).isDirectory()) return null;
+		if (!lstatSync(file).isFile()) return null;
+	} catch {
+		return null;
+	}
+	return readJsonObject(file);
+}
+function archivedUsage(archives) {
+	const usage = {
+		count: archives.length,
+		bytes: 0,
+		byKind: {
+			logs: 0,
+			recordings: 0,
+			agentActions: 0,
+			record: 0
+		}
+	};
+	for (const archive of archives) {
+		usage.bytes += archive.bytes.total;
+		for (const kind of [
+			"logs",
+			"recordings",
+			"agentActions",
+			"record"
+		]) usage.byKind[kind] += archive.bytes[kind];
+	}
+	return usage;
+}
+function canonical(path) {
+	try {
+		return realpathSync(path);
+	} catch {
+		return path;
+	}
+}
+function linkReplacedArchives(archives, paths) {
+	const live = new Map(paths.map((path) => [canonical(path), path]));
+	return archives.map((archive) => {
+		const replacedBy = live.get(canonical(archive.projectRoot));
+		return replacedBy ? {
+			...archive,
+			replacedBy
+		} : archive;
+	});
+}
+function archiveEnabledValue(layer) {
+	if (!layer || typeof layer !== "object") return void 0;
+	return layer.archive?.enabled;
+}
+function archiveEnabled(env, layers) {
+	const definition = settingDefinition("archive.enabled");
+	const override = env[definition.env];
+	if ((!override || override === "") && env.STIM_HOME) return definition.scopedHomeValue;
+	const value = override !== void 0 && override !== "" ? coerceSettingText(definition, override) : layers.map(archiveEnabledValue).find((candidate) => candidate !== void 0) ?? definition.default;
+	const error = settingValueError(definition, value);
+	if (error) throw new Error(`Invalid ${override !== void 0 && override !== "" ? definition.env : definition.key}: ${error}`);
+	return value;
+}
+//#endregion
+//#region state/setup-journal.ts
+const capability = (value) => value === "build" || value === "device-host";
+const text = (value) => typeof value === "string" && value.length > 0;
+const knownKeys = (value, keys) => Object.keys(value).every((key) => keys.includes(key));
+function parseSetupJournal(value) {
+	if (!isJsonObject(value) || !knownKeys(value, [
+		"v",
+		"client",
+		"expiresAt",
+		"capabilities",
+		"steps",
+		"granted",
+		"done",
+		"exit"
+	]) || value.v !== 1 || !isJsonObject(value.client) || !knownKeys(value.client, ["nodeId"]) || !text(value.client.nodeId) || typeof value.expiresAt !== "string" || !Number.isFinite(Date.parse(value.expiresAt)) || !Array.isArray(value.capabilities) || !value.capabilities.every(capability) || !Array.isArray(value.steps) || !value.steps.every((step) => isJsonObject(step) && knownKeys(step, [
+		"id",
+		"state",
+		"title",
+		"detail",
+		"fix"
+	]) && text(step.id) && typeof step.state === "string" && [
+		"pending",
+		"running",
+		"ok",
+		"skipped",
+		"failed"
+	].includes(step.state) && text(step.title) && (step.detail === void 0 || typeof step.detail === "string") && (step.fix === void 0 || typeof step.fix === "string")) || !Array.isArray(value.granted) || !value.granted.every((grant) => isJsonObject(grant) && knownKeys(grant, ["capability", "id"]) && capability(grant.capability) && text(grant.id)) || typeof value.done !== "boolean" || value.exit !== void 0 && (!Number.isInteger(value.exit) || value.exit < 0)) return null;
+	return value;
+}
+function readSetupJournal(hash) {
+	const file = setupJournalFile(hash);
+	return file === null ? null : parseSetupJournal(readJsonObject(file));
+}
+function isJournalExpired(journal, now = Date.now()) {
+	return Date.parse(journal.expiresAt) < now;
+}
+function isSetupJournalPrunable(journal, now) {
+	return Date.parse(journal.expiresAt) + 36e5 < now;
+}
+//#endregion
+export { ACTIVITY_RECENCY_BASES, AGENT_TOOLS, ANDROID_COMPILER_CACHE_CHOICES, ANDROID_EMULATOR_APPS, ANDROID_PCH_CHOICES, APP_PROCESS_STATES, BUILD_HISTORY_KEY, BUILD_HISTORY_LIMIT, BUILD_PHASES, BUILD_RESULTS, CAPACITY_REFUSAL_LIMIT, CAPACITY_REFUSAL_MAX_AGE_MS, DEVICE_IDLE_SHUTDOWN_KEY, DEVICE_RECLAIM_REASON, DEV_SERVER_STOP_REQUEST_KEY, ENDED_AGENT_RETENTION_MS, ERROR_SOURCES, HISTORY_LIMIT, HOSTED_AGENT_DRIVERS, HOSTED_APP_CHUNK_BYTES, HOSTED_LOGS_FIRST_BYTES, HOSTED_LOGS_PAGE_BYTES, HOSTED_MACOS_APP_SLOTS, HOSTED_METRO_GATEWAYS_KEY, HOSTED_METRO_REQUESTS_KEY, IDLE_STOP_KEY, IOS_SIMULATOR_APPS, LAST_BUILD_KEYS, LEVELS, MACHINE_OWNER_KINDS, MEMORY_SOURCES, NATIVE_BUILD_STEPS, NATIVE_CRASH_LOG_PREFIX, OFFLOAD_MODES, PHYSICAL_DEVICE_CONNECTIONS, PLACEMENT_DECISIONS, READY_PHASE_MS, RECORDING_CAP_BYTES, RECORDING_FOOTAGE_MS, RECORDING_PLATFORMS, REMOTE_DEVICE_BACKENDS, SETTINGS, SETTINGS_SCHEMA_FILE, SETTINGS_SCHEMA_URL, SETTING_GROUPS, SETTING_SCOPES, SOURCES, STATS_VERSION, STATUS_ISSUE_CODES, TAILNET_MACHINE_PATTERN, TUNNEL_MODES, TUTORIAL_VERSION, WARM_KEY, WEB_PAGE_STATES, WEB_VIEWPORTS, WORKSPACE_AGENT_KEY, WORKSPACE_PHASES, WORKSPACE_STAGE_KINDS, acceptsShape, advanceTail, agentDeviceStateDirs, agentDeviceUsageFile, agentSessionOf, agentSessionsCacheFile, allMetroPorts, archiveDir, archiveEnabled, archiveLock, archiveRoot, archivedUsage, assertHostedDeviceLedger, attachExpoErrorContext, buildCriteria, buildDiagnostics, buildMachinesFile, buildMachinesLock, buildSlotPath, buildSlotsDir, buildWorkerRoot, bundleMarkerPlatform, capDrops, closedSegmentName, coerceSettingText, compileGrep, configCorruptRepair, configLockPath, countErrorEntries, createAgentActionReader, createdDevicesFile, createdDevicesLock, decodeStats, deviceHostArea, deviceHostMachinesClaims, deviceHostMachinesFile, deviceHostMachinesLock, deviceHostRoot, deviceViewersDir, diskUsageCacheDir, diskUsageCacheFile, easMachineStateRoot, easSessionLedgerFile, easSessionLedgerLock, emulatorLogFile, endedAgentSessionOf, endpoint, expectedShape, fileSizes, findEnclosingWorktreeRoot, findPeer, findProjectByMetroPort, findProjectRoot, followLogs, footageDrops, getConcurrencyLimits, getConfigPath, getParkedMax, getProject, getProjectSetting, getProjectSettings, getRepoSettings, gitMergeCacheDir, hostedAndroidDeviceName, hostedAndroidPlacements, hostedAndroidRecords, hostedAndroidStatus, hostedAppArea, hostedAppAttempt, hostedAppBlobs, hostedConsolePort, hostedDeviceId, hostedIosPlacements, hostedIosRecords, hostedIosStatus, hostedMacosAppSlot, hostedMacosBundleId, hostedMacosLogsDir, hostedMetroGateways, hostedMetroRequests, hostedNativeLogsDir, hostedNativeRecords, isJournalExpired, isJsonObject, isLayeredSetting, isPathPrefix, isSensitiveReference, isSetupJournalPrunable, lastUseFrom, levelRank, linkReplacedArchives, listRecordedDevices, listSegments, listStatusCacheEntries, loadConfig, logFiles, machineCapacity, macosAppState, maintenanceAttemptFile, maintenanceChildLogFile, maintenanceDir, maintenanceNdjsonFile, maintenanceRunClaims, maintenanceStateFile, markerWindow, offloadSummary, openSegmentName, parseHostedAgentAccess, parseHostedAgentGrant, parseHostedAndroidDevice, parseHostedAndroidPlacement, parseHostedAppManifest, parseHostedAppOffer, parseHostedChoice, parseHostedDevice, parseHostedIosPlacement, parseHostedLocalDeviceCount, parseHostedLogsCursor, parseHostedMacosChoice, parseHostedMacosDevice, parseHostedMacosPlacement, parseHostedNativeOffer, parseHostedNativePlacement, parseHostedOfferRequest, parseHostedPlatformDevice, parseHostedRequest, parseMachine, parseMacosRecord, parseMaintenanceState, parseMissReason, parseNdjsonLine, parseNdjsonText, parseSetupJournal, parseSince, pinnedEndpoint, pullRequestCacheDir, pullRequestCacheFile, queryJsonLogs, queryLogs, readAgentDeviceUsage, readAgentDeviceUsageCache, readAgentSessionsCache, readArchive, readArchiveState, readArchives, readBuildDetail, readBuildHistory, readBuildMachines, readCreatedDevices, readDevServerStop, readDevServerStopRequest, readDeviceHostMachines, readDeviceIdleShutdowns, readDevicePlacement, readDiskUsage, readEasSessionLedger, readEndedAgentSessions, readHostedApp, readHostedAppMetadata, readHostedDevice, readHostedDeviceLedger, readHostedMacosApp, readHostedNativeLogsCheckpoint, readHostedSessions, readIdleStop, readJsonFile, readJsonObject, readLastBuilds, readLogRecords, readLogTimeline, readLogsSince, readMacosRecord, readMaintenanceAttempt, readMaintenanceState, readNdjsonGenerations, readPullRequestCache, readRunEstimates, readSetupJournal, readStateFile, readStats, readStatsReport, readSwiftpmCacheUsage, readViewedDevices, readWarmRecord, readWorkspaceAgent, readWorkspaceState, recordMatches, recordedBytes, recordingDeviceName, recordingEnabled, rememberHostedAppBlobRename, saturation, serverSetupDir, settingDefinition, settingValueError, settingsJsonSchema, setupJournalFile, sharedCcache, sharedCompilationCache, sharedGradle, sharedPods, sortByTs, statsFile, statsProjectKey, stimBuildDigest, supervisorLogFile, supervisorPidFile, swiftpmCacheUsageFile, tailRead, trimCapacityRefusals, trimCapacityWaits, trimSamples, tryAcquireBuildSlotClaim, unreadableHostedAndroid, unreadableHostedIos, unreadableHostedNative, validEasSessionClaim, validHostedAppArguments, validHostedAppBlob, wholePhases, withConfigLock, withDerivedFacts, withGitChip, withStateReadCache, workspaceAgentDeviceDir, workspaceBuildDetailFile, workspaceDerivedData, workspaceEndedAgentsFile, workspaceEndedAgentsLock, workspaceGradleBuild, workspaceLastUsed, workspaceLogErrorIndex, workspaceLogsDir, workspaceMetadataFile, workspaceRecordingsDir, workspaceStateFile, workspaceStateLock };