@stim-cli/core 1.20.2 → 1.22.0

package/dist/state.mjs

@@ -1,16 +1,75 @@
-import { _ as releaseClaim, f as isClaimRefusal, g as readClaimSet, x as tryAcquireClaim } from "./ownership-claim-O31Y5iIb.mjs";
+import { S as tryAcquireClaim, _ as releaseClaim, f as isClaimRefusal, g as readClaimSet } from "./ownership-claim-DHUs_Dir.mjs";
 import { inspectProcessIdentity } from "./process-identity.mjs";
-import { C as workspaceName, F as readJsonObject, I as readStateFile, L as withStateReadCache, N as isJsonObject, P as readJsonFile, R as withDirLock, T as workspaceStateDir, _ as rotatedLogPath, d as ensurePrivateDir, g as rotateLog, t as LOG_ROTATE_BYTES, u as configDir } from "./core-BkgfKqJ8.mjs";
-import { n as withGitChip, t as withDerivedFacts } from "./status-derived-C13g6eQt.mjs";
-import { appendFileSync, closeSync, existsSync, fstatSync, lstatSync, mkdirSync, openSync, readFileSync, readSync, readdirSync, realpathSync, statSync } from "node:fs";
+import { C as workspaceName, H as ambientContext, J as readJsonObject, K as isJsonObject, Q as withDirLockAsync, T as workspaceStateDir, U as ambientEnv, X as withStateReadCache, Y as readStateFile, Z as withDirLock, _ as rotatedLogPath, d as ensurePrivateDir, g as rotateLog, q as readJsonFile, t as LOG_ROTATE_BYTES, u as configDir } from "./core-BTsCO1nW.mjs";
+import { readOrCreateKeyFile } from "./noise-session.mjs";
+import { validHomeId } from "./workspace-link.mjs";
+import { a as workspaceSummary, i as statusViews, n as applyKeyedDelta, o as withDerivedFacts, r as SUMMARY_ARCHIVES, s as withGitChip, t as KeyedEntities } from "./keyed-delta-BBoOeR2J.mjs";
+import { appendFileSync, closeSync, existsSync, fstatSync, lstatSync, mkdirSync, openSync, readFileSync, readSync, readdirSync, realpathSync, statSync, watch } from "node:fs";
 import { availableParallelism, homedir, loadavg } from "node:os";
-import { basename, dirname, isAbsolute, join, posix, relative, resolve, sep } from "node:path";
+import { basename, dirname, isAbsolute, join, posix, relative, resolve, sep, win32 } from "node:path";
 import { createHash, randomBytes } from "node:crypto";
+import { setImmediate as setImmediate$1 } from "node:timers/promises";
+import { lstat, open, readFile, readdir, stat } from "node:fs/promises";
 import { isIP } from "node:net";
 import { StringDecoder } from "node:string_decoder";
+//#region state/log-selection.ts
+var BoundedSelection = class {
+	first;
+	compare;
+	tail;
+	constructor(compare, tail, first = false) {
+		this.first = first;
+		this.compare = compare;
+		this.tail = tail;
+	}
+	before(a, b) {
+		return (this.first ? this.compare(b, a) : this.compare(a, b)) < 0;
+	}
+	items = [];
+	get size() {
+		return this.items.length;
+	}
+	peek() {
+		return this.items[0];
+	}
+	keep(entry) {
+		if (this.tail !== void 0 && this.tail <= 0) return;
+		const items = this.items;
+		items.push(entry);
+		let i = items.length - 1;
+		while (i > 0) {
+			const parent = i - 1 >> 1;
+			if (!this.before(items[i], items[parent])) break;
+			[items[i], items[parent]] = [items[parent], items[i]];
+			i = parent;
+		}
+		if (this.tail !== void 0 && items.length > this.tail) this.pop();
+	}
+	sorted() {
+		return this.items.toSorted(this.compare);
+	}
+	pop() {
+		const items = this.items;
+		const last = items.pop();
+		if (!items.length) return;
+		items[0] = last;
+		let i = 0;
+		for (;;) {
+			const left = 2 * i + 1;
+			const right = left + 1;
+			let least = i;
+			if (left < items.length && this.before(items[left], items[least])) least = left;
+			if (right < items.length && this.before(items[right], items[least])) least = right;
+			if (least === i) return;
+			[items[i], items[least]] = [items[least], items[i]];
+			i = least;
+		}
+	}
+};
+//#endregion
 //#region state/agent-actions.ts
 const EVENTS_VERSION = 1;
-function object$1(value) {
+function object$2(value) {
 	return value && typeof value === "object" && !Array.isArray(value) ? value : null;
 }
 function parseAgentEvents(lines) {
@@ -22,7 +81,7 @@ function parseAgentEvents(lines) {
 	for (const line of lines) {
 		let entry;
 		try {
-			entry = object$1(JSON.parse(line));
+			entry = object$2(JSON.parse(line));
 		} catch {
 			continue;
 		}
@@ -55,7 +114,7 @@ function parseAgentEvents(lines) {
 			command,
 			summary: typeof summary === "string" ? summary : "",
 			failed,
-			details: object$1(entry.details),
+			details: object$2(entry.details),
 			requestId
 		});
 	}
@@ -173,41 +232,62 @@ function readCompleteLines(path, start) {
 	}
 }
 function trackMacosOpen(cursor, event, unknownVersion) {
-	const flags = object$1(event.details?.flags);
+	const flags = object$2(event.details?.flags);
 	if (!event.failed) cursor.macos = event.details?.platform === "macos" || flags?.platform === "macos";
 	cursor.bundleId = cursor.macos && !event.failed && !unknownVersion && flags?.surface === "app" && typeof event.details?.appBundleId === "string" ? event.details.appBundleId : null;
 }
+function agentRecordCollector(selection) {
+	const out = [];
+	const bounded = selection?.tail === void 0 ? null : new BoundedSelection((a, b) => Number(a.record.ts) - Number(b.record.ts) || a.position - b.position, selection.tail);
+	let position = 0;
+	const keep = (record) => {
+		if (selection && !selection.matches(record)) return;
+		if (bounded) bounded.keep({
+			record,
+			position: position++
+		});
+		else out.push(record);
+	};
+	return {
+		keep,
+		records: () => bounded ? bounded.sorted().map(({ record }) => record) : out.toSorted((a, b) => a.ts - b.ts)
+	};
+}
 /**
 * Reads agent-device session actions incrementally from the supplied sessions directories. With targets,
 * records are restricted to those devices; without targets, retained session metadata supplies attribution.
 * Missing directories and unreadable files yield no records.
 */
-function createAgentActionReader({ sessionsDirs, targets: resolveTargets, sinceTs = -Infinity, now = Date.now, claimedDevice = () => null }) {
+function agentActionReads({ sessionsDirs, targets: resolveTargets, sinceTs = -Infinity, now = Date.now, claimedDevice = () => null }) {
 	const cursors = /* @__PURE__ */ new Map();
-	return () => {
+	return function* (selection) {
 		const targets = typeof resolveTargets === "function" ? resolveTargets() : resolveTargets;
 		if (targets && !targets.length) return [];
 		const byId = new Map(targets?.map((target) => [target.id, target]));
 		const macosByBundle = new Map(targets?.flatMap((target) => target.platform === "macos" ? [[target.bundleId, target]] : []));
-		const sessionDirs = (typeof sessionsDirs === "function" ? sessionsDirs() : sessionsDirs).flatMap((sessionsDir) => {
-			try {
-				return readdirSync(sessionsDir).map((name) => ({
-					name,
-					sessionsDir,
-					dir: join(sessionsDir, name)
-				}));
-			} catch {
-				return [];
-			}
-		});
-		const out = [];
+		const sessionDirs = [];
+		for (const sessionsDir of typeof sessionsDirs === "function" ? sessionsDirs() : sessionsDirs) try {
+			const names = yield {
+				kind: "names",
+				path: sessionsDir
+			};
+			sessionDirs.push(...names.map((name) => ({
+				name,
+				sessionsDir,
+				dir: join(sessionsDir, name)
+			})));
+		} catch {}
+		const { keep, records } = agentRecordCollector(selection);
 		for (const { name, sessionsDir, dir } of sessionDirs) {
 			const eventsPath = join(dir, "events.ndjson");
 			const lines = [];
 			let cursor = cursors.get(dir);
 			if (!cursor) {
 				try {
-					if (statSync(eventsPath).mtimeMs < sinceTs) continue;
+					if ((yield {
+						kind: "stat",
+						path: eventsPath
+					}).mtimeMs < sinceTs) continue;
 				} catch {
 					continue;
 				}
@@ -224,19 +304,45 @@ function createAgentActionReader({ sessionsDirs, targets: resolveTargets, sinceT
 				};
 				cursors.set(dir, cursor);
 				try {
-					lines.push(...readFileSync(`${eventsPath}.1`, "utf8").split("\n"));
+					lines.push(...(yield {
+						kind: "text",
+						path: `${eventsPath}.1`
+					}).split("\n"));
 				} catch {}
 			}
-			let chunk = readCompleteLines(eventsPath, cursor.offset);
+			let chunk = yield {
+				kind: "lines",
+				path: eventsPath,
+				start: cursor.offset
+			};
 			if (chunk && (chunk.size < cursor.offset || cursor.identity && chunk.identity !== cursor.identity)) {
 				cursor.bundleId = null;
-				chunk = readCompleteLines(eventsPath, 0);
+				chunk = yield {
+					kind: "lines",
+					path: eventsPath,
+					start: 0
+				};
 			}
 			if (!chunk) continue;
 			cursor.identity = chunk.identity;
 			cursor.offset = chunk.next;
 			lines.push(...chunk.text.split("\n"));
-			const parsed = parseAgentEvents(lines);
+			const parsed = {
+				events: [],
+				started: [],
+				finished: [],
+				session: null,
+				unknownVersion: null
+			};
+			for (let offset = 0; offset < lines.length; offset += 500) {
+				const batch = parseAgentEvents(lines.slice(offset, offset + 500));
+				parsed.events.push(...batch.events);
+				parsed.started.push(...batch.started);
+				parsed.finished.push(...batch.finished);
+				parsed.session ??= batch.session;
+				parsed.unknownVersion ??= batch.unknownVersion;
+				yield { kind: "turn" };
+			}
 			for (const [requestId, at] of parsed.started) cursor.started.set(requestId, at);
 			cursor.session ??= parsed.session;
 			const session = cursor.session;
@@ -248,12 +354,18 @@ function createAgentActionReader({ sessionsDirs, targets: resolveTargets, sinceT
 			const runnerPath = join(dir, "runner.log");
 			let runnerSize = -1;
 			try {
-				runnerSize = statSync(runnerPath).size;
+				runnerSize = (yield {
+					kind: "stat",
+					path: runnerPath
+				}).size;
 			} catch {}
 			if (cursor.runner?.size !== runnerSize) {
 				let text = "";
 				try {
-					text = readFileSync(runnerPath, "utf8");
+					text = yield {
+						kind: "text",
+						path: runnerPath
+					};
 				} catch {}
 				cursor.runner = {
 					size: runnerSize,
@@ -274,11 +386,12 @@ function createAgentActionReader({ sessionsDirs, targets: resolveTargets, sinceT
 				const target = !targets ? retainedTarget() : cursor.macos ? cursor.bundleId ? macosByBundle.get(cursor.bundleId) : void 0 : deviceId ? byId.get(deviceId) : void 0;
 				if (target) {
 					cursor.unknownReported = true;
-					out.push(formatUnknownRecord(session ?? name, parsed.unknownVersion, target, now()));
+					keep(formatUnknownRecord(session ?? name, parsed.unknownVersion, target, now()));
 				}
 			}
 			if (parsed.unknownVersion) cursor.bundleId = null;
-			for (const event of parsed.events) {
+			for (const [index, event] of parsed.events.entries()) {
+				if (index % 500 === 0) yield { kind: "turn" };
 				if (event.kind === "request.started") {
 					cursor.closing = event.command === "close" ? cursor.bundleId : null;
 					cursor.bundleId = null;
@@ -291,7 +404,7 @@ function createAgentActionReader({ sessionsDirs, targets: resolveTargets, sinceT
 					cursor.closing = null;
 					const target = bundleId ? macosByBundle.get(bundleId) : void 0;
 					const startedAt = event.requestId ? matched.get(event.requestId) : void 0;
-					if (target?.platform === "macos" && event.ts >= Math.max(sinceTs, target.launchedAt) && (startedAt ?? event.ts) >= target.launchedAt) out.push(agentRecord(event, target.id, target, startedAt));
+					if (target?.platform === "macos" && event.ts >= Math.max(sinceTs, target.launchedAt) && (startedAt ?? event.ts) >= target.launchedAt) keep(agentRecord(event, target.id, target, startedAt));
 					if (event.command === "close") cursor.bundleId = null;
 					continue;
 				}
@@ -300,10 +413,99 @@ function createAgentActionReader({ sessionsDirs, targets: resolveTargets, sinceT
 				const deviceId = !targets && cursor.platform === "android" ? null : deviceAt(event.ts);
 				const target = targets ? deviceId ? byId.get(deviceId) : void 0 : retainedTarget();
 				const startedAt = event.requestId ? matched.get(event.requestId) : void 0;
-				if (target) out.push(agentRecord(event, deviceId || null, target, startedAt));
+				if (target) keep(agentRecord(event, deviceId || null, target, startedAt));
 			}
 		}
-		return out.toSorted((a, b) => a.ts - b.ts);
+		return records();
+	};
+}
+function syncRead(request) {
+	switch (request.kind) {
+		case "names": return readdirSync(request.path);
+		case "stat": return statSync(request.path);
+		case "text": return readFileSync(request.path, "utf8");
+		case "lines": return readCompleteLines(request.path, request.start);
+		case "turn": return;
+	}
+}
+/** Reads new agent-device actions synchronously, retaining attribution cursors between reads. */
+function createAgentActionReader(options) {
+	const reads = agentActionReads(options);
+	return () => {
+		const iterator = reads();
+		let step = iterator.next();
+		while (!step.done) {
+			let value;
+			try {
+				value = syncRead(step.value);
+			} catch (error) {
+				step = iterator.throw(error);
+				continue;
+			}
+			step = iterator.next(value);
+		}
+		return step.value;
+	};
+}
+async function asyncRead(request) {
+	switch (request.kind) {
+		case "names": return readdir(request.path);
+		case "stat": return stat(request.path);
+		case "text": return readFile(request.path, "utf8");
+		case "turn": return setImmediate$1();
+		case "lines": {
+			let handle;
+			try {
+				handle = await open(request.path, "r");
+			} catch {
+				return null;
+			}
+			try {
+				const stats = await handle.stat({ bigint: true });
+				const size = Number(stats.size);
+				const identity = `${stats.dev}:${stats.ino}`;
+				if (size <= request.start) return {
+					text: "",
+					next: request.start,
+					size,
+					identity
+				};
+				const buffer = Buffer.alloc(size - request.start);
+				const { bytesRead } = await handle.read(buffer, 0, buffer.length, request.start);
+				const end = buffer.subarray(0, bytesRead).lastIndexOf(10);
+				return {
+					text: end < 0 ? "" : buffer.toString("utf8", 0, end + 1),
+					next: request.start + end + 1,
+					size,
+					identity
+				};
+			} catch {
+				return null;
+			} finally {
+				await handle.close();
+			}
+		}
+	}
+}
+/** Reads new agent-device actions asynchronously; selection applies only to matching output from this call. */
+function createAsyncAgentActionReader(options, signal) {
+	const reads = agentActionReads(options);
+	return async (selection) => {
+		signal?.throwIfAborted();
+		const iterator = reads(selection);
+		let step = iterator.next();
+		while (!step.done) {
+			let value;
+			try {
+				value = await asyncRead(step.value);
+			} catch (error) {
+				step = iterator.throw(error);
+				continue;
+			}
+			signal?.throwIfAborted();
+			step = iterator.next(value);
+		}
+		return step.value;
 	};
 }
 //#endregion
@@ -315,7 +517,7 @@ function readAgentDeviceUsageCache() {
 	const value = readJsonObject(agentDeviceUsageFile());
 	if (!value || value.version !== 1) return null;
 	const { roots, ...usage } = value;
-	if (!validUsage(usage) || !validRoots(roots)) return null;
+	if (!validUsage$1(usage) || !validRoots(roots)) return null;
 	return {
 		usage,
 		roots
@@ -325,34 +527,34 @@ function readAgentDeviceUsage() {
 	const value = readJsonObject(agentDeviceUsageFile());
 	if (!value) return null;
 	const { roots: _roots, ...usage } = value;
-	return validUsage(usage) ? usage : null;
+	return validUsage$1(usage) ? usage : null;
 }
-function object(value) {
+function object$1(value) {
 	return value !== null && typeof value === "object" && !Array.isArray(value);
 }
-function bytes(value) {
+function bytes$1(value) {
 	return value === null || typeof value === "number" && Number.isFinite(value) && value >= 0;
 }
 function sized(value) {
-	return object(value) && typeof value.dir === "string" && bytes(value.bytes);
+	return object$1(value) && typeof value.dir === "string" && bytes$1(value.bytes);
 }
 function count$1(value) {
 	return typeof value === "number" && Number.isInteger(value) && value >= 0;
 }
-function nullableString(value) {
+function nullableString$1(value) {
 	return value === null || typeof value === "string";
 }
 function validRoots(value) {
-	return object(value) && typeof value.stateDir === "string" && typeof value.runnerRoot === "string" && typeof value.hostedDir === "string" && Array.isArray(value.workspaceDirs) && value.workspaceDirs.every((dir) => typeof dir === "string");
+	return object$1(value) && typeof value.stateDir === "string" && typeof value.runnerRoot === "string" && typeof value.hostedDir === "string" && Array.isArray(value.workspaceDirs) && value.workspaceDirs.every((dir) => typeof dir === "string");
 }
-function validUsage(value) {
+function validUsage$1(value) {
 	const { stateDir: state, runnerBuilds: runner, workspaces, hosted } = value;
-	return value.version === 1 && typeof value.measuredAt === "string" && Number.isFinite(Date.parse(value.measuredAt)) && typeof value.bytes === "number" && bytes(value.bytes) && typeof value.complete === "boolean" && sized(state) && typeof state.present === "boolean" && sized(state.sessions) && count$1(state.sessions.count) && sized(state.logs) && object(state.other) && bytes(state.other.bytes) && Array.isArray(state.other.largest) && state.other.largest.every((entry) => object(entry) && typeof entry.name === "string" && bytes(entry.bytes)) && sized(runner) && typeof runner.present === "boolean" && bytes(runner.sharedBytes) && Array.isArray(runner.platforms) && runner.platforms.every((platform) => sized(platform) && typeof platform.platform === "string" && Array.isArray(platform.entries) && platform.entries.every((entry) => sized(entry) && typeof entry.name === "string" && nullableString(entry.lastUsedAt) && nullableString(entry.packageVersion) && nullableString(entry.xcodeBuildVersion) && typeof entry.inUse === "boolean" && [
+	return value.version === 1 && typeof value.measuredAt === "string" && Number.isFinite(Date.parse(value.measuredAt)) && typeof value.bytes === "number" && bytes$1(value.bytes) && typeof value.complete === "boolean" && sized(state) && typeof state.present === "boolean" && sized(state.sessions) && count$1(state.sessions.count) && sized(state.logs) && object$1(state.other) && bytes$1(state.other.bytes) && Array.isArray(state.other.largest) && state.other.largest.every((entry) => object$1(entry) && typeof entry.name === "string" && bytes$1(entry.bytes)) && sized(runner) && typeof runner.present === "boolean" && bytes$1(runner.sharedBytes) && Array.isArray(runner.platforms) && runner.platforms.every((platform) => sized(platform) && typeof platform.platform === "string" && Array.isArray(platform.entries) && platform.entries.every((entry) => sized(entry) && typeof entry.name === "string" && nullableString$1(entry.lastUsedAt) && nullableString$1(entry.packageVersion) && nullableString$1(entry.xcodeBuildVersion) && typeof entry.inUse === "boolean" && [
 		null,
 		"lease",
 		"lock",
 		"unreadable"
-	].includes(entry.inUseReason))) && Array.isArray(workspaces) && workspaces.every((entry) => sized(entry) && nullableString(entry.projectRoot)) && (hosted === null || sized(hosted) && count$1(hosted.sessions));
+	].includes(entry.inUseReason))) && Array.isArray(workspaces) && workspaces.every((entry) => sized(entry) && nullableString$1(entry.projectRoot)) && (hosted === null || sized(hosted) && count$1(hosted.sessions));
 }
 //#endregion
 //#region state/swiftpm-cache-usage.ts
@@ -374,6 +576,30 @@ function readSwiftpmCacheUsage() {
 	};
 }
 //#endregion
+//#region state/machine-cache-usage.ts
+function machineCacheUsageFile() {
+	return join(configDir(), "machine-cache-usage.json");
+}
+function object(value) {
+	return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+function bytes(value) {
+	return value === null || typeof value === "number" && Number.isFinite(value) && value >= 0;
+}
+function nullableString(value) {
+	return value === null || typeof value === "string";
+}
+function validRuntime(value) {
+	return object(value) && typeof value.identifier === "string" && typeof value.runtimeIdentifier === "string" && nullableString(value.version) && nullableString(value.build) && bytes(value.bytes) && typeof value.deletable === "boolean" && nullableString(value.lastUsedAt) && typeof value.devices === "number" && Number.isInteger(value.devices) && value.devices >= 0;
+}
+function validUsage(value) {
+	return Boolean(value && value.version === 1 && typeof value.measuredAt === "string" && Number.isFinite(Date.parse(value.measuredAt)) && Array.isArray(value.roots) && value.roots.every((root) => typeof root === "string") && Array.isArray(value.sizes) && value.sizes.every((entry) => object(entry) && typeof entry.dir === "string" && bytes(entry.bytes)) && (value.runtimes === null || Array.isArray(value.runtimes) && value.runtimes.every(validRuntime)) && nullableString(value.agentDeviceVersion) && nullableString(value.xcodeBuildVersion));
+}
+function readMachineCacheUsage() {
+	const value = readJsonObject(machineCacheUsageFile());
+	return validUsage(value) ? value : null;
+}
+//#endregion
 //#region state/paths.ts
 function getConfigPath() {
 	return join(configDir(), "config.json");
@@ -459,14 +685,14 @@ function diskUsageCacheDir() {
 function diskUsageWalkClaims() {
 	return join(configDir(), "disk-usage-walk.claims");
 }
-/** The remote Macs this Mac paired with, each with its pinned tailnet node and device token. */
+/** The remote machines this machine asked for build access, each with its pinned stim-server key once approved. */
 function buildMachinesFile() {
 	return join(configDir(), "build-machines.json");
 }
 function buildMachinesLock() {
 	return join(configDir(), "build-machines.lock");
 }
-/** The remote Macs this Mac asked for access, separate from build credentials. */
+/** The remote machines this machine asked for access, separate from build credentials. */
 function deviceHostMachinesFile() {
 	return join(configDir(), "device-host-machines.json");
 }
@@ -523,6 +749,14 @@ function archiveDir(id) {
 function archiveLock() {
 	return join(archiveRoot(), ".lock");
 }
+/** This machine's own long-term X25519 key as a client of other machines' stim-servers. */
+function clientIdentityKeyFile() {
+	return join(configDir(), "client-identity.key");
+}
+/** The Unix socket stim-server serves this machine's own user on, without Noise or pairing. */
+function serverLocalSocket() {
+	return join(configDir(), "server", "local.sock");
+}
 function serverSetupDir() {
 	return join(configDir(), "server", "setup");
 }
@@ -534,6 +768,13 @@ function setupJournalFile(hash) {
 function withConfigLock(fn) {
 	return withDirLock(configLockPath(), fn, { ensureParent: () => ensurePrivateDir(configDir()) });
 }
+/** Waits for the config lock without blocking the event loop. The signal cancels acquisition; `fn` runs synchronously. */
+function withConfigLockAsync(fn, signal) {
+	return withDirLockAsync(configLockPath(), fn, {
+		ensureParent: () => ensurePrivateDir(configDir()),
+		signal
+	});
+}
 function configCorruptRepair(path = getConfigPath()) {
 	return `Repair the file, or move it aside to start over: mv "${path}" "${path}.broken"`;
 }
@@ -546,7 +787,21 @@ function configCorrupt(reason, path = getConfigPath()) {
 /** The build worker root: `server.workerRoot` when it is absolute, else `$STIM_HOME/build-worker`. */
 function buildWorkerRoot(config = loadConfig()) {
 	const configured = config?.server?.workerRoot;
-	return typeof configured === "string" && configured.startsWith("/") ? configured : join(configDir(), "build-worker");
+	return typeof configured === "string" && isAbsolute(configured) ? configured : join(configDir(), "build-worker");
+}
+/**
+* A short directory at the drive root that stands in for the build worker directory `path` on Windows. The NDK's
+* ninja is not long-path aware (STIM_PATH_TOO_LONG), and it opens paths under the checkout and under the Gradle user
+* home's transforms cache, both of which are too long under the worker root. A subst drive does not help: Node's
+* native realpath, which expo-modules-autolinking uses, resolves it back to the long path.
+*/
+function windowsShortDir(path, systemDrive = process.env.SystemDrive ?? "C:") {
+	const id = createHash("sha256").update(path.toLowerCase()).digest("hex").slice(0, 6);
+	return win32.join(`${systemDrive}\\`, "sw", id);
+}
+/** The ASCII key a Windows build worker records beside a `windowsShortDir` to tell which `kind` and `path` it serves. */
+function windowsShortDirKey(kind, path) {
+	return createHash("sha256").update(`${kind}:${path.toLowerCase()}`).digest("hex");
 }
 function loadConfig() {
 	const p = getConfigPath();
@@ -589,7 +844,7 @@ function registryFromJson(config, key, path) {
 function getProject(projectPath) {
 	return loadConfig()?.projects?.[projectPath] || null;
 }
-function getConcurrencyLimits({ env = process.env } = {}) {
+function getConcurrencyLimits({ env = ambientEnv() } = {}) {
 	const c = loadConfig()?.concurrency || {};
 	return {
 		maxBuilds: resolveLimit(env.STIM_MAX_BUILDS, c.maxBuilds),
@@ -611,7 +866,7 @@ function parseMax(raw, strings) {
 	if (typeof value !== "number" || !Number.isSafeInteger(value) || value < 0) return null;
 	return value;
 }
-function getParkedMax(platform, { config, env = process.env } = {}) {
+function getParkedMax(platform, { config, env = ambientEnv() } = {}) {
 	const { key, env: envKey } = MAX_SETTING[platform];
 	const fromEnv = env[envKey];
 	const explicit = fromEnv !== void 0 && fromEnv !== "";
@@ -644,22 +899,9 @@ function resolveLimit(envVal, cfgVal) {
 function getProjectSettings(projectPath) {
 	return getProject(projectPath)?.settings || {};
 }
-function getProjectSetting(projectPath, dottedKey) {
-	return readNested(getProjectSettings(projectPath), dottedKey);
-}
 function getRepoSettings(gitCommonDir) {
 	return loadConfig()?.repos?.[gitCommonDir]?.settings || {};
 }
-function readNested(obj, dottedKey) {
-	if (!obj) return void 0;
-	const keys = dottedKey.split(".");
-	let cur = obj;
-	for (const k of keys) {
-		if (cur == null || typeof cur !== "object") return void 0;
-		cur = cur[k];
-	}
-	return cur;
-}
 function isPathPrefix(prefix, path) {
 	const head = comparablePath(prefix);
 	const candidate = comparablePath(path);
@@ -685,11 +927,6 @@ function allMetroPorts() {
 	if (!cfg?.projects) return [];
 	return Object.values(cfg.projects).map((p) => p.metroPort).filter((p) => typeof p === "number");
 }
-function findProjectByMetroPort(port) {
-	const cfg = loadConfig();
-	for (const [path, proj] of Object.entries(cfg?.projects || {})) if (proj.metroPort === port) return path;
-	return null;
-}
 //#endregion
 //#region state/tailnet.ts
 const DEFAULT_SERVE_PORT = 7443;
@@ -716,16 +953,25 @@ function findPeer(status, name) {
 		return [{
 			nodeId: peer.ID,
 			dnsName,
-			address
+			address,
+			...typeof peer.OS === "string" && peer.OS ? { os: peer.OS } : {}
 		}];
 	});
 	if (found.length === 0) return "missing";
 	return found.length === 1 ? found[0] : "ambiguous";
 }
 /**
-* Connects to the pinned node's own tailnet address rather than resolving its name, so the socket reaches the
-* node whose ID was just checked. `tailscale serve` still needs the MagicDNS name for TLS (SNI and certificate)
-* and for its Host routing.
+* Whether `tailscale status` reports the peer a `remote.machines` entry names as running an OS other than macOS.
+* Such a machine can build but never host simulators or emulators; an unknown OS counts as able to host.
+*/
+function cannotHost(status, entry) {
+	const parsed = parseMachine(entry);
+	const peer = parsed ? findPeer(status, parsed.name) : "missing";
+	return typeof peer === "object" && peer.os !== void 0 && peer.os !== "macOS";
+}
+/**
+* Connects to the node's own tailnet address from `tailscale status`. `tailscale serve` still needs the MagicDNS name
+* for TLS (SNI and certificate) and for its Host routing.
 */
 function endpoint(peer, port) {
 	const address = peer.address.includes(":") ? `[${peer.address}]` : peer.address;
@@ -737,24 +983,30 @@ function endpoint(peer, port) {
 	};
 }
 /**
-* The endpoint of a paired machine's pinned node, or why Stim does not connect to it. The name must still
-* resolve to exactly the pinned node; the token is never sent anywhere else.
+* Where to reach a `remote.machines` entry now, or why Stim cannot. The tailnet only carries the bytes: the Noise
+* handshake, pinned to the worker's server key, decides whether the machine answering is the one this machine paired
+* with.
 */
-function pinnedEndpoint(credential, current) {
-	const parsed = parseMachine(credential.machine);
-	if (!parsed) return `${credential.machine} is not a tailnet name`;
+function machineEndpoint(machine, current) {
+	const parsed = parseMachine(machine);
+	if (!parsed) return `${machine} is not a tailnet name`;
 	if (!isJsonObject(current)) return "Tailscale is not running";
 	const peer = findPeer(current, parsed.name);
 	if (peer === "missing") return `no peer on this tailnet is named ${parsed.name}`;
 	if (peer === "ambiguous") return `several tailnet peers match ${parsed.name}`;
-	if (peer.nodeId !== credential.nodeId) return `${peer.dnsName} is now node ${peer.nodeId}, not the pinned ${credential.nodeId}; run stim doctor`;
 	return endpoint(peer, parsed.port);
 }
 //#endregion
 //#region state/hosted-macos.ts
 /** App slots one host offers; a slot names the host-assigned bundle id `<bundleId>.hosted<slot>`. */
 const HOSTED_MACOS_APP_SLOTS = 64;
+/** The drivers `hosting.agentDriver` can name: `none` and the first-party driver packages stim-server ships. */
 const HOSTED_AGENT_DRIVERS = ["none", "agent-device"];
+const AGENT_DRIVER_NAME = /^[a-z][a-z0-9-]{0,62}$/;
+/** A driver name a grant or access record can carry; a client resolves only the drivers it knows. */
+function hostedAgentDriverName(value) {
+	return typeof value === "string" && value !== "none" && AGENT_DRIVER_NAME.test(value);
+}
 function hostedMacosAppSlot(value) {
 	return typeof value === "number" && Number.isInteger(value) && value >= 1 && value <= 64;
 }
@@ -815,14 +1067,17 @@ function parseHostedAgentLease(value) {
 function parseHostedAgentGrant(value) {
 	if (!isJsonObject(value)) return null;
 	if (value.driver === "none") return Object.keys(value).length === 1 ? { driver: "none" } : null;
-	if (!HOSTED_AGENT_DRIVERS.includes(value.driver) || typeof value.path !== "string" || !AGENT_PATH.test(value.path) || typeof value.token !== "string" || !/^[A-Za-z0-9_-]{32,256}$/.test(value.token) || typeof value.scope !== "string" || !/^[A-Za-z0-9._:-]{1,256}$/.test(value.scope) || Object.keys(value).length !== 5) return null;
-	const lease = parseHostedAgentLease(value.lease);
-	if (!lease) return null;
-	return {
+	if (!hostedAgentDriverName(value.driver) || typeof value.path !== "string" || !AGENT_PATH.test(value.path) || typeof value.token !== "string" || !/^[A-Za-z0-9_-]{32,256}$/.test(value.token) || typeof value.scope !== "string" || !/^[A-Za-z0-9._:-]{1,256}$/.test(value.scope) || Object.keys(value).length !== (value.lease === void 0 ? 4 : 5)) return null;
+	const grant = {
 		driver: value.driver,
 		path: value.path,
 		token: value.token,
-		scope: value.scope,
+		scope: value.scope
+	};
+	if (value.lease === void 0) return grant;
+	const lease = parseHostedAgentLease(value.lease);
+	return lease && {
+		...grant,
 		lease: { ...lease }
 	};
 }
@@ -832,9 +1087,9 @@ function parseHostedAgentAccess(value) {
 		driver: "none",
 		setting: "hosting.agentDriver"
 	} : null;
-	if (value.driver !== "agent-device" || typeof value.remoteConfig !== "string" || !isAbsolute(value.remoteConfig) || typeof value.command !== "string" || !value.command || Object.keys(value).length !== 3) return null;
+	if (!hostedAgentDriverName(value.driver) || typeof value.remoteConfig !== "string" || !isAbsolute(value.remoteConfig) || typeof value.command !== "string" || !value.command || Object.keys(value).length !== 3) return null;
 	return {
-		driver: "agent-device",
+		driver: value.driver,
 		remoteConfig: value.remoteConfig,
 		command: value.command
 	};
@@ -1011,7 +1266,7 @@ const SETTINGS = [
 			patternHelp: "eas, proxy, auto, local, or a tailnet machine name"
 		},
 		scopes: EVERY,
-		description: "Default iOS remote target: eas, proxy, or an approved Mac in remote.machines; auto places on an approved Mac when this Mac is full or busy; local runs here, overriding a lower layer"
+		description: "Default iOS remote target: eas, proxy, or an approved Mac in remote.machines; auto places on an approved Mac when this machine is full or busy; local runs here, overriding a lower layer"
 	},
 	{
 		key: "ios.projectPath",
@@ -1042,6 +1297,36 @@ const SETTINGS = [
 		scopes: PROJECT,
 		description: "SHA-1 of the signing identity, when two share a name"
 	},
+	{
+		key: "ios.appStoreConnectKeyPath",
+		type: ABSOLUTE_PATH,
+		scopes: MACHINE,
+		env: "STIM_ASC_KEY_PATH",
+		sensitive: true,
+		description: "App Store Connect API key (.p8) that `stim device provision ios` authenticates with"
+	},
+	{
+		key: "ios.appStoreConnectKeyId",
+		type: {
+			kind: "string",
+			pattern: "^[A-Za-z0-9]+$",
+			patternHelp: "the key ID App Store Connect shows"
+		},
+		scopes: MACHINE,
+		env: "STIM_ASC_KEY_ID",
+		description: "Key ID of ios.appStoreConnectKeyPath"
+	},
+	{
+		key: "ios.appStoreConnectIssuerId",
+		type: {
+			kind: "string",
+			pattern: "^[A-Za-z0-9-]+$",
+			patternHelp: "the issuer ID App Store Connect shows"
+		},
+		scopes: MACHINE,
+		env: "STIM_ASC_ISSUER_ID",
+		description: "Issuer ID of ios.appStoreConnectKeyPath"
+	},
 	{
 		key: "ios.lanHost",
 		type: {
@@ -1117,6 +1402,12 @@ const SETTINGS = [
 		scopes: PROJECT,
 		description: "Gradle build variant"
 	},
+	{
+		key: "android.artifactInputs",
+		type: OBJECT,
+		scopes: PROJECT,
+		description: "Complete repeatable native Gradle inputs for local APK caching, including declared local files and environment names"
+	},
 	{
 		key: "android.offloadInputs",
 		type: OBJECT,
@@ -1144,7 +1435,7 @@ const SETTINGS = [
 			patternHelp: "eas, proxy, auto, local, or a tailnet machine name"
 		},
 		scopes: EVERY,
-		description: "Default Android remote target: eas, proxy, or an approved Mac in remote.machines; auto places on an approved Mac when this Mac is full or busy; local runs here, overriding a lower layer"
+		description: "Default Android remote target: eas, proxy, or an approved Mac in remote.machines; auto places on an approved Mac when this machine is full or busy; local runs here, overriding a lower layer"
 	},
 	{
 		key: "metro.tunnel",
@@ -1247,6 +1538,12 @@ const SETTINGS = [
 		scopes: PROJECT,
 		description: "Development Info.plist relative to the Swift Package directory."
 	},
+	{
+		key: "macos.artifactInputs",
+		type: OBJECT,
+		scopes: PROJECT,
+		description: "Complete pinned, repeatable SwiftPM inputs producing a relocatable app for completed artifact caching."
+	},
 	{
 		key: "macos.arguments",
 		type: { kind: "strings" },
@@ -1647,6 +1944,18 @@ const SETTINGS = [
 		env: "STIM_MAINTENANCE_OLDER_THAN_DAYS",
 		description: "Age in days for the age sweep: unused workspace build outputs and shared cache entries"
 	},
+	{
+		key: "maintenance.deviceIdleDays",
+		type: {
+			kind: "number",
+			integer: true,
+			minimum: 0
+		},
+		scopes: MACHINE,
+		default: 3,
+		env: "STIM_MAINTENANCE_DEVICE_IDLE_DAYS",
+		description: "Days a workspace stays idle before the age sweep deletes its owned simulators and emulators; 0 turns that off"
+	},
 	{
 		key: "maintenance.protectRecentHours",
 		type: {
@@ -1659,20 +1968,60 @@ const SETTINGS = [
 		env: "STIM_MAINTENANCE_PROTECT_RECENT_HOURS",
 		description: "Cache entries used within this many hours are never evicted"
 	},
+	{
+		key: "maintenance.urgentFreeDiskGb",
+		type: GIGABYTES,
+		scopes: MACHINE,
+		default: 12,
+		env: "STIM_MAINTENANCE_URGENT_FREE_DISK_GB",
+		description: "Free disk, in GB, below which automatic maintenance reports disk pressure level 2; 0 turns that threshold off"
+	},
+	{
+		key: "maintenance.criticalFreeDiskGb",
+		type: GIGABYTES,
+		scopes: MACHINE,
+		default: 6,
+		env: "STIM_MAINTENANCE_CRITICAL_FREE_DISK_GB",
+		description: "Free disk, in GB, below which automatic maintenance enters disk pressure level 3, also at or below budget.hardFloorDiskGb; 0 leaves only the hard floor"
+	},
+	{
+		key: "maintenance.pressureProtectMinutes",
+		type: {
+			kind: "number",
+			integer: true,
+			minimum: 0
+		},
+		scopes: MACHINE,
+		default: 10,
+		env: "STIM_MAINTENANCE_PRESSURE_PROTECT_MINUTES",
+		description: "Protection window, in minutes, that replaces maintenance.protectRecentHours at disk pressure levels 2 and 3"
+	},
+	{
+		key: "maintenance.gradleVersionIdleDays",
+		type: {
+			kind: "number",
+			integer: true,
+			minimum: 0
+		},
+		scopes: MACHINE,
+		default: 7,
+		env: "STIM_MAINTENANCE_GRADLE_VERSION_IDLE_DAYS",
+		description: "At disk pressure level 3, stop idle Gradle and Kotlin daemons, then delete the Gradle version caches and wrapper distributions no registered project pins once their directories are unmodified this many days; 0 turns this off"
+	},
 	{
 		key: "maintenance.removeFinishedWorktrees",
 		type: BOOLEAN,
 		scopes: MACHINE,
 		default: true,
 		env: "STIM_MAINTENANCE_REMOVE_FINISHED_WORKTREES",
-		description: "Remove clean linked worktrees whose branch or pull request finished, under gc.worktreeGraceMinutes"
+		description: "Remove clean linked worktrees whose branch or pull request finished, under gc.worktreeGraceMinutes, and at disk pressure level 3 clean, pushed ones with no commits of their own"
 	},
 	{
 		key: "maintenance.keep",
 		type: BOOLEAN,
 		scopes: PROJECT,
 		default: false,
-		description: "Pin this workspace: automatic maintenance never clears its build outputs or removes its worktree"
+		description: "Pin this workspace: automatic maintenance never clears its build outputs, deletes its owned devices or removes its worktree"
 	},
 	{
 		key: "maintenance.workspaceOutputsMaxGb",
@@ -1761,7 +2110,7 @@ const SETTINGS = [
 		scopes: MACHINE,
 		default: false,
 		env: "STIM_DEBUG",
-		description: "Debug-level logging. While on, the CLI records its commands, child processes and requests to other Macs, and stim-server records every request with its timings, under STIM_HOME/logs/debug/ with rotation. Nothing is sent anywhere, and records never carry arguments, tokens or tickets"
+		description: "Debug-level logging. While on, the CLI records its commands, child processes and requests to other machines, and stim-server records every request with its timings, under STIM_HOME/logs/debug/ with rotation. Nothing is sent anywhere, and records never carry arguments, tokens or tickets"
 	},
 	{
 		key: "hosting.agentDriver",
@@ -1773,18 +2122,32 @@ const SETTINGS = [
 		default: "none",
 		description: "Tool this Mac starts so a client's coding agent can drive the macOS apps, iOS simulators and Android emulators it hosts for that client; none starts nothing"
 	},
+	{
+		key: "server.buildsPaused",
+		type: { kind: "boolean" },
+		scopes: MACHINE,
+		default: false,
+		description: "Temporarily refuse new incoming builds without interrupting running builds, serving cached artifacts, or changing client approvals; local CLI builds remain available"
+	},
+	{
+		key: "server.devicesPaused",
+		type: { kind: "boolean" },
+		scopes: MACHINE,
+		default: false,
+		description: "Temporarily refuse new hosted iOS, Android and macOS sessions without interrupting existing sessions or changing client approvals; local CLI devices remain available"
+	},
 	{
 		key: "server.acceptClientBuilds",
 		type: { kind: "boolean" },
 		scopes: MACHINE,
 		default: false,
-		description: "Whether a Mac approved for builds or device hosting here may update this Mac's stim-server service to that Mac's own stim-server build; releases from npm need no setting"
+		description: "Whether a machine approved for builds or device hosting here may update this machine's stim-server service to that machine's own stim-server build; releases from npm need no setting"
 	},
 	{
 		key: "remote.machines",
 		type: { kind: "strings" },
 		scopes: MACHINE,
-		description: "Tailscale names of the remote Macs this Mac may build on and host owned simulators on, each optionally with :<port> of its tailscale serve route (default 7443); what each is used for follows the build and device-host approvals it grants, which doctor --fix asks for separately"
+		description: "Tailscale names of the remote machines this machine may build on and host owned simulators on, each optionally with :<port> of its tailscale serve route (default 7443); what each is used for follows the build and device-host approvals it grants, which doctor --fix asks for separately"
 	},
 	{
 		key: "remote.buildPoolDisabled",
@@ -1805,7 +2168,7 @@ const SETTINGS = [
 		type: BOOLEAN,
 		scopes: EVERY,
 		default: false,
-		description: "When ios.remote or android.remote is auto, this Mac is at its concurrency.maxDevices cap and no Mac in remote.machines takes the run, run the simulator or emulator on a billed EAS Simulator instead of waiting or refusing, when eas-cli can"
+		description: "When ios.remote or android.remote is auto, this machine is at its concurrency.maxDevices cap and no remote.machines entry takes the run, run the simulator or emulator on a billed EAS Simulator instead of waiting or refusing, when eas-cli can"
 	},
 	{
 		key: "remote.build",
@@ -1817,7 +2180,7 @@ const SETTINGS = [
 		scopes: MACHINE,
 		default: "auto",
 		env: "STIM_REMOTE_BUILD",
-		description: "Build placement: auto follows remote.buildMode within enabled automatic pool members; local always builds here; a name in remote.machines requires that remote Mac without fallback. The ios, android and macos --remote-build flag overrides this setting and its environment override"
+		description: "Build placement: auto follows remote.buildMode within enabled automatic pool members; local always builds here; a name in remote.machines requires that remote machine without fallback. The ios, android and macos --remote-build flag overrides this setting and its environment override"
 	},
 	{
 		key: "remote.buildMode",
@@ -1828,7 +2191,7 @@ const SETTINGS = [
 		scopes: MACHINE,
 		default: "auto",
 		env: "STIM_REMOTE_BUILD_MODE",
-		description: "When remote.build is auto, where iOS simulator Debug, Android emulator debug and macOS SwiftPM Debug builds run: auto builds here while this Mac has a free concurrency.maxBuilds slot and its load is under server.maxLoadPerCore, and otherwise builds on a less loaded Mac in remote.machines; force builds on an enabled remote Mac whenever one can take the build; off builds here when local is enabled in remote.buildPoolDisabled"
+		description: "When remote.build is auto, where iOS simulator Debug, Android emulator debug and macOS SwiftPM Debug builds run: auto builds here while this machine has a free concurrency.maxBuilds slot and its load is under server.maxLoadPerCore, and otherwise builds on a less loaded machine in remote.machines; force builds on an enabled remote machine whenever one can take the build; off builds here when local is enabled in remote.buildPoolDisabled"
 	},
 	{
 		key: "server.maxLoadPerCore",
@@ -1838,13 +2201,13 @@ const SETTINGS = [
 		},
 		scopes: MACHINE,
 		default: 2,
-		description: "Load per core (5-minute load average divided by the CPU count) at which this Mac counts as saturated: it declines builds other Macs send it, automatic build placement stops preferring it, and automatic iOS and Android device placement treats it as busy"
+		description: "Load per core (5-minute load average divided by the CPU count) at which this machine counts as saturated: it declines builds other machines send it, automatic build placement stops preferring it, and automatic iOS and Android device placement treats it as busy"
 	},
 	{
 		key: "server.workerRoot",
 		type: ABSOLUTE_PATH,
 		scopes: MACHINE,
-		description: "Directory where stim-server keeps the checkouts, dependencies and build state of the Macs that build here; default $STIM_HOME/build-worker"
+		description: "Directory where stim-server keeps the checkouts, dependencies and build state of the machines that build here; default $STIM_HOME/build-worker"
 	},
 	{
 		key: "server.gradleDaemonIdleMinutes",
@@ -1856,7 +2219,7 @@ const SETTINGS = [
 		},
 		scopes: MACHINE,
 		default: 30,
-		description: "Minutes the Gradle daemon of an Android build another Mac sent here stays warm after the build; 0 stops it when the build ends"
+		description: "Minutes the Gradle daemon of an Android build another machine sent here stays warm after the build; 0 stops it when the build ends"
 	},
 	{
 		key: "caches.buildCache",
@@ -1888,9 +2251,6 @@ function isLayeredSetting(setting) {
 	return setting.scopes.some((scope) => scope !== "machine");
 }
 const SETTING_GROUPS = [...new Set(SETTINGS.filter(isLayeredSetting).flatMap((setting) => setting.key.split(".").slice(0, -1).map((_, index, parts) => parts.slice(0, index + 1).join("."))))];
-function isPlainObject(value) {
-	return value !== null && typeof value === "object" && !Array.isArray(value);
-}
 function bundleUrlAccepts(value, key) {
 	if (typeof value !== "string" || !/^(https?:\/\/|\/(?!\/))/.test(value) || /[\s\\#]/.test(value)) return false;
 	try {
@@ -1921,7 +2281,7 @@ function acceptsShape(setting, value) {
 		case "strings": return Array.isArray(value) && value.every((entry) => typeof entry === "string");
 		case "number": return typeof value === "number";
 		case "choice": return typeof value === "string" && type.choices.includes(value);
-		case "object": return isPlainObject(value);
+		case "object": return isJsonObject(value);
 		case "bundle-url": return bundleUrlAccepts(value, setting.key);
 	}
 }
@@ -2026,7 +2386,7 @@ function tryAcquireBuildSlotClaim({ max, details }) {
 	if (refusal && !busy) throw refusal;
 	return null;
 }
-/** Build slots held for a remote Mac's offloaded builds, which run under another Stim home. */
+/** Build slots held for a remote machine's offloaded builds, which run under another Stim home. */
 function liveOffloadedSlots() {
 	let names;
 	try {
@@ -2087,7 +2447,7 @@ function machineCapacity() {
 		maxLoadPerCore: maxLoadPerCore()
 	};
 }
-/** Why a Mac with this capacity should not take another native build; null when it can. */
+/** Why a machine with this capacity should not take another native build; null when it can. */
 function saturation(capacity) {
 	if (capacity.maxBuilds > 0 && capacity.builds >= capacity.maxBuilds) return `all ${capacity.maxBuilds} build slots busy`;
 	if (capacity.loadPerCore >= capacity.maxLoadPerCore) return `load at or above ${capacity.maxLoadPerCore}/core`;
@@ -2095,41 +2455,55 @@ function saturation(capacity) {
 }
 //#endregion
 //#region state/build-machines.ts
-function parseCredential(value) {
+const MACHINE_CREDENTIALS_VERSION = 2;
+const KEY = /^[A-Za-z0-9_-]{43}$/;
+/** A stored credential, or null when it is malformed or from an older version. */
+function parseMachineCredential(value) {
 	if (!isJsonObject(value)) return null;
-	const { machine, nodeId, dnsName, deviceId, deviceToken, state, requestedAt } = value;
+	const { machine, transport, address, state, requestedAt, serverKey, deviceId, ticket, expiresAt } = value;
 	if (![
 		machine,
-		nodeId,
-		dnsName,
-		deviceId,
-		deviceToken,
+		address,
 		requestedAt
 	].every((field) => typeof field === "string" && field)) return null;
-	if (state !== "pending" && state !== "approved") return null;
+	if (transport !== "tailscale" || state !== "pending" && state !== "approved") return null;
+	if (serverKey !== void 0 && (typeof serverKey !== "string" || !KEY.test(serverKey))) return null;
+	if (ticket !== void 0 && (typeof ticket !== "string" || !KEY.test(ticket))) return null;
+	if (state === "approved" && (serverKey === void 0 || typeof deviceId !== "string" || !deviceId)) return null;
+	if (state === "pending" && ticket === void 0) return null;
 	return {
 		machine,
-		nodeId,
-		dnsName,
-		deviceId,
-		deviceToken,
+		transport,
+		address,
 		state,
 		requestedAt,
-		...typeof value.expiresAt === "string" && value.expiresAt ? { expiresAt: value.expiresAt } : {},
-		...typeof value.ticketHash === "string" ? { ticketHash: value.ticketHash } : {}
+		...serverKey ? { serverKey } : {},
+		...typeof deviceId === "string" && deviceId ? { deviceId } : {},
+		...ticket ? { ticket } : {},
+		...typeof expiresAt === "string" && expiresAt ? { expiresAt } : {}
 	};
 }
 function readBuildMachines() {
 	try {
-		const machines = readJsonFile(buildMachinesFile()).machines;
-		return Array.isArray(machines) ? machines.flatMap((entry) => parseCredential(entry) ?? []) : [];
+		const store = readJsonFile(buildMachinesFile());
+		if (store.version !== 2 || !Array.isArray(store.machines)) return [];
+		return store.machines.flatMap((entry) => parseMachineCredential(entry) ?? []);
 	} catch {
 		return [];
 	}
 }
 //#endregion
+//#region state/client-identity.ts
+/** This machine's long-term X25519 key as a client of other machines, in `$STIM_HOME/client-identity.key`. */
+function clientIdentity() {
+	return readOrCreateKeyFile(clientIdentityKeyFile());
+}
+//#endregion
 //#region state/device-host-machines.ts
-/** An absent store is empty; unreadable or malformed credentials refuse access without discarding pins. */
+/**
+* An absent store, or one from protocol 1, is empty; an unreadable or malformed one refuses access without discarding
+* pinned keys.
+*/
 function readDeviceHostMachines() {
 	let value;
 	try {
@@ -2138,23 +2512,13 @@ function readDeviceHostMachines() {
 		if (error.code === "ENOENT") return [];
 		throw error;
 	}
-	if (!isJsonObject(value) || value.version !== 1 || !Array.isArray(value.machines)) throw new Error("Invalid device-host machine credential store");
+	if (isJsonObject(value) && value.version === 1) return [];
+	if (!isJsonObject(value) || value.version !== 2 || !Array.isArray(value.machines)) throw new Error("Invalid device-host machine credential store");
 	const machines = [];
 	for (const entry of value.machines) {
-		if (!isJsonObject(entry) || ![
-			"machine",
-			"nodeId",
-			"dnsName",
-			"deviceId",
-			"deviceToken",
-			"requestedAt"
-		].every((key) => typeof entry[key] === "string" && entry[key]) || entry.state !== "pending" && entry.state !== "approved" || machines.some((each) => each.machine === entry.machine)) throw new Error("Invalid device-host machine credential store");
-		const { ticketHash, expiresAt, ...credential } = entry;
-		machines.push({
-			...credential,
-			...typeof expiresAt === "string" && expiresAt ? { expiresAt } : {},
-			...typeof ticketHash === "string" ? { ticketHash } : {}
-		});
+		const credential = parseMachineCredential(entry);
+		if (!credential || machines.some((each) => each.machine === credential.machine)) throw new Error("Invalid device-host machine credential store");
+		machines.push(credential);
 	}
 	return machines;
 }
@@ -2174,11 +2538,15 @@ function requireAutomaticMachine(role, machine) {
 		remedy: `Enable it in remote.${role}PoolDisabled or select a machine explicitly.`
 	});
 }
-function validateAutomaticPool(role, config) {
+/**
+* Refuses a pool with no enabled member: local, or a configured remote approved for the role. `canHost` excludes
+* device-pool remotes that can never host, such as a Linux machine.
+*/
+function validateAutomaticPool(role, config, canHost = () => true) {
 	if (automaticMachineEnabled(role, "local", config)) return;
 	const configured = config.remote?.machines;
 	const approved = role === "build" ? readBuildMachines() : readDeviceHostMachines();
-	if (Array.isArray(configured) && configured.some((machine) => typeof machine === "string" && automaticMachineEnabled(role, machine, config) && approved.some((entry) => entry.machine === machine && entry.state === "approved"))) return;
+	if (Array.isArray(configured) && configured.some((machine) => typeof machine === "string" && automaticMachineEnabled(role, machine, config) && (role === "build" || canHost(machine)) && approved.some((entry) => entry.machine === machine && entry.state === "approved"))) return;
 	throw Object.assign(/* @__PURE__ */ new Error(`Keep at least one enabled automatic ${role} pool member: local or a configured, approved remote machine.`), { code: "STIM_BAD_ARG" });
 }
 //#endregion
@@ -2192,7 +2560,7 @@ function debugLogDir() {
 	return join(configDir(), "logs", "debug");
 }
 /** The `STIM_DEBUG` override (1/true on, 0/false off, anything else off), else the machine setting `debug.logs`. Never throws. */
-function debugLoggingEnabled(env = process.env) {
+function debugLoggingEnabled(env = ambientEnv()) {
 	const definition = settingDefinition("debug.logs");
 	const raw = env[DEBUG_ENV];
 	if (raw !== void 0 && raw !== "") {
@@ -2219,15 +2587,21 @@ function scrub(value, depth = 0) {
 * Debug-level records for one component (`cli` or `server`). Off by default; `STIM_DEBUG=1` or `debug.logs` turns it
 * on. Callers pass names, durations and codes, never arguments, environment values, tokens or tickets.
 */
-function createDebugLog(component, { env = process.env, now = Date.now, base = () => ({}) } = {}) {
+function createDebugLog(component, { env, now = Date.now, base = () => ({}) } = {}) {
 	let checkedAt = Number.NEGATIVE_INFINITY;
 	let on = false;
 	let unchecked = ROTATE_CHECK_BYTES;
+	let checkedEnv;
+	let checkedHome;
 	const enabled = () => {
 		const at = now();
-		if (at - checkedAt >= ENABLED_RECHECK_MS) {
+		const activeEnv = env ?? ambientEnv();
+		const home = configDir();
+		if (activeEnv !== checkedEnv || home !== checkedHome || at - checkedAt >= ENABLED_RECHECK_MS) {
 			checkedAt = at;
-			on = debugLoggingEnabled(env);
+			checkedEnv = activeEnv;
+			checkedHome = home;
+			on = debugLoggingEnabled(activeEnv);
 		}
 		return on;
 	};
@@ -2258,6 +2632,15 @@ function createDebugLog(component, { env = process.env, now = Date.now, base = (
 	};
 }
 //#endregion
+//#region state/home-identity.ts
+/** The persistent, nonsecret identity of this Stim home; null until the CLI initializes it. */
+function readHomeIdentity(config = loadConfig()) {
+	const id = config?.homeId;
+	if (id === void 0) return null;
+	if (!validHomeId(id)) throw Object.assign(/* @__PURE__ */ new Error(`Stim home identity is not a UUID. ${configCorruptRepair()}`), { code: "STIM_CONFIG_CORRUPT" });
+	return id.toLowerCase();
+}
+//#endregion
 //#region state/ledgers.ts
 function ids(value) {
 	return Array.isArray(value) ? value.filter((entry) => typeof entry === "string" && entry !== "") : [];
@@ -2692,7 +3075,8 @@ function expoContextFollower(onRecord, into) {
 	return {
 		push,
 		settle,
-		flush
+		flush,
+		pending: () => pending !== null
 	};
 }
 function includeBareErrorContext(all, matched, launchTs, sinceTs) {
@@ -2743,11 +3127,11 @@ function launchMarkersBySlot(records) {
 	}
 	return markers;
 }
-function queryLogs({ slot, dir, records, sources, minLevel, since, grep, tail, errorsOnly, errorContext, now } = {}) {
-	const source = records ?? readLogRecords(dir);
-	const slotLaunched = slot !== void 0 && source.some((record) => isLaunchMarker(record) && (record.slot ?? "default") === slot);
-	const all = source.filter((record) => slot === void 0 || (record.slot ?? "default") === slot || slotLaunched && isSharedRecord(record));
-	if (all.length === 0) return [];
+/** Decides which records a query matches from the timeline's marker records alone. */
+function planLogQuery(markers, { slot, sources, minLevel, since, grep, errorsOnly, now } = {}) {
+	const slotLaunched = slot !== void 0 && markers.some((record) => isLaunchMarker(record) && (record.slot ?? "default") === slot);
+	const inTimeline = (record) => slot === void 0 || (record.slot ?? "default") === slot || slotLaunched && isSharedRecord(record);
+	const all = markers.filter((record) => record.marker === true && inTimeline(record));
 	const { launchTs, bundleTs, pageLoadTs } = errorsOnly ? markerWindow(all) : {
 		launchTs: null,
 		bundleTs: null,
@@ -2765,9 +3149,8 @@ function queryLogs({ slot, dir, records, sources, minLevel, since, grep, tail, e
 		bundleMarkerTs: bundleTs === null ? void 0 : bundleTs
 	});
 	const slotMarkers = launchMarkersBySlot(all);
-	const markers = all.filter((record) => record.marker === true);
-	const launches = newestByPlatform(markers.filter((record) => record.src !== "metro" && !isWebPageRecord(record)), (record) => typeof record.platform === "string" ? record.platform : null);
-	const bundles = newestByPlatform(markers.filter((record) => record.src === "metro"), bundleMarkerPlatform);
+	const launches = newestByPlatform(all.filter((record) => record.src !== "metro" && !isWebPageRecord(record)), (record) => typeof record.platform === "string" ? record.platform : null);
+	const bundles = newestByPlatform(all.filter((record) => record.src === "metro"), bundleMarkerPlatform);
 	const slotPlatforms = slot === void 0 ? [] : [...launches.keys()].filter((platform) => platform !== null);
 	const windowStart = (record) => {
 		if (pageLoadTs !== null && isWebPageRecord(record)) return pageLoadTs - 1;
@@ -2783,13 +3166,58 @@ function queryLogs({ slot, dir, records, sources, minLevel, since, grep, tail, e
 		const platform = nativePlatform(record);
 		return newestWhere(bundles, (marker) => marker === null || (platform ? marker === platform : slotPlatforms.length === 0 || slotPlatforms.includes(marker)));
 	};
-	let matched = all.filter((record) => !otherPlatform(record) && recordMatches(record, {
-		...criteria,
-		markerTs: windowStart(record),
-		bundleMarkerTs: bundleWindowStart(record)
-	}));
+	const lowestWindowStart = (slots) => {
+		if (!criteria.errorsOnly) return void 0;
+		const starts = [];
+		if (pageLoadTs !== null) starts.push(pageLoadTs - 1);
+		const kinds = criteria.sources ?? [];
+		if (criteria.includeAppDeviceErrors || kinds.some((src) => src !== "metro" && src !== "client")) {
+			const possible = slot !== void 0 ? [slot] : slots ? [...slots] : null;
+			if (!possible) return void 0;
+			for (const value of possible) {
+				const start = slotMarkers.get(value);
+				if (start === void 0) return void 0;
+				starts.push(start);
+			}
+		}
+		if (kinds.includes("metro") || kinds.includes("client")) {
+			if (criteria.markerTs === void 0) return void 0;
+			starts.push(criteria.markerTs, ...launches.values());
+		}
+		return starts.length ? Math.min(...starts) : void 0;
+	};
+	return {
+		inTimeline,
+		matches: (record) => inTimeline(record) && !otherPlatform(record) && recordMatches(record, {
+			...criteria,
+			markerTs: windowStart(record),
+			bundleMarkerTs: bundleWindowStart(record)
+		}),
+		launchTs,
+		sinceTs: criteria.sinceTs,
+		excludesUpTo: (maxTs, slots) => {
+			if (criteria.sinceTs !== void 0 && maxTs < criteria.sinceTs) return true;
+			const start = lowestWindowStart(slots);
+			return start !== void 0 && maxTs <= start;
+		}
+	};
+}
+function queryLogs({ slot, dir, records, sources, minLevel, since, grep, tail, errorsOnly, errorContext, now } = {}) {
+	const source = records ?? readLogRecords(dir);
+	const plan = planLogQuery(source.filter((record) => record.marker === true), {
+		slot,
+		sources,
+		minLevel,
+		since,
+		grep,
+		errorsOnly,
+		now
+	});
+	const all = source.filter(plan.inTimeline);
+	if (all.length === 0) return [];
+	let matched = all.filter(plan.matches);
 	if (typeof tail === "number" && tail >= 0 && matched.length > tail) matched = matched.slice(matched.length - tail);
-	return errorContext ? includeBareErrorContext(all, attachExpoErrorContext(all, matched), launchTs, criteria.sinceTs) : matched;
+	return errorContext ? includeBareErrorContext(all, attachExpoErrorContext(all, matched), plan.launchTs, plan.sinceTs) : matched;
 }
 /** Queries the JSON timeline, including Expo context fields on errors as `stim logs --json` does. */
 function queryJsonLogs(options = {}) {
@@ -2834,10 +3262,12 @@ function advanceTail(prev, chunk, size) {
 		records
 	};
 }
-function followLogs({ dir, onRecord, criteria = {}, intervalMs = 500, offsets = null, errorContext }) {
+function followLogs({ dir, onRecord, criteria = {}, intervalMs, offsets = null, errorContext }) {
 	const follower = errorContext ? expoContextFollower(onRecord, errorContext) : null;
 	const state = /* @__PURE__ */ new Map();
 	const decoders = /* @__PURE__ */ new Map();
+	let stopped = false;
+	let contextTimer;
 	for (const [name, size] of Object.entries(offsets || fileSizes(dir))) {
 		state.set(name, {
 			offset: size,
@@ -2847,6 +3277,7 @@ function followLogs({ dir, onRecord, criteria = {}, intervalMs = 500, offsets =
 	}
 	function emit(records) {
 		for (const record of records) {
+			if (stopped) break;
 			const matches = recordMatches(record, criteria);
 			if (follower) follower.push(record, matches);
 			else if (matches) onRecord(record);
@@ -2876,14 +3307,105 @@ function followLogs({ dir, onRecord, criteria = {}, intervalMs = 500, offsets =
 		emit(next.records);
 	}
 	function poll() {
-		for (const name of logFiles(dir)) try {
-			pollFile(name);
-		} catch {}
+		if (stopped) return;
+		for (const name of logFiles(dir)) {
+			if (stopped) break;
+			try {
+				pollFile(name);
+			} catch {}
+		}
+		if (intervalMs !== void 0) follower?.settle();
+		else if (!contextTimer && follower?.pending()) {
+			follower.settle();
+			contextTimer = setTimeout(settleContext, 500);
+		}
+	}
+	function settleContext() {
+		if (stopped) return;
+		poll();
+		contextTimer = void 0;
+		if (stopped) return;
 		follower?.settle();
+		if (follower?.pending()) contextTimer = setTimeout(settleContext, 500);
+	}
+	let watcher;
+	let directory;
+	let scheduled;
+	let repairTimer;
+	function closeWatch() {
+		const previous = watcher;
+		watcher = void 0;
+		directory = void 0;
+		previous?.close();
+	}
+	function schedulePoll() {
+		if (stopped || scheduled) return;
+		scheduled = setImmediate(() => {
+			scheduled = void 0;
+			poll();
+		});
+	}
+	function sameDirectory() {
+		if (!watcher || !directory) return false;
+		try {
+			const current = statSync(dir);
+			return current.dev === directory.dev && current.ino === directory.ino;
+		} catch {
+			return false;
+		}
+	}
+	function attachWatch() {
+		if (stopped || watcher) return false;
+		try {
+			const current = statSync(dir);
+			const next = watch(dir, { persistent: false }, (event) => {
+				if (stopped) return;
+				if (event === "rename" && !sameDirectory()) {
+					closeWatch();
+					armRepair(attachWatch() ? 500 : void 0);
+				}
+				schedulePoll();
+			});
+			watcher = next;
+			directory = current;
+			const lost = () => {
+				if (watcher !== next) return;
+				closeWatch();
+				armRepair();
+			};
+			next.once("error", lost);
+			next.once("close", lost);
+			return true;
+		} catch {}
+		return false;
+	}
+	function armRepair(delay = watcher ? 1e4 : 500) {
+		clearTimeout(repairTimer);
+		if (stopped) return;
+		repairTimer = setTimeout(() => {
+			let attached = false;
+			if (!sameDirectory()) {
+				closeWatch();
+				attached = attachWatch();
+			}
+			poll();
+			armRepair(attached ? 500 : void 0);
+		}, delay);
+	}
+	const timer = intervalMs === void 0 ? void 0 : setInterval(poll, intervalMs);
+	if (intervalMs === void 0) {
+		attachWatch();
+		poll();
+		armRepair(500);
 	}
-	const timer = setInterval(poll, intervalMs);
 	return function stop() {
+		if (stopped) return;
+		stopped = true;
 		clearInterval(timer);
+		clearTimeout(repairTimer);
+		clearTimeout(contextTimer);
+		clearImmediate(scheduled);
+		closeWatch();
 		follower?.flush();
 	};
 }
@@ -2912,6 +3434,378 @@ function sortByTs(records) {
 	});
 }
 //#endregion
+//#region state/log-reader.ts
+const BLOCK_BYTES = 65536;
+const MAX_CACHED_GENERATIONS = 512;
+const NEWLINE = 10;
+const VALIDATE_BYTES = 256;
+const cache = /* @__PURE__ */ new Map();
+const indexing = /* @__PURE__ */ new Map();
+function tsKey(record) {
+	return typeof record.ts === "number" && Number.isFinite(record.ts) ? record.ts : Infinity;
+}
+function compare(a, b) {
+	return a.ts - b.ts || a.rank - b.rank || a.generation - b.generation || a.position - b.position;
+}
+function markerTs(record) {
+	const ts = tsKey(record);
+	return ts === Infinity ? -Infinity : ts;
+}
+function keepNewer(markers, key, marker) {
+	const known = markers.get(key);
+	if (!known || markerTs(marker) > markerTs(known)) markers.set(key, marker);
+}
+function markerKey(record) {
+	const platform = record.src === "metro" ? bundleMarkerPlatform(record) : typeof record.platform === "string" ? record.platform : null;
+	const ts = tsKey(record);
+	return {
+		key: JSON.stringify([
+			record.src ?? null,
+			record.slot === void 0 ? 0 : [record.slot],
+			platform
+		]),
+		marker: {
+			src: record.src,
+			marker: true,
+			...ts === Infinity ? {} : { ts },
+			...record.slot === void 0 ? {} : { slot: record.slot },
+			...platform === null ? {} : { platform }
+		}
+	};
+}
+function emptyIndex() {
+	return {
+		size: 0,
+		head: Buffer.alloc(0),
+		tail: Buffer.alloc(0),
+		blocks: [],
+		minTs: null,
+		markers: /* @__PURE__ */ new Map(),
+		launchAttempts: [],
+		slots: /* @__PURE__ */ new Set()
+	};
+}
+function indexBlock(index, buffer, start) {
+	let maxTs = -Infinity;
+	let minTs = Infinity;
+	const sources = /* @__PURE__ */ new Set();
+	const levels = /* @__PURE__ */ new Set();
+	for (let lineStart = 0; lineStart < buffer.length;) {
+		const lineEnd = buffer.indexOf(NEWLINE, lineStart);
+		const record = parseNdjsonLine(buffer.toString("utf8", lineStart, lineEnd));
+		if (record) {
+			const value = tsKey(record);
+			maxTs = Math.max(maxTs, value);
+			minTs = Math.min(minTs, value);
+			if (value !== Infinity && (index.minTs === null || value < index.minTs)) index.minTs = value;
+			sources.add(record.src);
+			levels.add(record.level);
+			index.slots.add(record.slot ?? "default");
+			if (record.marker === true) {
+				const { key, marker } = markerKey(record);
+				keepNewer(index.markers, key, marker);
+			}
+			if (record.event === "launch_attempt") index.launchAttempts.push({
+				record,
+				position: start + lineStart
+			});
+		}
+		lineStart = lineEnd + 1;
+	}
+	return {
+		start,
+		end: start + buffer.length,
+		maxTs,
+		minTs,
+		sources,
+		levels
+	};
+}
+async function read(handle, position, length) {
+	const buffer = Buffer.allocUnsafe(length);
+	let filled = 0;
+	while (filled < length) {
+		const { bytesRead } = await handle.read(buffer, filled, length - filled, position + filled);
+		if (bytesRead === 0) break;
+		filled += bytesRead;
+	}
+	return buffer.subarray(0, filled);
+}
+async function stillExtends(handle, index, size) {
+	if (size < index.size) return false;
+	const head = await read(handle, 0, index.head.length);
+	const tail = await read(handle, index.size - index.tail.length, index.tail.length);
+	return head.equals(index.head) && tail.equals(index.tail);
+}
+function resumeFrom(index) {
+	const last = index.blocks.at(-1);
+	if (!last || last.end - last.start >= BLOCK_BYTES) return {
+		...index,
+		blocks: [...index.blocks]
+	};
+	return {
+		...index,
+		size: last.start,
+		blocks: index.blocks.slice(0, -1),
+		launchAttempts: index.launchAttempts.filter((attempt) => attempt.position < last.start)
+	};
+}
+async function indexGeneration(handle, identity, size, signal) {
+	signal?.throwIfAborted();
+	const pending = indexing.get(identity);
+	if (pending) {
+		await new Promise((resolve, reject) => {
+			const cancel = () => reject(signal?.reason);
+			signal?.addEventListener("abort", cancel, { once: true });
+			if (signal?.aborted) cancel();
+			pending.then(() => resolve(), () => resolve()).finally(() => signal?.removeEventListener("abort", cancel));
+		});
+		return indexGeneration(handle, identity, size, signal);
+	}
+	const building = buildGenerationIndex(handle, identity, size, signal);
+	indexing.set(identity, building);
+	try {
+		return await building;
+	} finally {
+		indexing.delete(identity);
+	}
+}
+async function buildGenerationIndex(handle, identity, size, signal) {
+	signal?.throwIfAborted();
+	const cached = cache.get(identity);
+	const known = cached && await stillExtends(handle, cached, size) ? cached : null;
+	if (known && known.size === size) {
+		cache.delete(identity);
+		cache.set(identity, known);
+		return known;
+	}
+	const index = known ? resumeFrom(known) : emptyIndex();
+	const next = {
+		...index,
+		markers: new Map(index.markers),
+		launchAttempts: [...index.launchAttempts],
+		slots: new Set(index.slots)
+	};
+	let offset = next.size;
+	let length = BLOCK_BYTES;
+	while (offset < size) {
+		signal?.throwIfAborted();
+		const buffer = await read(handle, offset, Math.min(length, size - offset));
+		const end = buffer.lastIndexOf(NEWLINE);
+		if (end === -1) {
+			if (buffer.length < Math.min(length, size - offset) || offset + buffer.length >= size) break;
+			length *= 2;
+			continue;
+		}
+		next.blocks.push(indexBlock(next, buffer.subarray(0, end + 1), offset));
+		offset += end + 1;
+		length = BLOCK_BYTES;
+		signal?.throwIfAborted();
+		await setImmediate$1();
+	}
+	next.size = offset;
+	next.head = await read(handle, 0, Math.min(VALIDATE_BYTES, offset));
+	next.tail = await read(handle, Math.max(0, offset - VALIDATE_BYTES), Math.min(VALIDATE_BYTES, offset));
+	cache.delete(identity);
+	cache.set(identity, next);
+	while (cache.size > MAX_CACHED_GENERATIONS) cache.delete(cache.keys().next().value);
+	return next;
+}
+/**
+* Opens `dir` for reading. With `order: 'timeline'`, native crash files follow every other file at equal
+* timestamps, as `readLogTimeline` orders them; with `'name'`, every file is ranked by name, as `readLogRecords`.
+*/
+async function openLogDir(dir, { order = "timeline", signal } = {}) {
+	signal?.throwIfAborted();
+	let names;
+	try {
+		names = (await readdir(dir, { withFileTypes: true })).filter((entry) => entry.isFile() && entry.name.endsWith(".ndjson")).map((entry) => entry.name).toSorted();
+	} catch {
+		names = [];
+	}
+	const ranked = order === "name" ? names : [...names.filter((name) => !name.startsWith(NATIVE_CRASH_LOG_PREFIX)), ...names.filter((name) => name.startsWith(NATIVE_CRASH_LOG_PREFIX))];
+	const generations = [];
+	const sizes = {};
+	const close = async () => {
+		await Promise.all(generations.map((generation) => generation.handle.close().catch(() => {})));
+	};
+	try {
+		for (const [rank, name] of ranked.entries()) for (const [generation, path] of [rotatedLogPath(join(dir, name)), join(dir, name)].entries()) {
+			let handle;
+			try {
+				handle = await open(path, "r");
+			} catch {
+				continue;
+			}
+			try {
+				const stat = await handle.stat({ bigint: true });
+				const index = await indexGeneration(handle, `${stat.dev}:${stat.ino}`, Number(stat.size), signal);
+				generations.push({
+					handle,
+					rank,
+					generation,
+					crash: name.startsWith(NATIVE_CRASH_LOG_PREFIX),
+					index
+				});
+				if (generation === 1) sizes[name] = index.size;
+			} catch (error) {
+				await handle.close().catch(() => {});
+				throw error;
+			}
+		}
+	} catch (error) {
+		await close();
+		throw error;
+	}
+	let firstTs;
+	for (const { index } of generations) if (index.minTs !== null && (firstTs === void 0 || index.minTs < firstTs)) firstTs = index.minTs;
+	return {
+		sizes,
+		firstTs,
+		launchAttempts: () => generations.filter((generation) => !generation.crash).flatMap(({ index, rank, generation }) => index.launchAttempts.map(({ record, position }) => ({
+			ts: tsKey(record),
+			rank,
+			generation,
+			position,
+			record
+		}))).toSorted(compare).map((entry) => entry.record),
+		query: (query = {}) => queryGenerations(generations, query, signal),
+		batches: (query = {}) => queryBatches(generations, query, signal),
+		filter: (query = {}) => planLogQuery(generationMarkers(generations), query).matches,
+		close
+	};
+}
+function blockMatches(block, { errorsOnly, minLevel, sources }) {
+	if (errorsOnly && !block.levels.has("error") && !block.levels.has("fatal")) return false;
+	if (minLevel && ![...block.levels].some((level) => levelRank(level) >= levelRank(minLevel))) return false;
+	return !sources?.length || sources.some((source) => block.sources.has(source)) || Boolean(errorsOnly && block.sources.has("device"));
+}
+async function select(generations, extra, { matches, excludesUpTo, mayContain, tail, first = false }, signal) {
+	if (tail !== void 0 && tail <= 0) return [];
+	const heap = new BoundedSelection(compare, tail, first);
+	const extraRank = generations.length ? Math.max(...generations.map((generation) => generation.rank)) + 1 : 0;
+	for (const [position, record] of extra.entries()) {
+		const entry = {
+			ts: tsKey(record),
+			rank: extraRank,
+			generation: 0,
+			position,
+			record
+		};
+		if (matches(record, entry)) heap.keep(entry);
+	}
+	const blocks = generations.flatMap((generation) => generation.index.blocks.map((block) => ({
+		generation,
+		block
+	}))).toSorted((a, b) => (first ? a.block.minTs - b.block.minTs : b.block.maxTs - a.block.maxTs) || 0);
+	for (const { generation, block } of blocks) {
+		if (excludesUpTo(block.maxTs)) {
+			if (first) continue;
+			break;
+		}
+		if (first && tail !== void 0 && heap.size >= tail && block.minTs > heap.peek().ts) break;
+		if (!first && tail !== void 0 && heap.size >= tail && block.maxTs < heap.peek().ts) break;
+		signal?.throwIfAborted();
+		if (!mayContain(block, generation)) continue;
+		const buffer = await read(generation.handle, block.start, block.end - block.start);
+		for (let lineStart = 0; lineStart < buffer.length;) {
+			const lineEnd = buffer.indexOf(NEWLINE, lineStart);
+			if (lineEnd === -1) break;
+			const record = parseNdjsonLine(buffer.toString("utf8", lineStart, lineEnd));
+			const position = block.start + lineStart;
+			lineStart = lineEnd + 1;
+			if (!record) continue;
+			const entry = {
+				ts: tsKey(record),
+				rank: generation.rank,
+				generation: generation.generation,
+				position,
+				record
+			};
+			if (matches(record, entry)) heap.keep(entry);
+		}
+		await setImmediate$1();
+	}
+	return heap.sorted();
+}
+function generationMarkers(generations) {
+	const markers = /* @__PURE__ */ new Map();
+	for (const { index } of generations) for (const [key, marker] of index.markers) keepNewer(markers, key, marker);
+	return [...markers.values()];
+}
+async function selectQuery(generations, { tail, extra = [], ...options }, signal, page) {
+	signal?.throwIfAborted();
+	const slots = /* @__PURE__ */ new Set(["default"]);
+	for (const { index } of generations) for (const slot of index.slots) slots.add(slot);
+	for (const record of extra) slots.add(record.slot ?? "default");
+	const plan = planLogQuery([...generationMarkers(generations), ...extra.filter((record) => record.marker === true)], options);
+	return select(generations, extra, {
+		matches: (record, entry) => plan.matches(record) && (!page?.after || compare(entry, page.after) > 0),
+		excludesUpTo: (maxTs) => plan.excludesUpTo(maxTs, slots),
+		mayContain: (block, generation) => blockMatches(block, options) && (!page?.after || compare({
+			ts: block.maxTs,
+			rank: generation.rank,
+			generation: generation.generation,
+			position: block.end
+		}, page.after) > 0),
+		tail: page?.size ?? tail,
+		first: page !== void 0
+	}, signal);
+}
+async function queryGenerations(generations, query, signal) {
+	return withErrorContext(generations, query, await selectQuery(generations, query, signal), signal);
+}
+async function* queryBatches(generations, query, signal) {
+	const fixed = {
+		...query,
+		now: query.now ?? Date.now()
+	};
+	let after;
+	for (;;) {
+		const selected = await selectQuery(generations, fixed, signal, {
+			after,
+			size: 500
+		});
+		if (!selected.length) return;
+		yield await withErrorContext(generations, fixed, selected, signal);
+		after = selected.at(-1);
+	}
+}
+async function withErrorContext(generations, { extra = [], ...options }, selected, signal) {
+	const matched = selected.map((entry) => entry.record);
+	if (!options.errorsOnly) return matched;
+	const errors = matched.filter((record) => record.src === "metro" && record.raw === true && (record.level === "error" || record.level === "fatal") && typeof record.msg === "string");
+	if (!errors.length) return matched;
+	const contextual = /* @__PURE__ */ new Map();
+	for (const error of errors) {
+		const [first] = await select(generations, extra, {
+			matches: (record) => record.ts === error.ts && record.src === error.src && record.msg === error.msg && record.event === error.event,
+			excludesUpTo: (maxTs) => maxTs < tsKey(error),
+			mayContain: (block) => block.sources.has("metro"),
+			tail: 1,
+			first: true
+		}, signal);
+		if (!first) continue;
+		let limit = 32;
+		for (;;) {
+			const stream = (await select(generations, extra, {
+				matches: (record, entry) => compare(entry, first) >= 0 && record.src === "metro" && record.event === error.event && tsKey(record) >= tsKey(error) && (record.raw === true || record.ts === error.ts && record.msg === error.msg),
+				excludesUpTo: (maxTs) => maxTs < tsKey(error),
+				mayContain: (block) => block.sources.has("metro"),
+				tail: limit,
+				first: true
+			}, signal)).map((entry) => entry.record);
+			const index = stream.findIndex((record) => record.ts === error.ts && record.msg === error.msg);
+			if (index < 0 || stream.slice(index + 1).some((record) => record.raw === true && !isExpoErrorContext(record, error.event)) || stream.length < limit) {
+				contextual.set(error, attachExpoErrorContext(stream, [error], "field")[0]);
+				break;
+			}
+			limit *= 2;
+		}
+	}
+	return matched.map((record) => contextual.get(record) ?? record);
+}
+//#endregion
 //#region state/recordings.ts
 /** The footage stim-server keeps per device: the last 15 minutes recorded, however long ago. */
 const RECORDING_FOOTAGE_MS = 9e5;
@@ -2944,44 +3838,105 @@ function listDir(dir) {
 		return [];
 	}
 }
+async function listDirAsync(dir, signal) {
+	signal?.throwIfAborted();
+	try {
+		const names = await readdir(dir);
+		signal?.throwIfAborted();
+		return names;
+	} catch {
+		signal?.throwIfAborted();
+		return [];
+	}
+}
+function segmentName(name, closedOnly) {
+	const closed = SEGMENT.exec(name);
+	const part = closed ? null : PART.exec(name);
+	if (!closed && (closedOnly || !part)) return null;
+	const start = Number((closed ?? part)[1]);
+	return {
+		start,
+		end: closed ? Math.max(start, Number(closed[2])) : null
+	};
+}
+function segmentRecord(file, range, metadata) {
+	return {
+		file,
+		start: range.start,
+		end: range.end ?? Math.max(range.start, Math.floor(metadata.mtimeMs)),
+		bytes: metadata.size,
+		open: range.end === null
+	};
+}
+function deviceName(name) {
+	const match = DEVICE.exec(name);
+	return match ? {
+		platform: match[1],
+		slot: match[2]
+	} : null;
+}
 /** The segments in one device directory, oldest first. Files that are not segments are left out; `closedOnly` excludes files still being written. */
 function listSegments(dir, closedOnly = false) {
 	const segments = [];
 	for (const name of listDir(dir)) {
-		const closed = SEGMENT.exec(name);
-		const part = closed ? null : PART.exec(name);
-		if (!closed && (closedOnly || !part)) continue;
-		let stat;
+		const range = segmentName(name, closedOnly);
+		if (!range) continue;
+		const file = join(dir, name);
+		try {
+			segments.push(segmentRecord(file, range, statSync(file)));
+		} catch {}
+	}
+	return segments.toSorted((a, b) => a.start - b.start);
+}
+/** Reads current segment files asynchronously, oldest first; cancellation propagates. */
+async function listSegmentsAsync(dir, closedOnly = false, signal) {
+	const segments = [];
+	for (const name of await listDirAsync(dir, signal)) {
+		signal?.throwIfAborted();
+		const range = segmentName(name, closedOnly);
+		if (!range) continue;
+		const file = join(dir, name);
 		try {
-			stat = statSync(join(dir, name));
+			const metadata = await stat(file);
+			signal?.throwIfAborted();
+			segments.push(segmentRecord(file, range, metadata));
 		} catch {
-			continue;
+			signal?.throwIfAborted();
 		}
-		const start = Number((closed ?? part)[1]);
-		segments.push({
-			file: join(dir, name),
-			start,
-			end: closed ? Math.max(start, Number(closed[2])) : Math.max(start, Math.floor(stat.mtimeMs)),
-			bytes: stat.size,
-			open: part !== null
-		});
 	}
+	signal?.throwIfAborted();
 	return segments.toSorted((a, b) => a.start - b.start);
 }
 /** Every device slot recorded under a workspace's recordings directory. */
 function listRecordedDevices(recordingsDir, closedOnly = false) {
 	return listDir(recordingsDir).flatMap((name) => {
-		const match = DEVICE.exec(name);
-		if (!match) return [];
+		const device = deviceName(name);
+		if (!device) return [];
 		const dir = join(recordingsDir, name);
 		return [{
-			platform: match[1],
-			slot: match[2],
+			...device,
 			dir,
 			segments: listSegments(dir, closedOnly)
 		}];
 	});
 }
+/** Reads current device slots and their segment files asynchronously; cancellation propagates. */
+async function listRecordedDevicesAsync(recordingsDir, closedOnly = false, signal) {
+	const devices = [];
+	for (const name of await listDirAsync(recordingsDir, signal)) {
+		signal?.throwIfAborted();
+		const device = deviceName(name);
+		if (!device) continue;
+		const dir = join(recordingsDir, name);
+		devices.push({
+			...device,
+			dir,
+			segments: await listSegmentsAsync(dir, closedOnly, signal)
+		});
+	}
+	signal?.throwIfAborted();
+	return devices;
+}
 function recordedBytes(devices) {
 	return devices.reduce((sum, device) => sum + device.segments.reduce((total, s) => total + s.bytes, 0), 0);
 }
@@ -3042,10 +3997,13 @@ function validRunId(value) {
 }
 let current = null;
 /**
-* The id of this CLI invocation: `STIM_RUN_ID` when it holds a valid id (Stim Desktop passes one), else a random one.
-* The CLI entry exports it back to `STIM_RUN_ID` so processes the run starts inherit it; this function does not.
+* The run id of the ambient operation context, else of this CLI invocation: `STIM_RUN_ID` when it holds a valid id
+* (Stim Desktop passes one), else a random one. The CLI entry exports it back to `STIM_RUN_ID` so processes the run
+* starts inherit it; this function does not.
 */
 function runId(env = process.env) {
+	const context = ambientContext();
+	if (context) return context.runId;
 	if (current === null) current = validRunId(env["STIM_RUN_ID"]) ?? randomBytes(6).toString("hex");
 	return current;
 }
@@ -3348,12 +4306,16 @@ function readPullRequestCache(path) {
 	if (typeof entry.checkedAt !== "string") return null;
 	const pullRequest = pullRequestOf(entry.pullRequest);
 	if (pullRequest === void 0) return null;
+	const { containsHead, endedAt } = entry;
 	return {
 		path,
 		branch: entry.branch,
 		head: entry.head,
 		checkedAt: entry.checkedAt,
-		pullRequest
+		pullRequest,
+		...typeof containsHead === "boolean" ? { containsHead } : {},
+		...endedAt === null || typeof endedAt === "number" && Number.isFinite(endedAt) ? { endedAt } : {},
+		...entry.partial === true ? { partial: true } : {}
 	};
 }
 /** The cached size of the folder at `path`, or null before it was measured. */
@@ -3453,7 +4415,7 @@ function readAgentSessionsCache() {
 //#region state/stim-build.ts
 /**
 * A digest of Stim's built code: the first 16 hex characters of the sha256 over the sorted `*.mjs` names and
-* bytes of a `stim` `dist` directory. A client and a remote Mac offload only when both compute the same one.
+* bytes of a `stim` `dist` directory. A client and a remote machine offload only when both compute the same one.
 */
 function stimBuildDigest(dir) {
 	try {
@@ -3718,7 +4680,22 @@ function lastUseFrom(state, logMtimes) {
 	return candidates.length ? Math.max(...candidates) : NaN;
 }
 const MAINTENANCE_LOG_NAME = "maintenance.ndjson";
+/**
+* When the workspace was last used, in epoch milliseconds. A workspace that recorded no use falls back to the mtime
+* of its workspace.json, which is written once when the workspace is created, so it is a lower bound on the last
+* use. NaN when its state.json exists but does not parse, or when workspace.json cannot be read either.
+*/
 function workspaceLastUsed(root) {
+	const used = recordedLastUse(root);
+	if (Number.isFinite(used)) return used;
+	if (existsSync(workspaceStateFile(root)) && readWorkspaceState(root) === null) return NaN;
+	try {
+		return statSync(workspaceMetadataFile(root)).mtimeMs;
+	} catch {
+		return NaN;
+	}
+}
+function recordedLastUse(root) {
 	const logs = workspaceLogsDir(root);
 	let mtimes = [];
 	try {
@@ -3796,7 +4773,7 @@ function readViewedDevices(dir = deviceViewersDir()) {
 //#endregion
 //#region state/stats.ts
 const STATS_VERSION = 1;
-/** Where a compiling build ran: here, on a remote Mac, or here after offloading it failed. */
+/** Where a compiling build ran: here, on a remote machine, or here after offloading it failed. */
 const PLACEMENT_DECISIONS = [
 	"here",
 	"offloaded",
@@ -3944,7 +4921,7 @@ function normalize(record) {
 	const source = record.projects;
 	if (source && typeof source === "object" && !Array.isArray(source)) for (const [key, scope] of Object.entries(source)) projects[key] = normalizeScope(scope);
 	const history = {};
-	if (isObject(record.history)) for (const [key, scope] of Object.entries(record.history)) {
+	if (isJsonObject(record.history)) for (const [key, scope] of Object.entries(record.history)) {
 		const normalized = normalizeHistory(scope);
 		if (Object.keys(normalized).length) history[key] = normalized;
 	}
@@ -3952,8 +4929,8 @@ function normalize(record) {
 	const capacityRefusals = Array.isArray(record.capacityRefusals) ? record.capacityRefusals.flatMap(normalizeCapacityRefusal) : [];
 	const capacityWaits = Array.isArray(record.capacityWaits) ? record.capacityWaits.flatMap(normalizeCapacityWait) : [];
 	const buildMachines = {};
-	if (isObject(record.buildMachines)) {
-		for (const [name, totals] of Object.entries(record.buildMachines)) if (isObject(totals)) buildMachines[name] = normalizeMachineTotals(totals);
+	if (isJsonObject(record.buildMachines)) {
+		for (const [name, totals] of Object.entries(record.buildMachines)) if (isJsonObject(totals)) buildMachines[name] = normalizeMachineTotals(totals);
 	}
 	return {
 		version: 1,
@@ -3967,7 +4944,7 @@ function normalize(record) {
 	};
 }
 function normalizePlacement(value) {
-	if (!isObject(value)) return [];
+	if (!isJsonObject(value)) return [];
 	const { decision, platform, reason, project, machine } = value;
 	if (!PLACEMENT_DECISIONS.includes(decision) || !PLATFORMS.includes(platform)) return [];
 	if (typeof reason !== "string" || typeof project !== "string") return [];
@@ -3990,7 +4967,7 @@ function normalizePlacement(value) {
 	}];
 }
 function normalizeCapacityRefusal(value) {
-	if (!isObject(value)) return [];
+	if (!isJsonObject(value)) return [];
 	const { at, kind, platform, max, workspace } = value;
 	if (kind !== "device" || !PLATFORMS.includes(platform)) return [];
 	if (typeof at !== "string" || !Number.isFinite(Date.parse(at))) return [];
@@ -4005,7 +4982,7 @@ function normalizeCapacityRefusal(value) {
 	}];
 }
 function normalizeCapacityWait(value) {
-	if (!isObject(value) || value.kind !== "device-wait") return [];
+	if (!isJsonObject(value) || value.kind !== "device-wait") return [];
 	const refusal = normalizeCapacityRefusal({
 		...value,
 		kind: "device"
@@ -4029,20 +5006,17 @@ function normalizeMachineTotals(totals) {
 		...typeof totals.lastFallbackAt === "string" ? { lastFallbackAt: totals.lastFallbackAt } : {}
 	};
 }
-function isObject(value) {
-	return Boolean(value) && typeof value === "object" && !Array.isArray(value);
-}
 function normalizeHistory(scope) {
 	const history = {};
-	if (!isObject(scope)) return history;
+	if (!isJsonObject(scope)) return history;
 	for (const platform of PLATFORMS) {
 		const lists = scope[platform];
-		if (!isObject(lists)) continue;
+		if (!isJsonObject(lists)) continue;
 		const normalized = {};
 		for (const outcome of OUTCOMES) {
 			const samples = lists[outcome];
 			if (!Array.isArray(samples)) continue;
-			const kept = samples.filter(isObject).flatMap((sample) => {
+			const kept = samples.filter(isJsonObject).flatMap((sample) => {
 				const durationMs = wholeMs(sample.durationMs);
 				if (durationMs <= 0) return [];
 				return [{
@@ -4060,7 +5034,7 @@ function normalizeHistory(scope) {
 }
 function wholePhases(phases) {
 	const out = {};
-	if (!isObject(phases)) return out;
+	if (!isJsonObject(phases)) return out;
 	for (const [name, ms] of Object.entries(phases)) {
 		const value = Number(ms);
 		if (Number.isFinite(value) && value >= 0) out[name] = Math.round(value);
@@ -4187,6 +5161,8 @@ const DEVICE_HOST_LIMITS = {
 	logsMs: 15e3,
 	killGraceMs: 5e3
 };
+/** How many parked sessions one reserve inspects, and possibly retires, before it creates a device. */
+const HOSTED_PARKED_CANDIDATES = 3;
 /** How long a cancelled hosted worker run can take to settle: SIGTERM, SIGKILL after the grace, then it is abandoned. */
 function hostedWorkerSettleMs(limits = DEVICE_HOST_LIMITS) {
 	return limits.killGraceMs * 2;
@@ -4570,6 +5546,10 @@ function parseMacosRecord(value) {
 			startedAt: b.startedAt,
 			...typeof b.finishedAt === "string" ? { finishedAt: b.finishedAt } : {},
 			...typeof b.durationMs === "number" ? { durationMs: b.durationMs } : {},
+			...typeof b.fingerprint === "string" ? { fingerprint: b.fingerprint } : {},
+			...typeof b.cacheKey === "string" ? { cacheKey: b.cacheKey } : {},
+			...typeof b.cacheHit === "boolean" ? { cacheHit: b.cacheHit } : {},
+			...b.cacheSource === "local" || b.cacheSource === "provider" || b.cacheSource === "peer" ? { cacheSource: b.cacheSource } : {},
 			...typeof b.error === "string" ? { error: b.error } : {},
 			...typeof b.buildMachine === "string" ? { buildMachine: b.buildMachine } : {},
 			...typeof b.builtOn === "string" ? { builtOn: b.builtOn } : {},
@@ -4845,7 +5825,14 @@ const KINDS = [
 	"would-stop-workspace",
 	"would-remove-worktree",
 	"would-remove-orphan",
-	"would-unregister-cache"
+	"would-unregister-cache",
+	"would-delete-parked-device",
+	"would-delete-devices",
+	"would-clear-build-dirs",
+	"would-delete-dependencies",
+	"would-stop-gradle-daemons",
+	"would-delete-gradle-version",
+	"would-delete-temp-leftovers"
 ];
 /** Rejects missing, corrupt or unsupported payloads without throwing. */
 function parseMaintenanceState(value) {
@@ -4859,13 +5846,14 @@ function parseMaintenanceState(value) {
 		"metro-cache",
 		"compilation-cache",
 		"ccache",
+		"owned-devices",
 		"other"
 	].includes(String(size.category)) && (size.workspace === void 0 || typeof size.workspace === "string") && (size.blocked === void 0 || typeof size.blocked === "string") && (size.idleDays === void 0 || nullableNumber(size.idleDays)))) return null;
 	if (!Array.isArray(value.plan) || !value.plan.every((action) => isJsonObject(action) && KINDS.includes(String(action.kind)) && typeof action.target === "string" && finite(action.bytes) && typeof action.reason === "string" && (action.workspace === void 0 || typeof action.workspace === "string") && (action.dir === void 0 || typeof action.dir === "string") && (action.olderThanDays === void 0 || finite(action.olderThanDays)) && (action.check === void 0 || [
 		"worktree",
 		"sweep",
 		"disk"
-	].includes(String(action.check))))) return null;
+	].includes(String(action.check))) && (action.level === void 0 || action.level === 2 || action.level === 3))) return null;
 	if (!Array.isArray(value.recent) || !value.recent.every((record) => isJsonObject(record) && record.src === "maintenance" && finite(record.ts) && typeof record.msg === "string" && [
 		"debug",
 		"info",
@@ -4881,7 +5869,12 @@ function parseMaintenanceState(value) {
 	if (value.lastPass !== null && (!isJsonObject(value.lastPass) || !finite(value.lastPass.startedAt) || !finite(value.lastPass.durationMs) || typeof value.lastPass.trigger !== "string" || value.lastPass.mode !== "report" && value.lastPass.mode !== "on" || !finite(value.lastPass.freedBytes) || value.lastPass.stopped !== 0 || !finite(value.lastPass.actions) || !strings(value.lastPass.blocked))) return null;
 	if (value.pressure !== null) {
 		const pressure = value.pressure;
-		if (!isJsonObject(pressure) || !Array.isArray(pressure.disk) || !pressure.disk.every((disk) => isJsonObject(disk) && typeof disk.volume === "string" && finite(disk.freeMb)) || !nullableNumber(pressure.warningSince) || !isJsonObject(pressure.memory) || ![
+		if (!isJsonObject(pressure) || !Array.isArray(pressure.disk) || !pressure.disk.every((disk) => isJsonObject(disk) && typeof disk.volume === "string" && finite(disk.freeMb)) || !nullableNumber(pressure.warningSince) || pressure.diskLevel !== void 0 && ![
+			0,
+			1,
+			2,
+			3
+		].some((level) => level === pressure.diskLevel) || !isJsonObject(pressure.memory) || ![
 			null,
 			"normal",
 			"warning",
@@ -4899,8 +5892,8 @@ function readMaintenanceAttempt() {
 }
 //#endregion
 //#region state/agent-device.ts
-function agentDeviceStateDirs(home = homedir()) {
-	const override = process.env.AGENT_DEVICE_STATE_DIR?.trim();
+function agentDeviceStateDirs(home = ambientEnv().HOME || ambientEnv().USERPROFILE || homedir(), env = ambientEnv()) {
+	const override = env.AGENT_DEVICE_STATE_DIR?.trim();
 	const dirs = /* @__PURE__ */ new Set([override ? resolve(override) : join(home, ".agent-device")]);
 	const workspaces = join(configDir(), "workspaces");
 	try {
@@ -4913,6 +5906,20 @@ function agentDeviceStateDirs(home = homedir()) {
 	} catch {}
 	return [...dirs];
 }
+async function agentDeviceStateDirsAsync(home = ambientEnv().HOME || ambientEnv().USERPROFILE || homedir(), env = ambientEnv()) {
+	const override = env.AGENT_DEVICE_STATE_DIR?.trim();
+	const dirs = /* @__PURE__ */ new Set([override ? resolve(override) : join(home, ".agent-device")]);
+	const workspaces = join(configDir(), "workspaces");
+	try {
+		for (const name of await readdir(workspaces)) {
+			const dir = join(workspaces, name, "agent-device");
+			try {
+				if ((await stat(dir)).isDirectory()) dirs.add(dir);
+			} catch {}
+		}
+	} catch {}
+	return [...dirs];
+}
 //#endregion
 //#region state/archive.ts
 function readArchives() {
@@ -4925,7 +5932,29 @@ function readArchives() {
 	return names.flatMap((name) => {
 		const archive = readArchive(name);
 		return archive ? [archive] : [];
-	}).toSorted((a, b) => Date.parse(b.removedAt) - Date.parse(a.removedAt) || b.id.localeCompare(a.id));
+	}).toSorted(archiveOrder);
+}
+function archiveOrder(a, b) {
+	return Date.parse(b.removedAt) - Date.parse(a.removedAt) || b.id.localeCompare(a.id);
+}
+/** Reads current archive files asynchronously, outside the synchronous state-read cache; cancellation propagates. */
+async function readArchivesAsync(signal) {
+	signal?.throwIfAborted();
+	let names;
+	try {
+		names = await readdir(archiveRoot());
+	} catch {
+		signal?.throwIfAborted();
+		return [];
+	}
+	const archives = [];
+	for (const name of names) {
+		signal?.throwIfAborted();
+		const archive = await readArchiveAsync(name, signal);
+		if (archive) archives.push(archive);
+	}
+	signal?.throwIfAborted();
+	return archives.toSorted(archiveOrder);
 }
 function readArchive(id) {
 	if (!id || id.startsWith(".") || basename(id) !== id || id.includes("\0")) return null;
@@ -4935,8 +5964,33 @@ function readArchive(id) {
 	} catch {
 		return null;
 	}
-	const record = readJsonObject(join(archiveRoot(), id, "archive.json"));
-	if (!record || record.id !== id || [
+	return archiveRecord(id, readJsonObject(join(archiveRoot(), id, "archive.json")));
+}
+/** Reads a current archive without the synchronous state-read cache; invalid or missing records return null. */
+async function readArchiveAsync(id, signal) {
+	signal?.throwIfAborted();
+	if (!id || id.startsWith(".") || basename(id) !== id || id.includes("\0")) return null;
+	const dir = join(archiveRoot(), id);
+	try {
+		const directory = await lstat(dir);
+		signal?.throwIfAborted();
+		if (!directory.isDirectory()) return null;
+		const file = await lstat(join(dir, "archive.json"));
+		signal?.throwIfAborted();
+		if (!file.isFile()) return null;
+		const text = await readFile(join(dir, "archive.json"), {
+			encoding: "utf8",
+			signal
+		});
+		signal?.throwIfAborted();
+		return archiveRecord(id, JSON.parse(text));
+	} catch {
+		signal?.throwIfAborted();
+		return null;
+	}
+}
+function archiveRecord(id, record) {
+	if (!isJsonObject(record) || record.id !== id || [
 		"projectRoot",
 		"project",
 		"workspace",
@@ -5024,14 +6078,13 @@ const knownKeys = (value, keys) => Object.keys(value).every((key) => keys.includ
 function parseSetupJournal(value) {
 	if (!isJsonObject(value) || !knownKeys(value, [
 		"v",
-		"client",
 		"expiresAt",
 		"capabilities",
 		"steps",
 		"granted",
 		"done",
 		"exit"
-	]) || value.v !== 1 || !isJsonObject(value.client) || !knownKeys(value.client, ["nodeId"]) || !text(value.client.nodeId) || typeof value.expiresAt !== "string" || !Number.isFinite(Date.parse(value.expiresAt)) || !Array.isArray(value.capabilities) || !value.capabilities.every(capability) || !Array.isArray(value.steps) || !value.steps.every((step) => isJsonObject(step) && knownKeys(step, [
+	]) || value.v !== 1 || typeof value.expiresAt !== "string" || !Number.isFinite(Date.parse(value.expiresAt)) || !Array.isArray(value.capabilities) || !value.capabilities.every(capability) || !Array.isArray(value.steps) || !value.steps.every((step) => isJsonObject(step) && knownKeys(step, [
 		"id",
 		"state",
 		"title",
@@ -5057,4 +6110,4 @@ function isSetupJournalPrunable(journal, now) {
 	return Date.parse(journal.expiresAt) + 36e5 < now;
 }
 //#endregion
-export { ACTIVITY_RECENCY_BASES, AGENT_TOOLS, ANDROID_COMPILER_CACHE_CHOICES, ANDROID_EMULATOR_APPS, ANDROID_PCH_CHOICES, APP_PROCESS_STATES, BUILD_HISTORY_KEY, BUILD_HISTORY_LIMIT, BUILD_PHASES, BUILD_RESULTS, CAPACITY_REFUSAL_LIMIT, CAPACITY_REFUSAL_MAX_AGE_MS, DEBUG_ENV, DEVICE_HOST_LIMITS, DEVICE_IDLE_SHUTDOWN_KEY, DEVICE_RECLAIM_REASON, DEV_SERVER_STOP_REQUEST_KEY, ENDED_AGENT_RETENTION_MS, ERROR_SOURCES, HISTORY_LIMIT, HOSTED_AGENT_DRIVERS, HOSTED_APP_CHUNK_BYTES, HOSTED_LOGS_FIRST_BYTES, HOSTED_LOGS_PAGE_BYTES, HOSTED_MACOS_APP_SLOTS, HOSTED_METRO_GATEWAYS_KEY, HOSTED_METRO_REQUESTS_KEY, IDLE_STOP_KEY, IOS_SIMULATOR_APPS, LAST_BUILD_KEYS, LEVELS, MACHINE_OWNER_KINDS, MAINTENANCE_LOG_NAME, MEMORY_SOURCES, NATIVE_BUILD_STEPS, NATIVE_CRASH_LOG_PREFIX, OFFLOAD_MODES, PHYSICAL_DEVICE_CONNECTIONS, PLACEMENT_DECISIONS, READY_PHASE_MS, RECORDING_CAP_BYTES, RECORDING_FOOTAGE_MS, RECORDING_PLATFORMS, REMOTE_DEVICE_BACKENDS, RUN_ID_ENV, SETTINGS, SETTINGS_SCHEMA_FILE, SETTINGS_SCHEMA_URL, SETTING_GROUPS, SETTING_SCOPES, SOURCES, STATS_VERSION, STATUS_ISSUE_CODES, TAILNET_MACHINE_PATTERN, TUNNEL_MODES, TUTORIAL_VERSION, WARM_KEY, WEB_PAGE_STATES, WEB_VIEWPORTS, WORKSPACE_AGENT_KEY, WORKSPACE_PHASES, WORKSPACE_STAGE_KINDS, acceptsShape, advanceTail, agentDeviceStateDirs, agentDeviceUsageFile, agentSessionOf, agentSessionsCacheFile, allMetroPorts, archiveDir, archiveEnabled, archiveLock, archiveRoot, archivedUsage, assertHostedDeviceLedger, attachExpoErrorContext, automaticMachineEnabled, buildCriteria, buildDiagnostics, buildMachinesFile, buildMachinesLock, buildSlotPath, buildSlotsDir, buildWorkerRoot, bundleMarkerPlatform, capDrops, closedSegmentName, coerceSettingText, compileGrep, configCorruptRepair, configLockPath, countErrorEntries, createAgentActionReader, createDebugLog, createdDevicesFile, createdDevicesLock, debugLogDir, debugLoggingEnabled, decodeStats, deviceHostArea, deviceHostMachinesClaims, deviceHostMachinesFile, deviceHostMachinesLock, deviceHostRoot, deviceViewersDir, diskUsageCacheDir, diskUsageCacheFile, diskUsageFailureFile, diskUsageWalkClaims, easMachineStateRoot, easSessionLedgerFile, easSessionLedgerLock, emulatorLogFile, endedAgentSessionOf, endpoint, expectedShape, fileSizes, findEnclosingWorktreeRoot, findPeer, findProjectByMetroPort, findProjectRoot, followLogs, footageDrops, getConcurrencyLimits, getConfigPath, getParkedMax, getProject, getProjectSetting, getProjectSettings, getRepoSettings, gitMergeCacheDir, hostedAndroidDeviceName, hostedAndroidPlacements, hostedAndroidRecords, hostedAndroidStatus, hostedAppArea, hostedAppAttempt, hostedAppBlobs, hostedConsolePort, hostedDeviceId, hostedIosPlacements, hostedIosRecords, hostedIosStatus, hostedMacosAppSlot, hostedMacosBundleId, hostedMacosLogsDir, hostedMetroGateways, hostedMetroRequests, hostedNativeLogsDir, hostedNativeRecords, hostedWorkerSettleMs, isJournalExpired, isJsonObject, isLayeredSetting, isPathPrefix, isSensitiveReference, isSetupJournalPrunable, lastUseFrom, levelRank, linkReplacedArchives, listRecordedDevices, listSegments, listStatusCacheEntries, loadConfig, logFiles, machineCapacity, macosAppState, maintenanceAttemptFile, maintenanceChildLogFile, maintenanceDir, maintenanceNdjsonFile, maintenanceRunClaims, maintenanceStateFile, markerWindow, offloadSummary, openSegmentName, parseHostedAgentAccess, parseHostedAgentGrant, parseHostedAndroidDevice, parseHostedAndroidPlacement, parseHostedAppManifest, parseHostedAppOffer, parseHostedChoice, parseHostedDevice, parseHostedIosPlacement, parseHostedLocalDeviceCount, parseHostedLogsCursor, parseHostedMacosChoice, parseHostedMacosDevice, parseHostedMacosPlacement, parseHostedNativeOffer, parseHostedNativePlacement, parseHostedOfferRequest, parseHostedPlatformDevice, parseHostedRequest, parseMachine, parseMacosRecord, parseMaintenanceState, parseMissReason, parseNdjsonLine, parseNdjsonText, parseSetupJournal, parseSince, pinnedEndpoint, projectRootDirectories, pullRequestCacheDir, pullRequestCacheFile, queryJsonLogs, queryLogs, readAgentDeviceUsage, readAgentDeviceUsageCache, readAgentSessionsCache, readArchive, readArchiveState, readArchives, readBuildDetail, readBuildHistory, readBuildMachines, readCreatedDevices, readDevServerStop, readDevServerStopRequest, readDeviceHostMachines, readDeviceIdleShutdowns, readDevicePlacement, readDiskUsage, readDiskUsageFailure, readEasSessionLedger, readEndedAgentSessions, readHostedApp, readHostedAppMetadata, readHostedDevice, readHostedDeviceLedger, readHostedMacosApp, readHostedNativeLogsCheckpoint, readHostedSessions, readIdleStop, readJsonFile, readJsonObject, readLastBuilds, readLogRecords, readLogTimeline, readLogsSince, readMacosRecord, readMaintenanceAttempt, readMaintenanceState, readNdjsonGenerations, readPullRequestCache, readRunEstimates, readSetupJournal, readStateFile, readStats, readStatsReport, readSwiftpmCacheUsage, readViewedDevices, readWarmRecord, readWorkspaceAgent, readWorkspaceState, recordMatches, recordedBytes, recordingDeviceName, recordingEnabled, rememberHostedAppBlobRename, requireAutomaticMachine, runId, saturation, serverSetupDir, settingDefinition, settingValueError, settingsJsonSchema, setupJournalFile, sharedCcache, sharedCompilationCache, sharedGradle, sharedPods, sortByTs, statsFile, statsProjectKey, stimBuildDigest, supervisorLogFile, supervisorPidFile, swiftpmCacheUsageFile, tailRead, trimCapacityRefusals, trimCapacityWaits, trimSamples, tryAcquireBuildSlotClaim, unreadableHostedAndroid, unreadableHostedIos, unreadableHostedNative, validEasSessionClaim, validHostedAppArguments, validHostedAppBlob, validRunId, validateAutomaticPool, wholePhases, withConfigLock, withDerivedFacts, withGitChip, withStateReadCache, workspaceAgentDeviceDir, workspaceBuildDetailFile, workspaceDerivedData, workspaceEndedAgentsFile, workspaceEndedAgentsLock, workspaceGradleBuild, workspaceLastUsed, workspaceLogErrorIndex, workspaceLogsDir, workspaceMetadataFile, workspaceRecordingsDir, workspaceStateFile, workspaceStateLock };
+export { ACTIVITY_RECENCY_BASES, AGENT_TOOLS, ANDROID_COMPILER_CACHE_CHOICES, ANDROID_EMULATOR_APPS, ANDROID_PCH_CHOICES, APP_PROCESS_STATES, BUILD_HISTORY_KEY, BUILD_HISTORY_LIMIT, BUILD_PHASES, BUILD_RESULTS, CAPACITY_REFUSAL_LIMIT, CAPACITY_REFUSAL_MAX_AGE_MS, DEBUG_ENV, DEVICE_HOST_LIMITS, DEVICE_IDLE_SHUTDOWN_KEY, DEVICE_RECLAIM_REASON, DEV_SERVER_STOP_REQUEST_KEY, ENDED_AGENT_RETENTION_MS, ERROR_SOURCES, HISTORY_LIMIT, HOSTED_AGENT_DRIVERS, HOSTED_APP_CHUNK_BYTES, HOSTED_LOGS_FIRST_BYTES, HOSTED_LOGS_PAGE_BYTES, HOSTED_MACOS_APP_SLOTS, HOSTED_METRO_GATEWAYS_KEY, HOSTED_METRO_REQUESTS_KEY, HOSTED_PARKED_CANDIDATES, IDLE_STOP_KEY, IOS_SIMULATOR_APPS, KeyedEntities, LAST_BUILD_KEYS, LEVELS, MACHINE_CREDENTIALS_VERSION, MACHINE_OWNER_KINDS, MAINTENANCE_LOG_NAME, MEMORY_SOURCES, NATIVE_BUILD_STEPS, NATIVE_CRASH_LOG_PREFIX, OFFLOAD_MODES, PHYSICAL_DEVICE_CONNECTIONS, PLACEMENT_DECISIONS, READY_PHASE_MS, RECORDING_CAP_BYTES, RECORDING_FOOTAGE_MS, RECORDING_PLATFORMS, REMOTE_DEVICE_BACKENDS, RUN_ID_ENV, SETTINGS, SETTINGS_SCHEMA_FILE, SETTINGS_SCHEMA_URL, SETTING_GROUPS, SETTING_SCOPES, SOURCES, STATS_VERSION, STATUS_ISSUE_CODES, SUMMARY_ARCHIVES, TAILNET_MACHINE_PATTERN, TUNNEL_MODES, TUTORIAL_VERSION, WARM_KEY, WEB_PAGE_STATES, WEB_VIEWPORTS, WORKSPACE_AGENT_KEY, WORKSPACE_PHASES, WORKSPACE_STAGE_KINDS, acceptsShape, advanceTail, agentDeviceStateDirs, agentDeviceStateDirsAsync, agentDeviceUsageFile, agentSessionOf, agentSessionsCacheFile, allMetroPorts, applyKeyedDelta, archiveDir, archiveEnabled, archiveLock, archiveRoot, archivedUsage, assertHostedDeviceLedger, attachExpoErrorContext, automaticMachineEnabled, buildCriteria, buildDiagnostics, buildMachinesFile, buildMachinesLock, buildSlotPath, buildSlotsDir, buildWorkerRoot, bundleMarkerPlatform, cannotHost, capDrops, clientIdentity, clientIdentityKeyFile, closedSegmentName, coerceSettingText, compileGrep, configCorruptRepair, configLockPath, countErrorEntries, createAgentActionReader, createAsyncAgentActionReader, createDebugLog, createdDevicesFile, createdDevicesLock, debugLogDir, debugLoggingEnabled, decodeStats, deviceHostArea, deviceHostMachinesClaims, deviceHostMachinesFile, deviceHostMachinesLock, deviceHostRoot, deviceViewersDir, diskUsageCacheDir, diskUsageCacheFile, diskUsageFailureFile, diskUsageWalkClaims, easMachineStateRoot, easSessionLedgerFile, easSessionLedgerLock, emulatorLogFile, endedAgentSessionOf, endpoint, expectedShape, fileSizes, findEnclosingWorktreeRoot, findPeer, findProjectRoot, followLogs, footageDrops, getConcurrencyLimits, getConfigPath, getParkedMax, getProject, getProjectSettings, getRepoSettings, gitMergeCacheDir, hostedAgentDriverName, hostedAndroidDeviceName, hostedAndroidPlacements, hostedAndroidRecords, hostedAndroidStatus, hostedAppArea, hostedAppAttempt, hostedAppBlobs, hostedConsolePort, hostedDeviceId, hostedIosPlacements, hostedIosRecords, hostedIosStatus, hostedMacosAppSlot, hostedMacosBundleId, hostedMacosLogsDir, hostedMetroGateways, hostedMetroRequests, hostedNativeLogsDir, hostedNativeRecords, hostedWorkerSettleMs, isExpoErrorContext, isJournalExpired, isJsonObject, isLayeredSetting, isPathPrefix, isSensitiveReference, isSetupJournalPrunable, lastUseFrom, levelRank, linkReplacedArchives, listRecordedDevices, listRecordedDevicesAsync, listSegments, listSegmentsAsync, listStatusCacheEntries, loadConfig, logFiles, machineCacheUsageFile, machineCapacity, machineEndpoint, macosAppState, maintenanceAttemptFile, maintenanceChildLogFile, maintenanceDir, maintenanceNdjsonFile, maintenanceRunClaims, maintenanceStateFile, markerWindow, offloadSummary, openLogDir, openSegmentName, parseHostedAgentAccess, parseHostedAgentGrant, parseHostedAndroidDevice, parseHostedAndroidPlacement, parseHostedAppManifest, parseHostedAppOffer, parseHostedChoice, parseHostedDevice, parseHostedIosPlacement, parseHostedLocalDeviceCount, parseHostedLogsCursor, parseHostedMacosChoice, parseHostedMacosDevice, parseHostedMacosPlacement, parseHostedNativeOffer, parseHostedNativePlacement, parseHostedOfferRequest, parseHostedPlatformDevice, parseHostedRequest, parseMachine, parseMachineCredential, parseMacosRecord, parseMaintenanceState, parseMissReason, parseNdjsonLine, parseNdjsonText, parseSetupJournal, parseSince, planLogQuery, projectRootDirectories, pullRequestCacheDir, pullRequestCacheFile, queryJsonLogs, queryLogs, readAgentDeviceUsage, readAgentDeviceUsageCache, readAgentSessionsCache, readArchive, readArchiveAsync, readArchiveState, readArchives, readArchivesAsync, readBuildDetail, readBuildHistory, readBuildMachines, readCreatedDevices, readDevServerStop, readDevServerStopRequest, readDeviceHostMachines, readDeviceIdleShutdowns, readDevicePlacement, readDiskUsage, readDiskUsageFailure, readEasSessionLedger, readEndedAgentSessions, readHomeIdentity, readHostedApp, readHostedAppMetadata, readHostedDevice, readHostedDeviceLedger, readHostedMacosApp, readHostedNativeLogsCheckpoint, readHostedSessions, readIdleStop, readJsonFile, readJsonObject, readLastBuilds, readLogRecords, readLogTimeline, readLogsSince, readMachineCacheUsage, readMacosRecord, readMaintenanceAttempt, readMaintenanceState, readNdjsonGenerations, readPullRequestCache, readRunEstimates, readSetupJournal, readStateFile, readStats, readStatsReport, readSwiftpmCacheUsage, readViewedDevices, readWarmRecord, readWorkspaceAgent, readWorkspaceState, recordMatches, recordedBytes, recordingDeviceName, recordingEnabled, rememberHostedAppBlobRename, requireAutomaticMachine, runId, saturation, serverLocalSocket, serverSetupDir, settingDefinition, settingValueError, settingsJsonSchema, setupJournalFile, sharedCcache, sharedCompilationCache, sharedGradle, sharedPods, sortByTs, statsFile, statsProjectKey, statusViews, stimBuildDigest, supervisorLogFile, supervisorPidFile, swiftpmCacheUsageFile, tailRead, trimCapacityRefusals, trimCapacityWaits, trimSamples, tryAcquireBuildSlotClaim, unreadableHostedAndroid, unreadableHostedIos, unreadableHostedNative, validEasSessionClaim, validHostedAppArguments, validHostedAppBlob, validRunId, validateAutomaticPool, wholePhases, windowsShortDir, windowsShortDirKey, withConfigLock, withConfigLockAsync, withDerivedFacts, withGitChip, withStateReadCache, workspaceAgentDeviceDir, workspaceBuildDetailFile, workspaceDerivedData, workspaceEndedAgentsFile, workspaceEndedAgentsLock, workspaceGradleBuild, workspaceLastUsed, workspaceLogErrorIndex, workspaceLogsDir, workspaceMetadataFile, workspaceRecordingsDir, workspaceStateFile, workspaceStateLock, workspaceSummary };