@stim-cli/core 1.17.2 → 1.19.0

package/dist/state.mjs

@@ -1,10 +1,10 @@
 import { _ as releaseClaim, f as isClaimRefusal, g as readClaimSet, x as tryAcquireClaim } from "./ownership-claim-O31Y5iIb.mjs";
 import { inspectProcessIdentity } from "./process-identity.mjs";
-import { C as workspaceStateDir, h as rotatedLogPath, j as withDirLock, l as configDir, x as workspaceName } from "./core-DWOUn9xp.mjs";
-import { closeSync, existsSync, fstatSync, lstatSync, mkdirSync, openSync, readFileSync, readSync, readdirSync, realpathSync, statSync } from "node:fs";
+import { C as workspaceStateDir, h as rotatedLogPath, j as withDirLock, l as configDir, m as rotateLog, t as LOG_ROTATE_BYTES, x as workspaceName } from "./core-DWOUn9xp.mjs";
+import { appendFileSync, closeSync, existsSync, fstatSync, lstatSync, mkdirSync, openSync, readFileSync, readSync, readdirSync, realpathSync, statSync } from "node:fs";
 import { availableParallelism, homedir, loadavg } from "node:os";
 import { basename, dirname, isAbsolute, join, posix, relative, resolve, sep } from "node:path";
-import { createHash } from "node:crypto";
+import { createHash, randomBytes } from "node:crypto";
 import { isIP } from "node:net";
 import { AsyncLocalStorage } from "node:async_hooks";
 import { StringDecoder } from "node:string_decoder";
@@ -148,8 +148,8 @@ function readCompleteLines(path, start) {
 	let fd;
 	try {
 		fd = openSync(path, "r");
-		const stat = fstatSync(fd);
-		const size = stat.size;
+		const stat = fstatSync(fd, { bigint: true });
+		const size = Number(stat.size);
 		const identity = `${stat.dev}:${stat.ino}`;
 		if (size <= start) return {
 			text: "",
@@ -488,6 +488,10 @@ function agentSessionsCacheFile() {
 function diskUsageCacheDir() {
 	return join(configDir(), "disk-usage");
 }
+/** The ownership claim root that admits one disk-usage walk at a time on this machine. */
+function diskUsageWalkClaims() {
+	return join(configDir(), "disk-usage-walk.claims");
+}
 /** The remote Macs this Mac paired with, each with its pinned tailnet node and device token. */
 function buildMachinesFile() {
 	return join(configDir(), "build-machines.json");
@@ -1009,10 +1013,10 @@ const SETTINGS = [
 		type: {
 			kind: "string",
 			pattern: TAILNET_MACHINE_PATTERN,
-			patternHelp: "eas, proxy, auto, or a tailnet machine name"
+			patternHelp: "eas, proxy, auto, local, or a tailnet machine name"
 		},
 		scopes: EVERY,
-		description: "Default iOS remote target: eas, proxy, or an approved Mac in remote.machines; auto places on an approved Mac when this Mac is full or busy"
+		description: "Default iOS remote target: eas, proxy, or an approved Mac in remote.machines; auto places on an approved Mac when this Mac is full or busy; local runs here, overriding a lower layer"
 	},
 	{
 		key: "ios.simslimProfile",
@@ -1107,10 +1111,10 @@ const SETTINGS = [
 		type: {
 			kind: "string",
 			pattern: TAILNET_MACHINE_PATTERN,
-			patternHelp: "eas, proxy, auto, or a tailnet machine name"
+			patternHelp: "eas, proxy, auto, local, or a tailnet machine name"
 		},
 		scopes: EVERY,
-		description: "Default Android remote target: eas, proxy, or an approved Mac in remote.machines; auto places on an approved Mac when this Mac is full or busy"
+		description: "Default Android remote target: eas, proxy, or an approved Mac in remote.machines; auto places on an approved Mac when this Mac is full or busy; local runs here, overriding a lower layer"
 	},
 	{
 		key: "metro.tunnel",
@@ -1435,14 +1439,18 @@ const SETTINGS = [
 		key: "maintenance.mode",
 		type: {
 			kind: "choice",
-			choices: ["off", "report"]
+			choices: [
+				"off",
+				"report",
+				"on"
+			]
 		},
 		scopes: MACHINE,
-		default: "report",
+		default: "on",
 		env: "STIM_MAINTENANCE",
 		scopedHomeValue: "off",
 		ciValue: "off",
-		description: "Automatic resource maintenance. report measures, plans and logs what it would do and never deletes or stops anything; off disables it. Off under STIM_HOME or CI unless STIM_MAINTENANCE is set"
+		description: "Automatic resource maintenance. on removes what gc would remove under the caps and floors below and logs every action; report measures, plans and logs what it would do and never deletes anything; off disables it. Off under STIM_HOME or CI unless STIM_MAINTENANCE is set"
 	},
 	{
 		key: "maintenance.pressureCheckMinutes",
@@ -1560,6 +1568,69 @@ const SETTINGS = [
 		env: "STIM_MAINTENANCE_CAP_TARGET_PERCENT",
 		description: "Plan toward this percentage of each size cap"
 	},
+	{
+		key: "maintenance.worktreeCheckMinutes",
+		type: {
+			kind: "number",
+			integer: true,
+			minimum: 1
+		},
+		scopes: MACHINE,
+		default: 15,
+		env: "STIM_MAINTENANCE_WORKTREE_CHECK_MINUTES",
+		description: "Finished-worktree check interval in minutes"
+	},
+	{
+		key: "maintenance.sweepHours",
+		type: {
+			kind: "number",
+			integer: true,
+			minimum: 0
+		},
+		scopes: MACHINE,
+		default: 24,
+		env: "STIM_MAINTENANCE_SWEEP_HOURS",
+		description: "Age sweep interval in hours; 0 turns the age sweep off"
+	},
+	{
+		key: "maintenance.olderThanDays",
+		type: {
+			kind: "number",
+			integer: true,
+			minimum: 1
+		},
+		scopes: MACHINE,
+		default: 7,
+		env: "STIM_MAINTENANCE_OLDER_THAN_DAYS",
+		description: "Age in days for the age sweep: unused workspace build outputs and shared cache entries"
+	},
+	{
+		key: "maintenance.protectRecentHours",
+		type: {
+			kind: "number",
+			integer: true,
+			minimum: 0
+		},
+		scopes: MACHINE,
+		default: 2,
+		env: "STIM_MAINTENANCE_PROTECT_RECENT_HOURS",
+		description: "Cache entries used within this many hours are never evicted"
+	},
+	{
+		key: "maintenance.removeFinishedWorktrees",
+		type: BOOLEAN,
+		scopes: MACHINE,
+		default: true,
+		env: "STIM_MAINTENANCE_REMOVE_FINISHED_WORKTREES",
+		description: "Remove clean linked worktrees whose branch or pull request finished, under gc.worktreeGraceMinutes"
+	},
+	{
+		key: "maintenance.keep",
+		type: BOOLEAN,
+		scopes: PROJECT,
+		default: false,
+		description: "Pin this workspace: automatic maintenance never clears its build outputs or removes its worktree"
+	},
 	{
 		key: "maintenance.workspaceOutputsMaxGb",
 		type: {
@@ -1604,6 +1675,17 @@ const SETTINGS = [
 		env: "STIM_CACHES_SWIFT_COMPILATION_CACHE_MAX_GB",
 		description: "Swift compilation-cache cap in GiB; planned emptying is whole; 0 means no cap"
 	},
+	{
+		key: "caches.ccacheMaxGb",
+		type: {
+			kind: "number",
+			exclusiveMinimum: 0
+		},
+		scopes: MACHINE,
+		default: 5,
+		env: "STIM_CACHES_CCACHE_MAX_GB",
+		description: "ccache size limit in GiB, passed to ccache as CCACHE_MAXSIZE; ccache evicts by itself"
+	},
 	{
 		key: "gc.worktreeGraceMinutes",
 		type: CAPACITY,
@@ -1630,6 +1712,14 @@ const SETTINGS = [
 		scopedHomeValue: 0,
 		description: "Parked emulators kept for adoption; 0 turns parking off"
 	},
+	{
+		key: "debug.logs",
+		type: { kind: "boolean" },
+		scopes: MACHINE,
+		default: false,
+		env: "STIM_DEBUG",
+		description: "Debug-level logging. While on, the CLI records its commands, child processes and requests to other Macs, and stim-server records every request with its timings, under STIM_HOME/logs/debug/ with rotation. Nothing is sent anywhere, and records never carry arguments, tokens or tickets"
+	},
 	{
 		key: "hosting.agentDriver",
 		type: {
@@ -1653,6 +1743,27 @@ const SETTINGS = [
 		scopes: MACHINE,
 		description: "Tailscale names of the remote Macs this Mac may build on and host owned simulators on, each optionally with :<port> of its tailscale serve route (default 7443); what each is used for follows the build and device-host approvals it grants, which doctor --fix asks for separately"
 	},
+	{
+		key: "remote.buildPoolDisabled",
+		type: { kind: "strings" },
+		scopes: MACHINE,
+		default: [],
+		description: "Members excluded from this requester's automatic build placement: local or exact remote.machines entries. Explicit placement and running builds are unaffected; at least one local or configured, approved remote member must stay enabled"
+	},
+	{
+		key: "remote.devicePoolDisabled",
+		type: { kind: "strings" },
+		scopes: MACHINE,
+		default: [],
+		description: "Members excluded from this requester's automatic simulator and emulator placement: local or exact remote.machines entries. Explicit placement and existing sessions are unaffected; at least one local or configured, approved remote member must stay enabled"
+	},
+	{
+		key: "remote.easFallback",
+		type: BOOLEAN,
+		scopes: EVERY,
+		default: false,
+		description: "When ios.remote or android.remote is auto, this Mac is at its concurrency.maxDevices cap and no Mac in remote.machines takes the run, run the simulator or emulator on a billed EAS Simulator instead of waiting or refusing, when eas-cli can"
+	},
 	{
 		key: "remote.build",
 		type: {
@@ -1663,7 +1774,7 @@ const SETTINGS = [
 		scopes: MACHINE,
 		default: "auto",
 		env: "STIM_REMOTE_BUILD",
-		description: "Build placement: auto follows remote.buildMode with local fallback; local always builds here; a name in remote.machines requires that remote Mac without fallback. The ios, android and macos --remote-build flag overrides this setting and its environment override"
+		description: "Build placement: auto follows remote.buildMode within enabled automatic pool members; local always builds here; a name in remote.machines requires that remote Mac without fallback. The ios, android and macos --remote-build flag overrides this setting and its environment override"
 	},
 	{
 		key: "remote.buildMode",
@@ -1674,7 +1785,7 @@ const SETTINGS = [
 		scopes: MACHINE,
 		default: "auto",
 		env: "STIM_REMOTE_BUILD_MODE",
-		description: "When remote.build is auto, where iOS simulator Debug, Android emulator debug and macOS SwiftPM Debug builds run: auto builds here while this Mac has a free concurrency.maxBuilds slot and its load is under server.maxLoadPerCore, and otherwise builds on a less loaded Mac in remote.machines; force builds on a remote Mac whenever one can take the build; off always builds here"
+		description: "When remote.build is auto, where iOS simulator Debug, Android emulator debug and macOS SwiftPM Debug builds run: auto builds here while this Mac has a free concurrency.maxBuilds slot and its load is under server.maxLoadPerCore, and otherwise builds on a less loaded Mac in remote.machines; force builds on an enabled remote Mac whenever one can take the build; off builds here when local is enabled in remote.buildPoolDisabled"
 	},
 	{
 		key: "server.maxLoadPerCore",
@@ -1971,6 +2082,136 @@ function readBuildMachines() {
 	}
 }
 //#endregion
+//#region state/device-host-machines.ts
+/** An absent store is empty; unreadable or malformed credentials refuse access without discarding pins. */
+function readDeviceHostMachines() {
+	let value;
+	try {
+		value = readJsonFile(deviceHostMachinesFile());
+	} catch (error) {
+		if (error.code === "ENOENT") return [];
+		throw error;
+	}
+	if (!isJsonObject(value) || value.version !== 1 || !Array.isArray(value.machines)) throw new Error("Invalid device-host machine credential store");
+	const machines = [];
+	for (const entry of value.machines) {
+		if (!isJsonObject(entry) || ![
+			"machine",
+			"nodeId",
+			"dnsName",
+			"deviceId",
+			"deviceToken",
+			"requestedAt"
+		].every((key) => typeof entry[key] === "string" && entry[key]) || entry.state !== "pending" && entry.state !== "approved" || machines.some((each) => each.machine === entry.machine)) throw new Error("Invalid device-host machine credential store");
+		const { ticketHash, expiresAt, ...credential } = entry;
+		machines.push({
+			...credential,
+			...typeof expiresAt === "string" && expiresAt ? { expiresAt } : {},
+			...typeof ticketHash === "string" ? { ticketHash } : {}
+		});
+	}
+	return machines;
+}
+//#endregion
+//#region state/automatic-pools.ts
+function automaticMachineEnabled(role, machine, config = loadConfig()) {
+	const key = `${role}PoolDisabled`;
+	const disabled = config?.remote?.[key];
+	if (disabled === void 0) return true;
+	if (!Array.isArray(disabled) || disabled.some((entry) => typeof entry !== "string" || !entry.trim())) throw Object.assign(/* @__PURE__ */ new Error(`remote.${key} must be a list of machine names or local.`), { code: "STIM_BAD_ARG" });
+	return !disabled.includes(machine);
+}
+function requireAutomaticMachine(role, machine) {
+	if (automaticMachineEnabled(role, machine)) return;
+	throw Object.assign(/* @__PURE__ */ new Error(`${machine} is disabled in this requester's automatic ${role} pool.`), {
+		code: role === "build" ? "STIM_OFFLOAD_REFUSED" : "STIM_HOSTING_REFUSED",
+		remedy: `Enable it in remote.${role}PoolDisabled or select a machine explicitly.`
+	});
+}
+function validateAutomaticPool(role, config) {
+	if (automaticMachineEnabled(role, "local", config)) return;
+	const configured = config.remote?.machines;
+	const approved = role === "build" ? readBuildMachines() : readDeviceHostMachines();
+	if (Array.isArray(configured) && configured.some((machine) => typeof machine === "string" && automaticMachineEnabled(role, machine, config) && approved.some((entry) => entry.machine === machine && entry.state === "approved"))) return;
+	throw Object.assign(/* @__PURE__ */ new Error(`Keep at least one enabled automatic ${role} pool member: local or a configured, approved remote machine.`), { code: "STIM_BAD_ARG" });
+}
+//#endregion
+//#region state/debug-log.ts
+const DEBUG_ENV = "STIM_DEBUG";
+const ENABLED_RECHECK_MS = 5e3;
+const ROTATE_CHECK_BYTES = 262144;
+const SECRET_KEY = /token|secret|ticket|password|passphrase|authorization|credential|cookie|apikey/i;
+const MAX_DEPTH = 4;
+function debugLogDir() {
+	return join(configDir(), "logs", "debug");
+}
+/** The `STIM_DEBUG` override (1/true on, 0/false off, anything else off), else the machine setting `debug.logs`. Never throws. */
+function debugLoggingEnabled(env = process.env) {
+	const definition = settingDefinition("debug.logs");
+	const raw = env[DEBUG_ENV];
+	if (raw !== void 0 && raw !== "") {
+		const value = coerceSettingText(definition, raw);
+		return settingValueError(definition, value) === null && value === true;
+	}
+	try {
+		return loadConfig()?.debug?.logs === true;
+	} catch {
+		return false;
+	}
+}
+function scrub(value, depth = 0) {
+	if (depth > MAX_DEPTH) return "[truncated]";
+	if (Array.isArray(value)) return value.slice(0, 50).map((each) => scrub(each, depth + 1));
+	if (value && typeof value === "object") {
+		const out = {};
+		for (const [key, each] of Object.entries(value)) out[key] = SECRET_KEY.test(key) ? "[redacted]" : scrub(each, depth + 1);
+		return out;
+	}
+	return typeof value === "string" && value.length > 500 ? `${value.slice(0, 500)}...` : value;
+}
+/**
+* Debug-level records for one component (`cli` or `server`). Off by default; `STIM_DEBUG=1` or `debug.logs` turns it
+* on. Callers pass names, durations and codes, never arguments, environment values, tokens or tickets.
+*/
+function createDebugLog(component, { env = process.env, now = Date.now, base = () => ({}) } = {}) {
+	let checkedAt = Number.NEGATIVE_INFINITY;
+	let on = false;
+	let unchecked = ROTATE_CHECK_BYTES;
+	const enabled = () => {
+		const at = now();
+		if (at - checkedAt >= ENABLED_RECHECK_MS) {
+			checkedAt = at;
+			on = debugLoggingEnabled(env);
+		}
+		return on;
+	};
+	return {
+		enabled,
+		log(event, fields = {}) {
+			if (!enabled()) return;
+			try {
+				const file = join(debugLogDir(), `${component}.ndjson`);
+				const line = `${JSON.stringify({
+					ts: now(),
+					level: "debug",
+					src: component,
+					event,
+					pid: process.pid,
+					...base(),
+					...scrub(fields)
+				})}\n`;
+				mkdirSync(debugLogDir(), { recursive: true });
+				if (unchecked >= ROTATE_CHECK_BYTES) {
+					unchecked = 0;
+					rotateLog(file, LOG_ROTATE_BYTES);
+				}
+				appendFileSync(file, line, { mode: 384 });
+				unchecked += line.length;
+			} catch {}
+		}
+	};
+}
+//#endregion
 //#region state/ledgers.ts
 function ids(value) {
 	return Array.isArray(value) ? value.filter((entry) => typeof entry === "string" && entry !== "") : [];
@@ -2128,7 +2369,8 @@ const SOURCES = [
 	"device",
 	"build",
 	"agent",
-	"maintenance"
+	"maintenance",
+	"placement"
 ];
 function levelRank(level) {
 	const i = LEVELS.indexOf(level);
@@ -2740,6 +2982,23 @@ function recordingEnabled(env, layers) {
 	return true;
 }
 //#endregion
+//#region state/run-id.ts
+const RUN_ID_ENV = "STIM_RUN_ID";
+const RUN_ID_PATTERN = /^[A-Za-z0-9._-]{1,64}$/;
+/** A run id as the CLI and stim-server accept it: letters, digits, `.`, `_` and `-`, at most 64. Null otherwise. */
+function validRunId(value) {
+	return typeof value === "string" && RUN_ID_PATTERN.test(value) ? value : null;
+}
+let current = null;
+/**
+* The id of this CLI invocation: `STIM_RUN_ID` when it holds a valid id (Stim Desktop passes one), else a random one.
+* The CLI entry exports it back to `STIM_RUN_ID` so processes the run starts inherit it; this function does not.
+*/
+function runId(env = process.env) {
+	if (current === null) current = validRunId(env["STIM_RUN_ID"]) ?? randomBytes(6).toString("hex");
+	return current;
+}
+//#endregion
 //#region state/settings-schema.ts
 const SETTINGS_SCHEMA_FILE = "settings.schema.json";
 const SETTINGS_SCHEMA_URL = `https://unpkg.com/stim/dist/${SETTINGS_SCHEMA_FILE}`;
@@ -2923,7 +3182,7 @@ const WORKSPACE_PHASES = [
 	"idle"
 ];
 /** The tutorial format version the installed Stim writes into the tutorial app. */
-const TUTORIAL_VERSION = 1;
+const TUTORIAL_VERSION = 2;
 /**
 * Where a memory figure comes from. `footprint` is each process's physical footprint, which Activity Monitor's Memory
 * column shows. `rss` sums resident set sizes, which count pages shared between processes once per process, so a
@@ -3103,6 +3362,10 @@ function cacheName(path) {
 function diskUsageCacheFile(path) {
 	return join(diskUsageCacheDir(), cacheName(path));
 }
+/** The file that records when the last walk of `path` failed, so other processes do not repeat it at once. */
+function diskUsageFailureFile(path) {
+	return join(diskUsageCacheDir(), cacheName(path).replace(/\.json$/, ".failed.json"));
+}
 /** The file that caches the pull request of the worktree at `path`. */
 function pullRequestCacheFile(path) {
 	return join(pullRequestCacheDir(), cacheName(path));
@@ -3202,6 +3465,12 @@ function readDiskUsage(path) {
 		measuredAt
 	};
 }
+/** When the last walk of `path` failed (an ISO time), or null when none is recorded. */
+function readDiskUsageFailure(path) {
+	const entry = readJsonObject(diskUsageFailureFile(path));
+	if (!entry || entry.path !== path || typeof entry.failedAt !== "string") return null;
+	return Number.isFinite(Date.parse(entry.failedAt)) ? entry.failedAt : null;
+}
 function countOrNull(value) {
 	return typeof value === "number" && Number.isInteger(value) && value >= 0 ? value : null;
 }
@@ -3443,7 +3712,7 @@ function buildDiagnostics(value) {
 function devicePlacement(value) {
 	if (!value || typeof value !== "object" || Array.isArray(value)) return null;
 	const record = value;
-	if (record.decision !== "local" && record.decision !== "hosted" && record.decision !== "waited-locally" || typeof record.reason !== "string") return null;
+	if (record.decision !== "local" && record.decision !== "hosted" && record.decision !== "waited-locally" && record.decision !== "eas" || typeof record.reason !== "string") return null;
 	return {
 		decision: record.decision,
 		reason: record.reason,
@@ -3513,7 +3782,8 @@ function historyEntry(platform, value) {
 		slot: typeof record.slot === "string" && record.slot ? record.slot : "default",
 		configuration: typeof record.configuration === "string" ? record.configuration : null,
 		cacheKey: typeof record.cacheKey === "string" ? record.cacheKey : null,
-		phases: historyPhases(record.phases)
+		phases: historyPhases(record.phases),
+		...typeof record.compileSteps === "number" && Number.isInteger(record.compileSteps) && record.compileSteps >= 0 ? { compileSteps: record.compileSteps } : {}
 	};
 }
 /** Each platform's recorded runs, newest first, at most `BUILD_HISTORY_LIMIT` each. */
@@ -3544,11 +3814,13 @@ function lastUseFrom(state, logMtimes) {
 	].filter(Number.isFinite);
 	return candidates.length ? Math.max(...candidates) : NaN;
 }
+const MAINTENANCE_LOG_NAME = "maintenance.ndjson";
 function workspaceLastUsed(root) {
 	const logs = workspaceLogsDir(root);
 	let mtimes = [];
 	try {
 		mtimes = readdirSync(logs).flatMap((name) => {
+			if (name.startsWith("maintenance.ndjson")) return [];
 			try {
 				return [statSync(join(logs, name)).mtimeMs];
 			} catch {
@@ -3985,7 +4257,7 @@ function readStatsReport(key, now) {
 		note
 	};
 }
-function findProjectRoot(startDir) {
+function* projectRootDirectories(startDir) {
 	let dir;
 	try {
 		dir = realpathSync(resolve(startDir));
@@ -3993,12 +4265,16 @@ function findProjectRoot(startDir) {
 		dir = resolve(startDir);
 	}
 	while (true) {
-		if (existsSync(join(dir, "package.json")) || existsSync(join(dir, "Package.swift"))) return dir;
+		yield dir;
 		const parent = dirname(dir);
-		if (parent === dir) return null;
+		if (parent === dir) return;
 		dir = parent;
 	}
 }
+function findProjectRoot(startDir) {
+	for (const dir of projectRootDirectories(startDir)) if (existsSync(join(dir, "package.json")) || existsSync(join(dir, "Package.swift"))) return dir;
+	return null;
+}
 //#endregion
 //#region state/device-host.ts
 function deviceHostRoot() {
@@ -4320,37 +4596,6 @@ function readHostedApp(session, attempt, workerHome) {
 	};
 }
 //#endregion
-//#region state/device-host-machines.ts
-/** An absent store is empty; unreadable or malformed credentials refuse access without discarding pins. */
-function readDeviceHostMachines() {
-	let value;
-	try {
-		value = readJsonFile(deviceHostMachinesFile());
-	} catch (error) {
-		if (error.code === "ENOENT") return [];
-		throw error;
-	}
-	if (!isJsonObject(value) || value.version !== 1 || !Array.isArray(value.machines)) throw new Error("Invalid device-host machine credential store");
-	const machines = [];
-	for (const entry of value.machines) {
-		if (!isJsonObject(entry) || ![
-			"machine",
-			"nodeId",
-			"dnsName",
-			"deviceId",
-			"deviceToken",
-			"requestedAt"
-		].every((key) => typeof entry[key] === "string" && entry[key]) || entry.state !== "pending" && entry.state !== "approved" || machines.some((each) => each.machine === entry.machine)) throw new Error("Invalid device-host machine credential store");
-		const { ticketHash, expiresAt, ...credential } = entry;
-		machines.push({
-			...credential,
-			...typeof expiresAt === "string" && expiresAt ? { expiresAt } : {},
-			...typeof ticketHash === "string" ? { ticketHash } : {}
-		});
-	}
-	return machines;
-}
-//#endregion
 //#region state/macos.ts
 function processRecord(value) {
 	if (!value || typeof value !== "object") return void 0;
@@ -4365,7 +4610,7 @@ function processRecord(value) {
 }
 function parseMacosRecord(value) {
 	if (!value || typeof value !== "object" || Array.isArray(value)) return null;
-	const { launchId, arguments: args, product, bundle, bundleId, executable, build, supervisor, app, host, hostLaunched } = value;
+	const { launchId, arguments: args, product, displayName, bundle, bundleId, executable, build, supervisor, app, host, hostLaunched } = value;
 	if (typeof launchId !== "string" || !Array.isArray(args) || args.some((arg) => typeof arg !== "string")) return null;
 	if ([
 		product,
@@ -4387,6 +4632,7 @@ function parseMacosRecord(value) {
 		launchId,
 		arguments: args,
 		product,
+		...typeof displayName === "string" ? { displayName } : {},
 		bundle,
 		bundleId,
 		executable,
@@ -4667,7 +4913,10 @@ const KINDS = [
 	"would-trim-cache",
 	"would-empty-cache",
 	"would-shutdown-device",
-	"would-stop-workspace"
+	"would-stop-workspace",
+	"would-remove-worktree",
+	"would-remove-orphan",
+	"would-unregister-cache"
 ];
 /** Rejects missing, corrupt or unsupported payloads without throwing. */
 function parseMaintenanceState(value) {
@@ -4683,7 +4932,11 @@ function parseMaintenanceState(value) {
 		"ccache",
 		"other"
 	].includes(String(size.category)) && (size.workspace === void 0 || typeof size.workspace === "string") && (size.blocked === void 0 || typeof size.blocked === "string") && (size.idleDays === void 0 || nullableNumber(size.idleDays)))) return null;
-	if (!Array.isArray(value.plan) || !value.plan.every((action) => isJsonObject(action) && KINDS.includes(String(action.kind)) && typeof action.target === "string" && finite(action.bytes) && typeof action.reason === "string" && (action.workspace === void 0 || typeof action.workspace === "string"))) return null;
+	if (!Array.isArray(value.plan) || !value.plan.every((action) => isJsonObject(action) && KINDS.includes(String(action.kind)) && typeof action.target === "string" && finite(action.bytes) && typeof action.reason === "string" && (action.workspace === void 0 || typeof action.workspace === "string") && (action.dir === void 0 || typeof action.dir === "string") && (action.olderThanDays === void 0 || finite(action.olderThanDays)) && (action.check === void 0 || [
+		"worktree",
+		"sweep",
+		"disk"
+	].includes(String(action.check))))) return null;
 	if (!Array.isArray(value.recent) || !value.recent.every((record) => isJsonObject(record) && record.src === "maintenance" && finite(record.ts) && typeof record.msg === "string" && [
 		"debug",
 		"info",
@@ -4695,8 +4948,8 @@ function parseMaintenanceState(value) {
 		"maintenance_skip",
 		"maintenance_failure",
 		"maintenance_check"
-	].includes(String(record.event)) && typeof record.pass === "string" && typeof record.trigger === "string" && record.mode === "report")) return null;
-	if (value.lastPass !== null && (!isJsonObject(value.lastPass) || !finite(value.lastPass.startedAt) || !finite(value.lastPass.durationMs) || typeof value.lastPass.trigger !== "string" || value.lastPass.mode !== "report" || value.lastPass.freedBytes !== 0 || value.lastPass.stopped !== 0 || !finite(value.lastPass.actions) || !strings(value.lastPass.blocked))) return null;
+	].includes(String(record.event)) && typeof record.pass === "string" && typeof record.trigger === "string" && (record.mode === "report" || record.mode === "on"))) return null;
+	if (value.lastPass !== null && (!isJsonObject(value.lastPass) || !finite(value.lastPass.startedAt) || !finite(value.lastPass.durationMs) || typeof value.lastPass.trigger !== "string" || value.lastPass.mode !== "report" && value.lastPass.mode !== "on" || !finite(value.lastPass.freedBytes) || value.lastPass.stopped !== 0 || !finite(value.lastPass.actions) || !strings(value.lastPass.blocked))) return null;
 	if (value.pressure !== null) {
 		const pressure = value.pressure;
 		if (!isJsonObject(pressure) || !Array.isArray(pressure.disk) || !pressure.disk.every((disk) => isJsonObject(disk) && typeof disk.volume === "string" && finite(disk.freeMb)) || !nullableNumber(pressure.warningSince) || !isJsonObject(pressure.memory) || ![
@@ -4875,4 +5128,4 @@ function isSetupJournalPrunable(journal, now) {
 	return Date.parse(journal.expiresAt) + 36e5 < now;
 }
 //#endregion
-export { ACTIVITY_RECENCY_BASES, AGENT_TOOLS, ANDROID_COMPILER_CACHE_CHOICES, ANDROID_EMULATOR_APPS, ANDROID_PCH_CHOICES, APP_PROCESS_STATES, BUILD_HISTORY_KEY, BUILD_HISTORY_LIMIT, BUILD_PHASES, BUILD_RESULTS, CAPACITY_REFUSAL_LIMIT, CAPACITY_REFUSAL_MAX_AGE_MS, DEVICE_IDLE_SHUTDOWN_KEY, DEVICE_RECLAIM_REASON, DEV_SERVER_STOP_REQUEST_KEY, ENDED_AGENT_RETENTION_MS, ERROR_SOURCES, HISTORY_LIMIT, HOSTED_AGENT_DRIVERS, HOSTED_APP_CHUNK_BYTES, HOSTED_LOGS_FIRST_BYTES, HOSTED_LOGS_PAGE_BYTES, HOSTED_MACOS_APP_SLOTS, HOSTED_METRO_GATEWAYS_KEY, HOSTED_METRO_REQUESTS_KEY, IDLE_STOP_KEY, IOS_SIMULATOR_APPS, LAST_BUILD_KEYS, LEVELS, MACHINE_OWNER_KINDS, MEMORY_SOURCES, NATIVE_BUILD_STEPS, NATIVE_CRASH_LOG_PREFIX, OFFLOAD_MODES, PHYSICAL_DEVICE_CONNECTIONS, PLACEMENT_DECISIONS, READY_PHASE_MS, RECORDING_CAP_BYTES, RECORDING_FOOTAGE_MS, RECORDING_PLATFORMS, REMOTE_DEVICE_BACKENDS, SETTINGS, SETTINGS_SCHEMA_FILE, SETTINGS_SCHEMA_URL, SETTING_GROUPS, SETTING_SCOPES, SOURCES, STATS_VERSION, STATUS_ISSUE_CODES, TAILNET_MACHINE_PATTERN, TUNNEL_MODES, TUTORIAL_VERSION, WARM_KEY, WEB_PAGE_STATES, WEB_VIEWPORTS, WORKSPACE_AGENT_KEY, WORKSPACE_PHASES, WORKSPACE_STAGE_KINDS, acceptsShape, advanceTail, agentDeviceStateDirs, agentDeviceUsageFile, agentSessionOf, agentSessionsCacheFile, allMetroPorts, archiveDir, archiveEnabled, archiveLock, archiveRoot, archivedUsage, assertHostedDeviceLedger, attachExpoErrorContext, buildCriteria, buildDiagnostics, buildMachinesFile, buildMachinesLock, buildSlotPath, buildSlotsDir, buildWorkerRoot, bundleMarkerPlatform, capDrops, closedSegmentName, coerceSettingText, compileGrep, configCorruptRepair, configLockPath, countErrorEntries, createAgentActionReader, createdDevicesFile, createdDevicesLock, decodeStats, deviceHostArea, deviceHostMachinesClaims, deviceHostMachinesFile, deviceHostMachinesLock, deviceHostRoot, deviceViewersDir, diskUsageCacheDir, diskUsageCacheFile, easMachineStateRoot, easSessionLedgerFile, easSessionLedgerLock, emulatorLogFile, endedAgentSessionOf, endpoint, expectedShape, fileSizes, findEnclosingWorktreeRoot, findPeer, findProjectByMetroPort, findProjectRoot, followLogs, footageDrops, getConcurrencyLimits, getConfigPath, getParkedMax, getProject, getProjectSetting, getProjectSettings, getRepoSettings, gitMergeCacheDir, hostedAndroidDeviceName, hostedAndroidPlacements, hostedAndroidRecords, hostedAndroidStatus, hostedAppArea, hostedAppAttempt, hostedAppBlobs, hostedConsolePort, hostedDeviceId, hostedIosPlacements, hostedIosRecords, hostedIosStatus, hostedMacosAppSlot, hostedMacosBundleId, hostedMacosLogsDir, hostedMetroGateways, hostedMetroRequests, hostedNativeLogsDir, hostedNativeRecords, isJournalExpired, isJsonObject, isLayeredSetting, isPathPrefix, isSensitiveReference, isSetupJournalPrunable, lastUseFrom, levelRank, linkReplacedArchives, listRecordedDevices, listSegments, listStatusCacheEntries, loadConfig, logFiles, machineCapacity, macosAppState, maintenanceAttemptFile, maintenanceChildLogFile, maintenanceDir, maintenanceNdjsonFile, maintenanceRunClaims, maintenanceStateFile, markerWindow, offloadSummary, openSegmentName, parseHostedAgentAccess, parseHostedAgentGrant, parseHostedAndroidDevice, parseHostedAndroidPlacement, parseHostedAppManifest, parseHostedAppOffer, parseHostedChoice, parseHostedDevice, parseHostedIosPlacement, parseHostedLocalDeviceCount, parseHostedLogsCursor, parseHostedMacosChoice, parseHostedMacosDevice, parseHostedMacosPlacement, parseHostedNativeOffer, parseHostedNativePlacement, parseHostedOfferRequest, parseHostedPlatformDevice, parseHostedRequest, parseMachine, parseMacosRecord, parseMaintenanceState, parseMissReason, parseNdjsonLine, parseNdjsonText, parseSetupJournal, parseSince, pinnedEndpoint, pullRequestCacheDir, pullRequestCacheFile, queryJsonLogs, queryLogs, readAgentDeviceUsage, readAgentDeviceUsageCache, readAgentSessionsCache, readArchive, readArchiveState, readArchives, readBuildDetail, readBuildHistory, readBuildMachines, readCreatedDevices, readDevServerStop, readDevServerStopRequest, readDeviceHostMachines, readDeviceIdleShutdowns, readDevicePlacement, readDiskUsage, readEasSessionLedger, readEndedAgentSessions, readHostedApp, readHostedAppMetadata, readHostedDevice, readHostedDeviceLedger, readHostedMacosApp, readHostedNativeLogsCheckpoint, readHostedSessions, readIdleStop, readJsonFile, readJsonObject, readLastBuilds, readLogRecords, readLogTimeline, readLogsSince, readMacosRecord, readMaintenanceAttempt, readMaintenanceState, readNdjsonGenerations, readPullRequestCache, readRunEstimates, readSetupJournal, readStateFile, readStats, readStatsReport, readSwiftpmCacheUsage, readViewedDevices, readWarmRecord, readWorkspaceAgent, readWorkspaceState, recordMatches, recordedBytes, recordingDeviceName, recordingEnabled, rememberHostedAppBlobRename, saturation, serverSetupDir, settingDefinition, settingValueError, settingsJsonSchema, setupJournalFile, sharedCcache, sharedCompilationCache, sharedGradle, sharedPods, sortByTs, statsFile, statsProjectKey, stimBuildDigest, supervisorLogFile, supervisorPidFile, swiftpmCacheUsageFile, tailRead, trimCapacityRefusals, trimCapacityWaits, trimSamples, tryAcquireBuildSlotClaim, unreadableHostedAndroid, unreadableHostedIos, unreadableHostedNative, validEasSessionClaim, validHostedAppArguments, validHostedAppBlob, wholePhases, withConfigLock, withDerivedFacts, withGitChip, withStateReadCache, workspaceAgentDeviceDir, workspaceBuildDetailFile, workspaceDerivedData, workspaceEndedAgentsFile, workspaceEndedAgentsLock, workspaceGradleBuild, workspaceLastUsed, workspaceLogErrorIndex, workspaceLogsDir, workspaceMetadataFile, workspaceRecordingsDir, workspaceStateFile, workspaceStateLock };
+export { ACTIVITY_RECENCY_BASES, AGENT_TOOLS, ANDROID_COMPILER_CACHE_CHOICES, ANDROID_EMULATOR_APPS, ANDROID_PCH_CHOICES, APP_PROCESS_STATES, BUILD_HISTORY_KEY, BUILD_HISTORY_LIMIT, BUILD_PHASES, BUILD_RESULTS, CAPACITY_REFUSAL_LIMIT, CAPACITY_REFUSAL_MAX_AGE_MS, DEBUG_ENV, DEVICE_IDLE_SHUTDOWN_KEY, DEVICE_RECLAIM_REASON, DEV_SERVER_STOP_REQUEST_KEY, ENDED_AGENT_RETENTION_MS, ERROR_SOURCES, HISTORY_LIMIT, HOSTED_AGENT_DRIVERS, HOSTED_APP_CHUNK_BYTES, HOSTED_LOGS_FIRST_BYTES, HOSTED_LOGS_PAGE_BYTES, HOSTED_MACOS_APP_SLOTS, HOSTED_METRO_GATEWAYS_KEY, HOSTED_METRO_REQUESTS_KEY, IDLE_STOP_KEY, IOS_SIMULATOR_APPS, LAST_BUILD_KEYS, LEVELS, MACHINE_OWNER_KINDS, MAINTENANCE_LOG_NAME, MEMORY_SOURCES, NATIVE_BUILD_STEPS, NATIVE_CRASH_LOG_PREFIX, OFFLOAD_MODES, PHYSICAL_DEVICE_CONNECTIONS, PLACEMENT_DECISIONS, READY_PHASE_MS, RECORDING_CAP_BYTES, RECORDING_FOOTAGE_MS, RECORDING_PLATFORMS, REMOTE_DEVICE_BACKENDS, RUN_ID_ENV, SETTINGS, SETTINGS_SCHEMA_FILE, SETTINGS_SCHEMA_URL, SETTING_GROUPS, SETTING_SCOPES, SOURCES, STATS_VERSION, STATUS_ISSUE_CODES, TAILNET_MACHINE_PATTERN, TUNNEL_MODES, TUTORIAL_VERSION, WARM_KEY, WEB_PAGE_STATES, WEB_VIEWPORTS, WORKSPACE_AGENT_KEY, WORKSPACE_PHASES, WORKSPACE_STAGE_KINDS, acceptsShape, advanceTail, agentDeviceStateDirs, agentDeviceUsageFile, agentSessionOf, agentSessionsCacheFile, allMetroPorts, archiveDir, archiveEnabled, archiveLock, archiveRoot, archivedUsage, assertHostedDeviceLedger, attachExpoErrorContext, automaticMachineEnabled, buildCriteria, buildDiagnostics, buildMachinesFile, buildMachinesLock, buildSlotPath, buildSlotsDir, buildWorkerRoot, bundleMarkerPlatform, capDrops, closedSegmentName, coerceSettingText, compileGrep, configCorruptRepair, configLockPath, countErrorEntries, createAgentActionReader, createDebugLog, createdDevicesFile, createdDevicesLock, debugLogDir, debugLoggingEnabled, decodeStats, deviceHostArea, deviceHostMachinesClaims, deviceHostMachinesFile, deviceHostMachinesLock, deviceHostRoot, deviceViewersDir, diskUsageCacheDir, diskUsageCacheFile, diskUsageFailureFile, diskUsageWalkClaims, easMachineStateRoot, easSessionLedgerFile, easSessionLedgerLock, emulatorLogFile, endedAgentSessionOf, endpoint, expectedShape, fileSizes, findEnclosingWorktreeRoot, findPeer, findProjectByMetroPort, findProjectRoot, followLogs, footageDrops, getConcurrencyLimits, getConfigPath, getParkedMax, getProject, getProjectSetting, getProjectSettings, getRepoSettings, gitMergeCacheDir, hostedAndroidDeviceName, hostedAndroidPlacements, hostedAndroidRecords, hostedAndroidStatus, hostedAppArea, hostedAppAttempt, hostedAppBlobs, hostedConsolePort, hostedDeviceId, hostedIosPlacements, hostedIosRecords, hostedIosStatus, hostedMacosAppSlot, hostedMacosBundleId, hostedMacosLogsDir, hostedMetroGateways, hostedMetroRequests, hostedNativeLogsDir, hostedNativeRecords, isJournalExpired, isJsonObject, isLayeredSetting, isPathPrefix, isSensitiveReference, isSetupJournalPrunable, lastUseFrom, levelRank, linkReplacedArchives, listRecordedDevices, listSegments, listStatusCacheEntries, loadConfig, logFiles, machineCapacity, macosAppState, maintenanceAttemptFile, maintenanceChildLogFile, maintenanceDir, maintenanceNdjsonFile, maintenanceRunClaims, maintenanceStateFile, markerWindow, offloadSummary, openSegmentName, parseHostedAgentAccess, parseHostedAgentGrant, parseHostedAndroidDevice, parseHostedAndroidPlacement, parseHostedAppManifest, parseHostedAppOffer, parseHostedChoice, parseHostedDevice, parseHostedIosPlacement, parseHostedLocalDeviceCount, parseHostedLogsCursor, parseHostedMacosChoice, parseHostedMacosDevice, parseHostedMacosPlacement, parseHostedNativeOffer, parseHostedNativePlacement, parseHostedOfferRequest, parseHostedPlatformDevice, parseHostedRequest, parseMachine, parseMacosRecord, parseMaintenanceState, parseMissReason, parseNdjsonLine, parseNdjsonText, parseSetupJournal, parseSince, pinnedEndpoint, projectRootDirectories, pullRequestCacheDir, pullRequestCacheFile, queryJsonLogs, queryLogs, readAgentDeviceUsage, readAgentDeviceUsageCache, readAgentSessionsCache, readArchive, readArchiveState, readArchives, readBuildDetail, readBuildHistory, readBuildMachines, readCreatedDevices, readDevServerStop, readDevServerStopRequest, readDeviceHostMachines, readDeviceIdleShutdowns, readDevicePlacement, readDiskUsage, readDiskUsageFailure, readEasSessionLedger, readEndedAgentSessions, readHostedApp, readHostedAppMetadata, readHostedDevice, readHostedDeviceLedger, readHostedMacosApp, readHostedNativeLogsCheckpoint, readHostedSessions, readIdleStop, readJsonFile, readJsonObject, readLastBuilds, readLogRecords, readLogTimeline, readLogsSince, readMacosRecord, readMaintenanceAttempt, readMaintenanceState, readNdjsonGenerations, readPullRequestCache, readRunEstimates, readSetupJournal, readStateFile, readStats, readStatsReport, readSwiftpmCacheUsage, readViewedDevices, readWarmRecord, readWorkspaceAgent, readWorkspaceState, recordMatches, recordedBytes, recordingDeviceName, recordingEnabled, rememberHostedAppBlobRename, requireAutomaticMachine, runId, saturation, serverSetupDir, settingDefinition, settingValueError, settingsJsonSchema, setupJournalFile, sharedCcache, sharedCompilationCache, sharedGradle, sharedPods, sortByTs, statsFile, statsProjectKey, stimBuildDigest, supervisorLogFile, supervisorPidFile, swiftpmCacheUsageFile, tailRead, trimCapacityRefusals, trimCapacityWaits, trimSamples, tryAcquireBuildSlotClaim, unreadableHostedAndroid, unreadableHostedIos, unreadableHostedNative, validEasSessionClaim, validHostedAppArguments, validHostedAppBlob, validRunId, validateAutomaticPool, wholePhases, withConfigLock, withDerivedFacts, withGitChip, withStateReadCache, workspaceAgentDeviceDir, workspaceBuildDetailFile, workspaceDerivedData, workspaceEndedAgentsFile, workspaceEndedAgentsLock, workspaceGradleBuild, workspaceLastUsed, workspaceLogErrorIndex, workspaceLogsDir, workspaceMetadataFile, workspaceRecordingsDir, workspaceStateFile, workspaceStateLock };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stim-cli/core",
-  "version": "1.17.2",
+  "version": "1.19.0",
   "description": "Shared internal cache and runtime primitives for Stim packages.",
   "license": "MIT",
   "repository": {