@stim-cli/core 1.20.2 → 1.21.0

package/dist/phone-protocol.mjs

@@ -1,3 +1,3 @@
-import { t as withDerivedFacts } from "./status-derived-C13g6eQt.mjs";
+import { i as statusViews, n as applyKeyedDelta, o as withDerivedFacts } from "./keyed-delta-BBoOeR2J.mjs";
 import { ACTIONS, PROTOCOL_VERSION } from "./protocol.mjs";
-export { ACTIONS, PROTOCOL_VERSION, withDerivedFacts };
+export { ACTIONS, PROTOCOL_VERSION, applyKeyedDelta, statusViews, withDerivedFacts };

package/dist/{protocol-pH632kA3.d.mts → protocol-D8R_3dkO.d.mts}

@@ -1,10 +1,10 @@
-import { Fi as HostedDeviceRequest, Jt as BuildHistoryEntry, Li as HostedDeviceSession, Mi as HostedDeviceOfferRequest, Ni as HostedDevicePhase, Pi as HostedDevicePlatform, Sa as HostedAppDelivery, d as HostedLogsPage, en as BuildPlanPayload, il as NdjsonRecord, ji as HostedDeviceOffer, u as HostedLogsCursor, ua as HostedAppLaunch, wa as HostedAppOffer, zn as StatusPayload } from "./index-VDWBflH3.mjs";
+import { Br as MaintenanceStatus, Cr as ArchivedWorkspace, Gl as NdjsonRecord, Ji as HostedDeviceOffer, Oa as HostedAppLaunch, On as EnvironmentState, Qi as HostedDeviceRequest, Sr as ArchivedUsage, T as HostedLogsPage, Ua as HostedAppOffer, Va as HostedAppDelivery, Xi as HostedDevicePhase, Yi as HostedDeviceOfferRequest, Zi as HostedDevicePlatform, _o as SettingScope, a as MachineView, d as WorktreeRow, ea as HostedDeviceSession, er as StatusPayload, hn as BuildPlanPayload, i as ArchivedSummary, ln as BuildHistoryEntry, t as KeyedDelta, u as WorkspaceSummary, ur as WorktreeFacts, w as HostedLogsCursor, yo as SettingWriteResult } from "./index-_wkluvP_.mjs";
 //#region protocol.d.ts
-declare const PROTOCOL_VERSION = 1;
+declare const PROTOCOL_VERSION = 2;
 declare const PROTOCOL_SCHEMA_FILE = "protocol.schema.json";
 /**
- * `read` serves state. `control` also runs {@link ACTIONS}; only the Mac grants it. `build` lets another Mac run
- * project code here to build for it; it never comes with `read` or `control`, and only the Mac approves it.
+ * `read` serves state. `control` also runs {@link ACTIONS}; only the machine grants it. `build` lets another machine run
+ * project code here to build for it; it never comes with `read` or `control`, and only the machine approves it.
  * `device-host` permits a client's native app code in its own hosted sessions, and grants no other capability.
  */
 declare const CAPABILITIES: readonly ["read", "control", "build", "device-host"];
@@ -30,63 +30,59 @@ type Capability = (typeof CAPABILITIES)[number];
  * `hosted-ios-process` and `hosted-android-process` accept native app offers in process mode, with live process readiness and no Metro.
  * `native-xcode-build` accepts native Xcode provider requests with a separate source-transfer identity.
  * `native-xcode-toolchain` accepts native Xcode discovery without unrelated platform or Ruby probes.
+ * `build-artifact-cache` offers and fetches exact completed native Xcode archives without a build job.
  * `native-gradle-build` accepts declared Gradle transfer inputs with no reusable artifact identity.
  * `server-update` is `server.update.status`, `server.update.start` and `server.update.chunk`.
+ * `status-views` is `workspaces.subscribe`, `workspace.subscribe`, `machine.subscribe`, `builds.history`,
+ * `archived.list`, `worktrees.list` and `maintenance.get`.
+ * `desktop-reports` serves cached doctor/GC reports to the authenticated local Desktop connection.
+ * `desktop-report-platform` accepts an optional ios/android selector for Desktop doctor reports.
+ * `desktop-settings` reads settings for a selected folder on the authenticated local Desktop connection.
+ * `desktop-settings-write` mutates settings on the proved local Desktop connection.
+ * `desktop-stop` streams private Desktop workspace or slot stop progress and its terminal result.
+ * `desktop-reload` streams reload output and its terminal result on the proved local Desktop connection.
  */
-declare const FEATURES: readonly ["physical-ios", "physical-android", "notifications", "macos-window", "macos-windows", "macos-window-select", "macos-window-control", "macos-keyboard-extended", "device-frames", "macos-hosted", "ios-hosted", "android-hosted", "hosted-ios-agent", "hosted-android-agent", "duo-frames", "workspace-diff", "hosted-congestion", "hosted-ios-data", "hosted-ios-process", "native-xcode-build", "native-xcode-toolchain", "native-gradle-build", "hosted-android-data", "hosted-android-process", "server-update"];
+declare const FEATURES: readonly ["physical-ios", "physical-android", "notifications", "macos-window", "macos-windows", "macos-window-select", "macos-window-control", "macos-keyboard-extended", "device-frames", "macos-hosted", "ios-hosted", "android-hosted", "hosted-ios-agent", "hosted-android-agent", "duo-frames", "workspace-diff", "hosted-congestion", "hosted-ios-data", "hosted-ios-process", "native-xcode-build", "native-xcode-toolchain", "build-artifact-cache", "native-gradle-build", "hosted-android-data", "hosted-android-process", "server-update", "status-views", "desktop-reports", "desktop-report-platform", "desktop-settings", "desktop-settings-write", "desktop-full-logs", "desktop-doctor-run", "desktop-stop", "desktop-reload"];
 type Feature = (typeof FEATURES)[number];
-declare const METHODS: readonly ["hello", "route.setup", "status.subscribe", "logs.query", "logs.subscribe", "stats.get", "settings.get", "workspace.files", "workspace.diff", "frames.subscribe", "frames.keyframe", "frames.seek", "frames.live", "replay.range", "archive.detail", "replay.keyframe", "recording.set", "build.plan", "machine.get", "machine.history", "machine.details", "unsubscribe", "action", "control.begin", "control.end", "input.touch", "input.text", "input.button", "input.rotate", "input.posture", "input.simulator", "input.scroll", "input.key", "input.window", "push.register", "push.unregister", "notifications.list", "build.offer", "build.sync", "build.start", "build.cancel", "build.artifact", "build.attach", "device-host.offer", "device-host.reserve", "device-host.attach", "device-host.stop", "device-host.app.offer", "device-host.app.chunk", "device-host.app.handoff", "device-host.app.launch", "device-host.app.attach", "device-host.logs.query", "device-host.metro.open", "device-host.metro.close", "device-host.frames.subscribe", "device-host.frames.keyframe", "device-host.frames.congested", "device-host.unsubscribe", "device-host.control.begin", "device-host.control.end", "device-host.input.touch", "device-host.input.text", "device-host.input.scroll", "device-host.input.key", "device-host.input.button", "device-host.input.rotate", "device-host.input.posture", "device-host.input.window", "server.update.status", "server.update.start", "server.update.chunk", "machines.update.start", "machines.update.status", "device-host.sessions", "device-host.sessions.stop"];
+declare const METHODS: readonly ["hello", "desktop.authenticate", "desktop.reports.get", "desktop.reports.subscribe", "desktop.reports.invalidate", "desktop.settings.get", "desktop.settings.write", "desktop.logs.subscribe", "desktop.doctor.run", "desktop.stop.subscribe", "desktop.reload.subscribe", "route.setup", "status.subscribe", "workspaces.subscribe", "workspace.subscribe", "machine.subscribe", "builds.history", "archived.list", "worktrees.list", "maintenance.get", "logs.query", "logs.subscribe", "stats.get", "settings.get", "workspace.files", "workspace.diff", "frames.subscribe", "frames.keyframe", "frames.seek", "frames.live", "replay.range", "archive.detail", "replay.keyframe", "recording.set", "build.plan", "machine.get", "machine.history", "machine.details", "unsubscribe", "action", "control.begin", "control.end", "input.touch", "input.text", "input.button", "input.rotate", "input.posture", "input.simulator", "input.scroll", "input.key", "input.window", "push.register", "push.unregister", "notifications.list", "build.offer", "build.sync", "build.start", "build.cancel", "build.artifact", "build.cached-artifact", "build.attach", "device-host.offer", "device-host.reserve", "device-host.attach", "device-host.stop", "device-host.app.offer", "device-host.app.chunk", "device-host.app.handoff", "device-host.app.launch", "device-host.app.attach", "device-host.logs.query", "device-host.metro.open", "device-host.metro.close", "device-host.frames.subscribe", "device-host.frames.keyframe", "device-host.frames.congested", "device-host.unsubscribe", "device-host.control.begin", "device-host.control.end", "device-host.input.touch", "device-host.input.text", "device-host.input.scroll", "device-host.input.key", "device-host.input.button", "device-host.input.rotate", "device-host.input.posture", "device-host.input.window", "server.update.status", "server.update.start", "server.update.chunk", "machines.update.start", "machines.update.status", "device-host.sessions", "device-host.sessions.stop"];
 /**
- * The methods that update this server's `stim-server service`. A Mac this one approved for `build` or
+ * The methods that update this server's `stim-server service`. A machine this one approved for `build` or
  * `device-host` may call them; they need neither `read` nor `control`.
  */
 declare const SERVER_UPDATE_METHODS: readonly ["server.update.status", "server.update.start", "server.update.chunk"];
 /** The methods a connection with the `build` capability may call; they need `build`, not `read`. */
-declare const BUILD_METHODS: readonly ["build.offer", "build.sync", "build.start", "build.cancel", "build.artifact", "build.attach"];
+declare const BUILD_METHODS: readonly ["build.offer", "build.sync", "build.start", "build.cancel", "build.artifact", "build.cached-artifact", "build.attach"];
 /** Methods restricted to explicitly approved device-host clients. */
 declare const DEVICE_HOST_METHODS: readonly ["device-host.offer", "device-host.reserve", "device-host.attach", "device-host.stop", "device-host.app.offer", "device-host.app.chunk", "device-host.app.handoff", "device-host.app.launch", "device-host.app.attach", "device-host.logs.query", "device-host.metro.open", "device-host.metro.close", "device-host.frames.subscribe", "device-host.frames.keyframe", "device-host.frames.congested", "device-host.unsubscribe", "device-host.control.begin", "device-host.control.end", "device-host.input.touch", "device-host.input.text", "device-host.input.scroll", "device-host.input.key", "device-host.input.button", "device-host.input.rotate", "device-host.input.posture", "device-host.input.window"];
 type Method = (typeof METHODS)[number];
 declare const PUSH_TOKEN_PATTERN = "^(Expo|Exponent)PushToken\\[[^\\]\\s]{1,256}\\]$";
 /**
  * `unauthorized`, `pairing-expired` and `protocol-unsupported` refuse the client until it pairs again or
- * updates; `approval-pending` refuses a build client until the Mac approves it; clients retry the others.
+ * updates; `unknown-secret` means the server does not hold the pairing token or setup ticket (yet), so a client with a
+ * setup ticket retries until setup runs; clients retry the others. A network connection's refusals during the
+ * handshake arrive as the WebSocket close reason.
  */
-declare const ERROR_CODES: readonly ["unauthorized", "pairing-expired", "protocol-unsupported", "approval-pending", "identity-unavailable", "bad-request", "unknown-method", "already-authenticated", "unknown-subscription", "unknown-workspace", "limit-exceeded", "slow-client", "status-failed", "logs-failed", "stim-failed", "frames-failed", "forbidden", "unknown-action", "action-busy", "action-failed", "device-busy", "unknown-session", "no-recording", "build-refused", "build-busy"];
+declare const ERROR_CODES: readonly ["unauthorized", "pairing-expired", "protocol-unsupported", "unknown-secret", "bad-request", "unknown-method", "already-authenticated", "unknown-subscription", "unknown-workspace", "limit-exceeded", "slow-client", "status-failed", "logs-failed", "stim-failed", "frames-failed", "forbidden", "unknown-action", "action-busy", "action-failed", "device-busy", "unknown-session", "no-recording", "build-refused", "build-busy"];
 type ErrorCode = (typeof ERROR_CODES)[number];
 type RequestId = number | string;
-/** Spends a single-use pairing token; the result carries the new device token. */
-interface PairingAuth {
-  pairingToken: string;
-  deviceName: string;
-}
-/** Presents the device token a previous pairing returned. */
-interface DeviceAuth {
-  deviceToken: string;
-}
 /**
- * Asks, from another Mac on the tailnet, to build here. The result carries a device token with no
- * capabilities and `approval`; the token authenticates once the Mac approves the request.
+ * The first request on a connection, after the Noise handshake on a network connection or none on the local Unix
+ * socket. Authentication already happened; capabilities come from the server's record of the client's key.
  */
-interface BuildRequestAuth {
-  request: "build";
-  deviceName: string;
-  setupTicket?: string;
-}
-/** Requests explicit device hosting approval; grants no read, control or build access. */
-interface DeviceHostRequestAuth {
-  request: "device-host";
-  deviceName: string;
-  setupTicket?: string;
-}
 interface HelloParams {
-  protocol: number;
   /** `runId` is the CLI invocation's id: letters, digits, `.`, `_`, `-`, at most 64. The server puts it on its log lines for the connection. */
   client: {
     name: string;
     version: string;
     runId?: string;
   };
-  auth: PairingAuth | DeviceAuth | BuildRequestAuth | DeviceHostRequestAuth;
+  /**
+   * Which of the key's own records this connection acts as: its `build` or `device-host` approval. Without it, the
+   * pairing in `devices.json`. It never widens what a record allows.
+   */
+  access?: "build" | "device-host";
+  /** On the local Unix socket only: asks for the private Desktop bootstrap challenge. It grants nothing by itself. */
+  desktopBootstrap?: true;
 }
 interface HelloResult {
   /** Present when the server runs under Stim Host: the grants macOS gives that app, or null if unavailable. */
@@ -97,31 +93,34 @@ interface HelloResult {
   } | null;
   protocol: number;
   /**
-   * The Mac's name, this package's version, the version of the `stim` it runs, and the home directory of the
-   * user it runs as, so clients can show paths under it as `~/...`. A pending approval result has no `home`.
+   * The machine's name, this package's version, the version of the `stim` it runs, and the home directory of the
+   * user it runs as, so clients can show paths under it as `~/...`.
    */
+  /** `port`, on the local socket only, is the server's TCP port, so a client can tell which server answered. */
   server: {
     name: string;
     version: string;
     stim: string;
     home?: string;
+    id?: string;
+    port?: number;
   };
   capabilities: Capability[];
   features: Feature[];
   /** The actions this device may run: every one of {@link ACTIONS} with `control`, none without. */
   actions: ActionName[];
-  /** The paired device this connection authenticated as, as `stim-server devices` lists it. */
+  /** The record this connection authenticated as, as `stim-server devices` lists it; `local` on the Unix socket. */
   device: {
     id: string;
     name: string;
   };
-  /** Present only when the hello spent a pairing token or requested build or device-host access. The server keeps only its hash. */
-  deviceToken?: string;
-  /** Present only on a build or device-host request, which the server then closes; the request lapses at `expiresAt`. */
-  approval?: {
-    state: "pending";
-    expiresAt: string;
-  };
+  /** Present only for a requested private bootstrap on the local Unix socket. */
+  desktopBootstrap?: DesktopBootstrapChallenge;
+}
+/** Per-connection nonce and HMAC-SHA256 proof under the parent's private key, with the `server:` domain. */
+interface DesktopBootstrapChallenge {
+  nonce: string;
+  proof: string;
 }
 interface SubscribeResult {
   subscription: string;
@@ -149,6 +148,14 @@ interface LogFilter {
   errors?: boolean;
   tail?: number;
 }
+/** Complete retained output on the private local Desktop connection; slot and time bounds are applied by Desktop. */
+interface DesktopLogFilter {
+  workspace: string;
+  sources?: LogSource[];
+  level?: LogLevel;
+  grep?: string;
+  errors?: boolean;
+}
 /** One record as `stim logs --json` prints it. */
 type LogRecord = NdjsonRecord;
 interface LogsQueryResult {
@@ -162,6 +169,42 @@ interface WorkspaceParams {
 type StatsResult = Record<string, unknown>;
 /** `stim settings --json`; the CLI masks sensitive values. */
 type SettingsResult = Record<string, unknown>;
+/** One settings mutation from the Desktop that started this server. Values use CLI text syntax. */
+type DesktopSettingsWriteParams = {
+  cwd: string;
+  key: string;
+  scope?: SettingScope;
+} & ({
+  action: "set";
+  value: string;
+} | {
+  action: "unset";
+});
+/** A masked write result or the CLI's typed refusal; transport failures use the RPC error channel. */
+type DesktopSettingsWriteResult = SettingWriteResult | {
+  code: string;
+  message: string;
+  remedy: string | null;
+};
+type DesktopReportTarget = {
+  report: "doctor";
+  cwd: string;
+  platform?: "ios" | "android";
+} | {
+  report: "gc";
+};
+interface DesktopReportSnapshot {
+  pending: boolean;
+  value: Record<string, unknown> | null;
+  error?: string;
+  measuredAt?: string;
+}
+interface DesktopReportEvent {
+  event: "desktop-report";
+  subscription: string;
+  target: DesktopReportTarget;
+  snapshot: DesktopReportSnapshot;
+}
 /** `web` is the workspace's Stim-owned Chrome page, from `stim web`; it has only the default slot. */
 declare const PLATFORMS: readonly ["ios", "android", "web", "macos"];
 type Platform = (typeof PLATFORMS)[number];
@@ -228,7 +271,7 @@ interface KeyframeParams {
 }
 /**
  * Plays recorded footage into a video subscription instead of the live screen: the frame at `at` (epoch
- * milliseconds on the Mac's clock) arrives at once, as the access units from the keyframe before it, then playback
+ * milliseconds on the machine's clock) arrives at once, as the access units from the keyframe before it, then playback
  * goes on at `rate` times real time. A `rate` of 0 stays paused on that frame. Time where nothing was recorded is
  * skipped.
  */
@@ -253,7 +296,7 @@ interface ReplayTarget {
   platform: Platform;
   slot?: string;
 }
-/** A time range with recorded footage, in epoch milliseconds on the Mac's clock. */
+/** A time range with recorded footage, in epoch milliseconds on the machine's clock. */
 interface ReplaySpan {
   start: number;
   end: number;
@@ -281,6 +324,67 @@ interface ReplayRange {
   spans: ReplaySpan[];
   markers: ReplayMarker[];
 }
+/** A workspace path from the workspace list. */
+interface WorkspaceRef {
+  workspace: string;
+}
+/** The workspace list, all at once: every workspace's summary, the unprovisioned worktrees and the archives' summary. */
+interface WorkspacesSnapshot {
+  workspaces: WorkspaceSummary[];
+  worktrees: WorktreeRow[];
+  archived: ArchivedSummary;
+}
+/**
+ * The workspace list of a `workspaces.subscribe` subscription. Its first event, `seq` 0, carries `snapshot`; each
+ * later one carries what changed since the previous event, `seq` one higher: whole workspaces and worktrees to insert or
+ * replace by `path`, the paths that are gone, and the archives' summary when it changed. A client that misses a `seq`
+ * subscribes again for a new snapshot.
+ */
+interface WorkspacesEvent {
+  event: "workspaces";
+  subscription: string;
+  seq: number;
+  snapshot?: WorkspacesSnapshot;
+  workspaces?: KeyedDelta<WorkspaceSummary>;
+  worktrees?: KeyedDelta<WorktreeRow>;
+  archived?: ArchivedSummary;
+}
+/**
+ * One workspace, as `stim status --json` prints its environment, on subscribing and on every change to it. `environment`
+ * is null while no workspace has that path.
+ */
+interface WorkspaceEvent {
+  event: "workspace";
+  subscription: string;
+  seq: number;
+  environment: EnvironmentState | null;
+}
+/** The machine on subscribing and on every change, with the usage history and own leases a `status` event carries. */
+interface MachineEvent {
+  event: "machine";
+  subscription: string;
+  seq: number;
+  machine: MachineView;
+  usage?: UsageHistory;
+  /** `grantedAt` of the device leases this server holds for phones; absent when it holds none. */
+  ownLeases?: string[];
+}
+/** A workspace's full build history, newest first per platform. */
+interface BuildsHistoryResult {
+  builds: EnvironmentState["builds"];
+}
+/** `before` is the `next` of the previous page; `limit` is at most {@link ARCHIVED_PAGE_LIMIT}. */
+interface ArchivedListParams {
+  before?: string;
+  limit?: number;
+}
+declare const ARCHIVED_PAGE_LIMIT = 50;
+/** A page of archives, newest removal first, the usage of all of them, and the cursor of the next page or null. */
+interface ArchivedListResult {
+  archived: ArchivedWorkspace[];
+  usage: ArchivedUsage;
+  next: string | null;
+}
 /** An archived[].id from status; the original workspace is not required. */
 interface ArchiveDetailParams {
   archive: string;
@@ -294,7 +398,7 @@ interface ArchiveDetailResult {
     spans: ReplaySpan[];
   }[];
 }
-/** A device slot, as {@link ReplayTarget} names it, and a time in epoch milliseconds on the Mac's clock. */
+/** A device slot, as {@link ReplayTarget} names it, and a time in epoch milliseconds on the machine's clock. */
 interface ReplayKeyframeParams extends ReplayTarget {
   at: number;
 }
@@ -341,7 +445,7 @@ declare const VIDEO_ARTWORK = 32;
 /**
  * The layout of a binary video message, big-endian: u8 version ({@link VIDEO_HEADER_VERSION}), u8 flags
  * ({@link VIDEO_KEYFRAME}, posture bits and {@link VIDEO_ARTWORK}), u16 header length, u32 sequence number of the messages sent on this subscription, f64 capture time in milliseconds since the
- * epoch on the Mac's clock, u16 width, u16 height, u8 subscription id length N, N bytes of ASCII subscription
+ * epoch on the machine's clock, u16 width, u16 height, u8 subscription id length N, N bytes of ASCII subscription
  * id. After the header comes one Annex-B H.264 access unit; a keyframe carries its SPS and PPS. The stream has
  * no B-frames, so each access unit is shown as it arrives.
  */
@@ -499,11 +603,11 @@ interface BuildPlanParams {
 }
 /** `stim ios|android --plan --json`. It builds, boots and installs nothing, and writes no Stim state. */
 type BuildPlanResult = BuildPlanPayload;
-/** A client's repository on a remote Mac: letters, digits, `.`, `_` and `-`, at most 80. */
+/** A client's repository on a remote machine: letters, digits, `.`, `_` and `-`, at most 80. */
 declare const BUILD_REPO_PATTERN = "^[A-Za-z0-9][A-Za-z0-9._-]{0,79}$";
 /** A version-manager Ruby installation name, without path separators. */
 declare const BUILD_RUBY_VERSION_PATTERN = "^(?!\\.{1,2}$)[^/\\\\\\u0000\\r\\n]+$";
-/** Asks a remote Mac what it can build, how busy it is, and how warm its copy of `repo` is. */
+/** Asks a remote machine what it can build, how busy it is, and how warm its copy of `repo` is. */
 interface BuildOfferParams {
   repo: string;
   /** sha256 of the repository's lockfile, compared with the one the machine last installed from. */
@@ -511,10 +615,23 @@ interface BuildOfferParams {
   /** The project's normalized .ruby-version; absent uses the worker's default Ruby. */
   rubyVersion?: string;
   native?: "xcode" | "gradle";
+  artifact?: BuildArtifactIdentity;
+}
+/** A native Xcode identity whose key includes its complete inputs, target and toolchain. */
+interface BuildArtifactIdentity {
+  fingerprint: string;
+  cacheKey: string;
+}
+interface CachedBuildArtifact extends BuildArtifactIdentity {
+  name: string;
+  size: number;
+  sha256: string;
 }
-/** The toolchain a build must match exactly on both Macs. */
+/** The toolchain a build must match exactly on both machines. */
 interface BuildToolchain {
   stimBuild: string | null;
+  /** The OS stim-server runs on, as Node names it; absent from a stim-server older than this field. */
+  os?: string;
   arch: string;
   xcode: string | null;
   simulatorSdk: string | null;
@@ -532,7 +649,7 @@ interface BuildToolchain {
   } | null;
 }
 /**
- * How busy the remote Mac is. `running` counts offloaded builds and `max` is how many it runs at once.
+ * How busy the remote machine is. `running` counts offloaded builds and `max` is how many it runs at once.
  * `cpus`, `loadPerCore` (5-minute load average per CPU), `builds` (its own Stim native builds plus the offloaded
  * ones), `maxBuilds` (its `concurrency.maxBuilds`, 0 when unlimited), `maxLoadPerCore`, `memoryUsedBytes`
  * (Activity Monitor's Memory Used) and `memoryTotalBytes` are absent from a stim-server older than them. `declined` is why it would refuse a build now, null when it would take one.
@@ -559,6 +676,7 @@ interface BuildOfferResult {
     dependencies: boolean;
     build: boolean;
   };
+  artifact?: CachedBuildArtifact | null;
 }
 /** One file of the client's checkout. A `link` blob holds the symlink's target. */
 interface BuildFile {
@@ -647,7 +765,7 @@ interface BuildArtifactResult {
   size: number;
   sha256: string;
   /**
-   * For a macOS job, a single-use token for the staged bundle this Mac keeps for a while, which a hosted session of a
+   * For a macOS job, a single-use token for the staged bundle this machine keeps for a while, which a hosted session of a
    * device-host client on the same tailnet node can take with `device-host.app.handoff`.
    */
   handoff?: string;
@@ -681,7 +799,7 @@ interface MachineVolume {
 interface MachineUsage {
   volumes: MachineVolume[];
   /**
-   * `usedBytes` is the Mac's memory in use, as Activity Monitor's "Memory Used" counts it: app memory, wired and
+   * `usedBytes` is the machine's memory in use, as Activity Monitor's "Memory Used" counts it: app memory, wired and
    * compressed. `pressure` is the macOS memory pressure level. Both are null on other systems or when they cannot
    * be read.
    */
@@ -697,7 +815,7 @@ interface MachineUsage {
     cpus: number;
   };
   /**
-   * `usage` is the Mac's overall CPU busy fraction (0..1), from the tick delta between this call and the
+   * `usage` is the machine's overall CPU busy fraction (0..1), from the tick delta between this call and the
    * previous one. Null on the first call of a server process, since there is no previous sample yet.
    */
   cpu: {
@@ -727,7 +845,7 @@ interface MachineHistory {
   samples: UsageSample[];
 }
 /**
- * The Mac's disk and build detail: the payloads of the `stim gc --json` dry run and of `stim stats --json`, both run in
+ * The machine's disk and build detail: the payloads of the `stim gc --json` dry run and of `stim stats --json`, both run in
  * the home directory. A part is null when its command failed, and its `gcError` or `statsError` says why.
  * `measuredAt` is when the commands started. The server keeps one result for 60 seconds, shared by every connection.
  */
@@ -737,7 +855,7 @@ interface MachineDetails {
   stats: Record<string, unknown> | null;
   statsError?: string;
   /**
-   * `remoteMachines` from `stim doctor --json --platform ios`; empty when `remote.machines` names none. The reply
+   * `remoteMachines` from `stim doctor --json`; empty when `remote.machines` names none. The reply
    * never waits for doctor: `buildMachines` and `buildMachinesError` are the last result a background doctor run
    * settled, `buildMachinesAt` is when it settled, and `buildMachinesPending` is true while that result is stale
    * (or absent) and a refresh is running. A client that wants the refreshed result asks `machine.details` again.
@@ -747,8 +865,8 @@ interface MachineDetails {
   buildMachinesAt?: string;
   buildMachinesPending?: boolean;
   /**
-   * The builds this Mac ran for other Macs, one entry per client, from the audit log. `today` is
-   * this Mac's local calendar day. Absent from a server older than this field.
+   * The builds this machine ran for other machines, one entry per client, from the audit log. `today` is
+   * this machine's local calendar day. Absent from a server older than this field.
    */
   buildClients?: BuildClientSummary[];
   measuredAt: string;
@@ -824,7 +942,7 @@ interface QuietHours {
 /**
  * Asks the server to push this device's notifications through the Expo push service to `token`, an Expo push
  * token, for at least one event. Registering again replaces the previous registration. `ref` is echoed as
- * `data.ref` in every push, so the phone can tell which Mac sent it. `stuckMinutes` is how long a driven workspace
+ * `data.ref` in every push, so the phone can tell which machine sent it. `stuckMinutes` is how long a driven workspace
  * must show no activity to look stuck, 15 by default. `levels` sets each event's delivery; an event it leaves out
  * is silent. An older server ignores `levels`. `agentOnly` is accepted from older phones and ignored.
  */
@@ -919,7 +1037,7 @@ interface ServerUpdatePackage {
 }
 /**
  * What `server.update.start` installs: an exact stim-server `release` from the public npm registry, or the
- * `packages` of a client's own build, which the Mac takes only while its `server.acceptClientBuilds` is true.
+ * `packages` of a client's own build, which the machine takes only while its `server.acceptClientBuilds` is true.
  */
 type ServerUpdateStartParams = {
   release: string;
@@ -968,8 +1086,8 @@ interface ServerUpdateStatus {
   last: ServerUpdateOutcome | null;
 }
 /**
- * Where an update this Mac asked `machine` for stands: the host's own `server.update.status`, or why it could not be
- * read (`unreachable`, also while the host restarts), and how much of this Mac's build it has sent.
+ * Where an update this machine asked `machine` for stands: the host's own `server.update.status`, or why it could not be
+ * read (`unreachable`, also while the host restarts), and how much of this machine's build it has sent.
  */
 interface MachineUpdateStatus {
   remote: ServerUpdateStatus | null;
@@ -1188,10 +1306,97 @@ interface Methods {
     params: HelloParams;
     result: HelloResult;
   };
+  "desktop.authenticate": {
+    params: {
+      proof: string;
+    };
+    result: {
+      authorized: true;
+    };
+  };
+  "desktop.reports.get": {
+    params: DesktopReportTarget;
+    result: DesktopReportSnapshot;
+  };
+  "desktop.reports.subscribe": {
+    params: DesktopReportTarget;
+    result: SubscribeResult;
+  };
+  "desktop.reports.invalidate": {
+    params?: Record<string, never>;
+    result: Record<string, never>;
+  };
+  "desktop.settings.get": {
+    params: {
+      cwd: string;
+    };
+    result: SettingsResult;
+  };
+  "desktop.settings.write": {
+    params: DesktopSettingsWriteParams;
+    result: DesktopSettingsWriteResult;
+  };
+  "desktop.logs.subscribe": {
+    params: DesktopLogFilter;
+    result: SubscribeResult;
+  };
+  "desktop.doctor.run": {
+    params: {
+      cwd: string;
+      platform?: "ios" | "android";
+    };
+    result: Record<string, unknown>;
+  };
+  "desktop.stop.subscribe": {
+    params: {
+      cwd: string;
+      slot?: string;
+    };
+    result: SubscribeResult;
+  };
+  "desktop.reload.subscribe": {
+    params: {
+      cwd: string;
+      platform?: ReloadPlatform;
+    };
+    result: SubscribeResult;
+  };
   "status.subscribe": {
     params?: Record<string, never>;
     result: SubscribeResult;
   };
+  "workspaces.subscribe": {
+    params?: Record<string, never>;
+    result: SubscribeResult;
+  };
+  "workspace.subscribe": {
+    params: WorkspaceRef;
+    result: SubscribeResult;
+  };
+  "machine.subscribe": {
+    params?: Record<string, never>;
+    result: SubscribeResult;
+  };
+  "builds.history": {
+    params: WorkspaceRef;
+    result: BuildsHistoryResult;
+  };
+  "archived.list": {
+    params?: ArchivedListParams;
+    result: ArchivedListResult;
+  };
+  "worktrees.list": {
+    params?: Record<string, never>;
+    result: {
+      worktrees: WorktreeFacts[];
+    };
+  };
+  "maintenance.get": {
+    params?: Record<string, never>;
+    result: {
+      maintenance: MaintenanceStatus | null;
+    };
+  };
   "logs.query": {
     params: LogFilter;
     result: LogsQueryResult;
@@ -1340,6 +1545,13 @@ interface Methods {
     params: BuildJobParams;
     result: BuildArtifactResult;
   };
+  "build.cached-artifact": {
+    params: {
+      repo: string;
+      artifact: BuildArtifactIdentity;
+    };
+    result: CachedBuildArtifact | null;
+  };
   "build.attach": {
     params: BuildJobParams;
     result: BuildAttachResult;
@@ -1531,7 +1743,37 @@ interface BuildProgressEvent {
   record?: Record<string, unknown>;
   outcome?: BuildJobOutcome;
 }
-type ServerEvent = BuildProgressEvent | NotificationEvent | StatusEvent | LogsEvent | LogsEndedEvent | FrameEvent | DeviceFrameEvent | MacosWindowsEvent | FrameDelayedEvent | ReplayEndedEvent | ErrorEvent | ControlEndedEvent;
+/** Progress chunks from a private Desktop stop, before its terminal event. */
+interface DesktopStopProgressEvent {
+  event: "desktop-stop-progress";
+  subscription: string;
+  stream: "stdout" | "stderr";
+  message: string;
+}
+/** The stop's CLI-compatible JSON, exit status and human summary or refusal. */
+interface DesktopStopEndedEvent {
+  event: "desktop-stop-ended";
+  subscription: string;
+  exitCode: 0 | 1;
+  stdout: string;
+  message: string;
+}
+/** Progress chunks from a private Desktop reload, before its terminal event. */
+interface DesktopReloadProgressEvent {
+  event: "desktop-reload-progress";
+  subscription: string;
+  stream: "stdout" | "stderr";
+  message: string;
+}
+/** The reload's CLI-compatible JSON, exit status and human summary or refusal. */
+interface DesktopReloadEndedEvent {
+  event: "desktop-reload-ended";
+  subscription: string;
+  exitCode: 0 | 1;
+  stdout: string;
+  message: string;
+}
+type ServerEvent = DesktopReloadProgressEvent | DesktopReloadEndedEvent | DesktopStopProgressEvent | DesktopStopEndedEvent | DesktopReportEvent | BuildProgressEvent | NotificationEvent | StatusEvent | WorkspacesEvent | WorkspaceEvent | MachineEvent | LogsEvent | LogsEndedEvent | FrameEvent | DeviceFrameEvent | MacosWindowsEvent | FrameDelayedEvent | ReplayEndedEvent | ErrorEvent | ControlEndedEvent;
 type ServerMessage = ServerResponse | ServerEvent;
 type ServeRoute = {
   state: "routed";
@@ -1549,4 +1791,4 @@ type ServeRoute = {
   port: number;
 };
 //#endregion
-export { FRAME_EDGE as $, TouchPhase as $n, Methods as $t, BuildToolchain as A, ReplayMarker as An, LOG_LEVELS as At, DEVICE_HOST_METHODS as B, ServerResponse as Bn, MAX_INPUT_TEXT as Bt, BuildPlanResult as C, ROTATE_DIRECTIONS as Cn, InputTextParams as Ct, BuildStartParams as D, ReplayEndedEvent as Dn, KeyModifier as Dt, BuildRequestAuth as E, ReloadPlatform as En, KEY_MODIFIERS as Et, ControlBeginParams as F, RotateDirection as Fn, LogRecord as Ft, DeviceHostRequestAuth as G, ServerUpdateStatus as Gn, MachineHistoryParams as Gt, DeviceAuth as H, ServerUpdatePackage as Hn, METHODS as Ht, ControlBeginResult as I, SERVER_UPDATE_METHODS as In, LogSource as It, DuoFramePose as J, SimulatorOptions as Jn, MachineVolume as Jt, DevicePosture as K, SettingsResult as Kn, MachineUpdateStatus as Kt, ControlEndParams as L, ServeRoute as Ln, LogsEndedEvent as Lt, CONTROL_END_REASONS as M, ReplaySpan as Mn, LegacyPushEvent as Mt, Capability as N, ReplayTarget as Nn, LogFilter as Nt, BuildSyncParams as O, ReplayKeyframe as On, KeyframeParams as Ot, ClientRequest as P, RequestId as Pn, LogLevel as Pt, FEATURES as Q, TOUCH_PHASES as Qn, Method as Qt, ControlEndedEvent as R, ServerEvent as Rn, LogsEvent as Rt, BuildPlanParams as S, REPLAY_RATES as Sn, InputSimulatorParams as St, BuildProgressEvent as T, RecordingSetResult as Tn, InputWindowParams as Tt, DeviceFrameArtwork as U, ServerUpdateProgress as Un, MachineDetails as Ut, DEVICE_POSTURES as V, ServerUpdateOutcome as Vn, MAX_LOG_TAIL as Vt, DeviceFrameEvent as W, ServerUpdateStartParams as Wn, MachineHistory as Wt, ErrorCode as X, StatusEvent as Xn, MacosWindowsEvent as Xt, ERROR_CODES as Y, StatsResult as Yn, MacosWindow as Yt, ErrorEvent as Z, SubscribeResult as Zn, MemoryPressure as Zt, BuildJobParams as _, PushEvent as _n, InputKey as _t, ArchiveDetailParams as a, NotificationSuppression as an, VIDEO_CODECS as ar, FramesLiveParams as at, BuildOfferParams as b, RELOAD_PLATFORMS as bn, InputRotateParams as bt, BUILD_REPO_PATTERN as c, NotificationsListResult as cn, VIDEO_KEYFRAME as cr, FramesSubscribeResult as ct, BuildArtifactResult as d, PROTOCOL_VERSION as dn, VideoPacket as dr, HelloResult as dt, NOTIFICATION_LEVELS as en, UnsubscribeParams as er, FRAME_FPS as et, BuildAttachResult as f, PUSH_EVENTS as fn, WorkspaceDiff as fr, HostedSessionRow as ft, BuildJobOutcome as g, ProtocolError as gn, WorkspacePatch as gr, InputButtonParams as gt, BuildFile as h, Platform as hn, WorkspaceParams as hr, InputButton as ht, ActionResult as i, NotificationLevel as in, VIDEO_ARTWORK as ir, FrameTarget as it, CAPABILITIES as j, ReplayRange as jn, LOG_SOURCES as jt, BuildSyncResult as k, ReplayKeyframeParams as kn, LEGACY_PUSH_EVENTS as kt, BUILD_RUBY_VERSION_PATTERN as l, PLATFORMS as ln, VIDEO_UNFOLDED as lr, GradleOffloadInputs as lt, BuildClientSummary as m, PairingAuth as mn, WorkspaceFiles as mr, INPUT_KEYS as mt, ActionName as n, NotificationEntry as nn, UsageSample as nr, FrameDelayedEvent as nt, ArchiveDetailResult as o, NotificationTarget as on, VIDEO_FOLDED as or, FramesSeekParams as ot, BuildCapacity as p, PUSH_TOKEN_PATTERN as pn, WorkspaceFile as pr, INPUT_BUTTONS as pt, DeviceUsageSeries as q, SimulatorCommand as qn, MachineUsage as qt, ActionParams as r, NotificationEvent as rn, UsageSeries as rr, FrameEvent as rt, BUILD_METHODS as s, NotificationsListParams as sn, VIDEO_HEADER_VERSION as sr, FramesSeekResult as st, ACTIONS as t, NOTIFICATION_SUPPRESSIONS as tn, UsageHistory as tr, Feature as tt, BuildAndroidOptions as u, PROTOCOL_SCHEMA_FILE as un, VideoCodec as ur, HelloParams as ut, BuildMachineCapacity as v, PushRegisterParams as vn, InputKeyParams as vt, BuildPlatform as w, RecordingSetParams as wn, InputTouchParams as wt, BuildOfferResult as x, REPLAY_MARKER_KINDS as xn, InputScrollParams as xt, BuildMachineReport as y, QuietHours as yn, InputPostureParams as yt, ControlPlatform as z, ServerMessage as zn, LogsQueryResult as zt };
+export { DesktopReportTarget as $, ServerMessage as $n, LogsQueryResult as $t, BuildStartParams as A, ProtocolError as An, WorkspaceParams as Ar, InputButtonParams as At, ControlBeginParams as B, ReloadPlatform as Bn, KEY_MODIFIERS as Bt, BuildMachineReport as C, NotificationsListResult as Cn, VIDEO_UNFOLDED as Cr, GradleOffloadInputs as Ct, BuildPlanResult as D, PUSH_EVENTS as Dn, WorkspaceEvent as Dr, INPUT_BUTTONS as Dt, BuildPlanParams as E, PROTOCOL_VERSION as En, WorkspaceDiff as Er, HostedSessionRow as Et, CAPABILITIES as F, REPLAY_MARKER_KINDS as Fn, InputScrollParams as Ft, DEVICE_HOST_METHODS as G, ReplayRange as Gn, LOG_SOURCES as Gt, ControlEndParams as H, ReplayKeyframe as Hn, KeyframeParams as Ht, CONTROL_END_REASONS as I, REPLAY_RATES as In, InputSimulatorParams as It, DesktopLogFilter as J, RequestId as Jn, LogLevel as Jt, DEVICE_POSTURES as K, ReplaySpan as Kn, LegacyPushEvent as Kt, CachedBuildArtifact as L, ROTATE_DIRECTIONS as Ln, InputTextParams as Lt, BuildSyncResult as M, PushRegisterParams as Mn, WorkspaceRef as Mr, InputKeyParams as Mt, BuildToolchain as N, QuietHours as Nn, WorkspacesEvent as Nr, InputPostureParams as Nt, BuildPlatform as O, PUSH_TOKEN_PATTERN as On, WorkspaceFile as Or, INPUT_KEYS as Ot, BuildsHistoryResult as P, RELOAD_PLATFORMS as Pn, WorkspacesSnapshot as Pr, InputRotateParams as Pt, DesktopReportSnapshot as Q, ServerEvent as Qn, LogsEvent as Qt, Capability as R, RecordingSetParams as Rn, InputTouchParams as Rt, BuildMachineCapacity as S, NotificationsListParams as Sn, VIDEO_KEYFRAME as Sr, FramesSubscribeResult as St, BuildOfferResult as T, PROTOCOL_SCHEMA_FILE as Tn, VideoPacket as Tr, HelloResult as Tt, ControlEndedEvent as U, ReplayKeyframeParams as Un, LEGACY_PUSH_EVENTS as Ut, ControlBeginResult as V, ReplayEndedEvent as Vn, KeyModifier as Vt, ControlPlatform as W, ReplayMarker as Wn, LOG_LEVELS as Wt, DesktopReloadProgressEvent as X, SERVER_UPDATE_METHODS as Xn, LogSource as Xt, DesktopReloadEndedEvent as Y, RotateDirection as Yn, LogRecord as Yt, DesktopReportEvent as Z, ServeRoute as Zn, LogsEndedEvent as Zt, BuildCapacity as _, NotificationEntry as _n, UsageSeries as _r, FrameEvent as _t, ActionResult as a, MachineHistory as an, ServerUpdateStatus as ar, DeviceFrameEvent as at, BuildJobOutcome as b, NotificationSuppression as bn, VIDEO_FOLDED as br, FramesSeekParams as bt, ArchivedListParams as c, MachineUsage as cn, SimulatorOptions as cr, DuoFramePose as ct, BUILD_REPO_PATTERN as d, MacosWindowsEvent as dn, SubscribeResult as dr, ErrorEvent as dt, MAX_INPUT_TEXT as en, ServerResponse as er, DesktopSettingsWriteParams as et, BUILD_RUBY_VERSION_PATTERN as f, MemoryPressure as fn, TOUCH_PHASES as fr, FEATURES as ft, BuildAttachResult as g, NOTIFICATION_SUPPRESSIONS as gn, UsageSample as gr, FrameDelayedEvent as gt, BuildArtifactResult as h, NOTIFICATION_LEVELS as hn, UsageHistory as hr, Feature as ht, ActionParams as i, MachineEvent as in, ServerUpdateStartParams as ir, DeviceFrameArtwork as it, BuildSyncParams as j, PushEvent as jn, WorkspacePatch as jr, InputKey as jt, BuildProgressEvent as k, Platform as kn, WorkspaceFiles as kr, InputButton as kt, ArchivedListResult as l, MachineVolume as ln, StatsResult as lr, ERROR_CODES as lt, BuildArtifactIdentity as m, Methods as mn, UnsubscribeParams as mr, FRAME_FPS as mt, ARCHIVED_PAGE_LIMIT as n, METHODS as nn, ServerUpdatePackage as nr, DesktopStopEndedEvent as nt, ArchiveDetailParams as o, MachineHistoryParams as on, SettingsResult as or, DevicePosture as ot, BuildAndroidOptions as p, Method as pn, TouchPhase as pr, FRAME_EDGE as pt, DesktopBootstrapChallenge as q, ReplayTarget as qn, LogFilter as qt, ActionName as r, MachineDetails as rn, ServerUpdateProgress as rr, DesktopStopProgressEvent as rt, ArchiveDetailResult as s, MachineUpdateStatus as sn, SimulatorCommand as sr, DeviceUsageSeries as st, ACTIONS as t, MAX_LOG_TAIL as tn, ServerUpdateOutcome as tr, DesktopSettingsWriteResult as tt, BUILD_METHODS as u, MacosWindow as un, StatusEvent as ur, ErrorCode as ut, BuildClientSummary as v, NotificationEvent as vn, VIDEO_ARTWORK as vr, FrameTarget as vt, BuildOfferParams as w, PLATFORMS as wn, VideoCodec as wr, HelloParams as wt, BuildJobParams as x, NotificationTarget as xn, VIDEO_HEADER_VERSION as xr, FramesSeekResult as xt, BuildFile as y, NotificationLevel as yn, VIDEO_CODECS as yr, FramesLiveParams as yt, ClientRequest as z, RecordingSetResult as zn, InputWindowParams as zt };